@neurcode-ai/cli 0.15.3 → 0.15.5

package/dist/utils/cursor-gate.js

@@ -0,0 +1,509 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MIN_CURSOR_GATE_CLI_VERSION = exports.CURSOR_GATE_SCHEMA_VERSION = void 0;
+exports.readBundledCliVersion = readBundledCliVersion;
+exports.buildCliVersionStaleWarning = buildCliVersionStaleWarning;
+exports.emitCliVersionStaleWarning = emitCliVersionStaleWarning;
+exports.resolveCursorGateExitCode = resolveCursorGateExitCode;
+exports.evaluateCursorGate = evaluateCursorGate;
+exports.formatCursorGateCiErrors = formatCursorGateCiErrors;
+exports.installCursorGateHook = installCursorGateHook;
+exports.doctorCursorGateHook = doctorCursorGateHook;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_child_process_1 = require("node:child_process");
+const contracts_1 = require("@neurcode-ai/contracts");
+const governance_runtime_1 = require("@neurcode-ai/governance-runtime");
+const agent_guard_1 = require("./agent-guard");
+const v0_governance_1 = require("./v0-governance");
+const runtime_live_1 = require("./runtime-live");
+exports.CURSOR_GATE_SCHEMA_VERSION = 'neurcode.cursor-gate.v1';
+exports.MIN_CURSOR_GATE_CLI_VERSION = '0.15.4';
+function readBundledCliVersion() {
+    try {
+        const pkgPath = (0, node_path_1.join)(__dirname, '..', '..', 'package.json');
+        const pkg = JSON.parse((0, node_fs_1.readFileSync)(pkgPath, 'utf8'));
+        return pkg.version?.trim() || 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+/** Warn when the running CLI is too old for cursor gate (e.g. stale global @neurcode-ai/cli). */
+function buildCliVersionStaleWarning(options) {
+    const expectedVersion = readBundledCliVersion();
+    const runningVersion = options?.runningVersionOverride?.trim() || expectedVersion;
+    const minimumVersion = options?.minimumVersion?.trim() || exports.MIN_CURSOR_GATE_CLI_VERSION;
+    const meetsMinimum = (0, contracts_1.isSemverAtLeast)(runningVersion, minimumVersion);
+    if (meetsMinimum !== false)
+        return null;
+    return {
+        id: 'cli_version_stale',
+        status: 'warn',
+        runningVersion,
+        expectedVersion,
+        minimumVersion,
+        message: `CLI ${runningVersion} is older than ${minimumVersion}; cursor gate and enterprise hooks require @neurcode-ai/cli@${minimumVersion}+.`,
+        remediation: [
+            'npm install -g @neurcode-ai/cli@latest',
+            'npm exec --package=@neurcode-ai/cli@latest -- neurcode cursor gate --help',
+        ],
+    };
+}
+function emitCliVersionStaleWarning(warning, json) {
+    if (json)
+        return;
+    process.stderr.write(`⚠️  ${warning.message}\n`);
+    for (const step of warning.remediation) {
+        process.stderr.write(`   ${step}\n`);
+    }
+}
+function repoRelativeArtifactPath(repoRoot, artifactPath) {
+    const root = repoRoot.replace(/\\/g, '/').replace(/\/+$/, '');
+    const normalized = artifactPath.replace(/\\/g, '/');
+    return normalized.startsWith(`${root}/`)
+        ? normalized.slice(root.length + 1)
+        : '<external-agent-guard-artifact>';
+}
+function guardEvaluationFingerprint(evaluation) {
+    return (0, node_crypto_1.createHash)('sha256')
+        .update(JSON.stringify({
+        pass: evaluation.pass,
+        status: evaluation.status,
+        summary: evaluation.summary,
+        changedFiles: evaluation.changedFiles.map((file) => ({
+            path: file.path,
+            changeType: file.changeType,
+            classification: file.classification,
+            evidence: file.evidence,
+        })),
+    }))
+        .digest('hex')
+        .slice(0, 24);
+}
+function guardEvaluationDetail(repoRoot, artifactPath, evaluation) {
+    return {
+        schemaVersion: 'neurcode.agent-guard-status.v1',
+        guardId: evaluation.guardId,
+        artifactPath: repoRelativeArtifactPath(repoRoot, artifactPath),
+        reportFingerprint: guardEvaluationFingerprint(evaluation),
+        pass: evaluation.pass,
+        status: evaluation.status,
+        summary: evaluation.summary,
+        changedFiles: evaluation.changedFiles.slice(0, 100).map((file) => ({
+            path: file.path,
+            changeType: file.changeType,
+            classification: file.classification,
+            evidence: file.evidence,
+        })),
+        privacy: evaluation.privacy,
+    };
+}
+async function publishGuardEvent(input) {
+    const updated = (0, governance_runtime_1.appendEvent)(input.repoRoot, input.sessionId, input.event);
+    if (updated) {
+        await (0, runtime_live_1.publishRuntimeLiveStatus)(input.repoRoot, updated);
+    }
+}
+async function publishGuardEvaluation(input) {
+    const session = (0, governance_runtime_1.loadSession)(input.repoRoot, input.evaluation.sessionId);
+    if (!session)
+        return;
+    const detail = guardEvaluationDetail(input.repoRoot, input.artifactPath, input.evaluation);
+    const latestStatus = [...session.events]
+        .reverse()
+        .find((event) => event.type === 'agent_guard_status');
+    if (latestStatus?.detail?.reportFingerprint === detail.reportFingerprint) {
+        await (0, runtime_live_1.publishRuntimeLiveStatus)(input.repoRoot, session);
+        return;
+    }
+    await publishGuardEvent({
+        repoRoot: input.repoRoot,
+        sessionId: input.evaluation.sessionId,
+        event: {
+            type: 'agent_guard_status',
+            ts: input.evaluation.generatedAt,
+            message: input.evaluation.pass
+                ? 'Agent guard status: changed files have allowed pre-write evidence.'
+                : 'Agent guard status: attention required for unverified or denied writes.',
+            detail,
+        },
+    });
+}
+function buildRemediation(evaluation, sessionId) {
+    if (!sessionId) {
+        return [
+            'neurcode cursor onboard --guard-start',
+            'neurcode agent guard start cursor --goal "<task>" --plan "<source-free plan>"',
+        ];
+    }
+    const base = [
+        `neurcode agent guard status --session-id ${sessionId} --fail-on-unverified --json`,
+        `neurcode agent guard finish --session-id ${sessionId} --fail-on-unverified`,
+    ];
+    if (!evaluation || evaluation.pass)
+        return base;
+    const paths = evaluation.changedFiles
+        .filter((file) => file.classification === 'unverified_write' || file.classification === 'denied_but_changed')
+        .slice(0, 5)
+        .map((file) => `neurcode agent check ${file.path} --adapter cursor-mcp --session-id ${sessionId}`);
+    return [...paths, ...base];
+}
+function enforcementSummary() {
+    const capability = (0, governance_runtime_1.getAgentRuntimeAdapterCapability)('cursor-mcp');
+    return {
+        level: capability.enforcementLevel,
+        controlLevel: capability.controlLevel,
+        honestSummary: 'Cursor uses cooperative MCP edit.before checks plus local guard supervisor containment — not Claude-style hard pre-write deny. The cursor gate fail-closes git push, CI, and session handoff when guard detects unverified or denied-but-changed writes.',
+    };
+}
+function resolveCursorGateExitCode(input) {
+    if (input.errorCode)
+        return 1;
+    if (input.pass === false)
+        return 2;
+    return 0;
+}
+async function evaluateCursorGate(options) {
+    const repoRoot = (0, v0_governance_1.resolveRepoRoot)(options.dir || process.cwd());
+    const enforcement = enforcementSummary();
+    const guardRead = (0, agent_guard_1.readAgentGuardArtifact)({
+        repoRoot,
+        sessionId: options.sessionId,
+        artifactPath: options.guardPath,
+    });
+    if (!guardRead.artifact || !guardRead.artifact.active) {
+        const errorCode = 'no_active_guard_session';
+        const error = guardRead.error
+            || 'No active agent guard session found. Start one with `neurcode cursor onboard` or `neurcode agent guard start cursor`.';
+        if (!options.allowNoSession) {
+            return {
+                schemaVersion: exports.CURSOR_GATE_SCHEMA_VERSION,
+                ok: false,
+                exitCode: 1,
+                sessionId: null,
+                agentGuardPosture: null,
+                summary: { unverifiedWrites: 0, deniedButChanged: 0, changedFiles: 0 },
+                remediation: buildRemediation(null, null),
+                enforcement,
+                error,
+                errorCode,
+            };
+        }
+        return {
+            schemaVersion: exports.CURSOR_GATE_SCHEMA_VERSION,
+            ok: true,
+            exitCode: 0,
+            sessionId: null,
+            agentGuardPosture: null,
+            summary: { unverifiedWrites: 0, deniedButChanged: 0, changedFiles: 0 },
+            remediation: buildRemediation(null, null),
+            enforcement,
+            error,
+            errorCode,
+        };
+    }
+    const artifact = guardRead.artifact;
+    const sessionId = options.sessionId || artifact.sessionId;
+    const session = (0, governance_runtime_1.loadSession)(repoRoot, sessionId) || (0, governance_runtime_1.loadActiveSession)(repoRoot);
+    if (!session) {
+        return {
+            schemaVersion: exports.CURSOR_GATE_SCHEMA_VERSION,
+            ok: false,
+            exitCode: 1,
+            sessionId,
+            agentGuardPosture: null,
+            summary: { unverifiedWrites: 0, deniedButChanged: 0, changedFiles: 0 },
+            remediation: buildRemediation(null, sessionId),
+            enforcement,
+            error: `Local governance session ${sessionId} was not found.`,
+            errorCode: 'session_not_found',
+        };
+    }
+    const evaluation = (0, agent_guard_1.evaluateAgentGuard)(repoRoot, artifact, session);
+    await publishGuardEvaluation({ repoRoot, artifactPath: guardRead.path, evaluation });
+    const refreshed = (0, governance_runtime_1.loadSession)(repoRoot, sessionId) || session;
+    const agentGuardPosture = (0, governance_runtime_1.buildAgentGuardPostureSummary)(refreshed);
+    const exitCode = resolveCursorGateExitCode({ pass: evaluation.pass });
+    return {
+        schemaVersion: exports.CURSOR_GATE_SCHEMA_VERSION,
+        ok: evaluation.pass,
+        exitCode,
+        sessionId,
+        agentGuardPosture,
+        summary: {
+            unverifiedWrites: evaluation.summary.unverifiedWrites,
+            deniedButChanged: evaluation.summary.deniedButChanged,
+            changedFiles: evaluation.summary.changedFiles,
+        },
+        remediation: buildRemediation(evaluation, sessionId),
+        enforcement,
+        evaluation,
+        artifactPath: guardRead.path,
+    };
+}
+function formatCursorGateCiErrors(payload) {
+    if (payload.exitCode === 0)
+        return [];
+    const lines = [];
+    if (payload.errorCode) {
+        lines.push(`::error title=Neurcode cursor gate::${payload.error || payload.errorCode}`);
+        return lines;
+    }
+    const violations = payload.evaluation?.changedFiles.filter((file) => file.classification === 'unverified_write' || file.classification === 'denied_but_changed') || [];
+    if (violations.length === 0) {
+        lines.push('::error title=Neurcode cursor gate::Guard attention required before push or merge.');
+        return lines;
+    }
+    for (const file of violations.slice(0, 20)) {
+        lines.push(`::error file=${file.path}::${file.classification.replace(/_/g, ' ')} (${file.changeType})`);
+    }
+    return lines;
+}
+function buildCursorGateHookScript(hookKind) {
+    const gitAction = hookKind === 'pre-push' ? 'push' : 'commit';
+    const blockedLabel = hookKind === 'pre-push' ? 'push' : 'commit';
+    const beforeAction = hookKind === 'pre-push' ? 'pushing' : 'committing';
+    return `#!/usr/bin/env bash
+set -euo pipefail
+
+# Neurcode Cursor fail-closed ${blockedLabel} gate (cooperative enforcement handoff).
+# Emergency bypass (audited): NEURCODE_CURSOR_GATE_SKIP=1 git ${gitAction} ...
+
+if [[ "\${NEURCODE_CURSOR_GATE_SKIP:-0}" == "1" ]]; then
+  echo "⚠️  NEURCODE_CURSOR_GATE_SKIP=1 — cursor gate bypassed (audited emergency only)." >&2
+  exit 0
+fi
+
+ROOT="\$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
+CLI=""
+if command -v neurcode >/dev/null 2>&1; then
+  CLI="neurcode"
+elif command -v npx >/dev/null 2>&1; then
+  CLI="npx @neurcode-ai/cli"
+else
+  echo "❌ Neurcode cursor gate: neurcode CLI not found. Install @neurcode-ai/cli or set NEURCODE_CURSOR_GATE_SKIP=1." >&2
+  exit 1
+fi
+
+set +e
+OUTPUT=\$($CLI cursor gate --dir "\$ROOT" --json 2>&1)
+STATUS=\$?
+set -e
+
+if [[ "\$STATUS" == "0" ]]; then
+  exit 0
+fi
+
+echo "\$OUTPUT" >&2
+cat >&2 <<'MSG'
+
+❌ Neurcode cursor gate blocked this ${blockedLabel}.
+
+Unverified or denied-but-changed writes were detected in the active guarded session.
+Finish the session, fix bypassed writes, or run agent checks before ${beforeAction}.
+
+Remediation:
+  neurcode agent guard status --fail-on-unverified --explain
+  neurcode agent guard finish --fail-on-unverified
+
+Emergency bypass (audited):
+  NEURCODE_CURSOR_GATE_SKIP=1 git ${gitAction} ...
+MSG
+exit "\$STATUS"
+`;
+}
+function runGit(args, cwd) {
+    const result = (0, node_child_process_1.spawnSync)('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
+    return { stdout: result.stdout || '', stderr: result.stderr || '', status: result.status ?? 1 };
+}
+function resolveCursorGateHookKinds(hook) {
+    if (hook === 'both')
+        return ['pre-commit', 'pre-push'];
+    if (hook === 'pre-commit')
+        return ['pre-commit'];
+    return ['pre-push'];
+}
+function installSingleCursorGateHook(input) {
+    const hooksDir = (0, node_path_1.resolve)(input.repoRoot, '.githooks');
+    const hookPath = (0, node_path_1.resolve)(hooksDir, input.hookKind);
+    const neurcodeHookPath = (0, node_path_1.resolve)(input.repoRoot, '.neurcode', 'hooks', input.hookKind);
+    (0, node_fs_1.mkdirSync)((0, node_path_1.resolve)(input.repoRoot, '.neurcode', 'hooks'), { recursive: true });
+    (0, node_fs_1.writeFileSync)(neurcodeHookPath, buildCursorGateHookScript(input.hookKind), 'utf8');
+    (0, node_fs_1.chmodSync)(neurcodeHookPath, 0o755);
+    const marker = '# >>> neurcode-cursor-gate >>>';
+    const existing = (0, node_fs_1.existsSync)(hookPath) ? (0, node_fs_1.readFileSync)(hookPath, 'utf8') : '';
+    if (existing.includes(marker) && !input.force) {
+        const hooksPathResult = runGit(['config', '--get', 'core.hooksPath'], input.repoRoot);
+        const configured = hooksPathResult.status === 0 ? hooksPathResult.stdout.trim() : '';
+        return {
+            ok: true,
+            repoRoot: input.repoRoot,
+            hooksPath: hooksDir,
+            hookKind: input.hookKind,
+            hookPath,
+            neurcodeHookPath,
+            hooksPathConfigured: configured === '.githooks' || configured === hooksDir,
+            message: `Cursor gate ${input.hookKind} hook already installed. Use --force to rewrite.`,
+        };
+    }
+    (0, node_fs_1.mkdirSync)(hooksDir, { recursive: true });
+    const fragment = `${marker}
+# Neurcode Cursor fail-closed ${input.hookKind === 'pre-push' ? 'push' : 'commit'} gate
+exec "${neurcodeHookPath}"
+# <<< neurcode-cursor-gate <<<
+`;
+    const merged = existing.trim()
+        ? `${existing.trimEnd()}\n\n${fragment}`
+        : `#!/usr/bin/env bash\nset -euo pipefail\n\n${fragment}`;
+    (0, node_fs_1.writeFileSync)(hookPath, merged.endsWith('\n') ? merged : `${merged}\n`, 'utf8');
+    (0, node_fs_1.chmodSync)(hookPath, 0o755);
+    return {
+        ok: true,
+        repoRoot: input.repoRoot,
+        hooksPath: hooksDir,
+        hookKind: input.hookKind,
+        hookPath,
+        neurcodeHookPath,
+        hooksPathConfigured: false,
+        message: `Installed Neurcode cursor gate ${input.hookKind} hook.`,
+    };
+}
+function installCursorGateHook(input) {
+    const repoRoot = (0, v0_governance_1.resolveRepoRoot)(input.dir || process.cwd());
+    const hookKinds = resolveCursorGateHookKinds(input.hook);
+    const hooks = hookKinds.map((hookKind) => installSingleCursorGateHook({
+        repoRoot,
+        hookKind,
+        force: input.force,
+    }));
+    const setResult = runGit(['config', 'core.hooksPath', '.githooks'], repoRoot);
+    const hooksPathConfigured = setResult.status === 0;
+    for (const hook of hooks) {
+        hook.hooksPathConfigured = hooksPathConfigured;
+        if (!hooksPathConfigured)
+            hook.ok = false;
+    }
+    const ok = hooksPathConfigured && hooks.every((hook) => hook.ok);
+    const label = hookKinds.length === 2
+        ? 'pre-commit and pre-push'
+        : hookKinds[0] === 'pre-commit'
+            ? 'pre-commit'
+            : 'pre-push';
+    return {
+        ok,
+        repoRoot,
+        hooksPath: (0, node_path_1.resolve)(repoRoot, '.githooks'),
+        hooks,
+        hooksPathConfigured,
+        message: hooksPathConfigured
+            ? `Installed Neurcode cursor gate ${label} hook${hookKinds.length > 1 ? 's' : ''}.`
+            : `Failed to set core.hooksPath: ${setResult.stderr || setResult.stdout}`,
+    };
+}
+function doctorCursorGateHookKind(repoRoot, hookKind, required) {
+    const checks = [];
+    const neurcodeHookPath = (0, node_path_1.resolve)(repoRoot, '.neurcode', 'hooks', hookKind);
+    const hookPath = (0, node_path_1.resolve)(repoRoot, '.githooks', hookKind);
+    const prefix = hookKind.replace('-', '_');
+    const neurcodeExists = (0, node_fs_1.existsSync)(neurcodeHookPath);
+    const githookExists = (0, node_fs_1.existsSync)(hookPath);
+    const installed = neurcodeExists || githookExists;
+    if (!required && !installed) {
+        checks.push({
+            id: `${prefix}_optional`,
+            status: 'skip',
+            message: `${hookKind} hook not installed (optional unless --hook both).`,
+        });
+        return checks;
+    }
+    checks.push({
+        id: `neurcode_hook_script_${prefix}`,
+        status: neurcodeExists ? 'pass' : 'fail',
+        message: neurcodeExists
+            ? `Found ${neurcodeHookPath}`
+            : `Missing ${neurcodeHookPath}. Run: neurcode cursor gate install --hook ${hookKind}`,
+    });
+    if (neurcodeExists) {
+        try {
+            const stat = (0, node_fs_1.statSync)(neurcodeHookPath);
+            const executable = (stat.mode & 0o111) !== 0;
+            checks.push({
+                id: `neurcode_hook_executable_${prefix}`,
+                status: executable ? 'pass' : 'fail',
+                message: executable
+                    ? `${hookKind} hook script is executable`
+                    : `${hookKind} hook script is not executable`,
+            });
+        }
+        catch (error) {
+            checks.push({
+                id: `neurcode_hook_executable_${prefix}`,
+                status: 'fail',
+                message: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    checks.push({
+        id: `githooks_${prefix}`,
+        status: githookExists ? 'pass' : 'fail',
+        message: githookExists
+            ? `Found ${hookPath}`
+            : `Missing ${hookPath}. Run: neurcode cursor gate install --hook ${hookKind}`,
+    });
+    if (githookExists) {
+        const content = (0, node_fs_1.readFileSync)(hookPath, 'utf8');
+        checks.push({
+            id: `githooks_fragment_${prefix}`,
+            status: content.includes('neurcode-cursor-gate') ? 'pass' : 'fail',
+            message: content.includes('neurcode-cursor-gate')
+                ? `${hookKind} delegates to Neurcode cursor gate`
+                : `${hookKind} missing neurcode-cursor-gate marker`,
+        });
+    }
+    return checks;
+}
+function doctorCursorGateHook(input) {
+    const repoRoot = (0, v0_governance_1.resolveRepoRoot)(input.dir || process.cwd());
+    const cliVersionWarning = buildCliVersionStaleWarning();
+    const prePushInstalled = (0, node_fs_1.existsSync)((0, node_path_1.resolve)(repoRoot, '.githooks', 'pre-push'))
+        || (0, node_fs_1.existsSync)((0, node_path_1.resolve)(repoRoot, '.neurcode', 'hooks', 'pre-push'));
+    const preCommitInstalled = (0, node_fs_1.existsSync)((0, node_path_1.resolve)(repoRoot, '.githooks', 'pre-commit'))
+        || (0, node_fs_1.existsSync)((0, node_path_1.resolve)(repoRoot, '.neurcode', 'hooks', 'pre-commit'));
+    const requirePreCommit = preCommitInstalled;
+    const requirePrePush = prePushInstalled || !preCommitInstalled;
+    const checks = [
+        ...doctorCursorGateHookKind(repoRoot, 'pre-push', requirePrePush),
+        ...doctorCursorGateHookKind(repoRoot, 'pre-commit', requirePreCommit),
+    ];
+    const hooksPathResult = runGit(['config', '--get', 'core.hooksPath'], repoRoot);
+    const configured = hooksPathResult.status === 0 ? hooksPathResult.stdout.trim() : '';
+    const expected = '.githooks';
+    const hooksNeeded = prePushInstalled || preCommitInstalled;
+    checks.push({
+        id: 'core_hooks_path',
+        status: !hooksNeeded || configured === expected || configured === (0, node_path_1.resolve)(repoRoot, '.githooks')
+            ? 'pass'
+            : 'fail',
+        message: configured
+            ? `core.hooksPath=${configured}`
+            : hooksNeeded
+                ? 'core.hooksPath is unset. Run: neurcode cursor gate install'
+                : 'core.hooksPath is unset (no hooks installed yet).',
+    });
+    if (cliVersionWarning) {
+        checks.push({
+            id: 'cli_version_stale',
+            status: 'fail',
+            message: cliVersionWarning.message,
+        });
+    }
+    return {
+        ok: checks.every((check) => check.status === 'pass'),
+        checks,
+        repoRoot,
+        cliVersionWarning,
+    };
+}
+//# sourceMappingURL=cursor-gate.js.map

package/dist/utils/cursor-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor-gate.js","sourceRoot":"","sources":["../../src/utils/cursor-gate.ts"],"names":[],"mappings":";;;AAoCA,sDAQC;AAGD,kEAsBC;AAED,gEASC;AAsJD,8DAOC;AAED,gDAmFC;AAED,4DAoBC;AA8ID,sDAqCC;AAkFD,oDA6CC;AA1oBD,6CAAyC;AACzC,qCAAkG;AAClG,yCAA0C;AAC1C,2DAA+C;AAC/C,sDAAyD;AACzD,wEAOyC;AACzC,+CAIuB;AACvB,mDAAkD;AAClD,iDAA0D;AAE7C,QAAA,0BAA0B,GAAG,yBAAkC,CAAC;AAChE,QAAA,2BAA2B,GAAG,QAAiB,CAAC;AAc7D,SAAgB,qBAAqB;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC9E,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,SAAgB,2BAA2B,CAAC,OAG3C;IACC,MAAM,eAAe,GAAG,qBAAqB,EAAE,CAAC;IAChD,MAAM,cAAc,GAAG,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,IAAI,eAAe,CAAC;IAClF,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,mCAA2B,CAAC;IACtF,MAAM,YAAY,GAAG,IAAA,2BAAe,EAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IACrE,IAAI,YAAY,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO;QACL,EAAE,EAAE,mBAAmB;QACvB,MAAM,EAAE,MAAM;QACd,cAAc;QACd,eAAe;QACf,cAAc;QACd,OAAO,EACL,OAAO,cAAc,kBAAkB,cAAc,+DAA+D,cAAc,IAAI;QACxI,WAAW,EAAE;YACX,wCAAwC;YACxC,2EAA2E;SAC5E;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CACxC,OAA+B,EAC/B,IAAc;IAEd,IAAI,IAAI;QAAE,OAAO;IACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAiCD,SAAS,wBAAwB,CAAC,QAAgB,EAAE,YAAoB;IACtE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;QACtC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACnC,CAAC,CAAC,iCAAiC,CAAC;AACxC,CAAC;AAED,SAAS,0BAA0B,CAAC,UAAgC;IAClE,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACrB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;KACJ,CAAC,CAAC;SACF,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAgB,EAChB,YAAoB,EACpB,UAAgC;IAEhC,OAAO;QACL,aAAa,EAAE,gCAAgC;QAC/C,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,YAAY,EAAE,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC;QAC9D,iBAAiB,EAAE,0BAA0B,CAAC,UAAU,CAAC;QACzD,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,OAAO,EAAE,UAAU,CAAC,OAAO;KAC5B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,KAIhC;IACC,MAAM,OAAO,GAAG,IAAA,gCAAW,EAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1E,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAA,uCAAwB,EAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAIrC;IACC,MAAM,OAAO,GAAG,IAAA,gCAAW,EAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;SACrC,OAAO,EAAE;SACT,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;IACxD,IAAI,YAAY,EAAE,MAAM,EAAE,iBAAiB,KAAK,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACzE,MAAM,IAAA,uCAAwB,EAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IACD,MAAM,iBAAiB,CAAC;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;QACrC,KAAK,EAAE;YACL,IAAI,EAAE,oBAAoB;YAC1B,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW;YAChC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;gBAC5B,CAAC,CAAC,oEAAoE;gBACtE,CAAC,CAAC,yEAAyE;YAC7E,MAAM;SACP;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAuC,EAAE,SAAwB;IACzF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,uCAAuC;YACvC,+EAA+E;SAChF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG;QACX,4CAA4C,SAAS,8BAA8B;QACnF,4CAA4C,SAAS,uBAAuB;KAC7E,CAAC;IACF,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY;SAClC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,KAAK,kBAAkB,IAAI,IAAI,CAAC,cAAc,KAAK,oBAAoB,CAAC;SAC5G,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,IAAI,CAAC,IAAI,sCAAsC,SAAS,EAAE,CAAC,CAAC;IACrG,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,UAAU,GAAG,IAAA,qDAAgC,EAAC,YAAY,CAAC,CAAC;IAClE,OAAO;QACL,KAAK,EAAE,UAAU,CAAC,gBAAgB;QAClC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,aAAa,EACX,0PAA0P;KAC7P,CAAC;AACJ,CAAC;AAED,SAAgB,yBAAyB,CAAC,KAGzC;IACC,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC;AACX,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACtC,OAAkC;IAElC,MAAM,QAAQ,GAAG,IAAA,+BAAe,EAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,IAAA,oCAAsB,EAAC;QACvC,QAAQ;QACR,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,SAAS;KAChC,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,yBAAyB,CAAC;QAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK;eACxB,uHAAuH,CAAC;QAC7H,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAC5B,OAAO;gBACL,aAAa,EAAE,kCAA0B;gBACzC,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,IAAI;gBACf,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;gBACtE,WAAW,EAAE,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC;gBACzC,WAAW;gBACX,KAAK;gBACL,SAAS;aACV,CAAC;QACJ,CAAC;QACD,OAAO;YACL,aAAa,EAAE,kCAA0B;YACzC,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,IAAI;YACf,iBAAiB,EAAE,IAAI;YACvB,OAAO,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;YACtE,WAAW,EAAE,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC;YACzC,WAAW;YACX,KAAK;YACL,SAAS;SACV,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAA,gCAAW,EAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,IAAA,sCAAiB,EAAC,QAAQ,CAAC,CAAC;IAChF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,aAAa,EAAE,kCAA0B;YACzC,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,CAAC;YACX,SAAS;YACT,iBAAiB,EAAE,IAAI;YACvB,OAAO,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;YACtE,WAAW,EAAE,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC;YAC9C,WAAW;YACX,KAAK,EAAE,4BAA4B,SAAS,iBAAiB;YAC7D,SAAS,EAAE,mBAAmB;SAC/B,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,gCAAkB,EAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnE,MAAM,sBAAsB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IACrF,MAAM,SAAS,GAAG,IAAA,gCAAW,EAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC;IAC9D,MAAM,iBAAiB,GAAG,IAAA,kDAA6B,EAAC,SAAS,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IAEtE,OAAO;QACL,aAAa,EAAE,kCAA0B;QACzC,EAAE,EAAE,UAAU,CAAC,IAAI;QACnB,QAAQ;QACR,SAAS;QACT,iBAAiB;QACjB,OAAO,EAAE;YACP,gBAAgB,EAAE,UAAU,CAAC,OAAO,CAAC,gBAAgB;YACrD,gBAAgB,EAAE,UAAU,CAAC,OAAO,CAAC,gBAAgB;YACrD,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,YAAY;SAC9C;QACD,WAAW,EAAE,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC;QACpD,WAAW;QACX,UAAU;QACV,YAAY,EAAE,SAAS,CAAC,IAAI;KAC7B,CAAC;AACJ,CAAC;AAED,SAAgB,wBAAwB,CAAC,OAA0B;IACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,uCAAuC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACxF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,MAAM,CACxD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,KAAK,kBAAkB,IAAI,IAAI,CAAC,cAAc,KAAK,oBAAoB,CACrG,IAAI,EAAE,CAAC;IACR,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;QACjG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CACR,gBAAgB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,UAAU,GAAG,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,QAA4B;IAC7D,MAAM,SAAS,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,MAAM,YAAY,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjE,MAAM,YAAY,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;IACxE,OAAO;;;gCAGuB,YAAY;gEACoB,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sCA8BnC,YAAY;;;sEAGoB,YAAY;;;;;;;oCAO9C,SAAS;;;CAG5C,CAAC;AACF,CAAC;AAED,SAAS,MAAM,CAAC,IAAc,EAAE,GAAW;IACzC,MAAM,MAAM,GAAG,IAAA,8BAAS,EAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACpG,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;AAClG,CAAC;AAsBD,SAAS,0BAA0B,CACjC,IAAyC;IAEzC,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACjD,OAAO,CAAC,UAAU,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,2BAA2B,CAAC,KAIpC;IACC,MAAM,QAAQ,GAAG,IAAA,mBAAO,EAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAA,mBAAO,EAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,gBAAgB,GAAG,IAAA,mBAAO,EAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvF,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,IAAA,uBAAa,EAAC,gBAAgB,EAAE,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IACnF,IAAA,mBAAS,EAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAEnC,MAAM,MAAM,GAAG,gCAAgC,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAA,oBAAU,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAA,sBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9C,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtF,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,QAAQ;YACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ;YACR,gBAAgB;YAChB,mBAAmB,EAAE,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,QAAQ;YAC1E,OAAO,EAAE,eAAe,KAAK,CAAC,QAAQ,kDAAkD;SACzF,CAAC;IACJ,CAAC;IAED,IAAA,mBAAS,EAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,GAAG,MAAM;gCACI,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QACzE,gBAAgB;;CAEvB,CAAC;IACA,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE;QAC5B,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,QAAQ,EAAE;QACxC,CAAC,CAAC,6CAA6C,QAAQ,EAAE,CAAC;IAC5D,IAAA,uBAAa,EAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,EAAE,MAAM,CAAC,CAAC;IAChF,IAAA,mBAAS,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE3B,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ;QACR,gBAAgB;QAChB,mBAAmB,EAAE,KAAK;QAC1B,OAAO,EAAE,kCAAkC,KAAK,CAAC,QAAQ,QAAQ;KAClE,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CAAC,KAIrC;IACC,MAAM,QAAQ,GAAG,IAAA,+BAAe,EAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,0BAA0B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,2BAA2B,CAAC;QACpE,QAAQ;QACR,QAAQ;QACR,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC,CAAC;IAEJ,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC9E,MAAM,mBAAmB,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,mBAAmB;YAAE,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;IAC5C,CAAC;IAED,MAAM,EAAE,GAAG,mBAAmB,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC;QAClC,CAAC,CAAC,yBAAyB;QAC3B,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,YAAY;YAC7B,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,UAAU,CAAC;IAEjB,OAAO;QACL,EAAE;QACF,QAAQ;QACR,SAAS,EAAE,IAAA,mBAAO,EAAC,QAAQ,EAAE,WAAW,CAAC;QACzC,KAAK;QACL,mBAAmB;QACnB,OAAO,EAAE,mBAAmB;YAC1B,CAAC,CAAC,kCAAkC,KAAK,QAAQ,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG;YACnF,CAAC,CAAC,iCAAiC,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE;KAC5E,CAAC;AACJ,CAAC;AASD,SAAS,wBAAwB,CAC/B,QAAgB,EAChB,QAA4B,EAC5B,QAAiB;IAEjB,MAAM,MAAM,GAAqC,EAAE,CAAC;IACpD,MAAM,gBAAgB,GAAG,IAAA,mBAAO,EAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,IAAA,mBAAO,EAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAE1C,MAAM,cAAc,GAAG,IAAA,oBAAU,EAAC,gBAAgB,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,IAAA,oBAAU,EAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,cAAc,IAAI,aAAa,CAAC;IAElD,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,GAAG,MAAM,WAAW;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,QAAQ,oDAAoD;SACzE,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,wBAAwB,MAAM,EAAE;QACpC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACxC,OAAO,EAAE,cAAc;YACrB,CAAC,CAAC,SAAS,gBAAgB,EAAE;YAC7B,CAAC,CAAC,WAAW,gBAAgB,8CAA8C,QAAQ,EAAE;KACxF,CAAC,CAAC;IAEH,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,gBAAgB,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,4BAA4B,MAAM,EAAE;gBACxC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACpC,OAAO,EAAE,UAAU;oBACjB,CAAC,CAAC,GAAG,QAAQ,4BAA4B;oBACzC,CAAC,CAAC,GAAG,QAAQ,gCAAgC;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,4BAA4B,MAAM,EAAE;gBACxC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,YAAY,MAAM,EAAE;QACxB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACvC,OAAO,EAAE,aAAa;YACpB,CAAC,CAAC,SAAS,QAAQ,EAAE;YACrB,CAAC,CAAC,WAAW,QAAQ,8CAA8C,QAAQ,EAAE;KAChF,CAAC,CAAC;IAEH,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,qBAAqB,MAAM,EAAE;YACjC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAClE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;gBAC/C,CAAC,CAAC,GAAG,QAAQ,oCAAoC;gBACjD,CAAC,CAAC,GAAG,QAAQ,sCAAsC;SACtD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,oBAAoB,CAAC,KAAuB;IAC1D,MAAM,QAAQ,GAAG,IAAA,+BAAe,EAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,MAAM,iBAAiB,GAAG,2BAA2B,EAAE,CAAC;IACxD,MAAM,gBAAgB,GAAG,IAAA,oBAAU,EAAC,IAAA,mBAAO,EAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;WAC1E,IAAA,oBAAU,EAAC,IAAA,mBAAO,EAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IACrE,MAAM,kBAAkB,GAAG,IAAA,oBAAU,EAAC,IAAA,mBAAO,EAAC,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;WAC9E,IAAA,oBAAU,EAAC,IAAA,mBAAO,EAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;IAC5C,MAAM,cAAc,GAAG,gBAAgB,IAAI,CAAC,kBAAkB,CAAC;IAE/D,MAAM,MAAM,GAAqC;QAC/C,GAAG,wBAAwB,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC;QACjE,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,EAAE,gBAAgB,CAAC;KACtE,CAAC;IAEF,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,QAAQ,GAAG,WAAW,CAAC;IAC7B,MAAM,WAAW,GAAG,gBAAgB,IAAI,kBAAkB,CAAC;IAC3D,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,iBAAiB;QACrB,MAAM,EAAE,CAAC,WAAW,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAA,mBAAO,EAAC,QAAQ,EAAE,WAAW,CAAC;YAC9F,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM;QACV,OAAO,EAAE,UAAU;YACjB,CAAC,CAAC,kBAAkB,UAAU,EAAE;YAChC,CAAC,CAAC,WAAW;gBACX,CAAC,CAAC,4DAA4D;gBAC9D,CAAC,CAAC,mDAAmD;KAC1D,CAAC,CAAC;IAEH,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,mBAAmB;YACvB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,iBAAiB,CAAC,OAAO;SACnC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;QACpD,MAAM;QACN,QAAQ;QACR,iBAAiB;KAClB,CAAC;AACJ,CAAC"}

package/dist/utils/session-allowlist-rules.d.ts

@@ -0,0 +1,29 @@
+import { type GovernanceSession } from '@neurcode-ai/governance-runtime';
+export declare const SESSION_SCOPE_RULES_RELATIVE: ".cursor/rules/neurcode-session-scope.mdc";
+export declare const STRICT_CURSOR_RULES_MARKER = "neurcode-enterprise-strict-mode";
+export interface SessionScopeRulesResult {
+    ok: boolean;
+    filePath: string;
+    sessionId: string | null;
+    allowedGlobs: string[];
+    message: string;
+}
+export interface StrictCursorRulesResult {
+    ok: boolean;
+    filePath: string;
+    message: string;
+}
+export declare function buildSessionScopeRulesBody(session: GovernanceSession): string;
+export declare function writeSessionScopeRules(input: {
+    repoRoot: string;
+    session: GovernanceSession;
+}): SessionScopeRulesResult;
+export declare function refreshSessionScopeRules(input: {
+    dir?: string;
+    sessionId?: string;
+}): SessionScopeRulesResult;
+export declare function writeStrictCursorRules(input: {
+    repoRoot: string;
+}): StrictCursorRulesResult;
+export declare function listStrictOnboardArtifacts(repoRoot: string): string[];
+//# sourceMappingURL=session-allowlist-rules.d.ts.map

package/dist/utils/session-allowlist-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-allowlist-rules.d.ts","sourceRoot":"","sources":["../../src/utils/session-allowlist-rules.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkC,KAAK,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAGzG,eAAO,MAAM,4BAA4B,EAAG,0CAAmD,CAAC;AAChG,eAAO,MAAM,0BAA0B,oCAAoC,CAAC;AAE5E,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAcD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CA0B7E;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,iBAAiB,CAAC;CAC5B,GAAG,uBAAuB,CAY1B;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,uBAAuB,CAe1B;AAgBD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,uBAAuB,CAoB3F;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAWrE"}