@neurcode-ai/cli 0.9.26 → 0.9.28

package/dist/utils/policy-exceptions.js

@@ -0,0 +1,389 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPolicyExceptionsPath = getPolicyExceptionsPath;
+exports.readPolicyExceptions = readPolicyExceptions;
+exports.writePolicyExceptions = writePolicyExceptions;
+exports.listPolicyExceptions = listPolicyExceptions;
+exports.addPolicyException = addPolicyException;
+exports.approvePolicyException = approvePolicyException;
+exports.revokePolicyException = revokePolicyException;
+exports.pruneExpiredPolicyExceptions = pruneExpiredPolicyExceptions;
+exports.applyPolicyExceptions = applyPolicyExceptions;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const POLICY_EXCEPTIONS_FILENAME = 'neurcode.policy.exceptions.json';
+const LEGACY_POLICY_EXCEPTIONS_RELATIVE_PATH = ['.neurcode', 'policies', 'policy-exceptions.json'];
+function normalizePath(value) {
+    return value.replace(/\\/g, '/').trim();
+}
+function normalizeActor(actor) {
+    return actor.trim().toLowerCase();
+}
+function normalizeActorList(input) {
+    return Array.from(new Set(input.map((item) => normalizeActor(item)).filter(Boolean))).sort((a, b) => a.localeCompare(b));
+}
+function toRegexFromPattern(pattern) {
+    const normalized = pattern.trim();
+    if (normalized.length === 0 || normalized === '*') {
+        return /^.*$/i;
+    }
+    if (normalized.startsWith('/') && normalized.endsWith('/') && normalized.length > 2) {
+        try {
+            return new RegExp(normalized.slice(1, -1), 'i');
+        }
+        catch {
+            // Fall through to wildcard handling.
+        }
+    }
+    const escaped = normalized.replace(/[.+^${}()|[\]\\]/g, '\\$&');
+    const wildcard = escaped.replace(/\*/g, '.*').replace(/\?/g, '.');
+    return new RegExp(`^${wildcard}$`, 'i');
+}
+function isFutureIso(value) {
+    const time = Date.parse(value);
+    return Number.isFinite(time) && time > Date.now();
+}
+function getLegacyPolicyExceptionsPath(cwd) {
+    return (0, path_1.join)(cwd, ...LEGACY_POLICY_EXCEPTIONS_RELATIVE_PATH);
+}
+function normalizeApprovals(value) {
+    if (!Array.isArray(value))
+        return [];
+    const approvals = value
+        .filter((item) => !!item && typeof item === 'object')
+        .map((item) => {
+        const approver = typeof item.approver === 'string' ? item.approver.trim() : '';
+        if (!approver)
+            return null;
+        return {
+            approver,
+            approvedAt: typeof item.approvedAt === 'string' && Number.isFinite(Date.parse(item.approvedAt))
+                ? new Date(item.approvedAt).toISOString()
+                : new Date().toISOString(),
+            comment: typeof item.comment === 'string' && item.comment.trim() ? item.comment.trim() : null,
+        };
+    })
+        .filter((item) => item !== null)
+        .sort((left, right) => left.approvedAt.localeCompare(right.approvedAt));
+    // Keep only latest approval per normalized approver.
+    const latestByApprover = new Map();
+    for (const approval of approvals) {
+        latestByApprover.set(normalizeActor(approval.approver), approval);
+    }
+    return Array.from(latestByApprover.values()).sort((a, b) => a.approvedAt.localeCompare(b.approvedAt));
+}
+function evaluatePolicyExceptionEligibility(entry, options) {
+    if (!entry.active || !isFutureIso(entry.expiresAt)) {
+        return {
+            usable: false,
+            reason: 'expired_or_inactive',
+            effectiveApprovalCount: 0,
+        };
+    }
+    if (!options.requireApproval) {
+        return {
+            usable: true,
+            reason: 'eligible',
+            effectiveApprovalCount: 0,
+        };
+    }
+    const allowedApprovers = normalizeActorList(options.allowedApprovers || []);
+    const requestedBy = normalizeActor(entry.requestedBy || entry.createdBy || '');
+    const acceptedApprovals = entry.approvals.filter((approval) => {
+        const actor = normalizeActor(approval.approver);
+        if (!actor)
+            return false;
+        if (allowedApprovers.length > 0 && !allowedApprovers.includes(actor))
+            return false;
+        if (options.disallowSelfApproval && requestedBy && actor === requestedBy)
+            return false;
+        return true;
+    });
+    const effectiveApprovalCount = acceptedApprovals.length;
+    if (effectiveApprovalCount >= Math.max(1, options.minApprovals)) {
+        return {
+            usable: true,
+            reason: 'eligible',
+            effectiveApprovalCount,
+        };
+    }
+    if (entry.approvals.length === 0) {
+        return {
+            usable: false,
+            reason: 'approval_required',
+            effectiveApprovalCount,
+        };
+    }
+    if (options.disallowSelfApproval && entry.approvals.length > 0 && acceptedApprovals.length === 0) {
+        const onlySelf = entry.approvals.every((approval) => normalizeActor(approval.approver) === requestedBy);
+        if (onlySelf) {
+            return {
+                usable: false,
+                reason: 'self_approval_only',
+                effectiveApprovalCount,
+            };
+        }
+    }
+    if (allowedApprovers.length > 0 && acceptedApprovals.length === 0) {
+        return {
+            usable: false,
+            reason: 'approver_not_allowed',
+            effectiveApprovalCount,
+        };
+    }
+    return {
+        usable: false,
+        reason: 'insufficient_approvals',
+        effectiveApprovalCount,
+    };
+}
+function getPolicyExceptionsPath(cwd) {
+    return (0, path_1.join)(cwd, POLICY_EXCEPTIONS_FILENAME);
+}
+function resolvePolicyExceptionsReadPath(cwd) {
+    const canonicalPath = getPolicyExceptionsPath(cwd);
+    if ((0, fs_1.existsSync)(canonicalPath)) {
+        return canonicalPath;
+    }
+    const legacyPath = getLegacyPolicyExceptionsPath(cwd);
+    return (0, fs_1.existsSync)(legacyPath) ? legacyPath : canonicalPath;
+}
+function readPolicyExceptions(cwd) {
+    const path = resolvePolicyExceptionsReadPath(cwd);
+    if (!(0, fs_1.existsSync)(path)) {
+        return [];
+    }
+    try {
+        const raw = (0, fs_1.readFileSync)(path, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!parsed || parsed.schemaVersion !== 1 || !Array.isArray(parsed.exceptions)) {
+            return [];
+        }
+        return parsed.exceptions
+            .filter((entry) => {
+            if (!entry || typeof entry !== 'object')
+                return false;
+            return (typeof entry.id === 'string' &&
+                typeof entry.rulePattern === 'string' &&
+                typeof entry.filePattern === 'string' &&
+                typeof entry.reason === 'string' &&
+                typeof entry.expiresAt === 'string');
+        })
+            .map((entry) => ({
+            ...entry,
+            ticket: typeof entry.ticket === 'string' && entry.ticket.trim() ? entry.ticket : null,
+            createdBy: typeof entry.createdBy === 'string' && entry.createdBy.trim() ? entry.createdBy : 'unknown',
+            requestedBy: typeof entry.requestedBy === 'string' && entry.requestedBy.trim()
+                ? entry.requestedBy.trim()
+                : typeof entry.createdBy === 'string' && entry.createdBy.trim()
+                    ? entry.createdBy.trim()
+                    : 'unknown',
+            createdAt: typeof entry.createdAt === 'string' ? entry.createdAt : new Date(0).toISOString(),
+            active: entry.active !== false,
+            severity: entry.severity === 'allow' || entry.severity === 'warn' || entry.severity === 'block'
+                ? entry.severity
+                : null,
+            approvals: normalizeApprovals(entry.approvals),
+        }))
+            .sort((left, right) => right.createdAt.localeCompare(left.createdAt));
+    }
+    catch {
+        return [];
+    }
+}
+function writePolicyExceptions(cwd, entries) {
+    const path = getPolicyExceptionsPath(cwd);
+    const payload = {
+        schemaVersion: 1,
+        exceptions: entries,
+    };
+    (0, fs_1.writeFileSync)(path, JSON.stringify(payload, null, 2) + '\n', 'utf-8');
+    return path;
+}
+function listPolicyExceptions(cwd) {
+    const all = readPolicyExceptions(cwd);
+    const active = all.filter((entry) => entry.active && isFutureIso(entry.expiresAt));
+    const expired = all.filter((entry) => !entry.active || !isFutureIso(entry.expiresAt));
+    return { all, active, expired };
+}
+function addPolicyException(cwd, input) {
+    const rulePattern = input.rulePattern.trim();
+    const filePattern = normalizePath(input.filePattern || '*');
+    const reason = input.reason.trim();
+    const expiresAt = input.expiresAt.trim();
+    const expiresMs = Date.parse(expiresAt);
+    if (!rulePattern) {
+        throw new Error('rulePattern is required');
+    }
+    if (!filePattern) {
+        throw new Error('filePattern is required');
+    }
+    if (!reason) {
+        throw new Error('reason is required');
+    }
+    if (!Number.isFinite(expiresMs)) {
+        throw new Error('expiresAt must be a valid ISO datetime');
+    }
+    if (expiresMs <= Date.now()) {
+        throw new Error('expiresAt must be in the future');
+    }
+    const entries = readPolicyExceptions(cwd);
+    const nowIso = new Date().toISOString();
+    const actor = input.createdBy && input.createdBy.trim() ? input.createdBy.trim() : 'unknown';
+    const requestedBy = input.requestedBy && input.requestedBy.trim() ? input.requestedBy.trim() : actor;
+    const exception = {
+        id: `px_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 8)}`,
+        rulePattern,
+        filePattern,
+        reason,
+        ticket: input.ticket && input.ticket.trim() ? input.ticket.trim() : null,
+        createdAt: nowIso,
+        createdBy: actor,
+        requestedBy,
+        expiresAt: new Date(expiresMs).toISOString(),
+        severity: input.severity || null,
+        active: true,
+        approvals: [],
+    };
+    entries.unshift(exception);
+    writePolicyExceptions(cwd, entries);
+    return exception;
+}
+function approvePolicyException(cwd, id, input) {
+    const approver = input.approver.trim();
+    if (!approver) {
+        throw new Error('approver is required');
+    }
+    const entries = readPolicyExceptions(cwd);
+    let updated = null;
+    const next = entries.map((entry) => {
+        if (entry.id !== id) {
+            return entry;
+        }
+        if (!entry.active) {
+            updated = entry;
+            return entry;
+        }
+        const approvals = [...entry.approvals];
+        const key = normalizeActor(approver);
+        const existingIndex = approvals.findIndex((item) => normalizeActor(item.approver) === key);
+        const nextApproval = {
+            approver,
+            approvedAt: new Date().toISOString(),
+            comment: input.comment && input.comment.trim() ? input.comment.trim() : null,
+        };
+        if (existingIndex >= 0) {
+            approvals[existingIndex] = nextApproval;
+        }
+        else {
+            approvals.push(nextApproval);
+        }
+        const normalized = {
+            ...entry,
+            approvals: approvals.sort((a, b) => a.approvedAt.localeCompare(b.approvedAt)),
+        };
+        updated = normalized;
+        return normalized;
+    });
+    if (updated) {
+        writePolicyExceptions(cwd, next);
+    }
+    return updated;
+}
+function revokePolicyException(cwd, id) {
+    const entries = readPolicyExceptions(cwd);
+    let changed = false;
+    const next = entries.map((entry) => {
+        if (entry.id === id && entry.active) {
+            changed = true;
+            return {
+                ...entry,
+                active: false,
+            };
+        }
+        return entry;
+    });
+    if (changed) {
+        writePolicyExceptions(cwd, next);
+    }
+    return changed;
+}
+function pruneExpiredPolicyExceptions(cwd) {
+    const entries = readPolicyExceptions(cwd);
+    const now = Date.now();
+    const next = entries.filter((entry) => entry.active && Date.parse(entry.expiresAt) > now);
+    const removed = entries.length - next.length;
+    if (removed > 0 || entries.length === 0) {
+        writePolicyExceptions(cwd, next);
+    }
+    return {
+        removed,
+        remaining: next.length,
+    };
+}
+function applyPolicyExceptions(violations, exceptions, options) {
+    const applyOptions = {
+        requireApproval: options?.requireApproval === true,
+        minApprovals: Number.isFinite(options?.minApprovals)
+            ? Math.max(1, Math.floor(Number(options?.minApprovals)))
+            : 1,
+        disallowSelfApproval: options?.disallowSelfApproval !== false,
+        allowedApprovers: Array.isArray(options?.allowedApprovers) ? options.allowedApprovers : [],
+    };
+    const activeExceptions = exceptions.filter((entry) => entry.active && isFutureIso(entry.expiresAt));
+    const usableExceptions = activeExceptions.filter((entry) => evaluatePolicyExceptionEligibility(entry, applyOptions).usable);
+    const suppressedViolations = [];
+    const blockedViolations = [];
+    const remainingViolations = [];
+    const matchedExceptionIds = new Set();
+    const exceptionMatchers = activeExceptions.map((entry) => ({
+        entry,
+        eligibility: evaluatePolicyExceptionEligibility(entry, applyOptions),
+        ruleRegex: toRegexFromPattern(entry.rulePattern),
+        fileRegex: toRegexFromPattern(normalizePath(entry.filePattern || '*')),
+    }));
+    for (const violation of violations) {
+        const violationRule = String(violation.rule || '').trim();
+        const violationFile = normalizePath(String(violation.file || ''));
+        const violationSeverity = String(violation.severity || '').toLowerCase();
+        const candidates = exceptionMatchers.filter((matcher) => {
+            const severityAllowed = !matcher.entry.severity || matcher.entry.severity.toLowerCase() === violationSeverity;
+            return severityAllowed && matcher.ruleRegex.test(violationRule) && matcher.fileRegex.test(violationFile);
+        });
+        if (candidates.length === 0) {
+            remainingViolations.push(violation);
+            continue;
+        }
+        const usable = candidates.find((candidate) => candidate.eligibility.usable);
+        if (usable) {
+            matchedExceptionIds.add(usable.entry.id);
+            suppressedViolations.push({
+                ...violation,
+                exceptionId: usable.entry.id,
+                reason: usable.entry.reason,
+                expiresAt: usable.entry.expiresAt,
+            });
+            continue;
+        }
+        const blocked = candidates[0];
+        const blockedReason = blocked.eligibility.reason === 'eligible'
+            ? 'insufficient_approvals'
+            : blocked.eligibility.reason;
+        matchedExceptionIds.add(blocked.entry.id);
+        blockedViolations.push({
+            ...violation,
+            exceptionId: blocked.entry.id,
+            eligibilityReason: blockedReason,
+        });
+        remainingViolations.push(violation);
+    }
+    return {
+        remainingViolations,
+        suppressedViolations,
+        blockedViolations,
+        matchedExceptionIds: Array.from(matchedExceptionIds),
+        activeExceptions,
+        usableExceptions,
+    };
+}
+//# sourceMappingURL=policy-exceptions.js.map

package/dist/utils/policy-exceptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-exceptions.js","sourceRoot":"","sources":["../../src/utils/policy-exceptions.ts"],"names":[],"mappings":";;AAmOA,0DAEC;AAWD,oDA6CC;AAED,sDAQC;AAED,oDASC;AAED,gDAwDC;AAED,wDAgDC;AAED,sDAiBC;AAED,oEAYC;AAED,sDAsFC;AAvhBD,2BAA6D;AAC7D,+BAA4B;AA+E5B,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AACrE,MAAM,sCAAsC,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,wBAAwB,CAAC,CAAC;AAEnG,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAe;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpF,IAAI,CAAC;YACH,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClE,OAAO,IAAI,MAAM,CAAC,IAAI,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,6BAA6B,CAAC,GAAW;IAChD,OAAO,IAAA,WAAI,EAAC,GAAG,EAAE,GAAG,sCAAsC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,KAAK;SACpB,MAAM,CAAC,CAAC,IAAI,EAAmC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;SACrF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,OAAO;YACL,QAAQ;YACR,UAAU,EACR,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACjF,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;gBACzC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;SAC9F,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,IAAI,EAAmC,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;SAChE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1E,qDAAqD;IACrD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAmC,CAAC;IACpE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,kCAAkC,CACzC,KAA2B,EAC3B,OAAoC;IAEpC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,qBAAqB;YAC7B,sBAAsB,EAAE,CAAC;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAC7B,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,UAAU;YAClB,sBAAsB,EAAE,CAAC;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC5E,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC/E,MAAM,iBAAiB,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC5D,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACnF,IAAI,OAAO,CAAC,oBAAoB,IAAI,WAAW,IAAI,KAAK,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QACvF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACxD,IAAI,sBAAsB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,UAAU;YAClB,sBAAsB;SACvB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,mBAAmB;YAC3B,sBAAsB;SACvB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,oBAAoB,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CACpC,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,WAAW,CAChE,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,oBAAoB;gBAC5B,sBAAsB;aACvB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,sBAAsB;YAC9B,sBAAsB;SACvB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,wBAAwB;QAChC,sBAAsB;KACvB,CAAC;AACJ,CAAC;AAED,SAAgB,uBAAuB,CAAC,GAAW;IACjD,OAAO,IAAA,WAAI,EAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,+BAA+B,CAAC,GAAW;IAClD,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,IAAA,eAAU,EAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,MAAM,UAAU,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO,IAAA,eAAU,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;AAC7D,CAAC;AAED,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,MAAM,IAAI,GAAG,+BAA+B,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,iBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QACtD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/E,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,MAAM,CAAC,UAAU;aACrB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAChB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACtD,OAAO,CACL,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;gBAC5B,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;gBACrC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;gBACrC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAChC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CACpC,CAAC;QACJ,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,GAAG,KAAK;YACR,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YACrF,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACtG,WAAW,EACT,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE;gBAC/D,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE;gBAC1B,CAAC,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE;oBAC7D,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE;oBACxB,CAAC,CAAC,SAAS;YACjB,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YAC5F,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK;YAC9B,QAAQ,EACN,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;gBACnF,CAAC,CAAC,KAAK,CAAC,QAAQ;gBAChB,CAAC,CAAC,IAAI;YACV,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC;SAC/C,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAgB,qBAAqB,CAAC,GAAW,EAAE,OAA+B;IAChF,MAAM,IAAI,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAwB;QACnC,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,OAAO;KACpB,CAAC;IACF,IAAA,kBAAa,EAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,oBAAoB,CAAC,GAAW;IAK9C,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACtF,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,SAAgB,kBAAkB,CAChC,GAAW,EACX,KASC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAExC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACrG,MAAM,SAAS,GAAyB;QACtC,EAAE,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC7E,WAAW;QACX,WAAW;QACX,MAAM;QACN,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;QACxE,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,KAAK;QAChB,WAAW;QACX,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QAC5C,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QAChC,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,EAAE;KACd,CAAC;IACF,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3B,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,sBAAsB,CACpC,GAAW,EACX,EAAU,EACV,KAGC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAgC,IAAI,CAAC;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,GAAG,KAAK,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,aAAa,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;QAC3F,MAAM,YAAY,GAA4B;YAC5C,QAAQ;YACR,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;SAC7E,CAAC;QACF,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,SAAS,CAAC,aAAa,CAAC,GAAG,YAAY,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,UAAU,GAAyB;YACvC,GAAG,KAAK;YACR,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;SAC9E,CAAC;QACF,OAAO,GAAG,UAAU,CAAC;QACrB,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,EAAE,CAAC;QACZ,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,qBAAqB,CAAC,GAAW,EAAE,EAAU;IAC3D,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACpC,OAAO,GAAG,IAAI,CAAC;YACf,OAAO;gBACL,GAAG,KAAK;gBACR,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,EAAE,CAAC;QACZ,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,4BAA4B,CAAC,GAAW;IACtD,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7C,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO;QACL,OAAO;QACP,SAAS,EAAE,IAAI,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CACnC,UAME,EACF,UAAkC,EAClC,OAA8C;IAE9C,MAAM,YAAY,GAAgC;QAChD,eAAe,EAAE,OAAO,EAAE,eAAe,KAAK,IAAI;QAClD,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;YAClD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC;QACL,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,KAAK,KAAK;QAC7D,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAQ,CAAC,gBAAiB,CAAC,CAAC,CAAC,EAAE;KAC7F,CAAC;IAEF,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACpG,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAC9C,CAAC,KAAK,EAAE,EAAE,CAAC,kCAAkC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,MAAM,CAC1E,CAAC;IAEF,MAAM,oBAAoB,GAAoD,EAAE,CAAC;IACjF,MAAM,iBAAiB,GAAiD,EAAE,CAAC;IAC3E,MAAM,mBAAmB,GAAmD,EAAE,CAAC;IAC/E,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9C,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzD,KAAK;QACL,WAAW,EAAE,kCAAkC,CAAC,KAAK,EAAE,YAAY,CAAC;QACpE,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC;QAChD,SAAS,EAAE,kBAAkB,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC;KACvE,CAAC,CAAC,CAAC;IAEJ,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAEzE,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;YACtD,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,iBAAiB,CAAC;YAC9G,OAAO,eAAe,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3G,CAAC,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5E,IAAI,MAAM,EAAE,CAAC;YACX,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzC,oBAAoB,CAAC,IAAI,CAAC;gBACxB,GAAG,SAAS;gBACZ,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;gBAC5B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;gBAC3B,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;aAClC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,aAAa,GACjB,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,UAAU;YACvC,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC;QACjC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1C,iBAAiB,CAAC,IAAI,CAAC;YACrB,GAAG,SAAS;YACZ,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;YAC7B,iBAAiB,EAAE,aAAa;SACjC,CAAC,CAAC;QACH,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,OAAO;QACL,mBAAmB;QACnB,oBAAoB;QACpB,iBAAiB;QACjB,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC;QACpD,gBAAgB;QAChB,gBAAgB;KACjB,CAAC;AACJ,CAAC"}

package/dist/utils/policy-governance.d.ts

@@ -0,0 +1,24 @@
+export interface PolicyGovernanceConfig {
+    schemaVersion: 1;
+    exceptionApprovals: {
+        required: boolean;
+        minApprovals: number;
+        disallowSelfApproval: boolean;
+        allowedApprovers: string[];
+    };
+    audit: {
+        requireIntegrity: boolean;
+    };
+}
+export declare function defaultPolicyGovernanceConfig(): PolicyGovernanceConfig;
+export declare function getPolicyGovernancePath(cwd: string): string;
+export declare function readPolicyGovernanceConfig(cwd: string): PolicyGovernanceConfig;
+export declare function writePolicyGovernanceConfig(cwd: string, config: PolicyGovernanceConfig): string;
+export declare function updatePolicyGovernanceConfig(cwd: string, input: Partial<{
+    required: boolean;
+    minApprovals: number;
+    disallowSelfApproval: boolean;
+    allowedApprovers: string[];
+    requireAuditIntegrity: boolean;
+}>): PolicyGovernanceConfig;
+//# sourceMappingURL=policy-governance.d.ts.map

package/dist/utils/policy-governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-governance.d.ts","sourceRoot":"","sources":["../../src/utils/policy-governance.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,CAAC,CAAC;IACjB,kBAAkB,EAAE;QAClB,QAAQ,EAAE,OAAO,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,oBAAoB,EAAE,OAAO,CAAC;QAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;KAC5B,CAAC;IACF,KAAK,EAAE;QACL,gBAAgB,EAAE,OAAO,CAAC;KAC3B,CAAC;CACH;AAmBD,wBAAgB,6BAA6B,IAAI,sBAAsB,CAatE;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3D;AAWD,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,sBAAsB,CA0C9E;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,MAAM,CAgB/F;AAED,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,qBAAqB,EAAE,OAAO,CAAC;CAChC,CAAC,GACD,sBAAsB,CA0BxB"}

package/dist/utils/policy-governance.js

@@ -0,0 +1,124 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultPolicyGovernanceConfig = defaultPolicyGovernanceConfig;
+exports.getPolicyGovernancePath = getPolicyGovernancePath;
+exports.readPolicyGovernanceConfig = readPolicyGovernanceConfig;
+exports.writePolicyGovernanceConfig = writePolicyGovernanceConfig;
+exports.updatePolicyGovernanceConfig = updatePolicyGovernanceConfig;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const POLICY_GOVERNANCE_FILENAME = 'neurcode.policy.governance.json';
+const LEGACY_POLICY_GOVERNANCE_RELATIVE_PATH = ['.neurcode', 'policies', 'policy-governance.json'];
+function getLegacyPolicyGovernancePath(cwd) {
+    return (0, path_1.join)(cwd, ...LEGACY_POLICY_GOVERNANCE_RELATIVE_PATH);
+}
+function normalizeApprovers(values) {
+    return Array.from(new Set(values
+        .map((item) => item.trim())
+        .filter(Boolean))).sort((left, right) => left.localeCompare(right));
+}
+function defaultPolicyGovernanceConfig() {
+    return {
+        schemaVersion: 1,
+        exceptionApprovals: {
+            required: false,
+            minApprovals: 1,
+            disallowSelfApproval: true,
+            allowedApprovers: [],
+        },
+        audit: {
+            requireIntegrity: false,
+        },
+    };
+}
+function getPolicyGovernancePath(cwd) {
+    return (0, path_1.join)(cwd, POLICY_GOVERNANCE_FILENAME);
+}
+function resolvePolicyGovernanceReadPath(cwd) {
+    const canonicalPath = getPolicyGovernancePath(cwd);
+    if ((0, fs_1.existsSync)(canonicalPath)) {
+        return canonicalPath;
+    }
+    const legacyPath = getLegacyPolicyGovernancePath(cwd);
+    return (0, fs_1.existsSync)(legacyPath) ? legacyPath : canonicalPath;
+}
+function readPolicyGovernanceConfig(cwd) {
+    const path = resolvePolicyGovernanceReadPath(cwd);
+    if (!(0, fs_1.existsSync)(path)) {
+        return defaultPolicyGovernanceConfig();
+    }
+    try {
+        const raw = (0, fs_1.readFileSync)(path, 'utf-8');
+        const parsed = JSON.parse(raw);
+        const defaults = defaultPolicyGovernanceConfig();
+        const required = parsed.exceptionApprovals?.required === true;
+        const minApprovalsRaw = parsed.exceptionApprovals?.minApprovals;
+        const minApprovals = Number.isFinite(minApprovalsRaw)
+            ? Math.max(1, Math.min(5, Math.floor(Number(minApprovalsRaw))))
+            : defaults.exceptionApprovals.minApprovals;
+        const disallowSelfApproval = parsed.exceptionApprovals?.disallowSelfApproval !== false;
+        const allowedApprovers = Array.isArray(parsed.exceptionApprovals?.allowedApprovers)
+            ? normalizeApprovers(parsed.exceptionApprovals.allowedApprovers
+                .filter((item) => typeof item === 'string'))
+            : defaults.exceptionApprovals.allowedApprovers;
+        const requireIntegrity = parsed.audit?.requireIntegrity === true;
+        return {
+            schemaVersion: 1,
+            exceptionApprovals: {
+                required,
+                minApprovals,
+                disallowSelfApproval,
+                allowedApprovers,
+            },
+            audit: {
+                requireIntegrity,
+            },
+        };
+    }
+    catch {
+        return defaultPolicyGovernanceConfig();
+    }
+}
+function writePolicyGovernanceConfig(cwd, config) {
+    const normalized = {
+        schemaVersion: 1,
+        exceptionApprovals: {
+            required: config.exceptionApprovals.required === true,
+            minApprovals: Math.max(1, Math.min(5, Math.floor(config.exceptionApprovals.minApprovals || 1))),
+            disallowSelfApproval: config.exceptionApprovals.disallowSelfApproval !== false,
+            allowedApprovers: normalizeApprovers(config.exceptionApprovals.allowedApprovers || []),
+        },
+        audit: {
+            requireIntegrity: config.audit.requireIntegrity === true,
+        },
+    };
+    const path = getPolicyGovernancePath(cwd);
+    (0, fs_1.writeFileSync)(path, JSON.stringify(normalized, null, 2) + '\n', 'utf-8');
+    return path;
+}
+function updatePolicyGovernanceConfig(cwd, input) {
+    const current = readPolicyGovernanceConfig(cwd);
+    const next = {
+        schemaVersion: 1,
+        exceptionApprovals: {
+            required: typeof input.required === 'boolean' ? input.required : current.exceptionApprovals.required,
+            minApprovals: Number.isFinite(input.minApprovals)
+                ? Math.max(1, Math.min(5, Math.floor(Number(input.minApprovals))))
+                : current.exceptionApprovals.minApprovals,
+            disallowSelfApproval: typeof input.disallowSelfApproval === 'boolean'
+                ? input.disallowSelfApproval
+                : current.exceptionApprovals.disallowSelfApproval,
+            allowedApprovers: Array.isArray(input.allowedApprovers)
+                ? normalizeApprovers(input.allowedApprovers)
+                : current.exceptionApprovals.allowedApprovers,
+        },
+        audit: {
+            requireIntegrity: typeof input.requireAuditIntegrity === 'boolean'
+                ? input.requireAuditIntegrity
+                : current.audit.requireIntegrity,
+        },
+    };
+    writePolicyGovernanceConfig(cwd, next);
+    return next;
+}
+//# sourceMappingURL=policy-governance.js.map

package/dist/utils/policy-governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-governance.js","sourceRoot":"","sources":["../../src/utils/policy-governance.ts"],"names":[],"mappings":";;AAiCA,sEAaC;AAED,0DAEC;AAWD,gEA0CC;AAED,kEAgBC;AAED,oEAmCC;AA9JD,2BAA6D;AAC7D,+BAA4B;AAe5B,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AACrE,MAAM,sCAAsC,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,wBAAwB,CAAC,CAAC;AAEnG,SAAS,6BAA6B,CAAC,GAAW;IAChD,OAAO,IAAA,WAAI,EAAC,GAAG,EAAE,GAAG,sCAAsC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAgB;IAC1C,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CACL,MAAM;SACH,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CACnB,CACF,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAgB,6BAA6B;IAC3C,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,kBAAkB,EAAE;YAClB,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,CAAC;YACf,oBAAoB,EAAE,IAAI;YAC1B,gBAAgB,EAAE,EAAE;SACrB;QACD,KAAK,EAAE;YACL,gBAAgB,EAAE,KAAK;SACxB;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,uBAAuB,CAAC,GAAW;IACjD,OAAO,IAAA,WAAI,EAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,+BAA+B,CAAC,GAAW;IAClD,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,IAAA,eAAU,EAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,MAAM,UAAU,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO,IAAA,eAAU,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;AAC7D,CAAC;AAED,SAAgB,0BAA0B,CAAC,GAAW;IACpD,MAAM,IAAI,GAAG,+BAA+B,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,6BAA6B,EAAE,CAAC;IACzC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,iBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoC,CAAC;QAClE,MAAM,QAAQ,GAAG,6BAA6B,EAAE,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,EAAE,QAAQ,KAAK,IAAI,CAAC;QAC9D,MAAM,eAAe,GAAG,MAAM,CAAC,kBAAkB,EAAE,YAAY,CAAC;QAChE,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC;YACnD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC/D,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,YAAY,CAAC;QAC7C,MAAM,oBAAoB,GACxB,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,KAAK,KAAK,CAAC;QAC5D,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;YACjF,CAAC,CAAC,kBAAkB,CAChB,MAAM,CAAC,kBAAmB,CAAC,gBAAgB;iBACxC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAC9D;YACH,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,gBAAgB,CAAC;QAEjD,MAAM,gBAAgB,GAAG,MAAM,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAC;QAEjE,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,kBAAkB,EAAE;gBAClB,QAAQ;gBACR,YAAY;gBACZ,oBAAoB;gBACpB,gBAAgB;aACjB;YACD,KAAK,EAAE;gBACL,gBAAgB;aACjB;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,6BAA6B,EAAE,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAgB,2BAA2B,CAAC,GAAW,EAAE,MAA8B;IACrF,MAAM,UAAU,GAA2B;QACzC,aAAa,EAAE,CAAC;QAChB,kBAAkB,EAAE;YAClB,QAAQ,EAAE,MAAM,CAAC,kBAAkB,CAAC,QAAQ,KAAK,IAAI;YACrD,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/F,oBAAoB,EAAE,MAAM,CAAC,kBAAkB,CAAC,oBAAoB,KAAK,KAAK;YAC9E,gBAAgB,EAAE,kBAAkB,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,IAAI,EAAE,CAAC;SACvF;QACD,KAAK,EAAE;YACL,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,KAAK,IAAI;SACzD;KACF,CAAC;IACF,MAAM,IAAI,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAA,kBAAa,EAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,4BAA4B,CAC1C,GAAW,EACX,KAME;IAEF,MAAM,OAAO,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,IAAI,GAA2B;QACnC,aAAa,EAAE,CAAC;QAChB,kBAAkB,EAAE;YAClB,QAAQ,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ;YACpG,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC;gBAC/C,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBAClE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,YAAY;YAC3C,oBAAoB,EAClB,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS;gBAC7C,CAAC,CAAC,KAAK,CAAC,oBAAoB;gBAC5B,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,oBAAoB;YACrD,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC;gBACrD,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,gBAAgB,CAAC;gBAC5C,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,gBAAgB;SAChD;QACD,KAAK,EAAE;YACL,gBAAgB,EACd,OAAO,KAAK,CAAC,qBAAqB,KAAK,SAAS;gBAC9C,CAAC,CAAC,KAAK,CAAC,qBAAqB;gBAC7B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB;SACrC;KACF,CAAC;IACF,2BAA2B,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/utils/policy-packs.d.ts

@@ -1,4 +1,5 @@
-import type { Rule } from '@neurcode-ai/policy-engine';
+import { type Rule } from '@neurcode-ai/policy-engine';
+import type { ActiveCustomPolicy } from './custom-policy-rules';
 export type PolicyPackId = 'fintech' | 'hipaa' | 'soc2' | 'startup-fast';
 export interface PolicyPackDefinition {
     id: PolicyPackId;
@@ -17,6 +18,61 @@ export interface InstalledPolicyPack {
     tags: string[];
     rules: Rule[];
 }
+export interface PolicyLockCustomPolicyRef {
+    id: string;
+    severity: 'low' | 'medium' | 'high';
+    updatedAt: string;
+    ruleTextHash: string;
+}
+export interface PolicyStateSnapshot {
+    schemaVersion: 1;
+    generatedAt: string;
+    defaultRules: {
+        count: number;
+        fingerprint: string;
+    };
+    policyPack: {
+        id: PolicyPackId;
+        name: string;
+        version: string;
+        ruleCount: number;
+        fingerprint: string;
+    } | null;
+    customPolicies: {
+        mode: 'dashboard' | 'disabled';
+        count: number;
+        fingerprint: string;
+        mappedRuleCount: number;
+        mappedRulesFingerprint: string;
+        refs: PolicyLockCustomPolicyRef[];
+    };
+    effective: {
+        ruleCount: number;
+        fingerprint: string;
+    };
+}
+export type PolicyLockFile = PolicyStateSnapshot;
+export interface PolicyLockReadResult {
+    path: string;
+    exists: boolean;
+    lock: PolicyLockFile | null;
+    error?: string;
+}
+export interface PolicyLockMismatch {
+    code: 'POLICY_LOCK_MISSING' | 'POLICY_LOCK_INVALID' | 'POLICY_LOCK_MODE_MISMATCH' | 'POLICY_LOCK_PACK_MISMATCH' | 'POLICY_LOCK_DEFAULT_RULES_MISMATCH' | 'POLICY_LOCK_CUSTOM_POLICIES_MISMATCH' | 'POLICY_LOCK_CUSTOM_RULES_MISMATCH' | 'POLICY_LOCK_EFFECTIVE_RULES_MISMATCH';
+    message: string;
+    expected?: string;
+    actual?: string;
+}
+export interface PolicyLockValidationResult {
+    lockPath: string;
+    lockFileFound: boolean;
+    lockPresent: boolean;
+    enforced: boolean;
+    matched: boolean;
+    mismatches: PolicyLockMismatch[];
+    lock: PolicyLockFile | null;
+}
 export declare function listPolicyPacks(): PolicyPackDefinition[];
 export declare function getPolicyPack(packId: string): PolicyPackDefinition | null;
 export declare function readInstalledPolicyPack(cwd: string): InstalledPolicyPack | null;
@@ -28,4 +84,19 @@ export declare function getInstalledPolicyPackRules(cwd: string): {
     version: string;
     rules: Rule[];
 } | null;
+export declare function getPolicyLockPath(cwd: string): string;
+export declare function readPolicyLockFile(cwd: string): PolicyLockReadResult;
+export declare function writePolicyLockFile(cwd: string, lock: PolicyLockFile): string;
+export declare function buildPolicyStateSnapshot(input: {
+    policyPack: ReturnType<typeof getInstalledPolicyPackRules>;
+    policyPackRules: Rule[];
+    customPolicies: ActiveCustomPolicy[];
+    customRules: Rule[];
+    includeDashboardPolicies: boolean;
+    generatedAt?: string;
+}): PolicyStateSnapshot;
+export declare function comparePolicyStateToLock(lock: PolicyLockFile, current: PolicyStateSnapshot): PolicyLockMismatch[];
+export declare function evaluatePolicyLock(cwd: string, current: PolicyStateSnapshot, options?: {
+    requireLock?: boolean;
+}): PolicyLockValidationResult;
 //# sourceMappingURL=policy-packs.d.ts.map