@orygn/opa-mcp 0.1.11 → 0.1.12

package/dist/lib/rego-ast-walker.js

@@ -0,0 +1,491 @@
+const MAX_INLINE_DEPTH = 5;
+/** Operator names (first-term ref) that Phase 1 can encode in SMT. */
+const SUPPORTED_BINARY_OPS = new Set([
+    'equal', // ==
+    'eq', // = (unification)
+    'assign', // :=
+    'neq', // !=
+    'gt', // >
+    'gte', // >=
+    'lt', // <
+    'lte', // <=
+    'startswith',
+    'endswith',
+    'contains',
+    'regex.match',
+]);
+export function walkModule(ast) {
+    const result = {
+        rules: new Map(),
+        defaults: new Map(),
+        inputPaths: new Map(),
+        unsupported: [],
+    };
+    // Collect all rule names defined in this module for inlining detection.
+    const ruleNames = new Set(ast.rules.map((r) => r.head.name));
+    let clauseIndex = 0;
+    for (const rule of ast.rules) {
+        walkRule(rule, result, ast, ruleNames, new Set(), 0, clauseIndex++);
+    }
+    return result;
+}
+function walkRule(rule, result, ast, ruleNames, inliningStack, depth, clauseIndex) {
+    const name = rule.head.name;
+    if (rule.else !== undefined) {
+        addUnsupported(result, 'else_chain', `Rule '${name}' uses an else chain.`);
+        return;
+    }
+    if (rule.head.args && rule.head.args.length > 0) {
+        addUnsupported(result, 'function_rule', `Rule '${name}' is a function (has arguments).`);
+        return;
+    }
+    if (rule.default === true) {
+        const dv = extractLiteralValue(rule.head.value);
+        if (dv !== undefined)
+            result.defaults.set(name, dv);
+        return;
+    }
+    const headValue = extractLiteralValue(rule.head.value) ?? true;
+    const exprs = [];
+    let anonCounter = 0;
+    for (const bodyExpr of rule.body) {
+        // Default rule body: single boolean true term -- skip.
+        if (!Array.isArray(bodyExpr.terms) && bodyExpr.terms.type === 'boolean')
+            continue;
+        if (bodyExpr.negated === true) {
+            addUnsupported(result, 'naf', `Rule '${name}' uses negation-as-failure.`, bodyExpr);
+            exprs.push({ kind: 'unsupported', constructType: 'naf', reason: 'negation-as-failure' });
+            continue;
+        }
+        if (bodyExpr.with !== undefined) {
+            addUnsupported(result, 'with_modifier', `Rule '${name}' uses a 'with' modifier.`);
+            exprs.push({ kind: 'unsupported', constructType: 'with_modifier', reason: 'with modifier' });
+            continue;
+        }
+        const ve = walkExpression(bodyExpr, name, clauseIndex, ruleNames, inliningStack, depth, result, ast, () => anonCounter++);
+        for (const e of ve)
+            exprs.push(e);
+    }
+    const clauses = result.rules.get(name) ?? [];
+    clauses.push({ clauseIndex, headValue, expressions: exprs });
+    result.rules.set(name, clauses);
+}
+/**
+ * Convert one body expression to zero or more VerifyExprs.
+ * Returns multiple results when a cross-rule reference is inlined (that
+ * rule's own clauses become AND'd conditions within this clause).
+ */
+function walkExpression(expr, ruleName, clauseIndex, ruleNames, inliningStack, depth, result, ast, nextAnon) {
+    const { terms } = expr;
+    // Single-term expression.
+    if (!Array.isArray(terms)) {
+        return walkSingleTerm(terms, ruleName, clauseIndex, ruleNames, inliningStack, depth, result, ast);
+    }
+    // Array of terms: terms[0] is the operator ref, rest are arguments.
+    if (terms.length === 0)
+        return [];
+    const [opTerm, ...args] = terms;
+    if (opTerm === undefined)
+        return [];
+    const opName = getOperatorName(opTerm);
+    if (opName === null) {
+        addUnsupported(result, 'unknown_operator', `Rule '${ruleName}' has an expression with an unrecognized operator shape.`);
+        return [
+            { kind: 'unsupported', constructType: 'unknown_operator', reason: 'unrecognized operator' },
+        ];
+    }
+    // Detect unsupported constructs from the operator.
+    const comprehensionOps = new Set([
+        'arraycomprehension',
+        'setcomprehension',
+        'objectcomprehension',
+    ]);
+    if (opName === 'every' || args.some((a) => comprehensionOps.has(a.type))) {
+        addUnsupported(result, 'comprehension_or_every', `Rule '${ruleName}' uses a comprehension or 'every'.`);
+        return [
+            {
+                kind: 'unsupported',
+                constructType: 'comprehension_or_every',
+                reason: 'comprehension or every',
+            },
+        ];
+    }
+    // Check if any arg itself is a comprehension/every term type
+    for (const arg of args) {
+        if (comprehensionOps.has(arg.type) || arg.type === 'every') {
+            addUnsupported(result, 'comprehension_or_every', `Rule '${ruleName}' uses a comprehension or 'every'.`);
+            return [
+                { kind: 'unsupported', constructType: 'comprehension_or_every', reason: 'comprehension' },
+            ];
+        }
+    }
+    if (!SUPPORTED_BINARY_OPS.has(opName)) {
+        addUnsupported(result, 'unknown_builtin', `Rule '${ruleName}' calls unsupported built-in '${opName}'.`);
+        return [
+            {
+                kind: 'unsupported',
+                constructType: 'unknown_builtin',
+                reason: `unsupported built-in '${opName}'`,
+            },
+        ];
+    }
+    return [buildBinaryExpr(opName, args, ruleName, clauseIndex, result, nextAnon)];
+}
+function walkSingleTerm(term, ruleName, clauseIndex, ruleNames, inliningStack, depth, result, ast) {
+    // Bare var: could be a cross-rule reference or a local variable.
+    if (term.type === 'var' && typeof term.value === 'string') {
+        const varName = term.value;
+        if (ruleNames.has(varName)) {
+            return inlineRule(varName, ruleName, clauseIndex, ruleNames, inliningStack, depth, result, ast);
+        }
+        // Local var used as bool check -- unusual but handle gracefully.
+        return [
+            { kind: 'bool_check', ref: { kind: 'local_var', name: scopedLocal(clauseIndex, varName) } },
+        ];
+    }
+    // Bare ref: input.field (bool truthiness check) or data.* (unsupported).
+    if (term.type === 'ref' && Array.isArray(term.value)) {
+        const refTerms = term.value;
+        const root = refTerms[0];
+        if (root?.type === 'var' && root.value === 'input') {
+            const vv = extractInputRef(refTerms, result);
+            if (vv)
+                return [{ kind: 'bool_check', ref: vv }];
+        }
+        if (root?.type === 'var' && root.value === 'data') {
+            addUnsupported(result, 'data_ref', `Rule '${ruleName}' references external data (data.*).`);
+            return [{ kind: 'unsupported', constructType: 'data_ref', reason: 'data reference' }];
+        }
+        // Ref to another package rule or unknown -- unsupported.
+        addUnsupported(result, 'unknown_ref', `Rule '${ruleName}' contains an unresolvable reference.`);
+        return [
+            { kind: 'unsupported', constructType: 'unknown_ref', reason: 'unresolvable reference' },
+        ];
+    }
+    // Comprehension types as bare terms.
+    if (term.type === 'arraycomprehension' ||
+        term.type === 'setcomprehension' ||
+        term.type === 'objectcomprehension' ||
+        term.type === 'every') {
+        addUnsupported(result, 'comprehension_or_every', `Rule '${ruleName}' uses a comprehension or 'every'.`);
+        return [{ kind: 'unsupported', constructType: 'comprehension_or_every', reason: term.type }];
+    }
+    addUnsupported(result, 'unknown_expression', `Rule '${ruleName}' has an unrecognized single-term expression (type: ${term.type}).`);
+    return [{ kind: 'unsupported', constructType: 'unknown_expression', reason: term.type }];
+}
+/**
+ * Inline a rule reference: substitute "helper_rule is true" with all of
+ * that rule's body conditions, flattened into the caller's clause (AND).
+ *
+ * Supports any number of body expressions in the target rule's single clause.
+ * Multi-clause rules (OR semantics) are still marked unsupported because
+ * they cannot be flattened into the caller's AND chain.
+ */
+function inlineRule(targetName, callerName, clauseIndex, ruleNames, inliningStack, depth, result, ast) {
+    if (inliningStack.has(targetName)) {
+        addUnsupported(result, 'recursive_rule', `Rules '${callerName}' and '${targetName}' form a recursive cycle.`);
+        return [
+            { kind: 'unsupported', constructType: 'recursive_rule', reason: 'recursive rule reference' },
+        ];
+    }
+    if (depth >= MAX_INLINE_DEPTH) {
+        addUnsupported(result, 'inline_depth_exceeded', `Rule inlining exceeded maximum depth (${MAX_INLINE_DEPTH}).`);
+        return [
+            { kind: 'unsupported', constructType: 'inline_depth_exceeded', reason: 'max inline depth' },
+        ];
+    }
+    // Find all non-default clauses for targetName.
+    const targetRules = ast.rules.filter((r) => r.head.name === targetName && r.default !== true);
+    if (targetRules.length === 0) {
+        // Rule only has a default (always false/true) -- treat as literal.
+        const defVal = ast.rules.find((r) => r.head.name === targetName && r.default === true);
+        const v = defVal ? (extractLiteralValue(defVal.head.value) ?? false) : false;
+        return [
+            {
+                kind: 'eq',
+                left: { kind: 'literal_bool', value: true },
+                right: { kind: 'literal_bool', value: v },
+            },
+        ];
+    }
+    if (targetRules.length > 1) {
+        // Multiple clauses: OR semantics can't be flattened into the caller's AND.
+        addUnsupported(result, 'multi_clause_inline', `Rule '${targetName}' (referenced from '${callerName}') has multiple clauses; OR inlining is not supported in Phase 1.`);
+        return [
+            {
+                kind: 'unsupported',
+                constructType: 'multi_clause_inline',
+                reason: 'multi-clause rule reference',
+            },
+        ];
+    }
+    const targetRule = targetRules[0];
+    if (targetRule.else !== undefined) {
+        addUnsupported(result, 'else_chain', `Inlined rule '${targetName}' uses an else chain.`);
+        return [
+            { kind: 'unsupported', constructType: 'else_chain', reason: 'else chain in inlined rule' },
+        ];
+    }
+    const newStack = new Set(inliningStack);
+    newStack.add(targetName);
+    const bodyExprs = targetRule.body.filter((e) => !(!Array.isArray(e.terms) && e.terms.type === 'boolean'));
+    if (bodyExprs.length === 0) {
+        return [
+            {
+                kind: 'eq',
+                left: { kind: 'literal_bool', value: true },
+                right: { kind: 'literal_bool', value: true },
+            },
+        ];
+    }
+    // Walk every body expression and collect into a flat list. Each becomes an
+    // additional conjunct in the caller's clause (AND semantics). This handles
+    // any number of conditions in the helper rule, including transitive inlining
+    // of nested helpers.
+    let anonCounter = 0;
+    const inlined = [];
+    for (const bodyExpr of bodyExprs) {
+        if (bodyExpr.negated === true) {
+            addUnsupported(result, 'naf', `Inlined rule '${targetName}' uses negation-as-failure.`);
+            inlined.push({
+                kind: 'unsupported',
+                constructType: 'naf',
+                reason: 'negation-as-failure in inlined rule',
+            });
+            continue;
+        }
+        if (bodyExpr.with !== undefined) {
+            addUnsupported(result, 'with_modifier', `Inlined rule '${targetName}' uses a 'with' modifier.`);
+            inlined.push({
+                kind: 'unsupported',
+                constructType: 'with_modifier',
+                reason: 'with modifier in inlined rule',
+            });
+            continue;
+        }
+        const ve = walkExpression(bodyExpr, targetName, clauseIndex, ruleNames, newStack, depth + 1, result, ast, () => anonCounter++);
+        for (const e of ve)
+            inlined.push(e);
+    }
+    return inlined.length > 0
+        ? inlined
+        : [
+            {
+                kind: 'eq',
+                left: { kind: 'literal_bool', value: true },
+                right: { kind: 'literal_bool', value: true },
+            },
+        ];
+}
+/**
+ * Build a VerifyExpr for a two-argument operator expression.
+ */
+function buildBinaryExpr(opName, args, ruleName, clauseIndex, result, nextAnon) {
+    if (args.length < 2) {
+        addUnsupported(result, 'arity_error', `Operator '${opName}' in rule '${ruleName}' has fewer than 2 arguments.`);
+        return { kind: 'unsupported', constructType: 'arity_error', reason: `${opName} arity` };
+    }
+    const left = termToValue(args[0], clauseIndex, result, nextAnon);
+    const right = termToValue(args[1], clauseIndex, result, nextAnon);
+    if (left === null || right === null) {
+        return {
+            kind: 'unsupported',
+            constructType: 'unsupported_value',
+            reason: 'unsupported operand type',
+        };
+    }
+    switch (opName) {
+        case 'equal':
+        case 'eq':
+            return { kind: 'eq', left, right };
+        case 'assign': {
+            // LHS must be a var (the local being bound).
+            const a0 = args[0];
+            if (a0.type !== 'var' || typeof a0.value !== 'string') {
+                addUnsupported(result, 'complex_assign', `Complex assignment in rule '${ruleName}'.`);
+                return {
+                    kind: 'unsupported',
+                    constructType: 'complex_assign',
+                    reason: 'non-var LHS in assign',
+                };
+            }
+            return { kind: 'assign', local: scopedLocal(clauseIndex, a0.value), value: right };
+        }
+        case 'neq':
+            return { kind: 'neq', left, right };
+        case 'gt':
+            return { kind: 'gt', left, right };
+        case 'gte':
+            return { kind: 'gte', left, right };
+        case 'lt':
+            return { kind: 'lt', left, right };
+        case 'lte':
+            return { kind: 'lte', left, right };
+        case 'startswith':
+            return { kind: 'startswith', str: left, prefix: right };
+        case 'endswith':
+            return { kind: 'endswith', str: left, suffix: right };
+        case 'contains':
+            return { kind: 'contains', str: left, sub: right };
+        case 'regex.match':
+            // regex.match(pattern, string) -- pattern is args[0], string is args[1].
+            return { kind: 'regex_match', pattern: left, str: right };
+        default:
+            addUnsupported(result, 'unknown_builtin', `Rule '${ruleName}' calls unsupported built-in '${opName}'.`);
+            return { kind: 'unsupported', constructType: 'unknown_builtin', reason: opName };
+    }
+}
+/**
+ * Convert an OpaTerm to a VerifyValue.
+ * Returns null when the term cannot be represented (triggers unsupported).
+ */
+function termToValue(term, clauseIndex, result, nextAnon) {
+    switch (term.type) {
+        case 'string':
+            return { kind: 'literal_string', value: term.value };
+        case 'number':
+            return { kind: 'literal_number', value: term.value };
+        case 'boolean':
+            return { kind: 'literal_bool', value: term.value };
+        case 'null':
+            return { kind: 'literal_null' };
+        case 'var': {
+            const varName = term.value;
+            if (varName === '_') {
+                return { kind: 'local_var', name: scopedLocal(clauseIndex, `_anon${nextAnon()}`) };
+            }
+            return { kind: 'local_var', name: scopedLocal(clauseIndex, varName) };
+        }
+        case 'ref': {
+            const refTerms = term.value;
+            const root = refTerms[0];
+            if (root?.type === 'var' && root.value === 'input') {
+                return extractInputRef(refTerms, result);
+            }
+            if (root?.type === 'var' && root.value === 'data') {
+                return null; // caller adds unsupported
+            }
+            return null;
+        }
+        default:
+            return null;
+    }
+}
+/**
+ * Extract an input.* ref into a VerifyValue and register it in inputPaths.
+ */
+function extractInputRef(refTerms, result) {
+    const segments = [];
+    for (let i = 1; i < refTerms.length; i++) {
+        const t = refTerms[i];
+        if (t.type === 'string' && typeof t.value === 'string') {
+            segments.push(t.value);
+        }
+        else if (t.type === 'var') {
+            // Dynamic/wildcard key -- unsupported.
+            return null;
+        }
+        else {
+            return null;
+        }
+    }
+    const path = 'input.' + segments.join('.');
+    if (!result.inputPaths.has(path)) {
+        result.inputPaths.set(path, segments);
+    }
+    return { kind: 'input_ref', path, segments };
+}
+/**
+ * Get the operator name from the first term of a terms array.
+ * Single-element ref → "equal", compound ref → "regex.match", etc.
+ * Returns null if the shape is not a recognizable operator ref.
+ */
+function getOperatorName(opTerm) {
+    if (opTerm.type !== 'ref' || !Array.isArray(opTerm.value))
+        return null;
+    const parts = opTerm.value;
+    return parts
+        .map((p) => {
+        if (p.type === 'var' && typeof p.value === 'string')
+            return p.value;
+        if (p.type === 'string' && typeof p.value === 'string')
+            return p.value;
+        return null;
+    })
+        .filter((s) => s !== null)
+        .join('.');
+}
+/**
+ * Extract a literal scalar from a rule head value term.
+ */
+function extractLiteralValue(term) {
+    if (term === undefined)
+        return undefined;
+    switch (term.type) {
+        case 'boolean':
+            return term.value;
+        case 'number':
+            return term.value;
+        case 'string':
+            return term.value;
+        case 'null':
+            return null;
+        default:
+            return undefined;
+    }
+}
+function extractLocation(terms) {
+    const t = Array.isArray(terms) ? terms[0] : terms;
+    if (t?.location)
+        return t.location;
+    return undefined;
+}
+function addUnsupported(result, constructType, description, expr) {
+    const existing = result.unsupported.find((u) => u.constructType === constructType);
+    if (existing)
+        return; // deduplicate same construct type
+    const loc = expr ? extractLocation(expr.terms) : undefined;
+    result.unsupported.push({ constructType, description, location: loc });
+}
+function scopedLocal(clauseIndex, varName) {
+    return `local_${clauseIndex}_${varName}`;
+}
+/**
+ * Collect all input.* paths recursively from a raw OPA AST value.
+ * Used for deep scans of comprehension bodies (Phase 2), but exported
+ * here for reuse in the engine's path-discovery pass.
+ */
+export function collectAllInputPaths(node, out) {
+    if (node === null || typeof node !== 'object')
+        return;
+    if (Array.isArray(node)) {
+        for (const item of node)
+            collectAllInputPaths(item, out);
+        return;
+    }
+    const obj = node;
+    if (obj['type'] === 'ref' && Array.isArray(obj['value'])) {
+        const terms = obj['value'];
+        if (terms[0]?.type === 'var' && terms[0]?.value === 'input') {
+            const segs = [];
+            let ok = true;
+            for (let i = 1; i < terms.length; i++) {
+                const t = terms[i];
+                if (t.type === 'string' && typeof t.value === 'string')
+                    segs.push(t.value);
+                else {
+                    ok = false;
+                    break;
+                }
+            }
+            if (ok && segs.length > 0) {
+                const path = 'input.' + segs.join('.');
+                if (!out.has(path))
+                    out.set(path, segs);
+            }
+        }
+    }
+    for (const val of Object.values(obj))
+        collectAllInputPaths(val, out);
+}
+//# sourceMappingURL=rego-ast-walker.js.map

package/dist/lib/rego-ast-walker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rego-ast-walker.js","sourceRoot":"","sources":["../../src/lib/rego-ast-walker.ts"],"names":[],"mappings":"AAcA,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,sEAAsE;AACtE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,KAAK;IACZ,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,KAAK;IACZ,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,KAAK;IACZ,YAAY;IACZ,UAAU;IACV,UAAU;IACV,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,UAAU,UAAU,CAAC,GAAc;IACvC,MAAM,MAAM,GAAqB;QAC/B,KAAK,EAAE,IAAI,GAAG,EAAE;QAChB,QAAQ,EAAE,IAAI,GAAG,EAAE;QACnB,UAAU,EAAE,IAAI,GAAG,EAAE;QACrB,WAAW,EAAE,EAAE;KAChB,CAAC;IAEF,wEAAwE;IACxE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7D,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CACf,IAAa,EACb,MAAwB,EACxB,GAAc,EACd,SAAsB,EACtB,aAA0B,EAC1B,KAAa,EACb,WAAmB;IAEnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAE5B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,IAAI,uBAAuB,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,IAAI,kCAAkC,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,EAAE,KAAK,SAAS;YAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IAC/D,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,uDAAuD;QACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QAElF,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9B,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,6BAA6B,EAAE,QAAQ,CAAC,CAAC;YACpF,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,IAAI,2BAA2B,CAAC,CAAC;YAClF,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YAC7F,SAAS;QACX,CAAC;QAED,MAAM,EAAE,GAAG,cAAc,CACvB,QAAQ,EACR,IAAI,EACJ,WAAW,EACX,SAAS,EACT,aAAa,EACb,KAAK,EACL,MAAM,EACN,GAAG,EACH,GAAG,EAAE,CAAC,WAAW,EAAE,CACpB,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,IAAmB,EACnB,QAAgB,EAChB,WAAmB,EACnB,SAAsB,EACtB,aAA0B,EAC1B,KAAa,EACb,MAAwB,EACxB,GAAc,EACd,QAAsB;IAEtB,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAEvB,0BAA0B;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,cAAc,CACnB,KAAK,EACL,QAAQ,EACR,WAAW,EACX,SAAS,EACT,aAAa,EACb,KAAK,EACL,MAAM,EACN,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,cAAc,CACZ,MAAM,EACN,kBAAkB,EAClB,SAAS,QAAQ,0DAA0D,CAC5E,CAAC;QACF,OAAO;YACL,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,EAAE,uBAAuB,EAAE;SAC5F,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;QAC/B,oBAAoB;QACpB,kBAAkB;QAClB,qBAAqB;KACtB,CAAC,CAAC;IACH,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACzE,cAAc,CACZ,MAAM,EACN,wBAAwB,EACxB,SAAS,QAAQ,oCAAoC,CACtD,CAAC;QACF,OAAO;YACL;gBACE,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,wBAAwB;gBACvC,MAAM,EAAE,wBAAwB;aACjC;SACF,CAAC;IACJ,CAAC;IACD,6DAA6D;IAC7D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3D,cAAc,CACZ,MAAM,EACN,wBAAwB,EACxB,SAAS,QAAQ,oCAAoC,CACtD,CAAC;YACF,OAAO;gBACL,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,EAAE,eAAe,EAAE;aAC1F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,cAAc,CACZ,MAAM,EACN,iBAAiB,EACjB,SAAS,QAAQ,iCAAiC,MAAM,IAAI,CAC7D,CAAC;QACF,OAAO;YACL;gBACE,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,iBAAiB;gBAChC,MAAM,EAAE,yBAAyB,MAAM,GAAG;aAC3C;SACF,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,cAAc,CACrB,IAAa,EACb,QAAgB,EAChB,WAAmB,EACnB,SAAsB,EACtB,aAA0B,EAC1B,KAAa,EACb,MAAwB,EACxB,GAAc;IAEd,iEAAiE;IACjE,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;QAC3B,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,UAAU,CACf,OAAO,EACP,QAAQ,EACR,WAAW,EACX,SAAS,EACT,aAAa,EACb,KAAK,EACL,MAAM,EACN,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,iEAAiE;QACjE,OAAO;YACL,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE;SAC5F,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAkB,CAAC;QACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,IAAI,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YACnD,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,EAAE;gBAAE,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,IAAI,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAClD,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,QAAQ,sCAAsC,CAAC,CAAC;YAC5F,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,yDAAyD;QACzD,cAAc,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,QAAQ,uCAAuC,CAAC,CAAC;QAChG,OAAO;YACL,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,wBAAwB,EAAE;SACxF,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,IACE,IAAI,CAAC,IAAI,KAAK,oBAAoB;QAClC,IAAI,CAAC,IAAI,KAAK,kBAAkB;QAChC,IAAI,CAAC,IAAI,KAAK,qBAAqB;QACnC,IAAI,CAAC,IAAI,KAAK,OAAO,EACrB,CAAC;QACD,cAAc,CACZ,MAAM,EACN,wBAAwB,EACxB,SAAS,QAAQ,oCAAoC,CACtD,CAAC;QACF,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,cAAc,CACZ,MAAM,EACN,oBAAoB,EACpB,SAAS,QAAQ,uDAAuD,IAAI,CAAC,IAAI,IAAI,CACtF,CAAC;IACF,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CACjB,UAAkB,EAClB,UAAkB,EAClB,WAAmB,EACnB,SAAsB,EACtB,aAA0B,EAC1B,KAAa,EACb,MAAwB,EACxB,GAAc;IAEd,IAAI,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,cAAc,CACZ,MAAM,EACN,gBAAgB,EAChB,UAAU,UAAU,UAAU,UAAU,2BAA2B,CACpE,CAAC;QACF,OAAO;YACL,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,EAAE,0BAA0B,EAAE;SAC7F,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,IAAI,gBAAgB,EAAE,CAAC;QAC9B,cAAc,CACZ,MAAM,EACN,uBAAuB,EACvB,yCAAyC,gBAAgB,IAAI,CAC9D,CAAC;QACF,OAAO;YACL,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC5F,CAAC;IACJ,CAAC;IAED,+CAA+C;IAC/C,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;IAE9F,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,mEAAmE;QACnE,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;QACvF,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7E,OAAO;YACL;gBACE,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE;gBAC3C,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAY,EAAE;aACrD;SACF,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,2EAA2E;QAC3E,cAAc,CACZ,MAAM,EACN,qBAAqB,EACrB,SAAS,UAAU,uBAAuB,UAAU,mEAAmE,CACxH,CAAC;QACF,OAAO;YACL;gBACE,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,qBAAqB;gBACpC,MAAM,EAAE,6BAA6B;aACtC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;IAEnC,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAClC,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,iBAAiB,UAAU,uBAAuB,CAAC,CAAC;QACzF,OAAO;YACL,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,4BAA4B,EAAE;SAC3F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACxC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAEzB,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAChE,CAAC;IAEF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL;gBACE,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE;gBAC3C,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE;aAC7C;SACF,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,qBAAqB;IACrB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9B,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,iBAAiB,UAAU,6BAA6B,CAAC,CAAC;YACxF,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,KAAK;gBACpB,MAAM,EAAE,qCAAqC;aAC9C,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,cAAc,CACZ,MAAM,EACN,eAAe,EACf,iBAAiB,UAAU,2BAA2B,CACvD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,eAAe;gBAC9B,MAAM,EAAE,+BAA+B;aACxC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,EAAE,GAAG,cAAc,CACvB,QAAQ,EACR,UAAU,EACV,WAAW,EACX,SAAS,EACT,QAAQ,EACR,KAAK,GAAG,CAAC,EACT,MAAM,EACN,GAAG,EACH,GAAG,EAAE,CAAC,WAAW,EAAE,CACpB,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC;QACvB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE;gBAC3C,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE;aAC7C;SACF,CAAC;AACR,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CACtB,MAAc,EACd,IAAe,EACf,QAAgB,EAChB,WAAmB,EACnB,MAAwB,EACxB,QAAsB;IAEtB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,cAAc,CACZ,MAAM,EACN,aAAa,EACb,aAAa,MAAM,cAAc,QAAQ,+BAA+B,CACzE,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEnE,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACpC,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,aAAa,EAAE,mBAAmB;YAClC,MAAM,EAAE,0BAA0B;SACnC,CAAC;IACJ,CAAC;IAED,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO,CAAC;QACb,KAAK,IAAI;YACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACrC,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,6CAA6C;YAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;YACpB,IAAI,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,EAAE,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACtD,cAAc,CAAC,MAAM,EAAE,gBAAgB,EAAE,+BAA+B,QAAQ,IAAI,CAAC,CAAC;gBACtF,OAAO;oBACL,IAAI,EAAE,aAAa;oBACnB,aAAa,EAAE,gBAAgB;oBAC/B,MAAM,EAAE,uBAAuB;iBAChC,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACrF,CAAC;QACD,KAAK,KAAK;YACR,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACtC,KAAK,IAAI;YACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACrC,KAAK,KAAK;YACR,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACtC,KAAK,IAAI;YACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACrC,KAAK,KAAK;YACR,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACtC,KAAK,YAAY;YACf,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC1D,KAAK,UAAU;YACb,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACxD,KAAK,UAAU;YACb,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACrD,KAAK,aAAa;YAChB,yEAAyE;YACzE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAC5D;YACE,cAAc,CACZ,MAAM,EACN,iBAAiB,EACjB,SAAS,QAAQ,iCAAiC,MAAM,IAAI,CAC7D,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACrF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,IAAa,EACb,WAAmB,EACnB,MAAwB,EACxB,QAAsB;IAEtB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAe,EAAE,CAAC;QACjE,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAe,EAAE,CAAC;QACjE,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,KAAgB,EAAE,CAAC;QAChE,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAClC,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,OAAO,GAAG,IAAI,CAAC,KAAe,CAAC;YACrC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;gBACpB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,CAAC,WAAW,EAAE,QAAQ,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;YACrF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC;QACxE,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAkB,CAAC;YACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBACnD,OAAO,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,IAAI,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBAClD,OAAO,IAAI,CAAC,CAAC,0BAA0B;YACzC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,QAAmB,EAAE,MAAwB;IACpE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC5B,uCAAuC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAe;IACtC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAkB,CAAC;IACxC,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC;QACpE,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;SACtC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,IAAyB;IAEzB,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,KAAgB,CAAC;QAC/B,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,KAAe,CAAC;QAC9B,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,KAAe,CAAC;QAC9B,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QACd;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,KAA0B;IAE1B,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClD,IAAI,CAAC,EAAE,QAAQ;QAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;IACnC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CACrB,MAAwB,EACxB,aAAqB,EACrB,WAAmB,EACnB,IAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,aAAa,CAAC,CAAC;IACnF,IAAI,QAAQ;QAAE,OAAO,CAAC,kCAAkC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,WAAW,CAAC,WAAmB,EAAE,OAAe;IACvD,OAAO,SAAS,WAAW,IAAI,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAa,EAAE,GAA0B;IAC5E,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO;IACtD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,IAAI;YAAE,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAc,CAAC;QACxC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,OAAO,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,IAAI,EAAE,GAAG,IAAI,CAAC;YACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBACpB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;qBACtE,CAAC;oBACJ,EAAE,GAAG,KAAK,CAAC;oBACX,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACvE,CAAC"}

package/dist/lib/rego-counterexample.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Extract a counterexample from a Z3 SAT model.
+ *
+ * Z3 variable names use "__" as path separator (e.g. "input__user__role").
+ * This module reconstructs the nested input JSON that Z3 found satisfying,
+ * strips the leading "input." prefix, and returns the nested object the
+ * MCP caller can put directly into OPA's `--input` flag.
+ *
+ * Supported Z3 sorts: string, int, bool.
+ * Uninterpreted sorts produce a placeholder string in the output.
+ */
+import type { init as Z3Init } from 'z3-solver';
+import type { Z3Sort } from './rego-type-inferencer.js';
+type Z3Context = ReturnType<Awaited<ReturnType<typeof Z3Init>>['Context']>;
+type Z3Model = ReturnType<InstanceType<Z3Context['Solver']>['model']>;
+type Z3AnyExpr = ReturnType<Z3Context['Bool']['const']> | ReturnType<Z3Context['Int']['const']> | ReturnType<Z3Context['String']['const']>;
+export type CounterexampleInput = Record<string, unknown>;
+/**
+ * Extract the witness/counterexample input object from a Z3 model.
+ *
+ * @param model   - the SAT model from solver.model()
+ * @param inputVars - map from path ("input.user.role") to Z3 constant
+ * @param sorts   - inferred sort for each path
+ * @returns nested JSON for the "input" field (leading "input." stripped)
+ */
+export declare function extractCounterexample(model: Z3Model, inputVars: Map<string, Z3AnyExpr>, sorts: Map<string, Z3Sort>): CounterexampleInput;
+/**
+ * Format a counterexample as a human-readable string for the MCP response.
+ */
+export declare function formatCounterexample(ce: CounterexampleInput): string;
+export {};
+//# sourceMappingURL=rego-counterexample.d.ts.map

package/dist/lib/rego-counterexample.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rego-counterexample.d.ts","sourceRoot":"","sources":["../../src/lib/rego-counterexample.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAExD,KAAK,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3E,KAAK,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACtE,KAAK,SAAS,GACV,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,GACtC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,GACrC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAE7C,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE1D;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,EACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACzB,mBAAmB,CAwCrB;AA6BD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,mBAAmB,GAAG,MAAM,CAEpE"}

package/dist/lib/rego-counterexample.js

@@ -0,0 +1,75 @@
+/**
+ * Extract the witness/counterexample input object from a Z3 model.
+ *
+ * @param model   - the SAT model from solver.model()
+ * @param inputVars - map from path ("input.user.role") to Z3 constant
+ * @param sorts   - inferred sort for each path
+ * @returns nested JSON for the "input" field (leading "input." stripped)
+ */
+export function extractCounterexample(model, inputVars, sorts) {
+    const flat = {};
+    for (const [path, varExpr] of inputVars) {
+        const sort = sorts.get(path) ?? 'string';
+        const evaluated = model.eval(varExpr, true); // true = model completion
+        let value;
+        switch (sort) {
+            case 'string':
+                try {
+                    value = evaluated.asString();
+                }
+                catch {
+                    // eslint-disable-next-line @typescript-eslint/no-base-to-string
+                    value = evaluated.toString().replace(/^"|"$/g, '');
+                }
+                break;
+            case 'int': {
+                // Z3 formats negative integers as "(- N)" in SMT notation.
+                // eslint-disable-next-line @typescript-eslint/no-base-to-string
+                const intStr = evaluated.toString().replace(/\(-\s+(\d+)\)/, '-$1');
+                value = Number(intStr);
+                break;
+            }
+            case 'bool':
+                // eslint-disable-next-line @typescript-eslint/no-base-to-string
+                value = evaluated.toString() === 'true';
+                break;
+            case 'uninterpreted':
+                // eslint-disable-next-line @typescript-eslint/no-base-to-string
+                value = `<opaque:${evaluated.toString()}>`;
+                break;
+        }
+        // Strip leading "input." so the result represents the input object content
+        const inputRelPath = path.startsWith('input.') ? path.slice('input.'.length) : path;
+        flat[inputRelPath] = value;
+    }
+    return buildNestedObject(flat);
+}
+/**
+ * Convert flat dot-separated paths to a nested object.
+ * E.g. { "user.role": "admin", "action": "read" } →
+ *      { user: { role: "admin" }, action: "read" }
+ */
+function buildNestedObject(flat) {
+    const result = {};
+    for (const [dotPath, value] of Object.entries(flat)) {
+        const segments = dotPath.split('.');
+        let cursor = result;
+        for (let i = 0; i < segments.length - 1; i++) {
+            const seg = segments[i];
+            if (typeof cursor[seg] !== 'object' || cursor[seg] === null) {
+                cursor[seg] = {};
+            }
+            cursor = cursor[seg];
+        }
+        const leaf = segments[segments.length - 1];
+        cursor[leaf] = value;
+    }
+    return result;
+}
+/**
+ * Format a counterexample as a human-readable string for the MCP response.
+ */
+export function formatCounterexample(ce) {
+    return JSON.stringify({ input: ce }, null, 2);
+}
+//# sourceMappingURL=rego-counterexample.js.map

package/dist/lib/rego-counterexample.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rego-counterexample.js","sourceRoot":"","sources":["../../src/lib/rego-counterexample.ts"],"names":[],"mappings":"AAuBA;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAc,EACd,SAAiC,EACjC,KAA0B;IAE1B,MAAM,IAAI,GAA4B,EAAE,CAAC;IAEzC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,0BAA0B;QAEvE,IAAI,KAAc,CAAC;QACnB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,QAAQ;gBACX,IAAI,CAAC;oBACH,KAAK,GAAI,SAAsD,CAAC,QAAQ,EAAE,CAAC;gBAC7E,CAAC;gBAAC,MAAM,CAAC;oBACP,gEAAgE;oBAChE,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM;YACR,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,2DAA2D;gBAC3D,gEAAgE;gBAChE,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;gBACpE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvB,MAAM;YACR,CAAC;YACD,KAAK,MAAM;gBACT,gEAAgE;gBAChE,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,MAAM,CAAC;gBACxC,MAAM;YACR,KAAK,eAAe;gBAClB,gEAAgE;gBAChE,KAAK,GAAG,WAAW,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC;gBAC3C,MAAM;QACV,CAAC;QAED,2EAA2E;QAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpF,IAAI,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,IAA6B;IACtD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM,GAA4B,MAAM,CAAC;QAE7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;YACzB,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5D,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACnB,CAAC;YACD,MAAM,GAAG,MAAM,CAAC,GAAG,CAA4B,CAAC;QAClD,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAuB;IAC1D,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAChD,CAAC"}