@orygn/opa-mcp 0.1.13 → 0.1.15

package/dist/tools/helpers/explain-undefined.js

@@ -0,0 +1,380 @@
+/**
+ * `rego_explain_undefined` -- determine why a Rego query produces no
+ * value by combining a plain eval, a full-trace eval, and per-condition
+ * AST analysis.
+ *
+ * Three information sources are fused:
+ *  1. Plain `opa eval` -- determines whether the result is defined at all.
+ *  2. `opa eval --explain=full` -- captures which rule bodies OPA entered
+ *     and which expressions failed at runtime.
+ *  3. `opa parse --json-include locations,-comments` -- supplies
+ *     base64-encoded expression text and row numbers for conditions that
+ *     OPA's indexer eliminated before entering the rule body (the most
+ *     common case for equality checks on `input.*`).
+ *
+ * For rules that appear in the trace (OPA entered them), the blocking
+ * condition is identified by matching Fail-event rows against body-
+ * expression rows from the AST. For rules that do not appear in the trace
+ * (indexed out), each body expression is evaluated as a standalone query
+ * to determine which one is not satisfied.
+ */
+import { readFile } from 'node:fs/promises';
+import { z } from 'zod';
+import { err, ok } from '../../lib/errors.js';
+import { OpaCli } from '../../lib/opa-cli.js';
+import { mapSubprocessFailure, sanitizeInlinePath, tryParseJson, validatePaths, withToolEnvelope, } from '../../lib/tool-helpers.js';
+// ─── Input schema ───────────────────────────────────────────────────────────
+const RegoExplainUndefinedInput = {
+    query: z
+        .string()
+        .min(1)
+        .describe('Fully-qualified rule reference to explain, e.g. "data.authz.allow". ' +
+        'Must match the path you would pass to rego_eval.'),
+    source: z
+        .string()
+        .optional()
+        .describe('Inline Rego source to analyse. Mutually exclusive with paths.'),
+    paths: z
+        .array(z.string())
+        .optional()
+        .describe('Policy .rego file paths to load. Mutually exclusive with source.'),
+    input: z.unknown().optional().describe('Input document (JSON value) for the query.'),
+    inputPath: z.string().optional().describe('Path to an input JSON file.'),
+};
+// ─── Pure helpers ────────────────────────────────────────────────────────────
+function decodeBase64Text(b64) {
+    if (!b64)
+        return undefined;
+    try {
+        return Buffer.from(b64, 'base64').toString('utf8');
+    }
+    catch {
+        return undefined;
+    }
+}
+function extractPackagePath(ast) {
+    return (ast.package?.path ?? []).map((p) => String(p.value ?? '')).join('.');
+}
+function extractRuleHeadName(head) {
+    if (!head)
+        return undefined;
+    if (head.name)
+        return head.name;
+    if (Array.isArray(head.ref) && head.ref.length > 0) {
+        const v = head.ref[0].value;
+        return typeof v === 'string' ? v : '';
+    }
+    return undefined;
+}
+function queryToPackageAndRule(query) {
+    const parts = query.split('.');
+    if (parts.length < 2)
+        return null;
+    return {
+        ruleName: parts[parts.length - 1],
+        packagePath: parts.slice(0, -1).join('.'),
+    };
+}
+function ruleAppearsInTrace(ruleName, ruleRow, trace) {
+    return trace.some((ev) => {
+        if (ev.Op?.toLowerCase() !== 'enter')
+            return false;
+        if (!ev.Node)
+            return false;
+        if (extractRuleHeadName(ev.Node.head) !== ruleName)
+            return false;
+        // When we have source row information, use it to disambiguate incremental rules.
+        if (ruleRow !== undefined && ev.Node.location?.row !== undefined) {
+            return ev.Node.location.row === ruleRow;
+        }
+        return true;
+    });
+}
+function findBlockingRowFromTrace(rule, trace) {
+    const ruleName = extractRuleHeadName(rule.head);
+    const ruleRow = rule.location?.row;
+    const bodyRows = new Set((rule.body ?? []).map((e) => e.location?.row).filter((r) => r !== undefined));
+    if (bodyRows.size === 0)
+        return undefined;
+    // Locate the Enter event for this specific rule definition.
+    const enterIdx = trace.findIndex((ev) => {
+        if (ev.Op?.toLowerCase() !== 'enter')
+            return false;
+        if (extractRuleHeadName(ev.Node?.head) !== ruleName)
+            return false;
+        if (ruleRow !== undefined && ev.Node?.location?.row !== undefined) {
+            return ev.Node.location.row === ruleRow;
+        }
+        return true;
+    });
+    if (enterIdx < 0)
+        return undefined;
+    // Find the first Fail event after the Enter that falls on a body expression row.
+    for (let i = enterIdx + 1; i < trace.length; i++) {
+        const ev = trace[i];
+        // Stop when we enter or exit the same-named rule at a different row (sibling).
+        if ((ev.Op?.toLowerCase() === 'enter' || ev.Op?.toLowerCase() === 'exit') &&
+            extractRuleHeadName(ev.Node?.head) === ruleName &&
+            ruleRow !== undefined &&
+            ev.Node?.location?.row !== ruleRow) {
+            break;
+        }
+        if (ev.Op?.toLowerCase() === 'fail' && ev.Location?.row !== undefined) {
+            if (bodyRows.has(ev.Location.row))
+                return ev.Location.row;
+        }
+    }
+    return undefined;
+}
+async function evalConditionStandalone(exprText, evalBase, opa, signal) {
+    const result = await opa.eval({
+        query: exprText,
+        source: evalBase.source,
+        paths: evalBase.paths,
+        input: evalBase.input,
+        inputPath: evalBase.inputPath,
+    }, signal);
+    if (result.exitCode === null || result.exitCode !== 0) {
+        const firstLine = (result.stderr.trim() || result.stdout.trim()).split('\n')[0] ?? 'unknown error';
+        return { result: 'unevaluable', note: `Standalone eval failed: ${firstLine}` };
+    }
+    const parsed = tryParseJson(result.stdout);
+    return (parsed?.result?.length ?? 0) > 0 ? { result: 'true' } : { result: 'false' };
+}
+function buildSummary(query, rules, defaultValue) {
+    const lines = [];
+    if (rules.length === 0) {
+        lines.push(`${query} is undefined: no matching rules found in the analysed source.`);
+    }
+    else {
+        const count = rules.length;
+        lines.push(`${query} is undefined. ${count} rule definition${count !== 1 ? 's' : ''} analysed:`);
+        for (const r of rules) {
+            const loc = r.location.row > 0 ? ` (row ${r.location.row})` : '';
+            const bc = r.blockingCondition;
+            if (bc) {
+                const how = r.source === 'trace' ? 'trace' : 'standalone eval';
+                lines.push(`  Rule ${r.ruleIndex}${loc}: blocked by condition ${bc.index + 1} -- ` +
+                    `\`${bc.text}\` (row ${bc.row}) is not satisfied [via ${how}].`);
+            }
+            else if (r.conditions.length === 0) {
+                lines.push(`  Rule ${r.ruleIndex}${loc}: no analysable body conditions.`);
+            }
+            else {
+                const unevalCount = r.conditions.filter((c) => c.result === 'unevaluable').length;
+                lines.push(`  Rule ${r.ruleIndex}${loc}: blocking condition could not be determined ` +
+                    `(${unevalCount} unevaluable expression${unevalCount !== 1 ? 's' : ''}).`);
+            }
+        }
+    }
+    if (defaultValue !== undefined) {
+        lines.push(`Default value: ${JSON.stringify(defaultValue)}.`);
+    }
+    return lines.join('\n');
+}
+// ─── Tool registration ──────────────────────────────────────────────────────
+export function registerRegoExplainUndefined(server, config) {
+    const opa = new OpaCli(config);
+    server.registerTool('rego_explain_undefined', {
+        title: 'Explain why a Rego query is undefined',
+        description: 'Diagnose why a fully-qualified Rego query (e.g. "data.authz.allow") produces no ' +
+            'value. Combines a plain eval, a full-trace eval, and per-condition AST analysis to ' +
+            'identify the exact body expression blocking each rule. Handles both runtime failures ' +
+            '(trace-based) and indexer elimination (standalone condition eval). Returns a structured ' +
+            'breakdown of which conditions blocked each rule plus a human-readable summary.',
+        inputSchema: RegoExplainUndefinedInput,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async (args, { signal }) => {
+        return withToolEnvelope(config, async () => {
+            // ── Path validation ───────────────────────────────────────────────
+            let resolvedPaths = [];
+            if (args.paths?.length) {
+                const pv = validatePaths(args.paths, config, { mustExist: true });
+                if (!pv.ok)
+                    return pv.error;
+                resolvedPaths = pv.resolved;
+            }
+            if (args.inputPath) {
+                const iv = validatePaths([args.inputPath], config, { mustExist: true });
+                if (!iv.ok)
+                    return iv.error;
+            }
+            const evalBase = {
+                query: args.query,
+                source: args.source,
+                paths: resolvedPaths.length > 0 ? resolvedPaths : undefined,
+                input: args.input,
+                inputPath: args.inputPath,
+            };
+            // ── Step 1: plain eval ────────────────────────────────────────────
+            const plainResult = await opa.eval(evalBase, signal);
+            const spawnErr = mapSubprocessFailure(plainResult, 'opa');
+            if (spawnErr)
+                return spawnErr;
+            if (plainResult.exitCode !== 0) {
+                const detail = tryParseJson(plainResult.stderr) ??
+                    tryParseJson(plainResult.stdout) ??
+                    plainResult.stderr;
+                return err('EVAL_ERROR', 'OPA evaluation failed.', {
+                    details: { opaOutput: detail },
+                    hint: 'Check for syntax errors or undefined references in the query or policy.',
+                });
+            }
+            const plainJson = tryParseJson(plainResult.stdout);
+            const isDefined = (plainJson?.result?.length ?? 0) > 0;
+            if (isDefined) {
+                const value = plainJson.result[0]?.expressions?.[0]?.value;
+                return ok({
+                    queryResult: 'defined',
+                    value,
+                    summary: `${args.query} is defined with value: ${JSON.stringify(value)}.`,
+                    rulesFound: 0,
+                    rules: [],
+                });
+            }
+            // ── Step 2: eval with --explain=full ──────────────────────────────
+            const traceResult = await opa.eval({ ...evalBase, explain: 'full' }, signal);
+            const traceSpawnErr = mapSubprocessFailure(traceResult, 'opa');
+            if (traceSpawnErr)
+                return traceSpawnErr;
+            const traceJson = tryParseJson(traceResult.stdout);
+            const trace = traceJson?.explanation ?? [];
+            // ── Step 3: parse AST(s) ──────────────────────────────────────────
+            const asts = [];
+            if (args.source) {
+                const pr = await opa.parse({ source: args.source, includeLocations: true }, signal);
+                if (pr.exitCode === 0) {
+                    const ast = tryParseJson(pr.stdout);
+                    if (ast)
+                        asts.push(ast);
+                }
+            }
+            else if (resolvedPaths.length > 0) {
+                const regoFiles = resolvedPaths.filter((p) => p.endsWith('.rego'));
+                for (const filePath of regoFiles) {
+                    try {
+                        const src = await readFile(filePath, 'utf8');
+                        const pr = await opa.parse({ source: src, includeLocations: true }, signal);
+                        if (pr.exitCode === 0) {
+                            const ast = tryParseJson(pr.stdout);
+                            if (ast)
+                                asts.push(ast);
+                        }
+                    }
+                    catch {
+                        // Unreadable file; still usable for eval
+                    }
+                }
+            }
+            // ── Step 4: find matching rules ───────────────────────────────────
+            const queryParsed = queryToPackageAndRule(args.query);
+            const matchedRules = [];
+            for (const ast of asts) {
+                const pkgPath = extractPackagePath(ast);
+                if (queryParsed && pkgPath !== queryParsed.packagePath)
+                    continue;
+                for (const rule of ast.rules ?? []) {
+                    const name = extractRuleHeadName(rule.head);
+                    if (!queryParsed || name === queryParsed.ruleName) {
+                        matchedRules.push(rule);
+                    }
+                }
+            }
+            // ── Step 5: analyse each rule ─────────────────────────────────────
+            let defaultValue;
+            const rules = [];
+            for (let ruleIndex = 0; ruleIndex < matchedRules.length; ruleIndex++) {
+                const rule = matchedRules[ruleIndex];
+                const location = {
+                    file: sanitizeInlinePath(rule.location?.file ?? ''),
+                    row: rule.location?.row ?? 0,
+                    col: rule.location?.col ?? 0,
+                };
+                if (rule.default) {
+                    defaultValue = rule.head?.value?.value;
+                    rules.push({
+                        ruleIndex,
+                        isDefault: true,
+                        location,
+                        conditions: [],
+                        blockingCondition: null,
+                        source: 'trace',
+                    });
+                    continue;
+                }
+                const ruleName = extractRuleHeadName(rule.head) ?? '';
+                const bodyExprs = rule.body ?? [];
+                const conditions = bodyExprs.map((expr, i) => ({
+                    index: i,
+                    text: decodeBase64Text(expr.location?.text) ?? '<expression>',
+                    row: expr.location?.row ?? 0,
+                    col: expr.location?.col ?? 0,
+                    result: 'unevaluable',
+                }));
+                const inTrace = ruleAppearsInTrace(ruleName, rule.location?.row, trace);
+                if (inTrace) {
+                    // Trace-based: find first Fail event that hits a body row.
+                    const blockingRow = findBlockingRowFromTrace(rule, trace);
+                    let seenBlocking = false;
+                    for (const cond of conditions) {
+                        if (!seenBlocking && blockingRow !== undefined && cond.row === blockingRow) {
+                            cond.result = 'false';
+                            seenBlocking = true;
+                        }
+                        else if (!seenBlocking && cond.row > 0 && blockingRow !== undefined) {
+                            // Conditions before the blocking one successfully passed.
+                            cond.result = 'true';
+                        }
+                    }
+                    const blockingCondition = conditions.find((c) => c.result === 'false') ?? null;
+                    rules.push({
+                        ruleIndex,
+                        isDefault: false,
+                        location,
+                        conditions,
+                        blockingCondition,
+                        source: 'trace',
+                    });
+                }
+                else {
+                    // Standalone eval: OPA's indexer eliminated this rule before
+                    // entering its body. Evaluate each condition independently.
+                    for (const cond of conditions) {
+                        if (cond.text === '<expression>') {
+                            cond.note = 'No location text available; cannot evaluate standalone.';
+                            continue;
+                        }
+                        const evalOut = await evalConditionStandalone(cond.text, evalBase, opa, signal);
+                        cond.result = evalOut.result;
+                        if (evalOut.note)
+                            cond.note = evalOut.note;
+                    }
+                    const blockingCondition = conditions.find((c) => c.result !== 'true') ?? null;
+                    rules.push({
+                        ruleIndex,
+                        isDefault: false,
+                        location,
+                        conditions,
+                        blockingCondition,
+                        source: 'standalone-eval',
+                    });
+                }
+            }
+            const nonDefaultRules = rules.filter((r) => !r.isDefault);
+            const summary = buildSummary(args.query, nonDefaultRules, defaultValue);
+            return ok({
+                queryResult: 'undefined',
+                summary,
+                rulesFound: nonDefaultRules.length,
+                defaultValue,
+                rules,
+            });
+        });
+    });
+}
+//# sourceMappingURL=explain-undefined.js.map

package/dist/tools/helpers/explain-undefined.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain-undefined.js","sourceRoot":"","sources":["../../../src/tools/helpers/explain-undefined.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AAEnC,+EAA+E;AAE/E,MAAM,yBAAyB,GAAG;IAChC,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,sEAAsE;QACpE,kDAAkD,CACrD;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,+DAA+D,CAAC;IAC5E,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,kEAAkE,CAAC;IAC/E,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACpF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CACzE,CAAC;AA2FF,gFAAgF;AAEhF,SAAS,gBAAgB,CAAC,GAAuB;IAC/C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAyB;IACpD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;QAC7B,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE;QAClC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,QAAgB,EAChB,OAA2B,EAC3B,KAAmB;IAEnB,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;QACvB,IAAI,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,mBAAmB,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACjE,iFAAiF;QACjF,IAAI,OAAO,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,SAAS,EAAE,CAAC;YACjE,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAa,EAAE,KAAmB;IAClE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAC1F,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1C,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE;QACtC,IAAI,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACnD,IAAI,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAClE,IAAI,OAAO,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,SAAS,EAAE,CAAC;YAClE,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAEnC,iFAAiF;IACjF,KAAK,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACrB,+EAA+E;QAC/E,IACE,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,MAAM,CAAC;YACrE,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,QAAQ;YAC/C,OAAO,KAAK,SAAS;YACrB,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,OAAO,EAClC,CAAC;YACD,MAAM;QACR,CAAC;QACD,IAAI,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,MAAM,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,KAAK,SAAS,EAAE,CAAC;YACtE,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,QAAgB,EAChB,QAKC,EACD,GAAW,EACX,MAA+B;IAE/B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAC3B;QACE,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,EACD,MAAM,CACP,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,SAAS,GACb,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC;QACnF,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,2BAA2B,SAAS,EAAE,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAyB,MAAM,CAAC,MAAM,CAAC,CAAC;IACnE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAqB,EAAE,YAAqB;IAC/E,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,gEAAgE,CAAC,CAAC;IACvF,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,GAAG,KAAK,kBAAkB,KAAK,mBAAmB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,CACrF,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,EAAE,GAAG,CAAC,CAAC,iBAAiB,CAAC;YAC/B,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC;gBAC/D,KAAK,CAAC,IAAI,CACR,UAAU,CAAC,CAAC,SAAS,GAAG,GAAG,0BAA0B,EAAE,CAAC,KAAK,GAAG,CAAC,MAAM;oBACrE,KAAK,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,GAAG,2BAA2B,GAAG,IAAI,CAClE,CAAC;YACJ,CAAC;iBAAM,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,SAAS,GAAG,GAAG,kCAAkC,CAAC,CAAC;YAC5E,CAAC;iBAAM,CAAC;gBACN,MAAM,WAAW,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,MAAM,CAAC;gBAClF,KAAK,CAAC,IAAI,CACR,UAAU,CAAC,CAAC,SAAS,GAAG,GAAG,+CAA+C;oBACxE,IAAI,WAAW,0BAA0B,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,4BAA4B,CAAC,MAAiB,EAAE,MAAc;IAC5E,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IAE/B,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EACT,kFAAkF;YAClF,qFAAqF;YACrF,uFAAuF;YACvF,0FAA0F;YAC1F,gFAAgF;QAClF,WAAW,EAAE,yBAAyB;QACtC,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACzB,OAAO,gBAAgB,CAA6B,MAAM,EAAE,KAAK,IAAI,EAAE;YACrE,qEAAqE;YACrE,IAAI,aAAa,GAAa,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;gBACvB,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClE,IAAI,CAAC,EAAE,CAAC,EAAE;oBAAE,OAAO,EAAE,CAAC,KAAK,CAAC;gBAC5B,aAAa,GAAG,EAAE,CAAC,QAAQ,CAAC;YAC9B,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxE,IAAI,CAAC,EAAE,CAAC,EAAE;oBAAE,OAAO,EAAE,CAAC,KAAK,CAAC;YAC9B,CAAC;YAED,MAAM,QAAQ,GAAG;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;gBAC3D,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;YAEF,qEAAqE;YACrE,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC1D,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAE9B,IAAI,WAAW,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,MAAM,GACV,YAAY,CAAuB,WAAW,CAAC,MAAM,CAAC;oBACtD,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC;oBAChC,WAAW,CAAC,MAAM,CAAC;gBACrB,OAAO,GAAG,CAAC,YAAY,EAAE,wBAAwB,EAAE;oBACjD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;oBAC9B,IAAI,EAAE,yEAAyE;iBAChF,CAAC,CAAC;YACL,CAAC;YAED,MAAM,SAAS,GAAG,YAAY,CAAyB,WAAW,CAAC,MAAM,CAAC,CAAC;YAC3E,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAEvD,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,KAAK,GACT,SAAU,CAAC,MACZ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;gBAC9B,OAAO,EAAE,CAA6B;oBACpC,WAAW,EAAE,SAAS;oBACtB,KAAK;oBACL,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,2BAA2B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG;oBACzE,UAAU,EAAE,CAAC;oBACb,KAAK,EAAE,EAAE;iBACV,CAAC,CAAC;YACL,CAAC;YAED,qEAAqE;YACrE,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;YAC7E,MAAM,aAAa,GAAG,oBAAoB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC/D,IAAI,aAAa;gBAAE,OAAO,aAAa,CAAC;YAExC,MAAM,SAAS,GAAG,YAAY,CAAiC,WAAW,CAAC,MAAM,CAAC,CAAC;YACnF,MAAM,KAAK,GAAG,SAAS,EAAE,WAAW,IAAI,EAAE,CAAC;YAE3C,qEAAqE;YACrE,MAAM,IAAI,GAAa,EAAE,CAAC;YAE1B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;gBACpF,IAAI,EAAE,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACtB,MAAM,GAAG,GAAG,YAAY,CAAS,EAAE,CAAC,MAAM,CAAC,CAAC;oBAC5C,IAAI,GAAG;wBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;iBAAM,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBACnE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBACjC,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;wBAC7C,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;wBAC5E,IAAI,EAAE,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;4BACtB,MAAM,GAAG,GAAG,YAAY,CAAS,EAAE,CAAC,MAAM,CAAC,CAAC;4BAC5C,IAAI,GAAG;gCAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBAC1B,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,yCAAyC;oBAC3C,CAAC;gBACH,CAAC;YACH,CAAC;YAED,qEAAqE;YACrE,MAAM,WAAW,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtD,MAAM,YAAY,GAAc,EAAE,CAAC;YAEnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,WAAW,IAAI,OAAO,KAAK,WAAW,CAAC,WAAW;oBAAE,SAAS;gBACjE,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;oBACnC,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC5C,IAAI,CAAC,WAAW,IAAI,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE,CAAC;wBAClD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC1B,CAAC;gBACH,CAAC;YACH,CAAC;YAED,qEAAqE;YACrE,IAAI,YAAqB,CAAC;YAC1B,MAAM,KAAK,GAAmB,EAAE,CAAC;YAEjC,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;gBACrE,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG;oBACf,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;oBACnD,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC;oBAC5B,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC;iBAC7B,CAAC;gBAEF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC;oBACvC,KAAK,CAAC,IAAI,CAAC;wBACT,SAAS;wBACT,SAAS,EAAE,IAAI;wBACf,QAAQ;wBACR,UAAU,EAAE,EAAE;wBACd,iBAAiB,EAAE,IAAI;wBACvB,MAAM,EAAE,OAAO;qBAChB,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;gBAElC,MAAM,UAAU,GAAsB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;oBAChE,KAAK,EAAE,CAAC;oBACR,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,cAAc;oBAC7D,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC;oBAC5B,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC;oBAC5B,MAAM,EAAE,aAAsB;iBAC/B,CAAC,CAAC,CAAC;gBAEJ,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAExE,IAAI,OAAO,EAAE,CAAC;oBACZ,2DAA2D;oBAC3D,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAC1D,IAAI,YAAY,GAAG,KAAK,CAAC;oBACzB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;wBAC9B,IAAI,CAAC,YAAY,IAAI,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;4BAC3E,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;4BACtB,YAAY,GAAG,IAAI,CAAC;wBACtB,CAAC;6BAAM,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;4BACtE,0DAA0D;4BAC1D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;wBACvB,CAAC;oBACH,CAAC;oBACD,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC;oBAC/E,KAAK,CAAC,IAAI,CAAC;wBACT,SAAS;wBACT,SAAS,EAAE,KAAK;wBAChB,QAAQ;wBACR,UAAU;wBACV,iBAAiB;wBACjB,MAAM,EAAE,OAAO;qBAChB,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,6DAA6D;oBAC7D,4DAA4D;oBAC5D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;wBAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;4BACjC,IAAI,CAAC,IAAI,GAAG,yDAAyD,CAAC;4BACtE,SAAS;wBACX,CAAC;wBACD,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;wBAChF,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;wBAC7B,IAAI,OAAO,CAAC,IAAI;4BAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;oBAC7C,CAAC;oBACD,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC;oBAC9E,KAAK,CAAC,IAAI,CAAC;wBACT,SAAS;wBACT,SAAS,EAAE,KAAK;wBAChB,QAAQ;wBACR,UAAU;wBACV,iBAAiB;wBACjB,MAAM,EAAE,iBAAiB;qBAC1B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;YAExE,OAAO,EAAE,CAA6B;gBACpC,WAAW,EAAE,WAAW;gBACxB,OAAO;gBACP,UAAU,EAAE,eAAe,CAAC,MAAM;gBAClC,YAAY;gBACZ,KAAK;aACN,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/helpers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/helpers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAa9C,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAY3E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/helpers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAe9C,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAc3E"}

package/dist/tools/helpers/index.js

@@ -1,6 +1,7 @@
 import { registerRegoCoverageGaps } from './coverage-gaps.js';
 import { registerRegoDescribePolicy } from './describe-policy.js';
 import { registerRegoExplainDecision } from './explain-decision.js';
+import { registerRegoExplainUndefined } from './explain-undefined.js';
 import { registerRegoFix } from './fix.js';
 import { registerRegoFormatWrite } from './format-write.js';
 import { registerRegoGenerateTestSkeleton } from './generate-test-skeleton.js';
@@ -8,9 +9,11 @@ import { registerRegoInferInputSchema } from './infer-input-schema.js';
 import { registerRegoPolicyDiff } from './policy-diff.js';
 import { registerRegoSecurityAudit } from './security-audit.js';
 import { registerRegoSuggestFix } from './suggest-fix.js';
+import { registerRegoPlaygroundShare } from './playground-share.js';
 import { registerRegoVerify } from './verify.js';
 export function registerHelperTools(server, config) {
     registerRegoExplainDecision(server, config);
+    registerRegoExplainUndefined(server, config);
     registerRegoGenerateTestSkeleton(server, config);
     registerRegoDescribePolicy(server, config);
     registerRegoSuggestFix(server, config);
@@ -21,5 +24,6 @@ export function registerHelperTools(server, config) {
     registerRegoFormatWrite(server, config);
     registerRegoPolicyDiff(server, config);
     registerRegoVerify(server, config);
+    registerRegoPlaygroundShare(server, config);
 }
 //# sourceMappingURL=index.js.map

package/dist/tools/helpers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/helpers/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,MAAc;IACnE,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,gCAAgC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/helpers/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,MAAc;IACnE,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,gCAAgC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC"}

package/dist/tools/helpers/playground-share.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `rego_playground_share` -- publish a Rego policy as a public GitHub Gist
+ * and return a shareable URL.
+ *
+ * Why Gist and not the OPA playground? Every endpoint on
+ * play.openpolicyagent.org requires a GitHub OAuth session cookie -- there is
+ * no public API key path. Gists are a natural substitute: they render Rego
+ * with syntax highlighting, are forkable, and the raw URL is directly loadable
+ * by OPA or Conftest.
+ *
+ * Requires a GitHub personal access token with the `gist` scope, supplied via
+ * the GITHUB_TOKEN environment variable.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Config } from '../../config.js';
+export interface RegoPlaygroundShareOutput {
+    /** URL to the Gist page on github.com -- the primary shareable link. */
+    gistUrl: string;
+    /** Direct raw URL to the policy.rego file inside the Gist. */
+    rawPolicyUrl: string;
+    /** GitHub Gist ID. */
+    id: string;
+}
+export declare function registerRegoPlaygroundShare(server: McpServer, _config: Config): void;
+//# sourceMappingURL=playground-share.d.ts.map

package/dist/tools/helpers/playground-share.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"playground-share.d.ts","sourceRoot":"","sources":["../../../src/tools/helpers/playground-share.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAiC9C,MAAM,WAAW,yBAAyB;IACxC,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAC;CACZ;AAsBD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CA2GpF"}

package/dist/tools/helpers/playground-share.js

@@ -0,0 +1,117 @@
+import { z } from 'zod';
+import { err, ok } from '../../lib/errors.js';
+import { withToolEnvelope } from '../../lib/tool-helpers.js';
+// ─── Input schema ─────────────────────────────────────────────────────────────
+const RegoPlaygroundShareInput = {
+    policy: z.string().min(1).describe('Rego source code to share (the contents of a .rego file).'),
+    query: z
+        .string()
+        .optional()
+        .describe('Default query to evaluate against the policy, e.g. "data.authz.allow". ' +
+        'Stored in metadata.json alongside the policy file.'),
+    input: z
+        .string()
+        .optional()
+        .describe('Input document as a JSON string. Stored in metadata.json alongside the policy file.'),
+    data: z
+        .string()
+        .optional()
+        .describe('Data document as a JSON string. Stored in metadata.json alongside the policy file.'),
+    description: z
+        .string()
+        .optional()
+        .describe('Short description for the Gist (shown on github.com/gists).'),
+};
+// ─── Tool registration ────────────────────────────────────────────────────────
+export function registerRegoPlaygroundShare(server, _config) {
+    server.registerTool('rego_playground_share', {
+        title: 'Share Rego policy as a GitHub Gist',
+        description: 'Share a Rego policy with teammates or create a reproducible example by publishing it ' +
+            'as a public GitHub Gist. Returns { gistUrl, rawPolicyUrl, id }: the gistUrl renders ' +
+            'the policy with syntax highlighting on github.com; the rawPolicyUrl can be passed ' +
+            'directly to OPA (`opa eval -d <rawPolicyUrl> <query>`) or used as a data source in ' +
+            'Conftest. When query, input, or data are supplied, a metadata.json file is bundled ' +
+            'into the Gist so recipients have the full evaluation context to reproduce results. ' +
+            'Each call creates a new Gist -- use the returned id to reference it later. ' +
+            'Requires GITHUB_TOKEN in the environment (GitHub personal access token with the ' +
+            '"gist" scope); returns GITHUB_TOKEN_MISSING with setup instructions if unset.',
+        inputSchema: RegoPlaygroundShareInput,
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: true,
+        },
+    }, async ({ policy, query, input, data, description }, { signal }) => {
+        return withToolEnvelope(_config, async () => {
+            // ── Token check ────────────────────────────────────────────────────
+            const token = process.env['GITHUB_TOKEN'];
+            if (!token) {
+                return err('GITHUB_TOKEN_MISSING', 'GITHUB_TOKEN environment variable is not set. ' +
+                    'A GitHub personal access token with the "gist" scope is required to create Gists.', {
+                    hint: 'Create a token at https://github.com/settings/tokens (select "gist" scope), ' +
+                        'then set GITHUB_TOKEN in your shell or in the "env" block of your MCP client config.',
+                });
+            }
+            // ── Build Gist files ───────────────────────────────────────────────
+            const files = {
+                'policy.rego': { content: policy },
+            };
+            // Attach supplementary context as a second file only when at least
+            // one optional field was provided -- keeps single-file Gists clean.
+            const metadata = {};
+            if (query !== undefined)
+                metadata['query'] = query;
+            if (input !== undefined)
+                metadata['input'] = input;
+            if (data !== undefined)
+                metadata['data'] = data;
+            if (Object.keys(metadata).length > 0) {
+                files['metadata.json'] = { content: JSON.stringify(metadata, null, 2) };
+            }
+            const body = {
+                description: description ?? 'OPA Rego policy',
+                public: true,
+                files,
+            };
+            // ── POST to GitHub Gist API ────────────────────────────────────────
+            let response;
+            try {
+                response = await fetch('https://api.github.com/gists', {
+                    method: 'POST',
+                    headers: {
+                        Authorization: `Bearer ${token}`,
+                        Accept: 'application/vnd.github+json',
+                        'Content-Type': 'application/json',
+                        'X-GitHub-Api-Version': '2022-11-28',
+                    },
+                    body: JSON.stringify(body),
+                    signal,
+                });
+            }
+            catch (e) {
+                const message = e instanceof Error ? e.message : String(e);
+                return err('UNKNOWN_ERROR', `GitHub Gist API request failed: ${message}`);
+            }
+            if (!response.ok) {
+                const text = await response.text().catch(() => '');
+                return err('GIST_CREATE_FAILED', `GitHub Gist creation failed with HTTP ${response.status.toString()}.`, { details: { status: response.status, body: text } });
+            }
+            // ── Parse response ─────────────────────────────────────────────────
+            let gist;
+            try {
+                gist = (await response.json());
+            }
+            catch {
+                return err('GIST_CREATE_FAILED', 'GitHub returned an unparseable response body.');
+            }
+            const rawPolicyUrl = gist.files['policy.rego']?.raw_url ?? '';
+            return ok({
+                gistUrl: gist.html_url,
+                rawPolicyUrl,
+                id: gist.id,
+            });
+        });
+    });
+}
+//# sourceMappingURL=playground-share.js.map

package/dist/tools/helpers/playground-share.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"playground-share.js","sourceRoot":"","sources":["../../../src/tools/helpers/playground-share.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,iFAAiF;AAEjF,MAAM,wBAAwB,GAAG;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IAC/F,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,yEAAyE;QACvE,oDAAoD,CACvD;IACH,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,qFAAqF,CACtF;IACH,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,oFAAoF,CAAC;IACjG,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,6DAA6D,CAAC;CAC3E,CAAC;AA+BF,iFAAiF;AAEjF,MAAM,UAAU,2BAA2B,CAAC,MAAiB,EAAE,OAAe;IAC5E,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EACT,uFAAuF;YACvF,sFAAsF;YACtF,oFAAoF;YACpF,qFAAqF;YACrF,qFAAqF;YACrF,qFAAqF;YACrF,6EAA6E;YAC7E,kFAAkF;YAClF,+EAA+E;QACjF,WAAW,EAAE,wBAAwB;QACrC,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAChE,OAAO,gBAAgB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YAC1C,sEAAsE;YACtE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,GAAG,CACR,sBAAsB,EACtB,gDAAgD;oBAC9C,mFAAmF,EACrF;oBACE,IAAI,EACF,8EAA8E;wBAC9E,sFAAsF;iBACzF,CACF,CAAC;YACJ,CAAC;YAED,sEAAsE;YACtE,MAAM,KAAK,GAA6B;gBACtC,aAAa,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;aACnC,CAAC;YAEF,mEAAmE;YACnE,oEAAoE;YACpE,MAAM,QAAQ,GAA4B,EAAE,CAAC;YAC7C,IAAI,KAAK,KAAK,SAAS;gBAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;YACnD,IAAI,KAAK,KAAK,SAAS;gBAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;YACnD,IAAI,IAAI,KAAK,SAAS;gBAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YAChD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAC1E,CAAC;YAED,MAAM,IAAI,GAAmB;gBAC3B,WAAW,EAAE,WAAW,IAAI,iBAAiB;gBAC7C,MAAM,EAAE,IAAI;gBACZ,KAAK;aACN,CAAC;YAEF,sEAAsE;YACtE,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,8BAA8B,EAAE;oBACrD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,KAAK,EAAE;wBAChC,MAAM,EAAE,6BAA6B;wBACrC,cAAc,EAAE,kBAAkB;wBAClC,sBAAsB,EAAE,YAAY;qBACrC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC1B,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC3D,OAAO,GAAG,CAAC,eAAe,EAAE,mCAAmC,OAAO,EAAE,CAAC,CAAC;YAC5E,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnD,OAAO,GAAG,CACR,oBAAoB,EACpB,yCAAyC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EACtE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CACrD,CAAC;YACJ,CAAC;YAED,sEAAsE;YACtE,IAAI,IAAwB,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,CAAC,oBAAoB,EAAE,+CAA+C,CAAC,CAAC;YACpF,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;YAE9D,OAAO,EAAE,CAA4B;gBACnC,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,YAAY;gBACZ,EAAE,EAAE,IAAI,CAAC,EAAE;aACZ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/index.d.ts

@@ -5,7 +5,7 @@
  * here in order; ordering doesn't affect behavior but keeps the
  * declaration site tidy.
  *
- * Tools (49 total):
+ * Tools (52 total):
  *   Category A -- Authoring:        rego_format, rego_check,
  *                                   rego_check_schema, rego_lint,
  *                                   rego_parse_ast, rego_inspect,
@@ -14,7 +14,8 @@
  *   Category B -- Evaluation:       rego_eval, rego_eval_with_explain,
  *                                   rego_eval_with_profile,
  *                                   rego_eval_with_coverage, rego_test,
- *                                   rego_bench, rego_compile_query
+ *                                   rego_test_multiroot, rego_bench,
+ *                                   rego_compile_query
  *   Category C -- Bundles:          opa_bundle_build, opa_bundle_sign,
  *                                   opa_bundle_verify, opa_exec
  *   Category D -- Server mgmt:      opa_list_policies, opa_get_policy,
@@ -24,6 +25,7 @@
  *                                   opa_query_decision, opa_compile_query,
  *                                   opa_health, opa_status, opa_config
  *   Category E -- Helpers:          rego_explain_decision,
+ *                                   rego_explain_undefined,
  *                                   rego_generate_test_skeleton,
  *                                   rego_describe_policy,
  *                                   rego_suggest_fix,
@@ -31,7 +33,8 @@
  *                                   rego_security_audit,
  *                                   rego_infer_input_schema,
  *                                   rego_fix, rego_format_write,
- *                                   rego_policy_diff, rego_verify
+ *                                   rego_policy_diff, rego_verify,
+ *                                   rego_playground_share
  *   Category F -- Conftest:         conftest_test, conftest_verify,
  *                                   conftest_pull, conftest_push
  *   Category G -- Meta:             mcp_server_info

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAS3C,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAQrE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAS3C,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAQrE"}