@pellux/goodvibes-sdk 0.18.11 → 0.18.12

package/dist/platform/runtime/perf/types.d.ts

@@ -1,69 +0,0 @@
-/**
- * Performance budget types for CI regression gates.
- *
- * Defines the contracts for budget definitions, collected metrics,
- * violations, and aggregated reports.
- */
-/** Unit of measurement for a performance budget threshold. */
-export type PerfUnit = 'ms' | 'bytes' | 'count' | 'percent';
-/**
- * A performance budget defines an acceptable threshold for a named metric.
- * Violations are tracked consecutively; failure occurs when consecutiveViolations
- * exceeds the tolerance.
- */
-export interface PerfBudget {
-    /** Human-readable name for this budget. */
-    name: string;
-    /** The metric key this budget applies to. */
-    metric: string;
-    /** Acceptable upper bound for the metric value. */
-    threshold: number;
-    /** Unit of the threshold value. */
-    unit: PerfUnit;
-    /** Number of consecutive violations that triggers failure (e.g., 3 means fail on 3rd consecutive violation). */
-    tolerance: number;
-    /** Describes what this budget measures and why it matters. */
-    description: string;
-}
-/**
- * A single performance metric sample collected at a point in time.
- */
-export interface PerfMetric {
-    /** The metric key (should match a PerfBudget.metric). */
-    name: string;
-    /** The sampled value. */
-    value: number;
-    /** Unit of the value. */
-    unit: string;
-    /** Unix epoch milliseconds when this sample was collected. */
-    timestamp: number;
-}
-/**
- * A budget violation record, produced when a metric exceeds its threshold.
- */
-export interface BudgetViolation {
-    /** The budget that was violated. */
-    budget: PerfBudget;
-    /** The actual metric value that triggered the violation. */
-    actual: number;
-    /** How much the actual value exceeded the threshold (actual - threshold). */
-    exceededBy: number;
-    /** Number of consecutive samples that have violated this budget. */
-    consecutiveViolations: number;
-    /** Warning message when the metric was not found in the snapshot. */
-    warning?: string;
-}
-/**
- * Aggregated performance report produced by a monitoring run.
- */
-export interface PerfReport {
-    /** Unix epoch milliseconds when this report was generated. */
-    timestamp: number;
-    /** All metrics collected during this monitoring run. */
-    metrics: PerfMetric[];
-    /** Violations where consecutiveViolations exceeds tolerance. */
-    violations: BudgetViolation[];
-    /** True if all budgets passed (no active violations). */
-    passed: boolean;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/platform/runtime/perf/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/perf/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,8DAA8D;AAC9D,MAAM,MAAM,QAAQ,GAAG,IAAI,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAE5D;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,IAAI,EAAE,QAAQ,CAAC;IACf,gHAAgH;IAChH,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,MAAM,EAAE,UAAU,CAAC;IACnB,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,gEAAgE;IAChE,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,yDAAyD;IACzD,MAAM,EAAE,OAAO,CAAC;CACjB"}

package/dist/platform/runtime/perf/types.js

@@ -1,7 +0,0 @@
-/**
- * Performance budget types for CI regression gates.
- *
- * Defines the contracts for budget definitions, collected metrics,
- * violations, and aggregated reports.
- */
-export {};

package/dist/platform/runtime/permissions/decision-log.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"decision-log.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/permissions/decision-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AASrD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;IACZ,2CAA2C;IAC3C,QAAQ,EAAE,kBAAkB,CAAC;CAC9B;AAID,6CAA6C;AAC7C,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID;;;;;;;;GAQG;AACH,qBAAa,WAAW;IACtB,8CAA8C;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;IAC1D,0DAA0D;IAC1D,OAAO,CAAC,IAAI,CAAK;IACjB,qDAAqD;IACrD,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,GAAG,CAAK;IAChB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,UAAU,GAAE,MAA4B;IAKpD;;;;;;;OAOG;IACH,MAAM,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;IAQ1C;;OAEG;IACH,OAAO,CAAC,OAAO;IAWf;;;;OAIG;IACH,KAAK,CAAC,OAAO,GAAE,gBAAqB,GAAG,gBAAgB,EAAE;IAmBzD;;OAEG;IACH,MAAM,IAAI,gBAAgB,GAAG,SAAS;IAOtC;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;;OAGG;IACH,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED;;;OAGG;IACH,KAAK,IAAI,IAAI;IAOb;;OAEG;IACH,OAAO,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;CAU/E"}

package/dist/platform/runtime/permissions/divergence-dashboard.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"divergence-dashboard.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/permissions/divergence-dashboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAI3D;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,mDAAmD;IACnD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,mDAAmD;IACnD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,gEAAgE;IAChE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAElE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,oDAAoD;IACpD,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,yEAAyE;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,kCAAkC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kDAAkD;IAClD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,gDAAgD;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,oDAAoD;IACpD,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,mCAAmC;IACnC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,oCAAoC;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAChD,6CAA6C;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAID;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD;;;;;;OAMG;IACH,OAAO,CAAC,KAAK,CAAiB;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAQ;IACjD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAM;IAC/C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAO;gBAG9C,SAAS,EAAE,mBAAmB,EAC9B,IAAI,EAAE,cAAc,EACpB,MAAM,GAAE,yBAA8B;IASxC;;;;;;;OAOG;IACH,gBAAgB,IAAI,iBAAiB;IAKrC,wGAAwG;IACxG,OAAO,CAAC,YAAY;IAoCpB;;;;;OAKG;IACH,gBAAgB,IAAI,oBAAoB;IAqBxC;;OAEG;IACH,QAAQ,IAAI,SAAS,oBAAoB,EAAE;IAI3C;;OAEG;IACH,WAAW,IAAI,2BAA2B;IAW1C;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAUnC;;OAEG;IACH,OAAO,IAAI,cAAc;IAIzB;;OAEG;IACH,YAAY,IAAI,MAAM;IAItB;;OAEG;IACH,aAAa,IAAI,OAAO;CAGzB;AAID;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;gBAErB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB;CAKrD"}

package/dist/platform/runtime/permissions/evaluator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/permissions/evaluator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,cAAc,EAMd,iBAAiB,EAClB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAmNhD;;;;;;;;;;;GAWG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmB;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmC;IAChE,OAAO,CAAC,uBAAuB,CAAgB;IAC/C,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;IAC1B,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAmB;IAE/C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAO;gBAEzC,MAAM,EAAE,iBAAiB,EAAE,UAAU,CAAC,EAAE,gBAAgB;IASpE;;;;;;;;OAQG;IACH,QAAQ,CACN,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,kBAAkB;IAuHrB;;;;;;;;OAQG;IACH,qBAAqB,CACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,OAAO,EACjB,QAAQ,UAAQ,GACf,IAAI;IAeP;;OAEG;IACH,OAAO,IAAI,cAAc;IAMzB,OAAO,CAAC,QAAQ;IA6BhB,OAAO,CAAC,aAAa;CAUtB"}

package/dist/platform/runtime/permissions/lint.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"lint.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/permissions/lint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAc,MAAM,YAAY,CAAC;AAEhE,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AA0DD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,GAAG,iBAAiB,EAAE,CA0B/E"}

package/dist/platform/runtime/permissions/normalization/ast.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ast.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/normalization/ast.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI/C;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,oBAAoB;IACpB,IAAI,EAAE,SAAS,CAAC;IAChB,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,gDAAgD;IAChD,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,yBAAyB;IACzB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,IAAI,EAAE,SAAS,CAAC;IAChB,mCAAmC;IACnC,KAAK,EAAE,SAAS,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oBAAoB;IACpB,IAAI,EAAE,UAAU,CAAC;IACjB,8CAA8C;IAC9C,QAAQ,EAAE,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC;IAC5B,yBAAyB;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,0BAA0B;IAC1B,KAAK,EAAE,SAAS,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,oBAAoB;IACpB,IAAI,EAAE,UAAU,CAAC;IACjB,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED,uDAAuD;AACvD,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,CAAC;AAI7E;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,GAAE,WAAW,EAAO,GAAG,WAAW,EAAE,CAiB3F;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAOpD"}

package/dist/platform/runtime/permissions/normalization/canonicalizer.d.ts

@@ -1,26 +0,0 @@
-/**
- * Canonicalizer — resolves raw command tokens to their canonical command names.
- *
- * Strips:
- *  - Absolute and relative path prefixes (e.g. /usr/bin/rm → rm)
- *  - Environment variable assignments that prefix the command
- *    (e.g. FOO=bar git → git)
- *  - Quoted wrappers around the command name
- *
- * Returns the lowercase bare command name, or an empty string if the
- * input cannot be resolved.
- */
-/**
- * Resolves a raw command token to its canonical bare command name.
- *
- * Processing order:
- *  1. Strip quotes.
- *  2. Strip leading environment variable assignments.
- *  3. Extract the basename (strip directory path).
- *  4. Lowercase the result.
- *
- * @param raw - The raw command token value.
- * @returns The canonical command name (e.g. "rm", "git", "npm").
- */
-export declare function canonicalize(raw: string): string;
-//# sourceMappingURL=canonicalizer.d.ts.map

package/dist/platform/runtime/permissions/normalization/canonicalizer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"canonicalizer.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/normalization/canonicalizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAqBH;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAuBhD"}

package/dist/platform/runtime/permissions/normalization/canonicalizer.js

@@ -1,60 +0,0 @@
-/**
- * Canonicalizer — resolves raw command tokens to their canonical command names.
- *
- * Strips:
- *  - Absolute and relative path prefixes (e.g. /usr/bin/rm → rm)
- *  - Environment variable assignments that prefix the command
- *    (e.g. FOO=bar git → git)
- *  - Quoted wrappers around the command name
- *
- * Returns the lowercase bare command name, or an empty string if the
- * input cannot be resolved.
- */
-/** Pattern for an environment variable assignment (KEY=value). */
-const ENV_VAR_PREFIX = /^[A-Z_][A-Z0-9_]*=/i;
-/**
- * Strips shell quoting (single or double) from a string.
- *
- * @param value - The raw token value, potentially quoted.
- * @returns The unquoted string value.
- */
-function stripQuotes(value) {
-    if ((value.startsWith('"') && value.endsWith('"')) ||
-        (value.startsWith("'") && value.endsWith("'"))) {
-        return value.slice(1, -1);
-    }
-    return value;
-}
-/**
- * Resolves a raw command token to its canonical bare command name.
- *
- * Processing order:
- *  1. Strip quotes.
- *  2. Strip leading environment variable assignments.
- *  3. Extract the basename (strip directory path).
- *  4. Lowercase the result.
- *
- * @param raw - The raw command token value.
- * @returns The canonical command name (e.g. "rm", "git", "npm").
- */
-export function canonicalize(raw) {
-    if (!raw)
-        return '';
-    let value = stripQuotes(raw);
-    // Strip env var prefixes (e.g. "FOO=bar command" — take the last space-separated part)
-    const parts = value.split(/\s+/);
-    // Walk forward past any KEY=value segments
-    let commandPart = parts[0] ?? '';
-    for (const part of parts) {
-        if (!ENV_VAR_PREFIX.test(part)) {
-            commandPart = part;
-            break;
-        }
-    }
-    // Extract basename from path (e.g. /usr/bin/git → git, ./scripts/deploy.sh → deploy.sh)
-    const lastSlash = commandPart.lastIndexOf('/');
-    if (lastSlash !== -1) {
-        commandPart = commandPart.slice(lastSlash + 1);
-    }
-    return commandPart.toLowerCase();
-}

package/dist/platform/runtime/permissions/normalization/classifier.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"classifier.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/normalization/classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAmKpB;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,CAAC,EAAE,qBAAqB,EACxB,CAAC,EAAE,qBAAqB,GACvB,qBAAqB,CAIvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,cAAc,GAAG,qBAAqB,CAyE1E;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,cAAc,EAAE,GACzB,IAAI,CAAC,iBAAiB,EAAE,UAAU,GAAG,UAAU,CAAC,CAoClD"}

package/dist/platform/runtime/permissions/normalization/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/normalization/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EACV,YAAY,EACZ,cAAc,EACd,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,SAAS,EACT,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,YAAY,GACb,MAAM,UAAU,CAAC;AAElB,YAAY,EACV,cAAc,EACd,eAAe,GAChB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAKxH,OAAO,KAAK,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAG3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,cAAc,GAAE,WAAW,CAAC,qBAAqB,CAA2B,GAC3E,eAAe,CAGjB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAWnE"}

package/dist/platform/runtime/permissions/normalization/parser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/normalization/parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EACV,SAAS,EAKV,MAAM,UAAU,CAAC;AA+JlB;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,SAAS,CAc1D;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAG1D"}

package/dist/platform/runtime/permissions/normalization/segmenter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"segmenter.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/normalization/segmenter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAqC/D;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,cAAc,EAAE,CAyBhE"}

package/dist/platform/runtime/permissions/normalization/tokenizer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokenizer.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/normalization/tokenizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAEvC;;;;;GAKG;AACH,eAAO,MAAM,eAAe,OAAQ,CAAC;AA2HrC;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CA0BxD"}

package/dist/platform/runtime/permissions/normalization/types.d.ts

@@ -1,63 +0,0 @@
-/**
- * Command normalization types for the runtime permissions pipeline.
- *
- * Defines the token, segment, classification, and normalized command
- * types used throughout the command normalization pipeline.
- */
-/**
- * A single lexical token parsed from a shell command string.
- */
-export interface CommandToken {
-    /** The raw string value of this token. */
-    value: string;
-    /** Semantic role of the token within the command. */
-    type: 'command' | 'argument' | 'flag' | 'operator' | 'path' | 'redirect' | 'pipe' | 'subshell';
-    /** Zero-based character offset in the original command string. */
-    position: number;
-}
-/**
- * A single command segment produced by splitting a compound command
- * on shell operators (&&, ||, ;, |).
- */
-export interface CommandSegment {
-    /** The raw, unsplit substring for this segment. */
-    raw: string;
-    /** Ordered list of tokens parsed from this segment. */
-    tokens: CommandToken[];
-    /** The resolved canonical command name (first token, path-stripped). */
-    command: string;
-    /** Positional arguments (tokens of type 'argument'). */
-    args: string[];
-    /** Flags and options (tokens of type 'flag'). */
-    flags: string[];
-    /**
-     * The operator that joins this segment to the NEXT one, if any.
-     * Undefined for the last segment in a compound command.
-     */
-    operator?: '&&' | '||' | ';' | '|';
-}
-/**
- * The risk classification tier for a command or command segment.
- *
- * Priority order (highest to lowest): destructive > escalation > network > write > read.
- */
-export type CommandClassification = 'read' | 'write' | 'network' | 'destructive' | 'escalation';
-/**
- * The fully normalised representation of a shell command string,
- * including all segments, classifications, and dangerous-pattern analysis.
- */
-export interface NormalizedCommand {
-    /** The original, unmodified command string. */
-    original: string;
-    /** Ordered list of command segments (split on &&, ||, ;, |). */
-    segments: CommandSegment[];
-    /** All unique classifications found across all segments. */
-    classifications: CommandClassification[];
-    /** The highest-risk classification among all segments. */
-    highestClassification: CommandClassification;
-    /** True if any dangerous patterns were detected. */
-    hasDangerousPatterns: boolean;
-    /** Descriptions of each dangerous pattern detected, if any. */
-    dangerousPatterns?: string[];
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/platform/runtime/permissions/normalization/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/normalization/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,IAAI,EACA,SAAS,GACT,UAAU,GACV,MAAM,GACN,UAAU,GACV,MAAM,GACN,UAAU,GACV,MAAM,GACN,UAAU,CAAC;IACf,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,iDAAiD;IACjD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,QAAQ,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAC7B,MAAM,GACN,OAAO,GACP,SAAS,GACT,aAAa,GACb,YAAY,CAAC;AAEjB;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,4DAA4D;IAC5D,eAAe,EAAE,qBAAqB,EAAE,CAAC;IACzC,0DAA0D;IAC1D,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,oDAAoD;IACpD,oBAAoB,EAAE,OAAO,CAAC;IAC9B,+DAA+D;IAC/D,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B"}

package/dist/platform/runtime/permissions/normalization/types.js

@@ -1,7 +0,0 @@
-/**
- * Command normalization types for the runtime permissions pipeline.
- *
- * Defines the token, segment, classification, and normalized command
- * types used throughout the command normalization pipeline.
- */
-export {};

package/dist/platform/runtime/permissions/normalization/verdict.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verdict.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/normalization/verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAKvD;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,qBAAqB,CAIrE,CAAC;AAIH;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,cAAc,EAAE,qBAAqB,CAAC;IACtC,kDAAkD;IAClD,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,sFAAsF;IACtF,cAAc,EAAE,OAAO,CAAC;IACxB,sDAAsD;IACtD,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,2DAA2D;IAC3D,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,oDAAoD;IACpD,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,uDAAuD;IACvD,cAAc,EAAE,OAAO,CAAC;CACzB;AAmID;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,WAAW,EACjB,cAAc,GAAE,WAAW,CAAC,qBAAqB,CAA2B,GAC3E,cAAc,CAiEhB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,CAsB3F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,SAAS,EACd,cAAc,GAAE,WAAW,CAAC,qBAAqB,CAA2B,GAC3E,eAAe,CA0CjB"}

package/dist/platform/runtime/permissions/policy-loader.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy-loader.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/permissions/policy-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,oBAAoB,CAAC;AAK5B;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iDAAiD;IACjD,cAAc,EAAE,cAAc,CAAC;IAC/B,qDAAqD;IACrD,eAAe,EAAE,eAAe,CAAC;IACjC,wCAAwC;IACxC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,EAAE,EAAE,OAAO,CAAC;IACZ,qEAAqE;IACrE,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,wCAAwC;IACxC,UAAU,EAAE,gBAAgB,CAAC;IAC7B,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,4CAA4C;aAC5B,QAAQ,EAAE,cAAc;IACxC,8BAA8B;aACd,eAAe,EAAE,eAAe;;IAHhD,4CAA4C;IAC5B,QAAQ,EAAE,cAAc;IACxC,8BAA8B;IACd,eAAe,EAAE,eAAe,EAChD,OAAO,EAAE,MAAM;CAKlB;AAID;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAE7B;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAEpC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAID;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,kBAAkB,CAAC,mBAAmB,CAAC,EAC/C,OAAO,GAAE,mBAAwB,GAChC,gBAAgB,CA8DlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,mBAAmB,GAC3B,kBAAkB,CAAC,mBAAmB,CAAC,CAOzC"}

package/dist/platform/runtime/permissions/policy-registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy-registry.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/permissions/policy-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEvH,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAInE;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,GAC5B,QAAQ,GACR,YAAY,GACZ,WAAW,GACX,QAAQ,GACR,aAAa,CAAC;AAElB;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,oDAAoD;IACpD,MAAM,EAAE,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;IAChD,yCAAyC;IACzC,UAAU,EAAE,gBAAgB,CAAC;IAC7B,gEAAgE;IAChE,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,wCAAwC;IACxC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oEAAoE;IACpE,UAAU,CAAC,EAAE,iBAAiB,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,uDAAuD;IACvD,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,0DAA0D;IAC1D,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IACrE,uCAAuC;IACvC,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uCAAuC;IACvC,EAAE,EAAE,OAAO,CAAC;IACZ,mDAAmD;IACnD,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,sCAAsC;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAID;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAoC;IACpD,OAAO,CAAC,UAAU,CAAoC;IACtD,OAAO,CAAC,QAAQ,CAA6B;IAE7C,SAAgB,oBAAoB,MAAM;IAE1C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsB;gBAEzC,MAAM,GAAE,oBAAyB;IAO7C;;;;;;;;OAQG;IACI,aAAa,CAClB,MAAM,EAAE,kBAAkB,CAAC,mBAAmB,CAAC,GAC9C,gBAAgB;IAqBnB;;;;;;;OAOG;IACI,cAAc,IAAI,OAAO;IAQhC;;;;;;;;;OASG;IACI,sBAAsB,CAC3B,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,iBAAiB,GAC5B,OAAO;IAeV;;;;;;;;;;OAUG;IACI,OAAO,CAAC,KAAK,UAAQ,GAAG,aAAa;IA4E5C;;;;;;;OAOG;IACI,QAAQ,IAAI,cAAc;IA6BjC;;;;;;;;OAQG;IACI,IAAI,CACT,SAAS,CAAC,EAAE,UAAU,EAAE,EACxB,OAAO,CAAC,EAAE,UAAU,EAAE,GACrB,gBAAgB,GAAG,IAAI;IAsD1B,2EAA2E;IACpE,UAAU,IAAI,mBAAmB,GAAG,IAAI;IAI/C,oEAAoE;IAC7D,YAAY,IAAI,mBAAmB,GAAG,IAAI;IAIjD,0EAA0E;IACnE,UAAU,IAAI,mBAAmB,EAAE;IAI1C;;;;;OAKG;IACI,iBAAiB,IAAI,cAAc;IAQ1C,OAAO,CAAC,eAAe;CAOxB"}

package/dist/platform/runtime/permissions/policy-signer.d.ts

@@ -1,104 +0,0 @@
-/**
- * GC-PERM-011 — Policy signing and provenance for the permissions runtime.
- *
- * Provides HMAC-SHA256-based signature creation and verification for policy
- * bundles. Used by the policy loader to validate bundle integrity before
- * the evaluator processes any rules.
- *
- * Signing key is supplied at runtime (environment or config). The signer
- * never stores keys in bundle payloads.
- */
-/**
- * Opaque identifier for a specific policy bundle instance.
- *
- * Used to correlate decisions back to the bundle that produced them.
- * Typically a content hash or UUID assigned at bundle creation.
- */
-export type PolicyBundleId = string;
-/**
- * Signature validation outcome for a loaded policy bundle.
- *
- * - `valid`    — Signature present and verified against the payload.
- * - `invalid`  — Signature present but verification failed (tampered/wrong key).
- * - `missing`  — No signature field present in the bundle (returned by verifyBundle directly).
- * - `unsigned` — Bundle has no signature field; loader uses this in non-managed mode.
- * - `skipped`  — Signature check was bypassed (no key supplied).
- */
-export type SignatureStatus = 'valid' | 'invalid' | 'missing' | 'unsigned' | 'skipped';
-/**
- * Describes the origin of the policy bundle for audit and UI display.
- *
- * - `local-file`  — Loaded from a local filesystem path.
- * - `remote-url`  — Fetched from a remote URL (managed infra).
- * - `inline`      — Embedded directly in runtime configuration.
- * - `test-fixture`— Created by test infrastructure; never production.
- */
-export type ProvenanceSource = 'local-file' | 'remote-url' | 'inline' | 'test-fixture';
-/**
- * A signed policy bundle as it appears on disk or over the wire.
- *
- * The `signature` field contains the hex-encoded HMAC-SHA256 digest of
- * the canonical JSON serialisation of `{ bundleId, issuedAt, issuer, payload }`.
- */
-export interface SignedPolicyBundle<T = unknown> {
-    /** Opaque bundle identifier (UUID or content hash). */
-    bundleId: PolicyBundleId;
-    /** ISO 8601 timestamp of when the bundle was signed. */
-    issuedAt: string;
-    /** The actual policy payload (rules array, metadata, etc.). */
-    payload: T;
-    /**
-     * Hex-encoded HMAC-SHA256 of the canonical JSON of `{ bundleId, issuedAt, issuer, payload }`.
-     * Absent when the bundle is unsigned.
-     */
-    signature?: string;
-    /** Human-readable hint about the signer or issuer. */
-    issuer?: string;
-}
-/**
- * Result returned by `verifyBundle()`.
- */
-export interface VerifyResult {
-    /** Whether the bundle signature is valid (false for missing/invalid). */
-    ok: boolean;
-    /** Validation outcome detail. */
-    status: SignatureStatus;
-    /** Human-readable explanation of the outcome. */
-    message: string;
-}
-/**
- * canonicalise — Produces a deterministic JSON string for the given value.
- *
- * Keys are sorted recursively so that the representation is stable
- * regardless of insertion order, ensuring consistent HMAC inputs.
- *
- * @param value — The value to serialise.
- */
-export declare function canonicalise(value: unknown): string;
-/**
- * signBundle — Creates a signed policy bundle from a payload.
- *
- * Generates a hex-encoded HMAC-SHA256 signature over the canonical JSON
- * of the payload and embeds it in the returned `SignedPolicyBundle`.
- *
- * @param bundleId — Unique identifier for this bundle.
- * @param payload  — The policy payload to sign.
- * @param key      — Raw signing key (Buffer or hex string).
- * @param issuer   — Optional human-readable issuer label.
- */
-export declare function signBundle<T>(bundleId: PolicyBundleId, payload: T, key: Buffer | string, issuer?: string): SignedPolicyBundle<T>;
-/**
- * verifyBundle — Validates the HMAC-SHA256 signature of a policy bundle.
- *
- * Computes the expected HMAC over the canonical payload and performs
- * a constant-time comparison against the stored signature to prevent
- * timing side-channel attacks.
- *
- * Returns `{ ok: false, status: 'missing' }` when the bundle carries no
- * signature field. Callers decide whether to accept unsigned bundles.
- *
- * @param bundle — The bundle to verify.
- * @param key    — The verification key (Buffer or hex string).
- */
-export declare function verifyBundle<T>(bundle: SignedPolicyBundle<T>, key: Buffer | string): VerifyResult;
-//# sourceMappingURL=policy-signer.d.ts.map

package/dist/platform/runtime/permissions/policy-signer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy-signer.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/permissions/policy-signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAEvF;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,cAAc,CAAC;AAIvF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,uDAAuD;IACvD,QAAQ,EAAE,cAAc,CAAC;IACzB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,OAAO,EAAE,CAAC,CAAC;IACX;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,EAAE,EAAE,OAAO,CAAC;IACZ,iCAAiC;IACjC,MAAM,EAAE,eAAe,CAAC;IACxB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;CACjB;AAID;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAWnD;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAC1B,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,CAAC,EACV,GAAG,EAAE,MAAM,GAAG,MAAM,EACpB,MAAM,CAAC,EAAE,MAAM,GACd,kBAAkB,CAAC,CAAC,CAAC,CAiBvB;AAID;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAC5B,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAC7B,GAAG,EAAE,MAAM,GAAG,MAAM,GACnB,YAAY,CAyEd"}

package/dist/platform/runtime/permissions/policy-signer.js

@@ -1,145 +0,0 @@
-/**
- * GC-PERM-011 — Policy signing and provenance for the permissions runtime.
- *
- * Provides HMAC-SHA256-based signature creation and verification for policy
- * bundles. Used by the policy loader to validate bundle integrity before
- * the evaluator processes any rules.
- *
- * Signing key is supplied at runtime (environment or config). The signer
- * never stores keys in bundle payloads.
- */
-import { createHmac, timingSafeEqual } from 'node:crypto';
-// ── Canonical serialisation ───────────────────────────────────────────────────
-/**
- * canonicalise — Produces a deterministic JSON string for the given value.
- *
- * Keys are sorted recursively so that the representation is stable
- * regardless of insertion order, ensuring consistent HMAC inputs.
- *
- * @param value — The value to serialise.
- */
-export function canonicalise(value) {
-    if (value === null || typeof value !== 'object') {
-        return JSON.stringify(value);
-    }
-    if (Array.isArray(value)) {
-        return '[' + value.map(canonicalise).join(',') + ']';
-    }
-    const obj = value;
-    const keys = Object.keys(obj).sort();
-    const pairs = keys.map((k) => `${JSON.stringify(k)}:${canonicalise(obj[k])}`);
-    return '{' + pairs.join(',') + '}';
-}
-// ── Signing ───────────────────────────────────────────────────────────────────
-/**
- * signBundle — Creates a signed policy bundle from a payload.
- *
- * Generates a hex-encoded HMAC-SHA256 signature over the canonical JSON
- * of the payload and embeds it in the returned `SignedPolicyBundle`.
- *
- * @param bundleId — Unique identifier for this bundle.
- * @param payload  — The policy payload to sign.
- * @param key      — Raw signing key (Buffer or hex string).
- * @param issuer   — Optional human-readable issuer label.
- */
-export function signBundle(bundleId, payload, key, issuer) {
-    const issuedAt = new Date().toISOString();
-    const composite = { bundleId, issuedAt, issuer, payload };
-    const canonical = canonicalise(composite);
-    const keyBuf = typeof key === 'string' ? Buffer.from(key, 'hex') : key;
-    const signature = createHmac('sha256', keyBuf)
-        .update(canonical, 'utf8')
-        .digest('hex');
-    const bundle = {
-        bundleId,
-        issuedAt,
-        payload,
-        signature,
-    };
-    if (issuer !== undefined)
-        bundle.issuer = issuer;
-    return bundle;
-}
-// ── Verification ──────────────────────────────────────────────────────────────
-/**
- * verifyBundle — Validates the HMAC-SHA256 signature of a policy bundle.
- *
- * Computes the expected HMAC over the canonical payload and performs
- * a constant-time comparison against the stored signature to prevent
- * timing side-channel attacks.
- *
- * Returns `{ ok: false, status: 'missing' }` when the bundle carries no
- * signature field. Callers decide whether to accept unsigned bundles.
- *
- * @param bundle — The bundle to verify.
- * @param key    — The verification key (Buffer or hex string).
- */
-export function verifyBundle(bundle, key) {
-    if (bundle.signature === undefined || bundle.signature === '') {
-        return {
-            ok: false,
-            status: 'missing',
-            message: `Bundle "${bundle.bundleId}" carries no signature.`,
-        };
-    }
-    const composite = {
-        bundleId: bundle.bundleId,
-        issuedAt: bundle.issuedAt,
-        issuer: bundle.issuer,
-        payload: bundle.payload,
-    };
-    const canonical = canonicalise(composite);
-    const keyBuf = typeof key === 'string' ? Buffer.from(key, 'hex') : key;
-    let expected;
-    try {
-        expected = createHmac('sha256', keyBuf)
-            .update(canonical, 'utf8')
-            .digest();
-    }
-    catch {
-        // Non-fatal: key is malformed; treat as invalid
-        return {
-            ok: false,
-            status: 'invalid',
-            message: `Bundle "${bundle.bundleId}": key error during signature computation.`,
-        };
-    }
-    if (!/^[0-9a-f]+$/i.test(bundle.signature)) {
-        return {
-            ok: false,
-            status: 'invalid',
-            message: `Bundle "${bundle.bundleId}": signature is not valid hex.`,
-        };
-    }
-    let actual;
-    try {
-        actual = Buffer.from(bundle.signature, 'hex');
-    }
-    catch {
-        return {
-            ok: false,
-            status: 'invalid',
-            message: `Bundle "${bundle.bundleId}": signature is not valid hex.`,
-        };
-    }
-    if (expected.length !== actual.length) {
-        return {
-            ok: false,
-            status: 'invalid',
-            message: `Bundle "${bundle.bundleId}": signature length mismatch.`,
-        };
-    }
-    const valid = timingSafeEqual(expected, actual);
-    if (!valid) {
-        return {
-            ok: false,
-            status: 'invalid',
-            message: `Bundle "${bundle.bundleId}": signature mismatch — payload may be tampered.`,
-        };
-    }
-    return {
-        ok: true,
-        status: 'valid',
-        message: `Bundle "${bundle.bundleId}": signature valid.`,
-    };
-}

package/dist/platform/runtime/permissions/risk-language.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"risk-language.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/permissions/risk-language.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAqB5D,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAEhF"}

package/dist/platform/runtime/permissions/risk-model.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"risk-model.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/permissions/risk-model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjG,MAAM,MAAM,oBAAoB,GAC5B,YAAY,GACZ,YAAY,GACZ,gBAAgB,GAChB,mBAAmB,GACnB,oBAAoB,GACpB,eAAe,GACf,iBAAiB,GACjB,eAAe,GACf,gBAAgB,GAChB,iBAAiB,GACjB,aAAa,GACb,uBAAuB,GACvB,gBAAgB,GAChB,kBAAkB,GAClB,gBAAgB,GAChB,SAAS,CAAC;AAEd,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAcD,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,yBAAyB,GAClC,wBAAwB,CAgD1B"}

package/dist/platform/runtime/permissions/rules/arg-shape.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"arg-shape.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/rules/arg-shape.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,cAAc,EACf,MAAM,aAAa,CAAC;AAErB,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC;CACtB;AA2CD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,YAAY,EAClB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,kBAAkB,CA0DpB"}

package/dist/platform/runtime/permissions/rules/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/rules/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,YAAY,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,YAAY,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/platform/runtime/permissions/rules/mode-constraint.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mode-constraint.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/rules/mode-constraint.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,cAAc,EACf,MAAM,aAAa,CAAC;AAErB,qDAAqD;AACrD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC;CACtB;AAeD;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,kBAAkB,EACxB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,cAAc,EAC1B,cAAc,EAAE,qBAAqB,GAAG,SAAS,GAChD,wBAAwB,CAoD1B"}

package/dist/platform/runtime/permissions/rules/network-scope.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"network-scope.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/rules/network-scope.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACf,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,eAAe,EACrB,MAAM,qCAAqC,CAAC;AAE7C;;;;;;GAMG;AACH,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,CAAC;AAElD,mDAAmD;AACnD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC;CACtB;AA2ED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,gBAAgB,EACtB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,sBAAsB,CAoExB"}

package/dist/platform/runtime/permissions/rules/path-scope.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"path-scope.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/rules/path-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACf,MAAM,aAAa,CAAC;AAErB,gDAAgD;AAChD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC;CACtB;AA4DD;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,aAAa,EACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,WAAW,CAAC,EAAE,MAAM,GACnB,mBAAmB,CAgErB"}

package/dist/platform/runtime/permissions/rules/prefix.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"prefix.d.ts","sourceRoot":"","sources":["../../../../../src/platform/runtime/permissions/rules/prefix.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,UAAU,EACV,cAAc,EACf,MAAM,aAAa,CAAC;AAErB,6CAA6C;AAC7C,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC;CACtB;AA6BD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,gBAAgB,CAmElB"}

package/dist/platform/runtime/permissions/safety-checks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"safety-checks.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/permissions/safety-checks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,qBAAqB,EACrB,cAAc,EACd,cAAc,EACf,MAAM,YAAY,CAAC;AA2EpB,MAAM,WAAW,iBAAiB;IAChC,qDAAqD;IACrD,OAAO,EAAE,OAAO,CAAC;IACjB,uDAAuD;IACvD,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,iEAAiE;IACjE,cAAc,CAAC,EAAE,qBAAqB,CAAC;CACxC;AAoID;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,iBAAiB,CA6EnB"}

package/dist/platform/runtime/permissions/simulation-scenarios.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"simulation-scenarios.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/permissions/simulation-scenarios.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAErF,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,wBAAwB,CAAC;IACnC,cAAc,EAAE,kBAAkB,CAAC;IACnC,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,qBAAqB,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,cAAc,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,8BAA8B,EAAE,CAAC;CAC3C;AAED,wBAAgB,qCAAqC,IAAI,wBAAwB,EAAE,CAWlF;AAED,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,mBAAmB,EAC9B,SAAS,GAAE,wBAAwB,EAA4C,GAC9E,uBAAuB,CAsBzB"}

package/dist/platform/runtime/permissions/simulation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"simulation.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/permissions/simulation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAGV,gBAAgB,EAIhB,yBAAyB,EACzB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AA4DxD;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmD;IAE7E,kEAAkE;IAClE,OAAO,CAAC,OAAO,CAA0B;IAEzC,kEAAkE;IAClE,OAAO,CAAC,YAAY,CAAsD;IAE1E,4CAA4C;IAC5C,OAAO,CAAC,aAAa,CAA8B;IAEnD,kCAAkC;IAClC,OAAO,CAAC,WAAW,CAA+C;IAElE,0CAA0C;IAC1C,OAAO,CAAC,UAAU,CAAK;IAEvB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAO;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAQ;gBAG/C,YAAY,EAAE,iBAAiB,EAC/B,eAAe,EAAE,iBAAiB,EAClC,cAAc,EAAE,cAAc,EAC9B,MAAM,GAAE,yBAA8B;IAYxC;;;;;;;;OAQG;IACH,QAAQ,CACN,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,gBAAgB;IAoEnB;;;;;OAKG;IACH,mBAAmB,IAAI,gBAAgB;IA4DvC;;OAEG;IACH,kBAAkB,IAAI,sBAAsB;IAI5C;;OAEG;IACH,qBAAqB,IAAI,sBAAsB;IAI/C;;OAEG;IACH,iBAAiB,IAAI,cAAc;IAInC;;;OAGG;IACH,uBAAuB,IAAI,OAAO;IAQlC;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;CAc7B;AAID;;GAEG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,qCAAqC;IACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,6CAA6C;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAMvE"}