@provos/ironcurtain 0.1.0

package/dist/trusted-process/mcp-proxy-server.js

@@ -0,0 +1,451 @@
+/**
+ * MCP Proxy Server -- The trusted process running as a standalone MCP server.
+ *
+ * Code Mode spawns this as a child process via stdio transport. It acts
+ * as the security boundary between the sandbox and real MCP servers:
+ *
+ * 1. Connects to real MCP servers as a client
+ * 2. Exposes their tools with passthrough schemas
+ * 3. Evaluates every tool call against the policy engine
+ * 4. Forwards allowed calls to real servers, denies or escalates others
+ * 5. Logs every request and decision to the append-only audit log
+ *
+ * Configuration via environment variables:
+ *   AUDIT_LOG_PATH     -- path to the audit log file
+ *   MCP_SERVERS_CONFIG -- JSON string of MCP server configs to proxy
+ *   GENERATED_DIR      -- path to the generated artifacts directory
+ *   PROTECTED_PATHS    -- JSON array of protected paths
+ *   ALLOWED_DIRECTORY  -- (optional) sandbox directory for structural containment check
+ *   ESCALATION_DIR     -- (optional) directory for file-based escalation IPC
+ *   SESSION_LOG_PATH   -- (optional) path for capturing child process stderr
+ *   SANDBOX_POLICY     -- (optional) "enforce" | "warn" (default: "warn")
+ *   SERVER_FILTER      -- (optional) when set, only connect to this single server name
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { CallToolRequestSchema, CompatibilityCallToolResultSchema, ListToolsRequestSchema, ListRootsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
+import { appendFileSync, existsSync, mkdtempSync, readFileSync, writeFileSync, unlinkSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { tmpdir } from 'node:os';
+import { v4 as uuidv4 } from 'uuid';
+import { loadGeneratedPolicy, extractServerDomainAllowlists } from '../config/index.js';
+import { PolicyEngine } from './policy-engine.js';
+import { AuditLog } from './audit-log.js';
+import { prepareToolArgs } from './path-utils.js';
+import { extractPolicyRoots, toMcpRoots, directoryForPath } from './policy-roots.js';
+import { checkSandboxAvailability, resolveSandboxConfig, writeServerSettings, wrapServerCommand, cleanupSettingsFiles, annotateSandboxViolation, } from './sandbox-integration.js';
+import { CallCircuitBreaker } from './call-circuit-breaker.js';
+/**
+ * Adds a root to a client's root list and waits for the server to
+ * fetch the updated list. No-op if the root URI is already present.
+ */
+async function addRootToClient(state, root) {
+    if (state.roots.some(r => r.uri === root.uri))
+        return;
+    state.roots.push(root);
+    const refreshed = new Promise(resolve => {
+        state.rootsRefreshed = resolve;
+    });
+    await state.client.sendRootsListChanged();
+    await refreshed;
+}
+/** Appends a timestamped line to the session log file. */
+function logToSessionFile(sessionLogPath, message) {
+    const timestamp = new Date().toISOString();
+    try {
+        appendFileSync(sessionLogPath, `${timestamp} INFO  ${message}\n`);
+    }
+    catch { /* ignore write failures */ }
+}
+/** Extracts concatenated text from MCP content blocks. */
+function extractTextFromContent(content) {
+    if (!Array.isArray(content))
+        return undefined;
+    const texts = content
+        .filter((c) => c.type === 'text' && typeof c.text === 'string')
+        .map((c) => c.text);
+    return texts.length > 0 ? texts.join('\n') : undefined;
+}
+const ESCALATION_POLL_INTERVAL_MS = 500;
+const DEFAULT_ESCALATION_TIMEOUT_SECONDS = 300;
+/** Reads escalation timeout from env var, falling back to default. */
+function getEscalationTimeoutMs() {
+    const envValue = process.env.ESCALATION_TIMEOUT_SECONDS;
+    if (envValue) {
+        const parsed = Number(envValue);
+        if (Number.isFinite(parsed) && parsed > 0) {
+            return parsed * 1000;
+        }
+    }
+    return DEFAULT_ESCALATION_TIMEOUT_SECONDS * 1000;
+}
+/**
+ * Waits for a human decision via file-based IPC.
+ *
+ * Writes a request file to the escalation directory, then polls
+ * for a response file. The session process (on the other side)
+ * detects the request, surfaces it to the user, and writes the response.
+ *
+ * Returns 'approved' or 'denied'. On timeout, returns 'denied'.
+ */
+async function waitForEscalationDecision(escalationDir, request) {
+    const requestPath = resolve(escalationDir, `request-${request.escalationId}.json`);
+    const responsePath = resolve(escalationDir, `response-${request.escalationId}.json`);
+    writeFileSync(requestPath, JSON.stringify(request));
+    const deadline = Date.now() + getEscalationTimeoutMs();
+    while (Date.now() < deadline) {
+        if (existsSync(responsePath)) {
+            const response = JSON.parse(readFileSync(responsePath, 'utf-8'));
+            // Clean up both files
+            try {
+                unlinkSync(requestPath);
+            }
+            catch { /* ignore */ }
+            try {
+                unlinkSync(responsePath);
+            }
+            catch { /* ignore */ }
+            return response.decision;
+        }
+        await new Promise((r) => setTimeout(r, ESCALATION_POLL_INTERVAL_MS));
+    }
+    // Timeout -- clean up request file and treat as denied
+    try {
+        unlinkSync(requestPath);
+    }
+    catch { /* ignore */ }
+    return 'denied';
+}
+async function main() {
+    const auditLogPath = process.env.AUDIT_LOG_PATH ?? './audit.jsonl';
+    const serversConfigJson = process.env.MCP_SERVERS_CONFIG;
+    const generatedDir = process.env.GENERATED_DIR;
+    const protectedPathsJson = process.env.PROTECTED_PATHS ?? '[]';
+    const sessionLogPath = process.env.SESSION_LOG_PATH;
+    const allowedDirectory = process.env.ALLOWED_DIRECTORY;
+    const escalationDir = process.env.ESCALATION_DIR;
+    if (!serversConfigJson) {
+        process.stderr.write('MCP_SERVERS_CONFIG environment variable is required\n');
+        process.exit(1);
+    }
+    if (!generatedDir) {
+        process.stderr.write('GENERATED_DIR environment variable is required\n');
+        process.exit(1);
+    }
+    const sandboxPolicy = (process.env.SANDBOX_POLICY ?? 'warn');
+    const allServersConfig = JSON.parse(serversConfigJson);
+    const protectedPaths = JSON.parse(protectedPathsJson);
+    // When SERVER_FILTER is set, only connect to that single backend server.
+    // This allows per-server proxy processes with clean tool naming.
+    const serverFilter = process.env.SERVER_FILTER;
+    const serversConfig = serverFilter
+        ? { [serverFilter]: allServersConfig[serverFilter] }
+        : allServersConfig;
+    if (serverFilter && !allServersConfig[serverFilter]) {
+        process.stderr.write(`SERVER_FILTER: unknown server "${serverFilter}"\n`);
+        process.exit(1);
+    }
+    const { compiledPolicy, toolAnnotations } = loadGeneratedPolicy(generatedDir);
+    const serverDomainAllowlists = extractServerDomainAllowlists(serversConfig);
+    const policyEngine = new PolicyEngine(compiledPolicy, toolAnnotations, protectedPaths, allowedDirectory, serverDomainAllowlists);
+    const auditLog = new AuditLog(auditLogPath);
+    const circuitBreaker = new CallCircuitBreaker();
+    // Compute initial roots from compiled policy for the MCP Roots protocol
+    const policyRoots = extractPolicyRoots(compiledPolicy, allowedDirectory ?? '/tmp');
+    const mcpRoots = toMcpRoots(policyRoots);
+    // ── Sandbox availability check (once for all servers) ──────────────
+    const { platformSupported, errors: depErrors, warnings: depWarnings } = checkSandboxAvailability();
+    if (sessionLogPath) {
+        for (const warning of depWarnings) {
+            logToSessionFile(sessionLogPath, `[sandbox] WARNING: ${warning}`);
+        }
+    }
+    if (sandboxPolicy === 'enforce' && (!platformSupported || depErrors.length > 0)) {
+        const reasons = !platformSupported
+            ? [`Platform ${process.platform} not supported`]
+            : depErrors;
+        throw new Error(`[sandbox] FATAL: sandboxPolicy is "enforce" but sandboxing is unavailable:\n` +
+            reasons.map(r => `  - ${r}`).join('\n') + '\n' +
+            `Install with: sudo apt-get install -y bubblewrap socat`);
+    }
+    const sandboxAvailable = platformSupported && depErrors.length === 0;
+    if (!sandboxAvailable && sessionLogPath) {
+        const missing = depErrors.length > 0 ? depErrors.join(', ') : `platform ${process.platform}`;
+        logToSessionFile(sessionLogPath, `[sandbox] WARNING: OS-level sandboxing unavailable (${missing}). ` +
+            `Servers will run without OS containment. ` +
+            `Set SANDBOX_POLICY=enforce to require sandboxing.`);
+    }
+    // ── Resolve sandbox configs and write per-server srt settings ─────
+    const resolvedSandboxConfigs = new Map();
+    const settingsDir = mkdtempSync(join(tmpdir(), 'ironcurtain-srt-'));
+    for (const [serverName, config] of Object.entries(serversConfig)) {
+        const resolved = resolveSandboxConfig(config, allowedDirectory ?? '/tmp', sandboxAvailable, sandboxPolicy);
+        resolvedSandboxConfigs.set(serverName, resolved);
+        if (resolved.sandboxed) {
+            writeServerSettings(serverName, resolved.config, settingsDir);
+        }
+    }
+    const clientStates = new Map();
+    // Connect to real MCP servers as clients, wrapping sandboxed ones with srt
+    const allTools = [];
+    for (const [serverName, config] of Object.entries(serversConfig)) {
+        const resolved = resolvedSandboxConfigs.get(serverName);
+        const wrapped = wrapServerCommand(serverName, config.command, config.args, resolved, settingsDir);
+        const transport = new StdioClientTransport({
+            command: wrapped.command,
+            args: wrapped.args,
+            // Always pass full process.env -- never rely on getDefaultEnvironment()
+            // which strips vars that srt and MCP servers may need
+            env: { ...process.env, ...(config.env ?? {}) },
+            stderr: 'pipe', // Prevent child server stderr from leaking to the terminal
+            // Sandboxed servers get the sandbox dir as cwd so relative-path writes
+            // (e.g., log files) land inside the writable sandbox instead of failing
+            // with EROFS on the read-only host filesystem.
+            ...(resolved.sandboxed && allowedDirectory ? { cwd: allowedDirectory } : {}),
+        });
+        // Drain the piped stderr to prevent buffer backpressure from blocking
+        // the child process. Write output to the session log if configured.
+        if (transport.stderr) {
+            transport.stderr.on('data', (chunk) => {
+                if (sessionLogPath) {
+                    const lines = chunk.toString().trimEnd();
+                    if (lines) {
+                        const timestamp = new Date().toISOString();
+                        try {
+                            appendFileSync(sessionLogPath, `${timestamp} INFO  [mcp:${serverName}] ${lines}\n`);
+                        }
+                        catch { /* ignore write failures */ }
+                    }
+                }
+            });
+        }
+        const client = new Client({ name: 'ironcurtain-proxy', version: '0.1.0' }, { capabilities: { roots: { listChanged: true } } });
+        // Mutable copy per client -- root expansion pushes to this array
+        const state = { client, roots: [...mcpRoots] };
+        // When the server asks for roots, return the current set.
+        // If a rootsRefreshed callback is registered (from escalation-triggered
+        // root expansion), resolve it so the caller knows the server has
+        // the latest roots.
+        client.setRequestHandler(ListRootsRequestSchema, async () => {
+            if (state.rootsRefreshed) {
+                state.rootsRefreshed();
+                state.rootsRefreshed = undefined;
+            }
+            return { roots: state.roots };
+        });
+        await client.connect(transport);
+        clientStates.set(serverName, state);
+        const result = await client.listTools();
+        for (const tool of result.tools) {
+            allTools.push({
+                serverName,
+                name: tool.name,
+                description: tool.description,
+                inputSchema: tool.inputSchema,
+            });
+        }
+    }
+    // Build a lookup map for routing tool calls
+    const toolMap = new Map();
+    for (const tool of allTools) {
+        toolMap.set(tool.name, tool);
+    }
+    // Create the proxy MCP server using the low-level Server API
+    // so we can pass through raw JSON schemas without Zod conversion
+    const server = new Server({ name: 'ironcurtain-proxy', version: '0.1.0' }, { capabilities: { tools: {} } });
+    // Handle tools/list -- return all proxied tool schemas verbatim
+    server.setRequestHandler(ListToolsRequestSchema, async () => {
+        return {
+            tools: allTools.map((t) => ({
+                name: t.name,
+                description: t.description,
+                inputSchema: t.inputSchema,
+            })),
+        };
+    });
+    // Handle tools/call -- evaluate policy, then forward or deny
+    server.setRequestHandler(CallToolRequestSchema, async (req) => {
+        const toolName = req.params.name;
+        const rawArgs = (req.params.arguments ?? {});
+        const toolInfo = toolMap.get(toolName);
+        if (!toolInfo) {
+            return {
+                content: [{ type: 'text', text: `Unknown tool: ${toolName}` }],
+                isError: true,
+            };
+        }
+        // Annotation-driven normalization: split into transport vs policy args
+        const annotation = policyEngine.getAnnotation(toolInfo.serverName, toolInfo.name);
+        const { argsForTransport, argsForPolicy } = prepareToolArgs(rawArgs, annotation, allowedDirectory);
+        const request = {
+            requestId: uuidv4(),
+            serverName: toolInfo.serverName,
+            toolName: toolInfo.name,
+            arguments: argsForPolicy,
+            timestamp: new Date().toISOString(),
+        };
+        const evaluation = policyEngine.evaluate(request);
+        const policyDecision = {
+            status: evaluation.decision,
+            rule: evaluation.rule,
+            reason: evaluation.reason,
+        };
+        // Tracks the escalation outcome for audit logging when an approved
+        // escalation falls through to the forwarding section below.
+        let escalationResult;
+        // Look up whether this server is sandboxed for audit logging
+        const serverSandboxConfig = resolvedSandboxConfigs.get(toolInfo.serverName);
+        const serverIsSandboxed = serverSandboxConfig?.sandboxed === true;
+        // Audit log records argsForTransport (what was actually sent to the MCP server)
+        function logAudit(result, durationMs, overrideEscalation) {
+            const entry = {
+                timestamp: request.timestamp,
+                requestId: request.requestId,
+                serverName: request.serverName,
+                toolName: request.toolName,
+                arguments: argsForTransport,
+                policyDecision,
+                escalationResult: overrideEscalation ?? escalationResult,
+                result,
+                durationMs,
+                sandboxed: serverIsSandboxed || undefined,
+            };
+            auditLog.log(entry);
+        }
+        if (evaluation.decision === 'escalate') {
+            if (!escalationDir) {
+                // No escalation directory configured -- auto-deny (backward compatible)
+                logAudit({ status: 'denied', error: evaluation.reason }, 0, 'denied');
+                return {
+                    content: [{
+                            type: 'text',
+                            text: `ESCALATION REQUIRED: ${evaluation.reason}. Action denied (no escalation handler).`,
+                        }],
+                    isError: true,
+                };
+            }
+            // File-based escalation rendezvous: write request, poll for response
+            const escalationId = uuidv4();
+            const decision = await waitForEscalationDecision(escalationDir, {
+                escalationId,
+                serverName: request.serverName,
+                toolName: request.toolName,
+                arguments: argsForTransport,
+                reason: evaluation.reason,
+            });
+            if (decision === 'denied') {
+                logAudit({ status: 'denied', error: evaluation.reason }, 0, 'denied');
+                return {
+                    content: [{ type: 'text', text: `ESCALATION DENIED: ${evaluation.reason}` }],
+                    isError: true,
+                };
+            }
+            // Approved -- update policy decision and fall through to forward the call
+            escalationResult = 'approved';
+            policyDecision.status = 'allow';
+            policyDecision.reason = 'Approved by human during escalation';
+            // Expand roots to include target directories so the filesystem
+            // server accepts the forwarded call.
+            const state = clientStates.get(toolInfo.serverName);
+            if (state) {
+                const paths = Object.values(argsForTransport).filter((v) => typeof v === 'string');
+                for (const p of paths) {
+                    await addRootToClient(state, {
+                        uri: `file://${directoryForPath(p)}`,
+                        name: 'escalation-approved',
+                    });
+                }
+            }
+        }
+        if (evaluation.decision === 'deny') {
+            logAudit({ status: 'denied', error: evaluation.reason }, 0);
+            return {
+                content: [{ type: 'text', text: `DENIED: ${evaluation.reason}` }],
+                isError: true,
+            };
+        }
+        // Circuit breaker: deny if the same tool+args is called too many times
+        const cbVerdict = circuitBreaker.check(toolInfo.name, argsForTransport);
+        if (!cbVerdict.allowed) {
+            logAudit({ status: 'denied', error: cbVerdict.reason }, 0);
+            return {
+                content: [{ type: 'text', text: cbVerdict.reason }],
+                isError: true,
+            };
+        }
+        // Policy allows -- forward to the real MCP server with transport args
+        const startTime = Date.now();
+        try {
+            const client = clientStates.get(toolInfo.serverName).client;
+            // TODO(workaround): Remove once @cyanheads/git-mcp-server fixes outputSchema declarations.
+            //
+            // WHY: The git MCP server v2.8.4 declares outputSchema for tools like git_add and
+            // git_commit, but the structuredContent it actually returns does not match those schemas.
+            // The MCP SDK v1.26.0 Client.callTool() validates responses client-side against the
+            // declared outputSchema and throws McpError(-32602, "Structured content does not match
+            // the tool's output schema: ...") when there is a mismatch.
+            //
+            // WHAT: git_add declares required properties {success, stagedFiles, totalFiles, status}
+            // in its outputSchema, but actual responses (especially errors) are missing these and
+            // include additional undeclared properties. git_commit similarly requires {success,
+            // commitHash, author, timestamp, committedFiles, status} but returns different shapes.
+            //
+            // FIX: Passing CompatibilityCallToolResultSchema instead of the default
+            // CallToolResultSchema makes the response parsing more permissive, which avoids the
+            // client-side validation failure.
+            //
+            // CONSEQUENCE: By using CompatibilityCallToolResultSchema we lose client-side output
+            // validation for ALL MCP servers proxied through this path, not just the git server.
+            const result = await client.callTool({
+                name: toolInfo.name,
+                arguments: argsForTransport,
+            }, CompatibilityCallToolResultSchema);
+            if (result.isError) {
+                const errorText = extractTextFromContent(result.content) ?? 'Unknown tool error';
+                const errorMessage = annotateSandboxViolation(errorText, serverIsSandboxed);
+                logAudit({ status: 'error', error: errorMessage }, Date.now() - startTime);
+                return { content: result.content, isError: true };
+            }
+            logAudit({ status: 'success' }, Date.now() - startTime);
+            return { content: result.content };
+        }
+        catch (err) {
+            const rawError = err instanceof Error ? err.message : String(err);
+            const errorMessage = annotateSandboxViolation(rawError, serverIsSandboxed);
+            logAudit({ status: 'error', error: errorMessage }, Date.now() - startTime);
+            return {
+                content: [{ type: 'text', text: `Error: ${errorMessage}` }],
+                isError: true,
+            };
+        }
+    });
+    // Start on stdio
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    // Clean shutdown -- handle both SIGINT and SIGTERM since this process
+    // is spawned as a child by Code Mode and may receive either signal.
+    async function shutdown() {
+        for (const state of clientStates.values()) {
+            try {
+                await state.client.close();
+            }
+            catch { /* ignore */ }
+        }
+        cleanupSettingsFiles(settingsDir);
+        try {
+            await server.close();
+        }
+        catch { /* ignore */ }
+        await auditLog.close();
+        process.exit(0);
+    }
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+}
+main().catch((err) => {
+    process.stderr.write(`MCP Proxy Server fatal error: ${err}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=mcp-proxy-server.js.map

package/dist/trusted-process/mcp-proxy-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-proxy-server.js","sourceRoot":"","sources":["../../src/trusted-process/mcp-proxy-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,iCAAiC,EACjC,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC3G,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,GAEzB,MAAM,0BAA0B,CAAC;AAIlC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAwB/D;;;GAGG;AACH,KAAK,UAAU,eAAe,CAAC,KAAkB,EAAE,IAAa;IAC9D,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO;IACtD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEvB,MAAM,SAAS,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;QAC5C,KAAK,CAAC,cAAc,GAAG,OAAO,CAAC;IACjC,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;IAC1C,MAAM,SAAS,CAAC;AAClB,CAAC;AAED,0DAA0D;AAC1D,SAAS,gBAAgB,CAAC,cAAsB,EAAE,OAAe;IAC/D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,cAAc,CAAC,cAAc,EAAE,GAAG,SAAS,UAAU,OAAO,IAAI,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;AACzC,CAAC;AAED,0DAA0D;AAC1D,SAAS,sBAAsB,CAAC,OAAgB;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO;SAClB,MAAM,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;SACvF,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,IAAc,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,MAAM,2BAA2B,GAAG,GAAG,CAAC;AACxC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AAE/C,sEAAsE;AACtE,SAAS,sBAAsB;IAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACxD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,MAAM,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,kCAAkC,GAAG,IAAI,CAAC;AACnD,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,yBAAyB,CACtC,aAAqB,EACrB,OAA8B;IAE9B,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,EAAE,WAAW,OAAO,CAAC,YAAY,OAAO,CAAC,CAAC;IACnF,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,EAAE,YAAY,OAAO,CAAC,YAAY,OAAO,CAAC,CAAC;IAErF,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,sBAAsB,EAAE,CAAC;IAEvD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAwC,CAAC;YACxG,sBAAsB;YACtB,IAAI,CAAC;gBAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACvD,IAAI,CAAC;gBAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACxD,OAAO,QAAQ,CAAC,QAAQ,CAAC;QAC3B,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,uDAAuD;IACvD,IAAI,CAAC;QAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACvD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,eAAe,CAAC;IACnE,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACzD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC/C,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC;IAC/D,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACpD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACvD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAEjD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,CAA8B,CAAC;IAE1F,MAAM,gBAAgB,GAAoC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACxF,MAAM,cAAc,GAAa,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAEhE,yEAAyE;IACzE,iEAAiE;IACjE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC/C,MAAM,aAAa,GAAoC,YAAY;QACjE,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,EAAE;QACpD,CAAC,CAAC,gBAAgB,CAAC;IAErB,IAAI,YAAY,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,YAAY,KAAK,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAE9E,MAAM,sBAAsB,GAAG,6BAA6B,CAAC,aAAa,CAAC,CAAC;IAC5E,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;IACjI,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEhD,wEAAwE;IACxE,MAAM,WAAW,GAAG,kBAAkB,CAAC,cAAc,EAAE,gBAAgB,IAAI,MAAM,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAEzC,sEAAsE;IACtE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,wBAAwB,EAAE,CAAC;IAEnG,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,gBAAgB,CAAC,cAAc,EAAE,sBAAsB,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,iBAAiB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,OAAO,GAAG,CAAC,iBAAiB;YAChC,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,QAAQ,gBAAgB,CAAC;YAChD,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,IAAI,KAAK,CACb,8EAA8E;YAC9E,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI;YAC9C,wDAAwD,CACzD,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,iBAAiB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;IAErE,IAAI,CAAC,gBAAgB,IAAI,cAAc,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7F,gBAAgB,CAAC,cAAc,EAC7B,uDAAuD,OAAO,KAAK;YACnE,2CAA2C;YAC3C,mDAAmD,CACpD,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAiC,CAAC;IACxE,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAEpE,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACjE,MAAM,QAAQ,GAAG,oBAAoB,CACnC,MAAM,EACN,gBAAgB,IAAI,MAAM,EAC1B,gBAAgB,EAChB,aAAa,CACd,CAAC;QACF,sBAAsB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEjD,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACvB,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEpD,2EAA2E;IAC3E,MAAM,QAAQ,GAAkB,EAAE,CAAC;IAEnC,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACjE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;QACzD,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAElG,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC;YACzC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,wEAAwE;YACxE,sDAAsD;YACtD,GAAG,EAAE,EAAE,GAAI,OAAO,CAAC,GAA8B,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;YAC1E,MAAM,EAAE,MAAM,EAAE,2DAA2D;YAC3E,uEAAuE;YACvE,wEAAwE;YACxE,+CAA+C;YAC/C,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E,CAAC,CAAC;QAEH,sEAAsE;QACtE,oEAAoE;QACpE,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACrB,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC5C,IAAI,cAAc,EAAE,CAAC;oBACnB,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,CAAC;oBACzC,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;wBAC3C,IAAI,CAAC;4BACH,cAAc,CAAC,cAAc,EAAE,GAAG,SAAS,eAAe,UAAU,KAAK,KAAK,IAAI,CAAC,CAAC;wBACtF,CAAC;wBAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;oBACzC,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,EAC/C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,CACnD,CAAC;QAEF,iEAAiE;QACjE,MAAM,KAAK,GAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;QAE5D,0DAA0D;QAC1D,wEAAwE;QACxE,iEAAiE;QACjE,oBAAoB;QACpB,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;YAC1D,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;gBACzB,KAAK,CAAC,cAAc,EAAE,CAAC;gBACvB,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC;YACnC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAEpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC;gBACZ,UAAU;gBACV,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,IAAI,CAAC,WAAsC;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,6DAA6D;IAC7D,iEAAiE;IACjE,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,EAC/C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;IAEF,gEAAgE;IAChE,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QAC1D,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAA4B,CAAC;QACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEvC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,QAAQ,EAAE,EAAE,CAAC;gBAC9D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAEnG,MAAM,OAAO,GAAoB;YAC/B,SAAS,EAAE,MAAM,EAAE;YACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,SAAS,EAAE,aAAa;YACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG;YACrB,MAAM,EAAE,UAAU,CAAC,QAAQ;YAC3B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC;QAEF,mEAAmE;QACnE,4DAA4D;QAC5D,IAAI,gBAAmD,CAAC;QAExD,6DAA6D;QAC7D,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5E,MAAM,iBAAiB,GAAG,mBAAmB,EAAE,SAAS,KAAK,IAAI,CAAC;QAElE,gFAAgF;QAChF,SAAS,QAAQ,CAAC,MAA4B,EAAE,UAAkB,EAAE,kBAA0C;YAC5G,MAAM,KAAK,GAAe;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,gBAAgB;gBAC3B,cAAc;gBACd,gBAAgB,EAAE,kBAAkB,IAAI,gBAAgB;gBACxD,MAAM;gBACN,UAAU;gBACV,SAAS,EAAE,iBAAiB,IAAI,SAAS;aAC1C,CAAC;YACF,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,UAAU,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YACvC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,wEAAwE;gBACxE,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACtE,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,wBAAwB,UAAU,CAAC,MAAM,0CAA0C;yBAC1F,CAAC;oBACF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,qEAAqE;YACrE,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,aAAa,EAAE;gBAC9D,YAAY;gBACZ,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,gBAAgB;gBAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1B,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACtE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC5E,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,0EAA0E;YAC1E,gBAAgB,GAAG,UAAU,CAAC;YAC9B,cAAc,CAAC,MAAM,GAAG,OAAO,CAAC;YAChC,cAAc,CAAC,MAAM,GAAG,qCAAqC,CAAC;YAE9D,+DAA+D;YAC/D,qCAAqC;YACrC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACpD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAC1C,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;oBACtB,MAAM,eAAe,CAAC,KAAK,EAAE;wBAC3B,GAAG,EAAE,UAAU,gBAAgB,CAAC,CAAC,CAAC,EAAE;wBACpC,IAAI,EAAE,qBAAqB;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YAC5D,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjE,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3D,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;gBACnD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAE,CAAC,MAAM,CAAC;YAE7D,2FAA2F;YAC3F,EAAE;YACF,kFAAkF;YAClF,0FAA0F;YAC1F,oFAAoF;YACpF,uFAAuF;YACvF,4DAA4D;YAC5D,EAAE;YACF,wFAAwF;YACxF,sFAAsF;YACtF,oFAAoF;YACpF,uFAAuF;YACvF,EAAE;YACF,wEAAwE;YACxE,oFAAoF;YACpF,kCAAkC;YAClC,EAAE;YACF,qFAAqF;YACrF,qFAAqF;YACrF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;gBACnC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,SAAS,EAAE,gBAAgB;aAC5B,EAAE,iCAAiC,CAAC,CAAC;YAEtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,CAAC;gBACjF,MAAM,YAAY,GAAG,wBAAwB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;gBAC5E,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;gBAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACpD,CAAC;YAED,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;YACxD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClE,MAAM,YAAY,GAAG,wBAAwB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;YAC3E,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;YAC3E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,YAAY,EAAE,EAAE,CAAC;gBAC3D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,iBAAiB;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,sEAAsE;IACtE,oEAAoE;IACpE,KAAK,UAAU,QAAQ;QACrB,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC;gBAAC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5D,CAAC;QACD,oBAAoB,CAAC,WAAW,CAAC,CAAC;QAClC,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,GAAG,IAAI,CAAC,CAAC;IAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/trusted-process/path-utils.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Path normalization utilities for the trusted process security boundary.
+ *
+ * Provides annotation-driven normalization via `prepareToolArgs()` and a
+ * legacy heuristic fallback via `normalizeToolArgPaths()`. The heuristic
+ * is retained for defense-in-depth and as a fallback when annotations are
+ * unavailable.
+ */
+import type { ToolAnnotation } from '../pipeline/types.js';
+export { expandTilde } from '../types/argument-roles.js';
+/**
+ * Returns a new arguments object with all path-like string values
+ * fully resolved (tilde expanded, relative resolved, traversals collapsed).
+ *
+ * A string value is considered path-like if it starts with `/`, `.`, or `~`.
+ * Array values have each string element checked individually.
+ * Non-string and non-path values pass through unchanged.
+ *
+ * The input object is never mutated.
+ *
+ * @deprecated Use `prepareToolArgs()` with annotation-driven normalization.
+ * Retained as a fallback when annotations are unavailable.
+ */
+export declare function normalizeToolArgPaths(args: Record<string, unknown>): Record<string, unknown>;
+export interface PreparedToolArgs {
+    /** Canonical args sent to the real MCP server. */
+    argsForTransport: Record<string, unknown>;
+    /** Args presented to the policy engine (may differ if prepareForPolicy is defined). */
+    argsForPolicy: Record<string, unknown>;
+}
+/**
+ * Annotation-driven normalization of tool call arguments.
+ *
+ * For each argument, looks up its annotated roles and applies the
+ * corresponding normalizer from the registry. Returns two argument
+ * objects: one for transport (MCP server) and one for policy evaluation.
+ *
+ * For path-category roles, relative paths (not starting with `/` or `~`)
+ * are treated differently:
+ *   - Transport: passed through unchanged (the MCP server resolves them
+ *     against its own sandbox CWD)
+ *   - Policy: resolved against `allowedDirectory` so the policy engine
+ *     has absolute canonical paths for containment checks
+ *
+ * When `annotation` is undefined (unknown tool), falls back to the
+ * heuristic `normalizeToolArgPaths()` for both outputs.
+ *
+ * The input object is never mutated.
+ */
+export declare function prepareToolArgs(args: Record<string, unknown>, annotation: ToolAnnotation | undefined, allowedDirectory?: string): PreparedToolArgs;