@provos/ironcurtain 0.1.0

package/dist/trusted-process/policy-engine.js

@@ -0,0 +1,523 @@
+/**
+ * PolicyEngine -- Two-phase declarative policy evaluation.
+ *
+ * Phase 1: Hardcoded structural invariants (protected paths, unknown tools).
+ *          These are never overridden by compiled rules. Sandbox containment
+ *          is checked per-role: roles whose paths are all within the sandbox
+ *          are resolved here and skipped in Phase 2.
+ *
+ * Phase 2: Compiled declarative rules loaded from compiled-policy.json.
+ *          Each distinct role from the tool's annotation is evaluated
+ *          independently through the rule chain (first-match-wins per role).
+ *          The most restrictive result wins: deny > escalate > allow.
+ *          Roles already resolved by Phase 1 sandbox containment are skipped.
+ */
+import { getPathRoles, getUrlRoles, getRoleDefinition, resolveRealPath, SANDBOX_SAFE_PATH_ROLES, } from '../types/argument-roles.js';
+/**
+ * Heuristically extracts filesystem paths from tool call arguments.
+ * Any string value starting with '/', '.', or '~' is treated as a path.
+ * Handles both single string values and arrays of strings.
+ */
+function extractPathsHeuristic(args) {
+    const paths = [];
+    for (const value of Object.values(args)) {
+        if (typeof value === 'string' && (value.startsWith('/') || value.startsWith('.') || value.startsWith('~'))) {
+            paths.push(value);
+        }
+        else if (Array.isArray(value)) {
+            for (const item of value) {
+                if (typeof item === 'string' && (item.startsWith('/') || item.startsWith('.') || item.startsWith('~'))) {
+                    paths.push(item);
+                }
+            }
+        }
+    }
+    return paths;
+}
+/**
+ * Extracts paths from arguments based on annotation roles.
+ * Only returns paths for arguments whose annotated roles intersect
+ * with the target roles. Handles both string and string[] arguments.
+ */
+function extractAnnotatedPaths(args, annotation, targetRoles) {
+    const paths = [];
+    for (const [argName, roles] of Object.entries(annotation.args)) {
+        if (!roles.some(r => targetRoles.includes(r)))
+            continue;
+        const value = args[argName];
+        if (typeof value === 'string') {
+            paths.push(value);
+        }
+        else if (Array.isArray(value)) {
+            for (const item of value) {
+                if (typeof item === 'string')
+                    paths.push(item);
+            }
+        }
+    }
+    return paths;
+}
+/**
+ * Checks whether a target path is contained within a directory.
+ * Both paths are resolved to their real canonical form (following symlinks)
+ * before comparison, which neutralizes both path traversal and symlink attacks.
+ */
+function isWithinDirectory(targetPath, directory) {
+    const resolved = resolveRealPath(targetPath);
+    const resolvedDir = resolveRealPath(directory);
+    return resolved === resolvedDir || resolved.startsWith(resolvedDir + '/');
+}
+/**
+ * Checks whether a resolved path matches any protected path.
+ * A path is protected if it equals a protected path exactly
+ * or is contained within a protected directory.
+ * Both sides are resolved through symlinks for accurate comparison.
+ */
+function isProtectedPath(resolvedPath, protectedPaths) {
+    const realPath = resolveRealPath(resolvedPath);
+    return protectedPaths.some(pp => {
+        const resolvedPP = resolveRealPath(pp);
+        return realPath === resolvedPP || realPath.startsWith(resolvedPP + '/');
+    });
+}
+const NO_ROLES_RESOLVED = new Set();
+/** Wraps a final EvaluationResult into a StructuralResult. */
+function finalDecision(decision) {
+    return { decision, sandboxResolvedRoles: NO_ROLES_RESOLVED };
+}
+/** Higher severity = more restrictive. Used to pick the strictest per-role result. */
+const DECISION_SEVERITY = {
+    allow: 0,
+    escalate: 1,
+    deny: 2,
+};
+/**
+ * Collects all distinct non-"none" roles from a tool annotation's arguments.
+ * Returns an empty array if the tool has no role-bearing arguments.
+ */
+function collectDistinctRoles(annotation) {
+    const roles = new Set();
+    for (const argRoles of Object.values(annotation.args)) {
+        for (const role of argRoles) {
+            if (getRoleDefinition(role).isResourceIdentifier)
+                roles.add(role);
+        }
+    }
+    return [...roles];
+}
+/**
+ * Extracts URL values from arguments based on annotation roles.
+ * Returns an array of { value, role, roleDef } for each URL-category argument.
+ */
+function extractAnnotatedUrls(args, annotation, targetRoles) {
+    const urls = [];
+    for (const [argName, roles] of Object.entries(annotation.args)) {
+        const matchingRole = roles.find(r => targetRoles.includes(r));
+        if (!matchingRole)
+            continue;
+        const value = args[argName];
+        const roleDef = getRoleDefinition(matchingRole);
+        if (typeof value === 'string') {
+            urls.push({ value, role: matchingRole, roleDef });
+        }
+        else if (Array.isArray(value)) {
+            for (const item of value) {
+                if (typeof item === 'string') {
+                    urls.push({ value: item, role: matchingRole, roleDef });
+                }
+            }
+        }
+    }
+    return urls;
+}
+/**
+ * Applies the resolution pipeline for a URL-category value:
+ *   1. resolveForPolicy(value, allArgs)  -- resolve named remote to URL
+ *   2. normalize(resolvedValue)          -- canonicalize URL format
+ *   3. prepareForPolicy(normalizedValue) -- extract domain for allowlist check
+ */
+function resolveUrlForDomainCheck(value, roleDef, allArgs) {
+    const resolved = roleDef.resolveForPolicy?.(value, allArgs) ?? value;
+    const normalized = roleDef.normalize(resolved);
+    return roleDef.prepareForPolicy?.(normalized) ?? normalized;
+}
+/**
+ * Checks whether a domain matches any pattern in an allowlist.
+ * Supports exact match, `*` wildcard (matches everything),
+ * and `*.example.com` prefix wildcards (matches example.com and *.example.com).
+ */
+export function domainMatchesAllowlist(domain, allowedDomains) {
+    return allowedDomains.some(pattern => {
+        if (pattern === '*')
+            return true;
+        if (pattern.startsWith('*.')) {
+            const suffix = pattern.slice(1); // ".github.com"
+            return domain === pattern.slice(2) || domain.endsWith(suffix);
+        }
+        return domain === pattern;
+    });
+}
+/**
+ * Checks whether a rule has role-related conditions (roles, paths, or domains).
+ * Rules without these conditions are role-agnostic and match any role.
+ */
+function hasRoleConditions(rule) {
+    return rule.if.roles !== undefined || rule.if.paths !== undefined || rule.if.domains !== undefined;
+}
+/**
+ * Checks whether a rule's role-related conditions include a specific role.
+ * For `roles` conditions: the role must be in the list.
+ * For `paths` conditions: the role must be in the paths.roles list.
+ * For `domains` conditions: the role must be in the domains.roles list.
+ */
+function ruleRelevantToRole(rule, role) {
+    const cond = rule.if;
+    if (cond.roles !== undefined && !cond.roles.includes(role))
+        return false;
+    if (cond.paths !== undefined && !cond.paths.roles.includes(role))
+        return false;
+    if (cond.domains !== undefined && !cond.domains.roles.includes(role))
+        return false;
+    return true;
+}
+export class PolicyEngine {
+    annotationMap;
+    compiledPolicy;
+    protectedPaths;
+    allowedDirectory;
+    serverDomainAllowlists;
+    constructor(compiledPolicy, toolAnnotations, protectedPaths, allowedDirectory, serverDomainAllowlists) {
+        this.compiledPolicy = compiledPolicy;
+        this.protectedPaths = protectedPaths;
+        this.allowedDirectory = allowedDirectory;
+        this.serverDomainAllowlists = serverDomainAllowlists ?? new Map();
+        this.annotationMap = this.buildAnnotationMap(toolAnnotations);
+    }
+    buildAnnotationMap(annotations) {
+        const map = new Map();
+        for (const [serverName, serverData] of Object.entries(annotations.servers)) {
+            for (const tool of serverData.tools) {
+                const key = `${serverName}__${tool.toolName}`;
+                map.set(key, tool);
+            }
+        }
+        return map;
+    }
+    /** Returns the annotation for a tool, or undefined if unknown. */
+    getAnnotation(serverName, toolName) {
+        return this.annotationMap.get(`${serverName}__${toolName}`);
+    }
+    evaluate(request) {
+        // Phase 1: Structural invariants (may resolve some roles via sandbox containment)
+        const structural = this.evaluateStructuralInvariants(request);
+        if (structural.decision)
+            return structural.decision;
+        // Phase 2: Compiled rules (skipping sandbox-resolved roles)
+        return this.evaluateCompiledRules(request, structural.sandboxResolvedRoles);
+    }
+    /**
+     * Phase 1: Hardcoded structural invariants.
+     *
+     * 1a. Protected path check (deny)
+     * 1b. Sandbox containment for path-category roles (allow/partial)
+     * 1c. Domain allowlist for url-category roles (escalate)
+     * 1d. Unknown tool denial (deny)
+     *
+     * Uses the union of heuristic and annotation-based path extraction
+     * for defense-in-depth. Returns a StructuralResult with either a
+     * final decision or a set of roles resolved by sandbox containment.
+     */
+    evaluateStructuralInvariants(request) {
+        // Extract paths using both methods for defense-in-depth
+        const heuristicPaths = extractPathsHeuristic(request.arguments);
+        const annotation = this.annotationMap.get(`${request.serverName}__${request.toolName}`);
+        // Phase 1a/1b use path-category roles only (not URL roles)
+        const pathRoles = getPathRoles();
+        const annotatedPaths = annotation
+            ? extractAnnotatedPaths(request.arguments, annotation, pathRoles)
+            : [];
+        // Union of both extraction methods, deduplicated
+        const allPaths = [...new Set([...heuristicPaths, ...annotatedPaths])];
+        const resolvedPaths = allPaths.map(p => resolveRealPath(p));
+        // Phase 1a: Protected paths -- any match is an immediate deny
+        for (const rp of resolvedPaths) {
+            if (isProtectedPath(rp, this.protectedPaths)) {
+                return finalDecision({
+                    decision: 'deny',
+                    rule: 'structural-protected-path',
+                    reason: `Access to protected path is forbidden: ${rp}`,
+                });
+            }
+        }
+        // Phase 1b: Sandbox containment checks (path-category roles)
+        //
+        // The sandbox auto-allow decision uses annotated paths when annotations
+        // exist (not heuristic paths). An arg annotated as 'none' should not
+        // grant sandbox containment even if the value looks like a path.
+        // Heuristic paths are only used for defense-in-depth on the deny side
+        // (Phase 1a protected path check).
+        //
+        // Only SANDBOX_SAFE_PATH_ROLES (read-path, write-path, delete-path) can
+        // be auto-resolved by sandbox containment. Higher-risk path roles like
+        // write-history and delete-history always fall through to Phase 2.
+        const sandboxResolvedRoles = new Set();
+        const resolvedSandboxPaths = annotation
+            ? annotatedPaths.map(p => resolveRealPath(p))
+            : resolvedPaths;
+        // Extract URL args once for use in both Phase 1b (fast-path guard) and Phase 1c
+        const urlArgs = annotation
+            ? extractAnnotatedUrls(request.arguments, annotation, getUrlRoles())
+            : [];
+        // Determine if the tool has any non-sandbox-safe path roles
+        const toolHasUnsafePathRoles = annotation
+            ? pathRoles.some(role => !SANDBOX_SAFE_PATH_ROLES.has(role) &&
+                Object.values(annotation.args).some(argRoles => argRoles.includes(role)))
+            : false;
+        if (this.allowedDirectory && resolvedSandboxPaths.length > 0) {
+            // Fast path: all annotated paths within sandbox -> auto-allow
+            // Only fires when ALL path roles are sandbox-safe and no URL roles need checking
+            const allWithinSandbox = resolvedSandboxPaths.every(rp => isWithinDirectory(rp, this.allowedDirectory));
+            if (allWithinSandbox && urlArgs.length === 0 && !toolHasUnsafePathRoles) {
+                return finalDecision({
+                    decision: 'allow',
+                    rule: 'structural-sandbox-allow',
+                    reason: `All paths are within the sandbox directory: ${this.allowedDirectory}`,
+                });
+            }
+            // Partial sandbox resolution: check each path role independently.
+            // A role is "sandbox-resolved" if every path for that role is within
+            // the sandbox. Only sandbox-safe roles can be resolved here.
+            // Roles with zero extracted paths are not resolved.
+            if (annotation) {
+                for (const role of pathRoles) {
+                    if (!SANDBOX_SAFE_PATH_ROLES.has(role))
+                        continue;
+                    const pathsForRole = extractAnnotatedPaths(request.arguments, annotation, [role]);
+                    if (pathsForRole.length > 0 && pathsForRole.every(p => isWithinDirectory(p, this.allowedDirectory))) {
+                        sandboxResolvedRoles.add(role);
+                    }
+                }
+            }
+        }
+        // Phase 1c: Domain allowlist for URL-category roles
+        if (urlArgs.length > 0) {
+            const allowlist = this.serverDomainAllowlists.get(request.serverName);
+            if (allowlist) {
+                for (const { value, roleDef } of urlArgs) {
+                    const domain = resolveUrlForDomainCheck(value, roleDef, request.arguments);
+                    if (!domainMatchesAllowlist(domain, allowlist)) {
+                        return finalDecision({
+                            decision: 'escalate',
+                            rule: 'structural-domain-escalate',
+                            reason: `URL domain "${domain}" is not in the allowlist for server "${request.serverName}"`,
+                        });
+                    }
+                }
+                // All URLs passed domain check -- mark URL roles as resolved
+                for (const { role } of urlArgs) {
+                    sandboxResolvedRoles.add(role);
+                }
+            }
+            // If no allowlist, URL roles are not structurally restricted -- fall through to Phase 2
+        }
+        // Phase 1d: Unknown tool check
+        if (!annotation) {
+            return finalDecision({
+                decision: 'deny',
+                rule: 'structural-unknown-tool',
+                reason: `Unknown tool: ${request.serverName}/${request.toolName}`,
+            });
+        }
+        return { sandboxResolvedRoles: sandboxResolvedRoles.size > 0 ? sandboxResolvedRoles : NO_ROLES_RESOLVED };
+    }
+    /**
+     * Phase 2: Evaluate compiled declarative rules.
+     *
+     * For tools with multiple roles (e.g., edit_file has read-path + write-path),
+     * each role is evaluated independently through the rule chain. The most
+     * restrictive result across all roles wins (deny > escalate > allow).
+     * Roles already resolved by Phase 1 sandbox containment are skipped.
+     *
+     * For tools with no roles (e.g., list_allowed_directories), the chain is
+     * evaluated once without role filtering.
+     */
+    evaluateCompiledRules(request, sandboxResolvedRoles) {
+        const annotation = this.annotationMap.get(`${request.serverName}__${request.toolName}`);
+        const allRoles = collectDistinctRoles(annotation);
+        // Filter out roles already resolved by sandbox containment
+        const rolesToEvaluate = allRoles.filter(r => !sandboxResolvedRoles.has(r));
+        // All resource roles were sandbox-resolved → allow
+        if (allRoles.length > 0 && rolesToEvaluate.length === 0) {
+            return {
+                decision: 'allow',
+                rule: 'structural-sandbox-allow',
+                reason: 'All path roles resolved by sandbox containment',
+            };
+        }
+        if (rolesToEvaluate.length === 0) {
+            // No resource roles at all (e.g., list_allowed_directories)
+            return this.evaluateRulesForRole(request, annotation, undefined);
+        }
+        let mostRestrictive;
+        for (const role of rolesToEvaluate) {
+            const result = this.evaluateRulesForRole(request, annotation, role);
+            if (result.decision === 'deny')
+                return result;
+            if (!mostRestrictive || DECISION_SEVERITY[result.decision] > DECISION_SEVERITY[mostRestrictive.decision]) {
+                mostRestrictive = result;
+            }
+        }
+        return mostRestrictive;
+    }
+    /**
+     * Evaluates the rule chain for a single role (or all roles if undefined).
+     *
+     * When evaluatingRole is set, only rules that are either role-agnostic
+     * (no roles/paths conditions) or relevant to the specified role are
+     * considered. First matching rule wins; default deny if none match.
+     *
+     * For roles with multiple extracted paths, delegates to
+     * evaluateRulesForMultiPaths for per-element evaluation.
+     */
+    evaluateRulesForRole(request, annotation, evaluatingRole) {
+        // Per-element evaluation: when a role has multiple paths, each path
+        // is independently discharged by the first matching rule.
+        if (evaluatingRole !== undefined) {
+            const rolePaths = extractAnnotatedPaths(request.arguments, annotation, [evaluatingRole]);
+            if (rolePaths.length > 1) {
+                return this.evaluateRulesForMultiPaths(request, annotation, evaluatingRole, rolePaths);
+            }
+        }
+        for (const rule of this.compiledPolicy.rules) {
+            if (evaluatingRole !== undefined && hasRoleConditions(rule) && !ruleRelevantToRole(rule, evaluatingRole)) {
+                continue;
+            }
+            if (this.ruleMatches(rule, request, annotation)) {
+                return {
+                    decision: rule.then,
+                    rule: rule.name,
+                    reason: rule.reason,
+                };
+            }
+        }
+        return {
+            decision: 'deny',
+            rule: 'default-deny',
+            reason: 'No matching policy rule -- denied by default',
+        };
+    }
+    /**
+     * Per-element path evaluation for roles with multiple paths.
+     *
+     * Each path is independently "discharged" by the first rule whose
+     * paths.within contains it. Rules without path conditions match all
+     * remaining paths. The most restrictive decision across all discharged
+     * paths wins (deny > escalate > allow). Undischarged paths default-deny.
+     */
+    evaluateRulesForMultiPaths(request, annotation, role, paths) {
+        const remainingPaths = new Set(paths);
+        let mostRestrictive;
+        for (const rule of this.compiledPolicy.rules) {
+            if (remainingPaths.size === 0)
+                break;
+            // Skip rules not relevant to this role
+            if (hasRoleConditions(rule) && !ruleRelevantToRole(rule, role))
+                continue;
+            // Skip rules whose non-path conditions don't match
+            if (!this.ruleMatchesNonPathConditions(rule, request, annotation))
+                continue;
+            const cond = rule.if;
+            let matched;
+            if (cond.paths !== undefined) {
+                // Rule has a path condition: discharge only paths within the directory
+                matched = [];
+                for (const p of remainingPaths) {
+                    if (isWithinDirectory(p, cond.paths.within)) {
+                        matched.push(p);
+                    }
+                }
+                if (matched.length === 0)
+                    continue;
+            }
+            else {
+                // Rule has no path condition: matches all remaining paths
+                matched = [...remainingPaths];
+            }
+            // Discharge matched paths and record decision
+            for (const p of matched)
+                remainingPaths.delete(p);
+            const result = {
+                decision: rule.then,
+                rule: rule.name,
+                reason: rule.reason,
+            };
+            if (!mostRestrictive || DECISION_SEVERITY[result.decision] > DECISION_SEVERITY[mostRestrictive.decision]) {
+                mostRestrictive = result;
+            }
+        }
+        // Any undischarged paths -> default-deny (deny is the most restrictive decision)
+        if (remainingPaths.size > 0) {
+            return {
+                decision: 'deny',
+                rule: 'default-deny',
+                reason: 'No matching policy rule -- denied by default',
+            };
+        }
+        return mostRestrictive;
+    }
+    /**
+     * Checks non-path conditions in a rule's `if` block: roles, server, tool, sideEffects.
+     */
+    ruleMatchesNonPathConditions(rule, request, annotation) {
+        const cond = rule.if;
+        if (cond.roles !== undefined) {
+            const toolHasMatchingRole = Object.values(annotation.args).some(argRoles => argRoles.some(r => cond.roles.includes(r)));
+            if (!toolHasMatchingRole)
+                return false;
+        }
+        if (cond.server !== undefined && !cond.server.includes(request.serverName)) {
+            return false;
+        }
+        if (cond.tool !== undefined && !cond.tool.includes(request.toolName)) {
+            return false;
+        }
+        if (cond.sideEffects !== undefined && annotation.sideEffects !== cond.sideEffects) {
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Checks whether all conditions in a rule's `if` block are satisfied.
+     */
+    ruleMatches(rule, request, annotation) {
+        if (!this.ruleMatchesNonPathConditions(rule, request, annotation))
+            return false;
+        // Check paths condition
+        const cond = rule.if;
+        if (cond.paths !== undefined) {
+            const extracted = extractAnnotatedPaths(request.arguments, annotation, cond.paths.roles);
+            // Zero paths extracted = condition not satisfied, rule does not match
+            if (extracted.length === 0)
+                return false;
+            // isWithinDirectory resolves paths internally, no pre-resolution needed
+            const allWithin = extracted.every(p => isWithinDirectory(p, cond.paths.within));
+            if (!allWithin)
+                return false;
+        }
+        // Check domains condition
+        if (cond.domains !== undefined) {
+            const urlArgs = extractAnnotatedUrls(request.arguments, annotation, cond.domains.roles);
+            // Zero URL args extracted = condition not satisfied, rule does not match
+            if (urlArgs.length === 0)
+                return false;
+            const allMatch = urlArgs.every(({ value, roleDef }) => {
+                const domain = resolveUrlForDomainCheck(value, roleDef, request.arguments);
+                return domainMatchesAllowlist(domain, cond.domains.allowed);
+            });
+            if (!allMatch)
+                return false;
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=policy-engine.js.map

package/dist/trusted-process/policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/trusted-process/policy-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAWH,OAAO,EACL,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,uBAAuB,GAExB,MAAM,4BAA4B,CAAC;AAEpC;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,IAA6B;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3G,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBACvG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,IAA6B,EAC7B,UAA0B,EAC1B,WAA2B;IAE3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAExD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,UAAkB,EAAE,SAAiB;IAC9D,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,YAAoB,EAAE,cAAwB;IACrE,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC/C,OAAO,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAC9B,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QACvC,OAAO,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC;AAeD,MAAM,iBAAiB,GAA8B,IAAI,GAAG,EAAE,CAAC;AAE/D,8DAA8D;AAC9D,SAAS,aAAa,CAAC,QAA0B;IAC/C,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,CAAC;AAC/D,CAAC;AAED,sFAAsF;AACtF,MAAM,iBAAiB,GAAyC;IAC9D,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;CACR,CAAC;AAEF;;;GAGG;AACH,SAAS,oBAAoB,CAAC,UAA0B;IACtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;IACtC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,oBAAoB;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAC3B,IAA6B,EAC7B,UAA0B,EAC1B,WAA2B;IAE3B,MAAM,IAAI,GAA0E,EAAE,CAAC;IACvF,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,YAAY;YAAE,SAAS;QAE5B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAC/B,KAAa,EACb,OAAuB,EACvB,OAAgC;IAEhC,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,gBAAgB,EAAE,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,cAAiC;IAEjC,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QACnC,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB;YACjD,OAAO,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,KAAK,OAAO,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,IAAkB;IAC3C,OAAO,IAAI,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC;AACrG,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,IAAkB,EAAE,IAAkB;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;IACrB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/E,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,YAAY;IACf,aAAa,CAA8B;IAC3C,cAAc,CAAqB;IACnC,cAAc,CAAW;IACzB,gBAAgB,CAAU;IAC1B,sBAAsB,CAAyC;IAEvE,YACE,cAAkC,EAClC,eAAoC,EACpC,cAAwB,EACxB,gBAAyB,EACzB,sBAA+D;QAE/D,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,IAAI,IAAI,GAAG,EAAE,CAAC;QAClE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAChE,CAAC;IAEO,kBAAkB,CAAC,WAAgC;QACzD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA0B,CAAC;QAC9C,KAAK,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3E,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAG,GAAG,UAAU,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9C,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,kEAAkE;IAClE,aAAa,CAAC,UAAkB,EAAE,QAAgB;QAChD,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,QAAQ,CAAC,OAAwB;QAC/B,kFAAkF;QAClF,MAAM,UAAU,GAAG,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,UAAU,CAAC,QAAQ;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;QAEpD,4DAA4D;QAC5D,OAAO,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;;;;;;;OAWG;IACK,4BAA4B,CAAC,OAAwB;QAC3D,wDAAwD;QACxD,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAExF,2DAA2D;QAC3D,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,MAAM,cAAc,GAAG,UAAU;YAC/B,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC;YACjE,CAAC,CAAC,EAAE,CAAC;QAEP,iDAAiD;QACjD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,cAAc,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5D,8DAA8D;QAC9D,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;YAC/B,IAAI,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC7C,OAAO,aAAa,CAAC;oBACnB,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,2BAA2B;oBACjC,MAAM,EAAE,0CAA0C,EAAE,EAAE;iBACvD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,EAAE;QACF,wEAAwE;QACxE,qEAAqE;QACrE,iEAAiE;QACjE,sEAAsE;QACtE,mCAAmC;QACnC,EAAE;QACF,wEAAwE;QACxE,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAgB,CAAC;QACrD,MAAM,oBAAoB,GAAG,UAAU;YACrC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC,CAAC,aAAa,CAAC;QAElB,gFAAgF;QAChF,MAAM,OAAO,GAAG,UAAU;YACxB,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;YACpE,CAAC,CAAC,EAAE,CAAC;QAEP,4DAA4D;QAC5D,MAAM,sBAAsB,GAAG,UAAU;YACvC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpB,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAClC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CACzE;YACH,CAAC,CAAC,KAAK,CAAC;QAEV,IAAI,IAAI,CAAC,gBAAgB,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,8DAA8D;YAC9D,iFAAiF;YACjF,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,KAAK,CACjD,EAAE,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,gBAAiB,CAAC,CACpD,CAAC;YAEF,IAAI,gBAAgB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBACxE,OAAO,aAAa,CAAC;oBACnB,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,0BAA0B;oBAChC,MAAM,EAAE,+CAA+C,IAAI,CAAC,gBAAgB,EAAE;iBAC/E,CAAC,CAAC;YACL,CAAC;YAED,kEAAkE;YAClE,qEAAqE;YACrE,6DAA6D;YAC7D,oDAAoD;YACpD,IAAI,UAAU,EAAE,CAAC;gBACf,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;oBAC7B,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;wBAAE,SAAS;oBACjD,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;oBAClF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,gBAAiB,CAAC,CAAC,EAAE,CAAC;wBACrG,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACjC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAEtE,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;oBACzC,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;oBAC3E,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;wBAC/C,OAAO,aAAa,CAAC;4BACnB,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,4BAA4B;4BAClC,MAAM,EAAE,eAAe,MAAM,yCAAyC,OAAO,CAAC,UAAU,GAAG;yBAC5F,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,6DAA6D;gBAC7D,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;oBAC/B,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;YACD,wFAAwF;QAC1F,CAAC;QAED,+BAA+B;QAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,aAAa,CAAC;gBACnB,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,yBAAyB;gBAC/B,MAAM,EAAE,iBAAiB,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,EAAE;aAClE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;IAC5G,CAAC;IAED;;;;;;;;;;OAUG;IACK,qBAAqB,CAC3B,OAAwB,EACxB,oBAA+C;QAE/C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAE,CAAC;QACzF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;QAElD,2DAA2D;QAC3D,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAE3E,mDAAmD;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO;gBACL,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,0BAA0B;gBAChC,MAAM,EAAE,gDAAgD;aACzD,CAAC;QACJ,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,4DAA4D;YAC5D,OAAO,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,eAA6C,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC9C,IAAI,CAAC,eAAe,IAAI,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzG,eAAe,GAAG,MAAM,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,eAAgB,CAAC;IAC1B,CAAC;IAED;;;;;;;;;OASG;IACK,oBAAoB,CAC1B,OAAwB,EACxB,UAA0B,EAC1B,cAAwC;QAExC,oEAAoE;QACpE,0DAA0D;QAC1D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;YACzF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;YAC7C,IAAI,cAAc,KAAK,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;gBACzG,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;gBAChD,OAAO;oBACL,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,8CAA8C;SACvD,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,0BAA0B,CAChC,OAAwB,EACxB,UAA0B,EAC1B,IAAkB,EAClB,KAAe;QAEf,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,eAA6C,CAAC;QAElD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;YAC7C,IAAI,cAAc,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM;YAErC,uCAAuC;YACvC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,SAAS;YAEzE,mDAAmD;YACnD,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC;gBAAE,SAAS;YAE5E,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,OAAiB,CAAC;YAEtB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,uEAAuE;gBACvE,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;oBAC/B,IAAI,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;YACrC,CAAC;iBAAM,CAAC;gBACN,0DAA0D;gBAC1D,OAAO,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;YAChC,CAAC;YAED,8CAA8C;YAC9C,KAAK,MAAM,CAAC,IAAI,OAAO;gBAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAElD,MAAM,MAAM,GAAqB;gBAC/B,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;YACF,IAAI,CAAC,eAAe,IAAI,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzG,eAAe,GAAG,MAAM,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,iFAAiF;QACjF,IAAI,cAAc,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,8CAA8C;aACvD,CAAC;QACJ,CAAC;QAED,OAAO,eAAgB,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,4BAA4B,CAClC,IAAkB,EAClB,OAAwB,EACxB,UAA0B;QAE1B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QAErB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAC7D,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CACxD,CAAC;YACF,IAAI,CAAC,mBAAmB;gBAAE,OAAO,KAAK,CAAC;QACzC,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,UAAU,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YAClF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,WAAW,CACjB,IAAkB,EAClB,OAAwB,EACxB,UAA0B;QAE1B,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAEhF,wBAAwB;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,qBAAqB,CACrC,OAAO,CAAC,SAAS,EACjB,UAAU,EACV,IAAI,CAAC,KAAK,CAAC,KAAK,CACjB,CAAC;YAEF,sEAAsE;YACtE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAEzC,wEAAwE;YACxE,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,KAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YACjF,IAAI,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;QAC/B,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAExF,yEAAyE;YACzE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAEvC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACpD,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC3E,OAAO,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,OAAQ,CAAC,OAAO,CAAC,CAAC;YAC/D,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;QAC9B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/trusted-process/policy-roots.d.ts

@@ -0,0 +1,50 @@
+import type { CompiledPolicyFile } from '../pipeline/types.js';
+/**
+ * Root entry for the MCP Roots protocol.
+ * Mirrors the MCP SDK's Root type without importing it directly,
+ * keeping this module free of SDK dependencies.
+ */
+export interface PolicyRoot {
+    /** Absolute directory path (not a file:// URI yet -- callers convert). */
+    readonly path: string;
+    /** Human-readable label for debugging and audit logs. */
+    readonly name: string;
+}
+/**
+ * Extracts the set of directories that the compiled policy references
+ * in `allow` or `escalate` rules with `paths.within` conditions.
+ * These directories, plus the sandbox, form the initial roots that
+ * MCP servers should accept.
+ *
+ * `deny` rules are excluded -- they never grant access, so exposing
+ * denied directories as roots would widen the server-side boundary
+ * without purpose.
+ *
+ * Catch-all rules without `paths.within` (like
+ * `escalate-read-outside-permitted-areas`) are also excluded from
+ * initial roots. Those are handled dynamically: when a human approves
+ * an escalation, the target directory is added as a root at that time.
+ *
+ * @param compiledPolicy - The loaded compiled policy artifact.
+ * @param allowedDirectory - The sandbox directory (always included).
+ * @returns Deduplicated array of PolicyRoot entries, sandbox first.
+ */
+export declare function extractPolicyRoots(compiledPolicy: CompiledPolicyFile, allowedDirectory: string): PolicyRoot[];
+/**
+ * Converts PolicyRoot entries to MCP Root objects with `file://` URIs.
+ */
+export declare function toMcpRoots(policyRoots: PolicyRoot[]): Array<{
+    uri: string;
+    name: string;
+}>;
+/**
+ * Extracts the containing directory for a filesystem path.
+ * Used to derive the root directory when a human approves an
+ * escalation -- the approved path's parent directory becomes a root
+ * so the filesystem server will accept the forwarded call.
+ *
+ * If the path ends with a trailing slash, it is treated as a directory
+ * and returned as-is (without the trailing slash) after resolution.
+ * Otherwise dirname is used to get the containing directory.
+ */
+export declare function directoryForPath(filePath: string): string;

package/dist/trusted-process/policy-roots.js

@@ -0,0 +1,67 @@
+import { dirname } from 'node:path';
+import { resolveRealPath } from '../types/argument-roles.js';
+/**
+ * Extracts the set of directories that the compiled policy references
+ * in `allow` or `escalate` rules with `paths.within` conditions.
+ * These directories, plus the sandbox, form the initial roots that
+ * MCP servers should accept.
+ *
+ * `deny` rules are excluded -- they never grant access, so exposing
+ * denied directories as roots would widen the server-side boundary
+ * without purpose.
+ *
+ * Catch-all rules without `paths.within` (like
+ * `escalate-read-outside-permitted-areas`) are also excluded from
+ * initial roots. Those are handled dynamically: when a human approves
+ * an escalation, the target directory is added as a root at that time.
+ *
+ * @param compiledPolicy - The loaded compiled policy artifact.
+ * @param allowedDirectory - The sandbox directory (always included).
+ * @returns Deduplicated array of PolicyRoot entries, sandbox first.
+ */
+export function extractPolicyRoots(compiledPolicy, allowedDirectory) {
+    const seen = new Set();
+    const roots = [];
+    // Sandbox is always the first root.
+    const resolvedSandbox = resolveRealPath(allowedDirectory);
+    seen.add(resolvedSandbox);
+    roots.push({ path: resolvedSandbox, name: 'sandbox' });
+    for (const rule of compiledPolicy.rules) {
+        if (rule.then === 'deny')
+            continue;
+        if (!rule.if.paths?.within)
+            continue;
+        const dir = resolveRealPath(rule.if.paths.within);
+        if (seen.has(dir))
+            continue;
+        seen.add(dir);
+        roots.push({ path: dir, name: rule.name });
+    }
+    return roots;
+}
+/**
+ * Converts PolicyRoot entries to MCP Root objects with `file://` URIs.
+ */
+export function toMcpRoots(policyRoots) {
+    return policyRoots.map(r => ({
+        uri: `file://${r.path}`,
+        name: r.name,
+    }));
+}
+/**
+ * Extracts the containing directory for a filesystem path.
+ * Used to derive the root directory when a human approves an
+ * escalation -- the approved path's parent directory becomes a root
+ * so the filesystem server will accept the forwarded call.
+ *
+ * If the path ends with a trailing slash, it is treated as a directory
+ * and returned as-is (without the trailing slash) after resolution.
+ * Otherwise dirname is used to get the containing directory.
+ */
+export function directoryForPath(filePath) {
+    // Check for trailing slash before resolving, since resolveRealPath() strips it.
+    if (filePath.endsWith('/'))
+        return resolveRealPath(filePath);
+    return dirname(resolveRealPath(filePath));
+}
+//# sourceMappingURL=policy-roots.js.map

package/dist/trusted-process/policy-roots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-roots.js","sourceRoot":"","sources":["../../src/trusted-process/policy-roots.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAc7D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,kBAAkB,CAChC,cAAkC,EAClC,gBAAwB;IAExB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,oCAAoC;IACpC,MAAM,eAAe,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAEvD,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACnC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM;YAAE,SAAS;QAErC,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAE5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CACxB,WAAyB;IAEzB,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3B,GAAG,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE;QACvB,IAAI,EAAE,CAAC,CAAC,IAAI;KACb,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,gFAAgF;IAChF,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7D,OAAO,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC5C,CAAC"}