@sema-ai/core 1.275.1

package/dist/core/permission-rules.js

@@ -0,0 +1,357 @@
+/**
+ * design/127 — **参数级权限规则 DSL**(CC 2.1.201 追平批 γ)。声明式规则字符串 → {@link ToolPolicy}
+ * 编译器:`"Tool"`(裸)/ `"Tool(param:pattern)"`(参数级,`*` 通配全串锚定)。CC ground truth
+ * 行号级:解析 `Lh` :55214 · 通配 `ZMr` :55196 · 参数级 matcher `gnn` :595123 · 评估序 `G1e` :595272。
+ *
+ * 架构边界(design/127 §0,重判过的「core 不长 rule interpreter」):这是纯函数式、opt-in、零
+ * run-loop 介入的「声明式数据→ToolPolicy」工厂(`createCoarseCommandNamePolicy` 同形态先例)。
+ * core 不读设置文件、不管 source 层级合并 —— Settings-loader 把各层合并成**单一规则表**后编译
+ * **一个** policy(不要按层各编译再组合:combinePolicies 的 fold 里 ask 胜 allow,跨 policy 的
+ * 显式 allow 规则会被另一 policy 的 ask 吞掉 —— codex 127 审 B3)。
+ *
+ * 🔴 与 CC 的三处有意差(design/127 r2):
+ *  - CC 参数级 generic 道无 allow lane(gnn 只有 deny/ask)—— 我们同样:`allow` + 参数级 content =
+ *    无效规则;auto-allow 只来自裸工具规则。
+ *  - CC 对尾缀垃圾静默降级为裸名(Lh `n !== len-1`)—— `parsePermissionRule` 保持 CC parity,但
+ *    **工厂 validator strict**:降级即 invalid(fail-fast 世界观,写错的规则不能静默变宽)。
+ *  - 已知主字段参数规则(如 `Bash(command:…)`)默认 **reject**:通配是 trim 后**整串 lexical**
+ *    匹配,不是 shell AST / 前缀 lane —— `Bash(command:git push*)` 匹配不了 `cd /x && git push`,
+ *    「以为挡住了」比没挡更危险(codex 127 审 M2)。`primaryFieldGeneric:"allow-lexical"` 显式解锁。
+ */
+import { canonicalToolName } from "./tool-name-aliases.js";
+/** [K-PLATFORM-SWEEP] MINOR#11: Bash's REAL non-primary arg names, accepted as generic param rules
+ *  (`Bash(timeout:...)`). Exported SOLELY so a lockstep test can assert it against the live Bash tool
+ *  schema — a schema param added without updating this set would compile to silently-never-matching
+ *  rules (the exact drift class the Opus 复审 m note warned about). */
+export const BASH_GENERIC_PARAMS = new Set(["command", "timeout", "description", "run_in_background"]);
+const DEFAULT_CAPS = {
+    maxRules: 256,
+    maxRuleLength: 512,
+    maxPatternLength: 256,
+    maxStars: 16,
+    maxScalarValueChars: 16_384,
+};
+// ─────────────────────────────────────────────────────────────────────────────
+// Parser (CC Lh :55214 parity)
+// ─────────────────────────────────────────────────────────────────────────────
+/** First index of `ch` preceded by an EVEN number of backslashes (CC `Dju` parity). */
+function indexOfUnescaped(s, ch) {
+    for (let i = 0; i < s.length; i++) {
+        if (s[i] !== ch)
+            continue;
+        let backslashes = 0;
+        for (let j = i - 1; j >= 0 && s[j] === "\\"; j--)
+            backslashes++;
+        if (backslashes % 2 === 0)
+            return i;
+    }
+    return -1;
+}
+/** Last index of `ch` preceded by an EVEN number of backslashes (CC `Pju` parity). */
+function lastIndexOfUnescaped(s, ch) {
+    for (let i = s.length - 1; i >= 0; i--) {
+        if (s[i] !== ch)
+            continue;
+        let backslashes = 0;
+        for (let j = i - 1; j >= 0 && s[j] === "\\"; j--)
+            backslashes++;
+        if (backslashes % 2 === 0)
+            return i;
+    }
+    return -1;
+}
+/** CC `Hju` parity — EXACTLY three unescapes: `\(` `\)` `\\`. */
+function unescapeRuleContent(s) {
+    return s.replaceAll("\\(", "(").replaceAll("\\)", ")").replaceAll("\\\\", "\\");
+}
+/**
+ * Parse one rule string — CC `Lh` :55214 parity, including its lenient downgrades (malformed parens /
+ * trailing garbage ⇒ the WHOLE string becomes the bare tool name). The strict complement lives in
+ * {@link validatePermissionRules} — use that (or the factory) to refuse the downgrades.
+ */
+export function parsePermissionRule(rule) {
+    const open = indexOfUnescaped(rule, "(");
+    if (open === -1)
+        return { toolName: rule.trim() };
+    const close = lastIndexOfUnescaped(rule, ")");
+    if (close === -1 || close <= open)
+        return { toolName: rule.trim() };
+    if (close !== rule.length - 1)
+        return { toolName: rule.trim() };
+    const name = rule.substring(0, open);
+    const content = rule.substring(open + 1, close);
+    if (!name)
+        return { toolName: rule.trim() };
+    if (content === "" || content === "*")
+        return { toolName: name.trim() };
+    return { toolName: name.trim(), ruleContent: unescapeRuleContent(content) };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Wildcard matcher (CC ZMr :55196 semantics — `*` only, FULL-string anchor, works across newlines)
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Linear-time `*` glob match (design/127 M6: NOT a RegExp — patterns may come from tenant-supplied
+ * Settings layers; the classic two-pointer walk has zero ReDoS surface and the same semantics as CC's
+ * anchored `^…$`+dotAll construction: every non-`*` char is literal, `*` spans anything incl. newlines).
+ */
+export function wildcardMatch(pattern, value) {
+    let p = 0;
+    let v = 0;
+    let star = -1;
+    let mark = 0;
+    while (v < value.length) {
+        if (p < pattern.length && pattern[p] === value[v] && pattern[p] !== "*") {
+            p++;
+            v++;
+        }
+        else if (p < pattern.length && pattern[p] === "*") {
+            star = p++;
+            mark = v;
+        }
+        else if (star >= 0) {
+            p = star + 1;
+            v = ++mark;
+        }
+        else {
+            return false;
+        }
+    }
+    while (p < pattern.length && pattern[p] === "*")
+        p++;
+    return p === pattern.length;
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Validation / compilation (strict layer OVER the lenient parser)
+// ─────────────────────────────────────────────────────────────────────────────
+/** 已知主字段表(codex 127 审 M2 + 实现审 M):这些 `(param:…)` 规则默认 reject —— CC 里它们走
+ *  工具专属 matcher(前缀/glob/AST),generic 整串 lexical 匹配会造成假安全感。**字段集合**而非单
+ *  字段:文件族的 legacy `path` 别名(本仓库 fs 工具仍接受它作 `file_path` 兼容名)与 Grep/Glob 的
+ *  `path`(CC ruleContentField)一并收入(实现审 M1/M2)。 */
+const PRIMARY_FIELDS = {
+    Bash: new Set(["command"]),
+    Read: new Set(["file_path", "path"]),
+    Edit: new Set(["file_path", "path"]),
+    Write: new Set(["file_path", "path"]),
+    MultiEdit: new Set(["file_path", "path"]),
+    NotebookEdit: new Set(["notebook_path", "path"]),
+    Grep: new Set(["path"]),
+    Glob: new Set(["path"]),
+    WebFetch: new Set(["url"]),
+    WebSearch: new Set(["query"]),
+};
+const FILE_TOOLS = new Set(["Read", "Edit", "Write", "MultiEdit", "NotebookEdit", "Grep", "Glob"]);
+function countStars(s) {
+    let n = 0;
+    for (const c of s)
+        if (c === "*")
+            n++;
+    return n;
+}
+function compile(rules, caps, primaryFieldGeneric) {
+    const byTool = new Map();
+    const issues = [];
+    const bad = (rule, code, message) => {
+        issues.push({ rule, code, message });
+    };
+    if (rules.length > caps.maxRules) {
+        // Cap the WHOLE set loudly rather than silently evaluating a subset.
+        return { byTool, issues: [{ rule: "", code: "invalid.cap_exceeded", message: `${rules.length} rules > maxRules ${caps.maxRules}` }] };
+    }
+    for (const r of rules) {
+        const text = r.rule;
+        if (text.length > caps.maxRuleLength) {
+            bad(text, "invalid.cap_exceeded", `rule longer than ${caps.maxRuleLength} chars`);
+            continue;
+        }
+        const parsed = parsePermissionRule(text);
+        if (!parsed.toolName) {
+            bad(text, "invalid.empty_tool", "tool name cannot be empty");
+            continue;
+        }
+        // Opus 复审 m: a mis-escaped rule (`Read\(path:/etc/*)`) parses to a BARE rule whose "tool name"
+        // still contains paren/backslash chars — it can never equal a real req.toolName, so the deny would
+        // silently never fire. Not a plausible tool identifier ⇒ invalid, loudly.
+        if (parsed.ruleContent === undefined && /[()\\]/.test(parsed.toolName)) {
+            bad(text, "invalid.paren", "tool name still contains paren/escape characters — a mis-escaped rule would compile to a dead bare rule");
+            continue;
+        }
+        // Strict complement to the parser's CC-parity downgrades: an unescaped "(" that did NOT produce
+        // ruleContent (and wasn't the legitimate `Tool()`/`Tool(*)` bare form) means malformed parens /
+        // trailing garbage — invalid here, never silently widened to a bare-tool rule (design/127 M4).
+        if (parsed.ruleContent === undefined && indexOfUnescaped(text, "(") !== -1) {
+            const open = indexOfUnescaped(text, "(");
+            const close = lastIndexOfUnescaped(text, ")");
+            const legitimateBare = close === text.length - 1 && ["", "*"].includes(text.substring(open + 1, close));
+            if (!legitimateBare) {
+                bad(text, "invalid.paren", "malformed parentheses / trailing characters (would silently downgrade to a bare-tool rule)");
+                continue;
+            }
+        }
+        // 复审 r2 MAJOR: canonicalize BEFORE the mcp__/Bash-lane/PRIMARY_FIELDS routing so a legacy/alias
+        // tool name (e.g. `bash(...)`) can't bypass the Bash prefix lane + primary-field gate, and a deny keyed
+        // on the canonical name still matches the model's aliased call (check() canonicalizes symmetrically).
+        const toolName = canonicalToolName(parsed.toolName);
+        if (toolName.startsWith("mcp__") && (parsed.ruleContent !== undefined || indexOfUnescaped(text, "(") !== -1)) {
+            bad(text, "unsupported.mcp_paren", "MCP rules do not support patterns in parentheses (CC parity); use the toolAxes system");
+            continue;
+        }
+        const entry = byTool.get(toolName) ?? { bare: {}, param: { deny: [], ask: [] } };
+        if (parsed.ruleContent === undefined) {
+            entry.bare[r.behavior] = { ruleText: text, source: r.source };
+            byTool.set(toolName, entry);
+            continue;
+        }
+        // ── param-level content ── classify the CC-legal-but-unsupported lanes FIRST (codex B5): a
+        // `Bash(npm run:*)` mis-read as param "npm run" would never match anything = silent no-op.
+        const content = parsed.ruleContent;
+        const colon = content.indexOf(":");
+        if (toolName === "Bash") {
+            const paramPart = colon > 0 ? content.slice(0, colon).trim() : "";
+            // Opus 复审 m: identifier-shaped but UNKNOWN Bash params (`Bash(npm:install)`) would compile to a
+            // param rule on an arg key Bash calls never carry = silently-never-matching deny. Only Bash's real
+            // non-primary args are accepted as generic params; everything else is the prefix lane.
+            const looksLikeParamRule = colon > 0 && /^[A-Za-z_][A-Za-z0-9_]*$/.test(paramPart) && BASH_GENERIC_PARAMS.has(paramPart);
+            if (!looksLikeParamRule || content.endsWith(":*")) {
+                bad(text, "unsupported.bash_prefix", "Bash prefix/legacy rules (`Bash(npm run:*)`, `Bash(git *)`) are the tool-specific lane — not supported by the generic param DSL (use createCoarseCommandNamePolicy or a dedicated batch)");
+                continue;
+            }
+        }
+        else if (FILE_TOOLS.has(toolName) && colon <= 0) {
+            bad(text, "unsupported.file_glob", "file-tool glob rules (`Edit(src/**)`) are the tool-specific lane — not supported by the generic param DSL");
+            continue;
+        }
+        if (colon <= 0) {
+            bad(text, "invalid.param_split", "param-level ruleContent must be `param:pattern`");
+            continue;
+        }
+        const param = content.slice(0, colon).trim();
+        const pattern = content.slice(colon + 1).trim();
+        if (param === "" || pattern === "") {
+            bad(text, "invalid.param_split", "param and pattern must both be non-empty");
+            continue;
+        }
+        if (r.behavior === "allow") {
+            bad(text, "invalid.allow_param_rule", "param-level rules cannot `allow` (CC parity: the generic lane is deny/ask only; auto-allow comes from bare-tool rules)");
+            continue;
+        }
+        if (pattern.length > caps.maxPatternLength || countStars(pattern) > caps.maxStars) {
+            bad(text, "invalid.cap_exceeded", `pattern exceeds maxPatternLength ${caps.maxPatternLength} or maxStars ${caps.maxStars}`);
+            continue;
+        }
+        if (PRIMARY_FIELDS[toolName]?.has(param) && primaryFieldGeneric === "reject") {
+            bad(text, "invalid.primary_field", `"${param}" is ${toolName}'s primary field — the generic matcher is a trim+FULL-STRING lexical match (no shell/path semantics); '${toolName}(${param}:git push*)' would NOT match 'cd /x && git push'. Opt in with primaryFieldGeneric:"allow-lexical" if you understand this.`);
+            continue;
+        }
+        entry.param[r.behavior].push({ param, pattern, behavior: r.behavior, ruleText: text, source: r.source });
+        byTool.set(toolName, entry);
+    }
+    return { byTool, issues };
+}
+/** Dry-run 校验/迁移报告(codex 127 审 B5):不 throw,返回全部 issues(含 `unsupported.*` 分类,
+ *  供从 CC settings 迁移的部署逐条对照)。 */
+export function validatePermissionRules(rules, opts) {
+    const caps = { ...DEFAULT_CAPS, ...opts?.caps };
+    return compile(rules, caps, opts?.primaryFieldGeneric ?? "reject").issues;
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Policy factory
+// ─────────────────────────────────────────────────────────────────────────────
+function isPlainObjectArgs(args) {
+    return typeof args === "object" && args !== null && !Array.isArray(args);
+}
+/** gnn :595123 parity + B1 收窄:non-object args ⇒ no param rule matches;own top-level props only
+ *  (`param` is a literal key, never a dotted path); scalar values only. Oversized values FAIL-CLOSE
+ *  to the rule's lane (M6). */
+function matchParamRules(rules, args, maxScalarValueChars) {
+    if (!isPlainObjectArgs(args))
+        return undefined;
+    for (const r of rules) {
+        if (!Object.hasOwn(args, r.param))
+            continue;
+        const raw = args[r.param];
+        if (raw === undefined || raw === null)
+            continue;
+        const t = typeof raw;
+        if (t === "object" || t === "function" || t === "symbol")
+            continue;
+        const value = String(raw).trim();
+        if (value.length > maxScalarValueChars)
+            return r; // fail-closed: unverifiable ⇒ the rule's lane wins
+        if (wildcardMatch(r.pattern, value))
+            return r;
+    }
+    return undefined;
+}
+function ruleMessage(kind, ruleText, source) {
+    return `${kind} by permission rule "${ruleText}"${source ? ` (${source})` : ""}`;
+}
+/**
+ * Compile declarative permission rules into ONE {@link ToolPolicy} (design/127). Evaluation order
+ * inside the policy (CC `G1e` :595272 isomorph): bare deny → param deny → bare ask → param ask →
+ * bare allow → `defaultAction`. `check()` is idempotent and side-effect-free (combinePolicies 契约);
+ * all parsing/validation happens HERE, the hot path never re-parses.
+ *
+ * ⚠️ Composition note (codex 127 审 B3): an `allow` from this policy is "no objection", NOT a
+ * cross-policy override — another policy's ask/deny still outranks it in the combinePolicies fold.
+ * Express default-closed via `defaultAction`, never via a trailing always-ask policy.
+ */
+export function createPermissionRulePolicy(rules, opts) {
+    const caps = { ...DEFAULT_CAPS, ...opts?.caps };
+    const { byTool, issues } = compile(rules, caps, opts?.primaryFieldGeneric ?? "reject");
+    // Whole-set cap violation compiles an EMPTY table — under "skip" that would silently fail-open
+    // (every deny gone). It therefore throws regardless of onInvalidRule (codex 实现审 M3).
+    const setLevelCap = issues.some((i) => i.code === "invalid.cap_exceeded" && i.rule === "");
+    if (issues.length > 0 && ((opts?.onInvalidRule ?? "throw") === "throw" || setLevelCap)) {
+        const e = new Error(`createPermissionRulePolicy: ${issues.length} invalid/unsupported rule(s):\n` +
+            issues.map((i) => `  [${i.code}] ${i.rule || "(rule set)"}: ${i.message}`).join("\n"));
+        e.code = "config.invalid_permission_rules";
+        e.issues = issues;
+        throw e;
+    }
+    if (issues.length > 0) {
+        // "skip" audit surface: never drop rules silently.
+        if (opts?.onIssue) {
+            for (const i of issues) {
+                try {
+                    opts.onIssue(i);
+                }
+                catch {
+                    // codex 复审 m: an audit callback must never turn "skip bad rules" into a construction failure
+                }
+            }
+        }
+        else {
+            console.warn(`createPermissionRulePolicy: skipped ${issues.length} invalid/unsupported rule(s): ` +
+                issues.map((i) => `[${i.code}] ${i.rule}`).join("; "));
+        }
+    }
+    const defaultAction = opts?.defaultAction ?? "allow";
+    return {
+        check(req) {
+            const entry = byTool.get(canonicalToolName(req.toolName));
+            if (entry) {
+                if (entry.bare.deny) {
+                    return { action: "deny", reason: ruleMessage("denied", entry.bare.deny.ruleText, entry.bare.deny.source) };
+                }
+                const paramDeny = matchParamRules(entry.param.deny, req.args, caps.maxScalarValueChars);
+                if (paramDeny) {
+                    return { action: "deny", reason: ruleMessage("denied", paramDeny.ruleText, paramDeny.source) };
+                }
+                if (entry.bare.ask) {
+                    return { action: "ask", reason: ruleMessage("flagged", entry.bare.ask.ruleText, entry.bare.ask.source) };
+                }
+                const paramAsk = matchParamRules(entry.param.ask, req.args, caps.maxScalarValueChars);
+                if (paramAsk) {
+                    return { action: "ask", reason: ruleMessage("flagged", paramAsk.ruleText, paramAsk.source) };
+                }
+                if (entry.bare.allow) {
+                    return { action: "allow" };
+                }
+            }
+            if (defaultAction === "allow")
+                return { action: "allow" };
+            return { action: defaultAction, reason: `no permission rule matched "${req.toolName}" (default-${defaultAction} rule set)` };
+        },
+    };
+}
+//# sourceMappingURL=permission-rules.js.map

package/dist/core/permission-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-rules.js","sourceRoot":"","sources":["../../src/core/permission-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D;;;qEAGqE;AACrE,MAAM,CAAC,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAkD5H,MAAM,YAAY,GAAuB;IACvC,QAAQ,EAAE,GAAG;IACb,aAAa,EAAE,GAAG;IAClB,gBAAgB,EAAE,GAAG;IACrB,QAAQ,EAAE,EAAE;IACZ,mBAAmB,EAAE,MAAM;CAC5B,CAAC;AAqBF,gFAAgF;AAChF,+BAA+B;AAC/B,gFAAgF;AAEhF,uFAAuF;AACvF,SAAS,gBAAgB,CAAC,CAAS,EAAE,EAAU;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,SAAS;QAC1B,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE;YAAE,WAAW,EAAE,CAAC;QAChE,IAAI,WAAW,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,sFAAsF;AACtF,SAAS,oBAAoB,CAAC,CAAS,EAAE,EAAU;IACjD,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,SAAS;QAC1B,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE;YAAE,WAAW,EAAE,CAAC;QAChE,IAAI,WAAW,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,iEAAiE;AACjE,SAAS,mBAAmB,CAAC,CAAS;IACpC,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IACpE,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5C,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IACxE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,gFAAgF;AAChF,mGAAmG;AACnG,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,KAAa;IAC1D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;IACd,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACxE,CAAC,EAAE,CAAC;YACJ,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACpD,IAAI,GAAG,CAAC,EAAE,CAAC;YACX,IAAI,GAAG,CAAC,CAAC;QACX,CAAC;aAAM,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACrB,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;YACb,CAAC,GAAG,EAAE,IAAI,CAAC;QACb,CAAC;aAAM,CAAC;YACN,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,CAAC,EAAE,CAAC;IACrD,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC;AAC9B,CAAC;AAED,gFAAgF;AAChF,kEAAkE;AAClE,gFAAgF;AAEhF;;;kDAGkD;AAClD,MAAM,cAAc,GAAkD;IACpE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1B,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACpC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACpC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACrC,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACzC,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACvB,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1B,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;CAC9B,CAAC;AAEF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAoBnG,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,KAAK,GAAG;YAAE,CAAC,EAAE,CAAC;IACtC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CACd,KAAuB,EACvB,IAAwB,EACxB,mBAA+C;IAE/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IACpD,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAiC,EAAE,OAAe,EAAQ,EAAE;QACrF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,qEAAqE;QACrE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,qBAAqB,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;IACxI,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,EAAE,sBAAsB,EAAE,oBAAoB,IAAI,CAAC,aAAa,QAAQ,CAAC,CAAC;YAClF,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,GAAG,CAAC,IAAI,EAAE,oBAAoB,EAAE,2BAA2B,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,+FAA+F;QAC/F,mGAAmG;QACnG,0EAA0E;QAC1E,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,yGAAyG,CAAC,CAAC;YACtI,SAAS;QACX,CAAC;QACD,gGAAgG;QAChG,gGAAgG;QAChG,+FAA+F;QAC/F,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9C,MAAM,cAAc,GAAG,KAAK,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YACxG,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,4FAA4F,CAAC,CAAC;gBACzH,SAAS;YACX,CAAC;QACH,CAAC;QACD,gGAAgG;QAChG,wGAAwG;QACxG,sGAAsG;QACtG,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7G,GAAG,CAAC,IAAI,EAAE,uBAAuB,EAAE,uFAAuF,CAAC,CAAC;YAC5H,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC;QAEjF,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YAC9D,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,4FAA4F;QAC5F,2FAA2F;QAC3F,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC;QACnC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,gGAAgG;YAChG,mGAAmG;YACnG,uFAAuF;YACvF,MAAM,kBAAkB,GAAG,KAAK,GAAG,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzH,IAAI,CAAC,kBAAkB,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,GAAG,CAAC,IAAI,EAAE,yBAAyB,EAAE,0LAA0L,CAAC,CAAC;gBACjO,SAAS;YACX,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,EAAE,uBAAuB,EAAE,2GAA2G,CAAC,CAAC;YAChJ,SAAS;QACX,CAAC;QAED,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,EAAE,qBAAqB,EAAE,iDAAiD,CAAC,CAAC;YACpF,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,KAAK,KAAK,EAAE,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnC,GAAG,CAAC,IAAI,EAAE,qBAAqB,EAAE,0CAA0C,CAAC,CAAC;YAC7E,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,EAAE,0BAA0B,EAAE,wHAAwH,CAAC,CAAC;YAChK,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,gBAAgB,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClF,GAAG,CAAC,IAAI,EAAE,sBAAsB,EAAE,oCAAoC,IAAI,CAAC,gBAAgB,gBAAgB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC5H,SAAS;QACX,CAAC;QACD,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YAC7E,GAAG,CAAC,IAAI,EAAE,uBAAuB,EAAE,IAAI,KAAK,QAAQ,QAAQ,0GAA0G,QAAQ,IAAI,KAAK,2HAA2H,CAAC,CAAC;YACpT,SAAS;QACX,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACzG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED;iCACiC;AACjC,MAAM,UAAU,uBAAuB,CACrC,KAAuB,EACvB,IAAwE;IAExE,MAAM,IAAI,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;IAChD,OAAO,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,IAAI,QAAQ,CAAC,CAAC,MAAM,CAAC;AAC5E,CAAC;AAED,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,SAAS,iBAAiB,CAAC,IAAa;IACtC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;+BAE+B;AAC/B,SAAS,eAAe,CACtB,KAA0B,EAC1B,IAAa,EACb,mBAA2B;IAE3B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;YAAE,SAAS;QAC5C,MAAM,GAAG,GAAI,IAAgC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS;QAChD,MAAM,CAAC,GAAG,OAAO,GAAG,CAAC;QACrB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,QAAQ;YAAE,SAAS;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB;YAAE,OAAO,CAAC,CAAC,CAAC,mDAAmD;QACrG,IAAI,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgB,EAAE,MAAe;IAClE,OAAO,GAAG,IAAI,wBAAwB,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACnF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAuB,EAAE,IAAkC;IACpG,MAAM,IAAI,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,IAAI,QAAQ,CAAC,CAAC;IACvF,+FAA+F;IAC/F,qFAAqF;IACrF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,sBAAsB,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAC3F,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,aAAa,IAAI,OAAO,CAAC,KAAK,OAAO,IAAI,WAAW,CAAC,EAAE,CAAC;QACvF,MAAM,CAAC,GAAG,IAAI,KAAK,CACjB,+BAA+B,MAAM,CAAC,MAAM,iCAAiC;YAC3E,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,YAAY,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC3B,CAAC;QAC/D,CAAC,CAAC,IAAI,GAAG,iCAAiC,CAAC;QAC3C,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;QAClB,MAAM,CAAC,CAAC;IACV,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,mDAAmD;QACnD,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBAAC,MAAM,CAAC;oBACP,6FAA6F;gBAC/F,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CACV,uCAAuC,MAAM,CAAC,MAAM,gCAAgC;gBAClF,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,EAAE,aAAa,IAAI,OAAO,CAAC;IAErD,OAAO;QACL,KAAK,CAAC,GAAoB;YACxB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1D,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACpB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7G,CAAC;gBACD,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACxF,IAAI,SAAS,EAAE,CAAC;oBACd,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjG,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;oBACnB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3G,CAAC;gBACD,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACtF,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/F,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACrB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC7B,CAAC;YACH,CAAC;YACD,IAAI,aAAa,KAAK,OAAO;gBAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1D,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,+BAA+B,GAAG,CAAC,QAAQ,cAAc,aAAa,YAAY,EAAE,CAAC;QAC/H,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/present-plan-tool.d.ts

@@ -0,0 +1,28 @@
+import type { ToolSpec } from "./types.js";
+/** The first-party plan-review tool's name (design/80 D-B; CC `ExitPlanMode` parity). Reserved when
+ *  `TaskSpec.enablePlanMode` is set. */
+export declare const PRESENT_PLAN_TOOL_NAME = "ExitPlanMode";
+/** design/108 — the first-party "enter plan mode" tool's name (CC `EnterPlanMode` parity). Mounted (alongside
+ *  `present_plan`) when `TaskSpec.enablePlanMode` is set, so the model can self-impose read-only plan mode. */
+export declare const ENTER_PLAN_MODE_TOOL_NAME = "EnterPlanMode";
+/**
+ * design/108 — the first-party `enter_plan_mode` tool (CC `EnterPlanMode` parity). A THIN composition over the
+ * general `ctx.enterPlanMode()` primitive: the model calls it to self-impose read-only plan mode for the rest of
+ * THIS run. `effect:"read"` (it grants nothing — it RESTRICTS). `executionMode:"sequential"` so that in a batch
+ * like `[enter_plan_mode, edit_file]` the whole batch runs sequentially (agent-loop `hasSequentialToolCall`),
+ * making enter execute (set the flag) BEFORE the sibling edit is prepared+gated — closing the same-batch window.
+ * Exit is via `present_plan` (→ plan_review → human approve-resume), not by this tool.
+ */
+export declare function createEnterPlanModeTool(enterPlanMode: () => void): ToolSpec;
+/**
+ * design/80 D-B — the first-party `present_plan` tool (CC `ExitPlanMode` parity). A THIN composition over the
+ * general `ctx.requestReview()` primitive: the model calls it with a plan; the tool returns the plan as its
+ * content (so it reaches the reviewer via the transcript — the plan is NOT stored on the gate, design/76 §9),
+ * and signals the engine to pause with a `plan_review` checkpoint at the next safe turn boundary. The tool has
+ * NO side effect (`effect:"read"`); the actual pause/mint is the engine's, gated on a wired `checkpointStore`.
+ * `requestReview` is the prepare-task closure (the same primitive `ctx.requestReview` exposes to caller tools).
+ */
+export declare function createPresentPlanTool(requestReview: (opts?: {
+    reason?: string;
+}) => void): ToolSpec;
+//# sourceMappingURL=present-plan-tool.d.ts.map

package/dist/core/present-plan-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"present-plan-tool.d.ts","sourceRoot":"","sources":["../../src/core/present-plan-tool.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3C;wCACwC;AACxC,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AAErD;+GAC+G;AAC/G,eAAO,MAAM,yBAAyB,kBAAkB,CAAC;AAkCzD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,MAAM,IAAI,GAAG,QAAQ,CAmB3E;AAiBD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,GAAG,QAAQ,CA8BnG"}

package/dist/core/present-plan-tool.js

@@ -0,0 +1,119 @@
+import { Type } from "typebox";
+import { delimitUntrusted } from "./untrusted-text.js";
+/** The first-party plan-review tool's name (design/80 D-B; CC `ExitPlanMode` parity). Reserved when
+ *  `TaskSpec.enablePlanMode` is set. */
+export const PRESENT_PLAN_TOOL_NAME = "ExitPlanMode"; // CC 2.1.187 name (batch-A; old "present_plan" canonicalized)
+/** design/108 — the first-party "enter plan mode" tool's name (CC `EnterPlanMode` parity). Mounted (alongside
+ *  `present_plan`) when `TaskSpec.enablePlanMode` is set, so the model can self-impose read-only plan mode. */
+export const ENTER_PLAN_MODE_TOOL_NAME = "EnterPlanMode"; // CC 2.1.187 name (batch-A; old "enter_plan_mode" canonicalized)
+// design/116 W4 — 判据骨架抄 CC EnterPlanModeTool/prompt.ts 保守变体(getEnterPlanModeToolPromptAnt:108-163):
+// 何时进(架构性歧义/需求模糊/高冲击重构)+ 何时不进(路径清晰即使多文件/明确指令/常规模式/research)。trim 掉
+// sema 没有的机制(plan file / "REQUIRES user approval to enter" / What-Happens 工作流段);保留 sema 行为句
+// (进入后本 run 写类工具被拒;出口 = ExitPlanMode → SUSPEND 等人审批准)。
+const ENTER_PLAN_MODE_DESCRIPTION = `Enter PLAN MODE (read-only): stop making changes and switch to exploration/planning. For the rest of this run, write/edit/mutating tool calls are REJECTED while read-only tools (Read, Grep, Glob, etc.) still work. When your plan is ready, call ${PRESENT_PLAN_TOOL_NAME} with it — the run PAUSES for a human to approve it, then continues (read-only lifted) so you can execute.
+
+Use this when a task has genuine ambiguity about the right approach and getting human sign-off before acting would prevent significant rework.
+
+## When to Use This Tool
+1. Significant architectural ambiguity: multiple reasonable approaches exist and the choice meaningfully affects the codebase
+   - Example: "Add caching to the API" — Redis vs in-memory vs file-based
+   - Example: "Add real-time updates" — WebSockets vs SSE vs polling
+2. Unclear requirements: you need to explore and clarify before you can make progress
+   - Example: "Make the app faster" — need to profile and identify bottlenecks first
+3. High-impact or destructive restructuring: the work significantly restructures, migrates, or deletes existing code, and buy-in first reduces risk
+   - Example: "Redesign the authentication system"
+
+## When NOT to Use This Tool
+Skip plan mode when you can reasonably infer the right approach:
+- The task is straightforward even if it touches multiple files
+- The user's request is specific enough that the implementation path is clear
+- You're adding a feature with an obvious implementation pattern (e.g. a button, a new endpoint following existing conventions)
+- Bug fixes where the fix is clear once you understand the bug
+- Pure research/exploration tasks — just read; no plan approval is needed
+- The user says something like "can we work on X" or "let's do X" — just get started
+
+When in doubt, prefer starting work and asking the human targeted questions over entering a full planning phase.
+
+## Examples
+GOOD: "Add user authentication to the app" (genuinely ambiguous: session vs JWT, token storage, middleware). "Redesign the data pipeline" (major restructuring where the wrong approach wastes significant effort).
+BAD: "Add a delete button to the user profile" (implementation path is clear; just do it). "Update the error handling in the API" (start working; ask specific questions if needed). "Fix the typo in the README" (straightforward, no planning needed).`;
+/**
+ * design/108 — the first-party `enter_plan_mode` tool (CC `EnterPlanMode` parity). A THIN composition over the
+ * general `ctx.enterPlanMode()` primitive: the model calls it to self-impose read-only plan mode for the rest of
+ * THIS run. `effect:"read"` (it grants nothing — it RESTRICTS). `executionMode:"sequential"` so that in a batch
+ * like `[enter_plan_mode, edit_file]` the whole batch runs sequentially (agent-loop `hasSequentialToolCall`),
+ * making enter execute (set the flag) BEFORE the sibling edit is prepared+gated — closing the same-batch window.
+ * Exit is via `present_plan` (→ plan_review → human approve-resume), not by this tool.
+ */
+export function createEnterPlanModeTool(enterPlanMode) {
+    return {
+        name: ENTER_PLAN_MODE_TOOL_NAME,
+        description: ENTER_PLAN_MODE_DESCRIPTION,
+        parameters: Type.Object({}),
+        effect: "read", // it RESTRICTS subsequent writes; it grants nothing — read-effect is correct
+        executionMode: "sequential", // close the same-batch [enter, write] window (design/108 D2; agent-loop:516)
+        execute: async () => {
+            enterPlanMode();
+            const message = "Entered plan mode (read-only). Write/edit/mutating tools are now rejected for the rest of this run; " +
+                `research with read-only tools, then call ${PRESENT_PLAN_TOOL_NAME} with your plan to get it approved before acting.`;
+            return {
+                content: message,
+                // 18-tool toolUseResult 尾批: CC 2.1.201 EnterPlanModeOutput = {message}. `type` = wire discriminant.
+                details: { type: "enter-plan-mode", message },
+            };
+        },
+    };
+}
+// design/116 W4(顺带)— 判据句抄 CC ExitPlanModeTool/prompt.ts(EXIT_PLAN_MODE_V2_TOOL_PROMPT 的 When-to-Use 段):
+// 只用于「要写代码的任务」的实施规划、research 不用;本工具本身即请求批准(别另开口问 "Is this plan okay?")。
+// trim 掉 CC 的 plan-file 机制(sema 的 plan 是本工具的参数,不是文件)。
+const PRESENT_PLAN_DESCRIPTION = [
+    "Present your proposed PLAN for human approval BEFORE taking any action (CC plan-mode parity).",
+    "Use this when you are in plan mode (read-only research): once you have explored enough and formed a concrete plan,",
+    "provide the full plan here. The run PAUSES for a human to approve, edit, or reject it.",
+    "IMPORTANT: only use this when the task requires planning the implementation steps of work that changes things;",
+    "for research tasks (gathering information, reading files, understanding the codebase) do NOT use this tool.",
+    "This tool inherently requests approval of your plan — do not separately ask \"Is this plan okay?\".",
+    "Do NOT attempt edits / writes / mutating commands before the plan is approved — present the plan first.",
+    "If the plan is approved, the run continues (and any read-only restriction is lifted) so you can execute it;",
+    "if it is rejected or edited, follow the reviewer's feedback instead of the original plan.",
+].join(" ");
+/**
+ * design/80 D-B — the first-party `present_plan` tool (CC `ExitPlanMode` parity). A THIN composition over the
+ * general `ctx.requestReview()` primitive: the model calls it with a plan; the tool returns the plan as its
+ * content (so it reaches the reviewer via the transcript — the plan is NOT stored on the gate, design/76 §9),
+ * and signals the engine to pause with a `plan_review` checkpoint at the next safe turn boundary. The tool has
+ * NO side effect (`effect:"read"`); the actual pause/mint is the engine's, gated on a wired `checkpointStore`.
+ * `requestReview` is the prepare-task closure (the same primitive `ctx.requestReview` exposes to caller tools).
+ */
+export function createPresentPlanTool(requestReview) {
+    return {
+        name: PRESENT_PLAN_TOOL_NAME,
+        description: PRESENT_PLAN_DESCRIPTION,
+        parameters: Type.Object({
+            plan: Type.String({
+                description: "Your full proposed plan, in markdown. The human reviewer approves / edits / rejects it before you act.",
+            }),
+        }),
+        effect: "read",
+        execute: async (args) => {
+            const { plan } = args; // validated against the schema by the tool runtime before execute
+            // Signal the pre-action plan-review gate. The engine honors it at the next clean turn boundary (no-op if no
+            // checkpointStore is wired). The plan text rides in the returned content → the reviewer sees it.
+            requestReview({ reason: "ExitPlanMode" });
+            // The plan is UNTRUSTED model output (it is re-fed to the model + shown to a human reviewer), so fence it
+            // with delimitUntrusted so an adversarial `</system-reminder>` / break-out sequence can't escape its frame.
+            return {
+                content: `Plan presented for human review:\n\n${delimitUntrusted("plan", plan)}\n\n` +
+                    "(The run is pausing for approval — you will continue once the plan is approved, edited, or rejected.)",
+                // 18-tool toolUseResult 尾批: CC 2.1.201 ExitPlanModeOutput requires {plan, isAgent}; the rest
+                // (filePath/planWasEdited/…) are CC-mechanism fields sema doesn't have (plan is a tool arg, not a
+                // file; the review verdict arrives via the resume leg, not this result) → omitted, all CC-optional.
+                // The RAW plan (unfenced) goes in details — the fence is a model-facing defense; the shell renders
+                // its own plan card. `isAgent:false`: this is the top-level task's plan gate.
+                details: { type: "exit-plan-mode", plan, isAgent: false },
+            };
+        },
+    };
+}
+//# sourceMappingURL=present-plan-tool.js.map

package/dist/core/present-plan-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"present-plan-tool.js","sourceRoot":"","sources":["../../src/core/present-plan-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD;wCACwC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC,CAAC,8DAA8D;AAEpH;+GAC+G;AAC/G,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC,CAAC,iEAAiE;AAE3H,oGAAoG;AACpG,mEAAmE;AACnE,4FAA4F;AAC5F,uDAAuD;AACvD,MAAM,2BAA2B,GAAG,uPAAuP,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;yPA0BxD,CAAC;AAE1P;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,aAAyB;IAC/D,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,2BAA2B;QACxC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,EAAE,MAAM,EAAE,6EAA6E;QAC7F,aAAa,EAAE,YAAY,EAAE,6EAA6E;QAC1G,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,aAAa,EAAE,CAAC;YAChB,MAAM,OAAO,GACX,sGAAsG;gBACtG,4CAA4C,sBAAsB,mDAAmD,CAAC;YACxH,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,oGAAoG;gBACpG,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE;aAC9C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,wEAAwE;AACxE,sDAAsD;AACtD,MAAM,wBAAwB,GAAG;IAC/B,+FAA+F;IAC/F,oHAAoH;IACpH,wFAAwF;IACxF,gHAAgH;IAChH,6GAA6G;IAC7G,qGAAqG;IACrG,yGAAyG;IACzG,6GAA6G;IAC7G,2FAA2F;CAC5F,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,aAAmD;IACvF,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,wBAAwB;QACrC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;gBAChB,WAAW,EAAE,wGAAwG;aACtH,CAAC;SACH,CAAC;QACF,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAwB,CAAC,CAAC,kEAAkE;YAC7G,4GAA4G;YAC5G,iGAAiG;YACjG,aAAa,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YAC1C,0GAA0G;YAC1G,4GAA4G;YAC5G,OAAO;gBACL,OAAO,EACL,uCAAuC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM;oBAC3E,uGAAuG;gBACzG,6FAA6F;gBAC7F,kGAAkG;gBAClG,oGAAoG;gBACpG,mGAAmG;gBACnG,8EAA8E;gBAC9E,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;aAC1D,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/pricing.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Cost computation (1.37). core never hardcodes provider pricing — a deployment injects it via
+ * `RunnerDeps.pricing` or each `Model.cost`. All prices are **absolute per-1M-token USD**, not
+ * multipliers: each provider's adapter precomputes its discount into an absolute value
+ * (OpenAI/DeepSeek: the cache-hit price; Anthropic: base×0.1 read / ×1.25 5min-write / ×2.0 1h-write).
+ */
+/** Per-1M-token absolute prices (USD) for a model. */
+export interface ModelPricing {
+    inputPer1M: number;
+    outputPer1M: number;
+    /** Cache-read (hit) absolute price per 1M. Default 0 (treated as full-price input if absent). */
+    cacheReadPer1M?: number;
+    /** Cache-write 5-min-TTL absolute price per 1M (Anthropic ~1.25× base). 0 elsewhere. */
+    cacheWritePer1M?: number;
+    /** Cache-write 1-hour-TTL absolute price per 1M (Anthropic ~2.0× base). 0 elsewhere. */
+    cacheWriteLongPer1M?: number;
+}
+/**
+ * Unified token counts for one task/turn, **already normalized** so `totalInputTokens` INCLUDES all
+ * cache tokens (matching OTel `gen_ai.usage.input_tokens`). `cacheReadTokens`/`cacheWriteTokens`/
+ * `cacheWriteTokensLong` are mutually exclusive subsets of `totalInputTokens`.
+ */
+export interface TokenCounts {
+    totalInputTokens: number;
+    cacheReadTokens: number;
+    cacheWriteTokens: number;
+    cacheWriteTokensLong: number;
+    outputTokens: number;
+}
+/**
+ * Cost in **integer micro-USD** (1e-6 USD) — integer to avoid float-accumulation error in billing
+ * reconcile (Stripe/AWS-style). Convergent across providers: full-price input = `totalInputTokens`
+ * minus all cache tokens; cache read/write priced at their own absolute rates; output at its rate.
+ *
+ * DeepSeek (hit price as `cacheReadPer1M`, no cache-write) and OpenAI (no 1h write) fall out by their
+ * zero token counts; Anthropic uses all fields. This fixes P2 (cached charged at full price) by
+ * pricing the cache subset separately instead of trusting the brain's possibly-overstated cost total.
+ */
+export declare function computeCostMicroUsd(counts: TokenCounts, pricing: ModelPricing): number;
+/** Map a vendor `Model.cost` (already per-1M absolute) to `ModelPricing`. We don't emit 1h cache
+ *  writes, so `cacheWriteLongPer1M` defaults to the 5-min write price (irrelevant while that count is 0). */
+export declare function modelCostToPricing(cost: {
+    input?: number;
+    output?: number;
+    cacheRead?: number;
+    cacheWrite?: number;
+} | undefined): ModelPricing;
+//# sourceMappingURL=pricing.d.ts.map

package/dist/core/pricing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pricing.d.ts","sourceRoot":"","sources":["../../src/core/pricing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,iGAAiG;IACjG,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wFAAwF;IACxF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;CACtB;AAKD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,GAAG,MAAM,CAkBtF;AAED;6GAC6G;AAC7G,wBAAgB,kBAAkB,CAChC,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,GAC7F,YAAY,CAQd"}