@terminai/core 0.21.0

package/dist/src/policy/config.js

@@ -0,0 +1,334 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { Storage } from '../config/storage.js';
+import { compareBrainAuthority, isBrainAuthority, } from '../config/brainAuthority.js';
+import { PolicyDecision, } from './types.js';
+import { loadPoliciesFromToml, escapeRegex, } from './toml-loader.js';
+import toml from '@iarna/toml';
+import { MessageBusType, } from '../confirmation-bus/types.js';
+import {} from '../confirmation-bus/message-bus.js';
+import { coreEvents } from '../utils/events.js';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+export const DEFAULT_CORE_POLICIES_DIR = path.join(__dirname, 'policies');
+// Policy tier constants for priority calculation
+export const DEFAULT_POLICY_TIER = 1;
+export const USER_POLICY_TIER = 2;
+export const ADMIN_POLICY_TIER = 3;
+/**
+ * Gets the list of directories to search for policy files, in order of increasing priority
+ * (Default -> User -> Admin).
+ *
+ * @param defaultPoliciesDir Optional path to a directory containing default policies.
+ */
+export function getPolicyDirectories(defaultPoliciesDir) {
+    const dirs = [];
+    if (defaultPoliciesDir) {
+        dirs.push(defaultPoliciesDir);
+    }
+    else {
+        dirs.push(DEFAULT_CORE_POLICIES_DIR);
+    }
+    dirs.push(Storage.getUserPoliciesDir());
+    dirs.push(Storage.getSystemPoliciesDir());
+    // Reverse so highest priority (Admin) is first for loading order if needed,
+    // though loadPoliciesFromToml might want them in a specific order.
+    // CLI implementation reversed them: [DEFAULT, USER, ADMIN].reverse() -> [ADMIN, USER, DEFAULT]
+    return dirs.reverse();
+}
+/**
+ * Determines the policy tier (1=default, 2=user, 3=admin) for a given directory.
+ * This is used by the TOML loader to assign priority bands.
+ */
+export function getPolicyTier(dir, defaultPoliciesDir) {
+    const USER_POLICIES_DIR = Storage.getUserPoliciesDir();
+    const ADMIN_POLICIES_DIR = Storage.getSystemPoliciesDir();
+    const normalizedDir = path.resolve(dir);
+    const normalizedUser = path.resolve(USER_POLICIES_DIR);
+    const normalizedAdmin = path.resolve(ADMIN_POLICIES_DIR);
+    if (defaultPoliciesDir &&
+        normalizedDir === path.resolve(defaultPoliciesDir)) {
+        return DEFAULT_POLICY_TIER;
+    }
+    if (normalizedDir === path.resolve(DEFAULT_CORE_POLICIES_DIR)) {
+        return DEFAULT_POLICY_TIER;
+    }
+    if (normalizedDir === normalizedUser) {
+        return USER_POLICY_TIER;
+    }
+    if (normalizedDir === normalizedAdmin) {
+        return ADMIN_POLICY_TIER;
+    }
+    return DEFAULT_POLICY_TIER;
+}
+/**
+ * Formats a policy file error for console logging.
+ */
+export function formatPolicyError(error) {
+    const tierLabel = error.tier.toUpperCase();
+    let message = `[${tierLabel}] Policy file error in ${error.fileName}:\n`;
+    message += `  ${error.message}`;
+    if (error.details) {
+        message += `\n${error.details}`;
+    }
+    if (error.suggestion) {
+        message += `\n  Suggestion: ${error.suggestion}`;
+    }
+    return message;
+}
+export async function createPolicyEngineConfig(settings, approvalMode, defaultPoliciesDir) {
+    const policyDirs = getPolicyDirectories(defaultPoliciesDir);
+    // Load policies from TOML files
+    const { rules: tomlRules, checkers: tomlCheckers, errors, } = await loadPoliciesFromToml(approvalMode, policyDirs, (dir) => getPolicyTier(dir, defaultPoliciesDir));
+    // Emit any errors encountered during TOML loading to the UI
+    // coreEvents has a buffer that will display these once the UI is ready
+    if (errors.length > 0) {
+        for (const error of errors) {
+            coreEvents.emitFeedback('error', formatPolicyError(error));
+        }
+    }
+    const rules = [...tomlRules];
+    const checkers = [...tomlCheckers];
+    // Priority system for policy rules:
+    // - Higher priority numbers win over lower priority numbers
+    // - When multiple rules match, the highest priority rule is applied
+    // - Rules are evaluated in order of priority (highest first)
+    //
+    // Priority bands (tiers):
+    // - Default policies (TOML): 1 + priority/1000 (e.g., priority 100 → 1.100)
+    // - User policies (TOML): 2 + priority/1000 (e.g., priority 100 → 2.100)
+    // - Admin policies (TOML): 3 + priority/1000 (e.g., priority 100 → 3.100)
+    //
+    // This ensures Admin > User > Default hierarchy is always preserved,
+    // while allowing user-specified priorities to work within each tier.
+    //
+    // Settings-based and dynamic rules (all in user tier 2.x):
+    //   2.95: Tools that the user has selected as "Always Allow" in the interactive UI
+    //   2.9:  MCP servers excluded list (security: persistent server blocks)
+    //   2.4:  Command line flag --exclude-tools (explicit temporary blocks)
+    //   2.3:  Command line flag --allowed-tools (explicit temporary allows)
+    //   2.2:  MCP servers with trust=true (persistent trusted servers)
+    //   2.1:  MCP servers allowed list (persistent general server allows)
+    //
+    // TOML policy priorities (before transformation):
+    //   10: Write tools default to ASK_USER (becomes 1.010 in default tier)
+    //   15: Auto-edit tool override (becomes 1.015 in default tier)
+    //   50: Read-only tools (becomes 1.050 in default tier)
+    //   999: YOLO mode allow-all (becomes 1.999 in default tier)
+    // MCP servers that are explicitly excluded in settings.mcp.excluded
+    // Priority: 2.9 (highest in user tier for security - persistent server blocks)
+    if (settings.mcp?.excluded) {
+        for (const serverName of settings.mcp.excluded) {
+            rules.push({
+                toolName: `${serverName}__*`,
+                decision: PolicyDecision.DENY,
+                priority: 2.9,
+            });
+        }
+    }
+    // Tools that are explicitly excluded in the settings.
+    // Priority: 2.4 (user tier - explicit temporary blocks)
+    if (settings.tools?.exclude) {
+        for (const tool of settings.tools.exclude) {
+            rules.push({
+                toolName: tool,
+                decision: PolicyDecision.DENY,
+                priority: 2.4,
+            });
+        }
+    }
+    // Tools that are explicitly allowed in the settings.
+    // Priority: 2.3 (user tier - explicit temporary allows)
+    if (settings.tools?.allowed) {
+        for (const tool of settings.tools.allowed) {
+            rules.push({
+                toolName: tool,
+                decision: PolicyDecision.ALLOW,
+                priority: 2.3,
+            });
+        }
+    }
+    // MCP servers that are trusted in the settings.
+    // Priority: 2.2 (user tier - persistent trusted servers)
+    if (settings.mcpServers) {
+        for (const [serverName, serverConfig] of Object.entries(settings.mcpServers)) {
+            if (serverConfig.trust) {
+                // Trust all tools from this MCP server
+                // Using pattern matching for MCP tool names which are formatted as "serverName__toolName"
+                rules.push({
+                    toolName: `${serverName}__*`,
+                    decision: PolicyDecision.ALLOW,
+                    priority: 2.2,
+                });
+            }
+        }
+    }
+    // MCP servers that are explicitly allowed in settings.mcp.allowed
+    // Priority: 2.1 (user tier - persistent general server allows)
+    if (settings.mcp?.allowed) {
+        for (const serverName of settings.mcp.allowed) {
+            rules.push({
+                toolName: `${serverName}__*`,
+                decision: PolicyDecision.ALLOW,
+                priority: 2.1,
+            });
+        }
+    }
+    return {
+        rules,
+        checkers,
+        defaultDecision: PolicyDecision.ASK_USER,
+    };
+}
+export async function resolvePolicyBrainAuthority(defaultPoliciesDir) {
+    const policyDirs = getPolicyDirectories(defaultPoliciesDir);
+    let effectiveAuthority;
+    const formatTier = (tier) => {
+        if (tier === ADMIN_POLICY_TIER)
+            return 'ADMIN';
+        if (tier === USER_POLICY_TIER)
+            return 'USER';
+        return 'DEFAULT';
+    };
+    for (const dir of policyDirs) {
+        const tier = getPolicyTier(dir, defaultPoliciesDir);
+        let filesToLoad;
+        try {
+            const dirEntries = await fs.readdir(dir, { withFileTypes: true });
+            filesToLoad = dirEntries
+                .filter((entry) => entry.isFile() && entry.name.endsWith('.toml'))
+                .map((entry) => entry.name);
+        }
+        catch (e) {
+            const error = e;
+            if (error.code === 'ENOENT') {
+                continue;
+            }
+            coreEvents.emitFeedback('error', `[${formatTier(tier)}] Failed to read policy directory ${dir}`, error);
+            continue;
+        }
+        for (const file of filesToLoad) {
+            const filePath = path.join(dir, file);
+            try {
+                const fileContent = await fs.readFile(filePath, 'utf-8');
+                const parsed = toml.parse(fileContent);
+                const brainConfig = parsed['brain'];
+                if (brainConfig !== undefined) {
+                    if (typeof brainConfig !== 'object' ||
+                        brainConfig === null ||
+                        Array.isArray(brainConfig)) {
+                        coreEvents.emitFeedback('error', `[${formatTier(tier)}] Invalid brain section in ${filePath}. Expected [brain] table.`);
+                        continue;
+                    }
+                    const authority = brainConfig['authority'];
+                    if (authority === undefined) {
+                        continue;
+                    }
+                    if (!isBrainAuthority(authority)) {
+                        coreEvents.emitFeedback('error', `[${formatTier(tier)}] Invalid brain.authority in ${filePath}. Expected advisory | escalate-only | governing.`);
+                        continue;
+                    }
+                    if (!effectiveAuthority ||
+                        compareBrainAuthority(authority, effectiveAuthority) > 0) {
+                        effectiveAuthority = authority;
+                    }
+                }
+            }
+            catch (e) {
+                const error = e;
+                if (error.code !== 'ENOENT') {
+                    coreEvents.emitFeedback('error', `[${formatTier(tier)}] Failed to parse governance in ${filePath}`, error);
+                }
+            }
+        }
+    }
+    return effectiveAuthority;
+}
+export function createPolicyUpdater(policyEngine, messageBus) {
+    messageBus.subscribe(MessageBusType.UPDATE_POLICY, async (message) => {
+        const toolName = message.toolName;
+        let argsPattern = message.argsPattern
+            ? new RegExp(message.argsPattern)
+            : undefined;
+        if (message.commandPrefix) {
+            // Convert commandPrefix to argsPattern for in-memory rule
+            // This mimics what toml-loader does
+            const escapedPrefix = escapeRegex(message.commandPrefix);
+            argsPattern = new RegExp(`"command":"${escapedPrefix}`);
+        }
+        policyEngine.addRule({
+            toolName,
+            decision: PolicyDecision.ALLOW,
+            // User tier (2) + high priority (950/1000) = 2.95
+            // This ensures user "always allow" selections are high priority
+            // but still lose to admin policies (3.xxx) and settings excludes (200)
+            priority: 2.95,
+            argsPattern,
+        });
+        if (message.persist) {
+            try {
+                const userPoliciesDir = Storage.getUserPoliciesDir();
+                await fs.mkdir(userPoliciesDir, { recursive: true });
+                const policyFile = path.join(userPoliciesDir, 'auto-saved.toml');
+                // Read existing file
+                let existingData = {};
+                try {
+                    const fileContent = await fs.readFile(policyFile, 'utf-8');
+                    existingData = toml.parse(fileContent);
+                }
+                catch (error) {
+                    if (error.code !== 'ENOENT') {
+                        console.warn(`Failed to parse ${policyFile}, overwriting with new policy.`, error);
+                    }
+                }
+                // Initialize rule array if needed
+                if (!existingData.rule) {
+                    existingData.rule = [];
+                }
+                // Create new rule object
+                const newRule = {};
+                if (message.mcpName) {
+                    newRule.mcpName = message.mcpName;
+                    // Extract simple tool name
+                    const simpleToolName = toolName.startsWith(`${message.mcpName}__`)
+                        ? toolName.slice(message.mcpName.length + 2)
+                        : toolName;
+                    newRule.toolName = simpleToolName;
+                    newRule.decision = 'allow';
+                    newRule.priority = 200;
+                }
+                else {
+                    newRule.toolName = toolName;
+                    newRule.decision = 'allow';
+                    newRule.priority = 100;
+                }
+                if (message.commandPrefix) {
+                    newRule.commandPrefix = message.commandPrefix;
+                }
+                else if (message.argsPattern) {
+                    newRule.argsPattern = message.argsPattern;
+                }
+                // Add to rules
+                existingData.rule.push(newRule);
+                // Serialize back to TOML
+                // @iarna/toml stringify might not produce beautiful output but it handles escaping correctly
+                const newContent = toml.stringify(existingData);
+                // Atomic write: write to tmp then rename
+                const tmpFile = `${policyFile}.tmp`;
+                await fs.writeFile(tmpFile, newContent, 'utf-8');
+                await fs.rename(tmpFile, policyFile);
+            }
+            catch (error) {
+                coreEvents.emitFeedback('error', `Failed to persist policy for ${toolName}`, error);
+            }
+        }
+    });
+}
+//# sourceMappingURL=config.js.map

package/dist/src/policy/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/policy/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAEL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,cAAc,GAIf,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EAEpB,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,IAAI,MAAM,aAAa,CAAC;AAC/B,OAAO,EACL,cAAc,GAEf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAE1E,iDAAiD;AACjD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,kBAA2B;IAC9D,MAAM,IAAI,GAAG,EAAE,CAAC;IAEhB,IAAI,kBAAkB,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAE1C,4EAA4E;IAC5E,mEAAmE;IACnE,+FAA+F;IAC/F,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,kBAA2B;IAE3B,MAAM,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IACvD,MAAM,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAE1D,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAEzD,IACE,kBAAkB;QAClB,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAClD,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9D,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,aAAa,KAAK,eAAe,EAAE,CAAC;QACtC,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAsB;IACtD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,OAAO,GAAG,IAAI,SAAS,0BAA0B,KAAK,CAAC,QAAQ,KAAK,CAAC;IACzE,OAAO,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,IAAI,mBAAmB,KAAK,CAAC,UAAU,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAwB,EACxB,YAA0B,EAC1B,kBAA2B;IAE3B,MAAM,UAAU,GAAG,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IAC5D,gCAAgC;IAChC,MAAM,EACJ,KAAK,EAAE,SAAS,EAChB,QAAQ,EAAE,YAAY,EACtB,MAAM,GACP,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAC/D,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,CACvC,CAAC;IAEF,4DAA4D;IAC5D,uEAAuE;IACvE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAiB,CAAC,GAAG,SAAS,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;IAEnC,oCAAoC;IACpC,4DAA4D;IAC5D,oEAAoE;IACpE,6DAA6D;IAC7D,EAAE;IACF,0BAA0B;IAC1B,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,EAAE;IACF,qEAAqE;IACrE,qEAAqE;IACrE,EAAE;IACF,2DAA2D;IAC3D,mFAAmF;IACnF,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,mEAAmE;IACnE,sEAAsE;IACtE,EAAE;IACF,kDAAkD;IAClD,wEAAwE;IACxE,gEAAgE;IAChE,wDAAwD;IACxD,6DAA6D;IAE7D,oEAAoE;IACpE,+EAA+E;IAC/E,IAAI,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;gBAC5B,QAAQ,EAAE,cAAc,CAAC,IAAI;gBAC7B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,wDAAwD;IACxD,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,cAAc,CAAC,IAAI;gBAC7B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,wDAAwD;IACxD,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,cAAc,CAAC,KAAK;gBAC9B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,yDAAyD;IACzD,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CACrD,QAAQ,CAAC,UAAU,CACpB,EAAE,CAAC;YACF,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;gBACvB,uCAAuC;gBACvC,0FAA0F;gBAC1F,KAAK,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;oBAC5B,QAAQ,EAAE,cAAc,CAAC,KAAK;oBAC9B,QAAQ,EAAE,GAAG;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,+DAA+D;IAC/D,IAAI,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC;QAC1B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;gBAC5B,QAAQ,EAAE,cAAc,CAAC,KAAK;gBAC9B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,QAAQ;QACR,eAAe,EAAE,cAAc,CAAC,QAAQ;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,kBAA2B;IAE3B,MAAM,UAAU,GAAG,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IAC5D,IAAI,kBAA8C,CAAC;IAEnD,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE;QAC1C,IAAI,IAAI,KAAK,iBAAiB;YAAE,OAAO,OAAO,CAAC;QAC/C,IAAI,IAAI,KAAK,gBAAgB;YAAE,OAAO,MAAM,CAAC;QAC7C,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACpD,IAAI,WAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,WAAW,GAAG,UAAU;iBACrB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;iBACjE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,CAA0B,CAAC;YACzC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,UAAU,CAAC,YAAY,CACrB,OAAO,EACP,IAAI,UAAU,CAAC,IAAI,CAAC,qCAAqC,GAAG,EAAE,EAC9D,KAAK,CACN,CAAC;YACF,SAAS;QACX,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAA4B,CAAC;gBAClE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACpC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,IACE,OAAO,WAAW,KAAK,QAAQ;wBAC/B,WAAW,KAAK,IAAI;wBACpB,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAC1B,CAAC;wBACD,UAAU,CAAC,YAAY,CACrB,OAAO,EACP,IAAI,UAAU,CACZ,IAAI,CACL,8BAA8B,QAAQ,2BAA2B,CACnE,CAAC;wBACF,SAAS;oBACX,CAAC;oBAED,MAAM,SAAS,GAAI,WAAuC,CACxD,WAAW,CACZ,CAAC;oBACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC5B,SAAS;oBACX,CAAC;oBACD,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;wBACjC,UAAU,CAAC,YAAY,CACrB,OAAO,EACP,IAAI,UAAU,CACZ,IAAI,CACL,gCAAgC,QAAQ,kDAAkD,CAC5F,CAAC;wBACF,SAAS;oBACX,CAAC;oBACD,IACE,CAAC,kBAAkB;wBACnB,qBAAqB,CAAC,SAAS,EAAE,kBAAkB,CAAC,GAAG,CAAC,EACxD,CAAC;wBACD,kBAAkB,GAAG,SAAS,CAAC;oBACjC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,KAAK,GAAG,CAA0B,CAAC;gBACzC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC5B,UAAU,CAAC,YAAY,CACrB,OAAO,EACP,IAAI,UAAU,CAAC,IAAI,CAAC,mCAAmC,QAAQ,EAAE,EACjE,KAAK,CACN,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAaD,MAAM,UAAU,mBAAmB,CACjC,YAA0B,EAC1B,UAAsB;IAEtB,UAAU,CAAC,SAAS,CAClB,cAAc,CAAC,aAAa,EAC5B,KAAK,EAAE,OAAqB,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW;YACnC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;YACjC,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,0DAA0D;YAC1D,oCAAoC;YACpC,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACzD,WAAW,GAAG,IAAI,MAAM,CAAC,cAAc,aAAa,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,YAAY,CAAC,OAAO,CAAC;YACnB,QAAQ;YACR,QAAQ,EAAE,cAAc,CAAC,KAAK;YAC9B,kDAAkD;YAClD,gEAAgE;YAChE,uEAAuE;YACvE,QAAQ,EAAE,IAAI;YACd,WAAW;SACZ,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;gBACrD,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;gBAEjE,qBAAqB;gBACrB,IAAI,YAAY,GAA0B,EAAE,CAAC;gBAC7C,IAAI,CAAC;oBACH,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;oBAC3D,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAA0B,CAAC;gBAClE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACvD,OAAO,CAAC,IAAI,CACV,mBAAmB,UAAU,gCAAgC,EAC7D,KAAK,CACN,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,kCAAkC;gBAClC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;oBACvB,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC;gBACzB,CAAC;gBAED,yBAAyB;gBACzB,MAAM,OAAO,GAAa,EAAE,CAAC;gBAE7B,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACpB,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;oBAClC,2BAA2B;oBAC3B,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC;wBAChE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;wBAC5C,CAAC,CAAC,QAAQ,CAAC;oBACb,OAAO,CAAC,QAAQ,GAAG,cAAc,CAAC;oBAClC,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC;oBAC3B,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;oBAC5B,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC;oBAC3B,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;gBACzB,CAAC;gBAED,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;oBAC1B,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;gBAChD,CAAC;qBAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;oBAC/B,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;gBAC5C,CAAC;gBAED,eAAe;gBACf,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAEhC,yBAAyB;gBACzB,6FAA6F;gBAC7F,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,YAA4B,CAAC,CAAC;gBAEhE,yCAAyC;gBACzC,MAAM,OAAO,GAAG,GAAG,UAAU,MAAM,CAAC;gBACpC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,CAAC,YAAY,CACrB,OAAO,EACP,gCAAgC,QAAQ,EAAE,EAC1C,KAAK,CACN,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/src/policy/config.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};