@unbrained/pm-cli 2026.5.24 → 2026.5.28

package/dist/core/extensions/extension-hook-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-hook-runtime.js","sources":["core/extensions/extension-hook-runtime.ts"],"sourceRoot":"/","sourcesContent":["import {\n  cloneCommandOptionsSnapshot,\n  cloneContextSnapshot,\n  cloneGlobalOptionsSnapshot,\n  normalizeCommandName,\n} from \"./extension-runtime-helpers.js\";\nimport type {\n  RegisteredExtensionHook,\n  ExtensionHookRegistry,\n  BeforeCommandHookContext,\n  AfterCommandHookContext,\n  OnWriteHookContext,\n  OnReadHookContext,\n  OnIndexHookContext,\n  ExtensionCommandRegistry,\n  CommandHandlerContext,\n  CommandHandlerResult,\n  ExtensionParserRegistry,\n  ParserOverrideContext,\n  ParserOverrideResult,\n  ExtensionPreflightRegistry,\n  PreflightOverrideContext,\n  PreflightOverrideResult,\n  PreflightRuntimeDecision,\n  ExtensionServiceRegistry,\n  ServiceOverrideContext,\n  ServiceOverrideResult,\n  CommandOverrideContext,\n  CommandOverrideResult,\n  ExtensionRendererRegistry,\n  RendererOverrideContext,\n  RendererOverrideResult,\n} from \"./extension-types.js\";\n\ntype HookName = keyof ExtensionHookRegistry;\n\nasync function executeRegisteredHooks<TContext>(\n  entries: Array<RegisteredExtensionHook<(context: TContext) => Promise<void> | void>>,\n  hookName: HookName,\n  context: TContext,\n): Promise<string[]> {\n  const warnings: string[] = [];\n  for (const entry of entries) {\n    try {\n      await entry.run(cloneContextSnapshot(context));\n    } catch {\n      warnings.push(`extension_hook_failed:${entry.layer}:${entry.name}:${hookName}`);\n    }\n  }\n  return warnings;\n}\n\nexport async function runBeforeCommandHooks(\n  hooks: ExtensionHookRegistry,\n  context: BeforeCommandHookContext,\n): Promise<string[]> {\n  return executeRegisteredHooks(hooks.beforeCommand, \"beforeCommand\", context);\n}\n\nexport async function runAfterCommandHooks(\n  hooks: ExtensionHookRegistry,\n  context: AfterCommandHookContext,\n): Promise<string[]> {\n  return executeRegisteredHooks(hooks.afterCommand, \"afterCommand\", context);\n}\n\nexport async function runOnWriteHooks(hooks: ExtensionHookRegistry, context: OnWriteHookContext): Promise<string[]> {\n  return executeRegisteredHooks(hooks.onWrite, \"onWrite\", context);\n}\n\nexport async function runOnReadHooks(hooks: ExtensionHookRegistry, context: OnReadHookContext): Promise<string[]> {\n  return executeRegisteredHooks(hooks.onRead, \"onRead\", context);\n}\n\nexport async function runOnIndexHooks(hooks: ExtensionHookRegistry, context: OnIndexHookContext): Promise<string[]> {\n  return executeRegisteredHooks(hooks.onIndex, \"onIndex\", context);\n}\n\n\n\n/**\n * Normalize an extension handler failure into a single-line, length-bounded\n * message so the real cause can be surfaced to the user/CI without leaking\n * multi-line stack noise or unbounded payloads.\n */\nfunction describeHandlerError(error: unknown): string {\n  let raw = \"\";\n  if (error instanceof Error && typeof error.message === \"string\") {\n    raw = error.message;\n  } else if (typeof error === \"string\") {\n    raw = error;\n  } else if (\n    typeof error === \"object\" &&\n    error !== null &&\n    typeof (error as { message?: unknown }).message === \"string\"\n  ) {\n    // Extensions may throw plain/serialized objects that carry a message but do\n    // not inherit from the base Error class.\n    raw = (error as { message: string }).message;\n  }\n  const normalized = raw.replace(/\\s+/gu, \" \").trim();\n  if (normalized.length === 0) {\n    return \"\";\n  }\n  const maxLength = 300;\n  return normalized.length > maxLength ? `${normalized.slice(0, maxLength - 1)}…` : normalized;\n}\n\nexport async function runCommandHandler(\n  commands: ExtensionCommandRegistry,\n  context: CommandHandlerContext,\n): Promise<CommandHandlerResult> {\n  const command = normalizeCommandName(context.command);\n  if (command.length === 0) {\n    return {\n      handled: false,\n      result: null,\n      warnings: [],\n    };\n  }\n\n  const matched = [...commands.handlers].reverse().find((entry) => entry.command === command);\n  if (!matched) {\n    return {\n      handled: false,\n      result: null,\n      warnings: [],\n    };\n  }\n\n  try {\n    const result = await matched.run({\n      command,\n      args: cloneContextSnapshot(context.args),\n      options: cloneContextSnapshot(context.options),\n      global: cloneContextSnapshot(context.global),\n      pm_root: context.pm_root,\n    });\n    return {\n      handled: true,\n      result,\n      warnings: [],\n    };\n  } catch (error: unknown) {\n    const exitCode =\n      typeof error === \"object\" && error !== null && \"exitCode\" in error\n        ? (error as { exitCode?: unknown }).exitCode\n        : undefined;\n    if (typeof exitCode === \"number\" && Number.isFinite(exitCode)) {\n      throw error;\n    }\n    return {\n      handled: false,\n      result: null,\n      warnings: [`extension_command_handler_failed:${matched.layer}:${matched.name}:${matched.command}`],\n      errorMessage: describeHandlerError(error),\n    };\n  }\n}\n\n\nexport async function runParserOverride(\n  parsers: ExtensionParserRegistry,\n  context: ParserOverrideContext,\n): Promise<ParserOverrideResult> {\n  const command = normalizeCommandName(context.command);\n  if (command.length === 0) {\n    return {\n      overridden: false,\n      context: {\n        command,\n        args: cloneContextSnapshot(context.args),\n        options: cloneCommandOptionsSnapshot(context.options),\n        global: cloneGlobalOptionsSnapshot(context.global),\n        pm_root: context.pm_root,\n      },\n      warnings: [],\n    };\n  }\n\n  const matched = [...parsers.overrides].reverse().find((entry) => entry.command === command);\n  if (!matched) {\n    return {\n      overridden: false,\n      context: {\n        command,\n        args: cloneContextSnapshot(context.args),\n        options: cloneCommandOptionsSnapshot(context.options),\n        global: cloneGlobalOptionsSnapshot(context.global),\n        pm_root: context.pm_root,\n      },\n      warnings: [],\n    };\n  }\n\n  try {\n    const delta = (await Promise.resolve(\n      matched.run({\n        command,\n        args: cloneContextSnapshot(context.args),\n        options: cloneCommandOptionsSnapshot(context.options),\n        global: cloneGlobalOptionsSnapshot(context.global),\n        pm_root: context.pm_root,\n      }),\n    )) ?? {};\n    const nextArgs = Array.isArray(delta.args) ? cloneContextSnapshot(delta.args) : cloneContextSnapshot(context.args);\n    const nextOptions = delta.options ? cloneCommandOptionsSnapshot(delta.options) : cloneCommandOptionsSnapshot(context.options);\n    const nextGlobal = delta.global ? cloneGlobalOptionsSnapshot(delta.global) : cloneGlobalOptionsSnapshot(context.global);\n    return {\n      overridden: true,\n      context: {\n        command,\n        args: nextArgs,\n        options: nextOptions,\n        global: nextGlobal,\n        pm_root: context.pm_root,\n      },\n      warnings: [],\n    };\n  } catch {\n    return {\n      overridden: false,\n      context: {\n        command,\n        args: cloneContextSnapshot(context.args),\n        options: cloneCommandOptionsSnapshot(context.options),\n        global: cloneGlobalOptionsSnapshot(context.global),\n        pm_root: context.pm_root,\n      },\n      warnings: [`extension_parser_override_failed:${matched.layer}:${matched.name}:${matched.command}`],\n    };\n  }\n}\n\n\nexport async function runPreflightOverride(\n  preflight: ExtensionPreflightRegistry,\n  context: PreflightOverrideContext,\n): Promise<PreflightOverrideResult> {\n  const matched = [...preflight.overrides].reverse()[0];\n  const baseContext: CommandHandlerContext = {\n    command: normalizeCommandName(context.command),\n    args: cloneContextSnapshot(context.args),\n    options: cloneCommandOptionsSnapshot(context.options),\n    global: cloneGlobalOptionsSnapshot(context.global),\n    pm_root: context.pm_root,\n  };\n  const baseDecision: PreflightRuntimeDecision = cloneContextSnapshot(context.decision);\n  if (!matched) {\n    return {\n      overridden: false,\n      context: baseContext,\n      decision: baseDecision,\n      warnings: [],\n    };\n  }\n\n  try {\n    const delta = (await Promise.resolve(\n      matched.run({\n        command: baseContext.command,\n        args: cloneContextSnapshot(baseContext.args),\n        options: cloneCommandOptionsSnapshot(baseContext.options),\n        global: cloneGlobalOptionsSnapshot(baseContext.global),\n        pm_root: baseContext.pm_root,\n        decision: cloneContextSnapshot(baseDecision),\n      }),\n    )) ?? {};\n    const nextContext: CommandHandlerContext = {\n      command: baseContext.command,\n      args: Array.isArray(delta.args) ? cloneContextSnapshot(delta.args) : baseContext.args,\n      options: delta.options ? cloneCommandOptionsSnapshot(delta.options) : baseContext.options,\n      global: delta.global ? cloneGlobalOptionsSnapshot(delta.global) : baseContext.global,\n      pm_root: baseContext.pm_root,\n    };\n    const nextDecision: PreflightRuntimeDecision = {\n      enforce_item_format_gate:\n        typeof delta.enforce_item_format_gate === \"boolean\"\n          ? delta.enforce_item_format_gate\n          : baseDecision.enforce_item_format_gate,\n      run_preflight_item_format_sync:\n        typeof delta.run_preflight_item_format_sync === \"boolean\"\n          ? delta.run_preflight_item_format_sync\n          : baseDecision.run_preflight_item_format_sync,\n      run_extension_migrations:\n        typeof delta.run_extension_migrations === \"boolean\"\n          ? delta.run_extension_migrations\n          : baseDecision.run_extension_migrations,\n      enforce_mandatory_migration_gate:\n        typeof delta.enforce_mandatory_migration_gate === \"boolean\"\n          ? delta.enforce_mandatory_migration_gate\n          : baseDecision.enforce_mandatory_migration_gate,\n    };\n    return {\n      overridden: true,\n      context: nextContext,\n      decision: nextDecision,\n      warnings: [],\n    };\n  } catch {\n    return {\n      overridden: false,\n      context: baseContext,\n      decision: baseDecision,\n      warnings: [`extension_preflight_override_failed:${matched.layer}:${matched.name}`],\n    };\n  }\n}\n\n\nfunction resolveDefaultServiceResult(context: ServiceOverrideContext): ServiceOverrideResult {\n  return {\n    handled: false,\n    result: context.payload,\n    warnings: [],\n  };\n}\n\nexport function runServiceOverrideSync(\n  services: ExtensionServiceRegistry,\n  context: ServiceOverrideContext,\n): ServiceOverrideResult {\n  const matches = [...services.overrides].reverse().filter((entry) => entry.service === context.service);\n  if (matches.length === 0) {\n    return resolveDefaultServiceResult(context);\n  }\n\n  const warnings: string[] = [];\n  for (const matched of matches) {\n    try {\n      const serviceContext = {\n        service: context.service,\n        command: context.command ? normalizeCommandName(context.command) : undefined,\n        args: context.args ? cloneContextSnapshot(context.args) : undefined,\n        options: context.options ? cloneCommandOptionsSnapshot(context.options) : undefined,\n        global: context.global ? cloneGlobalOptionsSnapshot(context.global) : undefined,\n        pm_root: context.pm_root,\n        payload: cloneContextSnapshot(context.payload),\n      };\n      const result = matched.run(serviceContext);\n      if (result instanceof Promise) {\n        warnings.push(`extension_service_override_async_unsupported:${matched.layer}:${matched.name}:${matched.service}`);\n        continue;\n      }\n      if (context.service === \"output_format\" && (result === null || result === undefined || result === serviceContext.payload)) {\n        continue;\n      }\n      return {\n        handled: true,\n        result,\n        warnings,\n      };\n    } catch {\n      warnings.push(`extension_service_override_failed:${matched.layer}:${matched.name}:${matched.service}`);\n    }\n  }\n  return {\n    handled: false,\n    result: context.payload,\n    warnings,\n  };\n}\n\nexport async function runServiceOverride(\n  services: ExtensionServiceRegistry,\n  context: ServiceOverrideContext,\n): Promise<ServiceOverrideResult> {\n  const matches = [...services.overrides].reverse().filter((entry) => entry.service === context.service);\n  if (matches.length === 0) {\n    return resolveDefaultServiceResult(context);\n  }\n\n  const warnings: string[] = [];\n  for (const matched of matches) {\n    try {\n      const serviceContext = {\n        service: context.service,\n        command: context.command ? normalizeCommandName(context.command) : undefined,\n        args: context.args ? cloneContextSnapshot(context.args) : undefined,\n        options: context.options ? cloneCommandOptionsSnapshot(context.options) : undefined,\n        global: context.global ? cloneGlobalOptionsSnapshot(context.global) : undefined,\n        pm_root: context.pm_root,\n        payload: cloneContextSnapshot(context.payload),\n      };\n      const result = await Promise.resolve(matched.run(serviceContext));\n      if (context.service === \"output_format\" && (result === null || result === undefined || result === serviceContext.payload)) {\n        continue;\n      }\n      return {\n        handled: true,\n        result,\n        warnings,\n      };\n    } catch {\n      warnings.push(`extension_service_override_failed:${matched.layer}:${matched.name}:${matched.service}`);\n    }\n  }\n  return {\n    handled: false,\n    result: context.payload,\n    warnings,\n  };\n}\n\nexport function runCommandOverride(\n  commands: ExtensionCommandRegistry,\n  context: CommandOverrideContext,\n): CommandOverrideResult {\n  const command = normalizeCommandName(context.command);\n  if (command.length === 0) {\n    return {\n      overridden: false,\n      result: context.result,\n      warnings: [],\n    };\n  }\n\n  const matched = [...commands.overrides].reverse().find((entry) => entry.command === command);\n  if (!matched) {\n    return {\n      overridden: false,\n      result: context.result,\n      warnings: [],\n    };\n  }\n\n  try {\n    const overrideOptions = cloneCommandOptionsSnapshot(context.options);\n    const overrideGlobal = cloneGlobalOptionsSnapshot(context.global);\n    const overrideResult = matched.run({\n      command,\n      args: cloneContextSnapshot(context.args),\n      options: overrideOptions,\n      global: overrideGlobal,\n      pm_root: context.pm_root,\n      result: cloneContextSnapshot(context.result),\n    });\n    if (overrideResult instanceof Promise) {\n      return {\n        overridden: false,\n        result: context.result,\n        warnings: [`extension_command_override_async_unsupported:${matched.layer}:${matched.name}:${matched.command}`],\n      };\n    }\n    return {\n      overridden: true,\n      result: overrideResult,\n      warnings: [],\n    };\n  } catch {\n    return {\n      overridden: false,\n      result: context.result,\n      warnings: [`extension_command_override_failed:${matched.layer}:${matched.name}:${matched.command}`],\n    };\n  }\n}\n\n\nexport function runRendererOverride(\n  renderers: ExtensionRendererRegistry,\n  context: RendererOverrideContext,\n): RendererOverrideResult {\n  const matched = [...renderers.overrides].reverse().find((entry) => entry.format === context.format);\n  if (!matched) {\n    return {\n      overridden: false,\n      rendered: null,\n      warnings: [],\n    };\n  }\n\n  try {\n    const rendererCommand = typeof context.command === \"string\" ? normalizeCommandName(context.command) : \"\";\n    const rendererArgs = Array.isArray(context.args) ? cloneContextSnapshot(context.args) : [];\n    const rendererOptions = cloneCommandOptionsSnapshot(context.options);\n    const rendererGlobal = cloneGlobalOptionsSnapshot(context.global);\n    const rendererPmRoot = typeof context.pm_root === \"string\" ? context.pm_root : \"\";\n    const rendered = matched.run({\n      format: context.format,\n      command: rendererCommand,\n      args: rendererArgs,\n      options: rendererOptions,\n      global: rendererGlobal,\n      pm_root: rendererPmRoot,\n      result: cloneContextSnapshot(context.result),\n    });\n    if (typeof rendered !== \"string\") {\n      return {\n        overridden: false,\n        rendered: null,\n        warnings: [`extension_renderer_invalid_result:${matched.layer}:${matched.name}:${matched.format}`],\n      };\n    }\n    return {\n      overridden: true,\n      rendered,\n      warnings: [],\n    };\n  } catch {\n    return {\n      overridden: false,\n      rendered: null,\n      warnings: [`extension_renderer_failed:${matched.layer}:${matched.name}:${matched.format}`],\n    };\n  }\n}\n"],"names":[],"mappings":";;AAAA,OAAO,EACL,2BAA2B,EAC3B,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,GACrB,MAAM,gCAAgC,CAAC;AA+BxC,KAAK,UAAU,sBAAsB,CACnC,OAAoF,EACpF,QAAkB,EAClB,OAAiB;IAEjB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,yBAAyB,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAA4B,EAC5B,OAAiC;IAEjC,OAAO,sBAAsB,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAA4B,EAC5B,OAAgC;IAEhC,OAAO,sBAAsB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAA4B,EAAE,OAA2B;IAC7F,OAAO,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAA4B,EAAE,OAA0B;IAC3F,OAAO,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAA4B,EAAE,OAA2B;IAC7F,OAAO,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC;AAID;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,KAAK,YAAY,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChE,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;IACtB,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,GAAG,GAAG,KAAK,CAAC;IACd,CAAC;SAAM,IACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAQ,KAA+B,CAAC,OAAO,KAAK,QAAQ,EAC5D,CAAC;QACD,4EAA4E;QAC5E,yCAAyC;QACzC,GAAG,GAAI,KAA6B,CAAC,OAAO,CAAC;IAC/C,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC;IACtB,OAAO,UAAU,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAkC,EAClC,OAA8B;IAE9B,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAC5F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC/B,OAAO;YACP,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;YACxC,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC;YAC9C,MAAM,EAAE,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM;YACN,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,QAAQ,GACZ,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,IAAI,KAAK;YAChE,CAAC,CAAE,KAAgC,CAAC,QAAQ;YAC5C,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,CAAC,oCAAoC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAClG,YAAY,EAAE,oBAAoB,CAAC,KAAK,CAAC;SAC1C,CAAC;IACJ,CAAC;AACH,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgC,EAChC,OAA8B;IAE9B,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE;gBACP,OAAO;gBACP,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;gBACxC,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC;gBACrD,MAAM,EAAE,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC;gBAClD,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB;YACD,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAC5F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE;gBACP,OAAO;gBACP,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;gBACxC,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC;gBACrD,MAAM,EAAE,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC;gBAClD,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB;YACD,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAClC,OAAO,CAAC,GAAG,CAAC;YACV,OAAO;YACP,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;YACxC,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC;YACrD,MAAM,EAAE,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC;YAClD,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnH,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9H,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxH,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE;gBACP,OAAO;gBACP,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,WAAW;gBACpB,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB;YACD,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE;gBACP,OAAO;gBACP,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;gBACxC,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC;gBACrD,MAAM,EAAE,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC;gBAClD,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB;YACD,QAAQ,EAAE,CAAC,oCAAoC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;SACnG,CAAC;IACJ,CAAC;AACH,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAqC,EACrC,OAAiC;IAEjC,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,WAAW,GAA0B;QACzC,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC;QAC9C,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;QACxC,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC;QACrD,MAAM,EAAE,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC;QAClD,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;IACF,MAAM,YAAY,GAA6B,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,WAAW;YACpB,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAClC,OAAO,CAAC,GAAG,CAAC;YACV,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,IAAI,EAAE,oBAAoB,CAAC,WAAW,CAAC,IAAI,CAAC;YAC5C,OAAO,EAAE,2BAA2B,CAAC,WAAW,CAAC,OAAO,CAAC;YACzD,MAAM,EAAE,0BAA0B,CAAC,WAAW,CAAC,MAAM,CAAC;YACtD,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,QAAQ,EAAE,oBAAoB,CAAC,YAAY,CAAC;SAC7C,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,WAAW,GAA0B;YACzC,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI;YACrF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO;YACzF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM;YACpF,OAAO,EAAE,WAAW,CAAC,OAAO;SAC7B,CAAC;QACF,MAAM,YAAY,GAA6B;YAC7C,wBAAwB,EACtB,OAAO,KAAK,CAAC,wBAAwB,KAAK,SAAS;gBACjD,CAAC,CAAC,KAAK,CAAC,wBAAwB;gBAChC,CAAC,CAAC,YAAY,CAAC,wBAAwB;YAC3C,8BAA8B,EAC5B,OAAO,KAAK,CAAC,8BAA8B,KAAK,SAAS;gBACvD,CAAC,CAAC,KAAK,CAAC,8BAA8B;gBACtC,CAAC,CAAC,YAAY,CAAC,8BAA8B;YACjD,wBAAwB,EACtB,OAAO,KAAK,CAAC,wBAAwB,KAAK,SAAS;gBACjD,CAAC,CAAC,KAAK,CAAC,wBAAwB;gBAChC,CAAC,CAAC,YAAY,CAAC,wBAAwB;YAC3C,gCAAgC,EAC9B,OAAO,KAAK,CAAC,gCAAgC,KAAK,SAAS;gBACzD,CAAC,CAAC,KAAK,CAAC,gCAAgC;gBACxC,CAAC,CAAC,YAAY,CAAC,gCAAgC;SACpD,CAAC;QACF,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,WAAW;YACpB,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,WAAW;YACpB,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,CAAC,uCAAuC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;SACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAGD,SAAS,2BAA2B,CAAC,OAA+B;IAClE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,OAAO,CAAC,OAAO;QACvB,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAAkC,EAClC,OAA+B;IAE/B,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,cAAc,GAAG;gBACrB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC5E,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnF,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/E,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC;aAC/C,CAAC;YACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC3C,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;gBAC9B,QAAQ,CAAC,IAAI,CAAC,gDAAgD,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClH,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1H,SAAS;YACX,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM;gBACN,QAAQ;aACT,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,qCAAqC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,OAAO,CAAC,OAAO;QACvB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAkC,EAClC,OAA+B;IAE/B,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,cAAc,GAAG;gBACrB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC5E,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnF,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/E,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC;aAC/C,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;YAClE,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1H,SAAS;YACX,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM;gBACN,QAAQ;aACT,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,qCAAqC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,OAAO,CAAC,OAAO;QACvB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAkC,EAClC,OAA+B;IAE/B,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAC7F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,cAAc,GAAG,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC;YACjC,OAAO;YACP,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;YACxC,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,cAAc,YAAY,OAAO,EAAE,CAAC;YACtC,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,CAAC,gDAAgD,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;aAC/G,CAAC;QACJ,CAAC;QACD,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,CAAC,qCAAqC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;SACpG,CAAC;IACJ,CAAC;AACH,CAAC;AAGD,MAAM,UAAU,mBAAmB,CACjC,SAAoC,EACpC,OAAgC;IAEhC,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACpG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,MAAM,eAAe,GAAG,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,cAAc,GAAG,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC;YAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,CAAC,qCAAqC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;aACnG,CAAC;QACJ,CAAC;QACD,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,QAAQ;YACR,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,CAAC,6BAA6B,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;SAC3F,CAAC;IACJ,CAAC;AACH,CAAC","debugId":"015da859-473a-5b98-b534-a4edbfae0dd7"}

package/dist/core/extensions/extension-policy.d.ts

@@ -0,0 +1,69 @@
+import { type ExtensionCapability, type ExtensionGovernancePolicy, type ExtensionLayer, type ExtensionPolicyMode, type ExtensionPolicySurface, type ExtensionSandboxProfile, type ExtensionTrustMode } from "./extension-types.js";
+import type { PmSettings } from "../../types/index.js";
+interface NormalizedExtensionPolicyOverride {
+    name: string;
+    disabled: boolean;
+    requireTrusted: boolean;
+    requireProvenance: boolean;
+    sandboxProfile?: ExtensionSandboxProfile;
+    allowedCapabilities: Set<string>;
+    blockedCapabilities: Set<string>;
+    allowedSurfaces: Set<string>;
+    blockedSurfaces: Set<string>;
+    allowedCommands: Set<string>;
+    blockedCommands: Set<string>;
+    allowedActions: Set<string>;
+    blockedActions: Set<string>;
+    allowedServices: Set<string>;
+    blockedServices: Set<string>;
+}
+export interface NormalizedExtensionPolicy {
+    mode: ExtensionPolicyMode;
+    trustMode: ExtensionTrustMode;
+    requireProvenance: boolean;
+    trustedExtensions: Set<string>;
+    defaultSandboxProfile: ExtensionSandboxProfile;
+    allowedExtensions: Set<string>;
+    blockedExtensions: Set<string>;
+    allowedCapabilities: Set<string>;
+    blockedCapabilities: Set<string>;
+    allowedSurfaces: Set<string>;
+    blockedSurfaces: Set<string>;
+    allowedCommands: Set<string>;
+    blockedCommands: Set<string>;
+    allowedActions: Set<string>;
+    blockedActions: Set<string>;
+    allowedServices: Set<string>;
+    blockedServices: Set<string>;
+    overridesByName: Map<string, NormalizedExtensionPolicyOverride>;
+    warnings: string[];
+}
+export interface PolicyExtensionRef {
+    layer: ExtensionLayer;
+    name: string;
+    trusted?: boolean;
+    provenanceVerified?: boolean;
+    sandboxProfile?: ExtensionSandboxProfile;
+    permissions?: Record<string, boolean | undefined>;
+}
+export declare function normalizePolicySandboxProfile(value: string | undefined): ExtensionSandboxProfile;
+export declare function normalizeExtensionPolicy(settings: PmSettings): NormalizedExtensionPolicy;
+export declare function serializeExtensionPolicy(policy: NormalizedExtensionPolicy): ExtensionGovernancePolicy;
+export declare function hydrateExtensionPolicy(policy: ExtensionGovernancePolicy): NormalizedExtensionPolicy;
+export declare function evaluateExtensionPolicyForExtension(policy: NormalizedExtensionPolicy, extension: PolicyExtensionRef): {
+    allowed: boolean;
+    warning: string | null;
+};
+export declare function evaluateExtensionPolicyForCapability(policy: NormalizedExtensionPolicy, extension: PolicyExtensionRef, capability: string): {
+    allowed: boolean;
+    warning: string | null;
+};
+export declare function evaluateExtensionPolicyForRegistration(policy: NormalizedExtensionPolicy, extension: PolicyExtensionRef, surface: ExtensionPolicySurface, method: string, capability?: ExtensionCapability, details?: {
+    command?: string;
+    action?: string;
+    service?: string;
+}): {
+    allowed: boolean;
+    warning: string | null;
+};
+export {};

package/dist/core/extensions/extension-policy.js

@@ -0,0 +1,481 @@
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3a8acf74-cc81-5417-8ee9-30d80fde2102")}catch(e){}}();
+import { KNOWN_EXTENSION_POLICY_MODES, KNOWN_EXTENSION_POLICY_SURFACES, KNOWN_EXTENSION_SANDBOX_PROFILES, KNOWN_EXTENSION_TRUST_MODES, } from "./extension-types.js";
+import { isKnownExtensionCapability } from "./extension-capability-aliases.js";
+import { normalizeCommandName } from "./extension-runtime-helpers.js";
+function normalizePolicyName(value) {
+    if (typeof value !== "string") {
+        return "";
+    }
+    return value.trim().toLowerCase();
+}
+function normalizePolicyStringSet(values) {
+    return new Set((values ?? [])
+        .map((value) => value.trim().toLowerCase())
+        .filter((value) => value.length > 0));
+}
+function normalizePolicySurfaceToken(value) {
+    const normalized = value.trim().toLowerCase();
+    if (normalized.length === 0) {
+        return "";
+    }
+    const segments = normalized
+        .split(/[.:/]/)
+        .map((segment) => segment.replace(/[\s_-]+/g, ""))
+        .filter((segment) => segment.length > 0);
+    if (segments.length === 0) {
+        return "";
+    }
+    if (segments.length === 1) {
+        return segments[0];
+    }
+    return `${segments[0]}.${segments.slice(1).join("")}`;
+}
+function normalizePolicySurfaceSet(values) {
+    return new Set((values ?? [])
+        .map((value) => normalizePolicySurfaceToken(value))
+        .filter((value) => value.length > 0));
+}
+function normalizePolicyMode(value) {
+    const normalized = normalizePolicyName(value);
+    if (KNOWN_EXTENSION_POLICY_MODES.includes(normalized)) {
+        return normalized;
+    }
+    return "off";
+}
+function normalizePolicyTrustMode(value) {
+    const normalized = normalizePolicyName(value);
+    if (KNOWN_EXTENSION_TRUST_MODES.includes(normalized)) {
+        return normalized;
+    }
+    return "off";
+}
+export function normalizePolicySandboxProfile(value) {
+    const normalized = normalizePolicyName(value);
+    if (KNOWN_EXTENSION_SANDBOX_PROFILES.includes(normalized)) {
+        return normalized;
+    }
+    return "none";
+}
+function toSortedList(values) {
+    return [...new Set(values)].sort((left, right) => left.localeCompare(right));
+}
+function buildExtensionPolicyOverride(rawOverride) {
+    const name = normalizePolicyName(rawOverride.name);
+    if (name.length === 0) {
+        return null;
+    }
+    return {
+        name,
+        normalized: {
+            name,
+            disabled: rawOverride.disabled === true,
+            requireTrusted: rawOverride.require_trusted === true,
+            requireProvenance: rawOverride.require_provenance === true,
+            sandboxProfile: rawOverride.sandbox_profile !== undefined
+                ? normalizePolicySandboxProfile(rawOverride.sandbox_profile)
+                : undefined,
+            allowedCapabilities: normalizePolicyStringSet(rawOverride.allowed_capabilities),
+            blockedCapabilities: normalizePolicyStringSet(rawOverride.blocked_capabilities),
+            allowedSurfaces: normalizePolicySurfaceSet(rawOverride.allowed_surfaces),
+            blockedSurfaces: normalizePolicySurfaceSet(rawOverride.blocked_surfaces),
+            allowedCommands: normalizePolicyStringSet(rawOverride.allowed_commands),
+            blockedCommands: normalizePolicyStringSet(rawOverride.blocked_commands),
+            allowedActions: normalizePolicyStringSet(rawOverride.allowed_actions),
+            blockedActions: normalizePolicyStringSet(rawOverride.blocked_actions),
+            allowedServices: normalizePolicyStringSet(rawOverride.allowed_services),
+            blockedServices: normalizePolicyStringSet(rawOverride.blocked_services),
+        },
+    };
+}
+function collectExtensionPolicyOverrides(rawOverrides) {
+    const overridesByName = new Map();
+    for (const rawOverride of rawOverrides ?? []) {
+        const built = buildExtensionPolicyOverride(rawOverride);
+        if (built) {
+            overridesByName.set(built.name, built.normalized);
+        }
+    }
+    return overridesByName;
+}
+export function normalizeExtensionPolicy(settings) {
+    const policy = settings.extensions.policy;
+    const mode = normalizePolicyMode(policy?.mode);
+    const trustMode = normalizePolicyTrustMode(policy?.trust_mode);
+    const requireProvenance = policy?.require_provenance === true;
+    const trustedExtensions = normalizePolicyStringSet(policy?.trusted_extensions);
+    const defaultSandboxProfile = normalizePolicySandboxProfile(policy?.default_sandbox_profile);
+    const allowedExtensions = normalizePolicyStringSet(policy?.allowed_extensions);
+    const blockedExtensions = normalizePolicyStringSet(policy?.blocked_extensions);
+    const allowedCapabilities = normalizePolicyStringSet(policy?.allowed_capabilities);
+    const blockedCapabilities = normalizePolicyStringSet(policy?.blocked_capabilities);
+    const allowedSurfaces = normalizePolicySurfaceSet(policy?.allowed_surfaces);
+    const blockedSurfaces = normalizePolicySurfaceSet(policy?.blocked_surfaces);
+    const allowedCommands = normalizePolicyStringSet(policy?.allowed_commands);
+    const blockedCommands = normalizePolicyStringSet(policy?.blocked_commands);
+    const allowedActions = normalizePolicyStringSet(policy?.allowed_actions);
+    const blockedActions = normalizePolicyStringSet(policy?.blocked_actions);
+    const allowedServices = normalizePolicyStringSet(policy?.allowed_services);
+    const blockedServices = normalizePolicyStringSet(policy?.blocked_services);
+    const overridesByName = collectExtensionPolicyOverrides(policy?.extension_overrides);
+    const warnings = [];
+    for (const capability of toSortedList([...allowedCapabilities, ...blockedCapabilities])) {
+        if (!isKnownExtensionCapability(capability)) {
+            warnings.push(`extension_policy_unknown_capability:${capability}`);
+        }
+    }
+    for (const override of [...overridesByName.values()].sort((left, right) => left.name.localeCompare(right.name))) {
+        for (const capability of toSortedList([...override.allowedCapabilities, ...override.blockedCapabilities])) {
+            if (!isKnownExtensionCapability(capability)) {
+                warnings.push(`extension_policy_unknown_capability:${override.name}:${capability}`);
+            }
+        }
+    }
+    const knownSurfaces = new Set(KNOWN_EXTENSION_POLICY_SURFACES);
+    for (const surface of toSortedList([...allowedSurfaces, ...blockedSurfaces])) {
+        if (!knownSurfaces.has(surface)) {
+            warnings.push(`extension_policy_unknown_surface:${surface}`);
+        }
+    }
+    for (const override of [...overridesByName.values()].sort((left, right) => left.name.localeCompare(right.name))) {
+        for (const surface of toSortedList([...override.allowedSurfaces, ...override.blockedSurfaces])) {
+            if (!knownSurfaces.has(surface)) {
+                warnings.push(`extension_policy_unknown_surface:${override.name}:${surface}`);
+            }
+        }
+    }
+    return {
+        mode,
+        trustMode,
+        requireProvenance,
+        trustedExtensions,
+        defaultSandboxProfile,
+        allowedExtensions,
+        blockedExtensions,
+        allowedCapabilities,
+        blockedCapabilities,
+        allowedSurfaces,
+        blockedSurfaces,
+        allowedCommands,
+        blockedCommands,
+        allowedActions,
+        blockedActions,
+        allowedServices,
+        blockedServices,
+        overridesByName,
+        warnings: [...new Set(warnings)].sort((left, right) => left.localeCompare(right)),
+    };
+}
+export function serializeExtensionPolicy(policy) {
+    const overrides = [...policy.overridesByName.values()]
+        .sort((left, right) => left.name.localeCompare(right.name))
+        .map((override) => ({
+        name: override.name,
+        ...(override.disabled ? { disabled: true } : {}),
+        ...(override.requireTrusted ? { require_trusted: true } : {}),
+        ...(override.requireProvenance ? { require_provenance: true } : {}),
+        ...(override.sandboxProfile ? { sandbox_profile: override.sandboxProfile } : {}),
+        ...(override.allowedCapabilities.size > 0 ? { allowed_capabilities: toSortedList(override.allowedCapabilities) } : {}),
+        ...(override.blockedCapabilities.size > 0 ? { blocked_capabilities: toSortedList(override.blockedCapabilities) } : {}),
+        ...(override.allowedSurfaces.size > 0 ? { allowed_surfaces: toSortedList(override.allowedSurfaces) } : {}),
+        ...(override.blockedSurfaces.size > 0 ? { blocked_surfaces: toSortedList(override.blockedSurfaces) } : {}),
+        ...(override.allowedCommands.size > 0 ? { allowed_commands: toSortedList(override.allowedCommands) } : {}),
+        ...(override.blockedCommands.size > 0 ? { blocked_commands: toSortedList(override.blockedCommands) } : {}),
+        ...(override.allowedActions.size > 0 ? { allowed_actions: toSortedList(override.allowedActions) } : {}),
+        ...(override.blockedActions.size > 0 ? { blocked_actions: toSortedList(override.blockedActions) } : {}),
+        ...(override.allowedServices.size > 0 ? { allowed_services: toSortedList(override.allowedServices) } : {}),
+        ...(override.blockedServices.size > 0 ? { blocked_services: toSortedList(override.blockedServices) } : {}),
+    }));
+    return {
+        mode: policy.mode,
+        trust_mode: policy.trustMode,
+        require_provenance: policy.requireProvenance,
+        trusted_extensions: toSortedList(policy.trustedExtensions),
+        default_sandbox_profile: policy.defaultSandboxProfile,
+        allowed_extensions: toSortedList(policy.allowedExtensions),
+        blocked_extensions: toSortedList(policy.blockedExtensions),
+        allowed_capabilities: toSortedList(policy.allowedCapabilities),
+        blocked_capabilities: toSortedList(policy.blockedCapabilities),
+        allowed_surfaces: toSortedList(policy.allowedSurfaces),
+        blocked_surfaces: toSortedList(policy.blockedSurfaces),
+        allowed_commands: toSortedList(policy.allowedCommands),
+        blocked_commands: toSortedList(policy.blockedCommands),
+        allowed_actions: toSortedList(policy.allowedActions),
+        blocked_actions: toSortedList(policy.blockedActions),
+        allowed_services: toSortedList(policy.allowedServices),
+        blocked_services: toSortedList(policy.blockedServices),
+        extension_overrides: overrides,
+    };
+}
+export function hydrateExtensionPolicy(policy) {
+    const overridesByName = collectExtensionPolicyOverrides(policy.extension_overrides);
+    return {
+        mode: normalizePolicyMode(policy.mode),
+        trustMode: normalizePolicyTrustMode(policy.trust_mode),
+        requireProvenance: policy.require_provenance === true,
+        trustedExtensions: normalizePolicyStringSet(policy.trusted_extensions),
+        defaultSandboxProfile: normalizePolicySandboxProfile(policy.default_sandbox_profile),
+        allowedExtensions: normalizePolicyStringSet(policy.allowed_extensions),
+        blockedExtensions: normalizePolicyStringSet(policy.blocked_extensions),
+        allowedCapabilities: normalizePolicyStringSet(policy.allowed_capabilities),
+        blockedCapabilities: normalizePolicyStringSet(policy.blocked_capabilities),
+        allowedSurfaces: normalizePolicySurfaceSet(policy.allowed_surfaces),
+        blockedSurfaces: normalizePolicySurfaceSet(policy.blocked_surfaces),
+        allowedCommands: normalizePolicyStringSet(policy.allowed_commands),
+        blockedCommands: normalizePolicyStringSet(policy.blocked_commands),
+        allowedActions: normalizePolicyStringSet(policy.allowed_actions),
+        blockedActions: normalizePolicyStringSet(policy.blocked_actions),
+        allowedServices: normalizePolicyStringSet(policy.allowed_services),
+        blockedServices: normalizePolicyStringSet(policy.blocked_services),
+        overridesByName,
+        warnings: [],
+    };
+}
+function resolvePolicyOverride(policy, extensionName) {
+    return policy.overridesByName.get(normalizePolicyName(extensionName)) ?? null;
+}
+function evaluatePolicySet(allowed, blocked, value, notAllowlistedReason, blockedReason) {
+    if (blocked.has(value)) {
+        return blockedReason;
+    }
+    if (allowed.size > 0 && !allowed.has(value)) {
+        return notAllowlistedReason;
+    }
+    return null;
+}
+function resolvePolicyCapabilityReason(policy, extension, capability) {
+    const normalizedCapability = capability.trim().toLowerCase();
+    const override = resolvePolicyOverride(policy, extension.name);
+    const allowed = override && override.allowedCapabilities.size > 0 ? override.allowedCapabilities : policy.allowedCapabilities;
+    const blocked = new Set([
+        ...policy.blockedCapabilities,
+        ...(override ? override.blockedCapabilities : []),
+    ]);
+    return evaluatePolicySet(allowed, blocked, normalizedCapability, "capability_not_allowlisted", "capability_blocked");
+}
+function resolvePolicySurfaceReason(policy, extension, surface) {
+    const override = resolvePolicyOverride(policy, extension.name);
+    const allowed = override && override.allowedSurfaces.size > 0 ? override.allowedSurfaces : policy.allowedSurfaces;
+    const blocked = new Set([
+        ...policy.blockedSurfaces,
+        ...(override ? override.blockedSurfaces : []),
+    ]);
+    return evaluatePolicySet(allowed, blocked, surface, "surface_not_allowlisted", "surface_blocked");
+}
+function resolvePolicyCommandReason(policy, extension, command) {
+    const normalizedCommand = normalizeCommandName(command);
+    if (normalizedCommand.length === 0) {
+        return null;
+    }
+    const override = resolvePolicyOverride(policy, extension.name);
+    const allowed = override && override.allowedCommands.size > 0 ? override.allowedCommands : policy.allowedCommands;
+    const blocked = new Set([
+        ...policy.blockedCommands,
+        ...(override ? override.blockedCommands : []),
+    ]);
+    return evaluatePolicySet(allowed, blocked, normalizedCommand, "command_not_allowlisted", "command_blocked");
+}
+function resolvePolicyActionReason(policy, extension, action) {
+    const normalizedAction = normalizePolicyName(action).replace(/\s+/g, "-");
+    if (normalizedAction.length === 0) {
+        return null;
+    }
+    const override = resolvePolicyOverride(policy, extension.name);
+    const allowed = override && override.allowedActions.size > 0 ? override.allowedActions : policy.allowedActions;
+    const blocked = new Set([
+        ...policy.blockedActions,
+        ...(override ? override.blockedActions : []),
+    ]);
+    return evaluatePolicySet(allowed, blocked, normalizedAction, "action_not_allowlisted", "action_blocked");
+}
+function resolvePolicyServiceReason(policy, extension, service) {
+    const normalizedService = normalizePolicyName(service);
+    if (normalizedService.length === 0) {
+        return null;
+    }
+    const override = resolvePolicyOverride(policy, extension.name);
+    const allowed = override && override.allowedServices.size > 0 ? override.allowedServices : policy.allowedServices;
+    const blocked = new Set([
+        ...policy.blockedServices,
+        ...(override ? override.blockedServices : []),
+    ]);
+    return evaluatePolicySet(allowed, blocked, normalizedService, "service_not_allowlisted", "service_blocked");
+}
+function resolvePolicyExtensionReason(policy, extension) {
+    const name = normalizePolicyName(extension.name);
+    const override = resolvePolicyOverride(policy, extension.name);
+    if (override?.disabled === true) {
+        return "extension_override_disabled";
+    }
+    return evaluatePolicySet(policy.allowedExtensions, policy.blockedExtensions, name, "extension_not_allowlisted", "extension_blocked");
+}
+function resolvePolicyTrustReason(policy, extension) {
+    if (policy.trustMode === "off") {
+        return null;
+    }
+    const override = resolvePolicyOverride(policy, extension.name);
+    const name = normalizePolicyName(extension.name);
+    const trusted = extension.trusted === true;
+    const provenanceVerified = extension.provenanceVerified === true;
+    if (policy.trustedExtensions.size > 0 && !policy.trustedExtensions.has(name)) {
+        return "extension_not_trusted";
+    }
+    if ((override?.requireTrusted === true || policy.trustMode === "warn" || policy.trustMode === "enforce") && !trusted) {
+        return "extension_untrusted";
+    }
+    if ((policy.requireProvenance || override?.requireProvenance === true) && !provenanceVerified) {
+        return "provenance_missing_or_unverified";
+    }
+    return null;
+}
+function resolvePolicySandboxReason(policy, extension) {
+    if (policy.mode === "off") {
+        return null;
+    }
+    const override = resolvePolicyOverride(policy, extension.name);
+    const profile = override?.sandboxProfile ?? extension.sandboxProfile ?? policy.defaultSandboxProfile;
+    if (profile === "none") {
+        return null;
+    }
+    const permissions = extension.permissions;
+    if (!permissions) {
+        return "sandbox_permissions_missing";
+    }
+    const hasPermission = (name) => permissions[name] === true;
+    if (profile === "restricted") {
+        if (hasPermission("process_spawn")) {
+            return "sandbox_restricted_disallows_process_spawn";
+        }
+        if (hasPermission("env_write")) {
+            return "sandbox_restricted_disallows_env_write";
+        }
+        return null;
+    }
+    if (profile === "strict") {
+        if (hasPermission("process_spawn")) {
+            return "sandbox_strict_disallows_process_spawn";
+        }
+        if (hasPermission("network")) {
+            return "sandbox_strict_disallows_network";
+        }
+        if (hasPermission("fs_write")) {
+            return "sandbox_strict_disallows_fs_write";
+        }
+        if (hasPermission("env_write")) {
+            return "sandbox_strict_disallows_env_write";
+        }
+    }
+    return null;
+}
+function buildPolicyWarning(mode, scope, extension, reason, details = {}) {
+    const tokens = Object.entries(details)
+        .sort((left, right) => left[0].localeCompare(right[0]))
+        .map(([key, value]) => `${key}=${value}`)
+        .join(":");
+    const suffix = tokens.length > 0 ? `:${tokens}` : "";
+    return `extension_policy_${mode}_${scope}:${extension.layer}:${extension.name}:reason=${reason}${suffix}`;
+}
+export function evaluateExtensionPolicyForExtension(policy, extension) {
+    if (policy.mode === "off" && policy.trustMode === "off") {
+        return { allowed: true, warning: null };
+    }
+    const reason = resolvePolicyExtensionReason(policy, extension);
+    const trustReason = resolvePolicyTrustReason(policy, extension);
+    const sandboxReason = resolvePolicySandboxReason(policy, extension);
+    const extensionEnforced = reason && policy.mode === "enforce";
+    const trustEnforced = trustReason && policy.trustMode === "enforce";
+    const sandboxEnforced = sandboxReason && policy.mode === "enforce";
+    if (!reason && !trustReason && !sandboxReason) {
+        return { allowed: true, warning: null };
+    }
+    if (extensionEnforced) {
+        return {
+            allowed: false,
+            warning: buildPolicyWarning("blocked", "extension", extension, reason),
+        };
+    }
+    if (trustEnforced) {
+        return {
+            allowed: false,
+            warning: buildPolicyWarning("blocked", "trust", extension, trustReason),
+        };
+    }
+    if (sandboxEnforced) {
+        return {
+            allowed: false,
+            warning: buildPolicyWarning("blocked", "extension", extension, sandboxReason),
+        };
+    }
+    if (reason && policy.mode === "warn") {
+        return {
+            allowed: true,
+            warning: buildPolicyWarning("violation", "extension", extension, reason),
+        };
+    }
+    if (trustReason && policy.trustMode === "warn") {
+        return {
+            allowed: true,
+            warning: buildPolicyWarning("violation", "trust", extension, trustReason),
+        };
+    }
+    if (sandboxReason && policy.mode === "warn") {
+        return {
+            allowed: true,
+            warning: buildPolicyWarning("violation", "extension", extension, sandboxReason),
+        };
+    }
+    return {
+        allowed: true,
+        warning: null,
+    };
+}
+export function evaluateExtensionPolicyForCapability(policy, extension, capability) {
+    if (policy.mode === "off") {
+        return { allowed: true, warning: null };
+    }
+    const reason = resolvePolicyCapabilityReason(policy, extension, capability);
+    if (!reason) {
+        return { allowed: true, warning: null };
+    }
+    return {
+        allowed: policy.mode === "warn",
+        warning: buildPolicyWarning(policy.mode === "warn" ? "violation" : "blocked", "capability", extension, reason, { capability: capability.trim().toLowerCase() }),
+    };
+}
+export function evaluateExtensionPolicyForRegistration(policy, extension, surface, method, capability, details) {
+    if (policy.mode === "off") {
+        return { allowed: true, warning: null };
+    }
+    const capabilityReason = typeof capability === "string" ? resolvePolicyCapabilityReason(policy, extension, capability) : null;
+    const surfaceReason = resolvePolicySurfaceReason(policy, extension, surface);
+    const commandReason = details?.command ? resolvePolicyCommandReason(policy, extension, details.command) : null;
+    const actionReason = details?.action ? resolvePolicyActionReason(policy, extension, details.action) : null;
+    const serviceReason = details?.service ? resolvePolicyServiceReason(policy, extension, details.service) : null;
+    const reason = capabilityReason ?? surfaceReason ?? commandReason ?? actionReason ?? serviceReason;
+    if (!reason) {
+        return { allowed: true, warning: null };
+    }
+    const warningDetails = {
+        method: normalizePolicyName(method).replace(/\s+/g, "_"),
+        surface,
+    };
+    if (capability) {
+        warningDetails.capability = capability;
+    }
+    if (details?.command) {
+        warningDetails.command = normalizeCommandName(details.command);
+    }
+    if (details?.action) {
+        warningDetails.action = normalizePolicyName(details.action).replace(/\s+/g, "-");
+    }
+    if (details?.service) {
+        warningDetails.service = normalizePolicyName(details.service);
+    }
+    const warning = buildPolicyWarning(policy.mode === "warn" ? "violation" : "blocked", "registration", extension, reason, warningDetails);
+    return {
+        allowed: policy.mode === "warn",
+        warning,
+    };
+}
+//# sourceMappingURL=extension-policy.js.map
+//# debugId=3a8acf74-cc81-5417-8ee9-30d80fde2102