@unbrained/pm-cli 2026.6.30 → 2026.7.1

package/dist/core/extensions/extension-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"extension-policy.js","sources":["core/extensions/extension-policy.ts"],"sourceRoot":"/","sourcesContent":["/**\n * @module core/extensions/extension-policy\n *\n * Implements extension runtime contracts and governance for Extension Policy.\n */\nimport {\n  KNOWN_EXTENSION_POLICY_MODES,\n  KNOWN_EXTENSION_POLICY_SURFACES,\n  KNOWN_EXTENSION_SANDBOX_PROFILES,\n  KNOWN_EXTENSION_TRUST_MODES,\n  KNOWN_PM_MAX_VERSION_EXCEEDED_MODES,\n  type ExtensionCapability,\n  type ExtensionGovernancePolicy,\n  type ExtensionLayer,\n  type ExtensionPolicyMode,\n  type ExtensionPolicyOverride,\n  type ExtensionPolicySurface,\n  type ExtensionSandboxProfile,\n  type ExtensionTrustMode,\n  type PmMaxVersionExceededMode,\n  type PmMaxVersionExceededModeSetting,\n} from \"./extension-types.js\";\nimport { isKnownExtensionCapability } from \"./extension-capability-aliases.js\";\nimport { normalizeCommandName } from \"./extension-runtime-helpers.js\";\nimport type { PmSettings } from \"../../types/index.js\";\n\ninterface NormalizedExtensionPolicyOverride {\n  name: string;\n  disabled: boolean;\n  requireTrusted: boolean;\n  requireProvenance: boolean;\n  sandboxProfile?: ExtensionSandboxProfile;\n  allowedCapabilities: Set<string>;\n  blockedCapabilities: Set<string>;\n  allowedSurfaces: Set<string>;\n  blockedSurfaces: Set<string>;\n  allowedCommands: Set<string>;\n  blockedCommands: Set<string>;\n  allowedActions: Set<string>;\n  blockedActions: Set<string>;\n  allowedServices: Set<string>;\n  blockedServices: Set<string>;\n}\n\n/** Concrete per-layer resolution of `pm_max_version_exceeded_mode` (default: block). */\nexport interface NormalizedPmMaxVersionExceededMode {\n  global: PmMaxVersionExceededMode;\n  project: PmMaxVersionExceededMode;\n}\n\n/**\n * Documents the normalized extension policy payload exchanged by command, SDK, and package integrations.\n */\nexport interface NormalizedExtensionPolicy {\n  mode: ExtensionPolicyMode;\n  trustMode: ExtensionTrustMode;\n  pmMaxVersionExceededMode: NormalizedPmMaxVersionExceededMode;\n  requireProvenance: boolean;\n  trustedExtensions: Set<string>;\n  defaultSandboxProfile: ExtensionSandboxProfile;\n  allowedExtensions: Set<string>;\n  blockedExtensions: Set<string>;\n  allowedCapabilities: Set<string>;\n  blockedCapabilities: Set<string>;\n  allowedSurfaces: Set<string>;\n  blockedSurfaces: Set<string>;\n  allowedCommands: Set<string>;\n  blockedCommands: Set<string>;\n  allowedActions: Set<string>;\n  blockedActions: Set<string>;\n  allowedServices: Set<string>;\n  blockedServices: Set<string>;\n  overridesByName: Map<string, NormalizedExtensionPolicyOverride>;\n  warnings: string[];\n}\n\n/**\n * Documents the policy extension ref payload exchanged by command, SDK, and package integrations.\n */\nexport interface PolicyExtensionRef {\n  layer: ExtensionLayer;\n  name: string;\n  trusted?: boolean;\n  provenanceVerified?: boolean;\n  sandboxProfile?: ExtensionSandboxProfile;\n  permissions?: Record<string, boolean | undefined>;\n}\n\nfunction normalizePolicyName(value: string | undefined): string {\n  if (typeof value !== \"string\") {\n    return \"\";\n  }\n  return value.trim().toLowerCase();\n}\n\nfunction normalizePolicyStringSet(values: readonly string[] | undefined): Set<string> {\n  return new Set(\n    (values ?? [])\n      .map((value) => value.trim().toLowerCase())\n      .filter((value) => value.length > 0),\n  );\n}\n\nfunction normalizePolicySurfaceToken(value: string): string {\n  const normalized = value.trim().toLowerCase();\n  if (normalized.length === 0) {\n    return \"\";\n  }\n  const segments = normalized\n    .split(/[.:/]/)\n    .map((segment) => segment.replace(/[\\s_-]+/g, \"\"))\n    .filter((segment) => segment.length > 0);\n  if (segments.length === 0) {\n    return \"\";\n  }\n  if (segments.length === 1) {\n    return segments[0];\n  }\n  return `${segments[0]}.${segments.slice(1).join(\"\")}`;\n}\n\nfunction normalizePolicySurfaceSet(values: readonly string[] | undefined): Set<string> {\n  return new Set(\n    (values ?? [])\n      .map((value) => normalizePolicySurfaceToken(value))\n      .filter((value) => value.length > 0),\n  );\n}\n\nfunction normalizePolicyMode(value: string | undefined): ExtensionPolicyMode {\n  const normalized = normalizePolicyName(value);\n  if ((KNOWN_EXTENSION_POLICY_MODES as readonly string[]).includes(normalized)) {\n    return normalized as ExtensionPolicyMode;\n  }\n  return \"off\";\n}\n\nfunction normalizePolicyTrustMode(value: string | undefined): ExtensionTrustMode {\n  const normalized = normalizePolicyName(value);\n  if ((KNOWN_EXTENSION_TRUST_MODES as readonly string[]).includes(normalized)) {\n    return normalized as ExtensionTrustMode;\n  }\n  return \"off\";\n}\n\n/**\n * Implements normalize policy sandbox profile for the public runtime surface of this module.\n */\nexport function normalizePolicySandboxProfile(value: string | undefined): ExtensionSandboxProfile {\n  const normalized = normalizePolicyName(value);\n  if ((KNOWN_EXTENSION_SANDBOX_PROFILES as readonly string[]).includes(normalized)) {\n    return normalized as ExtensionSandboxProfile;\n  }\n  return \"none\";\n}\n\nfunction normalizePmMaxVersionExceededModeValue(value: unknown): PmMaxVersionExceededMode | undefined {\n  if (typeof value !== \"string\") {\n    return undefined;\n  }\n  const normalized = value.trim().toLowerCase();\n  return (KNOWN_PM_MAX_VERSION_EXCEEDED_MODES as readonly string[]).includes(normalized)\n    ? (normalized as PmMaxVersionExceededMode)\n    : undefined;\n}\n\n/**\n * Resolve `extensions.policy.pm_max_version_exceeded_mode` to a concrete\n * per-layer mode map. Accepts a single mode string (applied to both layers) or\n * a `{ global?, project? }` override map; anything unset or unknown defaults to\n * the safe `\"block\"`.\n */\nexport function normalizePmMaxVersionExceededMode(\n  value: PmMaxVersionExceededModeSetting | undefined,\n): NormalizedPmMaxVersionExceededMode {\n  if (typeof value === \"string\") {\n    const mode = normalizePmMaxVersionExceededModeValue(value) ?? \"block\";\n    return { global: mode, project: mode };\n  }\n  if (typeof value === \"object\" && value !== null && !Array.isArray(value)) {\n    return {\n      global: normalizePmMaxVersionExceededModeValue(value.global) ?? \"block\",\n      project: normalizePmMaxVersionExceededModeValue(value.project) ?? \"block\",\n    };\n  }\n  return { global: \"block\", project: \"block\" };\n}\n\nfunction serializePmMaxVersionExceededMode(\n  mode: NormalizedPmMaxVersionExceededMode,\n): PmMaxVersionExceededModeSetting {\n  return mode.global === mode.project ? mode.global : { global: mode.global, project: mode.project };\n}\n\nfunction toSortedList(values: Iterable<string>): string[] {\n  return [...new Set(values)].sort((left, right) => left.localeCompare(right));\n}\n\nfunction buildExtensionPolicyOverride(\n  rawOverride: ExtensionPolicyOverride,\n): { name: string; normalized: NormalizedExtensionPolicyOverride } | null {\n  const name = normalizePolicyName(rawOverride.name);\n  if (name.length === 0) {\n    return null;\n  }\n  return {\n    name,\n    normalized: {\n      name,\n      disabled: rawOverride.disabled === true,\n      requireTrusted: rawOverride.require_trusted === true,\n      requireProvenance: rawOverride.require_provenance === true,\n      sandboxProfile:\n        rawOverride.sandbox_profile !== undefined\n          ? normalizePolicySandboxProfile(rawOverride.sandbox_profile)\n          : undefined,\n      allowedCapabilities: normalizePolicyStringSet(rawOverride.allowed_capabilities),\n      blockedCapabilities: normalizePolicyStringSet(rawOverride.blocked_capabilities),\n      allowedSurfaces: normalizePolicySurfaceSet(rawOverride.allowed_surfaces),\n      blockedSurfaces: normalizePolicySurfaceSet(rawOverride.blocked_surfaces),\n      allowedCommands: normalizePolicyStringSet(rawOverride.allowed_commands),\n      blockedCommands: normalizePolicyStringSet(rawOverride.blocked_commands),\n      allowedActions: normalizePolicyStringSet(rawOverride.allowed_actions),\n      blockedActions: normalizePolicyStringSet(rawOverride.blocked_actions),\n      allowedServices: normalizePolicyStringSet(rawOverride.allowed_services),\n      blockedServices: normalizePolicyStringSet(rawOverride.blocked_services),\n    },\n  };\n}\n\nfunction collectExtensionPolicyOverrides(\n  rawOverrides: readonly ExtensionPolicyOverride[] | undefined,\n): Map<string, NormalizedExtensionPolicyOverride> {\n  const overridesByName = new Map<string, NormalizedExtensionPolicyOverride>();\n  for (const rawOverride of rawOverrides ?? []) {\n    const built = buildExtensionPolicyOverride(rawOverride);\n    if (built) {\n      overridesByName.set(built.name, built.normalized);\n    }\n  }\n  return overridesByName;\n}\n\n/**\n * Implements normalize extension policy for the public runtime surface of this module.\n */\nexport function normalizeExtensionPolicy(settings: PmSettings): NormalizedExtensionPolicy {\n  const policy = settings.extensions.policy as ExtensionGovernancePolicy | undefined;\n  const mode = normalizePolicyMode(policy?.mode);\n  const trustMode = normalizePolicyTrustMode(policy?.trust_mode);\n  const pmMaxVersionExceededMode = normalizePmMaxVersionExceededMode(policy?.pm_max_version_exceeded_mode);\n  const requireProvenance = policy?.require_provenance === true;\n  const trustedExtensions = normalizePolicyStringSet(policy?.trusted_extensions);\n  const defaultSandboxProfile = normalizePolicySandboxProfile(policy?.default_sandbox_profile);\n  const allowedExtensions = normalizePolicyStringSet(policy?.allowed_extensions);\n  const blockedExtensions = normalizePolicyStringSet(policy?.blocked_extensions);\n  const allowedCapabilities = normalizePolicyStringSet(policy?.allowed_capabilities);\n  const blockedCapabilities = normalizePolicyStringSet(policy?.blocked_capabilities);\n  const allowedSurfaces = normalizePolicySurfaceSet(policy?.allowed_surfaces);\n  const blockedSurfaces = normalizePolicySurfaceSet(policy?.blocked_surfaces);\n  const allowedCommands = normalizePolicyStringSet(policy?.allowed_commands);\n  const blockedCommands = normalizePolicyStringSet(policy?.blocked_commands);\n  const allowedActions = normalizePolicyStringSet(policy?.allowed_actions);\n  const blockedActions = normalizePolicyStringSet(policy?.blocked_actions);\n  const allowedServices = normalizePolicyStringSet(policy?.allowed_services);\n  const blockedServices = normalizePolicyStringSet(policy?.blocked_services);\n  const overridesByName = collectExtensionPolicyOverrides(policy?.extension_overrides);\n\n  const warnings: string[] = [];\n  for (const capability of toSortedList([...allowedCapabilities, ...blockedCapabilities])) {\n    if (!isKnownExtensionCapability(capability)) {\n      warnings.push(`extension_policy_unknown_capability:${capability}`);\n    }\n  }\n  for (const override of [...overridesByName.values()].sort((left, right) => left.name.localeCompare(right.name))) {\n    for (const capability of toSortedList([...override.allowedCapabilities, ...override.blockedCapabilities])) {\n      if (!isKnownExtensionCapability(capability)) {\n        warnings.push(`extension_policy_unknown_capability:${override.name}:${capability}`);\n      }\n    }\n  }\n  const knownSurfaces = new Set<string>(KNOWN_EXTENSION_POLICY_SURFACES);\n  for (const surface of toSortedList([...allowedSurfaces, ...blockedSurfaces])) {\n    if (!knownSurfaces.has(surface)) {\n      warnings.push(`extension_policy_unknown_surface:${surface}`);\n    }\n  }\n  for (const override of [...overridesByName.values()].sort((left, right) => left.name.localeCompare(right.name))) {\n    for (const surface of toSortedList([...override.allowedSurfaces, ...override.blockedSurfaces])) {\n      if (!knownSurfaces.has(surface)) {\n        warnings.push(`extension_policy_unknown_surface:${override.name}:${surface}`);\n      }\n    }\n  }\n\n  return {\n    mode,\n    trustMode,\n    pmMaxVersionExceededMode,\n    requireProvenance,\n    trustedExtensions,\n    defaultSandboxProfile,\n    allowedExtensions,\n    blockedExtensions,\n    allowedCapabilities,\n    blockedCapabilities,\n    allowedSurfaces,\n    blockedSurfaces,\n    allowedCommands,\n    blockedCommands,\n    allowedActions,\n    blockedActions,\n    allowedServices,\n    blockedServices,\n    overridesByName,\n    warnings: [...new Set(warnings)].sort((left, right) => left.localeCompare(right)),\n  };\n}\n\n/**\n * Implements serialize extension policy for the public runtime surface of this module.\n */\nexport function serializeExtensionPolicy(policy: NormalizedExtensionPolicy): ExtensionGovernancePolicy {\n  const overrides = [...policy.overridesByName.values()]\n    .sort((left, right) => left.name.localeCompare(right.name))\n    .map((override) => ({\n      name: override.name,\n      ...(override.disabled ? { disabled: true } : {}),\n      ...(override.requireTrusted ? { require_trusted: true } : {}),\n      ...(override.requireProvenance ? { require_provenance: true } : {}),\n      ...(override.sandboxProfile ? { sandbox_profile: override.sandboxProfile } : {}),\n      ...(override.allowedCapabilities.size > 0 ? { allowed_capabilities: toSortedList(override.allowedCapabilities) } : {}),\n      ...(override.blockedCapabilities.size > 0 ? { blocked_capabilities: toSortedList(override.blockedCapabilities) } : {}),\n      ...(override.allowedSurfaces.size > 0 ? { allowed_surfaces: toSortedList(override.allowedSurfaces) } : {}),\n      ...(override.blockedSurfaces.size > 0 ? { blocked_surfaces: toSortedList(override.blockedSurfaces) } : {}),\n      ...(override.allowedCommands.size > 0 ? { allowed_commands: toSortedList(override.allowedCommands) } : {}),\n      ...(override.blockedCommands.size > 0 ? { blocked_commands: toSortedList(override.blockedCommands) } : {}),\n      ...(override.allowedActions.size > 0 ? { allowed_actions: toSortedList(override.allowedActions) } : {}),\n      ...(override.blockedActions.size > 0 ? { blocked_actions: toSortedList(override.blockedActions) } : {}),\n      ...(override.allowedServices.size > 0 ? { allowed_services: toSortedList(override.allowedServices) } : {}),\n      ...(override.blockedServices.size > 0 ? { blocked_services: toSortedList(override.blockedServices) } : {}),\n    }));\n  return {\n    mode: policy.mode,\n    trust_mode: policy.trustMode,\n    pm_max_version_exceeded_mode: serializePmMaxVersionExceededMode(policy.pmMaxVersionExceededMode),\n    require_provenance: policy.requireProvenance,\n    trusted_extensions: toSortedList(policy.trustedExtensions),\n    default_sandbox_profile: policy.defaultSandboxProfile,\n    allowed_extensions: toSortedList(policy.allowedExtensions),\n    blocked_extensions: toSortedList(policy.blockedExtensions),\n    allowed_capabilities: toSortedList(policy.allowedCapabilities),\n    blocked_capabilities: toSortedList(policy.blockedCapabilities),\n    allowed_surfaces: toSortedList(policy.allowedSurfaces),\n    blocked_surfaces: toSortedList(policy.blockedSurfaces),\n    allowed_commands: toSortedList(policy.allowedCommands),\n    blocked_commands: toSortedList(policy.blockedCommands),\n    allowed_actions: toSortedList(policy.allowedActions),\n    blocked_actions: toSortedList(policy.blockedActions),\n    allowed_services: toSortedList(policy.allowedServices),\n    blocked_services: toSortedList(policy.blockedServices),\n    extension_overrides: overrides,\n  };\n}\n\n/**\n * Implements hydrate extension policy for the public runtime surface of this module.\n */\nexport function hydrateExtensionPolicy(policy: ExtensionGovernancePolicy): NormalizedExtensionPolicy {\n  const overridesByName = collectExtensionPolicyOverrides(policy.extension_overrides);\n  return {\n    mode: normalizePolicyMode(policy.mode),\n    trustMode: normalizePolicyTrustMode(policy.trust_mode),\n    pmMaxVersionExceededMode: normalizePmMaxVersionExceededMode(policy.pm_max_version_exceeded_mode),\n    requireProvenance: policy.require_provenance === true,\n    trustedExtensions: normalizePolicyStringSet(policy.trusted_extensions),\n    defaultSandboxProfile: normalizePolicySandboxProfile(policy.default_sandbox_profile),\n    allowedExtensions: normalizePolicyStringSet(policy.allowed_extensions),\n    blockedExtensions: normalizePolicyStringSet(policy.blocked_extensions),\n    allowedCapabilities: normalizePolicyStringSet(policy.allowed_capabilities),\n    blockedCapabilities: normalizePolicyStringSet(policy.blocked_capabilities),\n    allowedSurfaces: normalizePolicySurfaceSet(policy.allowed_surfaces),\n    blockedSurfaces: normalizePolicySurfaceSet(policy.blocked_surfaces),\n    allowedCommands: normalizePolicyStringSet(policy.allowed_commands),\n    blockedCommands: normalizePolicyStringSet(policy.blocked_commands),\n    allowedActions: normalizePolicyStringSet(policy.allowed_actions),\n    blockedActions: normalizePolicyStringSet(policy.blocked_actions),\n    allowedServices: normalizePolicyStringSet(policy.allowed_services),\n    blockedServices: normalizePolicyStringSet(policy.blocked_services),\n    overridesByName,\n    warnings: [],\n  };\n}\n\nfunction resolvePolicyOverride(\n  policy: NormalizedExtensionPolicy,\n  extensionName: string,\n): NormalizedExtensionPolicyOverride | null {\n  return policy.overridesByName.get(normalizePolicyName(extensionName)) ?? null;\n}\n\nfunction evaluatePolicySet(\n  allowed: Set<string>,\n  blocked: Set<string>,\n  value: string,\n  notAllowlistedReason: string,\n  blockedReason: string,\n): string | null {\n  if (blocked.has(value)) {\n    return blockedReason;\n  }\n  if (allowed.size > 0 && !allowed.has(value)) {\n    return notAllowlistedReason;\n  }\n  return null;\n}\n\nfunction resolvePolicyCapabilityReason(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  capability: string,\n): string | null {\n  const normalizedCapability = capability.trim().toLowerCase();\n  const override = resolvePolicyOverride(policy, extension.name);\n  const allowed = override && override.allowedCapabilities.size > 0 ? override.allowedCapabilities : policy.allowedCapabilities;\n  const blocked = new Set<string>([\n    ...policy.blockedCapabilities,\n    ...(override ? override.blockedCapabilities : []),\n  ]);\n  return evaluatePolicySet(\n    allowed,\n    blocked,\n    normalizedCapability,\n    \"capability_not_allowlisted\",\n    \"capability_blocked\",\n  );\n}\n\nfunction resolvePolicySurfaceReason(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  surface: ExtensionPolicySurface,\n): string | null {\n  const override = resolvePolicyOverride(policy, extension.name);\n  const allowed = override && override.allowedSurfaces.size > 0 ? override.allowedSurfaces : policy.allowedSurfaces;\n  const blocked = new Set<string>([\n    ...policy.blockedSurfaces,\n    ...(override ? override.blockedSurfaces : []),\n  ]);\n  return evaluatePolicySet(allowed, blocked, surface, \"surface_not_allowlisted\", \"surface_blocked\");\n}\n\nfunction resolvePolicyCommandReason(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  command: string,\n): string | null {\n  const normalizedCommand = normalizeCommandName(command);\n  if (normalizedCommand.length === 0) {\n    return null;\n  }\n  const override = resolvePolicyOverride(policy, extension.name);\n  const allowed = override && override.allowedCommands.size > 0 ? override.allowedCommands : policy.allowedCommands;\n  const blocked = new Set<string>([\n    ...policy.blockedCommands,\n    ...(override ? override.blockedCommands : []),\n  ]);\n  return evaluatePolicySet(allowed, blocked, normalizedCommand, \"command_not_allowlisted\", \"command_blocked\");\n}\n\nfunction resolvePolicyActionReason(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  action: string,\n): string | null {\n  const normalizedAction = normalizePolicyName(action).replace(/\\s+/g, \"-\");\n  if (normalizedAction.length === 0) {\n    return null;\n  }\n  const override = resolvePolicyOverride(policy, extension.name);\n  const allowed = override && override.allowedActions.size > 0 ? override.allowedActions : policy.allowedActions;\n  const blocked = new Set<string>([\n    ...policy.blockedActions,\n    ...(override ? override.blockedActions : []),\n  ]);\n  return evaluatePolicySet(allowed, blocked, normalizedAction, \"action_not_allowlisted\", \"action_blocked\");\n}\n\nfunction resolvePolicyServiceReason(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  service: string,\n): string | null {\n  const normalizedService = normalizePolicyName(service);\n  if (normalizedService.length === 0) {\n    return null;\n  }\n  const override = resolvePolicyOverride(policy, extension.name);\n  const allowed = override && override.allowedServices.size > 0 ? override.allowedServices : policy.allowedServices;\n  const blocked = new Set<string>([\n    ...policy.blockedServices,\n    ...(override ? override.blockedServices : []),\n  ]);\n  return evaluatePolicySet(allowed, blocked, normalizedService, \"service_not_allowlisted\", \"service_blocked\");\n}\n\nfunction resolvePolicyExtensionReason(policy: NormalizedExtensionPolicy, extension: PolicyExtensionRef): string | null {\n  const name = normalizePolicyName(extension.name);\n  const override = resolvePolicyOverride(policy, extension.name);\n  if (override?.disabled === true) {\n    return \"extension_override_disabled\";\n  }\n  return evaluatePolicySet(\n    policy.allowedExtensions,\n    policy.blockedExtensions,\n    name,\n    \"extension_not_allowlisted\",\n    \"extension_blocked\",\n  );\n}\n\nfunction resolvePolicyTrustReason(policy: NormalizedExtensionPolicy, extension: PolicyExtensionRef): string | null {\n  if (policy.trustMode === \"off\") {\n    return null;\n  }\n  const override = resolvePolicyOverride(policy, extension.name);\n  const name = normalizePolicyName(extension.name);\n  const trusted = extension.trusted === true;\n  const provenanceVerified = extension.provenanceVerified === true;\n\n  if (policy.trustedExtensions.size > 0 && !policy.trustedExtensions.has(name)) {\n    return \"extension_not_trusted\";\n  }\n  if ((override?.requireTrusted === true || policy.trustMode === \"warn\" || policy.trustMode === \"enforce\") && !trusted) {\n    return \"extension_untrusted\";\n  }\n  if ((policy.requireProvenance || override?.requireProvenance === true) && !provenanceVerified) {\n    return \"provenance_missing_or_unverified\";\n  }\n  return null;\n}\n\nfunction resolvePolicySandboxReason(policy: NormalizedExtensionPolicy, extension: PolicyExtensionRef): string | null {\n  if (policy.mode === \"off\") {\n    return null;\n  }\n  const override = resolvePolicyOverride(policy, extension.name);\n  const profile = override?.sandboxProfile ?? extension.sandboxProfile ?? policy.defaultSandboxProfile;\n  if (profile === \"none\") {\n    return null;\n  }\n  const permissions = extension.permissions;\n  if (!permissions) {\n    return \"sandbox_permissions_missing\";\n  }\n\n  const hasPermission = (name: keyof typeof permissions): boolean => permissions[name] === true;\n  if (profile === \"restricted\") {\n    if (hasPermission(\"process_spawn\")) {\n      return \"sandbox_restricted_disallows_process_spawn\";\n    }\n    if (hasPermission(\"env_write\")) {\n      return \"sandbox_restricted_disallows_env_write\";\n    }\n    return null;\n  }\n\n  // Remaining profile branch is strict (none/restricted returned above).\n  if (hasPermission(\"process_spawn\")) {\n    return \"sandbox_strict_disallows_process_spawn\";\n  }\n  if (hasPermission(\"network\")) {\n    return \"sandbox_strict_disallows_network\";\n  }\n  if (hasPermission(\"fs_write\")) {\n    return \"sandbox_strict_disallows_fs_write\";\n  }\n  if (hasPermission(\"env_write\")) {\n    return \"sandbox_strict_disallows_env_write\";\n  }\n  return null;\n}\n\nfunction buildPolicyWarning(\n  mode: \"blocked\" | \"violation\",\n  scope: \"extension\" | \"capability\" | \"registration\" | \"trust\",\n  extension: PolicyExtensionRef,\n  reason: string,\n  details: Record<string, string> = {},\n): string {\n  const tokens = Object.entries(details)\n    .sort((left, right) => left[0].localeCompare(right[0]))\n    .map(([key, value]) => `${key}=${value}`)\n    .join(\":\");\n  const suffix = tokens.length > 0 ? `:${tokens}` : \"\";\n  return `extension_policy_${mode}_${scope}:${extension.layer}:${extension.name}:reason=${reason}${suffix}`;\n}\n\n/**\n * Implements evaluate extension policy for extension for the public runtime surface of this module.\n */\nexport function evaluateExtensionPolicyForExtension(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n): { allowed: boolean; warning: string | null } {\n  if (policy.mode === \"off\" && policy.trustMode === \"off\") {\n    return { allowed: true, warning: null };\n  }\n  const reason = resolvePolicyExtensionReason(policy, extension);\n  const trustReason = resolvePolicyTrustReason(policy, extension);\n  const sandboxReason = resolvePolicySandboxReason(policy, extension);\n  const extensionEnforced = reason && policy.mode === \"enforce\";\n  const trustEnforced = trustReason && policy.trustMode === \"enforce\";\n  const sandboxEnforced = sandboxReason && policy.mode === \"enforce\";\n  if (!reason && !trustReason && !sandboxReason) {\n    return { allowed: true, warning: null };\n  }\n  if (extensionEnforced) {\n    return {\n      allowed: false,\n      warning: buildPolicyWarning(\"blocked\", \"extension\", extension, reason),\n    };\n  }\n  if (trustEnforced) {\n    return {\n      allowed: false,\n      warning: buildPolicyWarning(\"blocked\", \"trust\", extension, trustReason),\n    };\n  }\n  if (sandboxEnforced) {\n    return {\n      allowed: false,\n      warning: buildPolicyWarning(\"blocked\", \"extension\", extension, sandboxReason),\n    };\n  }\n  if (reason && policy.mode === \"warn\") {\n    return {\n      allowed: true,\n      warning: buildPolicyWarning(\"violation\", \"extension\", extension, reason),\n    };\n  }\n  if (trustReason && policy.trustMode === \"warn\") {\n    return {\n      allowed: true,\n      warning: buildPolicyWarning(\"violation\", \"trust\", extension, trustReason),\n    };\n  }\n  if (sandboxReason && policy.mode === \"warn\") {\n    return {\n      allowed: true,\n      warning: buildPolicyWarning(\"violation\", \"extension\", extension, sandboxReason),\n    };\n  }\n  return {\n    allowed: true,\n    warning: null,\n  };\n}\n\n/**\n * Implements evaluate extension policy for capability for the public runtime surface of this module.\n */\nexport function evaluateExtensionPolicyForCapability(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  capability: string,\n): { allowed: boolean; warning: string | null } {\n  if (policy.mode === \"off\") {\n    return { allowed: true, warning: null };\n  }\n  const reason = resolvePolicyCapabilityReason(policy, extension, capability);\n  if (!reason) {\n    return { allowed: true, warning: null };\n  }\n  return {\n    allowed: policy.mode === \"warn\",\n    warning: buildPolicyWarning(\n    policy.mode === \"warn\" ? \"violation\" : \"blocked\",\n    \"capability\",\n    extension,\n    reason,\n    { capability: capability.trim().toLowerCase() },\n    ),\n  };\n}\n\n/**\n * Implements evaluate extension policy for registration for the public runtime surface of this module.\n */\nexport function evaluateExtensionPolicyForRegistration(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  surface: ExtensionPolicySurface,\n  method: string,\n  capability?: ExtensionCapability,\n  details?: {\n    command?: string;\n    action?: string;\n    service?: string;\n  },\n): { allowed: boolean; warning: string | null } {\n  if (policy.mode === \"off\") {\n    return { allowed: true, warning: null };\n  }\n  const capabilityReason =\n    typeof capability === \"string\" ? resolvePolicyCapabilityReason(policy, extension, capability) : null;\n  const surfaceReason = resolvePolicySurfaceReason(policy, extension, surface);\n  const commandReason = details?.command ? resolvePolicyCommandReason(policy, extension, details.command) : null;\n  const actionReason = details?.action ? resolvePolicyActionReason(policy, extension, details.action) : null;\n  const serviceReason = details?.service ? resolvePolicyServiceReason(policy, extension, details.service) : null;\n  const reason = capabilityReason ?? surfaceReason ?? commandReason ?? actionReason ?? serviceReason;\n  if (!reason) {\n    return { allowed: true, warning: null };\n  }\n  const warningDetails: Record<string, string> = {\n    method: normalizePolicyName(method).replace(/\\s+/g, \"_\"),\n    surface,\n  };\n  if (capability) {\n    warningDetails.capability = capability;\n  }\n  if (details?.command) {\n    warningDetails.command = normalizeCommandName(details.command);\n  }\n  if (details?.action) {\n    warningDetails.action = normalizePolicyName(details.action).replace(/\\s+/g, \"-\");\n  }\n  if (details?.service) {\n    warningDetails.service = normalizePolicyName(details.service);\n  }\n  const warning = buildPolicyWarning(\n    policy.mode === \"warn\" ? \"violation\" : \"blocked\",\n    \"registration\",\n    extension,\n    reason,\n    warningDetails,\n  );\n  return {\n    allowed: policy.mode === \"warn\",\n    warning,\n  };\n}\n"],"names":[],"mappings":"AAAA;;;;GAIG;;;AACH,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,EAC/B,gCAAgC,EAChC,2BAA2B,EAC3B,mCAAmC,GAWpC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAiEtE,SAAS,mBAAmB,CAAC,KAAyB;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAqC;IACrE,OAAO,IAAI,GAAG,CACZ,CAAC,MAAM,IAAI,EAAE,CAAC;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAC1C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CACvC,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU;SACxB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;SACjD,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAqC;IACtE,OAAO,IAAI,GAAG,CACZ,CAAC,MAAM,IAAI,EAAE,CAAC;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;SAClD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CACvC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB;IACpD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAK,4BAAkD,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7E,OAAO,UAAiC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAyB;IACzD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAK,2BAAiD,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5E,OAAO,UAAgC,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAAyB;IACrE,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAK,gCAAsD,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjF,OAAO,UAAqC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sCAAsC,CAAC,KAAc;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAQ,mCAAyD,CAAC,QAAQ,CAAC,UAAU,CAAC;QACpF,CAAC,CAAE,UAAuC;QAC1C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC,CAC/C,KAAkD;IAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,sCAAsC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC;QACtE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO;YACL,MAAM,EAAE,sCAAsC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO;YACvE,OAAO,EAAE,sCAAsC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO;SAC1E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,iCAAiC,CACxC,IAAwC;IAExC,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACrG,CAAC;AAED,SAAS,YAAY,CAAC,MAAwB;IAC5C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,4BAA4B,CACnC,WAAoC;IAEpC,MAAM,IAAI,GAAG,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,IAAI;QACJ,UAAU,EAAE;YACV,IAAI;YACJ,QAAQ,EAAE,WAAW,CAAC,QAAQ,KAAK,IAAI;YACvC,cAAc,EAAE,WAAW,CAAC,eAAe,KAAK,IAAI;YACpD,iBAAiB,EAAE,WAAW,CAAC,kBAAkB,KAAK,IAAI;YAC1D,cAAc,EACZ,WAAW,CAAC,eAAe,KAAK,SAAS;gBACvC,CAAC,CAAC,6BAA6B,CAAC,WAAW,CAAC,eAAe,CAAC;gBAC5D,CAAC,CAAC,SAAS;YACf,mBAAmB,EAAE,wBAAwB,CAAC,WAAW,CAAC,oBAAoB,CAAC;YAC/E,mBAAmB,EAAE,wBAAwB,CAAC,WAAW,CAAC,oBAAoB,CAAC;YAC/E,eAAe,EAAE,yBAAyB,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACxE,eAAe,EAAE,yBAAyB,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACxE,eAAe,EAAE,wBAAwB,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACvE,eAAe,EAAE,wBAAwB,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACvE,cAAc,EAAE,wBAAwB,CAAC,WAAW,CAAC,eAAe,CAAC;YACrE,cAAc,EAAE,wBAAwB,CAAC,WAAW,CAAC,eAAe,CAAC;YACrE,eAAe,EAAE,wBAAwB,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACvE,eAAe,EAAE,wBAAwB,CAAC,WAAW,CAAC,gBAAgB,CAAC;SACxE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,YAA4D;IAE5D,MAAM,eAAe,GAAG,IAAI,GAAG,EAA6C,CAAC;IAC7E,KAAK,MAAM,WAAW,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,4BAA4B,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,KAAK,EAAE,CAAC;YACV,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAoB;IAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,MAA+C,CAAC;IACnF,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC/D,MAAM,wBAAwB,GAAG,iCAAiC,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;IACzG,MAAM,iBAAiB,GAAG,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC9D,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC/E,MAAM,qBAAqB,GAAG,6BAA6B,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAC7F,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC/E,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC/E,MAAM,mBAAmB,GAAG,wBAAwB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACnF,MAAM,mBAAmB,GAAG,wBAAwB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACnF,MAAM,eAAe,GAAG,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5E,MAAM,eAAe,GAAG,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5E,MAAM,eAAe,GAAG,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAG,wBAAwB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACzE,MAAM,cAAc,GAAG,wBAAwB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACzE,MAAM,eAAe,GAAG,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,+BAA+B,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAErF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,UAAU,IAAI,YAAY,CAAC,CAAC,GAAG,mBAAmB,EAAE,GAAG,mBAAmB,CAAC,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,uCAAuC,UAAU,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChH,KAAK,MAAM,UAAU,IAAI,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,mBAAmB,EAAE,GAAG,QAAQ,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;YAC1G,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CAAC,uCAAuC,QAAQ,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,+BAA+B,CAAC,CAAC;IACvE,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,GAAG,eAAe,EAAE,GAAG,eAAe,CAAC,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChH,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,eAAe,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YAC/F,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,oCAAoC,QAAQ,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI;QACJ,SAAS;QACT,wBAAwB;QACxB,iBAAiB;QACjB,iBAAiB;QACjB,qBAAqB;QACrB,iBAAiB;QACjB,iBAAiB;QACjB,mBAAmB;QACnB,mBAAmB;QACnB,eAAe;QACf,eAAe;QACf,eAAe;QACf,eAAe;QACf,cAAc;QACd,cAAc;QACd,eAAe;QACf,eAAe;QACf,eAAe;QACf,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;KAClF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAiC;IACxE,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;SACnD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SAC1D,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,YAAY,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtH,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,YAAY,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtH,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3G,CAAC,CAAC,CAAC;IACN,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,4BAA4B,EAAE,iCAAiC,CAAC,MAAM,CAAC,wBAAwB,CAAC;QAChG,kBAAkB,EAAE,MAAM,CAAC,iBAAiB;QAC5C,kBAAkB,EAAE,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC1D,uBAAuB,EAAE,MAAM,CAAC,qBAAqB;QACrD,kBAAkB,EAAE,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC1D,kBAAkB,EAAE,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC1D,oBAAoB,EAAE,YAAY,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAC9D,oBAAoB,EAAE,YAAY,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAC9D,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC;QACtD,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC;QACtD,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC;QACtD,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC;QACtD,eAAe,EAAE,YAAY,CAAC,MAAM,CAAC,cAAc,CAAC;QACpD,eAAe,EAAE,YAAY,CAAC,MAAM,CAAC,cAAc,CAAC;QACpD,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC;QACtD,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC;QACtD,mBAAmB,EAAE,SAAS;KAC/B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAiC;IACtE,MAAM,eAAe,GAAG,+BAA+B,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACpF,OAAO;QACL,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC;QACtC,SAAS,EAAE,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC;QACtD,wBAAwB,EAAE,iCAAiC,CAAC,MAAM,CAAC,4BAA4B,CAAC;QAChG,iBAAiB,EAAE,MAAM,CAAC,kBAAkB,KAAK,IAAI;QACrD,iBAAiB,EAAE,wBAAwB,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACtE,qBAAqB,EAAE,6BAA6B,CAAC,MAAM,CAAC,uBAAuB,CAAC;QACpF,iBAAiB,EAAE,wBAAwB,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACtE,iBAAiB,EAAE,wBAAwB,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACtE,mBAAmB,EAAE,wBAAwB,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC1E,mBAAmB,EAAE,wBAAwB,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC1E,eAAe,EAAE,yBAAyB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACnE,eAAe,EAAE,yBAAyB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACnE,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,cAAc,EAAE,wBAAwB,CAAC,MAAM,CAAC,eAAe,CAAC;QAChE,cAAc,EAAE,wBAAwB,CAAC,MAAM,CAAC,eAAe,CAAC;QAChE,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,eAAe;QACf,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAiC,EACjC,aAAqB;IAErB,OAAO,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,IAAI,IAAI,CAAC;AAChF,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAoB,EACpB,OAAoB,EACpB,KAAa,EACb,oBAA4B,EAC5B,aAAqB;IAErB,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,6BAA6B,CACpC,MAAiC,EACjC,SAA6B,EAC7B,UAAkB;IAElB,MAAM,oBAAoB,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAC9H,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;QAC9B,GAAG,MAAM,CAAC,mBAAmB;QAC7B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC,CAAC;IACH,OAAO,iBAAiB,CACtB,OAAO,EACP,OAAO,EACP,oBAAoB,EACpB,4BAA4B,EAC5B,oBAAoB,CACrB,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAiC,EACjC,SAA6B,EAC7B,OAA+B;IAE/B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;IAClH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;QAC9B,GAAG,MAAM,CAAC,eAAe;QACzB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAiC,EACjC,SAA6B,EAC7B,OAAe;IAEf,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;IAClH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;QAC9B,GAAG,MAAM,CAAC,eAAe;QACzB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,iBAAiB,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAiC,EACjC,SAA6B,EAC7B,MAAc;IAEd,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;IAC/G,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;QAC9B,GAAG,MAAM,CAAC,cAAc;QACxB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC,CAAC;IACH,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,gBAAgB,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAiC,EACjC,SAA6B,EAC7B,OAAe;IAEf,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;IAClH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;QAC9B,GAAG,MAAM,CAAC,eAAe;QACzB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,iBAAiB,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAiC,EAAE,SAA6B;IACpG,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,QAAQ,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,OAAO,iBAAiB,CACtB,MAAM,CAAC,iBAAiB,EACxB,MAAM,CAAC,iBAAiB,EACxB,IAAI,EACJ,2BAA2B,EAC3B,mBAAmB,CACpB,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAiC,EAAE,SAA6B;IAChG,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,KAAK,IAAI,CAAC;IAC3C,MAAM,kBAAkB,GAAG,SAAS,CAAC,kBAAkB,KAAK,IAAI,CAAC;IAEjE,IAAI,MAAM,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7E,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACrH,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,QAAQ,EAAE,iBAAiB,KAAK,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9F,OAAO,kCAAkC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CAAC,MAAiC,EAAE,SAA6B;IAClG,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,EAAE,cAAc,IAAI,SAAS,CAAC,cAAc,IAAI,MAAM,CAAC,qBAAqB,CAAC;IACrG,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;IAC1C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,6BAA6B,CAAC;IACvC,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,IAA8B,EAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IAC9F,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,IAAI,aAAa,CAAC,eAAe,CAAC,EAAE,CAAC;YACnC,OAAO,4CAA4C,CAAC;QACtD,CAAC;QACD,IAAI,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO,wCAAwC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IACvE,IAAI,aAAa,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,OAAO,wCAAwC,CAAC;IAClD,CAAC;IACD,IAAI,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,kCAAkC,CAAC;IAC5C,CAAC;IACD,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,mCAAmC,CAAC;IAC7C,CAAC;IACD,IAAI,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CACzB,IAA6B,EAC7B,KAA4D,EAC5D,SAA6B,EAC7B,MAAc,EACd,UAAkC,EAAE;IAEpC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SACnC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;SACtD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;SACxC,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,OAAO,oBAAoB,IAAI,IAAI,KAAK,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,IAAI,WAAW,MAAM,GAAG,MAAM,EAAE,CAAC;AAC5G,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mCAAmC,CACjD,MAAiC,EACjC,SAA6B;IAE7B,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,0BAA0B,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpE,MAAM,iBAAiB,GAAG,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;IAC9D,MAAM,aAAa,GAAG,WAAW,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;IACpE,MAAM,eAAe,GAAG,aAAa,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;IACnE,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,kBAAkB,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,kBAAkB,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC;SACxE,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,kBAAkB,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC;SAC9E,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACrC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,kBAAkB,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;SACzE,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC/C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,kBAAkB,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC;SAC1E,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,kBAAkB,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC;SAChF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oCAAoC,CAClD,MAAiC,EACjC,SAA6B,EAC7B,UAAkB;IAElB,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,6BAA6B,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM;QAC/B,OAAO,EAAE,kBAAkB,CAC3B,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAChD,YAAY,EACZ,SAAS,EACT,MAAM,EACN,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAC9C;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sCAAsC,CACpD,MAAiC,EACjC,SAA6B,EAC7B,OAA+B,EAC/B,MAAc,EACd,UAAgC,EAChC,OAIC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,gBAAgB,GACpB,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvG,MAAM,aAAa,GAAG,0BAA0B,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,aAAa,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/G,MAAM,YAAY,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3G,MAAM,aAAa,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/G,MAAM,MAAM,GAAG,gBAAgB,IAAI,aAAa,IAAI,aAAa,IAAI,YAAY,IAAI,aAAa,CAAC;IACnG,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,cAAc,GAA2B;QAC7C,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;QACxD,OAAO;KACR,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,cAAc,CAAC,UAAU,GAAG,UAAU,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,cAAc,CAAC,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,cAAc,CAAC,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,cAAc,CAAC,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAChC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAChD,cAAc,EACd,SAAS,EACT,MAAM,EACN,cAAc,CACf,CAAC;IACF,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM;QAC/B,OAAO;KACR,CAAC;AACJ,CAAC","debugId":"34b7e8e0-c42f-50c2-9ee5-093565566cd7"}
+{"version":3,"file":"extension-policy.js","sources":["core/extensions/extension-policy.ts"],"sourceRoot":"/","sourcesContent":["/**\n * @module core/extensions/extension-policy\n *\n * Implements extension runtime contracts and governance for Extension Policy.\n */\nimport {\n  KNOWN_EXTENSION_POLICY_MODES,\n  KNOWN_EXTENSION_POLICY_SURFACES,\n  KNOWN_EXTENSION_SANDBOX_PROFILES,\n  KNOWN_EXTENSION_TRUST_MODES,\n  KNOWN_PM_MAX_VERSION_EXCEEDED_MODES,\n  type ExtensionCapability,\n  type ExtensionGovernancePolicy,\n  type ExtensionLayer,\n  type ExtensionPolicyMode,\n  type ExtensionPolicyOverride,\n  type ExtensionPolicySurface,\n  type ExtensionSandboxProfile,\n  type ExtensionTrustMode,\n  type PmMaxVersionExceededMode,\n  type PmMaxVersionExceededModeSetting,\n} from \"./extension-types.js\";\nimport { isKnownExtensionCapability } from \"./extension-capability-aliases.js\";\nimport { normalizeCommandName } from \"./extension-runtime-helpers.js\";\nimport type { PmSettings } from \"../../types/index.js\";\n\ninterface NormalizedExtensionPolicyOverride {\n  name: string;\n  disabled: boolean;\n  requireTrusted: boolean;\n  requireProvenance: boolean;\n  sandboxProfile?: ExtensionSandboxProfile;\n  allowedCapabilities: Set<string>;\n  blockedCapabilities: Set<string>;\n  allowedSurfaces: Set<string>;\n  blockedSurfaces: Set<string>;\n  allowedCommands: Set<string>;\n  blockedCommands: Set<string>;\n  allowedActions: Set<string>;\n  blockedActions: Set<string>;\n  allowedServices: Set<string>;\n  blockedServices: Set<string>;\n}\n\n/** Concrete per-layer resolution of `pm_max_version_exceeded_mode` (default: block). */\nexport interface NormalizedPmMaxVersionExceededMode {\n  global: PmMaxVersionExceededMode;\n  project: PmMaxVersionExceededMode;\n}\n\n/**\n * Documents the normalized extension policy payload exchanged by command, SDK, and package integrations.\n */\nexport interface NormalizedExtensionPolicy {\n  mode: ExtensionPolicyMode;\n  trustMode: ExtensionTrustMode;\n  pmMaxVersionExceededMode: NormalizedPmMaxVersionExceededMode;\n  requireProvenance: boolean;\n  trustedExtensions: Set<string>;\n  defaultSandboxProfile: ExtensionSandboxProfile;\n  allowedExtensions: Set<string>;\n  blockedExtensions: Set<string>;\n  allowedCapabilities: Set<string>;\n  blockedCapabilities: Set<string>;\n  allowedSurfaces: Set<string>;\n  blockedSurfaces: Set<string>;\n  allowedCommands: Set<string>;\n  blockedCommands: Set<string>;\n  allowedActions: Set<string>;\n  blockedActions: Set<string>;\n  allowedServices: Set<string>;\n  blockedServices: Set<string>;\n  overridesByName: Map<string, NormalizedExtensionPolicyOverride>;\n  warnings: string[];\n}\n\n/**\n * Documents the policy extension ref payload exchanged by command, SDK, and package integrations.\n */\nexport interface PolicyExtensionRef {\n  layer: ExtensionLayer;\n  name: string;\n  trusted?: boolean;\n  provenanceVerified?: boolean;\n  sandboxProfile?: ExtensionSandboxProfile;\n  permissions?: Record<string, boolean | undefined>;\n}\n\nfunction normalizePolicyName(value: string | undefined): string {\n  if (typeof value !== \"string\") {\n    return \"\";\n  }\n  return value.trim().toLowerCase();\n}\n\nfunction normalizePolicyStringSet(values: readonly string[] | undefined): Set<string> {\n  return new Set(\n    (values ?? [])\n      .map((value) => value.trim().toLowerCase())\n      .filter((value) => value.length > 0),\n  );\n}\n\nfunction normalizePolicySurfaceToken(value: string): string {\n  const normalized = value.trim().toLowerCase();\n  if (normalized.length === 0) {\n    return \"\";\n  }\n  const segments = normalized\n    .split(/[.:/]/)\n    .map((segment) => segment.replace(/[\\s_-]+/g, \"\"))\n    .filter((segment) => segment.length > 0);\n  if (segments.length === 0) {\n    return \"\";\n  }\n  if (segments.length === 1) {\n    return segments[0];\n  }\n  return `${segments[0]}.${segments.slice(1).join(\"\")}`;\n}\n\nfunction normalizePolicySurfaceSet(values: readonly string[] | undefined): Set<string> {\n  return new Set(\n    (values ?? [])\n      .map((value) => normalizePolicySurfaceToken(value))\n      .filter((value) => value.length > 0),\n  );\n}\n\nfunction normalizePolicyMode(value: string | undefined): ExtensionPolicyMode {\n  const normalized = normalizePolicyName(value);\n  if ((KNOWN_EXTENSION_POLICY_MODES as readonly string[]).includes(normalized)) {\n    return normalized as ExtensionPolicyMode;\n  }\n  return \"off\";\n}\n\nfunction normalizePolicyTrustMode(value: string | undefined): ExtensionTrustMode {\n  const normalized = normalizePolicyName(value);\n  if ((KNOWN_EXTENSION_TRUST_MODES as readonly string[]).includes(normalized)) {\n    return normalized as ExtensionTrustMode;\n  }\n  return \"off\";\n}\n\n/**\n * Implements normalize policy sandbox profile for the public runtime surface of this module.\n */\nexport function normalizePolicySandboxProfile(value: string | undefined): ExtensionSandboxProfile {\n  const normalized = normalizePolicyName(value);\n  if ((KNOWN_EXTENSION_SANDBOX_PROFILES as readonly string[]).includes(normalized)) {\n    return normalized as ExtensionSandboxProfile;\n  }\n  return \"none\";\n}\n\nfunction normalizePmMaxVersionExceededModeValue(value: unknown): PmMaxVersionExceededMode | undefined {\n  if (typeof value !== \"string\") {\n    return undefined;\n  }\n  const normalized = value.trim().toLowerCase();\n  return (KNOWN_PM_MAX_VERSION_EXCEEDED_MODES as readonly string[]).includes(normalized)\n    ? (normalized as PmMaxVersionExceededMode)\n    : undefined;\n}\n\n/**\n * Resolve `extensions.policy.pm_max_version_exceeded_mode` to a concrete\n * per-layer mode map. Accepts a single mode string (applied to both layers) or\n * a `{ global?, project? }` override map; anything unset or unknown defaults to\n * the safe `\"block\"`.\n */\nexport function normalizePmMaxVersionExceededMode(\n  value: PmMaxVersionExceededModeSetting | undefined,\n): NormalizedPmMaxVersionExceededMode {\n  if (typeof value === \"string\") {\n    const mode = normalizePmMaxVersionExceededModeValue(value) ?? \"block\";\n    return { global: mode, project: mode };\n  }\n  if (typeof value === \"object\" && value !== null && !Array.isArray(value)) {\n    return {\n      global: normalizePmMaxVersionExceededModeValue(value.global) ?? \"block\",\n      project: normalizePmMaxVersionExceededModeValue(value.project) ?? \"block\",\n    };\n  }\n  return { global: \"block\", project: \"block\" };\n}\n\nfunction serializePmMaxVersionExceededMode(\n  mode: NormalizedPmMaxVersionExceededMode,\n): PmMaxVersionExceededModeSetting {\n  return mode.global === mode.project ? mode.global : { global: mode.global, project: mode.project };\n}\n\nfunction toSortedList(values: Iterable<string>): string[] {\n  return [...new Set(values)].sort((left, right) => left.localeCompare(right));\n}\n\nfunction buildExtensionPolicyOverride(\n  rawOverride: ExtensionPolicyOverride,\n): { name: string; normalized: NormalizedExtensionPolicyOverride } | null {\n  const name = normalizePolicyName(rawOverride.name);\n  if (name.length === 0) {\n    return null;\n  }\n  return {\n    name,\n    normalized: {\n      name,\n      disabled: rawOverride.disabled === true,\n      requireTrusted: rawOverride.require_trusted === true,\n      requireProvenance: rawOverride.require_provenance === true,\n      sandboxProfile:\n        rawOverride.sandbox_profile !== undefined\n          ? normalizePolicySandboxProfile(rawOverride.sandbox_profile)\n          : undefined,\n      allowedCapabilities: normalizePolicyStringSet(rawOverride.allowed_capabilities),\n      blockedCapabilities: normalizePolicyStringSet(rawOverride.blocked_capabilities),\n      allowedSurfaces: normalizePolicySurfaceSet(rawOverride.allowed_surfaces),\n      blockedSurfaces: normalizePolicySurfaceSet(rawOverride.blocked_surfaces),\n      allowedCommands: normalizePolicyStringSet(rawOverride.allowed_commands),\n      blockedCommands: normalizePolicyStringSet(rawOverride.blocked_commands),\n      allowedActions: normalizePolicyStringSet(rawOverride.allowed_actions),\n      blockedActions: normalizePolicyStringSet(rawOverride.blocked_actions),\n      allowedServices: normalizePolicyStringSet(rawOverride.allowed_services),\n      blockedServices: normalizePolicyStringSet(rawOverride.blocked_services),\n    },\n  };\n}\n\nfunction collectExtensionPolicyOverrides(\n  rawOverrides: readonly ExtensionPolicyOverride[] | undefined,\n): Map<string, NormalizedExtensionPolicyOverride> {\n  const overridesByName = new Map<string, NormalizedExtensionPolicyOverride>();\n  for (const rawOverride of rawOverrides ?? []) {\n    const built = buildExtensionPolicyOverride(rawOverride);\n    if (built) {\n      overridesByName.set(built.name, built.normalized);\n    }\n  }\n  return overridesByName;\n}\n\n/**\n * Collect the deduplicated, alphabetically-sorted `extension_policy_unknown_*`\n * warnings for a normalized policy: every allow/block capability and surface\n * token — at the top level and inside each per-extension override — that is not a\n * recognized {@link ExtensionCapability} or known policy surface. Overrides are\n * walked in name order and the final list is re-sorted, so the result is stable\n * regardless of insertion order.\n */\nfunction collectExtensionPolicyWarnings(normalized: {\n  allowedCapabilities: Set<string>;\n  blockedCapabilities: Set<string>;\n  allowedSurfaces: Set<string>;\n  blockedSurfaces: Set<string>;\n  overridesByName: Map<string, NormalizedExtensionPolicyOverride>;\n}): string[] {\n  const warnings: string[] = [];\n  const sortedOverrides = [...normalized.overridesByName.values()].sort((left, right) =>\n    left.name.localeCompare(right.name),\n  );\n  for (const capability of toSortedList([...normalized.allowedCapabilities, ...normalized.blockedCapabilities])) {\n    if (!isKnownExtensionCapability(capability)) {\n      warnings.push(`extension_policy_unknown_capability:${capability}`);\n    }\n  }\n  for (const override of sortedOverrides) {\n    for (const capability of toSortedList([...override.allowedCapabilities, ...override.blockedCapabilities])) {\n      if (!isKnownExtensionCapability(capability)) {\n        warnings.push(`extension_policy_unknown_capability:${override.name}:${capability}`);\n      }\n    }\n  }\n  const knownSurfaces = new Set<string>(KNOWN_EXTENSION_POLICY_SURFACES);\n  for (const surface of toSortedList([...normalized.allowedSurfaces, ...normalized.blockedSurfaces])) {\n    if (!knownSurfaces.has(surface)) {\n      warnings.push(`extension_policy_unknown_surface:${surface}`);\n    }\n  }\n  for (const override of sortedOverrides) {\n    for (const surface of toSortedList([...override.allowedSurfaces, ...override.blockedSurfaces])) {\n      if (!knownSurfaces.has(surface)) {\n        warnings.push(`extension_policy_unknown_surface:${override.name}:${surface}`);\n      }\n    }\n  }\n  return [...new Set(warnings)].sort((left, right) => left.localeCompare(right));\n}\n\n/**\n * Normalize the raw `extensions.policy` settings block into the canonical\n * {@link NormalizedExtensionPolicy} used across loading, registration, and the\n * doctor surface: modes/trust/sandbox coerced to known values, every allow/block\n * list lower-cased and de-duplicated into a set, per-extension overrides indexed by\n * name, and unknown-capability/surface tokens surfaced as warnings. A missing\n * policy block resolves to the all-defaults policy (mode/trust `off`).\n */\nexport function normalizeExtensionPolicy(settings: PmSettings): NormalizedExtensionPolicy {\n  const policy: Partial<ExtensionGovernancePolicy> = (settings.extensions?.policy as ExtensionGovernancePolicy | undefined) ?? {};\n  const allowedCapabilities = normalizePolicyStringSet(policy.allowed_capabilities);\n  const blockedCapabilities = normalizePolicyStringSet(policy.blocked_capabilities);\n  const allowedSurfaces = normalizePolicySurfaceSet(policy.allowed_surfaces);\n  const blockedSurfaces = normalizePolicySurfaceSet(policy.blocked_surfaces);\n  const overridesByName = collectExtensionPolicyOverrides(policy.extension_overrides);\n  return {\n    mode: normalizePolicyMode(policy.mode),\n    trustMode: normalizePolicyTrustMode(policy.trust_mode),\n    pmMaxVersionExceededMode: normalizePmMaxVersionExceededMode(policy.pm_max_version_exceeded_mode),\n    requireProvenance: policy.require_provenance === true,\n    trustedExtensions: normalizePolicyStringSet(policy.trusted_extensions),\n    defaultSandboxProfile: normalizePolicySandboxProfile(policy.default_sandbox_profile),\n    allowedExtensions: normalizePolicyStringSet(policy.allowed_extensions),\n    blockedExtensions: normalizePolicyStringSet(policy.blocked_extensions),\n    allowedCapabilities,\n    blockedCapabilities,\n    allowedSurfaces,\n    blockedSurfaces,\n    allowedCommands: normalizePolicyStringSet(policy.allowed_commands),\n    blockedCommands: normalizePolicyStringSet(policy.blocked_commands),\n    allowedActions: normalizePolicyStringSet(policy.allowed_actions),\n    blockedActions: normalizePolicyStringSet(policy.blocked_actions),\n    allowedServices: normalizePolicyStringSet(policy.allowed_services),\n    blockedServices: normalizePolicyStringSet(policy.blocked_services),\n    overridesByName,\n    warnings: collectExtensionPolicyWarnings({\n      allowedCapabilities,\n      blockedCapabilities,\n      allowedSurfaces,\n      blockedSurfaces,\n      overridesByName,\n    }),\n  };\n}\n\n/**\n * Implements serialize extension policy for the public runtime surface of this module.\n */\nexport function serializeExtensionPolicy(policy: NormalizedExtensionPolicy): ExtensionGovernancePolicy {\n  const overrides = [...policy.overridesByName.values()]\n    .sort((left, right) => left.name.localeCompare(right.name))\n    .map((override) => ({\n      name: override.name,\n      ...(override.disabled ? { disabled: true } : {}),\n      ...(override.requireTrusted ? { require_trusted: true } : {}),\n      ...(override.requireProvenance ? { require_provenance: true } : {}),\n      ...(override.sandboxProfile ? { sandbox_profile: override.sandboxProfile } : {}),\n      ...(override.allowedCapabilities.size > 0 ? { allowed_capabilities: toSortedList(override.allowedCapabilities) } : {}),\n      ...(override.blockedCapabilities.size > 0 ? { blocked_capabilities: toSortedList(override.blockedCapabilities) } : {}),\n      ...(override.allowedSurfaces.size > 0 ? { allowed_surfaces: toSortedList(override.allowedSurfaces) } : {}),\n      ...(override.blockedSurfaces.size > 0 ? { blocked_surfaces: toSortedList(override.blockedSurfaces) } : {}),\n      ...(override.allowedCommands.size > 0 ? { allowed_commands: toSortedList(override.allowedCommands) } : {}),\n      ...(override.blockedCommands.size > 0 ? { blocked_commands: toSortedList(override.blockedCommands) } : {}),\n      ...(override.allowedActions.size > 0 ? { allowed_actions: toSortedList(override.allowedActions) } : {}),\n      ...(override.blockedActions.size > 0 ? { blocked_actions: toSortedList(override.blockedActions) } : {}),\n      ...(override.allowedServices.size > 0 ? { allowed_services: toSortedList(override.allowedServices) } : {}),\n      ...(override.blockedServices.size > 0 ? { blocked_services: toSortedList(override.blockedServices) } : {}),\n    }));\n  return {\n    mode: policy.mode,\n    trust_mode: policy.trustMode,\n    pm_max_version_exceeded_mode: serializePmMaxVersionExceededMode(policy.pmMaxVersionExceededMode),\n    require_provenance: policy.requireProvenance,\n    trusted_extensions: toSortedList(policy.trustedExtensions),\n    default_sandbox_profile: policy.defaultSandboxProfile,\n    allowed_extensions: toSortedList(policy.allowedExtensions),\n    blocked_extensions: toSortedList(policy.blockedExtensions),\n    allowed_capabilities: toSortedList(policy.allowedCapabilities),\n    blocked_capabilities: toSortedList(policy.blockedCapabilities),\n    allowed_surfaces: toSortedList(policy.allowedSurfaces),\n    blocked_surfaces: toSortedList(policy.blockedSurfaces),\n    allowed_commands: toSortedList(policy.allowedCommands),\n    blocked_commands: toSortedList(policy.blockedCommands),\n    allowed_actions: toSortedList(policy.allowedActions),\n    blocked_actions: toSortedList(policy.blockedActions),\n    allowed_services: toSortedList(policy.allowedServices),\n    blocked_services: toSortedList(policy.blockedServices),\n    extension_overrides: overrides,\n  };\n}\n\n/**\n * Implements hydrate extension policy for the public runtime surface of this module.\n */\nexport function hydrateExtensionPolicy(policy: ExtensionGovernancePolicy): NormalizedExtensionPolicy {\n  const overridesByName = collectExtensionPolicyOverrides(policy.extension_overrides);\n  return {\n    mode: normalizePolicyMode(policy.mode),\n    trustMode: normalizePolicyTrustMode(policy.trust_mode),\n    pmMaxVersionExceededMode: normalizePmMaxVersionExceededMode(policy.pm_max_version_exceeded_mode),\n    requireProvenance: policy.require_provenance === true,\n    trustedExtensions: normalizePolicyStringSet(policy.trusted_extensions),\n    defaultSandboxProfile: normalizePolicySandboxProfile(policy.default_sandbox_profile),\n    allowedExtensions: normalizePolicyStringSet(policy.allowed_extensions),\n    blockedExtensions: normalizePolicyStringSet(policy.blocked_extensions),\n    allowedCapabilities: normalizePolicyStringSet(policy.allowed_capabilities),\n    blockedCapabilities: normalizePolicyStringSet(policy.blocked_capabilities),\n    allowedSurfaces: normalizePolicySurfaceSet(policy.allowed_surfaces),\n    blockedSurfaces: normalizePolicySurfaceSet(policy.blocked_surfaces),\n    allowedCommands: normalizePolicyStringSet(policy.allowed_commands),\n    blockedCommands: normalizePolicyStringSet(policy.blocked_commands),\n    allowedActions: normalizePolicyStringSet(policy.allowed_actions),\n    blockedActions: normalizePolicyStringSet(policy.blocked_actions),\n    allowedServices: normalizePolicyStringSet(policy.allowed_services),\n    blockedServices: normalizePolicyStringSet(policy.blocked_services),\n    overridesByName,\n    warnings: [],\n  };\n}\n\nfunction resolvePolicyOverride(\n  policy: NormalizedExtensionPolicy,\n  extensionName: string,\n): NormalizedExtensionPolicyOverride | null {\n  return policy.overridesByName.get(normalizePolicyName(extensionName)) ?? null;\n}\n\nfunction evaluatePolicySet(\n  allowed: Set<string>,\n  blocked: Set<string>,\n  value: string,\n  notAllowlistedReason: string,\n  blockedReason: string,\n): string | null {\n  if (blocked.has(value)) {\n    return blockedReason;\n  }\n  if (allowed.size > 0 && !allowed.has(value)) {\n    return notAllowlistedReason;\n  }\n  return null;\n}\n\nfunction resolvePolicyCapabilityReason(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  capability: string,\n): string | null {\n  const normalizedCapability = capability.trim().toLowerCase();\n  const override = resolvePolicyOverride(policy, extension.name);\n  const allowed = override && override.allowedCapabilities.size > 0 ? override.allowedCapabilities : policy.allowedCapabilities;\n  const blocked = new Set<string>([\n    ...policy.blockedCapabilities,\n    ...(override ? override.blockedCapabilities : []),\n  ]);\n  return evaluatePolicySet(\n    allowed,\n    blocked,\n    normalizedCapability,\n    \"capability_not_allowlisted\",\n    \"capability_blocked\",\n  );\n}\n\nfunction resolvePolicySurfaceReason(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  surface: ExtensionPolicySurface,\n): string | null {\n  const override = resolvePolicyOverride(policy, extension.name);\n  const allowed = override && override.allowedSurfaces.size > 0 ? override.allowedSurfaces : policy.allowedSurfaces;\n  const blocked = new Set<string>([\n    ...policy.blockedSurfaces,\n    ...(override ? override.blockedSurfaces : []),\n  ]);\n  return evaluatePolicySet(allowed, blocked, surface, \"surface_not_allowlisted\", \"surface_blocked\");\n}\n\nfunction resolvePolicyCommandReason(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  command: string,\n): string | null {\n  const normalizedCommand = normalizeCommandName(command);\n  if (normalizedCommand.length === 0) {\n    return null;\n  }\n  const override = resolvePolicyOverride(policy, extension.name);\n  const allowed = override && override.allowedCommands.size > 0 ? override.allowedCommands : policy.allowedCommands;\n  const blocked = new Set<string>([\n    ...policy.blockedCommands,\n    ...(override ? override.blockedCommands : []),\n  ]);\n  return evaluatePolicySet(allowed, blocked, normalizedCommand, \"command_not_allowlisted\", \"command_blocked\");\n}\n\nfunction resolvePolicyActionReason(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  action: string,\n): string | null {\n  const normalizedAction = normalizePolicyName(action).replace(/\\s+/g, \"-\");\n  if (normalizedAction.length === 0) {\n    return null;\n  }\n  const override = resolvePolicyOverride(policy, extension.name);\n  const allowed = override && override.allowedActions.size > 0 ? override.allowedActions : policy.allowedActions;\n  const blocked = new Set<string>([\n    ...policy.blockedActions,\n    ...(override ? override.blockedActions : []),\n  ]);\n  return evaluatePolicySet(allowed, blocked, normalizedAction, \"action_not_allowlisted\", \"action_blocked\");\n}\n\nfunction resolvePolicyServiceReason(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  service: string,\n): string | null {\n  const normalizedService = normalizePolicyName(service);\n  if (normalizedService.length === 0) {\n    return null;\n  }\n  const override = resolvePolicyOverride(policy, extension.name);\n  const allowed = override && override.allowedServices.size > 0 ? override.allowedServices : policy.allowedServices;\n  const blocked = new Set<string>([\n    ...policy.blockedServices,\n    ...(override ? override.blockedServices : []),\n  ]);\n  return evaluatePolicySet(allowed, blocked, normalizedService, \"service_not_allowlisted\", \"service_blocked\");\n}\n\nfunction resolvePolicyExtensionReason(policy: NormalizedExtensionPolicy, extension: PolicyExtensionRef): string | null {\n  const name = normalizePolicyName(extension.name);\n  const override = resolvePolicyOverride(policy, extension.name);\n  if (override?.disabled === true) {\n    return \"extension_override_disabled\";\n  }\n  return evaluatePolicySet(\n    policy.allowedExtensions,\n    policy.blockedExtensions,\n    name,\n    \"extension_not_allowlisted\",\n    \"extension_blocked\",\n  );\n}\n\nfunction resolvePolicyTrustReason(policy: NormalizedExtensionPolicy, extension: PolicyExtensionRef): string | null {\n  if (policy.trustMode === \"off\") {\n    return null;\n  }\n  const override = resolvePolicyOverride(policy, extension.name);\n  const name = normalizePolicyName(extension.name);\n  const trusted = extension.trusted === true;\n  const provenanceVerified = extension.provenanceVerified === true;\n\n  if (policy.trustedExtensions.size > 0 && !policy.trustedExtensions.has(name)) {\n    return \"extension_not_trusted\";\n  }\n  if ((override?.requireTrusted === true || policy.trustMode === \"warn\" || policy.trustMode === \"enforce\") && !trusted) {\n    return \"extension_untrusted\";\n  }\n  if ((policy.requireProvenance || override?.requireProvenance === true) && !provenanceVerified) {\n    return \"provenance_missing_or_unverified\";\n  }\n  return null;\n}\n\nfunction resolvePolicySandboxReason(policy: NormalizedExtensionPolicy, extension: PolicyExtensionRef): string | null {\n  if (policy.mode === \"off\") {\n    return null;\n  }\n  const override = resolvePolicyOverride(policy, extension.name);\n  const profile = override?.sandboxProfile ?? extension.sandboxProfile ?? policy.defaultSandboxProfile;\n  if (profile === \"none\") {\n    return null;\n  }\n  const permissions = extension.permissions;\n  if (!permissions) {\n    return \"sandbox_permissions_missing\";\n  }\n\n  const hasPermission = (name: keyof typeof permissions): boolean => permissions[name] === true;\n  if (profile === \"restricted\") {\n    if (hasPermission(\"process_spawn\")) {\n      return \"sandbox_restricted_disallows_process_spawn\";\n    }\n    if (hasPermission(\"env_write\")) {\n      return \"sandbox_restricted_disallows_env_write\";\n    }\n    return null;\n  }\n\n  // Remaining profile branch is strict (none/restricted returned above).\n  if (hasPermission(\"process_spawn\")) {\n    return \"sandbox_strict_disallows_process_spawn\";\n  }\n  if (hasPermission(\"network\")) {\n    return \"sandbox_strict_disallows_network\";\n  }\n  if (hasPermission(\"fs_write\")) {\n    return \"sandbox_strict_disallows_fs_write\";\n  }\n  if (hasPermission(\"env_write\")) {\n    return \"sandbox_strict_disallows_env_write\";\n  }\n  return null;\n}\n\nfunction buildPolicyWarning(\n  mode: \"blocked\" | \"violation\",\n  scope: \"extension\" | \"capability\" | \"registration\" | \"trust\",\n  extension: PolicyExtensionRef,\n  reason: string,\n  details: Record<string, string> = {},\n): string {\n  const tokens = Object.entries(details)\n    .sort((left, right) => left[0].localeCompare(right[0]))\n    .map(([key, value]) => `${key}=${value}`)\n    .join(\":\");\n  const suffix = tokens.length > 0 ? `:${tokens}` : \"\";\n  return `extension_policy_${mode}_${scope}:${extension.layer}:${extension.name}:reason=${reason}${suffix}`;\n}\n\n/**\n * Evaluate the layer-level governance policy for one extension by combining the\n * extension allow/block decision, the trust-mode decision, and the sandbox-profile\n * decision. Reasons are weighed in extension → trust → sandbox order: the first\n * reason whose governing mode is `enforce` blocks the extension; otherwise the\n * first whose mode is `warn` surfaces a non-blocking violation warning; otherwise\n * the extension is allowed. The all-`off` short-circuit skips reason resolution\n * entirely.\n */\nexport function evaluateExtensionPolicyForExtension(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n): { allowed: boolean; warning: string | null } {\n  if (policy.mode === \"off\" && policy.trustMode === \"off\") {\n    return { allowed: true, warning: null };\n  }\n  const violations: Array<{\n    reason: string;\n    scope: \"extension\" | \"trust\";\n    mode: ExtensionPolicyMode | ExtensionTrustMode;\n  }> = [];\n  const reason = resolvePolicyExtensionReason(policy, extension);\n  if (reason) {\n    violations.push({ reason, scope: \"extension\", mode: policy.mode });\n  }\n  const trustReason = resolvePolicyTrustReason(policy, extension);\n  if (trustReason) {\n    violations.push({ reason: trustReason, scope: \"trust\", mode: policy.trustMode });\n  }\n  const sandboxReason = resolvePolicySandboxReason(policy, extension);\n  if (sandboxReason) {\n    violations.push({ reason: sandboxReason, scope: \"extension\", mode: policy.mode });\n  }\n  const enforced = violations.find((violation) => violation.mode === \"enforce\");\n  if (enforced) {\n    return { allowed: false, warning: buildPolicyWarning(\"blocked\", enforced.scope, extension, enforced.reason) };\n  }\n  const warned = violations.find((violation) => violation.mode === \"warn\");\n  if (warned) {\n    return { allowed: true, warning: buildPolicyWarning(\"violation\", warned.scope, extension, warned.reason) };\n  }\n  return { allowed: true, warning: null };\n}\n\n/**\n * Implements evaluate extension policy for capability for the public runtime surface of this module.\n */\nexport function evaluateExtensionPolicyForCapability(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  capability: string,\n): { allowed: boolean; warning: string | null } {\n  if (policy.mode === \"off\") {\n    return { allowed: true, warning: null };\n  }\n  const reason = resolvePolicyCapabilityReason(policy, extension, capability);\n  if (!reason) {\n    return { allowed: true, warning: null };\n  }\n  return {\n    allowed: policy.mode === \"warn\",\n    warning: buildPolicyWarning(\n    policy.mode === \"warn\" ? \"violation\" : \"blocked\",\n    \"capability\",\n    extension,\n    reason,\n    { capability: capability.trim().toLowerCase() },\n    ),\n  };\n}\n\n/** Optional command/action/service identifiers carried by a surface registration. */\ninterface RegistrationPolicyDetails {\n  command?: string;\n  action?: string;\n  service?: string;\n}\n\n/**\n * Resolve the first applicable registration-policy reason for a surface\n * registration, weighed in capability → surface → command → action → service\n * precedence. Returns `null` when the registration violates no allow/block rule.\n */\nfunction resolveRegistrationPolicyReason(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  surface: ExtensionPolicySurface,\n  capability: ExtensionCapability | undefined,\n  detail: RegistrationPolicyDetails,\n): string | null {\n  const capabilityReason =\n    typeof capability === \"string\" ? resolvePolicyCapabilityReason(policy, extension, capability) : null;\n  const surfaceReason = resolvePolicySurfaceReason(policy, extension, surface);\n  const commandReason = detail.command ? resolvePolicyCommandReason(policy, extension, detail.command) : null;\n  const actionReason = detail.action ? resolvePolicyActionReason(policy, extension, detail.action) : null;\n  const serviceReason = detail.service ? resolvePolicyServiceReason(policy, extension, detail.service) : null;\n  return capabilityReason ?? surfaceReason ?? commandReason ?? actionReason ?? serviceReason;\n}\n\n/**\n * Build the detail token map attached to a registration-policy warning: the\n * normalized method and surface plus whichever of capability/command/action/service\n * the registration carries. {@link buildPolicyWarning} sorts and joins these into\n * the warning's `key=value` suffix.\n */\nfunction buildRegistrationPolicyWarningDetails(\n  method: string,\n  surface: ExtensionPolicySurface,\n  capability: ExtensionCapability | undefined,\n  detail: RegistrationPolicyDetails,\n): Record<string, string> {\n  const warningDetails: Record<string, string> = {\n    method: normalizePolicyName(method).replace(/\\s+/g, \"_\"),\n    surface,\n  };\n  if (capability) {\n    warningDetails.capability = capability;\n  }\n  if (detail.command) {\n    warningDetails.command = normalizeCommandName(detail.command);\n  }\n  if (detail.action) {\n    warningDetails.action = normalizePolicyName(detail.action).replace(/\\s+/g, \"-\");\n  }\n  if (detail.service) {\n    warningDetails.service = normalizePolicyName(detail.service);\n  }\n  return warningDetails;\n}\n\n/**\n * Evaluate the governance policy for a single capability/surface registration an\n * extension performs during activation. When `mode` is `off` the registration is\n * always allowed; otherwise the first allow/block reason (capability → surface →\n * command → action → service) blocks the registration under `enforce` or surfaces\n * a non-blocking violation warning under `warn`.\n */\nexport function evaluateExtensionPolicyForRegistration(\n  policy: NormalizedExtensionPolicy,\n  extension: PolicyExtensionRef,\n  surface: ExtensionPolicySurface,\n  method: string,\n  capability?: ExtensionCapability,\n  details?: {\n    command?: string;\n    action?: string;\n    service?: string;\n  },\n): { allowed: boolean; warning: string | null } {\n  if (policy.mode === \"off\") {\n    return { allowed: true, warning: null };\n  }\n  const detail = details ?? {};\n  const reason = resolveRegistrationPolicyReason(policy, extension, surface, capability, detail);\n  if (!reason) {\n    return { allowed: true, warning: null };\n  }\n  const warning = buildPolicyWarning(\n    policy.mode === \"warn\" ? \"violation\" : \"blocked\",\n    \"registration\",\n    extension,\n    reason,\n    buildRegistrationPolicyWarningDetails(method, surface, capability, detail),\n  );\n  return {\n    allowed: policy.mode === \"warn\",\n    warning,\n  };\n}\n"],"names":[],"mappings":"AAAA;;;;GAIG;;;AACH,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,EAC/B,gCAAgC,EAChC,2BAA2B,EAC3B,mCAAmC,GAWpC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAiEtE,SAAS,mBAAmB,CAAC,KAAyB;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAqC;IACrE,OAAO,IAAI,GAAG,CACZ,CAAC,MAAM,IAAI,EAAE,CAAC;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAC1C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CACvC,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU;SACxB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;SACjD,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAqC;IACtE,OAAO,IAAI,GAAG,CACZ,CAAC,MAAM,IAAI,EAAE,CAAC;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;SAClD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CACvC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB;IACpD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAK,4BAAkD,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7E,OAAO,UAAiC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAyB;IACzD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAK,2BAAiD,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5E,OAAO,UAAgC,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAAyB;IACrE,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAK,gCAAsD,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjF,OAAO,UAAqC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sCAAsC,CAAC,KAAc;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAQ,mCAAyD,CAAC,QAAQ,CAAC,UAAU,CAAC;QACpF,CAAC,CAAE,UAAuC;QAC1C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC,CAC/C,KAAkD;IAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,sCAAsC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC;QACtE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO;YACL,MAAM,EAAE,sCAAsC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO;YACvE,OAAO,EAAE,sCAAsC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO;SAC1E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,iCAAiC,CACxC,IAAwC;IAExC,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACrG,CAAC;AAED,SAAS,YAAY,CAAC,MAAwB;IAC5C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,4BAA4B,CACnC,WAAoC;IAEpC,MAAM,IAAI,GAAG,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,IAAI;QACJ,UAAU,EAAE;YACV,IAAI;YACJ,QAAQ,EAAE,WAAW,CAAC,QAAQ,KAAK,IAAI;YACvC,cAAc,EAAE,WAAW,CAAC,eAAe,KAAK,IAAI;YACpD,iBAAiB,EAAE,WAAW,CAAC,kBAAkB,KAAK,IAAI;YAC1D,cAAc,EACZ,WAAW,CAAC,eAAe,KAAK,SAAS;gBACvC,CAAC,CAAC,6BAA6B,CAAC,WAAW,CAAC,eAAe,CAAC;gBAC5D,CAAC,CAAC,SAAS;YACf,mBAAmB,EAAE,wBAAwB,CAAC,WAAW,CAAC,oBAAoB,CAAC;YAC/E,mBAAmB,EAAE,wBAAwB,CAAC,WAAW,CAAC,oBAAoB,CAAC;YAC/E,eAAe,EAAE,yBAAyB,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACxE,eAAe,EAAE,yBAAyB,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACxE,eAAe,EAAE,wBAAwB,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACvE,eAAe,EAAE,wBAAwB,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACvE,cAAc,EAAE,wBAAwB,CAAC,WAAW,CAAC,eAAe,CAAC;YACrE,cAAc,EAAE,wBAAwB,CAAC,WAAW,CAAC,eAAe,CAAC;YACrE,eAAe,EAAE,wBAAwB,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACvE,eAAe,EAAE,wBAAwB,CAAC,WAAW,CAAC,gBAAgB,CAAC;SACxE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,YAA4D;IAE5D,MAAM,eAAe,GAAG,IAAI,GAAG,EAA6C,CAAC;IAC7E,KAAK,MAAM,WAAW,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,4BAA4B,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,KAAK,EAAE,CAAC;YACV,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,8BAA8B,CAAC,UAMvC;IACC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,eAAe,GAAG,CAAC,GAAG,UAAU,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpF,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACpC,CAAC;IACF,KAAK,MAAM,UAAU,IAAI,YAAY,CAAC,CAAC,GAAG,UAAU,CAAC,mBAAmB,EAAE,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;QAC9G,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,uCAAuC,UAAU,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACvC,KAAK,MAAM,UAAU,IAAI,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,mBAAmB,EAAE,GAAG,QAAQ,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;YAC1G,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CAAC,uCAAuC,QAAQ,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,+BAA+B,CAAC,CAAC;IACvE,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,GAAG,UAAU,CAAC,eAAe,EAAE,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QACnG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACvC,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,eAAe,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YAC/F,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,oCAAoC,QAAQ,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAoB;IAC3D,MAAM,MAAM,GAAwC,QAAQ,CAAC,UAAU,EAAE,MAAgD,IAAI,EAAE,CAAC;IAChI,MAAM,mBAAmB,GAAG,wBAAwB,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAClF,MAAM,mBAAmB,GAAG,wBAAwB,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAClF,MAAM,eAAe,GAAG,yBAAyB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,yBAAyB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,+BAA+B,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACpF,OAAO;QACL,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC;QACtC,SAAS,EAAE,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC;QACtD,wBAAwB,EAAE,iCAAiC,CAAC,MAAM,CAAC,4BAA4B,CAAC;QAChG,iBAAiB,EAAE,MAAM,CAAC,kBAAkB,KAAK,IAAI;QACrD,iBAAiB,EAAE,wBAAwB,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACtE,qBAAqB,EAAE,6BAA6B,CAAC,MAAM,CAAC,uBAAuB,CAAC;QACpF,iBAAiB,EAAE,wBAAwB,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACtE,iBAAiB,EAAE,wBAAwB,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACtE,mBAAmB;QACnB,mBAAmB;QACnB,eAAe;QACf,eAAe;QACf,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,cAAc,EAAE,wBAAwB,CAAC,MAAM,CAAC,eAAe,CAAC;QAChE,cAAc,EAAE,wBAAwB,CAAC,MAAM,CAAC,eAAe,CAAC;QAChE,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,eAAe;QACf,QAAQ,EAAE,8BAA8B,CAAC;YACvC,mBAAmB;YACnB,mBAAmB;YACnB,eAAe;YACf,eAAe;YACf,eAAe;SAChB,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAiC;IACxE,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;SACnD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SAC1D,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,YAAY,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtH,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,YAAY,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtH,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3G,CAAC,CAAC,CAAC;IACN,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,4BAA4B,EAAE,iCAAiC,CAAC,MAAM,CAAC,wBAAwB,CAAC;QAChG,kBAAkB,EAAE,MAAM,CAAC,iBAAiB;QAC5C,kBAAkB,EAAE,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC1D,uBAAuB,EAAE,MAAM,CAAC,qBAAqB;QACrD,kBAAkB,EAAE,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC1D,kBAAkB,EAAE,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC1D,oBAAoB,EAAE,YAAY,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAC9D,oBAAoB,EAAE,YAAY,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAC9D,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC;QACtD,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC;QACtD,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC;QACtD,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC;QACtD,eAAe,EAAE,YAAY,CAAC,MAAM,CAAC,cAAc,CAAC;QACpD,eAAe,EAAE,YAAY,CAAC,MAAM,CAAC,cAAc,CAAC;QACpD,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC;QACtD,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC;QACtD,mBAAmB,EAAE,SAAS;KAC/B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAiC;IACtE,MAAM,eAAe,GAAG,+BAA+B,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACpF,OAAO;QACL,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC;QACtC,SAAS,EAAE,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC;QACtD,wBAAwB,EAAE,iCAAiC,CAAC,MAAM,CAAC,4BAA4B,CAAC;QAChG,iBAAiB,EAAE,MAAM,CAAC,kBAAkB,KAAK,IAAI;QACrD,iBAAiB,EAAE,wBAAwB,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACtE,qBAAqB,EAAE,6BAA6B,CAAC,MAAM,CAAC,uBAAuB,CAAC;QACpF,iBAAiB,EAAE,wBAAwB,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACtE,iBAAiB,EAAE,wBAAwB,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACtE,mBAAmB,EAAE,wBAAwB,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC1E,mBAAmB,EAAE,wBAAwB,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC1E,eAAe,EAAE,yBAAyB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACnE,eAAe,EAAE,yBAAyB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACnE,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,cAAc,EAAE,wBAAwB,CAAC,MAAM,CAAC,eAAe,CAAC;QAChE,cAAc,EAAE,wBAAwB,CAAC,MAAM,CAAC,eAAe,CAAC;QAChE,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClE,eAAe;QACf,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAiC,EACjC,aAAqB;IAErB,OAAO,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,IAAI,IAAI,CAAC;AAChF,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAoB,EACpB,OAAoB,EACpB,KAAa,EACb,oBAA4B,EAC5B,aAAqB;IAErB,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,6BAA6B,CACpC,MAAiC,EACjC,SAA6B,EAC7B,UAAkB;IAElB,MAAM,oBAAoB,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAC9H,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;QAC9B,GAAG,MAAM,CAAC,mBAAmB;QAC7B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC,CAAC;IACH,OAAO,iBAAiB,CACtB,OAAO,EACP,OAAO,EACP,oBAAoB,EACpB,4BAA4B,EAC5B,oBAAoB,CACrB,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAiC,EACjC,SAA6B,EAC7B,OAA+B;IAE/B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;IAClH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;QAC9B,GAAG,MAAM,CAAC,eAAe;QACzB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAiC,EACjC,SAA6B,EAC7B,OAAe;IAEf,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;IAClH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;QAC9B,GAAG,MAAM,CAAC,eAAe;QACzB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,iBAAiB,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAiC,EACjC,SAA6B,EAC7B,MAAc;IAEd,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;IAC/G,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;QAC9B,GAAG,MAAM,CAAC,cAAc;QACxB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC,CAAC;IACH,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,gBAAgB,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAiC,EACjC,SAA6B,EAC7B,OAAe;IAEf,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;IAClH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;QAC9B,GAAG,MAAM,CAAC,eAAe;QACzB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,iBAAiB,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAiC,EAAE,SAA6B;IACpG,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,QAAQ,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,OAAO,iBAAiB,CACtB,MAAM,CAAC,iBAAiB,EACxB,MAAM,CAAC,iBAAiB,EACxB,IAAI,EACJ,2BAA2B,EAC3B,mBAAmB,CACpB,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAiC,EAAE,SAA6B;IAChG,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,KAAK,IAAI,CAAC;IAC3C,MAAM,kBAAkB,GAAG,SAAS,CAAC,kBAAkB,KAAK,IAAI,CAAC;IAEjE,IAAI,MAAM,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7E,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACrH,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,QAAQ,EAAE,iBAAiB,KAAK,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9F,OAAO,kCAAkC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CAAC,MAAiC,EAAE,SAA6B;IAClG,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,EAAE,cAAc,IAAI,SAAS,CAAC,cAAc,IAAI,MAAM,CAAC,qBAAqB,CAAC;IACrG,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;IAC1C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,6BAA6B,CAAC;IACvC,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,IAA8B,EAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IAC9F,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,IAAI,aAAa,CAAC,eAAe,CAAC,EAAE,CAAC;YACnC,OAAO,4CAA4C,CAAC;QACtD,CAAC;QACD,IAAI,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO,wCAAwC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IACvE,IAAI,aAAa,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,OAAO,wCAAwC,CAAC;IAClD,CAAC;IACD,IAAI,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,kCAAkC,CAAC;IAC5C,CAAC;IACD,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,mCAAmC,CAAC;IAC7C,CAAC;IACD,IAAI,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CACzB,IAA6B,EAC7B,KAA4D,EAC5D,SAA6B,EAC7B,MAAc,EACd,UAAkC,EAAE;IAEpC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SACnC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;SACtD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;SACxC,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,OAAO,oBAAoB,IAAI,IAAI,KAAK,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,IAAI,WAAW,MAAM,GAAG,MAAM,EAAE,CAAC;AAC5G,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mCAAmC,CACjD,MAAiC,EACjC,SAA6B;IAE7B,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,UAAU,GAIX,EAAE,CAAC;IACR,MAAM,MAAM,GAAG,4BAA4B,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/D,IAAI,MAAM,EAAE,CAAC;QACX,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,WAAW,GAAG,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChE,IAAI,WAAW,EAAE,CAAC;QAChB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,aAAa,GAAG,0BAA0B,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpE,IAAI,aAAa,EAAE,CAAC;QAClB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAC9E,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;IAChH,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACzE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7G,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oCAAoC,CAClD,MAAiC,EACjC,SAA6B,EAC7B,UAAkB;IAElB,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,6BAA6B,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM;QAC/B,OAAO,EAAE,kBAAkB,CAC3B,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAChD,YAAY,EACZ,SAAS,EACT,MAAM,EACN,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAC9C;KACF,CAAC;AACJ,CAAC;AASD;;;;GAIG;AACH,SAAS,+BAA+B,CACtC,MAAiC,EACjC,SAA6B,EAC7B,OAA+B,EAC/B,UAA2C,EAC3C,MAAiC;IAEjC,MAAM,gBAAgB,GACpB,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvG,MAAM,aAAa,GAAG,0BAA0B,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5G,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxG,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5G,OAAO,gBAAgB,IAAI,aAAa,IAAI,aAAa,IAAI,YAAY,IAAI,aAAa,CAAC;AAC7F,CAAC;AAED;;;;;GAKG;AACH,SAAS,qCAAqC,CAC5C,MAAc,EACd,OAA+B,EAC/B,UAA2C,EAC3C,MAAiC;IAEjC,MAAM,cAAc,GAA2B;QAC7C,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;QACxD,OAAO;KACR,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,cAAc,CAAC,UAAU,GAAG,UAAU,CAAC;IACzC,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,cAAc,CAAC,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,cAAc,CAAC,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,cAAc,CAAC,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sCAAsC,CACpD,MAAiC,EACjC,SAA6B,EAC7B,OAA+B,EAC/B,MAAc,EACd,UAAgC,EAChC,OAIC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,IAAI,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,+BAA+B,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC/F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAChC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAChD,cAAc,EACd,SAAS,EACT,MAAM,EACN,qCAAqC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAC3E,CAAC;IACF,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM;QAC/B,OAAO;KACR,CAAC;AACJ,CAAC","debugId":"dbc43b74-6872-52c3-859a-64fe84c02b5b"}