@vigil-guard/vge-cc-guard 0.9.0-beta.1

package/dist/daemon/http-server.js

@@ -0,0 +1,535 @@
+import * as http from 'http';
+import * as crypto from 'crypto';
+import * as path from 'path';
+import express from 'express';
+import { loadConfig, resolveToolPolicy, getCurrentConfig, getConfigRevision, reloadConfig, startWatcher, stopWatcher } from './tool-policy.js';
+import { checkPath } from './path-deny.js';
+import { createSession, getSession, gcIdleSessions, resetSession, loadSessionsFromDisk, flushAllLazyWrites, isResourceBlocked, isResourceAllowed, } from './session-state.js';
+import { canonicalizeKey } from './allowlist.js';
+import { initClient } from './vge-client.js';
+import { isSafeId } from './id-validation.js';
+import { debugLogger } from './debug-logger.js';
+import { logCredentialPathDenied, logUserPromptReceived, cleanupOldLogs } from './audit-logger.js';
+import { DEFAULT_CONFIG } from '../shared/config-schema.js';
+import { effectiveClientIdSource } from '../shared/effective-client-id.js';
+import { getIpcAddress } from '../shared/ipc-address.js';
+import { DAEMON_TOKEN_HEADER, readDaemonToken, resolveDaemonTokenPath, rotateDaemonToken, tokenMatches, } from '../shared/daemon-token.js';
+import { cleanupDaemonIpcAddress, hardenDaemonIpcAddress, prepareDaemonIpcAddress, probeSocketState, removeStaleDaemonIpcAddress, } from './daemon-ipc.js';
+import { acquireDaemonInstanceLock } from './daemon-instance.js';
+import { evaluatePretoolUrlGate } from './pretool-url-gate.js';
+import { enforcePostTool, prunePostToolResponseCache } from './posttool-enforcement.js';
+import { renderPostToolFailClosedOutput } from './posttool-render.js';
+import { registerResolveEscalationRoute } from './resolve-escalation-route.js';
+import { registerDecisionRoutes } from './decision-routes.js';
+import { snapshotDecisionMetrics } from './decision-metrics.js';
+import { cleanupPersistedBlockingDecisionsOnStartup, getPendingDecisions } from './decision-broker.js';
+import { getActiveConversationDecisionKind, resolveConversationDecisionFromPrompt, } from './conversation-decision-escrow.js';
+import { clearAllConversationDecisionStateForSession } from './conversation-decision-cleanup.js';
+import { shouldDenyForPostToolOperationalState } from './posttool-decision-state.js';
+import { enforcePromptAttachments } from './attachment-input-enforcement.js';
+import { enforcePromptInput } from './prompt-input-enforcement.js';
+import { blockUserPromptWithReason } from './conversation-decision-prompt.js';
+import { decisionOwnerFromHookPayload } from './decision-owner.js';
+import { currentBuildStamp } from '../shared/build-stamp.js';
+import { isDaemonBuildStale } from './daemon-instance.js';
+import { canReuseCurrentLockOwner, resolveLiveDaemonBeforeStart } from './daemon-supersede.js';
+import { registerSessionHookRoutes } from './session-hook-routes.js';
+import { ccContractRuntimeMonitor } from './cc-contract-runtime.js';
+import { ccContractAutoProbe, maybeScheduleCcContractAutoProbe } from './cc-contract-auto-probe.js';
+import { registerVgeHealthRoute } from './vge-health-route.js';
+function promptAuditMeta(prompt) {
+    return {
+        promptHash: crypto.createHash('sha256').update(prompt).digest('hex'),
+        promptSizeBytes: Buffer.byteLength(prompt, 'utf8'),
+    };
+}
+function denyResponse(res, reason) {
+    res.json({
+        hookSpecificOutput: {
+            hookEventName: 'PreToolUse',
+            permissionDecision: 'deny',
+            permissionDecisionReason: reason,
+        },
+    });
+}
+function logDaemon(level, fields, message) {
+    try {
+        debugLogger()[level](fields, message);
+    }
+    catch {
+        // Debug logging must not become a second daemon failure path.
+    }
+}
+function allowResponse(res) {
+    res.json({
+        hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'allow' },
+    });
+}
+function daemonTokenMiddleware(expectedToken) {
+    return (req, res, next) => {
+        if (!tokenMatches(expectedToken, req.get(DAEMON_TOKEN_HEADER))) {
+            res.status(401).json({ ok: false, error: 'unauthorized' });
+            return;
+        }
+        next();
+    };
+}
+function invalidIdResponse(res, field) {
+    res.status(400).json({ ok: false, error: `invalid ${field}` });
+}
+function validateHookSessionId(res, sessionId) {
+    if (isSafeId(sessionId))
+        return true;
+    invalidIdResponse(res, 'session_id');
+    return false;
+}
+async function handleUserPrompt(req, res) {
+    const payload = req.body;
+    if (!validateHookSessionId(res, payload.session_id))
+        return;
+    const pendingKind = getActiveConversationDecisionKind(payload.session_id);
+    try {
+        logUserPromptReceived({
+            sessionId: payload.session_id,
+            ...promptAuditMeta(payload.prompt),
+            pendingEscalation: pendingKind !== null,
+            pendingKind,
+        });
+    }
+    catch (err) {
+        logDaemon('error', { err: String(err), sessionId: payload.session_id }, 'user prompt audit write failed');
+        res.json({
+            ccOutput: blockUserPromptWithReason('VGE Agent Guard: audit log write failed, so this prompt was blocked to preserve audit completeness.'),
+        });
+        return;
+    }
+    const escrowDecision = resolveConversationDecisionFromPrompt(payload.session_id, payload.prompt);
+    if (escrowDecision.matched) {
+        res.json({ ccOutput: escrowDecision.ccOutput });
+        return;
+    }
+    const config = getCurrentConfig() ?? DEFAULT_CONFIG;
+    const promptDecision = await enforcePromptInput(payload, config);
+    if (promptDecision.blocked) {
+        res.json({ ccOutput: promptDecision.ccOutput });
+        return;
+    }
+    const attachmentDecision = await enforcePromptAttachments(payload, config);
+    if (attachmentDecision.blocked) {
+        res.json({ ccOutput: attachmentDecision.ccOutput });
+        return;
+    }
+    res.json({ ccOutput: null });
+}
+function handlePreTool(req, res) {
+    void handlePreToolAsync(req, res);
+}
+async function handlePreToolAsync(req, res) {
+    try {
+        await handlePreToolInner(req, res);
+    }
+    catch (err) {
+        // Keep the fail-closed deny parseable; Express's default HTML 500 would hide it from the shim.
+        logDaemon('error', { err: String(err) }, 'handlePreTool unhandled exception');
+        denyResponse(res, 'VGE Agent Guard: internal error — denying for safety.');
+    }
+}
+async function handlePreToolInner(req, res) {
+    const payload = req.body;
+    if (!isSafeId(payload.session_id)) {
+        denyResponse(res, 'VGE Agent Guard: invalid session id — denying for safety.');
+        return;
+    }
+    const session = getSession(payload.session_id) ?? createSession(payload.session_id, null);
+    const config = getCurrentConfig() ?? DEFAULT_CONFIG;
+    const owner = decisionOwnerFromHookPayload(payload);
+    const postToolLock = shouldDenyForPostToolOperationalState({
+        sessionId: payload.session_id,
+        owner,
+        toolName: payload.tool_name,
+        toolInput: payload.tool_input,
+    });
+    if (postToolLock.deny) {
+        denyResponse(res, postToolLock.reason);
+        return;
+    }
+    const pathTools = new Set(['Read', 'Edit', 'Write']);
+    if (pathTools.has(payload.tool_name) && config.policy.credential_protection) {
+        const rawPath = payload.tool_input['file_path'] ?? '';
+        const { denied, resolvedPath } = checkPath(rawPath);
+        if (denied) {
+            logCredentialPathDenied({
+                sessionId: payload.session_id,
+                resolvedPath,
+                credentialProtectionEnabled: true,
+            });
+            denyResponse(res, `VGE Agent Guard: ${resolvedPath} is on the credential protection deny list.`);
+            return;
+        }
+    }
+    const key = canonicalizeKey(payload.tool_name, payload.tool_input);
+    if (isResourceBlocked(session, key)) {
+        denyResponse(res, `VGE Agent Guard: ${payload.tool_name} resource was blocked by user decision.`);
+        return;
+    }
+    const urlGate = await evaluatePretoolUrlGate({ payload, session, config });
+    if (urlGate.action === 'deny') {
+        denyResponse(res, urlGate.reason);
+        return;
+    }
+    if (isResourceAllowed(session, key)) {
+        allowResponse(res);
+        return;
+    }
+    // Legacy local policy only; VGE explicit blocks use conversation-native decisions.
+    const destructiveTools = new Set(['Bash', 'Write', 'Edit', 'Task']);
+    if (session.state === 'tainted' && destructiveTools.has(payload.tool_name)) {
+        res.json({
+            hookSpecificOutput: {
+                hookEventName: 'PreToolUse',
+                permissionDecision: 'ask',
+                permissionDecisionReason: [
+                    `VGE Agent Guard: session is tainted — ${payload.tool_name} requires your decision.`,
+                    'Approve to allow this single tool call. Deny to keep it blocked.',
+                    'Run `vge-cc-guard reset-session` in another terminal to clear tainted state.',
+                ].join('\n'),
+            },
+        });
+        return;
+    }
+    const policy = resolveToolPolicy(payload.tool_name);
+    if (policy.gate === 'allow') {
+        allowResponse(res);
+        return;
+    }
+    if (policy.gate === 'block') {
+        denyResponse(res, `VGE Agent Guard: ${payload.tool_name} is blocked by policy.`);
+        return;
+    }
+    res.json({
+        hookSpecificOutput: {
+            hookEventName: 'PreToolUse',
+            permissionDecision: 'ask',
+            permissionDecisionReason: `VGE Agent Guard: ${payload.tool_name} requires user approval.`,
+        },
+    });
+}
+async function handlePostTool(req, res) {
+    const payload = req.body;
+    if (!validateHookSessionId(res, payload.session_id))
+        return;
+    try {
+        const result = await enforcePostTool(payload);
+        res.json({ ccOutput: result.ccOutput });
+    }
+    catch (err) {
+        logDaemon('error', { err: String(err), toolName: payload.tool_name }, 'handlePostTool failed closed');
+        res.json({ ccOutput: renderPostToolFailClosedOutput(payload) });
+    }
+}
+export async function startDaemon(socketPath) {
+    const sockPath = socketPath ?? getIpcAddress();
+    const configDir = process.env['VGE_CC_GUARD_CONFIG_DIR'] ?? pathFromSocket(sockPath);
+    prepareDaemonIpcAddress(sockPath);
+    const socketProbe = await probeSocketState(sockPath);
+    if (socketProbe.state === 'live') {
+        if (!readDaemonToken() && canReuseCurrentLockOwner(configDir)) {
+            return { stop: async () => undefined };
+        }
+        const outcome = await resolveLiveDaemonBeforeStart(sockPath, configDir);
+        if (outcome === 'reuse')
+            return { stop: async () => undefined };
+    }
+    if (socketProbe.state === 'timeout' || socketProbe.state === 'error') {
+        debugLogger().warn({ socketPath: sockPath, probe: socketProbe }, 'daemon socket takeover refused');
+        throw new Error(`daemon socket state is ambiguous: ${socketProbe.state}`);
+    }
+    removeStaleDaemonIpcAddress(sockPath, socketProbe);
+    let instanceLock = acquireDaemonInstanceLock({
+        configDir,
+        socketPath: sockPath,
+        tokenPath: resolveDaemonTokenPath(),
+    });
+    if (!instanceLock.ok) {
+        if (instanceLock.reason === 'owner_alive') {
+            if (!readDaemonToken()) {
+                if (canReuseCurrentLockOwner(configDir) && await waitForLiveSocket(sockPath, 1_000)) {
+                    return { stop: async () => undefined };
+                }
+                throw new Error(`daemon instance lock is held: ${instanceLock.reason}`);
+            }
+            const outcome = await resolveLiveDaemonBeforeStart(sockPath, configDir);
+            if (outcome === 'reuse')
+                return { stop: async () => undefined };
+            instanceLock = acquireDaemonInstanceLock({
+                configDir,
+                socketPath: sockPath,
+                tokenPath: resolveDaemonTokenPath(),
+            });
+            if (instanceLock.ok) {
+                // Continue with the freshly acquired lock below.
+            }
+            else {
+                throw new Error(`daemon instance lock is held after stale daemon stop: ${instanceLock.reason}`);
+            }
+        }
+        else {
+            const becameLive = await waitForLiveSocket(sockPath, 1_000);
+            if (becameLive)
+                return { stop: async () => undefined };
+            throw new Error(`daemon instance lock is held: ${instanceLock.reason}`);
+        }
+    }
+    let server;
+    let socketOwned = false;
+    const instanceLockHandle = instanceLock.handle;
+    try {
+        // Only a proven-dead owner makes an ambiguous socket safe to remove.
+        if (instanceLock.recovered?.reason === 'dead_pid')
+            cleanupDaemonIpcAddress(sockPath);
+        const lockedProbe = await probeSocketState(sockPath);
+        if (lockedProbe.state === 'live') {
+            const outcome = await resolveLiveDaemonBeforeStart(sockPath, configDir);
+            if (outcome === 'reuse') {
+                instanceLockHandle.release();
+                return { stop: async () => undefined };
+            }
+        }
+        if (lockedProbe.state === 'timeout' || lockedProbe.state === 'error') {
+            throw new Error(`daemon socket state is ambiguous: ${lockedProbe.state}`);
+        }
+        removeStaleDaemonIpcAddress(sockPath, lockedProbe);
+        const daemonToken = rotateDaemonToken();
+        loadConfig();
+        initClient(() => getCurrentConfig() ?? DEFAULT_CONFIG);
+        debugLogger().debug({ clientIdSource: effectiveClientIdSource(getCurrentConfig() ?? DEFAULT_CONFIG) }, 'client_id source resolved');
+        cleanupOldLogs();
+        cleanupPersistedBlockingDecisionsOnStartup();
+        maybeScheduleCcContractAutoProbe((getCurrentConfig() ?? DEFAULT_CONFIG).policy.cc_contract);
+        const ttl = getCurrentConfig()?.policy.session_idle_ttl_hours
+            ?? DEFAULT_CONFIG.policy.session_idle_ttl_hours;
+        const restored = loadSessionsFromDisk(ttl);
+        debugLogger().info(restored, 'sessions restored from disk');
+        const app = express();
+        const parseProtectedJson = express.json({ limit: '25mb' });
+        let reloadAttempt = 0;
+        let lastReloadError = null;
+        const health = (_req, res) => {
+            res.json({
+                ok: true,
+                pid: process.pid,
+                configRevision: getConfigRevision(),
+                reloadAttempt,
+                lastReloadError,
+            });
+        };
+        const reloadDaemonConfig = () => {
+            reloadAttempt += 1;
+            const outcome = reloadConfig();
+            if (!outcome.ok) {
+                lastReloadError = outcome.message;
+                debugLogger().error({ error: outcome.message }, 'config reload failed');
+                return outcome;
+            }
+            lastReloadError = null;
+            debugLogger().info({ configRevision: outcome.revision }, 'config reloaded');
+            maybeScheduleCcContractAutoProbe((getCurrentConfig() ?? DEFAULT_CONFIG).policy.cc_contract);
+            return outcome;
+        };
+        const requireDaemonToken = daemonTokenMiddleware(daemonToken);
+        let draining = false;
+        app.get('/health', health);
+        app.post('/health', health);
+        app.post('/v1/control/status', requireDaemonToken, parseProtectedJson, (_req, res) => {
+            const owner = instanceLockHandle.owner;
+            const current = currentBuildStamp(owner.binaryPath);
+            const contractHealth = ccContractRuntimeMonitor.observe();
+            maybeScheduleCcContractAutoProbe((getCurrentConfig() ?? DEFAULT_CONFIG).policy.cc_contract);
+            res.json({
+                ok: true,
+                pid: process.pid,
+                configRevision: getConfigRevision(),
+                reloadAttempt,
+                lastReloadError,
+                staleBuild: isDaemonBuildStale(owner, current),
+                pendingDecisionCount: getPendingDecisions().length,
+                build: current,
+                ccContract: {
+                    state: contractHealth.state,
+                    l0RedactionAvailable: contractHealth.l0RedactionAvailable,
+                    reason: contractHealth.reason,
+                    claudeVersion: contractHealth.claudeVersion,
+                    binaryPath: contractHealth.binaryPath,
+                    binarySha256: contractHealth.binarySha256,
+                    checkedAt: contractHealth.checkedAt,
+                    liveContract: contractHealth.liveContract,
+                },
+                owner: {
+                    pid: owner.pid,
+                    startedAt: owner.startedAt,
+                    socketPath: owner.socketPath,
+                    binarySha256: owner.binarySha256,
+                    packageVersion: owner.packageVersion,
+                },
+            });
+        });
+        app.post('/v1/control/reload-config', requireDaemonToken, parseProtectedJson, (_req, res) => {
+            const outcome = reloadDaemonConfig();
+            if (!outcome.ok) {
+                res.status(500).json({ ok: false, error: outcome.message });
+                return;
+            }
+            res.json({ ok: true, configRevision: outcome.revision });
+        });
+        registerVgeHealthRoute(app, requireDaemonToken, parseProtectedJson, () => getCurrentConfig() ?? DEFAULT_CONFIG);
+        app.post('/v1/control/decision-metrics', requireDaemonToken, parseProtectedJson, (_req, res) => {
+            res.json({ ok: true, metrics: snapshotDecisionMetrics() });
+        });
+        app.post('/v1/control/reset-session', requireDaemonToken, parseProtectedJson, (req, res) => {
+            const body = req.body;
+            if (!body?.session_id) {
+                res.status(400).json({ ok: false, error: 'missing session_id' });
+                return;
+            }
+            if (!isSafeId(body.session_id)) {
+                invalidIdResponse(res, 'session_id');
+                return;
+            }
+            const reset = resetSession(body.session_id);
+            clearAllConversationDecisionStateForSession(body.session_id);
+            res.json({ ok: true, reset, session_id: body.session_id });
+        });
+        app.post('/v1/control/restart', requireDaemonToken, parseProtectedJson, (_req, res) => {
+            const pendingDecisionCount = getPendingDecisions().length;
+            if (pendingDecisionCount > 0) {
+                res.status(409).json({ ok: false, error: 'pending_decisions', pendingDecisionCount });
+                return;
+            }
+            res.status(501).json({ ok: false, error: 'restart_not_implemented', pendingDecisionCount: 0 });
+        });
+        app.post('/v1/control/stop', requireDaemonToken, parseProtectedJson, (_req, res) => {
+            draining = true;
+            const pendingDecisionCount = getPendingDecisions().length;
+            debugLogger().info({ pendingDecisionCount }, 'daemon shutdown requested');
+            res.on('close', () => {
+                void shutdownDaemon();
+            });
+            res.on('finish', () => {
+                void shutdownDaemon();
+            });
+            res.json({ ok: true, draining: true, pendingDecisionCount });
+        });
+        app.use((req, res, next) => {
+            if (!draining || !req.path.startsWith('/v1/hooks/')) {
+                next();
+                return;
+            }
+            res.status(503).json({ ok: false, error: 'daemon_draining' });
+        });
+        registerSessionHookRoutes(app, requireDaemonToken, parseProtectedJson, (sessionId) => {
+            clearAllConversationDecisionStateForSession(sessionId);
+        });
+        app.post('/v1/hooks/userprompt', requireDaemonToken, parseProtectedJson, (req, res) => { void handleUserPrompt(req, res); });
+        app.post('/v1/hooks/pretool', requireDaemonToken, parseProtectedJson, handlePreTool);
+        app.post('/v1/hooks/posttool', requireDaemonToken, parseProtectedJson, (req, res) => { void handlePostTool(req, res); });
+        registerResolveEscalationRoute(app, requireDaemonToken, parseProtectedJson);
+        registerDecisionRoutes(app, () => getCurrentConfig() ?? DEFAULT_CONFIG, requireDaemonToken, parseProtectedJson);
+        app.use((err, _req, res, next) => {
+            if (typeof err === 'object' &&
+                err !== null &&
+                'type' in err &&
+                err.type === 'entity.too.large') {
+                res.status(413).json({ ok: false, error: 'payload too large' });
+                return;
+            }
+            next(err);
+        });
+        server = http.createServer(app);
+        await new Promise((resolve, reject) => {
+            server.once('error', reject);
+            server.listen(sockPath, () => {
+                socketOwned = true;
+                resolve();
+            });
+        });
+        await hardenDaemonIpcAddress(sockPath, server);
+        startWatcher();
+        const handleSighup = () => {
+            reloadDaemonConfig();
+        };
+        process.on('SIGHUP', handleSighup);
+        // Config schema bounds this value; avoid a duplicate hardcoded daemon TTL.
+        const gcTimer = setInterval(() => {
+            const ttl = getCurrentConfig()?.policy.session_idle_ttl_hours
+                ?? DEFAULT_CONFIG.policy.session_idle_ttl_hours;
+            gcIdleSessions(ttl);
+        }, 60_000);
+        ccContractRuntimeMonitor.observe();
+        const ccContractTimer = setInterval(() => ccContractRuntimeMonitor.observe(), 60_000);
+        ccContractTimer.unref();
+        const cachePruneTimer = setInterval(() => prunePostToolResponseCache(), 60_000);
+        const handleUnhandledRejection = (reason) => {
+            logDaemon('error', { reason: String(reason) }, 'daemon unhandledRejection');
+        };
+        process.on('unhandledRejection', handleUnhandledRejection);
+        const activeServer = server;
+        let shutdownPromise = null;
+        const handleSigterm = () => { void shutdownDaemon(); };
+        const handleSigint = () => { void shutdownDaemon(); };
+        process.on('SIGTERM', handleSigterm);
+        process.on('SIGINT', handleSigint);
+        async function shutdownDaemon() {
+            draining = true;
+            if (shutdownPromise)
+                return shutdownPromise;
+            shutdownPromise = new Promise((resolve) => {
+                clearInterval(gcTimer);
+                clearInterval(ccContractTimer);
+                clearInterval(cachePruneTimer);
+                ccContractAutoProbe.dispose();
+                flushAllLazyWrites();
+                stopWatcher();
+                process.off('SIGHUP', handleSighup);
+                process.off('unhandledRejection', handleUnhandledRejection);
+                process.off('SIGTERM', handleSigterm);
+                process.off('SIGINT', handleSigint);
+                activeServer.close(() => {
+                    if (socketOwned)
+                        cleanupDaemonIpcAddress(sockPath);
+                    instanceLockHandle.release();
+                    logDaemon('info', { socketPath: sockPath }, 'daemon shutdown complete');
+                    resolve();
+                });
+            });
+            return shutdownPromise;
+        }
+        return {
+            stop: () => shutdownDaemon(),
+        };
+    }
+    catch (err) {
+        stopWatcher();
+        if (server)
+            await closeHttpServer(server);
+        if (socketOwned)
+            cleanupDaemonIpcAddress(sockPath);
+        instanceLockHandle.release();
+        throw err;
+    }
+}
+async function waitForLiveSocket(socketPath, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        if ((await probeSocketState(socketPath)).state === 'live')
+            return true;
+        await new Promise((resolve) => setTimeout(resolve, 50));
+    }
+    return false;
+}
+function closeHttpServer(server) {
+    return new Promise((resolve) => server.close(() => resolve()));
+}
+function pathFromSocket(socketPath) {
+    return path.dirname(socketPath);
+}
+//# sourceMappingURL=http-server.js.map

package/dist/daemon/http-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.js","sourceRoot":"","sources":["../../src/daemon/http-server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/I,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EACL,aAAa,EACb,UAAU,EACV,cAAc,EACd,YAAY,EACZ,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnG,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,YAAY,GACb,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACxF,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,0CAA0C,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACvG,OAAO,EACL,iCAAiC,EACjC,qCAAqC,GACtC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,2CAA2C,EAAE,MAAM,oCAAoC,CAAC;AACjG,OAAO,EAAE,qCAAqC,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AACpG,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACpE,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAa,EAAE,MAAc;IACjD,GAAG,CAAC,IAAI,CAAC;QACP,kBAAkB,EAAE;YAClB,aAAa,EAAE,YAAY;YAC3B,kBAAkB,EAAE,MAAM;YAC1B,wBAAwB,EAAE,MAAM;SACjC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAuB,EAAE,MAA+B,EAAE,OAAe;IAC1F,IAAI,CAAC;QACH,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAa;IAClC,GAAG,CAAC,IAAI,CAAC;QACP,kBAAkB,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,OAAO,EAAE;KACjF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,aAAqB;IAClD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAa,EAAE,KAAa;IACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,KAAK,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAa,EAAE,SAAkB;IAC9D,IAAI,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,iBAAiB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAY,EAAE,GAAa;IACzD,MAAM,OAAO,GAAG,GAAG,CAAC,IAA2B,CAAC;IAChD,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO;IAC5D,MAAM,WAAW,GAAG,iCAAiC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,qBAAqB,CAAC;YACpB,SAAS,EAAE,OAAO,CAAC,UAAU;YAC7B,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,iBAAiB,EAAE,WAAW,KAAK,IAAI;YACvC,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,CACP,OAAO,EACP,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,EACnD,gCAAgC,CACjC,CAAC;QACF,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ,EAAE,yBAAyB,CACjC,qGAAqG,CACtG;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,cAAc,GAAG,qCAAqC,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACjG,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,EAAE,IAAI,cAAc,CAAC;IACpD,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,aAAa,CAAC,GAAY,EAAE,GAAa;IAChD,KAAK,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,GAAa;IAC3D,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+FAA+F;QAC/F,SAAS,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAC9E,YAAY,CAAC,GAAG,EAAE,uDAAuD,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,GAAa;IAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,IAAwB,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,YAAY,CAAC,GAAG,EAAE,2DAA2D,CAAC,CAAC;QAC/E,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,gBAAgB,EAAE,IAAI,cAAc,CAAC;IACpD,MAAM,KAAK,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAEpD,MAAM,YAAY,GAAG,qCAAqC,CAAC;QACzD,SAAS,EAAE,OAAO,CAAC,UAAU;QAC7B,KAAK;QACL,QAAQ,EAAE,OAAO,CAAC,SAAS;QAC3B,SAAS,EAAE,OAAO,CAAC,UAAU;KAC9B,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;QACtB,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAC5E,MAAM,OAAO,GAAI,OAAO,CAAC,UAAU,CAAC,WAAW,CAAwB,IAAI,EAAE,CAAC;QAC9E,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,MAAM,EAAE,CAAC;YACX,uBAAuB,CAAC;gBACtB,SAAS,EAAE,OAAO,CAAC,UAAU;gBAC7B,YAAY;gBACZ,2BAA2B,EAAE,IAAI;aAClC,CAAC,CAAC;YACH,YAAY,CACV,GAAG,EACH,oBAAoB,YAAY,6CAA6C,CAC9E,CAAC;YACF,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QACpC,YAAY,CAAC,GAAG,EAAE,oBAAoB,OAAO,CAAC,SAAS,yCAAyC,CAAC,CAAC;QAClG,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IAED,IAAI,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QACpC,aAAa,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IAED,mFAAmF;IACnF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,IAAI,CAAC;YACP,kBAAkB,EAAE;gBAClB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,KAAK;gBACzB,wBAAwB,EAAE;oBACxB,yCAAyC,OAAO,CAAC,SAAS,0BAA0B;oBACpF,kEAAkE;oBAClE,8EAA8E;iBAC/E,CAAC,IAAI,CAAC,IAAI,CAAC;aACb;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,YAAY,CAAC,GAAG,EAAE,oBAAoB,OAAO,CAAC,SAAS,wBAAwB,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IACD,GAAG,CAAC,IAAI,CAAC;QACP,kBAAkB,EAAE;YAClB,aAAa,EAAE,YAAY;YAC3B,kBAAkB,EAAE,KAAK;YACzB,wBAAwB,EAAE,oBAAoB,OAAO,CAAC,SAAS,0BAA0B;SAC1F;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAY,EAAE,GAAa;IACvD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAyB,CAAC;IAC9C,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACtG,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,8BAA8B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,UAAmB;IACnD,MAAM,QAAQ,GAAG,UAAU,IAAI,aAAa,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;IACrF,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,WAAW,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QACjC,IAAI,CAAC,eAAe,EAAE,IAAI,wBAAwB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;QACzC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACxE,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QACrE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,gCAAgC,CAAC,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,qCAAqC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,2BAA2B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAEnD,IAAI,YAAY,GAAG,yBAAyB,CAAC;QAC3C,SAAS;QACT,UAAU,EAAE,QAAQ;QACpB,SAAS,EAAE,sBAAsB,EAAE;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,IAAI,YAAY,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAC1C,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;gBACvB,IAAI,wBAAwB,CAAC,SAAS,CAAC,IAAI,MAAM,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;oBACpF,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;gBACzC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACxE,IAAI,OAAO,KAAK,OAAO;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;YAChE,YAAY,GAAG,yBAAyB,CAAC;gBACvC,SAAS;gBACT,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,sBAAsB,EAAE;aACpC,CAAC,CAAC;YACH,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;gBACpB,iDAAiD;YACnD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,yDAAyD,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC5D,IAAI,UAAU;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,iCAAiC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,IAAI,MAA+B,CAAC;IACpC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,CAAC;IAE/C,IAAI,CAAC;QACH,qEAAqE;QACrE,IAAI,YAAY,CAAC,SAAS,EAAE,MAAM,KAAK,UAAU;YAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACrF,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,WAAW,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACxE,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACxB,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBAC7B,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;YACzC,CAAC;QACH,CAAC;QACD,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,qCAAqC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,2BAA2B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAEnD,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;QACxC,UAAU,EAAE,CAAC;QACb,UAAU,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,IAAI,cAAc,CAAC,CAAC;QACvD,WAAW,EAAE,CAAC,KAAK,CACjB,EAAE,cAAc,EAAE,uBAAuB,CAAC,gBAAgB,EAAE,IAAI,cAAc,CAAC,EAAE,EACjF,2BAA2B,CAC5B,CAAC;QACF,cAAc,EAAE,CAAC;QACjB,0CAA0C,EAAE,CAAC;QAC7C,gCAAgC,CAAC,CAAC,gBAAgB,EAAE,IAAI,cAAc,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAE5F,MAAM,GAAG,GAAG,gBAAgB,EAAE,EAAE,MAAM,CAAC,sBAAsB;eACxD,cAAc,CAAC,MAAM,CAAC,sBAAsB,CAAC;QAClD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC3C,WAAW,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC;QAE5D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3D,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,eAAe,GAAkB,IAAI,CAAC;QAE1C,MAAM,MAAM,GAAG,CAAC,IAAa,EAAE,GAAa,EAAQ,EAAE;YACpD,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,IAAI;gBACR,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,cAAc,EAAE,iBAAiB,EAAE;gBACnC,aAAa;gBACb,eAAe;aAChB,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,kBAAkB,GAAG,GAAoE,EAAE;YAC/F,aAAa,IAAI,CAAC,CAAC;YACnB,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC;gBAClC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,sBAAsB,CAAC,CAAC;gBACxE,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,eAAe,GAAG,IAAI,CAAC;YACvB,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,iBAAiB,CAAC,CAAC;YAC5E,gCAAgC,CAAC,CAAC,gBAAgB,EAAE,IAAI,cAAc,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC5F,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAC9D,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACnF,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC;YACvC,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,cAAc,GAAG,wBAAwB,CAAC,OAAO,EAAE,CAAC;YAC1D,gCAAgC,CAAC,CAAC,gBAAgB,EAAE,IAAI,cAAc,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC5F,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,IAAI;gBACR,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,cAAc,EAAE,iBAAiB,EAAE;gBACnC,aAAa;gBACb,eAAe;gBACf,UAAU,EAAE,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC;gBAC9C,oBAAoB,EAAE,mBAAmB,EAAE,CAAC,MAAM;gBAClD,KAAK,EAAE,OAAO;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE,cAAc,CAAC,KAAK;oBAC3B,oBAAoB,EAAE,cAAc,CAAC,oBAAoB;oBACzD,MAAM,EAAE,cAAc,CAAC,MAAM;oBAC7B,aAAa,EAAE,cAAc,CAAC,aAAa;oBAC3C,UAAU,EAAE,cAAc,CAAC,UAAU;oBACrC,YAAY,EAAE,cAAc,CAAC,YAAY;oBACzC,SAAS,EAAE,cAAc,CAAC,SAAS;oBACnC,YAAY,EAAE,cAAc,CAAC,YAAY;iBAC1C;gBACD,KAAK,EAAE;oBACL,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,cAAc,EAAE,KAAK,CAAC,cAAc;iBACrC;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC1F,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,sBAAsB,CAAC,GAAG,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,gBAAgB,EAAE,IAAI,cAAc,CAAC,CAAC;QAChH,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC7F,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACzF,MAAM,IAAI,GAAG,GAAG,CAAC,IAA+B,CAAC;YACjD,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;gBACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5C,2CAA2C,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACpF,MAAM,oBAAoB,GAAG,mBAAmB,EAAE,CAAC,MAAM,CAAC;YAC1D,IAAI,oBAAoB,GAAG,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBACtF,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACjF,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,oBAAoB,GAAG,mBAAmB,EAAE,CAAC,MAAM,CAAC;YAC1D,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,oBAAoB,EAAE,EAAE,2BAA2B,CAAC,CAAC;YAC1E,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,KAAK,cAAc,EAAE,CAAC;YACxB,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACpB,KAAK,cAAc,EAAE,CAAC;YACxB,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACzB,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpD,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,yBAAyB,CAAC,GAAG,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC,SAAS,EAAE,EAAE;YACnF,2CAA2C,CAAC,SAAS,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,KAAK,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7H,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;QACrF,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,KAAK,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzH,8BAA8B,CAAC,GAAG,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;QAC5E,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,gBAAgB,EAAE,IAAI,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;QAEhH,GAAG,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,IAAa,EAAE,GAAa,EAAE,IAA0B,EAAE,EAAE;YACjF,IACE,OAAO,GAAG,KAAK,QAAQ;gBACvB,GAAG,KAAK,IAAI;gBACZ,MAAM,IAAI,GAAG;gBACZ,GAA0B,CAAC,IAAI,KAAK,kBAAkB,EACvD,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAEhC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC9B,MAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC5B,WAAW,GAAG,IAAI,CAAC;gBACnB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE/C,YAAY,EAAE,CAAC;QAEf,MAAM,YAAY,GAAG,GAAS,EAAE;YAC9B,kBAAkB,EAAE,CAAC;QACvB,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAEnC,2EAA2E;QAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;YAC/B,MAAM,GAAG,GAAG,gBAAgB,EAAE,EAAE,MAAM,CAAC,sBAAsB;mBACxD,cAAc,CAAC,MAAM,CAAC,sBAAsB,CAAC;YAClD,cAAc,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC,EAAE,MAAM,CAAC,CAAC;QAEX,wBAAwB,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QACtF,eAAe,CAAC,KAAK,EAAE,CAAC;QAExB,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,0BAA0B,EAAE,EAAE,MAAM,CAAC,CAAC;QAChF,MAAM,wBAAwB,GAAG,CAAC,MAAe,EAAQ,EAAE;YACzD,SAAS,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAC;QAC9E,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;QAE3D,MAAM,YAAY,GAAG,MAAM,CAAC;QAC5B,IAAI,eAAe,GAAyB,IAAI,CAAC;QACjD,MAAM,aAAa,GAAG,GAAS,EAAE,GAAG,KAAK,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,GAAS,EAAE,GAAG,KAAK,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACrC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAEnC,KAAK,UAAU,cAAc;YAC3B,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,eAAe;gBAAE,OAAO,eAAe,CAAC;YAC5C,eAAe,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC9C,aAAa,CAAC,OAAO,CAAC,CAAC;gBACvB,aAAa,CAAC,eAAe,CAAC,CAAC;gBAC/B,aAAa,CAAC,eAAe,CAAC,CAAC;gBAC/B,mBAAmB,CAAC,OAAO,EAAE,CAAC;gBAC9B,kBAAkB,EAAE,CAAC;gBACrB,WAAW,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;gBAC5D,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBACpC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE;oBACtB,IAAI,WAAW;wBAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAC;oBACnD,kBAAkB,CAAC,OAAO,EAAE,CAAC;oBAC7B,SAAS,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,0BAA0B,CAAC,CAAC;oBACxE,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,OAAO;YACL,IAAI,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,EAAE,CAAC;QACd,IAAI,MAAM;YAAE,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,WAAW;YAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACnD,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,UAAkB,EAAE,SAAiB;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACvE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,MAAmB;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC"}

package/dist/daemon/id-validation.d.ts

@@ -0,0 +1,2 @@
+export declare function isSafeId(value: unknown): value is string;
+//# sourceMappingURL=id-validation.d.ts.map

package/dist/daemon/id-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"id-validation.d.ts","sourceRoot":"","sources":["../../src/daemon/id-validation.ts"],"names":[],"mappings":"AAEA,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD"}

package/dist/daemon/id-validation.js

@@ -0,0 +1,5 @@
+const SAFE_ID = /^[A-Za-z0-9_-]{1,128}$/;
+export function isSafeId(value) {
+    return typeof value === 'string' && SAFE_ID.test(value);
+}
+//# sourceMappingURL=id-validation.js.map

package/dist/daemon/id-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id-validation.js","sourceRoot":"","sources":["../../src/daemon/id-validation.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,GAAG,wBAAwB,CAAC;AAEzC,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC"}

package/dist/daemon/path-deny.d.ts

@@ -0,0 +1,14 @@
+type PathDenyOptions = {
+    platform?: NodeJS.Platform;
+    homeDir?: string;
+    env?: Record<string, string | undefined>;
+    realpathSync?: (filePath: string) => string;
+};
+export declare function expandTilde(p: string, opts?: PathDenyOptions): string;
+export declare const PATH_DENY_PATTERNS_DISPLAY: readonly string[];
+export declare function checkPath(rawPath: string, opts?: PathDenyOptions): {
+    denied: boolean;
+    resolvedPath: string;
+};
+export {};
+//# sourceMappingURL=path-deny.d.ts.map

package/dist/daemon/path-deny.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-deny.d.ts","sourceRoot":"","sources":["../../src/daemon/path-deny.ts"],"names":[],"mappings":"AAKA,KAAK,eAAe,GAAG;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;CAC7C,CAAC;AAEF,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,MAAM,CAQzE;AAsBD,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAQvD,CAAC;AAuCF,wBAAgB,SAAS,CACvB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,eAAoB,GACzB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAgB3C"}