@voxslopuli/openagentsy 0.0.0-stage → 0.2.0

package/README.md

@@ -1,3 +1,22 @@
-# Temporary Holding Version
+# openagentsy
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The command line: set the project up (`openagentsy init`), build the agent files from the roles (`openagentsy build`), pick the models (`openagentsy models`).
+
+## Install
+
+```sh
+`npm install -g openagentsy`
+```
+
+
+## Development
+
+This package is part of the OpenAgentsy monorepo and is developed there.
+
+- Repository and docs: https://github.com/selfagency/openagentsy
+- Changelog: https://github.com/selfagency/openagentsy/blob/main/CHANGELOG.md
+- Report an issue: https://github.com/selfagency/openagentsy/issues
+
+## License
+
+GPL-3.0-or-later.

package/dist/adapter-dependency.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=adapter-dependency.test.d.ts.map

package/dist/adapter-dependency.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-dependency.test.d.ts","sourceRoot":"","sources":["../src/adapter-dependency.test.ts"],"names":[],"mappings":""}

package/dist/adapter-dependency.test.js

@@ -0,0 +1,51 @@
+import { readdir, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { describe, expect, it } from 'vitest';
+/**
+ * The published packages do not depend on the private adapter.
+ *
+ * The adapter is the OpenCode plugin: it is a file the CLI copies into a
+ * project's plugin directory, and it is never a package on npm. A published
+ * package that names it in its dependencies cannot be installed, because the
+ * dependency does not resolve, so the check walks the manifests of the
+ * workspace and fails when one of them names it.
+ *
+ * A devDependency is not a dependency. The CLI names the adapter as one,
+ * because the plugin file is built from it and copied into the package.
+ */
+const ADAPTER = '@openagentsy/adapter-opencode';
+/** The packages of the workspace, one directory each. */
+const packagesRoot = fileURLToPath(new URL('../../', import.meta.url));
+/** Whether a value is a manifest this check can read. */
+function isManifest(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+describe('the published packages', () => {
+    it('do not depend on the private adapter', async () => {
+        const entries = await readdir(packagesRoot, { withFileTypes: true });
+        const offenders = [];
+        for (const entry of entries) {
+            if (!entry.isDirectory())
+                continue;
+            const raw = await readFile(join(packagesRoot, entry.name, 'package.json'), 'utf8').catch(() => undefined);
+            if (raw === undefined)
+                continue;
+            const parsed = JSON.parse(raw);
+            if (!isManifest(parsed))
+                continue;
+            if (parsed.private === true)
+                continue;
+            const dependencies = {
+                ...parsed.dependencies,
+                ...parsed.peerDependencies,
+                ...parsed.optionalDependencies,
+            };
+            const range = dependencies[ADAPTER];
+            if (range !== undefined)
+                offenders.push(`${parsed.name ?? entry.name} wants ${range}`);
+        }
+        expect(offenders).toEqual([]);
+    });
+});
+//# sourceMappingURL=adapter-dependency.test.js.map

package/dist/adapter-dependency.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-dependency.test.js","sourceRoot":"","sources":["../src/adapter-dependency.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,GAAG,+BAA+B,CAAC;AAEhD,yDAAyD;AACzD,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAWvE,yDAAyD;AACzD,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,SAAS,GAAa,EAAE,CAAC;QAE/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,SAAS;YACnC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CACtF,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;YACF,IAAI,GAAG,KAAK,SAAS;gBAAE,SAAS;YAChC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YAClC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;gBAAE,SAAS;YACtC,MAAM,YAAY,GAAG;gBACnB,GAAG,MAAM,CAAC,YAAY;gBACtB,GAAG,MAAM,CAAC,gBAAgB;gBAC1B,GAAG,MAAM,CAAC,oBAAoB;aAC/B,CAAC;YACF,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,UAAU,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/approve.d.ts

@@ -0,0 +1,63 @@
+/** What the command was asked to do. */
+export type ApproveOptions = {
+    /** The state root: the approvals store and the audit live under it. */
+    stateRoot: string;
+    /** The call the grant covers, as the person typed it. */
+    callID?: string | undefined;
+    /** How long the grant lives, as the person typed it: milliseconds. */
+    ttl?: string | undefined;
+    /** The clock, so a test can move time. */
+    now?: number | undefined;
+    /** Who granted it. The person, unless the caller says otherwise. */
+    actor?: string | undefined;
+};
+/** What the command did. */
+export type ApproveResult = {
+    ok: true;
+    outcome: 'granted';
+    callID: string;
+    expiresAt: number;
+} | {
+    ok: true;
+    outcome: 'already-granted';
+    callID: string;
+    expiresAt: number;
+} | {
+    ok: false;
+    outcome: 'no-call-id' | 'bad-ttl' | 'store-failed' | 'audit-failed' | 'unaudited-grant';
+    detail: string;
+};
+/**
+ * Grant a call the approval of a person.
+ *
+ * The grant is written down by the store, under its own lock, and the grant
+ * is audited. A call that is already granted is reported as granted and
+ * nothing is written: the store holds one entry per call, and the grant that
+ * is already there keeps the expiry it has.
+ */
+export declare function runApprove(options: ApproveOptions): Promise<ApproveResult>;
+/** What the consumer of a grant needs to spend it. */
+export type UseApprovalOptions = {
+    /** The state root: the approvals store lives under it. */
+    stateRoot: string;
+    /** The call the grant covers. */
+    callID: string;
+    /** The agent that made the call. */
+    actor: string;
+    /** The clock, so a test can move time. */
+    now?: number | undefined;
+};
+/**
+ * Spend a grant: the call passes once, and the use is on the record.
+ *
+ * The store spends the grant under its own lock, so two callers cannot both
+ * pass the same call, and a grant that ran out is never spent. The store
+ * writes the trail of the spend with the agent that made the call, because
+ * the person who granted it is not the one that used it.
+ */
+export declare function useApproval(options: UseApprovalOptions): Promise<boolean>;
+/**
+ * The report, as a person reads it.
+ */
+export declare function formatApproveResult(result: ApproveResult): string;
+//# sourceMappingURL=approve.d.ts.map

package/dist/commands/approve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.d.ts","sourceRoot":"","sources":["../../src/commands/approve.ts"],"names":[],"mappings":"AAgEA,wCAAwC;AACxC,MAAM,MAAM,cAAc,GAAG;IAC3B,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC;AAEF,4BAA4B;AAC5B,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC3E;IACE,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,YAAY,GAAG,SAAS,GAAG,cAAc,GAAG,cAAc,GAAG,iBAAiB,CAAC;IACxF,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAiEN;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CA+EhF;AAED,sDAAsD;AACtD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAG/E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAOjE"}

package/dist/commands/approve.js

@@ -0,0 +1,218 @@
+import { join } from 'node:path';
+import { appendAudit, POLICIES } from '@openagentsy/core';
+import { createApprovalStore, DEFAULT_APPROVAL_TTL_MS, } from '@openagentsy/hooks';
+/**
+ * The escape hatch: a person approves one call, and the call passes once.
+ *
+ * OpenCode's permission prompt cannot be answered from inside a plugin, so a
+ * destructive command is refused with the id of the call it refused. The
+ * person runs `/oa approve <callID>`, the grant is written down, and the
+ * call it names goes through exactly once.
+ *
+ * The store is the one in `@openagentsy/hooks`: the lock, the pruning of the
+ * grants that ran out and the one-shot consumption live there, and this
+ * module is the thin layer a person drives it through. What it adds is the
+ * audit: a grant and a use are both on the record, because an approval that
+ * leaves no trace is an approval nobody can look at afterwards.
+ *
+ * The store and the audit are the state root's, so a grant given in a
+ * worktree is a grant of the project.
+ */
+/**
+ * Where the audit of a project lives.
+ *
+ * It is the board's own log, beside the board: the same file the leases and
+ * the records are audited in.
+ */
+function auditPath(stateRoot) {
+    return join(stateRoot, '.openagentsy', 'audit.jsonl');
+}
+/**
+ * The actor of a grant: the person who ran the command.
+ *
+ * The grant is a human decision, and the board cannot tell who is calling it,
+ * so the name of the person is what the person says it is. The default says
+ * what it is without pretending to know more.
+ */
+const HUMAN = 'human';
+/**
+ * The longest a call id may be.
+ *
+ * The id comes from the host, so it is opaque, and the only thing a person
+ * can get wrong is a whole command instead of an id.
+ */
+const MAX_CALL_ID = 200;
+/**
+ * The longest a grant may live, in milliseconds.
+ *
+ * A day is generous: long enough for a person to read the reason the gate
+ * gave, answer it and let the agent retry, and short enough that a grant
+ * left behind does not open a door days later. A longer window is refused
+ * before anything is written, so a grant that never runs out cannot be
+ * written at all.
+ */
+const MAX_TTL_MS = 24 * 60 * 60 * 1000;
+/**
+ * Whether a string can be the id of a call.
+ *
+ * An id has no whitespace in it, and it names no path: a phrase, a path or
+ * a shell command is not an id, and the gate names the id in the reason it
+ * gives, so the person copies the id and not the sentence around it. The
+ * id is a JSON string today, and a charset that cannot name a path keeps it
+ * one that cannot.
+ */
+function isCallID(text) {
+    if (text.length === 0 || text.length > MAX_CALL_ID)
+        return false;
+    if (/\s/.test(text))
+        return false;
+    if (text.includes('/') || text.includes('\\'))
+        return false;
+    if (text.includes('..'))
+        return false;
+    return true;
+}
+/**
+ * The lifetime a `--ttl` asks for, in milliseconds.
+ *
+ * The value is a number of milliseconds, and anything else is refused: a
+ * grant that lives for an unknown time is a grant that lives for ever, and
+ * so is one that lives for longer than a day.
+ */
+function ttlOf(ttl) {
+    const text = ttl.trim();
+    if (!/^\d+$/.test(text))
+        return undefined;
+    const ms = Number(text);
+    if (!Number.isFinite(ms) || ms <= 0 || ms > MAX_TTL_MS)
+        return undefined;
+    return ms;
+}
+/**
+ * The message of an error, when it has one.
+ */
+function describe(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/**
+ * The grant of a call, without throwing at the caller.
+ *
+ * The store holds its own lock, so the grant is written once: two people
+ * approving the same call at the same time do not write it twice.
+ */
+async function grantCall(store, callID, now, ttlMs) {
+    try {
+        return { grant: await store.approve(callID, now, ttlMs) };
+    }
+    catch (error) {
+        return { error };
+    }
+}
+/**
+ * Grant a call the approval of a person.
+ *
+ * The grant is written down by the store, under its own lock, and the grant
+ * is audited. A call that is already granted is reported as granted and
+ * nothing is written: the store holds one entry per call, and the grant that
+ * is already there keeps the expiry it has.
+ */
+export async function runApprove(options) {
+    const callID = options.callID ?? '';
+    if (!isCallID(callID)) {
+        return {
+            ok: false,
+            outcome: 'no-call-id',
+            detail: 'pass the id of the call to approve: /oa approve <callID>',
+        };
+    }
+    const ttlMs = options.ttl === undefined ? DEFAULT_APPROVAL_TTL_MS : ttlOf(options.ttl);
+    if (ttlMs === undefined) {
+        return {
+            ok: false,
+            outcome: 'bad-ttl',
+            detail: `the ttl is a number of milliseconds, at most ${MAX_TTL_MS} (a day): /oa approve <callID> --ttl <ms>`,
+        };
+    }
+    const now = options.now ?? Date.now();
+    const store = createApprovalStore(options.stateRoot);
+    const attempt = await grantCall(store, callID, now, ttlMs);
+    if ('error' in attempt) {
+        return {
+            ok: false,
+            outcome: 'store-failed',
+            detail: `the approval store could not be written: ${describe(attempt.error)}`,
+        };
+    }
+    const grant = attempt.grant;
+    if (!grant.created) {
+        return {
+            ok: true,
+            outcome: 'already-granted',
+            callID,
+            expiresAt: grant.entry.expiresAt,
+        };
+    }
+    // The grant is on file, and the trail is part of the grant: a grant that
+    // nobody can look at afterwards is a grant nobody gave.
+    try {
+        await appendAudit(auditPath(options.stateRoot), {
+            policyId: POLICIES.approveGranted.id,
+            policyVersion: POLICIES.approveGranted.version,
+            actor: options.actor ?? HUMAN,
+            action: 'approve',
+            resource: callID,
+            effect: 'allow',
+            detail: `the grant runs out at ${new Date(grant.entry.expiresAt).toISOString()}`,
+        });
+    }
+    catch (error) {
+        // The grant was written and the trail was not. The grant is taken back,
+        // so a call is never approved and not on the record at the same time.
+        let taken = false;
+        let failure;
+        try {
+            taken = await store.revokeApproval(callID, now);
+        }
+        catch (revokeError) {
+            failure = describe(revokeError);
+        }
+        if (taken) {
+            return {
+                ok: false,
+                outcome: 'audit-failed',
+                detail: `the audit could not be written, so the grant was taken back: ${describe(error)}`,
+            };
+        }
+        return {
+            ok: false,
+            outcome: 'unaudited-grant',
+            detail: `the grant was written to ${store.path} but the audit could not be written: ${describe(error)}. The call is approved and it is not on the record.${failure === undefined ? '' : ` The grant could not be taken back either: ${failure}.`}`,
+        };
+    }
+    return { ok: true, outcome: 'granted', callID, expiresAt: grant.entry.expiresAt };
+}
+/**
+ * Spend a grant: the call passes once, and the use is on the record.
+ *
+ * The store spends the grant under its own lock, so two callers cannot both
+ * pass the same call, and a grant that ran out is never spent. The store
+ * writes the trail of the spend with the agent that made the call, because
+ * the person who granted it is not the one that used it.
+ */
+export async function useApproval(options) {
+    const store = createApprovalStore(options.stateRoot);
+    return store.consumeApproval(options.callID, options.now ?? Date.now(), options.actor);
+}
+/**
+ * The report, as a person reads it.
+ */
+export function formatApproveResult(result) {
+    if (!result.ok)
+        return result.detail;
+    const until = new Date(result.expiresAt).toISOString();
+    if (result.outcome === 'already-granted') {
+        return `${result.callID} is already approved until ${until}. Nothing was changed.`;
+    }
+    return `approved ${result.callID} until ${until}`;
+}
+//# sourceMappingURL=approve.js.map

package/dist/commands/approve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.js","sourceRoot":"","sources":["../../src/commands/approve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAEL,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;GAKG;AACH,SAAS,SAAS,CAAC,SAAiB;IAClC,OAAO,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,KAAK,GAAG,OAAO,CAAC;AAEtB;;;;;GAKG;AACH,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB;;;;;;;;GAQG;AACH,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AA0BvC;;;;;;;;GAQG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,WAAW;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,KAAK,CAAC,GAAW;IACxB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,UAAU;QAAE,OAAO,SAAS,CAAC;IACzE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAOD;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CACtB,KAA6C,EAC7C,MAAc,EACd,GAAW,EACX,KAAa;IAEb,IAAI,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAuB;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,0DAA0D;SACnE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,gDAAgD,UAAU,2CAA2C;SAC9G,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,4CAA4C,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;SAC9E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,iBAAiB;YAC1B,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS;SACjC,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,wDAAwD;IACxD,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;YAC9C,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE;YACpC,aAAa,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO;YAC9C,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;YAC7B,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,yBAAyB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE;SACjF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,sEAAsE;QACtE,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YACrB,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,cAAc;gBACvB,MAAM,EAAE,gEAAgE,QAAQ,CAAC,KAAK,CAAC,EAAE;aAC1F,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,4BAA4B,KAAK,CAAC,IAAI,wCAAwC,QAAQ,CAAC,KAAK,CAAC,sDACnG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,8CAA8C,OAAO,GACpF,EAAE;SACH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;AACpF,CAAC;AAcD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAA2B;IAC3D,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAqB;IACvD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,MAAM,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;QACzC,OAAO,GAAG,MAAM,CAAC,MAAM,8BAA8B,KAAK,wBAAwB,CAAC;IACrF,CAAC;IACD,OAAO,YAAY,MAAM,CAAC,MAAM,UAAU,KAAK,EAAE,CAAC;AACpD,CAAC"}

package/dist/commands/approve.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=approve.test.d.ts.map

package/dist/commands/approve.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.test.d.ts","sourceRoot":"","sources":["../../src/commands/approve.test.ts"],"names":[],"mappings":""}

package/dist/commands/approve.test.js

@@ -0,0 +1,219 @@
+import { mkdir, mkdtemp, readFile, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { approvalGate, createApprovalStore, DEFAULT_APPROVAL_TTL_MS, } from '@openagentsy/hooks';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { formatApproveResult, runApprove, useApproval } from './approve.js';
+let root;
+beforeEach(async () => {
+    root = await mkdtemp(join(tmpdir(), 'openagentsy-approve-'));
+});
+afterEach(async () => {
+    await rm(root, { recursive: true, force: true });
+});
+/** The grants the store holds, as they are written down. */
+async function grants() {
+    const raw = await readFile(join(root, '.openagentsy', 'approvals.json'), 'utf8');
+    return JSON.parse(raw);
+}
+/** The audit lines the project holds. */
+async function audit() {
+    const raw = await readFile(join(root, '.openagentsy', 'audit.jsonl'), 'utf8');
+    return raw
+        .split('\n')
+        .filter((line) => line.length > 0)
+        .map((line) => JSON.parse(line));
+}
+/** The reason a result carries, when it stops the call. */
+function reasonOf(result) {
+    return 'reason' in result ? result.reason : undefined;
+}
+/** Whether a result lets the call through. */
+function continues(result) {
+    return 'continue' in result ? result.continue : true;
+}
+/** The call the gate refuses, with the command it refuses. */
+function destructiveCall(callID) {
+    return {
+        toolName: 'bash',
+        args: {},
+        files: [],
+        command: 'rm -rf /',
+        callID,
+    };
+}
+describe('the approve command', () => {
+    it('grants the call and writes the audit', async () => {
+        const result = await runApprove({ stateRoot: root, callID: 'call-1', now: 1000 });
+        expect(result.ok).toBe(true);
+        expect(result.outcome).toBe('granted');
+        expect(await grants()).toEqual([
+            { callID: 'call-1', expiresAt: 1000 + DEFAULT_APPROVAL_TTL_MS },
+        ]);
+        const lines = await audit();
+        expect(lines).toHaveLength(1);
+        expect(lines[0]).toMatchObject({
+            policyId: 'oa.approve.granted',
+            policyVersion: 'v1',
+            actor: 'human',
+            action: 'approve',
+            resource: 'call-1',
+            effect: 'allow',
+        });
+    });
+    it('reports what it granted and when it runs out', async () => {
+        const result = await runApprove({ stateRoot: root, callID: 'call-1', now: 1000 });
+        expect(formatApproveResult(result)).toBe(`approved call-1 until ${new Date(1000 + DEFAULT_APPROVAL_TTL_MS).toISOString()}`);
+    });
+    it('reports a call that is already granted and writes nothing twice', async () => {
+        await runApprove({ stateRoot: root, callID: 'call-1', now: 1000 });
+        const second = await runApprove({ stateRoot: root, callID: 'call-1', now: 2000 });
+        expect(second.ok).toBe(true);
+        expect(second.outcome).toBe('already-granted');
+        // The grant that is there keeps the expiry it has.
+        expect(await grants()).toEqual([
+            { callID: 'call-1', expiresAt: 1000 + DEFAULT_APPROVAL_TTL_MS },
+        ]);
+        expect(formatApproveResult(second)).toContain(new Date(1000 + DEFAULT_APPROVAL_TTL_MS).toISOString());
+        const lines = await audit();
+        expect(lines.filter((line) => line.policyId === 'oa.approve.granted')).toHaveLength(1);
+    });
+    it('grants a call once when many people approve it at the same time', async () => {
+        const results = await Promise.all([
+            runApprove({ stateRoot: root, callID: 'call-1', now: 1000 }),
+            runApprove({ stateRoot: root, callID: 'call-1', now: 1000 }),
+            runApprove({ stateRoot: root, callID: 'call-1', now: 1000 }),
+            runApprove({ stateRoot: root, callID: 'call-1', now: 1000 }),
+        ]);
+        expect(results.filter((result) => result.outcome === 'granted')).toHaveLength(1);
+        expect(await grants()).toHaveLength(1);
+        const lines = await audit();
+        expect(lines.filter((line) => line.policyId === 'oa.approve.granted')).toHaveLength(1);
+    });
+    it('refuses a command with no call id', async () => {
+        const result = await runApprove({ stateRoot: root });
+        expect(result.ok).toBe(false);
+        expect(result.outcome).toBe('no-call-id');
+        expect(formatApproveResult(result)).toContain('/oa approve <callID>');
+    });
+    it('refuses an argument that is not a call id', async () => {
+        const result = await runApprove({ stateRoot: root, callID: 'rm -rf /' });
+        expect(result.ok).toBe(false);
+        expect(result.outcome).toBe('no-call-id');
+        expect(formatApproveResult(result)).toContain('/oa approve <callID>');
+    });
+    it('refuses an argument that names a path', async () => {
+        for (const callID of ['a/../../b', '..', 'call/1', 'call\\1']) {
+            const result = await runApprove({ stateRoot: root, callID });
+            expect(result.ok, callID).toBe(false);
+            expect(result.outcome, callID).toBe('no-call-id');
+        }
+    });
+    it('refuses a ttl that is not a number of milliseconds', async () => {
+        const result = await runApprove({ stateRoot: root, callID: 'call-1', ttl: 'soon' });
+        expect(result.ok).toBe(false);
+        expect(result.outcome).toBe('bad-ttl');
+        expect(formatApproveResult(result)).toContain('--ttl <ms>');
+    });
+    it('refuses a ttl that is longer than a day', async () => {
+        const result = await runApprove({ stateRoot: root, callID: 'call-1', ttl: '86400001' });
+        expect(result.ok).toBe(false);
+        expect(result.outcome).toBe('bad-ttl');
+        expect(formatApproveResult(result)).toContain('86400000');
+    });
+    it('refuses a ttl so long that the grant would never run out', async () => {
+        const result = await runApprove({ stateRoot: root, callID: 'call-x', ttl: '9'.repeat(60) });
+        expect(result.ok).toBe(false);
+        expect(result.outcome).toBe('bad-ttl');
+        // Nothing was written: no grant on file, and no trail.
+        await expect(readFile(join(root, '.openagentsy', 'approvals.json'), 'utf8')).rejects.toThrow();
+        await expect(readFile(join(root, '.openagentsy', 'audit.jsonl'), 'utf8')).rejects.toThrow();
+    });
+    it('grants a call for the ttl the person asked for', async () => {
+        await runApprove({ stateRoot: root, callID: 'call-1', ttl: '60000', now: 1000 });
+        expect(await grants()).toEqual([{ callID: 'call-1', expiresAt: 61_000 }]);
+    });
+    it('takes the grant back when the audit cannot be written', async () => {
+        // The audit log is a directory, so nothing can be written to it.
+        await mkdir(join(root, '.openagentsy', 'audit.jsonl'), { recursive: true });
+        const result = await runApprove({ stateRoot: root, callID: 'call-1', now: 1000 });
+        expect(result.ok).toBe(false);
+        expect(result.outcome).toBe('audit-failed');
+        // The grant was taken back, so the call is not approved.
+        expect(await grants()).toEqual([]);
+    });
+});
+describe('the one-shot approval', () => {
+    it('lets the granted call through exactly once and refuses the second attempt', async () => {
+        await runApprove({ stateRoot: root, callID: 'call-7', now: 1000 });
+        const store = createApprovalStore(root);
+        const gate = approvalGate(/rm\s+-rf/, store, () => 2000);
+        const first = await gate(destructiveCall('call-7'));
+        expect(continues(first)).toBe(true);
+        expect(await grants()).toEqual([]);
+        const second = await gate(destructiveCall('call-7'));
+        expect(continues(second)).toBe(false);
+        expect(reasonOf(second)).toContain('/oa approve <callID>');
+    });
+    it('writes the trail of the spend when the gate lets a call through', async () => {
+        await runApprove({ stateRoot: root, callID: 'call-7', now: 1000 });
+        const store = createApprovalStore(root);
+        const gate = approvalGate(/rm\s+-rf/, store, () => 2000);
+        const result = await gate(destructiveCall('call-7'));
+        expect(continues(result)).toBe(true);
+        const lines = await audit();
+        const used = lines.filter((line) => line.policyId === 'oa.approve.used');
+        expect(used).toHaveLength(1);
+        expect(used[0]).toMatchObject({
+            policyId: 'oa.approve.used',
+            policyVersion: 'v1',
+            action: 'approve_use',
+            resource: 'call-7',
+            effect: 'allow',
+        });
+    });
+    it('spends the grant once and audits the use', async () => {
+        await runApprove({ stateRoot: root, callID: 'call-7', now: 1000 });
+        const spent = await useApproval({
+            stateRoot: root,
+            callID: 'call-7',
+            actor: 'oa-builder',
+            now: 2000,
+        });
+        expect(spent).toBe(true);
+        expect(await grants()).toEqual([]);
+        const lines = await audit();
+        const used = lines.filter((line) => line.policyId === 'oa.approve.used');
+        expect(used).toHaveLength(1);
+        expect(used[0]).toMatchObject({
+            policyId: 'oa.approve.used',
+            policyVersion: 'v1',
+            actor: 'oa-builder',
+            action: 'approve_use',
+            resource: 'call-7',
+            effect: 'allow',
+        });
+    });
+    it('refuses a second use of the same grant', async () => {
+        await runApprove({ stateRoot: root, callID: 'call-7', now: 1000 });
+        await useApproval({ stateRoot: root, callID: 'call-7', actor: 'oa-builder', now: 2000 });
+        const again = await useApproval({
+            stateRoot: root,
+            callID: 'call-7',
+            actor: 'oa-builder',
+            now: 2000,
+        });
+        expect(again).toBe(false);
+        const lines = await audit();
+        expect(lines.filter((line) => line.policyId === 'oa.approve.used')).toHaveLength(1);
+    });
+    it('never passes a grant that ran out', async () => {
+        await runApprove({ stateRoot: root, callID: 'call-7', ttl: '500', now: 1000 });
+        const store = createApprovalStore(root);
+        const gate = approvalGate(/rm\s+-rf/, store, () => 2000);
+        const result = await gate(destructiveCall('call-7'));
+        expect(continues(result)).toBe(false);
+        expect(await useApproval({ stateRoot: root, callID: 'call-7', actor: 'oa-builder', now: 2000 })).toBe(false);
+    });
+});
+//# sourceMappingURL=approve.test.js.map

package/dist/commands/approve.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.test.js","sourceRoot":"","sources":["../../src/commands/approve.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,uBAAuB,GAExB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE5E,IAAI,IAAY,CAAC;AAEjB,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAaH,4DAA4D;AAC5D,KAAK,UAAU,MAAM;IACnB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC;IACjF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4C,CAAC;AACpE,CAAC;AAED,yCAAyC;AACzC,KAAK,UAAU,KAAK;IAClB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9E,OAAO,GAAG;SACP,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACjC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC,CAAC;AAClD,CAAC;AAED,2DAA2D;AAC3D,SAAS,QAAQ,CAAC,MAAqB;IACrC,OAAO,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,8CAA8C;AAC9C,SAAS,SAAS,CAAC,MAAqB;IACtC,OAAO,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,8DAA8D;AAC9D,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO;QACL,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,EAAE;QACR,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,UAAU;QACnB,MAAM;KACP,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAElF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;YAC7B,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,GAAG,uBAAuB,EAAE;SAChE,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC7B,QAAQ,EAAE,oBAAoB;YAC9B,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAElF,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CACtC,yBAAyB,IAAI,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC,CAAC,WAAW,EAAE,EAAE,CAClF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAElF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/C,mDAAmD;QACnD,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;YAC7B,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,GAAG,uBAAuB,EAAE;SAChE,CAAC,CAAC;QACH,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAC3C,IAAI,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC,CAAC,WAAW,EAAE,CACvD,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;YAC5D,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;YAC5D,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;YAC5D,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;SAC7D,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAErD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAEzE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,KAAK,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;YAC9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAE7D,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAEpF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QAExF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAE5F,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,uDAAuD;QACvD,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/F,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjF,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,iEAAiE;QACjE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAElF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5C,yDAAyD;QACzD,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAEnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QAErD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,iBAAiB,CAAC,CAAC;QACzE,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC5B,QAAQ,EAAE,iBAAiB;YAC3B,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnE,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC;YAC9B,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,IAAI;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,iBAAiB,CAAC,CAAC;QACzE,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC5B,QAAQ,EAAE,iBAAiB;YAC3B,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC;YAC9B,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,IAAI;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QAErD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CACJ,MAAM,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CACzF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}