@warlock.js/ai-workspace 5.43.0 → 5.44.0

package/esm/policy/policy.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"policy.mjs","names":[],"sources":["../../../../../../../../packages/ai-workspace/src/policy/policy.ts"],"sourcesContent":["import path from \"node:path\";\nimport { realpath } from \"node:fs/promises\";\nimport { WorkspacePolicyError } from \"../errors\";\nimport type { WorkspacePolicy } from \"../contracts\";\nimport { isInside, matchesAnyGlob } from \"./jail\";\nimport { checkShellCommand } from \"./shell-check\";\n\n/**\n * The outcome of resolving a workspace-relative (or absolute) input path\n * against the jail — the canonical absolute location the backend should\n * touch, plus the workspace-relative form (POSIX-style, `/`-separated)\n * the agent and tool results echo back.\n */\nexport interface ResolvedPath {\n  /** Canonical absolute path (symlinks in existing ancestors collapsed). */\n  absolutePath: string;\n  /**\n   * The path relative to `policy.cwd`, `/`-separated regardless of OS,\n   * used in tool results so the agent always sees stable workspace paths.\n   * Empty string when the resolved path IS the jail root.\n   */\n  relativePath: string;\n}\n\n/**\n * Resolve the canonical absolute form of `target`, collapsing any\n * symlinks. `target` may not yet exist (a fresh `writeFile`/`mkdir`),\n * so we realpath the deepest **existing** ancestor and re-attach the\n * non-existent tail — a symlinked ancestor still cannot smuggle the\n * path out of the jail, while genuinely new leaves stay creatable.\n */\nasync function canonicalize(target: string): Promise<string> {\n  let resolvedTarget = path.resolve(target);\n  const tail: string[] = [];\n\n  // Walk up until an existing ancestor is found (or we hit the root).\n  // eslint-disable-next-line no-constant-condition\n  while (true) {\n    try {\n      const real = await realpath(resolvedTarget);\n\n      return tail.length > 0 ? path.join(real, ...tail) : real;\n    } catch (error) {\n      const code = (error as NodeJS.ErrnoException).code;\n\n      // Only ENOENT means \"this segment doesn't exist yet\" — keep\n      // walking up. Any other error (EACCES, ELOOP, …) is a real fault.\n      if (code !== \"ENOENT\") {\n        throw error;\n      }\n\n      const parent = path.dirname(resolvedTarget);\n\n      // Reached the filesystem root without finding an existing\n      // ancestor — give back the lexically-resolved path unchanged.\n      if (parent === resolvedTarget) {\n        return path.join(resolvedTarget, ...tail);\n      }\n\n      tail.unshift(path.basename(resolvedTarget));\n      resolvedTarget = parent;\n    }\n  }\n}\n\n/**\n * Resolve and jail a single input path against a {@link WorkspacePolicy}.\n *\n * The input is resolved against `policy.cwd`, canonicalized (symlinks in\n * existing ancestors collapsed so a symlinked directory cannot escape\n * the jail), then accepted **only** when it sits under `cwd` or one of\n * the `allowPaths` roots. A path that escapes, or that matches any\n * `denyPaths` glob even while inside `cwd`, is rejected with a\n * {@link WorkspacePolicyError} of type `\"path-escape\"`.\n *\n * Why this does not use `@warlock.js/fs`'s confined reader (`fs.confined`):\n * the two answer different questions. The confined reader refuses absolute\n * paths, refuses every symbolic link (or follows only links inside its one\n * root), requires the path to exist, and reads the file itself through a\n * no-follow, identity-checked open. This jail must instead accept absolute\n * paths inside `cwd`, several `allowPaths` roots, `denyPaths` globs, a\n * symlinked `cwd`, links whose target stays inside, and paths that do not\n * exist yet (`writeFile`, `mkdir`), and it returns a path that writes,\n * `exec`'s working directory and redirections use afterwards. Switching would\n * change what agents may touch, so the workspace keeps this resolver.\n *\n * @param policy - The bounding policy (its `cwd` is the jail root).\n * @param inputPath - A workspace-relative or absolute path to resolve.\n * @returns The canonical absolute path plus its `/`-separated relative form.\n * @throws {WorkspacePolicyError} When the path escapes the jail or hits a deny glob.\n *\n * @example\n * const { absolutePath } = await resolveInJail(policy, \"src/index.ts\");\n */\nexport async function resolveInJail(\n  policy: WorkspacePolicy,\n  inputPath: string,\n): Promise<ResolvedPath> {\n  const jailRoot = await canonicalize(policy.cwd);\n  const requested = path.isAbsolute(inputPath) ? inputPath : path.join(policy.cwd, inputPath);\n  const absolutePath = await canonicalize(requested);\n\n  const insideCwd = isInside(absolutePath, jailRoot);\n  const allowRoots = policy.allowPaths ?? [];\n  let insideAllow = false;\n\n  if (!insideCwd) {\n    for (const root of allowRoots) {\n      const canonicalRoot = await canonicalize(root);\n\n      if (isInside(absolutePath, canonicalRoot)) {\n        insideAllow = true;\n\n        break;\n      }\n    }\n  }\n\n  if (!insideCwd && !insideAllow) {\n    throw new WorkspacePolicyError(`Path \"${inputPath}\" resolves outside the workspace jail.`, {\n      type: \"path-escape\",\n      path: inputPath,\n    });\n  }\n\n  // `denyPaths` is evaluated relative to the jail root and wins even\n  // when the path is comfortably inside `cwd`.\n  const relativeToJail = insideCwd\n    ? path.relative(jailRoot, absolutePath).split(path.sep).join(\"/\")\n    : \"\";\n\n  if (insideCwd && policy.denyPaths && policy.denyPaths.length > 0) {\n    if (matchesAnyGlob(relativeToJail, policy.denyPaths)) {\n      throw new WorkspacePolicyError(`Path \"${inputPath}\" is blocked by the workspace deny list.`, {\n        type: \"path-escape\",\n        path: inputPath,\n      });\n    }\n  }\n\n  return { absolutePath, relativePath: relativeToJail };\n}\n\n/**\n * Whether a command line is permitted by the policy's `shell` sub-policy —\n * `checkShellCommand(policy, command).allowed`.\n *\n * In argv mode (the default) the command must tokenize into a single argv\n * (no unquoted `;`, `&&`, `|`, backticks, `$`, redirection, …): the backend\n * spawns it with no shell, and unquoted metacharacters were exactly how an\n * injected command chain used to ride past the allowlist. In shell mode\n * (`interpreter: \"sh\"`) every simple command in the line is checked. Each\n * argv's executable basename is matched against `shell.deny` (wins, case\n * insensitive) then `shell.allow` (exhaustive when non-empty), then\n * `shell.denyPatterns` and `shell.allowCommand`. An absent `shell` block\n * means no command may run at all.\n *\n * Returns a plain `boolean`; use {@link checkShellCommand} for the reason\n * and the model-facing message. Redirection targets are checked lexically\n * here; `exec` re-checks them with symlinks resolved.\n *\n * @example\n * isCommandAllowed({ cwd, shell: { allow: [\"npm\"] } }, \"npm test\"); // true\n * isCommandAllowed({ cwd, shell: { allow: [\"npm\"] } }, \"rm -rf /\"); // false\n * isCommandAllowed({ cwd, shell: { allow: [\"npm\"] } }, \"npm test; rm -rf /\"); // false\n */\nexport function isCommandAllowed(policy: WorkspacePolicy, command: string): boolean {\n  return checkShellCommand(policy, command).allowed;\n}\n\n/**\n * Build the exact environment a spawned process receives — `process.env`\n * is **never** inherited wholesale. The result is\n * `{ ...pick(process.env, inheritEnv), ...shell.env }`, so a command\n * cannot see `PATH` (and thus often cannot find `node`/`npm`) unless the\n * policy opts in via `shell.inheritEnv: [\"PATH\"]`. Explicit `shell.env`\n * values override inherited ones on key collision.\n *\n * @example\n * buildEnv({ cwd, shell: { inheritEnv: [\"PATH\"], env: { CI: \"1\" } } });\n * // → { PATH: <process PATH>, CI: \"1\" }\n */\nexport function buildEnv(policy: WorkspacePolicy): Record<string, string> {\n  const shell = policy.shell;\n  const env: Record<string, string> = {};\n\n  if (!shell) {\n    return env;\n  }\n\n  for (const key of shell.inheritEnv ?? []) {\n    const value = process.env[key];\n\n    if (value !== undefined) {\n      env[key] = value;\n    }\n  }\n\n  if (shell.env) {\n    for (const [key, value] of Object.entries(shell.env)) {\n      env[key] = value;\n    }\n  }\n\n  return env;\n}\n\n/**\n * Variables removed from the environment of a shell-mode (`interpreter:\n * \"sh\"`) command: each changes how the shell itself starts, parses or\n * resolves the line (`ENV`/`BASH_ENV` run a startup file, `SHELLOPTS` +\n * `PS4` can run command substitutions, `BASH_FUNC_*` imports functions that\n * shadow commands, `CDPATH` moves `cd`, `IFS` re-splits words).\n */\nconst SHELL_STARTUP_VARIABLES = new Set([\n  \"ENV\",\n  \"BASH_ENV\",\n  \"SHELLOPTS\",\n  \"BASHOPTS\",\n  \"CDPATH\",\n  \"IFS\",\n  \"PS4\",\n  \"GLOBIGNORE\",\n]);\n\n/**\n * The environment a command actually receives: {@link buildEnv}, minus the\n * shell start-up variables when the policy runs lines through a shell.\n * Compared case-insensitively, because Windows environment names are.\n */\nexport function buildCommandEnv(policy: WorkspacePolicy): Record<string, string> {\n  const env = buildEnv(policy);\n\n  if ((policy.shell?.interpreter ?? \"none\") !== \"sh\") {\n    return env;\n  }\n\n  for (const key of Object.keys(env)) {\n    const upper = key.toUpperCase();\n\n    if (SHELL_STARTUP_VARIABLES.has(upper) || upper.startsWith(\"BASH_FUNC_\")) {\n      delete env[key];\n    }\n  }\n\n  return env;\n}\n"],"mappings":";;;;;;;;;;;;;;AA+BA,eAAe,aAAa,QAAiC;CAC3D,IAAI,iBAAiB,KAAK,QAAQ,MAAM;CACxC,MAAM,OAAiB,CAAC;CAIxB,OAAO,MACL,IAAI;EACF,MAAM,OAAO,MAAM,SAAS,cAAc;EAE1C,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,GAAG,IAAI,IAAI;CACtD,SAAS,OAAO;EAKd,IAJc,MAAgC,SAIjC,UACX,MAAM;EAGR,MAAM,SAAS,KAAK,QAAQ,cAAc;EAI1C,IAAI,WAAW,gBACb,OAAO,KAAK,KAAK,gBAAgB,GAAG,IAAI;EAG1C,KAAK,QAAQ,KAAK,SAAS,cAAc,CAAC;EAC1C,iBAAiB;CACnB;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,eAAsB,cACpB,QACA,WACuB;CACvB,MAAM,WAAW,MAAM,aAAa,OAAO,GAAG;CAE9C,MAAM,eAAe,MAAM,aADT,KAAK,WAAW,SAAS,IAAI,YAAY,KAAK,KAAK,OAAO,KAAK,SAAS,CACzC;CAEjD,MAAM,YAAY,SAAS,cAAc,QAAQ;CACjD,MAAM,aAAa,OAAO,cAAc,CAAC;CACzC,IAAI,cAAc;CAElB,IAAI,CAAC,WACH,KAAK,MAAM,QAAQ,YAAY;EAC7B,MAAM,gBAAgB,MAAM,aAAa,IAAI;EAE7C,IAAI,SAAS,cAAc,aAAa,GAAG;GACzC,cAAc;GAEd;EACF;CACF;CAGF,IAAI,CAAC,aAAa,CAAC,aACjB,MAAM,IAAI,qBAAqB,SAAS,UAAU,yCAAyC;EACzF,MAAM;EACN,MAAM;CACR,CAAC;CAKH,MAAM,iBAAiB,YACnB,KAAK,SAAS,UAAU,YAAY,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,IAC9D;CAEJ,IAAI,aAAa,OAAO,aAAa,OAAO,UAAU,SAAS,GAC7D;MAAI,eAAe,gBAAgB,OAAO,SAAS,GACjD,MAAM,IAAI,qBAAqB,SAAS,UAAU,2CAA2C;GAC3F,MAAM;GACN,MAAM;EACR,CAAC;CACH;CAGF,OAAO;EAAE;EAAc,cAAc;CAAe;AACtD;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,SAAgB,iBAAiB,QAAyB,SAA0B;CAClF,OAAO,kBAAkB,QAAQ,OAAO,CAAC,CAAC;AAC5C;;;;;;;;;;;;;AAcA,SAAgB,SAAS,QAAiD;CACxE,MAAM,QAAQ,OAAO;CACrB,MAAM,MAA8B,CAAC;CAErC,IAAI,CAAC,OACH,OAAO;CAGT,KAAK,MAAM,OAAO,MAAM,cAAc,CAAC,GAAG;EACxC,MAAM,QAAQ,QAAQ,IAAI;EAE1B,IAAI,UAAU,QACZ,IAAI,OAAO;CAEf;CAEA,IAAI,MAAM,KACR,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,GAAG,GACjD,IAAI,OAAO;CAIf,OAAO;AACT;;;;;;;;AASA,MAAM,0CAA0B,IAAI,IAAI;CACtC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;AAOD,SAAgB,gBAAgB,QAAiD;CAC/E,MAAM,MAAM,SAAS,MAAM;CAE3B,KAAK,OAAO,OAAO,eAAe,YAAY,MAC5C,OAAO;CAGT,KAAK,MAAM,OAAO,OAAO,KAAK,GAAG,GAAG;EAClC,MAAM,QAAQ,IAAI,YAAY;EAE9B,IAAI,wBAAwB,IAAI,KAAK,KAAK,MAAM,WAAW,YAAY,GACrE,OAAO,IAAI;CAEf;CAEA,OAAO;AACT"}
+{"version":3,"file":"policy.mjs","names":[],"sources":["../../../../../../../../packages/ai-workspace/src/policy/policy.ts"],"sourcesContent":["import path from \"node:path\";\nimport { realpath } from \"node:fs/promises\";\nimport { WorkspacePolicyError } from \"../errors\";\nimport type { WorkspacePolicy } from \"../contracts\";\nimport { isInside, matchesAnyGlob } from \"./jail\";\nimport { resolveSpillDir } from \"../output/spill-dir\";\nimport { checkShellCommand } from \"./shell-check\";\n\n/**\n * The outcome of resolving a workspace-relative (or absolute) input path\n * against the jail — the canonical absolute location the backend should\n * touch, plus the workspace-relative form (POSIX-style, `/`-separated)\n * the agent and tool results echo back.\n */\nexport interface ResolvedPath {\n  /** Canonical absolute path (symlinks in existing ancestors collapsed). */\n  absolutePath: string;\n  /**\n   * The path relative to `policy.cwd`, `/`-separated regardless of OS,\n   * used in tool results so the agent always sees stable workspace paths.\n   * Empty string when the resolved path IS the jail root.\n   */\n  relativePath: string;\n}\n\n/**\n * Resolve the canonical absolute form of `target`, collapsing any\n * symlinks. `target` may not yet exist (a fresh `writeFile`/`mkdir`),\n * so we realpath the deepest **existing** ancestor and re-attach the\n * non-existent tail — a symlinked ancestor still cannot smuggle the\n * path out of the jail, while genuinely new leaves stay creatable.\n */\nasync function canonicalize(target: string): Promise<string> {\n  let resolvedTarget = path.resolve(target);\n  const tail: string[] = [];\n\n  // Walk up until an existing ancestor is found (or we hit the root).\n  // eslint-disable-next-line no-constant-condition\n  while (true) {\n    try {\n      const real = await realpath(resolvedTarget);\n\n      return tail.length > 0 ? path.join(real, ...tail) : real;\n    } catch (error) {\n      const code = (error as NodeJS.ErrnoException).code;\n\n      // Only ENOENT means \"this segment doesn't exist yet\" — keep\n      // walking up. Any other error (EACCES, ELOOP, …) is a real fault.\n      if (code !== \"ENOENT\") {\n        throw error;\n      }\n\n      const parent = path.dirname(resolvedTarget);\n\n      // Reached the filesystem root without finding an existing\n      // ancestor — give back the lexically-resolved path unchanged.\n      if (parent === resolvedTarget) {\n        return path.join(resolvedTarget, ...tail);\n      }\n\n      tail.unshift(path.basename(resolvedTarget));\n      resolvedTarget = parent;\n    }\n  }\n}\n\n/**\n * Resolve and jail a single input path against a {@link WorkspacePolicy}.\n *\n * The input is resolved against `policy.cwd`, canonicalized (symlinks in\n * existing ancestors collapsed so a symlinked directory cannot escape\n * the jail), then accepted **only** when it sits under `cwd` or one of\n * the `allowPaths` roots. A path that escapes, or that matches any\n * `denyPaths` glob even while inside `cwd`, is rejected with a\n * {@link WorkspacePolicyError} of type `\"path-escape\"`.\n *\n * Why this does not use `@warlock.js/fs`'s confined reader (`fs.confined`):\n * the two answer different questions. The confined reader refuses absolute\n * paths, refuses every symbolic link (or follows only links inside its one\n * root), requires the path to exist, and reads the file itself through a\n * no-follow, identity-checked open. This jail must instead accept absolute\n * paths inside `cwd`, several `allowPaths` roots, `denyPaths` globs, a\n * symlinked `cwd`, links whose target stays inside, and paths that do not\n * exist yet (`writeFile`, `mkdir`), and it returns a path that writes,\n * `exec`'s working directory and redirections use afterwards. Switching would\n * change what agents may touch, so the workspace keeps this resolver.\n *\n * @param policy - The bounding policy (its `cwd` is the jail root).\n * @param inputPath - A workspace-relative or absolute path to resolve.\n * @param access - `\"read\"` also accepts the `output.spillDir` directory (only\n *   `readFile` asks for it); `\"write\"` (default) never does.\n * @returns The canonical absolute path plus its `/`-separated relative form.\n * @throws {WorkspacePolicyError} When the path escapes the jail or hits a deny glob.\n *\n * @example\n * const { absolutePath } = await resolveInJail(policy, \"src/index.ts\");\n */\nexport async function resolveInJail(\n  policy: WorkspacePolicy,\n  inputPath: string,\n  access: \"read\" | \"write\" = \"write\",\n): Promise<ResolvedPath> {\n  const jailRoot = await canonicalize(policy.cwd);\n  const requested = path.isAbsolute(inputPath) ? inputPath : path.join(policy.cwd, inputPath);\n  const absolutePath = await canonicalize(requested);\n\n  const insideCwd = isInside(absolutePath, jailRoot);\n  const allowRoots = policy.allowPaths ?? [];\n  let insideAllow = false;\n\n  if (!insideCwd) {\n    for (const root of allowRoots) {\n      const canonicalRoot = await canonicalize(root);\n\n      if (isInside(absolutePath, canonicalRoot)) {\n        insideAllow = true;\n\n        break;\n      }\n    }\n  }\n\n  const spillDir = access === \"read\" && !insideCwd ? resolveSpillDir(policy) : undefined;\n\n  if (spillDir !== undefined && isInside(absolutePath, await canonicalize(spillDir))) {\n    return { absolutePath, relativePath: \"\" };\n  }\n\n  if (!insideCwd && !insideAllow) {\n    throw new WorkspacePolicyError(`Path \"${inputPath}\" resolves outside the workspace jail.`, {\n      type: \"path-escape\",\n      path: inputPath,\n    });\n  }\n\n  // `denyPaths` is evaluated relative to the jail root and wins even\n  // when the path is comfortably inside `cwd`.\n  const relativeToJail = insideCwd\n    ? path.relative(jailRoot, absolutePath).split(path.sep).join(\"/\")\n    : \"\";\n\n  if (insideCwd && policy.denyPaths && policy.denyPaths.length > 0) {\n    if (matchesAnyGlob(relativeToJail, policy.denyPaths)) {\n      throw new WorkspacePolicyError(`Path \"${inputPath}\" is blocked by the workspace deny list.`, {\n        type: \"path-escape\",\n        path: inputPath,\n      });\n    }\n  }\n\n  return { absolutePath, relativePath: relativeToJail };\n}\n\n/**\n * Whether a command line is permitted by the policy's `shell` sub-policy —\n * `checkShellCommand(policy, command).allowed`.\n *\n * In argv mode (the default) the command must tokenize into a single argv\n * (no unquoted `;`, `&&`, `|`, backticks, `$`, redirection, …): the backend\n * spawns it with no shell, and unquoted metacharacters were exactly how an\n * injected command chain used to ride past the allowlist. In shell mode\n * (`interpreter: \"sh\"`) every simple command in the line is checked. Each\n * argv's executable basename is matched against `shell.deny` (wins, case\n * insensitive) then `shell.allow` (exhaustive when non-empty), then\n * `shell.denyPatterns` and `shell.allowCommand`. An absent `shell` block\n * means no command may run at all.\n *\n * Returns a plain `boolean`; use {@link checkShellCommand} for the reason\n * and the model-facing message. Redirection targets are checked lexically\n * here; `exec` re-checks them with symlinks resolved.\n *\n * @example\n * isCommandAllowed({ cwd, shell: { allow: [\"npm\"] } }, \"npm test\"); // true\n * isCommandAllowed({ cwd, shell: { allow: [\"npm\"] } }, \"rm -rf /\"); // false\n * isCommandAllowed({ cwd, shell: { allow: [\"npm\"] } }, \"npm test; rm -rf /\"); // false\n */\nexport function isCommandAllowed(policy: WorkspacePolicy, command: string): boolean {\n  return checkShellCommand(policy, command).allowed;\n}\n\n/**\n * Build the exact environment a spawned process receives — `process.env`\n * is **never** inherited wholesale. The result is\n * `{ ...pick(process.env, inheritEnv), ...shell.env }`, so a command\n * cannot see `PATH` (and thus often cannot find `node`/`npm`) unless the\n * policy opts in via `shell.inheritEnv: [\"PATH\"]`. Explicit `shell.env`\n * values override inherited ones on key collision.\n *\n * @example\n * buildEnv({ cwd, shell: { inheritEnv: [\"PATH\"], env: { CI: \"1\" } } });\n * // → { PATH: <process PATH>, CI: \"1\" }\n */\nexport function buildEnv(policy: WorkspacePolicy): Record<string, string> {\n  const shell = policy.shell;\n  const env: Record<string, string> = {};\n\n  if (!shell) {\n    return env;\n  }\n\n  for (const key of shell.inheritEnv ?? []) {\n    const value = process.env[key];\n\n    if (value !== undefined) {\n      env[key] = value;\n    }\n  }\n\n  if (shell.env) {\n    for (const [key, value] of Object.entries(shell.env)) {\n      env[key] = value;\n    }\n  }\n\n  return env;\n}\n\n/**\n * Variables removed from the environment of a shell-mode (`interpreter`\n * other than `\"none\"`) command: each changes how the shell itself starts, parses or\n * resolves the line (`ENV`/`BASH_ENV` run a startup file, `SHELLOPTS` +\n * `PS4` can run command substitutions, `BASH_FUNC_*` imports functions that\n * shadow commands, `CDPATH` moves `cd`, `IFS` re-splits words).\n */\nconst SHELL_STARTUP_VARIABLES = new Set([\n  \"ENV\",\n  \"BASH_ENV\",\n  \"SHELLOPTS\",\n  \"BASHOPTS\",\n  \"CDPATH\",\n  \"IFS\",\n  \"PS4\",\n  \"GLOBIGNORE\",\n]);\n\n/**\n * The environment a command actually receives: {@link buildEnv}, minus the\n * shell start-up variables when the policy runs lines through a shell.\n * Compared case-insensitively, because Windows environment names are.\n */\nexport function buildCommandEnv(policy: WorkspacePolicy): Record<string, string> {\n  const env = buildEnv(policy);\n\n  if ((policy.shell?.interpreter ?? \"none\") === \"none\") {\n    return env;\n  }\n\n  for (const key of Object.keys(env)) {\n    const upper = key.toUpperCase();\n\n    if (SHELL_STARTUP_VARIABLES.has(upper) || upper.startsWith(\"BASH_FUNC_\")) {\n      delete env[key];\n    }\n  }\n\n  return env;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAgCA,eAAe,aAAa,QAAiC;CAC3D,IAAI,iBAAiB,KAAK,QAAQ,MAAM;CACxC,MAAM,OAAiB,CAAC;CAIxB,OAAO,MACL,IAAI;EACF,MAAM,OAAO,MAAM,SAAS,cAAc;EAE1C,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,GAAG,IAAI,IAAI;CACtD,SAAS,OAAO;EAKd,IAJc,MAAgC,SAIjC,UACX,MAAM;EAGR,MAAM,SAAS,KAAK,QAAQ,cAAc;EAI1C,IAAI,WAAW,gBACb,OAAO,KAAK,KAAK,gBAAgB,GAAG,IAAI;EAG1C,KAAK,QAAQ,KAAK,SAAS,cAAc,CAAC;EAC1C,iBAAiB;CACnB;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,eAAsB,cACpB,QACA,WACA,SAA2B,SACJ;CACvB,MAAM,WAAW,MAAM,aAAa,OAAO,GAAG;CAE9C,MAAM,eAAe,MAAM,aADT,KAAK,WAAW,SAAS,IAAI,YAAY,KAAK,KAAK,OAAO,KAAK,SAAS,CACzC;CAEjD,MAAM,YAAY,SAAS,cAAc,QAAQ;CACjD,MAAM,aAAa,OAAO,cAAc,CAAC;CACzC,IAAI,cAAc;CAElB,IAAI,CAAC,WACH,KAAK,MAAM,QAAQ,YAAY;EAC7B,MAAM,gBAAgB,MAAM,aAAa,IAAI;EAE7C,IAAI,SAAS,cAAc,aAAa,GAAG;GACzC,cAAc;GAEd;EACF;CACF;CAGF,MAAM,WAAW,WAAW,UAAU,CAAC,YAAY,gBAAgB,MAAM,IAAI;CAE7E,IAAI,aAAa,UAAa,SAAS,cAAc,MAAM,aAAa,QAAQ,CAAC,GAC/E,OAAO;EAAE;EAAc,cAAc;CAAG;CAG1C,IAAI,CAAC,aAAa,CAAC,aACjB,MAAM,IAAI,qBAAqB,SAAS,UAAU,yCAAyC;EACzF,MAAM;EACN,MAAM;CACR,CAAC;CAKH,MAAM,iBAAiB,YACnB,KAAK,SAAS,UAAU,YAAY,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,IAC9D;CAEJ,IAAI,aAAa,OAAO,aAAa,OAAO,UAAU,SAAS,GAC7D;MAAI,eAAe,gBAAgB,OAAO,SAAS,GACjD,MAAM,IAAI,qBAAqB,SAAS,UAAU,2CAA2C;GAC3F,MAAM;GACN,MAAM;EACR,CAAC;CACH;CAGF,OAAO;EAAE;EAAc,cAAc;CAAe;AACtD;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,SAAgB,iBAAiB,QAAyB,SAA0B;CAClF,OAAO,kBAAkB,QAAQ,OAAO,CAAC,CAAC;AAC5C;;;;;;;;;;;;;AAcA,SAAgB,SAAS,QAAiD;CACxE,MAAM,QAAQ,OAAO;CACrB,MAAM,MAA8B,CAAC;CAErC,IAAI,CAAC,OACH,OAAO;CAGT,KAAK,MAAM,OAAO,MAAM,cAAc,CAAC,GAAG;EACxC,MAAM,QAAQ,QAAQ,IAAI;EAE1B,IAAI,UAAU,QACZ,IAAI,OAAO;CAEf;CAEA,IAAI,MAAM,KACR,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,GAAG,GACjD,IAAI,OAAO;CAIf,OAAO;AACT;;;;;;;;AASA,MAAM,0CAA0B,IAAI,IAAI;CACtC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;AAOD,SAAgB,gBAAgB,QAAiD;CAC/E,MAAM,MAAM,SAAS,MAAM;CAE3B,KAAK,OAAO,OAAO,eAAe,YAAY,QAC5C,OAAO;CAGT,KAAK,MAAM,OAAO,OAAO,KAAK,GAAG,GAAG;EAClC,MAAM,QAAQ,IAAI,YAAY;EAE9B,IAAI,wBAAwB,IAAI,KAAK,KAAK,MAAM,WAAW,YAAY,GACrE,OAAO,IAAI;CAEf;CAEA,OAAO;AACT"}

package/esm/policy/powershell-aliases.mjs

@@ -0,0 +1,275 @@
+//#region ../../packages/ai-workspace/src/policy/powershell-aliases.ts
+const FAMILIES = [
+	{
+		canonical: "rm",
+		names: [
+			"remove-item",
+			"ri",
+			"rm",
+			"del",
+			"erase",
+			"rd",
+			"rmdir"
+		],
+		recurseFlag: "r",
+		forceFlag: "f",
+		params: [
+			["recurse", "recurse"],
+			["force", "force"],
+			["path", "operand"],
+			["literalpath", "operand"],
+			["whatif", "switch"],
+			["confirm", "switch"],
+			["filter", "value"],
+			["include", "value"],
+			["exclude", "value"],
+			["credential", "value"],
+			["stream", "value"]
+		]
+	},
+	{
+		canonical: "cp",
+		names: [
+			"copy-item",
+			"cpi",
+			"cp",
+			"copy"
+		],
+		recurseFlag: "r",
+		forceFlag: "f",
+		params: [
+			["recurse", "recurse"],
+			["force", "force"],
+			["path", "operand"],
+			["literalpath", "operand"],
+			["destination", "operand"],
+			["whatif", "switch"],
+			["confirm", "switch"],
+			["filter", "value"],
+			["include", "value"],
+			["exclude", "value"],
+			["credential", "value"]
+		]
+	},
+	{
+		canonical: "mv",
+		names: [
+			"move-item",
+			"mi",
+			"mv",
+			"move"
+		],
+		recurseFlag: "",
+		forceFlag: "f",
+		params: [
+			["force", "force"],
+			["path", "operand"],
+			["literalpath", "operand"],
+			["destination", "operand"],
+			["whatif", "switch"],
+			["confirm", "switch"],
+			["filter", "value"],
+			["include", "value"],
+			["exclude", "value"],
+			["credential", "value"]
+		]
+	},
+	{
+		canonical: "ls",
+		names: [
+			"get-childitem",
+			"gci",
+			"ls",
+			"dir"
+		],
+		recurseFlag: "R",
+		forceFlag: "a",
+		params: [
+			["recurse", "recurse"],
+			["force", "force"],
+			["path", "operand"],
+			["literalpath", "operand"],
+			["filter", "value"],
+			["include", "value"],
+			["exclude", "value"],
+			["depth", "value"],
+			["name", "switch"]
+		]
+	},
+	{
+		canonical: "cat",
+		names: [
+			"get-content",
+			"gc",
+			"cat",
+			"type"
+		],
+		recurseFlag: "",
+		forceFlag: "",
+		params: [
+			["path", "operand"],
+			["literalpath", "operand"],
+			["totalcount", "value"],
+			["tail", "value"],
+			["head", "value"],
+			["encoding", "value"],
+			["filter", "value"],
+			["include", "value"],
+			["exclude", "value"],
+			["force", "switch"],
+			["raw", "switch"],
+			["wait", "switch"]
+		]
+	},
+	{
+		canonical: "curl",
+		names: [
+			"invoke-webrequest",
+			"iwr",
+			"invoke-restmethod",
+			"irm",
+			"curl",
+			"wget"
+		],
+		recurseFlag: "",
+		forceFlag: "",
+		params: [
+			["uri", "operand"],
+			["outfile", "outfile"],
+			["method", "method"],
+			["headers", "value"],
+			["body", "value"],
+			["contenttype", "value"],
+			["useragent", "value"],
+			["credential", "value"],
+			["timeoutsec", "value"],
+			["proxy", "value"]
+		]
+	},
+	{
+		canonical: "kill",
+		names: [
+			"stop-process",
+			"spps",
+			"kill"
+		],
+		recurseFlag: "",
+		forceFlag: "9",
+		params: [
+			["id", "operand"],
+			["name", "operand"],
+			["force", "force"],
+			["inputobject", "value"],
+			["whatif", "switch"],
+			["confirm", "switch"]
+		]
+	}
+];
+const BY_NAME = /* @__PURE__ */ new Map();
+for (const family of FAMILIES) for (const name of family.names) BY_NAME.set(name, family);
+/** PowerShell reads an en dash, em dash or horizontal bar as the parameter dash too. */
+const FLAG_ORDER = "rRfa9";
+const DASH = /^[-–—―]/;
+/** Lowercase executable name used to look an alias up. */
+function aliasKey(first) {
+	return (first.split(/[\\/]/).pop() ?? first).replace(/\.(exe|cmd|bat|com)$/i, "").toLowerCase();
+}
+/** Split `-Name` / `-Name:value` into the lowercase name and the inline value. */
+function parameter(arg) {
+	if (!DASH.test(arg) || arg.length < 2) return null;
+	const body = arg.slice(1);
+	const colon = body.indexOf(":");
+	return colon === -1 ? { name: body.toLowerCase() } : {
+		name: body.slice(0, colon).toLowerCase(),
+		inline: body.slice(colon + 1)
+	};
+}
+/**
+* The canonical argv of a PowerShell command that uses an alias or cmdlet
+* name from the table (`Remove-Item -Recurse -Force x` → `["rm", "-rf", "x"]`),
+* or `undefined` when the command has no canonical form.
+*/
+function canonicalPowerShellArgv(argv) {
+	const family = BY_NAME.get(aliasKey(argv[0] ?? ""));
+	if (family === void 0) return;
+	let flags = "";
+	const operands = [];
+	const extras = [];
+	for (let index = 1; index < argv.length; index++) {
+		const arg = argv[index] ?? "";
+		const parsed = parameter(arg);
+		if (parsed === null) {
+			operands.push(arg);
+			continue;
+		}
+		const match = family.params.find(([name]) => parsed.name !== "" && name.startsWith(parsed.name));
+		if (match === void 0) continue;
+		const role = match[1];
+		if (role === "recurse") flags += family.recurseFlag;
+		else if (role === "force") flags += family.forceFlag;
+		else if (role === "switch") continue;
+		else {
+			const value = parsed.inline ?? argv[++index] ?? "";
+			if (role === "operand") operands.push(value);
+			else if (role === "outfile") extras.push("-o", value);
+			else if (role === "method") extras.push("-X", value);
+		}
+	}
+	const unique = [...FLAG_ORDER].filter((flag) => flags.includes(flag)).join("");
+	return [
+		family.canonical,
+		...unique !== "" ? [`-${unique}`] : [],
+		...extras,
+		...operands
+	];
+}
+/** The names PowerShell's `cd` goes by. */
+const POWERSHELL_CD_NAMES = /* @__PURE__ */ new Set([
+	"cd",
+	"sl",
+	"set-location",
+	"chdir"
+]);
+/** Directory stack commands, refused because the policy does not track them. */
+const POWERSHELL_DIRECTORY_STACK = /* @__PURE__ */ new Set([
+	"push-location",
+	"pushd",
+	"pop-location",
+	"popd"
+]);
+/**
+* Normalise a PowerShell `cd` to `[cd, directory]`: `-Path x`, `-LiteralPath x`
+* (and their prefixes, `-Path:x`) become the directory operand. Returns `null`
+* for any other parameter (`-PassThru`, `-StackName`, …).
+*/
+function normalizePowerShellCd(words) {
+	const first = words[0];
+	if (first === void 0) return null;
+	const operands = [];
+	for (let index = 1; index < words.length; index++) {
+		const word = words[index];
+		const parsed = word.quoted ? null : parameter(word.value);
+		if (parsed === null) {
+			operands.push(word);
+			continue;
+		}
+		const isPath = parsed.name.length >= 2 && "path".startsWith(parsed.name);
+		const isLiteral = parsed.name.length >= 1 && "literalpath".startsWith(parsed.name);
+		if (!isPath && !isLiteral) return null;
+		if (parsed.inline !== void 0) operands.push({
+			...word,
+			raw: parsed.inline,
+			value: parsed.inline
+		});
+		else {
+			const next = words[++index];
+			if (next === void 0) return null;
+			operands.push(next);
+		}
+	}
+	return [first, ...operands];
+}
+
+//#endregion
+export { POWERSHELL_CD_NAMES, POWERSHELL_DIRECTORY_STACK, canonicalPowerShellArgv, normalizePowerShellCd };
+//# sourceMappingURL=powershell-aliases.mjs.map

package/esm/policy/powershell-aliases.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"powershell-aliases.mjs","names":[],"sources":["../../../../../../../../packages/ai-workspace/src/policy/powershell-aliases.ts"],"sourcesContent":["import type { ShellWord } from \"./shell-parser\";\n\n/**\n * PowerShell spells the same operation many ways (`Remove-Item`, `ri`, `rm`,\n * `del`, `erase`, `rd`, `rmdir`; parameters can be shortened to any\n * unambiguous prefix). Deny rules are written against one spelling, so the\n * policy also checks each command in its canonical POSIX-style form:\n * `Remove-Item -Recurse -Force x` is checked as `rm -rf x`.\n */\n\ntype ParamRole = \"recurse\" | \"force\" | \"operand\" | \"value\" | \"switch\" | \"method\" | \"outfile\";\n\ninterface Family {\n  /** The canonical executable name. */\n  canonical: string;\n  /** Every spelling (lowercase) that means this family. */\n  names: string[];\n  /** Flag characters emitted for `-Recurse` / `-Force` (empty: not emitted). */\n  recurseFlag: string;\n  forceFlag: string;\n  /** Parameters in priority order (the first whose name starts with the typed prefix wins). */\n  params: Array<[string, ParamRole]>;\n}\n\nconst FAMILIES: Family[] = [\n  {\n    canonical: \"rm\",\n    names: [\"remove-item\", \"ri\", \"rm\", \"del\", \"erase\", \"rd\", \"rmdir\"],\n    recurseFlag: \"r\",\n    forceFlag: \"f\",\n    params: [\n      [\"recurse\", \"recurse\"],\n      [\"force\", \"force\"],\n      [\"path\", \"operand\"],\n      [\"literalpath\", \"operand\"],\n      [\"whatif\", \"switch\"],\n      [\"confirm\", \"switch\"],\n      [\"filter\", \"value\"],\n      [\"include\", \"value\"],\n      [\"exclude\", \"value\"],\n      [\"credential\", \"value\"],\n      [\"stream\", \"value\"],\n    ],\n  },\n  {\n    canonical: \"cp\",\n    names: [\"copy-item\", \"cpi\", \"cp\", \"copy\"],\n    recurseFlag: \"r\",\n    forceFlag: \"f\",\n    params: [\n      [\"recurse\", \"recurse\"],\n      [\"force\", \"force\"],\n      [\"path\", \"operand\"],\n      [\"literalpath\", \"operand\"],\n      [\"destination\", \"operand\"],\n      [\"whatif\", \"switch\"],\n      [\"confirm\", \"switch\"],\n      [\"filter\", \"value\"],\n      [\"include\", \"value\"],\n      [\"exclude\", \"value\"],\n      [\"credential\", \"value\"],\n    ],\n  },\n  {\n    canonical: \"mv\",\n    names: [\"move-item\", \"mi\", \"mv\", \"move\"],\n    recurseFlag: \"\",\n    forceFlag: \"f\",\n    params: [\n      [\"force\", \"force\"],\n      [\"path\", \"operand\"],\n      [\"literalpath\", \"operand\"],\n      [\"destination\", \"operand\"],\n      [\"whatif\", \"switch\"],\n      [\"confirm\", \"switch\"],\n      [\"filter\", \"value\"],\n      [\"include\", \"value\"],\n      [\"exclude\", \"value\"],\n      [\"credential\", \"value\"],\n    ],\n  },\n  {\n    canonical: \"ls\",\n    names: [\"get-childitem\", \"gci\", \"ls\", \"dir\"],\n    recurseFlag: \"R\",\n    forceFlag: \"a\",\n    params: [\n      [\"recurse\", \"recurse\"],\n      [\"force\", \"force\"],\n      [\"path\", \"operand\"],\n      [\"literalpath\", \"operand\"],\n      [\"filter\", \"value\"],\n      [\"include\", \"value\"],\n      [\"exclude\", \"value\"],\n      [\"depth\", \"value\"],\n      [\"name\", \"switch\"],\n    ],\n  },\n  {\n    canonical: \"cat\",\n    names: [\"get-content\", \"gc\", \"cat\", \"type\"],\n    recurseFlag: \"\",\n    forceFlag: \"\",\n    params: [\n      [\"path\", \"operand\"],\n      [\"literalpath\", \"operand\"],\n      [\"totalcount\", \"value\"],\n      [\"tail\", \"value\"],\n      [\"head\", \"value\"],\n      [\"encoding\", \"value\"],\n      [\"filter\", \"value\"],\n      [\"include\", \"value\"],\n      [\"exclude\", \"value\"],\n      [\"force\", \"switch\"],\n      [\"raw\", \"switch\"],\n      [\"wait\", \"switch\"],\n    ],\n  },\n  {\n    canonical: \"curl\",\n    names: [\"invoke-webrequest\", \"iwr\", \"invoke-restmethod\", \"irm\", \"curl\", \"wget\"],\n    recurseFlag: \"\",\n    forceFlag: \"\",\n    params: [\n      [\"uri\", \"operand\"],\n      [\"outfile\", \"outfile\"],\n      [\"method\", \"method\"],\n      [\"headers\", \"value\"],\n      [\"body\", \"value\"],\n      [\"contenttype\", \"value\"],\n      [\"useragent\", \"value\"],\n      [\"credential\", \"value\"],\n      [\"timeoutsec\", \"value\"],\n      [\"proxy\", \"value\"],\n    ],\n  },\n  {\n    canonical: \"kill\",\n    names: [\"stop-process\", \"spps\", \"kill\"],\n    recurseFlag: \"\",\n    forceFlag: \"9\",\n    params: [\n      [\"id\", \"operand\"],\n      [\"name\", \"operand\"],\n      [\"force\", \"force\"],\n      [\"inputobject\", \"value\"],\n      [\"whatif\", \"switch\"],\n      [\"confirm\", \"switch\"],\n    ],\n  },\n];\n\nconst BY_NAME = new Map<string, Family>();\n\nfor (const family of FAMILIES) {\n  for (const name of family.names) {\n    BY_NAME.set(name, family);\n  }\n}\n\n/** PowerShell reads an en dash, em dash or horizontal bar as the parameter dash too. */\nconst FLAG_ORDER = \"rRfa9\";\n\nconst DASH = /^[-–—―]/;\n\n/** Lowercase executable name used to look an alias up. */\nfunction aliasKey(first: string): string {\n  const base = first.split(/[\\\\/]/).pop() ?? first;\n\n  return base.replace(/\\.(exe|cmd|bat|com)$/i, \"\").toLowerCase();\n}\n\n/** Split `-Name` / `-Name:value` into the lowercase name and the inline value. */\nfunction parameter(arg: string): { name: string; inline?: string } | null {\n  if (!DASH.test(arg) || arg.length < 2) {\n    return null;\n  }\n\n  const body = arg.slice(1);\n  const colon = body.indexOf(\":\");\n\n  return colon === -1\n    ? { name: body.toLowerCase() }\n    : { name: body.slice(0, colon).toLowerCase(), inline: body.slice(colon + 1) };\n}\n\n/**\n * The canonical argv of a PowerShell command that uses an alias or cmdlet\n * name from the table (`Remove-Item -Recurse -Force x` → `[\"rm\", \"-rf\", \"x\"]`),\n * or `undefined` when the command has no canonical form.\n */\nexport function canonicalPowerShellArgv(argv: readonly string[]): string[] | undefined {\n  const family = BY_NAME.get(aliasKey(argv[0] ?? \"\"));\n\n  if (family === undefined) {\n    return undefined;\n  }\n\n  let flags = \"\";\n  const operands: string[] = [];\n  const extras: string[] = [];\n\n  for (let index = 1; index < argv.length; index++) {\n    const arg = argv[index] ?? \"\";\n    const parsed = parameter(arg);\n\n    if (parsed === null) {\n      operands.push(arg);\n\n      continue;\n    }\n\n    const match = family.params.find(\n      ([name]) => parsed.name !== \"\" && name.startsWith(parsed.name),\n    );\n\n    if (match === undefined) {\n      continue;\n    }\n\n    const role = match[1];\n\n    if (role === \"recurse\") {\n      flags += family.recurseFlag;\n    } else if (role === \"force\") {\n      flags += family.forceFlag;\n    } else if (role === \"switch\") {\n      continue;\n    } else {\n      const value = parsed.inline ?? argv[++index] ?? \"\";\n\n      if (role === \"operand\") {\n        operands.push(value);\n      } else if (role === \"outfile\") {\n        extras.push(\"-o\", value);\n      } else if (role === \"method\") {\n        extras.push(\"-X\", value);\n      }\n    }\n  }\n\n  // Keep each flag once, in a stable order.\n  const unique = [...FLAG_ORDER].filter((flag) => flags.includes(flag)).join(\"\");\n\n  return [family.canonical, ...(unique !== \"\" ? [`-${unique}`] : []), ...extras, ...operands];\n}\n\n/** The names PowerShell's `cd` goes by. */\nexport const POWERSHELL_CD_NAMES = new Set([\"cd\", \"sl\", \"set-location\", \"chdir\"]);\n\n/** Directory stack commands, refused because the policy does not track them. */\nexport const POWERSHELL_DIRECTORY_STACK = new Set([\n  \"push-location\",\n  \"pushd\",\n  \"pop-location\",\n  \"popd\",\n]);\n\n/**\n * Normalise a PowerShell `cd` to `[cd, directory]`: `-Path x`, `-LiteralPath x`\n * (and their prefixes, `-Path:x`) become the directory operand. Returns `null`\n * for any other parameter (`-PassThru`, `-StackName`, …).\n */\nexport function normalizePowerShellCd(words: ShellWord[]): ShellWord[] | null {\n  const first = words[0];\n\n  if (first === undefined) {\n    return null;\n  }\n\n  const operands: ShellWord[] = [];\n\n  for (let index = 1; index < words.length; index++) {\n    const word = words[index] as ShellWord;\n    const parsed = word.quoted ? null : parameter(word.value);\n\n    if (parsed === null) {\n      operands.push(word);\n\n      continue;\n    }\n\n    const isPath = parsed.name.length >= 2 && \"path\".startsWith(parsed.name);\n    const isLiteral = parsed.name.length >= 1 && \"literalpath\".startsWith(parsed.name);\n\n    if (!isPath && !isLiteral) {\n      return null;\n    }\n\n    if (parsed.inline !== undefined) {\n      operands.push({ ...word, raw: parsed.inline, value: parsed.inline });\n    } else {\n      const next = words[++index];\n\n      if (next === undefined) {\n        return null;\n      }\n\n      operands.push(next);\n    }\n  }\n\n  return [first, ...operands];\n}\n"],"mappings":";AAwBA,MAAM,WAAqB;CACzB;EACE,WAAW;EACX,OAAO;GAAC;GAAe;GAAM;GAAM;GAAO;GAAS;GAAM;EAAO;EAChE,aAAa;EACb,WAAW;EACX,QAAQ;GACN,CAAC,WAAW,SAAS;GACrB,CAAC,SAAS,OAAO;GACjB,CAAC,QAAQ,SAAS;GAClB,CAAC,eAAe,SAAS;GACzB,CAAC,UAAU,QAAQ;GACnB,CAAC,WAAW,QAAQ;GACpB,CAAC,UAAU,OAAO;GAClB,CAAC,WAAW,OAAO;GACnB,CAAC,WAAW,OAAO;GACnB,CAAC,cAAc,OAAO;GACtB,CAAC,UAAU,OAAO;EACpB;CACF;CACA;EACE,WAAW;EACX,OAAO;GAAC;GAAa;GAAO;GAAM;EAAM;EACxC,aAAa;EACb,WAAW;EACX,QAAQ;GACN,CAAC,WAAW,SAAS;GACrB,CAAC,SAAS,OAAO;GACjB,CAAC,QAAQ,SAAS;GAClB,CAAC,eAAe,SAAS;GACzB,CAAC,eAAe,SAAS;GACzB,CAAC,UAAU,QAAQ;GACnB,CAAC,WAAW,QAAQ;GACpB,CAAC,UAAU,OAAO;GAClB,CAAC,WAAW,OAAO;GACnB,CAAC,WAAW,OAAO;GACnB,CAAC,cAAc,OAAO;EACxB;CACF;CACA;EACE,WAAW;EACX,OAAO;GAAC;GAAa;GAAM;GAAM;EAAM;EACvC,aAAa;EACb,WAAW;EACX,QAAQ;GACN,CAAC,SAAS,OAAO;GACjB,CAAC,QAAQ,SAAS;GAClB,CAAC,eAAe,SAAS;GACzB,CAAC,eAAe,SAAS;GACzB,CAAC,UAAU,QAAQ;GACnB,CAAC,WAAW,QAAQ;GACpB,CAAC,UAAU,OAAO;GAClB,CAAC,WAAW,OAAO;GACnB,CAAC,WAAW,OAAO;GACnB,CAAC,cAAc,OAAO;EACxB;CACF;CACA;EACE,WAAW;EACX,OAAO;GAAC;GAAiB;GAAO;GAAM;EAAK;EAC3C,aAAa;EACb,WAAW;EACX,QAAQ;GACN,CAAC,WAAW,SAAS;GACrB,CAAC,SAAS,OAAO;GACjB,CAAC,QAAQ,SAAS;GAClB,CAAC,eAAe,SAAS;GACzB,CAAC,UAAU,OAAO;GAClB,CAAC,WAAW,OAAO;GACnB,CAAC,WAAW,OAAO;GACnB,CAAC,SAAS,OAAO;GACjB,CAAC,QAAQ,QAAQ;EACnB;CACF;CACA;EACE,WAAW;EACX,OAAO;GAAC;GAAe;GAAM;GAAO;EAAM;EAC1C,aAAa;EACb,WAAW;EACX,QAAQ;GACN,CAAC,QAAQ,SAAS;GAClB,CAAC,eAAe,SAAS;GACzB,CAAC,cAAc,OAAO;GACtB,CAAC,QAAQ,OAAO;GAChB,CAAC,QAAQ,OAAO;GAChB,CAAC,YAAY,OAAO;GACpB,CAAC,UAAU,OAAO;GAClB,CAAC,WAAW,OAAO;GACnB,CAAC,WAAW,OAAO;GACnB,CAAC,SAAS,QAAQ;GAClB,CAAC,OAAO,QAAQ;GAChB,CAAC,QAAQ,QAAQ;EACnB;CACF;CACA;EACE,WAAW;EACX,OAAO;GAAC;GAAqB;GAAO;GAAqB;GAAO;GAAQ;EAAM;EAC9E,aAAa;EACb,WAAW;EACX,QAAQ;GACN,CAAC,OAAO,SAAS;GACjB,CAAC,WAAW,SAAS;GACrB,CAAC,UAAU,QAAQ;GACnB,CAAC,WAAW,OAAO;GACnB,CAAC,QAAQ,OAAO;GAChB,CAAC,eAAe,OAAO;GACvB,CAAC,aAAa,OAAO;GACrB,CAAC,cAAc,OAAO;GACtB,CAAC,cAAc,OAAO;GACtB,CAAC,SAAS,OAAO;EACnB;CACF;CACA;EACE,WAAW;EACX,OAAO;GAAC;GAAgB;GAAQ;EAAM;EACtC,aAAa;EACb,WAAW;EACX,QAAQ;GACN,CAAC,MAAM,SAAS;GAChB,CAAC,QAAQ,SAAS;GAClB,CAAC,SAAS,OAAO;GACjB,CAAC,eAAe,OAAO;GACvB,CAAC,UAAU,QAAQ;GACnB,CAAC,WAAW,QAAQ;EACtB;CACF;AACF;AAEA,MAAM,0BAAU,IAAI,IAAoB;AAExC,KAAK,MAAM,UAAU,UACnB,KAAK,MAAM,QAAQ,OAAO,OACxB,QAAQ,IAAI,MAAM,MAAM;;AAK5B,MAAM,aAAa;AAEnB,MAAM,OAAO;;AAGb,SAAS,SAAS,OAAuB;CAGvC,QAFa,MAAM,MAAM,OAAO,CAAC,CAAC,IAAI,KAAK,MAEhC,CAAC,QAAQ,yBAAyB,EAAE,CAAC,CAAC,YAAY;AAC/D;;AAGA,SAAS,UAAU,KAAuD;CACxE,IAAI,CAAC,KAAK,KAAK,GAAG,KAAK,IAAI,SAAS,GAClC,OAAO;CAGT,MAAM,OAAO,IAAI,MAAM,CAAC;CACxB,MAAM,QAAQ,KAAK,QAAQ,GAAG;CAE9B,OAAO,UAAU,KACb,EAAE,MAAM,KAAK,YAAY,EAAE,IAC3B;EAAE,MAAM,KAAK,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY;EAAG,QAAQ,KAAK,MAAM,QAAQ,CAAC;CAAE;AAChF;;;;;;AAOA,SAAgB,wBAAwB,MAA+C;CACrF,MAAM,SAAS,QAAQ,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;CAElD,IAAI,WAAW,QACb;CAGF,IAAI,QAAQ;CACZ,MAAM,WAAqB,CAAC;CAC5B,MAAM,SAAmB,CAAC;CAE1B,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS;EAChD,MAAM,MAAM,KAAK,UAAU;EAC3B,MAAM,SAAS,UAAU,GAAG;EAE5B,IAAI,WAAW,MAAM;GACnB,SAAS,KAAK,GAAG;GAEjB;EACF;EAEA,MAAM,QAAQ,OAAO,OAAO,MACzB,CAAC,UAAU,OAAO,SAAS,MAAM,KAAK,WAAW,OAAO,IAAI,CAC/D;EAEA,IAAI,UAAU,QACZ;EAGF,MAAM,OAAO,MAAM;EAEnB,IAAI,SAAS,WACX,SAAS,OAAO;OACX,IAAI,SAAS,SAClB,SAAS,OAAO;OACX,IAAI,SAAS,UAClB;OACK;GACL,MAAM,QAAQ,OAAO,UAAU,KAAK,EAAE,UAAU;GAEhD,IAAI,SAAS,WACX,SAAS,KAAK,KAAK;QACd,IAAI,SAAS,WAClB,OAAO,KAAK,MAAM,KAAK;QAClB,IAAI,SAAS,UAClB,OAAO,KAAK,MAAM,KAAK;EAE3B;CACF;CAGA,MAAM,SAAS,CAAC,GAAG,UAAU,CAAC,CAAC,QAAQ,SAAS,MAAM,SAAS,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE;CAE7E,OAAO;EAAC,OAAO;EAAW,GAAI,WAAW,KAAK,CAAC,IAAI,QAAQ,IAAI,CAAC;EAAI,GAAG;EAAQ,GAAG;CAAQ;AAC5F;;AAGA,MAAa,sCAAsB,IAAI,IAAI;CAAC;CAAM;CAAM;CAAgB;AAAO,CAAC;;AAGhF,MAAa,6CAA6B,IAAI,IAAI;CAChD;CACA;CACA;CACA;AACF,CAAC;;;;;;AAOD,SAAgB,sBAAsB,OAAwC;CAC5E,MAAM,QAAQ,MAAM;CAEpB,IAAI,UAAU,QACZ,OAAO;CAGT,MAAM,WAAwB,CAAC;CAE/B,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;EACjD,MAAM,OAAO,MAAM;EACnB,MAAM,SAAS,KAAK,SAAS,OAAO,UAAU,KAAK,KAAK;EAExD,IAAI,WAAW,MAAM;GACnB,SAAS,KAAK,IAAI;GAElB;EACF;EAEA,MAAM,SAAS,OAAO,KAAK,UAAU,KAAK,OAAO,WAAW,OAAO,IAAI;EACvE,MAAM,YAAY,OAAO,KAAK,UAAU,KAAK,cAAc,WAAW,OAAO,IAAI;EAEjF,IAAI,CAAC,UAAU,CAAC,WACd,OAAO;EAGT,IAAI,OAAO,WAAW,QACpB,SAAS,KAAK;GAAE,GAAG;GAAM,KAAK,OAAO;GAAQ,OAAO,OAAO;EAAO,CAAC;OAC9D;GACL,MAAM,OAAO,MAAM,EAAE;GAErB,IAAI,SAAS,QACX,OAAO;GAGT,SAAS,KAAK,IAAI;EACpB;CACF;CAEA,OAAO,CAAC,OAAO,GAAG,QAAQ;AAC5B"}