@weave_protocol/ward 0.1.0

package/dist/cli.js

@@ -0,0 +1,465 @@
+#!/usr/bin/env node
+/**
+ * weave-ward CLI
+ *
+ *   weave-ward init                       Generate a starter WARD.md
+ *   weave-ward parse <file>               Print parsed policy as JSON
+ *   weave-ward validate <file>            Validate and show issues
+ *   weave-ward explain <file>             Human-readable policy summary
+ *   weave-ward help
+ */
+import { readFileSync, writeFileSync, existsSync } from "node:fs";
+import { resolve } from "node:path";
+import { parseWard, parseAndValidate } from "./parser/index.js";
+// ─────────────────────────────────────────────────────────
+// Colors
+// ─────────────────────────────────────────────────────────
+const tty = process.stdout.isTTY && !process.env.NO_COLOR;
+const c = {
+    reset: tty ? "\x1b[0m" : "",
+    bold: tty ? "\x1b[1m" : "",
+    dim: tty ? "\x1b[2m" : "",
+    red: tty ? "\x1b[31m" : "",
+    green: tty ? "\x1b[32m" : "",
+    yellow: tty ? "\x1b[33m" : "",
+    blue: tty ? "\x1b[34m" : "",
+    cyan: tty ? "\x1b[36m" : "",
+    gray: tty ? "\x1b[90m" : "",
+};
+function banner() {
+    console.log(`
+${c.cyan}${c.bold}🛡️  weave-ward${c.reset}
+${c.gray}Agent security policy parser & validator${c.reset}
+`);
+}
+function help() {
+    banner();
+    console.log(`${c.bold}Usage:${c.reset} weave-ward <command> [options]\n`);
+    console.log(`${c.bold}Commands:${c.reset}`);
+    console.log(`  ${c.cyan}init${c.reset} ${c.gray}[--strict]${c.reset}            Create a starter WARD.md in the current directory`);
+    console.log(`  ${c.cyan}parse${c.reset} ${c.gray}<file>${c.reset}              Print parsed policy as JSON`);
+    console.log(`  ${c.cyan}validate${c.reset} ${c.gray}<file>${c.reset}           Validate the file and report issues`);
+    console.log(`  ${c.cyan}explain${c.reset} ${c.gray}<file>${c.reset}            Human-readable summary of the policy`);
+    console.log(`  ${c.cyan}help${c.reset}                       Show this message\n`);
+    console.log(`${c.bold}Examples:${c.reset}`);
+    console.log(`  ${c.gray}$${c.reset} weave-ward init`);
+    console.log(`  ${c.gray}$${c.reset} weave-ward validate WARD.md`);
+    console.log(`  ${c.gray}$${c.reset} weave-ward explain ./agents/data-fetcher/WARD.md\n`);
+    console.log(`${c.gray}Docs: https://github.com/Tyox-all/Weave_Protocol/tree/main/ward${c.reset}\n`);
+}
+// ─────────────────────────────────────────────────────────
+// Templates
+// ─────────────────────────────────────────────────────────
+const STARTER_BASIC = `---
+ward: "1.0"
+agent: my-agent
+name: My Agent Security Policy
+description: Starter WARD.md - customize for your agent.
+---
+
+# WARD.md
+
+Security policy for this agent. Customize the sections below to define
+what the agent can and cannot do.
+
+## Filesystem
+
+allow:
+  - read: /workspace/**
+  - write: /workspace/output/**
+deny:
+  - read: /workspace/secrets/**
+default: deny
+
+## Network
+
+allow:
+  - url: "https://api.openai.com/**"
+  - url: "https://api.anthropic.com/**"
+default: deny
+
+## Capabilities
+
+allow:
+  - file_read
+  - file_write
+  - http_request
+deny:
+  - shell_exec
+  - ssh
+default: deny
+
+## Behavioral Limits
+
+maxIterations: 50
+maxRuntimeSeconds: 300
+maxCostUSD: 5.00
+maxTokens: 100000
+
+## Verification
+
+required: true
+backend: domere
+frequency: session_end
+
+## Incident Response
+
+onViolation:
+  - log
+  - alert
+severityThreshold: medium
+`;
+const STARTER_STRICT = `---
+ward: "1.0"
+agent: my-agent
+name: Strict Policy (high-security agent)
+description: Locked-down policy for agents operating on sensitive systems or data.
+---
+
+# WARD.md
+
+Strict security policy. Default-deny everywhere. Approval required for any
+elevated action. Mandatory attestation with blockchain anchoring.
+
+## Filesystem
+
+allow:
+  - read: /workspace/input/**
+  - write: /workspace/output/**
+deny:
+  - read: /workspace/secrets/**
+  - read: ~/.ssh/**
+  - read: ~/.aws/**
+  - write: /etc/**
+  - execute: "**"
+default: deny
+
+## Network
+
+allow:
+  - url: "https://api.company.com/**"
+    methods: [GET]
+default: deny
+
+## Capabilities
+
+allow:
+  - file_read
+  - file_write
+requireApproval:
+  - http_request
+  - code_exec
+deny:
+  - shell_exec
+  - ssh
+  - sudo
+default: deny
+
+## Data Boundaries
+
+egressAllow:
+  - public
+  - internal
+egressDeny:
+  - confidential
+  - secret
+  - pii
+  - phi
+  - pci
+  - credentials
+
+## Behavioral Limits
+
+maxIterations: 25
+maxRuntimeSeconds: 120
+maxCostUSD: 2.00
+maxTokens: 50000
+maxToolCalls: 30
+maxExternalServices: 3
+
+## Multi-Agent
+
+isolation: strict
+maxSemanticDrift: 0.3
+
+## Verification
+
+required: true
+backend: domere
+blockchain: solana
+frequency: every_action
+
+## Threat Model
+
+inScope:
+  - prompt_injection
+  - data_exfil
+  - credential_theft
+  - tool_misuse
+  - semantic_drift
+  - emergent_behavior
+
+## Incident Response
+
+onViolation:
+  - log
+  - alert
+  - terminate
+  - attest_violation
+  - notify_human
+severityThreshold: low
+`;
+// ─────────────────────────────────────────────────────────
+// Commands
+// ─────────────────────────────────────────────────────────
+function runInit(args) {
+    const strict = args.includes("--strict");
+    const target = resolve(process.cwd(), "WARD.md");
+    if (existsSync(target)) {
+        console.error(`${c.red}✗${c.reset} WARD.md already exists at ${target}`);
+        console.error(`${c.gray}  Delete it first or use a different directory.${c.reset}`);
+        return 1;
+    }
+    const template = strict ? STARTER_STRICT : STARTER_BASIC;
+    writeFileSync(target, template, "utf8");
+    console.log(`${c.green}✓${c.reset} Created ${c.cyan}WARD.md${c.reset} ${c.gray}(${strict ? "strict" : "basic"} template)${c.reset}`);
+    console.log("");
+    console.log(`Next:`);
+    console.log(`  ${c.gray}1.${c.reset} Edit ${c.cyan}WARD.md${c.reset} to customize the policy for your agent`);
+    console.log(`  ${c.gray}2.${c.reset} Run ${c.cyan}weave-ward validate WARD.md${c.reset} to check for issues`);
+    console.log(`  ${c.gray}3.${c.reset} Commit it alongside your AGENTS.md / SKILL.md files`);
+    console.log("");
+    return 0;
+}
+function runParse(args) {
+    const path = args[0];
+    if (!path) {
+        console.error(`${c.red}✗${c.reset} Usage: weave-ward parse <file>`);
+        return 2;
+    }
+    if (!existsSync(path)) {
+        console.error(`${c.red}✗${c.reset} File not found: ${path}`);
+        return 2;
+    }
+    const source = readFileSync(path, "utf8");
+    const policy = parseWard(source);
+    console.log(JSON.stringify(policy, null, 2));
+    return 0;
+}
+function runValidate(args) {
+    const path = args[0];
+    if (!path) {
+        console.error(`${c.red}✗${c.reset} Usage: weave-ward validate <file>`);
+        return 2;
+    }
+    if (!existsSync(path)) {
+        console.error(`${c.red}✗${c.reset} File not found: ${path}`);
+        return 2;
+    }
+    banner();
+    console.log(`Validating ${c.cyan}${path}${c.reset}...\n`);
+    const source = readFileSync(path, "utf8");
+    const result = parseAndValidate(source);
+    if (result.errors.length > 0) {
+        console.log(`${c.red}${c.bold}Errors (${result.errors.length})${c.reset}`);
+        for (const e of result.errors) {
+            console.log(`  ${c.red}✗${c.reset} ${e.section ? c.gray + `[${e.section}] ` + c.reset : ""}${e.message}`);
+            if (e.suggestion)
+                console.log(`    ${c.gray}→ ${e.suggestion}${c.reset}`);
+        }
+        console.log("");
+    }
+    if (result.warnings.length > 0) {
+        console.log(`${c.yellow}${c.bold}Warnings (${result.warnings.length})${c.reset}`);
+        for (const w of result.warnings) {
+            console.log(`  ${c.yellow}⚠${c.reset}  ${w.section ? c.gray + `[${w.section}] ` + c.reset : ""}${w.message}`);
+            if (w.suggestion)
+                console.log(`    ${c.gray}→ ${w.suggestion}${c.reset}`);
+        }
+        console.log("");
+    }
+    if (result.valid && result.warnings.length === 0) {
+        console.log(`${c.green}✓ Valid${c.reset} — no errors or warnings.\n`);
+        return 0;
+    }
+    if (result.valid) {
+        console.log(`${c.green}✓ Valid${c.reset} ${c.gray}(with ${result.warnings.length} warning(s))${c.reset}\n`);
+        return 0;
+    }
+    console.log(`${c.red}✗ Invalid${c.reset}\n`);
+    return 1;
+}
+function runExplain(args) {
+    const path = args[0];
+    if (!path) {
+        console.error(`${c.red}✗${c.reset} Usage: weave-ward explain <file>`);
+        return 2;
+    }
+    if (!existsSync(path)) {
+        console.error(`${c.red}✗${c.reset} File not found: ${path}`);
+        return 2;
+    }
+    banner();
+    const source = readFileSync(path, "utf8");
+    const policy = parseWard(source);
+    explainPolicy(policy);
+    return 0;
+}
+function explainPolicy(p) {
+    const line = (label, value) => console.log(`  ${c.gray}${label.padEnd(18)}${c.reset} ${value}`);
+    const heading = (text) => console.log(`\n${c.bold}${text}${c.reset}\n${c.gray}${"─".repeat(60)}${c.reset}`);
+    heading("Overview");
+    if (p.name)
+        line("Name:", c.cyan + p.name + c.reset);
+    if (p.agent)
+        line("Agent:", c.cyan + p.agent + c.reset);
+    if (p.description)
+        line("Description:", p.description);
+    line("WARD version:", p.version);
+    if (p.filesystem) {
+        heading("Filesystem");
+        line("Default:", p.filesystem.default || "(deny)");
+        if (p.filesystem.allow?.length) {
+            console.log(`  ${c.green}Allow:${c.reset}`);
+            for (const r of p.filesystem.allow)
+                console.log(`    ${c.green}✓${c.reset} ${r.op} ${c.cyan}${r.path}${c.reset}`);
+        }
+        if (p.filesystem.deny?.length) {
+            console.log(`  ${c.red}Deny:${c.reset}`);
+            for (const r of p.filesystem.deny)
+                console.log(`    ${c.red}✗${c.reset} ${r.op} ${c.cyan}${r.path}${c.reset}`);
+        }
+    }
+    if (p.network) {
+        heading("Network");
+        line("Default:", p.network.default || "(deny)");
+        if (p.network.allow?.length) {
+            console.log(`  ${c.green}Allow:${c.reset}`);
+            for (const r of p.network.allow)
+                console.log(`    ${c.green}✓${c.reset} ${c.cyan}${r.url}${c.reset}${r.methods ? c.gray + " [" + r.methods.join(", ") + "]" + c.reset : ""}`);
+        }
+        if (p.network.deny?.length) {
+            console.log(`  ${c.red}Deny:${c.reset}`);
+            for (const r of p.network.deny)
+                console.log(`    ${c.red}✗${c.reset} ${c.cyan}${r.url}${c.reset}`);
+        }
+    }
+    if (p.capabilities) {
+        heading("Capabilities");
+        if (p.capabilities.allow?.length)
+            console.log(`  ${c.green}Allow:${c.reset} ${p.capabilities.allow.join(", ")}`);
+        if (p.capabilities.deny?.length)
+            console.log(`  ${c.red}Deny:${c.reset}  ${p.capabilities.deny.join(", ")}`);
+        if (p.capabilities.requireApproval?.length)
+            console.log(`  ${c.yellow}Approval:${c.reset} ${p.capabilities.requireApproval.join(", ")}`);
+    }
+    if (p.behavioral) {
+        heading("Behavioral Limits");
+        if (p.behavioral.maxIterations !== undefined)
+            line("Max iterations:", String(p.behavioral.maxIterations));
+        if (p.behavioral.maxRuntimeSeconds !== undefined)
+            line("Max runtime:", p.behavioral.maxRuntimeSeconds + "s");
+        if (p.behavioral.maxCostUSD !== undefined)
+            line("Max cost:", "$" + p.behavioral.maxCostUSD.toFixed(2));
+        if (p.behavioral.maxTokens !== undefined)
+            line("Max tokens:", String(p.behavioral.maxTokens));
+        if (p.behavioral.maxToolCalls !== undefined)
+            line("Max tool calls:", String(p.behavioral.maxToolCalls));
+    }
+    if (p.dataBoundaries) {
+        heading("Data Boundaries");
+        if (p.dataBoundaries.egressAllow?.length)
+            console.log(`  ${c.green}Egress allow:${c.reset} ${p.dataBoundaries.egressAllow.join(", ")}`);
+        if (p.dataBoundaries.egressDeny?.length)
+            console.log(`  ${c.red}Egress deny:${c.reset}  ${p.dataBoundaries.egressDeny.join(", ")}`);
+    }
+    if (p.multiAgent) {
+        heading("Multi-Agent");
+        if (p.multiAgent.isolation)
+            line("Isolation:", p.multiAgent.isolation);
+        if (p.multiAgent.maxSemanticDrift !== undefined)
+            line("Max drift:", String(p.multiAgent.maxSemanticDrift));
+        if (p.multiAgent.trustChain?.upstream?.length)
+            line("Upstream:", p.multiAgent.trustChain.upstream.join(", "));
+        if (p.multiAgent.trustChain?.downstream?.length)
+            line("Downstream:", p.multiAgent.trustChain.downstream.join(", "));
+    }
+    if (p.compliance) {
+        heading("Compliance");
+        if (p.compliance.frameworks?.length)
+            line("Frameworks:", p.compliance.frameworks.join(", ").toUpperCase());
+        if (p.compliance.backend)
+            line("Backend:", p.compliance.backend);
+    }
+    if (p.verification) {
+        heading("Verification");
+        line("Required:", p.verification.required ? c.green + "yes" + c.reset : c.gray + "no" + c.reset);
+        if (p.verification.backend)
+            line("Backend:", p.verification.backend);
+        if (p.verification.blockchain)
+            line("Blockchain:", p.verification.blockchain);
+        if (p.verification.frequency)
+            line("Frequency:", p.verification.frequency);
+    }
+    if (p.threatModel) {
+        heading("Threat Model");
+        if (p.threatModel.inScope?.length)
+            console.log(`  ${c.green}In scope:${c.reset}     ${p.threatModel.inScope.join(", ")}`);
+        if (p.threatModel.outOfScope?.length)
+            console.log(`  ${c.gray}Out of scope:${c.reset} ${p.threatModel.outOfScope.join(", ")}`);
+    }
+    if (p.incidentResponse) {
+        heading("Incident Response");
+        if (p.incidentResponse.severityThreshold)
+            line("Threshold:", p.incidentResponse.severityThreshold);
+        if (p.incidentResponse.onViolation?.length) {
+            console.log(`  ${c.red}On violation:${c.reset}`);
+            for (const a of p.incidentResponse.onViolation) {
+                console.log(`    ${c.red}●${c.reset} ${a.type}${a.minSeverity ? c.gray + " (min: " + a.minSeverity + ")" + c.reset : ""}`);
+            }
+        }
+    }
+    console.log("");
+}
+// ─────────────────────────────────────────────────────────
+// Router
+// ─────────────────────────────────────────────────────────
+async function main() {
+    const [, , cmd, ...rest] = process.argv;
+    let code = 0;
+    try {
+        switch (cmd) {
+            case "init":
+                code = runInit(rest);
+                break;
+            case "parse":
+                code = runParse(rest);
+                break;
+            case "validate":
+                code = runValidate(rest);
+                break;
+            case "explain":
+                code = runExplain(rest);
+                break;
+            case "help":
+            case "--help":
+            case "-h":
+            case undefined:
+                help();
+                break;
+            default:
+                console.error(`${c.red}Unknown command: ${cmd}${c.reset}\n`);
+                help();
+                code = 2;
+        }
+    }
+    catch (err) {
+        console.error(`${c.red}Error: ${err instanceof Error ? err.message : String(err)}${c.reset}`);
+        if (process.env.DEBUG)
+            console.error(err);
+        code = 2;
+    }
+    process.exit(code);
+}
+main();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGhE,4DAA4D;AAC5D,SAAS;AACT,4DAA4D;AAE5D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC1D,MAAM,CAAC,GAAG;IACR,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;IAC3B,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;IAC1B,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;IACzB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;IAC1B,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;IAC5B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;IAC7B,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;IAC3B,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;IAC3B,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;CAC5B,CAAC;AAEF,SAAS,MAAM;IACb,OAAO,CAAC,GAAG,CAAC;EACZ,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK;EACxC,CAAC,CAAC,IAAI,2CAA2C,CAAC,CAAC,KAAK;CACzD,CAAC,CAAC;AACH,CAAC;AAED,SAAS,IAAI;IACX,MAAM,EAAE,CAAC;IACT,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAAK,mCAAmC,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,KAAK,+DAA+D,CAAC,CAAC;IACpI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAAK,2CAA2C,CAAC,CAAC;IAC7G,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAAK,gDAAgD,CAAC,CAAC;IACrH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAAK,kDAAkD,CAAC,CAAC;IACtH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,4CAA4C,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,8BAA8B,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,qDAAqD,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,kEAAkE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACtG,CAAC;AAED,4DAA4D;AAC5D,YAAY;AACZ,4DAA4D;AAE5D,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0DrB,CAAC;AAEF,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmGtB,CAAC;AAEF,4DAA4D;AAC5D,WAAW;AACX,4DAA4D;AAE5D,SAAS,OAAO,CAAC,IAAc;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;IAEjD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,8BAA8B,MAAM,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,kDAAkD,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC;IACzD,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAExC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACrI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,yCAAyC,CAAC,CAAC;IAC9G,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,IAAI,8BAA8B,CAAC,CAAC,KAAK,sBAAsB,CAAC,CAAC;IAC9G,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,sDAAsD,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,IAAc;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,iCAAiC,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,IAAc;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,oCAAoC,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,EAAE,CAAC;IACT,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAExC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1G,IAAI,CAAC,CAAC,UAAU;gBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAClF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9G,IAAI,CAAC,CAAC,UAAU;gBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,KAAK,6BAA6B,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,SAAS,MAAM,CAAC,QAAQ,CAAC,MAAM,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAC5G,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,mCAAmC,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,EAAE,CAAC;IACT,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACjC,aAAa,CAAC,MAAM,CAAC,CAAC;IACtB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,CAAa;IAClC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE,CAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAEpH,OAAO,CAAC,UAAU,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC,IAAI;QAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,KAAK;QAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC,WAAW;QAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAEjC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,CAAC,YAAY,CAAC,CAAC;QACtB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,IAAI,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACpH,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACzC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,CAAC,SAAS,CAAC,CAAC;QACnB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChL,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACzC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO,CAAC,cAAc,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjH,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7G,IAAI,CAAC,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3I,CAAC;IAED,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS;YAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1G,IAAI,CAAC,CAAC,UAAU,CAAC,iBAAiB,KAAK,SAAS;YAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAC;QAC7G,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACvG,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9F,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,KAAK,SAAS;YAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;QACrB,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxI,IAAI,CAAC,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtI,CAAC;IAED,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,CAAC,aAAa,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,CAAC,UAAU,CAAC,gBAAgB,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC3G,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM;YAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9G,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM;YAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtH,CAAC;IAED,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,CAAC,YAAY,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM;YAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3G,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO;YAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO,CAAC,cAAc,CAAC,CAAC;QACxB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACjG,IAAI,CAAC,CAAC,YAAY,CAAC,OAAO;YAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACrE,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU;YAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC9E,IAAI,CAAC,CAAC,YAAY,CAAC,SAAS;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClB,OAAO,CAAC,cAAc,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1H,IAAI,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjI,CAAC;IAED,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACvB,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,gBAAgB,CAAC,iBAAiB;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACnG,IAAI,CAAC,CAAC,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACjD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;gBAC/C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,SAAS,GAAG,CAAC,CAAC,WAAW,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7H,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,4DAA4D;AAC5D,SAAS;AACT,4DAA4D;AAE5D,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,EAAE,AAAD,EAAG,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IAEb,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,MAAM;gBACT,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;gBACrB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACtB,MAAM;YACR,KAAK,UAAU;gBACb,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;gBACzB,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;gBACxB,MAAM;YACR,KAAK,MAAM,CAAC;YACZ,KAAK,QAAQ,CAAC;YACd,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,IAAI,EAAE,CAAC;gBACP,MAAM;YACR;gBACE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,oBAAoB,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;gBAC7D,IAAI,EAAE,CAAC;gBACP,IAAI,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9F,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/enforcer/index.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Runtime policy checks.
+ *
+ * The enforcer doesn't execute anything itself — it answers questions like
+ * "is this proposed file write allowed?" given a parsed WardPolicy. Hosts
+ * (Mund, Hundredmen, custom harnesses) plug this in at the right points in
+ * their agent loop.
+ *
+ * Decisions are explicit: ALLOW, DENY, REQUIRE_APPROVAL. Hosts decide what
+ * to do with a REQUIRE_APPROVAL result (human-in-the-loop, etc.).
+ */
+import type { WardPolicy, FilesystemOp, HttpMethod, DataClassification, ViolationSeverity } from "../types.js";
+export type Decision = "allow" | "deny" | "require_approval";
+export interface CheckResult {
+    decision: Decision;
+    reason: string;
+    matchedRule?: string;
+    severity?: ViolationSeverity;
+}
+export declare function checkFilesystem(policy: WardPolicy, op: FilesystemOp, path: string): CheckResult;
+export declare function checkNetwork(policy: WardPolicy, url: string, method?: HttpMethod): CheckResult;
+export declare function checkCapability(policy: WardPolicy, toolName: string): CheckResult;
+export declare function checkDataEgress(policy: WardPolicy, classification: DataClassification): CheckResult;
+export interface RuntimeState {
+    iterations: number;
+    runtimeSeconds: number;
+    costUSD: number;
+    tokens: number;
+    toolCalls: number;
+    externalServices: Set<string>;
+}
+export declare function checkBehavioral(policy: WardPolicy, state: RuntimeState): CheckResult;
+/**
+ * Match a string against a glob pattern.
+ *   *   matches anything except "/"
+ *   **  matches anything including "/"
+ *   ?   matches a single char
+ *   any other char matches literally
+ */
+export declare function matchGlob(input: string, pattern: string): boolean;
+//# sourceMappingURL=index.d.ts.map

package/dist/enforcer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/enforcer/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EAGZ,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;AAE7D,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CAC9B;AAMD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,UAAU,EAClB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,MAAM,GACX,WAAW,CAiCb;AAMD,wBAAgB,YAAY,CAC1B,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,MAAM,EACX,MAAM,GAAE,UAAkB,GACzB,WAAW,CAqCb;AAMD,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,CAsCjF;AAMD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,UAAU,EAClB,cAAc,EAAE,kBAAkB,GACjC,WAAW,CA0Bb;AAMD,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,GAAG,WAAW,CAmDpF;AAMD;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAYjE"}