@xrkseek/harness 0.4.0-rc.4 → 0.4.1

package/node_modules/@xrkseek/mcp/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,GAErB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,0BAA0B,EAC1B,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,wBAAwB,GAMzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,mCAAmC,EACnC,2BAA2B,EAC3B,yBAAyB,EACzB,gCAAgC,EAChC,8BAA8B,EAC9B,8BAA8B,EAC9B,6BAA6B,GAO9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,gBAAgB,EAChB,iBAAiB,GAKlB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,GAErB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,GAGlB,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,GAErB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,0BAA0B,EAC1B,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,wBAAwB,GAMzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,GAExB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,mCAAmC,EACnC,2BAA2B,EAC3B,yBAAyB,EACzB,gCAAgC,EAChC,8BAA8B,EAC9B,8BAA8B,EAC9B,6BAA6B,GAO9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,gBAAgB,EAChB,iBAAiB,GAKlB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,GAErB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,GAGlB,MAAM,sBAAsB,CAAC"}

package/node_modules/@xrkseek/mcp/dist/oauth-product.d.ts

@@ -0,0 +1,31 @@
+import { type McpDeviceTokenSet } from "./oauth-device.js";
+/** `<home>/mcp-tokens` (override with `tokenDir`). */
+export declare function mcpOAuthTokenDir(homeDir: string, tokenDir?: string): string;
+/** `<token-dir>/<server>.json`; validates the server name first. */
+export declare function mcpOAuthTokenFile(server: string, homeDir: string, tokenDir?: string): string;
+/** Best-effort 0600 so other accounts cannot read a bearer token. */
+export declare function restrictMcpOAuthTokenFile(file: string): void;
+/** Wire-safe status for one server's on-disk token (no secrets). */
+export type McpOAuthTokenStatus = {
+    readonly server: string;
+    readonly tokenFile: string;
+    readonly loggedIn: boolean;
+    readonly expired?: boolean;
+    readonly expiresAt?: number;
+    readonly scope?: string;
+    readonly hasRefreshToken?: boolean;
+};
+/** Read token status without exposing the bearer. */
+export declare function readMcpOAuthTokenStatus(server: string, homeDir: string, options?: {
+    readonly tokenDir?: string;
+    readonly now?: () => number;
+}): McpOAuthTokenStatus;
+export declare function summarizeMcpOAuthTokens(server: string, tokenFile: string, tokens: McpDeviceTokenSet | undefined, now: () => number): McpOAuthTokenStatus;
+/** Delete the token file; returns whether a file existed. */
+export declare function logoutMcpOAuthToken(server: string, homeDir: string, tokenDir?: string): {
+    readonly server: string;
+    readonly status: "logged-out" | "absent";
+};
+/** Persist tokens after a successful device-code poll. */
+export declare function persistMcpOAuthTokens(server: string, homeDir: string, tokens: McpDeviceTokenSet, tokenDir?: string): string;
+//# sourceMappingURL=oauth-product.d.ts.map

package/node_modules/@xrkseek/mcp/dist/oauth-product.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-product.d.ts","sourceRoot":"","sources":["../src/oauth-product.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,mBAAmB,CAAC;AAG3B,sDAAsD;AACtD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAIR;AAED,oEAAoE;AACpE,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAIR;AAED,qEAAqE;AACrE,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAO5D;AAED,oEAAoE;AACpE,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF,qDAAqD;AACrD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IACP,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACxB,GACL,mBAAmB,CAKrB;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,iBAAiB,GAAG,SAAS,EACrC,GAAG,EAAE,MAAM,MAAM,GAChB,mBAAmB,CAarB;AAED,6DAA6D;AAC7D,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GAChB;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,QAAQ,CAAA;CAAE,CAKvE;AAED,0DAA0D;AAC1D,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,iBAAiB,EACzB,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAKR"}

package/node_modules/@xrkseek/mcp/dist/oauth-product.js

@@ -0,0 +1,72 @@
+/**
+ * Product-path helpers for MCP device-code tokens (CLI + Face Settings).
+ *
+ * Token files live at `<XRK_HOME>/mcp-tokens/<server>.json` — the same layout
+ * `xrkh mcp login|status|logout` uses. Callers supply the resolved home so this
+ * module stays free of Face/CLI coupling.
+ */
+import { chmodSync, existsSync, rmSync } from "node:fs";
+import path from "node:path";
+import { McpDeviceTokenStore, isTokenExpired, } from "./oauth-device.js";
+import { assertServerName } from "./names.js";
+/** `<home>/mcp-tokens` (override with `tokenDir`). */
+export function mcpOAuthTokenDir(homeDir, tokenDir) {
+    const override = tokenDir?.trim();
+    if (override)
+        return path.resolve(override);
+    return path.join(path.resolve(homeDir), "mcp-tokens");
+}
+/** `<token-dir>/<server>.json`; validates the server name first. */
+export function mcpOAuthTokenFile(server, homeDir, tokenDir) {
+    const name = server.trim();
+    assertServerName(name);
+    return path.join(mcpOAuthTokenDir(homeDir, tokenDir), `${name}.json`);
+}
+/** Best-effort 0600 so other accounts cannot read a bearer token. */
+export function restrictMcpOAuthTokenFile(file) {
+    if (process.platform === "win32")
+        return;
+    try {
+        chmodSync(file, 0o600);
+    }
+    catch {
+        /* ACLs / exotic filesystems: the token is still usable */
+    }
+}
+/** Read token status without exposing the bearer. */
+export function readMcpOAuthTokenStatus(server, homeDir, options = {}) {
+    const now = options.now ?? (() => Date.now());
+    const tokenFile = mcpOAuthTokenFile(server, homeDir, options.tokenDir);
+    const tokens = new McpDeviceTokenStore(tokenFile).get();
+    return summarizeMcpOAuthTokens(server, tokenFile, tokens, now);
+}
+export function summarizeMcpOAuthTokens(server, tokenFile, tokens, now) {
+    if (!tokens) {
+        return { server, tokenFile, loggedIn: false };
+    }
+    return {
+        server,
+        tokenFile,
+        loggedIn: true,
+        expired: isTokenExpired(tokens, now),
+        ...(tokens.expiresAt !== undefined ? { expiresAt: tokens.expiresAt } : {}),
+        ...(tokens.scope ? { scope: tokens.scope } : {}),
+        hasRefreshToken: Boolean(tokens.refreshToken),
+    };
+}
+/** Delete the token file; returns whether a file existed. */
+export function logoutMcpOAuthToken(server, homeDir, tokenDir) {
+    const file = mcpOAuthTokenFile(server, homeDir, tokenDir);
+    const existed = existsSync(file);
+    if (existed)
+        rmSync(file, { force: true });
+    return { server, status: existed ? "logged-out" : "absent" };
+}
+/** Persist tokens after a successful device-code poll. */
+export function persistMcpOAuthTokens(server, homeDir, tokens, tokenDir) {
+    const file = mcpOAuthTokenFile(server, homeDir, tokenDir);
+    new McpDeviceTokenStore(file).set(tokens);
+    restrictMcpOAuthTokenFile(file);
+    return file;
+}
+//# sourceMappingURL=oauth-product.js.map

package/node_modules/@xrkseek/mcp/dist/oauth-product.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-product.js","sourceRoot":"","sources":["../src/oauth-product.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,mBAAmB,EACnB,cAAc,GAEf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,sDAAsD;AACtD,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,QAAiB;IAEjB,MAAM,QAAQ,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IAClC,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;AACxD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,OAAe,EACf,QAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3B,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;AACH,CAAC;AAaD,qDAAqD;AACrD,MAAM,UAAU,uBAAuB,CACrC,MAAc,EACd,OAAe,EACf,UAGI,EAAE;IAEN,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC;IACxD,OAAO,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAc,EACd,SAAiB,EACjB,MAAqC,EACrC,GAAiB;IAEjB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChD,CAAC;IACD,OAAO;QACL,MAAM;QACN,SAAS;QACT,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC;QACpC,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,mBAAmB,CACjC,MAAc,EACd,OAAe,EACf,QAAiB;IAEjB,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,OAAO;QAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC/D,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,OAAe,EACf,MAAyB,EACzB,QAAiB;IAEjB,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/@xrkseek/policy/README.md

@@ -1,15 +1,18 @@
-# @xrkseek/policy
-
-Policy plane: `tool.call` · `provider.use` · `mcp.connect` → allow | deny | ask.
-
-## Shipped
-
-- `createPolicyEngine` — ordered rules  
-- Rule helpers + pipeline bridges (`createPolicyToolPre` / `Guard`)  
-- **Ruleset JSON**: `parsePolicyRuleset` · `loadPolicyRulesetFile` · `policyRulesetJsonSchema`  
-
-See `docs/policy.md`.
-
-## Not shipped
-
-Hot reload · YAML · approval UI · live MCP connect.
+# @xrkseek/policy
+
+Policy plane: `tool.call` · `provider.use` · `mcp.connect` → allow | deny | ask.
+
+## Shipped
+
+- `createPolicyEngine` — ordered rules  
+- Rule helpers + pipeline bridges (`createPolicyToolPre` / `Guard`)  
+- Write-path floor: `createWritePathSecurityPre` / `Post` (sensitive path deny + content pattern advisory)  
+- **Ruleset JSON**: `parsePolicyRuleset` · `loadPolicyRulesetFile` · `policyRulesetJsonSchema`  
+
+Hardline argv floor lives in `@xrkseek/exec-sandbox` (`createHardlineArgvPre`) and is wired **before** policy in the harness preset.
+
+See `docs/policy.md`.
+
+## Not shipped
+
+Hot reload · YAML · approval UI · live MCP connect.

package/node_modules/@xrkseek/policy/dist/index.d.ts

@@ -4,6 +4,7 @@ export { PolicyGateError, policyWireError, type PolicyWireCode, type PolicyWireD
 export { allowProviderIdsOnly, allowToolNamesOnly, askHostOpenActions, askToolNames, denyHostOpenActions, denyMcpConnect, denyMcpResourceServers, denyOfficeConnect, denyProviderIds, denySidebarEmbedSchemes, denySidebarFsOps, denyToolNames, } from "./rules.js";
 export { createPolicyToolCallGuard, createPolicyToolGuard, createPolicyToolPre, } from "./pipeline.js";
 export { READ_ONLY_DENIED_TOOLS, createReadOnlyToolPre, createSessionReadOnlyToolPre, } from "./permission-pre.js";
+export { SENSITIVE_WRITE_PATH_RULES, WRITE_CONTENT_SECURITY_RULES, createWritePathSecurityPre, createWritePathSecurityPost, matchSensitiveWritePath, scanWritePathSecurity, type ContentSecurityRule, type SecurityFinding, type SensitiveWritePathRule, type WritePathSecurityOptions, } from "./security-guidance.js";
 export { POLICY_RULESET_VERSION, PolicyRulesetParseError, createPolicyEngineFromRuleset, parsePolicyRuleset, type PolicyRuleAction, type PolicyRulesetJson, type PolicyRulesetRuleJson, } from "./ruleset.js";
 export { createPolicyEngineFromFile, decodePolicyRulesetText, loadPolicyRulesetFile, policyRulesetFormatFromPath, type PolicyRulesetFileFormat, } from "./load.js";
 export { policyRulesetJsonSchema } from "./schema.js";

package/node_modules/@xrkseek/policy/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,EACf,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,EACf,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}

package/node_modules/@xrkseek/policy/dist/index.js

@@ -3,6 +3,7 @@ export { PolicyGateError, policyWireError, } from "./wire-error.js";
 export { allowProviderIdsOnly, allowToolNamesOnly, askHostOpenActions, askToolNames, denyHostOpenActions, denyMcpConnect, denyMcpResourceServers, denyOfficeConnect, denyProviderIds, denySidebarEmbedSchemes, denySidebarFsOps, denyToolNames, } from "./rules.js";
 export { createPolicyToolCallGuard, createPolicyToolGuard, createPolicyToolPre, } from "./pipeline.js";
 export { READ_ONLY_DENIED_TOOLS, createReadOnlyToolPre, createSessionReadOnlyToolPre, } from "./permission-pre.js";
+export { SENSITIVE_WRITE_PATH_RULES, WRITE_CONTENT_SECURITY_RULES, createWritePathSecurityPre, createWritePathSecurityPost, matchSensitiveWritePath, scanWritePathSecurity, } from "./security-guidance.js";
 export { POLICY_RULESET_VERSION, PolicyRulesetParseError, createPolicyEngineFromRuleset, parsePolicyRuleset, } from "./ruleset.js";
 export { createPolicyEngineFromFile, decodePolicyRulesetText, loadPolicyRulesetFile, policyRulesetFormatFromPath, } from "./load.js";
 export { policyRulesetJsonSchema } from "./schema.js";

package/node_modules/@xrkseek/policy/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,GAExB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,EACf,eAAe,GAKhB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,kBAAkB,GAInB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,GAE5B,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,GAExB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,EACf,eAAe,GAKhB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,GAKtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,kBAAkB,GAInB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,GAE5B,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}

package/node_modules/@xrkseek/policy/dist/permission-pre.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission-pre.d.ts","sourceRoot":"","sources":["../src/permission-pre.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,4DAA4D;AAC5D,eAAO,MAAM,sBAAsB,aAUjC,CAAC;AAEH,2EAA2E;AAC3E,wBAAgB,qBAAqB,CACnC,SAAS,GAAE,WAAW,CAAC,MAAM,CAA0B,GACtD,UAAU,CAUZ;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,OAAO,EACzB,SAAS,GAAE,WAAW,CAAC,MAAM,CAA0B,GACtD,UAAU,CAMZ"}
+{"version":3,"file":"permission-pre.d.ts","sourceRoot":"","sources":["../src/permission-pre.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,4DAA4D;AAC5D,eAAO,MAAM,sBAAsB,aAWjC,CAAC;AAEH,2EAA2E;AAC3E,wBAAgB,qBAAqB,CACnC,SAAS,GAAE,WAAW,CAAC,MAAM,CAA0B,GACtD,UAAU,CAUZ;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,OAAO,EACzB,SAAS,GAAE,WAAW,CAAC,MAAM,CAA0B,GACtD,UAAU,CAMZ"}

package/node_modules/@xrkseek/policy/dist/permission-pre.js

@@ -1,6 +1,7 @@
 /** Tools that mutate the workspace / run arbitrary code. */
 export const READ_ONLY_DENIED_TOOLS = new Set([
     "apply_edit",
+    "apply_patch",
     "write_file",
     "bash",
     "job_kill",

package/node_modules/@xrkseek/policy/dist/permission-pre.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission-pre.js","sourceRoot":"","sources":["../src/permission-pre.ts"],"names":[],"mappings":"AAEA,4DAA4D;AAC5D,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IAC5C,YAAY;IACZ,YAAY;IACZ,MAAM;IACN,UAAU;IACV,UAAU;IACV,eAAe;IACf,eAAe;IACf,iBAAiB;IACjB,gBAAgB;CACjB,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CACnC,YAAiC,sBAAsB;IAEvD,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC;QACD,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,gCAAgC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;SACxD,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAAyB,EACzB,YAAiC,sBAAsB;IAEvD,MAAM,UAAU,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,CAAC,UAAU,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QACjE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"permission-pre.js","sourceRoot":"","sources":["../src/permission-pre.ts"],"names":[],"mappings":"AAEA,4DAA4D;AAC5D,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IAC5C,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,MAAM;IACN,UAAU;IACV,UAAU;IACV,eAAe;IACf,eAAe;IACf,iBAAiB;IACjB,gBAAgB;CACjB,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CACnC,YAAiC,sBAAsB;IAEvD,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC;QACD,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,gCAAgC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;SACxD,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAAyB,EACzB,YAAiC,sBAAsB;IAEvD,MAAM,UAAU,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,CAAC,UAAU,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QACjE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC;AACJ,CAAC"}

package/node_modules/@xrkseek/policy/dist/security-guidance.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Write-path security guidance (Hermes security-guidance shape, thin subset).
+ *
+ * - Sensitive destination paths → fail-closed deny on `onPre` (before policy).
+ * - Content patterns → advisory append on `onPost` by default; set
+ *   `XRK_SECURITY_GUIDANCE_BLOCK=1` to refuse the write on `onPre` instead.
+ * - `XRK_SECURITY_GUIDANCE_DISABLE=1` kill switch.
+ */
+import type { PostHandler, PreHandler } from "@xrkseek/core-tools";
+/** Sensitive write destinations — deny before policy (fail-closed). */
+export interface SensitiveWritePathRule {
+    readonly id: string;
+    readonly pattern: RegExp;
+    readonly reason: string;
+}
+export declare const SENSITIVE_WRITE_PATH_RULES: readonly SensitiveWritePathRule[];
+export interface ContentSecurityRule {
+    readonly id: string;
+    readonly reminder: string;
+    readonly substrings?: readonly string[];
+    readonly regex?: RegExp;
+    readonly pathFilter?: (path: string) => boolean;
+    readonly pathCheck?: (path: string) => boolean;
+}
+/** Curated content patterns (inspired by Hermes / Anthropic security-guidance; not a verbatim fork). */
+export declare const WRITE_CONTENT_SECURITY_RULES: readonly ContentSecurityRule[];
+export interface SecurityFinding {
+    readonly id: string;
+    readonly reminder: string;
+}
+/** Scan write args; empty when disabled or oversize. */
+export declare function scanWritePathSecurity(toolName: string, args: unknown, options?: {
+    readonly env?: NodeJS.ProcessEnv;
+    readonly contentRules?: readonly ContentSecurityRule[];
+}): readonly SecurityFinding[];
+export declare function matchSensitiveWritePath(filePath: string, rules?: readonly SensitiveWritePathRule[]): SensitiveWritePathRule | undefined;
+export interface WritePathSecurityOptions {
+    readonly env?: NodeJS.ProcessEnv;
+    readonly pathRules?: readonly SensitiveWritePathRule[];
+    readonly contentRules?: readonly ContentSecurityRule[];
+}
+/**
+ * Pre-policy floor for write tools: sensitive path deny; optional content block.
+ */
+export declare function createWritePathSecurityPre(options?: WritePathSecurityOptions): PreHandler;
+/**
+ * Advisory post: append guidance to a successful write result (Hermes default).
+ */
+export declare function createWritePathSecurityPost(options?: WritePathSecurityOptions): PostHandler;
+//# sourceMappingURL=security-guidance.d.ts.map

package/node_modules/@xrkseek/policy/dist/security-guidance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-guidance.d.ts","sourceRoot":"","sources":["../src/security-guidance.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAuBnE,uEAAuE;AACvE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,0BAA0B,EAAE,SAAS,sBAAsB,EA0BvE,CAAC;AAEF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CAChD;AAMD,wGAAwG;AACxG,eAAO,MAAM,4BAA4B,EAAE,SAAS,mBAAmB,EA8DtE,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAkBD,wDAAwD;AACxD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,GAAE;IACP,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACnD,GACL,SAAS,eAAe,EAAE,CAyC5B;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,KAAK,GAAE,SAAS,sBAAsB,EAA+B,GACpE,sBAAsB,GAAG,SAAS,CAMpC;AAgCD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACvD,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACxD;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,GAAE,wBAA6B,GACrC,UAAU,CA4BZ;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,GAAE,wBAA6B,GACrC,WAAW,CAqBb"}

package/node_modules/@xrkseek/policy/dist/security-guidance.js

@@ -0,0 +1,262 @@
+/**
+ * Write-path security guidance (Hermes security-guidance shape, thin subset).
+ *
+ * - Sensitive destination paths → fail-closed deny on `onPre` (before policy).
+ * - Content patterns → advisory append on `onPost` by default; set
+ *   `XRK_SECURITY_GUIDANCE_BLOCK=1` to refuse the write on `onPre` instead.
+ * - `XRK_SECURITY_GUIDANCE_DISABLE=1` kill switch.
+ */
+const WRITE_TOOLS = new Map([
+    ["write_file", { pathKeys: ["path", "file_path"], contentKeys: ["content"] }],
+    ["apply_edit", { pathKeys: ["path", "file_path"], contentKeys: ["new_string", "content"] }],
+    [
+        "apply_patch",
+        { pathKeys: ["path", "file_path"], contentKeys: ["patch", "new_string", "input"] },
+    ],
+]);
+const MAX_SCAN_BYTES = 256 * 1024;
+const TRUTHY = new Set(["1", "true", "yes", "on"]);
+function envFlag(env, name) {
+    return TRUTHY.has(String(env[name] ?? "").trim().toLowerCase());
+}
+export const SENSITIVE_WRITE_PATH_RULES = [
+    {
+        id: "dot-env",
+        pattern: /(?:^|[/\\])\.env(?:\.[^/\\]+)?$/i,
+        reason: "hardline: write to project .env (credentials)",
+    },
+    {
+        id: "ssh-dir",
+        pattern: /(?:^|[/\\])\.ssh(?:[/\\]|$)/i,
+        reason: "hardline: write under .ssh",
+    },
+    {
+        id: "xrk-credentials",
+        pattern: /(?:^|[/\\])\.xrk(?:[/\\].*)?[/\\]\.credentials(?:\.ya?ml)?$/i,
+        reason: "hardline: write to harness credentials file",
+    },
+    {
+        id: "shell-rc",
+        pattern: /(?:^|[/\\])\.(?:bashrc|zshrc|profile|bash_profile|zprofile)$/i,
+        reason: "hardline: write to shell rc / profile",
+    },
+    {
+        id: "system-etc",
+        pattern: /(?:^|[/\\])(?:etc|private[/\\]etc)[/\\]/i,
+        reason: "hardline: write under /etc",
+    },
+];
+const JS_EXTS = /\.(?:js|jsx|ts|tsx|mjs|cjs|mts|cts|vue|svelte)$/i;
+const PY_EXTS = /\.(?:py|pyi|ipynb)$/i;
+const DOC_EXTS = /\.(?:md|mdx|txt|rst|json|ya?ml)$/i;
+/** Curated content patterns (inspired by Hermes / Anthropic security-guidance; not a verbatim fork). */
+export const WRITE_CONTENT_SECURITY_RULES = [
+    {
+        id: "github_actions_workflow",
+        reminder: "Security warning: editing a GitHub Actions workflow — never interpolate untrusted event fields into `run:` or `ref:`; pass via `env:` with quoting.",
+        pathCheck: (p) => p.replace(/\\/g, "/").includes(".github/workflows/") &&
+            /\.ya?ml$/i.test(p),
+    },
+    {
+        id: "eval_injection",
+        reminder: "Security warning: eval() executes arbitrary code. Prefer JSON.parse / ast.literal_eval / a safe expression parser.",
+        pathFilter: (p) => !DOC_EXTS.test(p),
+        regex: /(?<![A-Za-z0-9_.])eval\s*\(/,
+    },
+    {
+        id: "child_process_exec",
+        reminder: "Security warning: child_process.exec / execSync run through a shell — prefer execFile/spawn with an argv array.",
+        pathFilter: (p) => JS_EXTS.test(p),
+        substrings: ["child_process.exec", "execSync("],
+        regex: /(?<![A-Za-z0-9_.])exec\s*\(/,
+    },
+    {
+        id: "dangerously_set_inner_html",
+        reminder: "Security warning: dangerouslySetInnerHTML can XSS untrusted HTML — sanitize (e.g. DOMPurify) or avoid.",
+        substrings: ["dangerouslySetInnerHTML"],
+    },
+    {
+        id: "inner_html_assign",
+        reminder: "Security warning: assigning to innerHTML with untrusted content enables XSS — prefer textContent or a sanitizer.",
+        substrings: [".innerHTML =", ".innerHTML="],
+    },
+    {
+        id: "pickle_load",
+        reminder: "Security warning: pickle / Unpickler loads can execute arbitrary code — prefer JSON or schema-validated formats.",
+        pathFilter: (p) => PY_EXTS.test(p),
+        regex: /(?<![A-Za-z0-9_])pickle\.(?:loads?|Unpickler)\b/,
+    },
+    {
+        id: "os_system",
+        reminder: "Security warning: os.system() is a shell injection sink — use subprocess.run([...]) with an argv list.",
+        pathFilter: (p) => PY_EXTS.test(p),
+        regex: /\bos\.system\s*\(/,
+    },
+    {
+        id: "subprocess_shell_true",
+        reminder: "Security warning: subprocess(..., shell=True) enables command injection — pass argv as a list without shell.",
+        regex: /subprocess\.(?:run|call|Popen|check_output|check_call)\([^)]*shell\s*=\s*True/,
+    },
+    {
+        id: "yaml_unsafe_load",
+        reminder: "Security warning: yaml.load() can construct arbitrary objects — use yaml.safe_load() for data.",
+        regex: /\byaml\.load\s*\((?![^)\n]{0,80}\bSafe)/,
+    },
+];
+function ruleMatches(rule, filePath, content) {
+    try {
+        if (rule.pathCheck)
+            return rule.pathCheck(filePath);
+        if (rule.pathFilter && !rule.pathFilter(filePath))
+            return false;
+    }
+    catch {
+        return false;
+    }
+    if (rule.substrings?.some((s) => content.includes(s)))
+        return true;
+    if (rule.regex?.test(content))
+        return true;
+    return false;
+}
+/** Scan write args; empty when disabled or oversize. */
+export function scanWritePathSecurity(toolName, args, options = {}) {
+    const env = options.env ?? process.env;
+    if (envFlag(env, "XRK_SECURITY_GUIDANCE_DISABLE"))
+        return [];
+    const spec = WRITE_TOOLS.get(toolName);
+    if (!spec || !args || typeof args !== "object" || Array.isArray(args)) {
+        return [];
+    }
+    const rec = args;
+    let filePath = "";
+    for (const k of spec.pathKeys) {
+        const v = rec[k];
+        if (typeof v === "string" && v.trim()) {
+            filePath = v;
+            break;
+        }
+    }
+    const rules = options.contentRules ?? WRITE_CONTENT_SECURITY_RULES;
+    const findings = [];
+    const seen = new Set();
+    // path_check rules fire on path alone
+    for (const rule of rules) {
+        if (!rule.pathCheck)
+            continue;
+        if (ruleMatches(rule, filePath, "") && !seen.has(rule.id)) {
+            seen.add(rule.id);
+            findings.push({ id: rule.id, reminder: rule.reminder });
+        }
+    }
+    for (const ck of spec.contentKeys) {
+        const raw = rec[ck];
+        if (typeof raw !== "string" || !raw)
+            continue;
+        if (Buffer.byteLength(raw, "utf8") > MAX_SCAN_BYTES)
+            continue;
+        for (const rule of rules) {
+            if (rule.pathCheck)
+                continue;
+            if (!ruleMatches(rule, filePath, raw) || seen.has(rule.id))
+                continue;
+            seen.add(rule.id);
+            findings.push({ id: rule.id, reminder: rule.reminder });
+        }
+    }
+    return findings;
+}
+export function matchSensitiveWritePath(filePath, rules = SENSITIVE_WRITE_PATH_RULES) {
+    const normalized = filePath.replace(/\\/g, "/");
+    for (const rule of rules) {
+        if (rule.pattern.test(normalized))
+            return rule;
+    }
+    return undefined;
+}
+function extractWritePath(toolName, args) {
+    const spec = WRITE_TOOLS.get(toolName);
+    if (!spec || !args || typeof args !== "object" || Array.isArray(args)) {
+        return "";
+    }
+    const rec = args;
+    for (const k of spec.pathKeys) {
+        const v = rec[k];
+        if (typeof v === "string" && v.trim())
+            return v;
+    }
+    return "";
+}
+function formatWarningBlock(findings) {
+    const names = findings.map((f) => f.id).join(", ");
+    const lines = [
+        "",
+        "---",
+        `Security guidance — ${findings.length} pattern${findings.length === 1 ? "" : "s"} matched (${names})`,
+        "",
+    ];
+    for (const f of findings) {
+        lines.push(f.reminder, "");
+    }
+    lines.push("Pattern matches can be false positives. If the construct is safe here, document why briefly and continue; otherwise fix before moving on.");
+    return lines.join("\n");
+}
+/**
+ * Pre-policy floor for write tools: sensitive path deny; optional content block.
+ */
+export function createWritePathSecurityPre(options = {}) {
+    const env = options.env ?? process.env;
+    return (ctx) => {
+        if (!WRITE_TOOLS.has(ctx.call.name)) {
+            return { action: "continue", args: ctx.args };
+        }
+        if (envFlag(env, "XRK_SECURITY_GUIDANCE_DISABLE")) {
+            return { action: "continue", args: ctx.args };
+        }
+        const filePath = extractWritePath(ctx.call.name, ctx.args);
+        const pathHit = matchSensitiveWritePath(filePath, options.pathRules);
+        if (pathHit) {
+            return { action: "deny", reason: pathHit.reason };
+        }
+        if (envFlag(env, "XRK_SECURITY_GUIDANCE_BLOCK")) {
+            const findings = scanWritePathSecurity(ctx.call.name, ctx.args, options);
+            if (findings.length > 0) {
+                return {
+                    action: "deny",
+                    reason: "security-guidance refused this write:" +
+                        formatWarningBlock(findings) +
+                        "\n\nTo override, unset XRK_SECURITY_GUIDANCE_BLOCK and retry.",
+                };
+            }
+        }
+        return { action: "continue", args: ctx.args };
+    };
+}
+/**
+ * Advisory post: append guidance to a successful write result (Hermes default).
+ */
+export function createWritePathSecurityPost(options = {}) {
+    const env = options.env ?? process.env;
+    return (ctx) => {
+        if (!WRITE_TOOLS.has(ctx.call.name))
+            return { action: "accept" };
+        if (envFlag(env, "XRK_SECURITY_GUIDANCE_DISABLE")) {
+            return { action: "accept" };
+        }
+        if (envFlag(env, "XRK_SECURITY_GUIDANCE_BLOCK")) {
+            return { action: "accept" };
+        }
+        if (!ctx.result || ctx.result.isError)
+            return { action: "accept" };
+        const findings = scanWritePathSecurity(ctx.call.name, ctx.args, options);
+        if (findings.length === 0)
+            return { action: "accept" };
+        const block = formatWarningBlock(findings);
+        const prev = ctx.result.content;
+        const next = typeof prev === "string"
+            ? `${prev}${block}`
+            : `${JSON.stringify(prev)}${block}`;
+        return { action: "replace", content: next };
+    };
+}
+//# sourceMappingURL=security-guidance.js.map

package/node_modules/@xrkseek/policy/dist/security-guidance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-guidance.js","sourceRoot":"","sources":["../src/security-guidance.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,WAAW,GACf,IAAI,GAAG,CAAC;IACN,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;IAC7E,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;IAC3F;QACE,aAAa;QACb,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE;KACnF;CACF,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AAElC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAEnD,SAAS,OAAO,CACd,GAAsB,EACtB,IAAY;IAEZ,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAClE,CAAC;AASD,MAAM,CAAC,MAAM,0BAA0B,GAAsC;IAC3E;QACE,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,kCAAkC;QAC3C,MAAM,EAAE,+CAA+C;KACxD;IACD;QACE,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,8BAA8B;QACvC,MAAM,EAAE,4BAA4B;KACrC;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,OAAO,EAAE,8DAA8D;QACvE,MAAM,EAAE,6CAA6C;KACtD;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,+DAA+D;QACxE,MAAM,EAAE,uCAAuC;KAChD;IACD;QACE,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,0CAA0C;QACnD,MAAM,EAAE,4BAA4B;KACrC;CACF,CAAC;AAWF,MAAM,OAAO,GAAG,kDAAkD,CAAC;AACnE,MAAM,OAAO,GAAG,sBAAsB,CAAC;AACvC,MAAM,QAAQ,GAAG,mCAAmC,CAAC;AAErD,wGAAwG;AACxG,MAAM,CAAC,MAAM,4BAA4B,GAAmC;IAC1E;QACE,EAAE,EAAE,yBAAyB;QAC7B,QAAQ,EACN,qJAAqJ;QACvJ,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CACf,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YACpD,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;KACtB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EACN,oHAAoH;QACtH,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,KAAK,EAAE,6BAA6B;KACrC;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EACN,iHAAiH;QACnH,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,UAAU,EAAE,CAAC,oBAAoB,EAAE,WAAW,CAAC;QAC/C,KAAK,EAAE,6BAA6B;KACrC;IACD;QACE,EAAE,EAAE,4BAA4B;QAChC,QAAQ,EACN,wGAAwG;QAC1G,UAAU,EAAE,CAAC,yBAAyB,CAAC;KACxC;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EACN,kHAAkH;QACpH,UAAU,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC;KAC5C;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EACN,kHAAkH;QACpH,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,KAAK,EAAE,iDAAiD;KACzD;IACD;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EACN,wGAAwG;QAC1G,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,KAAK,EAAE,mBAAmB;KAC3B;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EACN,8GAA8G;QAChH,KAAK,EAAE,+EAA+E;KACvF;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EACN,gGAAgG;QAClG,KAAK,EAAE,yCAAyC;KACjD;CACF,CAAC;AAOF,SAAS,WAAW,CAClB,IAAyB,EACzB,QAAgB,EAChB,OAAe;IAEf,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,IAAa,EACb,UAGI,EAAE;IAEN,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,IAAI,OAAO,CAAC,GAAG,EAAE,+BAA+B,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,QAAQ,GAAG,CAAC,CAAC;YACb,MAAM;QACR,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,IAAI,4BAA4B,CAAC;IACnE,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,sCAAsC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,SAAS;QAC9B,IAAI,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG;YAAE,SAAS;QAC9C,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,cAAc;YAAE,SAAS;QAC9D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,SAAS;gBAAE,SAAS;YAC7B,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,SAAS;YACrE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAgB,EAChB,QAA2C,0BAA0B;IAErE,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB,EAAE,IAAa;IACvD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE;YAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAoC;IAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,KAAK;QACL,uBAAuB,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,aAAa,KAAK,GAAG;QACtG,EAAE;KACH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,KAAK,CAAC,IAAI,CACR,2IAA2I,CAC5I,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAQD;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,UAAoC,EAAE;IAEtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,EAAE,+BAA+B,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC;QACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,EAAE,6BAA6B,CAAC,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACzE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO;oBACL,MAAM,EAAE,MAAM;oBACd,MAAM,EACJ,uCAAuC;wBACvC,kBAAkB,CAAC,QAAQ,CAAC;wBAC5B,+DAA+D;iBAClE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAChD,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAoC,EAAE;IAEtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACjE,IAAI,OAAO,CAAC,GAAG,EAAE,+BAA+B,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,EAAE,6BAA6B,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QAChC,MAAM,IAAI,GACR,OAAO,IAAI,KAAK,QAAQ;YACtB,CAAC,CAAC,GAAG,IAAI,GAAG,KAAK,EAAE;YACnB,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC;QACxC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC,CAAC;AACJ,CAAC"}