@zhin.js/agent 1.1.22 → 1.1.26

package/lib/security/owner-approve-always-store.d.ts

@@ -1,67 +0,0 @@
-import { type Message, type Plugin } from '@zhin.js/core';
-export declare const OWNER_APPROVE_ALWAYS_TOOL: "bash";
-export type ToolRequesterRole = 'master' | 'trusted' | 'other' | 'unknown';
-/** 需 Owner 审批的 icqq 子命令（正则匹配整段子命令文本，大小写不敏感） */
-export declare const ICQQ_SENSITIVE_SUBCOMMAND_REGEXES: readonly RegExp[];
-export interface BashRuleEntry {
-    id: string;
-    pattern: string;
-    createdAt: number;
-}
-export interface BashApprovalBotEntry {
-    bashAlways?: boolean;
-    bashRules: BashRuleEntry[];
-}
-export declare function getEndpointMaster(plugin: Plugin | null | undefined, commMessage: Message): string | undefined;
-export declare function resolveToolRequesterRole(plugin: Plugin | null | undefined, commMessage: Message): ToolRequesterRole;
-export declare function getOwnerCommMessageOrUndefined(plugin: Plugin | null | undefined, message: Message): Message | undefined;
-/** 是否已由 Owner `/approve always bash` 永久放行。 */
-export declare function hasOwnerApproveAlways(plugin: Plugin | null | undefined, commMessage: Message, toolName: string): boolean;
-export declare function setBashAlways(plugin: Plugin | null | undefined, commMessage: Message, value: boolean): void;
-export declare function addOwnerApproveAlways(plugin: Plugin | null | undefined, commMessage: Message, toolName: string): {
-    ok: true;
-} | {
-    ok: false;
-    error: string;
-};
-export declare function removeOwnerApproveAlways(plugin: Plugin | null | undefined, commMessage: Message, toolName: string): {
-    ok: true;
-} | {
-    ok: false;
-    error: string;
-};
-export declare function addBashApproveRule(plugin: Plugin | null | undefined, commMessage: Message, pattern: string): {
-    ok: true;
-    id: string;
-} | {
-    ok: false;
-    error: string;
-};
-export declare function removeBashApproveRule(plugin: Plugin | null | undefined, commMessage: Message, ruleId: string): {
-    ok: true;
-} | {
-    ok: false;
-    error: string;
-};
-/** exec 策略：bashAlways 或任一 bashRules 匹配 commandLine */
-export declare function matchesBashOwnerExecBypass(plugin: Plugin | null | undefined, commMessage: Message, commandLine: string): boolean;
-export declare function formatBashApproveList(plugin: Plugin | null | undefined, commMessage: Message): string;
-export declare function isIcqqSensitiveSubcommand(fullSubCommand: string): boolean;
-export declare function getPendingOrchestrationCount(): number;
-export declare function evictPendingOrchestrationIfOverPressure(): number;
-export declare function setPendingOrchestrationTool(plugin: Plugin | null | undefined, commMessage: Message, toolName: string): void;
-export declare function clearPendingOrchestrationTool(plugin: Plugin | null | undefined, commMessage: Message): void;
-export declare function getPendingOrchestrationTool(plugin: Plugin | null | undefined, commMessage: Message): string | undefined;
-export interface OwnerApprovalCommandContext {
-    readonly platform: string;
-    readonly endpoint: string;
-    readonly ownerId?: string;
-    readonly subjectId: string;
-    readonly scope: 'private' | 'group' | 'channel';
-}
-/**
- * Plugin Runtime Owner `/approve` 命令面（无 host Plugin / CommandFeature）。
- * @returns reply text when handled; null when not an approve command.
- */
-export declare function handleRuntimeOwnerApproveCommand(context: OwnerApprovalCommandContext, rawText: string): string | null;
-//# sourceMappingURL=owner-approve-always-store.d.ts.map

package/lib/security/owner-approve-always-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"owner-approve-always-store.d.ts","sourceRoot":"","sources":["../../src/security/owner-approve-always-store.ts"],"names":[],"mappings":"AAWA,OAAO,EAAgB,KAAK,OAAO,EAAE,KAAK,MAAM,EAA8D,MAAM,eAAe,CAAC;AAEpI,eAAO,MAAM,yBAAyB,EAAG,MAAe,CAAC;AAEzD,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAK3E,+CAA+C;AAC/C,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EAoB9D,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,aAAa,EAAE,CAAC;CAC5B;AAwGD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,WAAW,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAe7G;AAqBD,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,WAAW,EAAE,OAAO,GACnB,iBAAiB,CA0BnB;AAwED,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,OAAO,EAAE,OAAO,GACf,OAAO,GAAG,SAAS,CAKrB;AAED,8CAA8C;AAC9C,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,WAAW,EAAE,OAAO,EACpB,QAAQ,EAAE,MAAM,GACf,OAAO,CAIT;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAG3G;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,WAAW,EAAE,OAAO,EACpB,QAAQ,EAAE,MAAM,GACf;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAQ7C;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,WAAW,EAAE,OAAO,EACpB,QAAQ,EAAE,MAAM,GACf;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAW7C;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,WAAW,EAAE,OAAO,EACpB,OAAO,EAAE,MAAM,GACd;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAMzD;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,WAAW,EAAE,OAAO,EACpB,MAAM,EAAE,MAAM,GACb;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAM7C;AAED,sDAAsD;AACtD,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,WAAW,EAAE,OAAO,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAiBT;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,WAAW,EAAE,OAAO,GAAG,MAAM,CAGrG;AAED,wBAAgB,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAIzE;AA8BD,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAED,wBAAgB,uCAAuC,IAAI,MAAM,CAUhE;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,WAAW,EAAE,OAAO,EACpB,QAAQ,EAAE,MAAM,GACf,IAAI,CAIN;AAED,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,WAAW,EAAE,OAAO,GACnB,IAAI,CAGN;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,WAAW,EAAE,OAAO,GACnB,MAAM,GAAG,SAAS,CAGpB;AAwCD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;CACjD;AAWD;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,2BAA2B,EACpC,OAAO,EAAE,MAAM,GACd,MAAM,GAAG,IAAI,CA8Df"}

package/lib/security/owner-approve-always-store.js

@@ -1,510 +0,0 @@
-/**
- * Owner 对 bash / icqq CLI 的放行策略（持久化 data/owner-approve-always.json）。
- *
- * - **bashAlways**：由 Owner `/approve` 显式持久化的 shell 放行开关（仅 bash 工具链）。
- * - **bashRules**：正则列表；在 exec 策略中若 **整条待检子命令** 匹配任一规则，则视为已放行（不固化解参数，例如 `^icqq\\s+friend\\s+like\\b`）。
- *
- * icqq 子命令：非敏感操作默认直接放行；仅命中 {@link ICQQ_SENSITIVE_SUBCOMMAND_REGEXES} 时需审批，除非 always 或规则匹配。
- */
-import * as crypto from 'node:crypto';
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-import { hasSenderRole, resolveSubjectRoles, senderRolesFromMessage } from '@zhin.js/core';
-import { getDataDir } from '../discovery/utils.js';
-export const OWNER_APPROVE_ALWAYS_TOOL = 'bash';
-const STORE_FILE = 'owner-approve-always.json';
-const STORE_VERSION = 2;
-/** 需 Owner 审批的 icqq 子命令（正则匹配整段子命令文本，大小写不敏感） */
-export const ICQQ_SENSITIVE_SUBCOMMAND_REGEXES = [
-    /\bicqq\s+friend\s+delete\b/i,
-    /\bicqq\s+friend\s+block\b/i,
-    /\bicqq\s+friend\s+move\b/i,
-    /\bicqq\s+group\s+kick\b/i,
-    /\bicqq\s+group\s+mute\b/i,
-    /\bicqq\s+group\s+set\b/i,
-    /\bicqq\s+group\s+admin\b/i,
-    /\bicqq\s+group\s+announce\b/i,
-    /\bicqq\s+group\s+transfer\b/i,
-    /\bicqq\s+group\s+quit\b/i,
-    /\bicqq\s+group\s+dissolve\b/i,
-    /\bicqq\s+group\s+invite\b/i,
-    /\bicqq\s+request\b/i,
-    /\bicqq\s+wallet\b/i,
-    /\bicqq\s+pay\b/i,
-    /\bicqq\s+recall\b/i,
-    /\bicqq\s+file\s+upload\b/i,
-    /\bicqq\s+file\s+delete\b/i,
-    /\bicqq\s+gfs\b.*\b(rm|delete|del)\b/i,
-];
-function storePath() {
-    return path.join(getDataDir(), STORE_FILE);
-}
-function emptyV2() {
-    return { version: STORE_VERSION, endpoints: {} };
-}
-function normalizeBotKey(adapter, endpointKey, ownerId) {
-    return `${adapter}|${endpointKey}|${ownerId}`;
-}
-function approvalAddressKey(address) {
-    return normalizeBotKey(address.platform, address.endpoint, address.ownerId);
-}
-function approvalAddressFromMessage(plugin, message) {
-    const platform = String(message.$adapter ?? '').trim();
-    const endpoint = String(message.$endpoint ?? '').trim();
-    const ownerId = getEndpointMaster(plugin, message)?.trim();
-    return platform && endpoint && ownerId
-        ? Object.freeze({ platform, endpoint, ownerId })
-        : undefined;
-}
-function migrateV1ToV2(data) {
-    const out = emptyV2();
-    for (const e of data.entries || []) {
-        if (typeof e !== 'string')
-            continue;
-        const parts = e.split('|');
-        if (parts.length !== 4)
-            continue;
-        const [adapter, endpointKey, ownerId, scope] = parts;
-        if (scope === 'orchestration:bash') {
-            const k = normalizeBotKey(adapter, endpointKey, ownerId);
-            if (!out.endpoints[k])
-                out.endpoints[k] = { bashRules: [] };
-            out.endpoints[k].bashAlways = true;
-        }
-    }
-    return out;
-}
-function readStore() {
-    const p = storePath();
-    try {
-        const raw = fs.readFileSync(p, 'utf-8');
-        const data = JSON.parse(raw);
-        if (!data || typeof data !== 'object')
-            return emptyV2();
-        if (data.version === STORE_VERSION && data.endpoints && typeof data.endpoints === 'object') {
-            const v2 = data;
-            for (const k of Object.keys(v2.endpoints)) {
-                const ent = v2.endpoints[k];
-                if (!ent.bashRules)
-                    ent.bashRules = [];
-            }
-            return v2;
-        }
-        if (data.version === 1 && Array.isArray(data.entries)) {
-            const v2 = migrateV1ToV2(data);
-            writeStore(v2);
-            return v2;
-        }
-        if (Array.isArray(data.entries)) {
-            const v2 = migrateV1ToV2({ version: 1, entries: data.entries });
-            writeStore(v2);
-            return v2;
-        }
-        return emptyV2();
-    }
-    catch {
-        return emptyV2();
-    }
-}
-function writeStore(data) {
-    const p = storePath();
-    const tmp = `${p}.${process.pid}.tmp`;
-    const body = `${JSON.stringify(data, null, 2)}\n`;
-    fs.writeFileSync(tmp, body, 'utf-8');
-    fs.renameSync(tmp, p);
-}
-export function getEndpointMaster(plugin, commMessage) {
-    const fromExtra = commMessage.extra?.endpointMaster;
-    if (fromExtra != null && String(fromExtra).trim() !== '') {
-        return String(fromExtra);
-    }
-    if (!plugin)
-        return undefined;
-    const root = plugin.root ?? plugin;
-    try {
-        const adapter = root.inject(commMessage.$adapter);
-        const endpoint = adapter?.endpoints?.get(commMessage.$endpoint);
-        const master = endpoint?.$config?.master;
-        return master != null ? String(master) : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function normalizeIdList(input) {
-    if (Array.isArray(input))
-        return input.map((v) => String(v)).filter(Boolean);
-    if (typeof input === 'string') {
-        return input
-            .split(/[\s,]+/)
-            .map((v) => v.trim())
-            .filter(Boolean);
-    }
-    return [];
-}
-function getEndpointTrustedIds(plugin, commMessage) {
-    const root = plugin.root ?? plugin;
-    const adapter = root.inject(commMessage.$adapter);
-    const endpoint = adapter?.endpoints?.get(commMessage.$endpoint);
-    const endpointConfig = endpoint?.$config ?? {};
-    return normalizeIdList(endpointConfig.trusted);
-}
-export function resolveToolRequesterRole(plugin, commMessage) {
-    const roles = senderRolesFromMessage(commMessage);
-    if (commMessage.$sender.isMaster !== undefined || commMessage.$sender.isTrusted !== undefined) {
-        if (hasSenderRole(roles, 'master'))
-            return 'master';
-        if (hasSenderRole(roles, 'trusted'))
-            return 'trusted';
-        return 'other';
-    }
-    if (plugin) {
-        try {
-            const resolved = resolveSubjectRoles(plugin.root ?? plugin, commMessage);
-            if (hasSenderRole(resolved.roles, 'master'))
-                return 'master';
-            if (hasSenderRole(resolved.roles, 'trusted'))
-                return 'trusted';
-            return 'other';
-        }
-        catch {
-            /* fall through */
-        }
-    }
-    if (!commMessage.$adapter || !commMessage.$endpoint || !commMessage.$sender?.id)
-        return 'unknown';
-    const senderId = String(commMessage.$sender.id);
-    const masterId = getEndpointMaster(plugin, commMessage);
-    if (masterId && senderId === String(masterId))
-        return 'master';
-    if (plugin) {
-        const trusted = getEndpointTrustedIds(plugin, commMessage);
-        if (trusted.includes(senderId))
-            return 'trusted';
-    }
-    return 'other';
-}
-function getEntryAt(address) {
-    return readStore().endpoints[approvalAddressKey(address)];
-}
-function setBashAlwaysAt(address, value) {
-    const key = approvalAddressKey(address);
-    const data = readStore();
-    const previous = data.endpoints[key] ?? { bashRules: [] };
-    data.endpoints[key] = {
-        ...(value ? { bashAlways: true } : {}),
-        bashRules: [...(previous.bashRules ?? [])],
-    };
-    writeStore(data);
-}
-function addBashApproveRuleAt(address, pattern) {
-    const trimmed = pattern.trim();
-    if (!trimmed)
-        return { ok: false, error: '正则不能为空。' };
-    try {
-        new RegExp(trimmed);
-    }
-    catch (error) {
-        return { ok: false, error: `无效正则: ${error instanceof Error ? error.message : String(error)}` };
-    }
-    const key = approvalAddressKey(address);
-    const data = readStore();
-    const previous = data.endpoints[key] ?? { bashRules: [] };
-    const id = crypto.randomUUID();
-    data.endpoints[key] = {
-        ...(previous.bashAlways ? { bashAlways: true } : {}),
-        bashRules: [...previous.bashRules, { id, pattern: trimmed, createdAt: Date.now() }],
-    };
-    writeStore(data);
-    return { ok: true, id };
-}
-function removeBashApproveRuleAt(address, ruleId) {
-    const id = ruleId.trim();
-    if (!id)
-        return { ok: false, error: '请提供规则 id。' };
-    const key = approvalAddressKey(address);
-    const data = readStore();
-    const entry = data.endpoints[key];
-    if (!entry?.bashRules.length)
-        return { ok: false, error: '当前无自定义规则。' };
-    const next = entry.bashRules.filter((rule) => rule.id !== id && !rule.id.startsWith(id));
-    if (next.length === entry.bashRules.length) {
-        return { ok: false, error: `未找到 id 前缀或全名为「${id}」的规则。` };
-    }
-    data.endpoints[key] = { ...entry, bashRules: next };
-    writeStore(data);
-    return { ok: true };
-}
-function formatBashApproveListAt(address) {
-    const entry = getEntryAt(address);
-    const rules = entry?.bashRules ?? [];
-    if (!entry || (!entry.bashAlways && rules.length === 0)) {
-        return 'bash 永久放行: 否\n自定义正则放行: 无';
-    }
-    return [
-        `bash 永久放行: ${entry.bashAlways ? '是' : '否'}`,
-        `自定义正则放行 (${rules.length}):`,
-        ...rules.map((rule) => `  • [${rule.id.slice(0, 8)}] ${rule.pattern}`),
-    ].join('\n');
-}
-export function getOwnerCommMessageOrUndefined(plugin, message) {
-    if (message.$channel?.type !== 'private')
-        return undefined;
-    const ownerId = getEndpointMaster(plugin, message);
-    if (ownerId == null || String(message.$sender.id) !== String(ownerId))
-        return undefined;
-    return message;
-}
-/** 是否已由 Owner `/approve always bash` 永久放行。 */
-export function hasOwnerApproveAlways(plugin, commMessage, toolName) {
-    if (toolName !== OWNER_APPROVE_ALWAYS_TOOL)
-        return false;
-    const address = approvalAddressFromMessage(plugin, commMessage);
-    return address ? !!getEntryAt(address)?.bashAlways : false;
-}
-export function setBashAlways(plugin, commMessage, value) {
-    const address = approvalAddressFromMessage(plugin, commMessage);
-    if (address)
-        setBashAlwaysAt(address, value);
-}
-export function addOwnerApproveAlways(plugin, commMessage, toolName) {
-    if (toolName.trim().toLowerCase() !== OWNER_APPROVE_ALWAYS_TOOL) {
-        return { ok: false, error: '永久放行仅支持 bash（shell 安全确认）。' };
-    }
-    const address = approvalAddressFromMessage(plugin, commMessage);
-    if (!address)
-        return { ok: false, error: '缺少 platform/endpointKey 或未配置 owner。' };
-    setBashAlwaysAt(address, true);
-    return { ok: true };
-}
-export function removeOwnerApproveAlways(plugin, commMessage, toolName) {
-    if (toolName.trim().toLowerCase() !== OWNER_APPROVE_ALWAYS_TOOL) {
-        return { ok: false, error: '仅可撤销 bash 的永久放行。' };
-    }
-    const address = approvalAddressFromMessage(plugin, commMessage);
-    if (!address)
-        return { ok: false, error: '缺少 platform/endpointKey 或未配置 owner。' };
-    if (!getEntryAt(address)?.bashAlways) {
-        return { ok: false, error: '当前未对 bash 设置永久放行。' };
-    }
-    setBashAlwaysAt(address, false);
-    return { ok: true };
-}
-export function addBashApproveRule(plugin, commMessage, pattern) {
-    const address = approvalAddressFromMessage(plugin, commMessage);
-    if (!address) {
-        return { ok: false, error: '缺少 platform/endpointKey 或未配置 owner。' };
-    }
-    return addBashApproveRuleAt(address, pattern);
-}
-export function removeBashApproveRule(plugin, commMessage, ruleId) {
-    const address = approvalAddressFromMessage(plugin, commMessage);
-    if (!address) {
-        return { ok: false, error: '缺少 platform/endpointKey 或未配置 owner。' };
-    }
-    return removeBashApproveRuleAt(address, ruleId);
-}
-/** exec 策略：bashAlways 或任一 bashRules 匹配 commandLine */
-export function matchesBashOwnerExecBypass(plugin, commMessage, commandLine) {
-    const address = approvalAddressFromMessage(plugin, commMessage);
-    if (!address)
-        return false;
-    const ent = getEntryAt(address);
-    if (!ent)
-        return false;
-    if (ent.bashAlways)
-        return true;
-    const line = commandLine.trim();
-    if (!line)
-        return false;
-    for (const r of ent.bashRules || []) {
-        try {
-            const re = new RegExp(r.pattern);
-            if (re.test(line))
-                return true;
-        }
-        catch {
-            /* skip broken stored pattern */
-        }
-    }
-    return false;
-}
-export function formatBashApproveList(plugin, commMessage) {
-    const address = approvalAddressFromMessage(plugin, commMessage);
-    return address ? formatBashApproveListAt(address) : 'bash 永久放行: 否\n自定义正则放行: 无';
-}
-export function isIcqqSensitiveSubcommand(fullSubCommand) {
-    const line = fullSubCommand.trim();
-    if (!/^\s*icqq(\s|$)/i.test(line))
-        return false;
-    return ICQQ_SENSITIVE_SUBCOMMAND_REGEXES.some((re) => re.test(line));
-}
-const pendingOrchestration = new Map();
-function setPendingAt(address) {
-    pendingOrchestration.set(approvalAddressKey(address), {
-        toolName: OWNER_APPROVE_ALWAYS_TOOL,
-        expiresAt: Date.now() + 15 * 60 * 1000,
-    });
-}
-function clearPendingAt(address) {
-    pendingOrchestration.delete(approvalAddressKey(address));
-}
-function getPendingAt(address) {
-    const key = approvalAddressKey(address);
-    const pending = pendingOrchestration.get(key);
-    if (!pending || pending.toolName !== OWNER_APPROVE_ALWAYS_TOOL) {
-        if (pending)
-            pendingOrchestration.delete(key);
-        return undefined;
-    }
-    if (Date.now() > pending.expiresAt) {
-        pendingOrchestration.delete(key);
-        return undefined;
-    }
-    return pending.toolName;
-}
-export function getPendingOrchestrationCount() {
-    return pendingOrchestration.size;
-}
-export function evictPendingOrchestrationIfOverPressure() {
-    const now = Date.now();
-    let removed = 0;
-    for (const [key, value] of pendingOrchestration) {
-        if (now > value.expiresAt) {
-            pendingOrchestration.delete(key);
-            removed++;
-        }
-    }
-    return removed;
-}
-export function setPendingOrchestrationTool(plugin, commMessage, toolName) {
-    if (toolName !== OWNER_APPROVE_ALWAYS_TOOL)
-        return;
-    const address = approvalAddressFromMessage(plugin, commMessage);
-    if (address)
-        setPendingAt(address);
-}
-export function clearPendingOrchestrationTool(plugin, commMessage) {
-    const address = approvalAddressFromMessage(plugin, commMessage);
-    if (address)
-        clearPendingAt(address);
-}
-export function getPendingOrchestrationTool(plugin, commMessage) {
-    const address = approvalAddressFromMessage(plugin, commMessage);
-    return address ? getPendingAt(address) : undefined;
-}
-function usageLines() {
-    return [
-        '用法（bash / icqq）：',
-        '  /approve always bash     — 永久跳过 bash 的 Owner 硬确认',
-        '  /approve always         — 同上；须在近期 bash 私聊待确认窗口内',
-        '  /approve rule <正则>   — 为敏感 icqq 命令增加放行规则（匹配整段子命令）',
-        '  /approve list           — 列出永久放行与规则 id',
-        '  /approve revoke rule <id> — 删除一条规则（id 可用 list 前 8 位）',
-        '  /approve revoke         — 撤销 bash 永久放行（不删规则）',
-    ].join('\n');
-}
-const LINE_TERMINATOR_RE = /[\n\r\u2028\u2029]/u;
-/**
- * 线性解析 `/approve rule <内容>`，返回捕获内容（未 trim），不匹配返回 null。
- * 语义等价于正则 `/^\/approve\s+rule\s+(.+)$/iu`（无 m 时 `$` 仅匹配全文末尾、
- * `.` 不含换行符；`\s+` 贪婪、必要时回退一个非换行空白给 `.+`），
- * 但避免 `\s+` 与 `.+` 在空白字符上的量词重叠回溯（js/polynomial-redos）。
- */
-function matchApproveRuleArgument(text) {
-    const head = /^\/approve\s+rule/iu.exec(text);
-    if (!head)
-        return null;
-    const wsStart = head[0].length;
-    let wsEnd = wsStart;
-    while (wsEnd < text.length && /\s/u.test(text[wsEnd]))
-        wsEnd += 1;
-    if (wsEnd === wsStart)
-        return null; // `rule` 后必须跟 \s+
-    const rest = text.slice(wsEnd);
-    // 捕获段必须延伸到全文末尾且不含换行符，否则任何切分点都不可能匹配。
-    if (LINE_TERMINATOR_RE.test(rest))
-        return null;
-    if (rest.length > 0)
-        return rest;
-    // 剩余全是空白：`\s+` 回退一个字符给 `.+`（该字符不能是换行符）。
-    if (wsEnd - wsStart >= 2) {
-        const last = text[wsEnd - 1];
-        if (!LINE_TERMINATOR_RE.test(last))
-            return last;
-    }
-    return null;
-}
-function ownerCommandAddress(context) {
-    if (!context.platform || !context.endpoint || !context.ownerId)
-        return undefined;
-    return Object.freeze({
-        platform: context.platform,
-        endpoint: context.endpoint,
-        ownerId: context.ownerId,
-    });
-}
-/**
- * Plugin Runtime Owner `/approve` 命令面（无 host Plugin / CommandFeature）。
- * @returns reply text when handled; null when not an approve command.
- */
-export function handleRuntimeOwnerApproveCommand(context, rawText) {
-    const text = rawText.trim();
-    if (!/^\/approve(?:\s|$)/iu.test(text))
-        return null;
-    if (context.scope !== 'private' || !context.ownerId || context.subjectId !== context.ownerId) {
-        return '⚠️ 仅 Endpoint Owner 可在私聊中使用此指令。需在插件配置中设置 master/owner。';
-    }
-    if (/^\/approve\s+always\s+bash\s*$/iu.test(text)) {
-        const address = ownerCommandAddress(context);
-        if (!address) {
-            return `⚠️ 当前 Endpoint 未配置 owner\n${usageLines()}`;
-        }
-        setBashAlwaysAt(address, true);
-        return '✅ 已对 bash 永久放行 Owner 硬确认（本 Bot）。后续 bash 需确认时将不再弹窗；若当前仍有一条待回复的 bash 确认，本轮仍需输入 yes。';
-    }
-    if (/^\/approve\s+always\s*$/iu.test(text)) {
-        const address = ownerCommandAddress(context);
-        const pending = address ? getPendingAt(address) : undefined;
-        if (!pending) {
-            return `⚠️ 无近期 bash 待确认上下文，请使用：/approve always bash。\n${usageLines()}`;
-        }
-        setBashAlwaysAt(address, true);
-        clearPendingAt(address);
-        return '✅ 已对 bash 永久放行 Owner 硬确认（本 Bot）。';
-    }
-    const revokeRule = text.match(/^\/approve\s+revoke\s+rule\s+(\S+)\s*$/iu);
-    if (revokeRule) {
-        const address = ownerCommandAddress(context);
-        const r = address
-            ? removeBashApproveRuleAt(address, revokeRule[1])
-            : { ok: false, error: '缺少 platform/endpointKey 或未配置 owner。' };
-        if (!r.ok)
-            return `⚠️ ${r.error}`;
-        return '✅ 已删除该放行规则。';
-    }
-    const ruleArgument = matchApproveRuleArgument(text);
-    if (ruleArgument !== null) {
-        const address = ownerCommandAddress(context);
-        const r = address
-            ? addBashApproveRuleAt(address, ruleArgument.trim())
-            : { ok: false, error: '缺少 platform/endpointKey 或未配置 owner。' };
-        if (!r.ok)
-            return `⚠️ ${r.error}`;
-        return `✅ 已添加规则 id=${r.id.slice(0, 8)}… ，匹配子命令时将不再要求 Owner 确认（仍受危险命令黑名单等约束）。`;
-    }
-    if (/^\/approve\s+list\s*$/iu.test(text)) {
-        const address = ownerCommandAddress(context);
-        return address ? formatBashApproveListAt(address) : 'bash 永久放行: 否\n自定义正则放行: 无';
-    }
-    if (/^\/approve\s+revoke\s*$/iu.test(text)) {
-        const address = ownerCommandAddress(context);
-        const entry = address ? getEntryAt(address) : undefined;
-        if (!entry?.bashAlways)
-            return '⚠️ 当前未对 bash 设置永久放行。';
-        setBashAlwaysAt(address, false);
-        return '✅ 已撤销 bash 永久放行（正则规则仍保留，可用 /approve list 查看）。';
-    }
-    return `⚠️ 无法解析指令。\n${usageLines()}`;
-}
-//# sourceMappingURL=owner-approve-always-store.js.map

package/lib/security/owner-approve-always-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"owner-approve-always-store.js","sourceRoot":"","sources":["../../src/security/owner-approve-always-store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAA2C,aAAa,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACpI,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAe,CAAC;AAIzD,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAC/C,MAAM,aAAa,GAAG,CAAU,CAAC;AAEjC,+CAA+C;AAC/C,MAAM,CAAC,MAAM,iCAAiC,GAAsB;IAClE,6BAA6B;IAC7B,4BAA4B;IAC5B,2BAA2B;IAC3B,0BAA0B;IAC1B,0BAA0B;IAC1B,yBAAyB;IACzB,2BAA2B;IAC3B,8BAA8B;IAC9B,8BAA8B;IAC9B,0BAA0B;IAC1B,8BAA8B;IAC9B,4BAA4B;IAC5B,qBAAqB;IACrB,oBAAoB;IACpB,iBAAiB;IACjB,oBAAoB;IACpB,2BAA2B;IAC3B,2BAA2B;IAC3B,sCAAsC;CACvC,CAAC;AAuBF,SAAS,SAAS;IAChB,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,OAAO;IACd,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,WAAmB,EAAE,OAAe;IAC5E,OAAO,GAAG,OAAO,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;AAChD,CAAC;AAQD,SAAS,kBAAkB,CAAC,OAA6B;IACvD,OAAO,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAiC,EACjC,OAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,QAAQ,IAAI,QAAQ,IAAI,OAAO;QACpC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QACpC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;QACrD,IAAI,KAAK,KAAK,oBAAoB,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YACzD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YAC5D,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QAClD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,OAAO,EAAE,CAAC;QAExD,IAAK,IAAgB,CAAC,OAAO,KAAK,aAAa,IAAK,IAAgB,CAAC,SAAS,IAAI,OAAQ,IAAgB,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClI,MAAM,EAAE,GAAG,IAAe,CAAC;YAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,CAAC,GAAG,CAAC,SAAS;oBAAE,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC;YACzC,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAK,IAAgB,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAE,IAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YAChF,MAAM,EAAE,GAAG,aAAa,CAAC,IAAe,CAAC,CAAC;YAC1C,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAE,IAAyC,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,MAAM,EAAE,GAAG,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAG,IAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7E,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACtC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAClD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAiC,EAAE,WAAoB;IACvF,MAAM,SAAS,GAAI,WAAwD,CAAC,KAAK,EAAE,cAAc,CAAC;IAClG,IAAI,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAwB,CAAC;QACzE,MAAM,QAAQ,GAAG,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,MAAM,GAAI,QAAQ,EAAE,OAA+C,EAAE,MAAM,CAAC;QAClF,OAAO,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK;aACT,KAAK,CAAC,QAAQ,CAAC;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc,EAAE,WAAoB;IACjE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAwB,CAAC;IACzE,MAAM,QAAQ,GAAG,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAChE,MAAM,cAAc,GAAI,QAAQ,EAAE,OAA+C,IAAI,EAAE,CAAC;IACxF,OAAO,eAAe,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAiC,EACjC,WAAoB;IAEpB,MAAM,KAAK,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,WAAW,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9F,IAAI,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QACpD,IAAI,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QACtD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,EAAE,WAAW,CAAC,CAAC;YACzE,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAC7D,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC/D,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,QAAQ,IAAI,CAAC,WAAW,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE;QAAE,OAAO,SAAS,CAAC;IAClG,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxD,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/D,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,OAA6B;IAC/C,OAAO,SAAS,EAAE,CAAC,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,eAAe,CAAC,OAA6B,EAAE,KAAc;IACpE,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC1D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG;QACpB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,SAAS,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;KAC3C,CAAC;IACF,UAAU,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAA6B,EAC7B,OAAe;IAEf,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACrD,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACjG,CAAC;IACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC1D,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG;QACpB,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;KACpF,CAAC;IACF,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAA6B,EAC7B,MAAc;IAEd,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IACvE,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACzF,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpD,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,uBAAuB,CAAC,OAA6B;IAC5D,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,OAAO;QACL,cAAc,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;QAC5C,YAAY,KAAK,CAAC,MAAM,IAAI;QAC5B,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;KACvE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,MAAiC,EACjC,OAAgB;IAEhB,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3D,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,OAAO,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACxF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,qBAAqB,CACnC,MAAiC,EACjC,WAAoB,EACpB,QAAgB;IAEhB,IAAI,QAAQ,KAAK,yBAAyB;QAAE,OAAO,KAAK,CAAC;IACzD,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAiC,EAAE,WAAoB,EAAE,KAAc;IACnG,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,OAAO;QAAE,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,MAAiC,EACjC,WAAoB,EACpB,QAAgB;IAEhB,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,yBAAyB,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;IACjF,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAiC,EACjC,WAAoB,EACpB,QAAgB;IAEhB,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,yBAAyB,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;IACjF,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IACnD,CAAC;IACD,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAiC,EACjC,WAAoB,EACpB,OAAe;IAEf,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,MAAiC,EACjC,WAAoB,EACpB,MAAc;IAEd,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,0BAA0B,CACxC,MAAiC,EACjC,WAAoB,EACpB,WAAmB;IAEnB,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,GAAG,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAiC,EAAE,WAAoB;IAC3F,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChE,OAAO,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,cAAsB;IAC9D,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,iCAAiC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACvE,CAAC;AAGD,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAmB,CAAC;AAExD,SAAS,YAAY,CAAC,OAA6B;IACjD,oBAAoB,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE;QACpD,QAAQ,EAAE,yBAAyB;QACnC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;KACvC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,OAA6B;IACnD,oBAAoB,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,YAAY,CAAC,OAA6B;IACjD,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,yBAAyB,EAAE,CAAC;QAC/D,IAAI,OAAO;YAAE,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACnC,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,OAAO,oBAAoB,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,uCAAuC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,oBAAoB,EAAE,CAAC;QAChD,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YAC1B,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAAiC,EACjC,WAAoB,EACpB,QAAgB;IAEhB,IAAI,QAAQ,KAAK,yBAAyB;QAAE,OAAO;IACnD,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,OAAO;QAAE,YAAY,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,MAAiC,EACjC,WAAoB;IAEpB,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,OAAO;QAAE,cAAc,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAAiC,EACjC,WAAoB;IAEpB,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChE,OAAO,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,UAAU;IACjB,OAAO;QACL,kBAAkB;QAClB,oDAAoD;QACpD,mDAAmD;QACnD,qDAAqD;QACrD,0CAA0C;QAC1C,wDAAwD;QACxD,gDAAgD;KACjD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AACjD;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,KAAK,GAAG,OAAO,CAAC;IACpB,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAE,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IACnE,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,kBAAkB;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,oCAAoC;IACpC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,wCAAwC;IACxC,IAAI,KAAK,GAAG,OAAO,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC;QAC9B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD,SAAS,mBAAmB,CAAC,OAAoC;IAC/D,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACjF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gCAAgC,CAC9C,OAAoC,EACpC,OAAe;IAEf,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7F,OAAO,wDAAwD,CAAC;IAClE,CAAC;IAED,IAAI,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,6BAA6B,UAAU,EAAE,EAAE,CAAC;QACrD,CAAC;QACD,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,mFAAmF,CAAC;IAC7F,CAAC;IAED,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,iDAAiD,UAAU,EAAE,EAAE,CAAC;QACzE,CAAC;QACD,eAAe,CAAC,OAAQ,EAAE,IAAI,CAAC,CAAC;QAChC,cAAc,CAAC,OAAQ,CAAC,CAAC;QACzB,OAAO,kCAAkC,CAAC;IAC5C,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC1E,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,OAAO;YACf,CAAC,CAAC,uBAAuB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAE,CAAC;YAClD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QACzE,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAClC,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,YAAY,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,OAAO;YACf,CAAC,CAAC,oBAAoB,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC;YACpD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QACzE,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAClC,OAAO,cAAc,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,wCAAwC,CAAC;IAChF,CAAC;IAED,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC;IACjF,CAAC;IAED,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,IAAI,CAAC,KAAK,EAAE,UAAU;YAAE,OAAO,sBAAsB,CAAC;QACtD,eAAe,CAAC,OAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO,+CAA+C,CAAC;IACzD,CAAC;IAED,OAAO,eAAe,UAAU,EAAE,EAAE,CAAC;AACvC,CAAC"}

package/lib/security/turn-sandbox-authority.d.ts

@@ -1,13 +0,0 @@
-export interface TurnSandboxAuthority {
-    readonly workingDirectory: string;
-    readonly access: 'read-only' | 'workspace-write' | 'danger-full-access';
-    readonly networkAccess: boolean;
-}
-/**
- * Adds process-local execution authority without placing it in serializable
- * model/tool input. The reserved legacy wire field is always discarded.
- */
-export declare function attachTurnSandboxAuthority(input: Readonly<Record<string, unknown>>, authority: TurnSandboxAuthority): Readonly<Record<string, unknown>>;
-/** Only an object issued by attachTurnSandboxAuthority carries this symbol. */
-export declare function readTurnSandboxAuthority(input: Readonly<Record<string, unknown>>): TurnSandboxAuthority | undefined;
-//# sourceMappingURL=turn-sandbox-authority.d.ts.map

package/lib/security/turn-sandbox-authority.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"turn-sandbox-authority.d.ts","sourceRoot":"","sources":["../../src/security/turn-sandbox-authority.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;IACxE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;CACjC;AAOD;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,SAAS,EAAE,oBAAoB,GAC9B,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAWnC;AAED,+EAA+E;AAC/E,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACvC,oBAAoB,GAAG,SAAS,CAKlC"}