cc-safety-net 2.0.11 → 2.1.0

package/dist/amp/cc-safety-net/index.ts

@@ -1,9 +1,9 @@
 // cc-safety-net managed Amp plugin. Do not edit. Reinstall with: npx -y cc-safety-net install --amp
-// version: 2.0.11
+// version: 2.1.0
 // @bun
 var Pw=Object.defineProperty;var kw=(e)=>e;function Aw(e,t){this[e]=kw.bind(null,t)}var mn=(e,t)=>{for(var n in t)Pw(e,n,{get:t[n],enumerable:!0,configurable:!0,set:Aw.bind(t,n)})};import{randomBytes as CR}from"crypto";import{appendFileSync as wR,mkdirSync as RR}from"fs";import{homedir as ER,userInfo as PR}from"os";import{isAbsolute as kR,join as Il}from"path";var Tw=[/\bgh[pousr]_[A-Za-z0-9]{20,}\b/g,/\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,/\bglpat-[A-Za-z0-9_-]{20,}\b/g,/\bxox[abeprs]-[A-Za-z0-9-]{20,}\b/g,/\bnpm_[A-Za-z0-9_]{20,}\b/g,/\bpypi-[A-Za-z0-9_-]{20,}\b/g,/\b[rs]k_(?:live|test)_[A-Za-z0-9_]{20,}\b/g,/\bsk-[A-Za-z0-9_-]{20,}\b/g,/\bsk_[A-Za-z0-9]{20,}\b/g,/\bgsk_[A-Za-z0-9]{52,}\b/g,/\bxai-[A-Za-z0-9_-]{80,}\b/g,/\bpplx-[A-Za-z0-9_-]{20,}\b/g,/\bbastn_[A-Za-z0-9]{16,}\b/g,/\btgp_v1_[A-Za-z0-9_-]{43,}\b/g,/\bflp_[A-Za-z0-9]{10,}\b/g,/\bwfr_[A-Za-z0-9]{20,}\b/g,/\bfwp?_[A-Za-z0-9_-]{20,}\b/g,/\btp-[A-Za-z0-9_-]{20,}\b/g,/\bpsk-[A-Za-z0-9_-]{8,}-[A-Za-z0-9_-]{8,}\b/g,/\b[a-f0-9]{32}\.[A-Za-z0-9]{16}\b/g];function kt(e){let t=e.replace(/\b((?:DATABASE|POSTGRES|POSTGRESQL|MYSQL|MARIADB|REDIS|MONGO(?:DB)?|DB)_DSN|CONNECTION_STRING)=("[^"]*"|'[^']*'|[^\s]+(?:\s+[A-Z_][A-Z0-9_]*=[^\s]+)*)/gi,"$1=<redacted>").replace(/\b((?:DATABASE|POSTGRES|POSTGRESQL|MYSQL|MARIADB|REDIS|MONGO(?:DB)?|DB)_(?:URL|URI|CONNECTION_STRING))=("[^"]*"|'[^']*'|[^\s]+)/gi,"$1=<redacted>").replace(/\b([A-Z0-9_]*(?:TOKEN|SECRET|PASSWORD|PASS|KEY|CREDENTIALS)[A-Z0-9_]*)=("[^"]*"|'[^']*'|[^\s]+)/gi,"$1=<redacted>");return Iw(t)}function Iw(e){let t=e.replace(/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/gi,"<redacted>").replace(/((?:(['"])(?:authorization|cookie|x-api-key|api-key)\2|(?:authorization|cookie|x-api-key|api-key))\s*:\s*)(['"])(?:\\[^\r\n]|(?!\3)[^\\\r\n])*\3/gi,"$1$3<redacted>$3").replace(/(['"]?\s*(?:authorization|cookie|x-api-key|api-key)\s*:(?!\s*(?:"<redacted>"|'<redacted>'))\s*)([^'"\r\n]+)(['"]?)/gi,"$1<redacted>$3").replace(/\b([a-z][a-z0-9+.-]*:\/\/)([^\s/:@]+):([^\s@/]+)@/gi,"$1<redacted>:<redacted>@").replace(/\b([a-z][a-z0-9+.-]*:\/\/)([^\s/@:]+)@/gi,"$1<redacted>@").replace(/(^|[\s?&;|])((?:x-amz-signature|x-goog-signature|sig|signature)=)(?:"[^"\r\n]*"|'[^'\r\n]*'|[^&#\s'"`;|<>()]*)/gi,"$1$2<redacted>").replace(/(^|\s)((?:-u|--user)(?:\s+|=))([^\s:]+):([^\s]+)/g,"$1$2<redacted>:<redacted>");for(let n of Tw)t=t.replace(n,"<redacted>");return t.replace(/\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{6,}\b/g,"<redacted>").replace(/\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g,"<redacted>")}import{lstatSync as Hh,readdirSync as uR,readFileSync as Yh,rmdirSync as dR,statSync as Vh,unlinkSync as mR,utimesSync as fR,writeFileSync as pR}from"fs";import{dirname as gR,join as qn}from"path";var Ti=30,Sl=1,xl=365;function Ii(e){if(typeof e!=="number"||!Number.isInteger(e))return 30;if(e<1)return 1;return e>365?365:e}import{homedir as Kw}from"os";import{dirname as Ut,isAbsolute as Yw,join as jt,relative as Jw,resolve as Tt,sep as Xw}from"path";import{closeSync as Ow,constants as Oh,fstatSync as zw,fsyncSync as GM,lstatSync as zh,mkdirSync as ZM,openSync as Nw,readdirSync as BM,readFileSync as Dw,realpathSync as Oi,renameSync as UM,rmdirSync as jM,statSync as $w,unlinkSync as HM,writeFileSync as VM}from"fs";import{isAbsolute as Nh,join as Dh,normalize as Mw,parse as Lw,relative as _l,resolve as Cl,sep as wl}from"path";var Ww=Symbol("PolicyFilesystemScope"),Fw=Symbol("PolicyFilesystemTarget"),Gw=Oh.O_NOFOLLOW??0;class ae extends Error{constructor(e){super(`Unable to access ${e} filesystem safely.`);this.name="PolicyFilesystemError"}}function Bt(e,t){return{[Ww]:!0,root:Cl(e),label:t}}function $h(e,t){let n=Mw(t);if(t===""||Nh(t)||n===".."||n.startsWith(`..${wl}`))throw new ae(e.label);return{[Fw]:!0,scope:e,relativePath:n,path:Dh(e.root,n)}}function At(e,t){let n=_l(e.root,Cl(t));return $h(e,n)}function Ni(e,t="rules policy"){let n=Cl(e),r=Lw(n).dir;return $h(Bt(r,t),_l(r,n))}function fn(e){try{if(!zi(e,!1).exists)return null;let n=Nw(e.path,Oh.O_RDONLY|Gw);try{let r=zw(n);if(!r.isFile())throw new ae(e.scope.label);let o=Dw(n,"utf-8"),i=zh(e.path);if(!i.isFile()||i.isSymbolicLink()||r.dev!==i.dev||r.ino!==i.ino)throw new ae(e.scope.label);return zi(e,!1),o}finally{Ow(n)}}catch(t){Uw(e.scope.label,t)}}function Mh(e,t){if(e.path===t.path)return!0;try{if(!zi(e,!1).exists||!zi(t,!1).exists)return!1;return Oi(e.path)===Oi(t.path)}catch(n){if(n instanceof ae)throw n;throw new ae(e.scope.label)}}function zi(e,t,n="file"){let r=Zw(e.scope);if(!r)return{exists:!1};let o=e.relativePath.split(wl);for(let i of o.keys()){let s=Dh(e.scope.root,...o.slice(0,i+1)),a=Lh(s);if(!a){if(i===o.length-1&&t)return{exists:!1};return{exists:!1}}if(a.isSymbolicLink())throw new ae(e.scope.label);if(i<o.length-1&&!a.isDirectory())throw new ae(e.scope.label);if(i===o.length-1&&(n==="file"?!a.isFile():!a.isDirectory()))throw new ae(e.scope.label);Bw(r,Oi(s),e.scope.label)}return{exists:!0}}function Zw(e){if(!Lh(e.root))return null;if(!$w(e.root).isDirectory())throw new ae(e.label);return Oi(e.root)}function Bw(e,t,n){let r=_l(e,t);if(r===".."||r.startsWith(`..${wl}`)||Nh(r))throw new ae(n)}function Lh(e){try{return zh(e)}catch(t){if(jw(t)&&t.code==="ENOENT")return null;throw t}}function Uw(e,t){if(t instanceof ae)throw t;throw new ae(e)}function jw(e){return e instanceof Error&&"code"in e}var ut=/^[a-zA-Z][a-zA-Z0-9_-]{0,63}$/,Rl="rulebook.json",El=".cc-safety-net/rules";var Wh=/^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)#(.+)$/;var Hw=/^[A-Za-z0-9._-]+$/,Vw=".cc-safety-net/rules".replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),qw="rulebook.json".replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),Fh=new RegExp(`^${Vw}/(${ut.source.slice(1,-1)})/${qw}$`);function Gh(e){return`.cc-safety-net/rules/${e}/rulebook.json`}function Xr(e){if($i(e))try{return Di(e),null}catch(t){return t instanceof Error?t.message:String(t)}return ut.test(e)?null:`Local rulebook sources must be bare names matching ${ut}: ${e}`}function Di(e){if(e.startsWith("github:"))throw Error(`Invalid rulebook source: ${e}`);let t=e.match(Wh);if(!t?.[1]||!t[2]||!t[3])throw Error(`Invalid GitHub rulebook source: ${e}`);let[n,r,...o]=t[3].split("/");if(!n||!Hw.test(n))throw Error(`GitHub rulebook refs must be a single path segment: ${e}`);if(!r||o.length>0||!ut.test(r))throw Error(`GitHub rulebook sources must be owner/repo#ref/<rulebook-name>: ${e}`);return{owner:t[1],repo:t[2],ref:n,path:Gh(r),name:r}}function $i(e){return Wh.test(e)}var Bh="rule.json",Mi="policy.json",Qw="rule.lock";var Uh=".cc-safety-net",eR="rules",Zh="cache",tR="CC_SAFETY_NET_HOME",Ht="`cc-safety-net rule sync`";function nR(e){return Tt(e??process.cwd(),El)}function rR(e){return jt(nR(e),Bh)}function pn(e){return e?.userConfigDir??(e?.userConfigPath?Ut(e.userConfigPath):jt(oR(),eR))}function oR(){let e=process.env[tR];return e?Tt(e):jt(Kw(),Uh)}function iR(e){return jt(pn(e),Bh)}function Qr(e){return jt(Ut(e),Qw)}function jh(e){let t=e.userConfigPath??iR(e),n=e.projectConfigPath??rR(e.cwd),r=sR(t,e),o=aR(n,e);return{userConfigPath:t,projectConfigPath:n,userLockPath:Qr(t),projectLockPath:Qr(n),userScope:r,projectScope:o,userConfigTarget:At(r,t),projectConfigTarget:At(o,n),userLockTarget:At(r,Qr(t)),projectLockTarget:At(o,Qr(n))}}function sR(e,t){let n=t.userConfigPath?Ut(Ut(Tt(t.userConfigPath))):Ut(Tt(t.userConfigDir??pn(t)));return Bt(n,"user policy")}function aR(e,t){let n=Tt(t.cwd??process.cwd()),r=Tt(e),o=Jw(n,r);if(o!==".."&&!o.startsWith(`..${Xw}`)&&!Yw(o))return Bt(n,"project policy");return Bt(Ut(Ut(r)),"project policy")}function Pl(e,t){let n=e.digest.startsWith("sha256:")?e.digest.slice(7):e.digest;return jt(lR(t),"rulebooks",`${cR(e)}--${n.slice(0,12)}`,Rl)}function kl(e,t){let n=t;return{cacheConfigDir:e,cwd:t.cwd,global:n.global}}function cR(e){return(e.kind==="github"&&e.display_ref?`${e.owner}/${e.repo}#${e.display_ref}/${e.name}`:e.spec).toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"")||"rulebook"}function lR(e){let t=e?.cacheConfigDir??pn(e),n=e;if(n&&!n.global&&n.cwd&&Tt(t)===Tt(n.cwd))return jt(Tt(n.cwd),Uh,Zh);return jt(Ut(t),Zh)}var Tl=86400000,hR=".last-prune",yR=/^\d{4}-\d{2}$/,bR=/^((\d{4}-\d{2})-\d{2})-.+\.jsonl$/,qh=(e)=>Math.floor(e/Tl);function vR(e){try{let t=qn(gR(pn(e)),Mi),n=JSON.parse(Yh(t,"utf-8"));return Ii(n?.audit?.retention_days)}catch{return Ti}}function Jh(e,t=()=>new Date){try{let n=t().getTime();if(!Vh(e,{throwIfNoEntry:!1})?.isDirectory())return;let r=qn(e,hR),o=Vh(r,{throwIfNoEntry:!1})?.mtimeMs;if(o!==void 0&&qh(o)===qh(n))return;let i=n-vR()*Tl,s=new Date(n).toISOString().slice(0,7);for(let a of Al(e)){if(a.isDirectory()){SR(qn(e,a.name),i,s);continue}if(a.isFile()&&a.name.endsWith(".jsonl"))xR(qn(e,a.name),i)}pR(r,"",{mode:384}),fR(r,n/1000,n/1000)}catch{}}function SR(e,t,n){for(let r of Al(e)){if(!r.isDirectory()||!yR.test(r.name))continue;let o=qn(e,r.name);for(let i of Al(o)){if(!i.isFile())continue;let s=bR.exec(i.name);if(!s||s[2]!==r.name)continue;let a=Date.parse(`${s[1]}T00:00:00.000Z`)+Tl;if(!Number.isFinite(a)||a>=t)continue;Xh(qn(o,i.name))}if(r.name!==n)Kh(o)}Kh(e)}function xR(e,t){try{let n=Hh(e);if(n.mtimeMs>=t)return;let r=Yh(e,"utf-8").split(`
-`).filter((o)=>o.trim()).map(_R);if(r.length===0)return;if(r.some((o)=>o===void 0||o>=t))return;if(Hh(e).mtimeMs!==n.mtimeMs)return;Xh(e)}catch{}}function _R(e){try{let t=JSON.parse(e).ts,n=typeof t==="string"?Date.parse(t):Number.NaN;return Number.isFinite(n)?n:void 0}catch{return}}function Al(e){try{return uR(e,{withFileTypes:!0,encoding:"utf8"})}catch{return[]}}function Xh(e){try{mR(e)}catch{}}function Kh(e){try{dR(e)}catch{}}var AR="2.0.11",TR=1e4,IR=2000,OR=256,zR=32768;function NR(e){let t=e.trim();if(!t)return null;let n=t.replace(/[^A-Za-z0-9_.-]+/g,"_");if(n=n.replace(/^[._-]+|[._-]+$/g,"").slice(0,128),!n||n==="."||n==="..")return null;return n}function DR(e){return(e??"").replace(/[^A-Za-z0-9]/g,"-").slice(0,180)||"no-cwd"}function Ol(e,t,n,r,o,i={}){let s=NR(e);if(!s)return;let a=i.homeDir??Qh();if(!a)return;let c=$R(a);if(!c)return;try{let l=(i.now??(()=>new Date))().toISOString(),u=Li(kt(t),i.failureStage?Number.POSITIVE_INFINITY:TR),d=Li(kt(n),IR),f=i.toolName?Li(kt(i.toolName),OR):void 0,m=o===null?void 0:Li(kt(o),zR),p=Il(c,DR(m?.value??null),l.slice(0,7));RR(p,{recursive:!0,mode:448});let h=Il(p,`${l.slice(0,10)}-${s}.jsonl`),b={ts:l,id:(i.createId??(()=>CR(8).toString("hex")))(),v:AR,sessionId:s,decision:i.decision??"deny",agent:i.agent,shape:i.shape,level:i.level,configFallback:i.configFallback,toolName:f?.value,command:u.value,segment:d.value,...u.truncated||d.truncated||f?.truncated||m?.truncated?{truncated:!0}:{},reason:r,ruleId:i.ruleId,intent:i.intent,failureStage:i.failureStage,errorCode:i.errorCode,cwd:m?.value??null};wR(h,`${JSON.stringify(b)}
-`,{encoding:"utf-8",mode:384}),Jh(c,i.now)}catch{}}function Li(e,t){return{value:e.slice(0,t),truncated:e.length>t}}function Qh(e=process.env.CC_SAFETY_NET_AUDIT_HOME||process.env.HOME){let t=e||ER()||PR().homedir;return t&&kR(t)?t:null}function $R(e=Qh()){return e?Il(e,".cc-safety-net","logs"):null}function ty(e,t,n,r=!0,o){if(t.decision.kind==="allow"){if(!n||e.route.kind!=="command")return;let a=ey(e);return{decision:"allow",command:a,segment:a,reason:"allowed",cwd:e.context.executionCwd,toolName:e.toolName,level:t.level,...t.configFallback?{configFallback:!0}:{}}}let i=t.decision.evidence.find((a)=>a.kind==="command"),s=i?.command??(r?ey(e):"");return{decision:"deny",command:s,segment:i?.segment??s,reason:t.decision.reason,cwd:e.context.executionCwd,toolName:e.toolName,level:t.level,...t.configFallback?{configFallback:!0}:{},ruleId:t.decision.ruleId,intent:t.decision.intent,failureStage:o?.stage,errorCode:o?.errorCode}}function ey(e){return"command"in e?e.command??"":""}function ny(e,t,n){if(!e)return;let r;try{r=t()}catch{return}if(typeof r!=="string"||!r.trim())return;Ol(r,e.command,e.segment,e.reason,e.cwd,{homeDir:n.homeDir,decision:e.decision,agent:n.agent,shape:n.shape,level:e.level,configFallback:e.configFallback,toolName:e.toolName,ruleId:e.ruleId,intent:e.intent,failureStage:e.failureStage,errorCode:e.errorCode})}function ry(e,t,n){let r;try{r=t()}catch{return}if(typeof r!=="string"||!r.trim())return;Ol(r,e.command??"",e.segment??e.command??"",e.reason,n.cwd??null,{homeDir:n.homeDir,decision:"deny",agent:n.agent,shape:n.shape,toolName:n.toolName??e.toolName,ruleId:e.ruleId,intent:e.intent})}import{realpathSync as UR,statSync as jR}from"fs";import{isAbsolute as Nl,relative as HR,resolve as oy,sep as VR}from"path";import{dirname as MR,isAbsolute as LR,parse as WR,sep as FR}from"path";function Vt(e,t=process.platform){if(t!=="win32")return!1;return(e[0]==="/"||e[0]==="\\")&&(e[1]==="/"||e[1]==="\\")}function qt(e,t,n){if(Vt(t))throw Error("Unsupported Windows namespace path");let r=LR(t)?ZR(t):"",o=r||e;for(let i of BR(r?t.slice(r.length):t)){if(i===""||i===".")continue;if(i===".."){o=MR(o);continue}let s=GR(o,i),a=n.entryKind(s),c=a==="symlink"?n.realpath(s):s;if(a==="missing"||c===null)throw Error(`Cannot resolve path component: ${s}`);o=c}return o}function GR(e,t){return e.endsWith("/")||e.endsWith("\\")?`${e}${t}`:`${e}${FR}${t}`}function ZR(e){return WR(e).root}function BR(e){let t=process.platform==="win32"?/[\\/]+/:/\/+/;return e.split(t)}function Dl(e,t){if(Vt(e))return;let n=t.flatMap((o)=>zl(o));if(!n[0])return;let r=zl(Nl(e)?e:oy(n[0],e))[0];if(!r)return;return n.some((o)=>sy(r,o))?r:void 0}function iy(e,t){if(Vt(e))return;return zl(Nl(e)?e:oy(t,e))[0]}function zl(e){try{let t=UR(e);return jR(t).isDirectory()?[t]:[]}catch{return[]}}function sy(e,t){let n=HR(t,e);return n===""||n!==".."&&!n.startsWith(`..${VR}`)&&!Nl(n)}var Kt="Command could not be safely analyzed (strict mode). Simplify the command and retry, or ask the user to verify.",It="Command exceeds maximum recursion depth and cannot be safely analyzed. Flatten the nesting and retry.",ay="CC Safety Net could not validate the command because its structure exceeds safe analysis limits.",cy="CC Safety Net could not analyze the command because it exceeds safe analysis limits. Simplify or split the command and retry.",Wi="CC Safety Net failed closed because command analysis failed unexpectedly. This is not caused by your command. Report it to the user.";function uy(e){let{reason:t,command:n,segment:r,toolName:o}=e,i=e.maxLen??200,s=e.redact??((c)=>c),a=`BLOCKED by CC Safety Net
+`).filter((o)=>o.trim()).map(_R);if(r.length===0)return;if(r.some((o)=>o===void 0||o>=t))return;if(Hh(e).mtimeMs!==n.mtimeMs)return;Xh(e)}catch{}}function _R(e){try{let t=JSON.parse(e).ts,n=typeof t==="string"?Date.parse(t):Number.NaN;return Number.isFinite(n)?n:void 0}catch{return}}function Al(e){try{return uR(e,{withFileTypes:!0,encoding:"utf8"})}catch{return[]}}function Xh(e){try{mR(e)}catch{}}function Kh(e){try{dR(e)}catch{}}var AR="2.1.0",TR=1e4,IR=2000,OR=256,zR=32768;function NR(e){let t=e.trim();if(!t)return null;let n=t.replace(/[^A-Za-z0-9_.-]+/g,"_");if(n=n.replace(/^[._-]+|[._-]+$/g,"").slice(0,128),!n||n==="."||n==="..")return null;return n}function DR(e){return(e??"").replace(/[^A-Za-z0-9]/g,"-").slice(0,180)||"no-cwd"}function Ol(e,t,n,r,o,i={}){let s=NR(e);if(!s)return;let a=i.homeDir??Qh();if(!a)return;let c=$R(a);if(!c)return;try{let l=(i.now??(()=>new Date))().toISOString(),u=Li(kt(t),i.failureStage?Number.POSITIVE_INFINITY:TR),d=Li(kt(n),IR),f=i.toolName?Li(kt(i.toolName),OR):void 0,m=o===null?void 0:Li(kt(o),zR),p=Il(c,DR(m?.value??null),l.slice(0,7));RR(p,{recursive:!0,mode:448});let h=Il(p,`${l.slice(0,10)}-${s}.jsonl`),b={ts:l,id:(i.createId??(()=>CR(8).toString("hex")))(),v:AR,sessionId:s,decision:i.decision??"deny",agent:i.agent,shape:i.shape,level:i.level,configFallback:i.configFallback,toolName:f?.value,command:u.value,segment:d.value,...u.truncated||d.truncated||f?.truncated||m?.truncated?{truncated:!0}:{},reason:r,ruleId:i.ruleId,intent:i.intent,failureStage:i.failureStage,errorCode:i.errorCode,cwd:m?.value??null};wR(h,`${JSON.stringify(b)}
+`,{encoding:"utf-8",mode:384}),Jh(c,i.now)}catch{}}function Li(e,t){return{value:e.slice(0,t),truncated:e.length>t}}function Qh(e=process.env.CC_SAFETY_NET_AUDIT_HOME||process.env.HOME){let t=e||ER()||PR().homedir;return t&&kR(t)?t:null}function $R(e=Qh()){return e?Il(e,".cc-safety-net","logs"):null}function ty(e,t,n,r=!0,o){if(t.decision.kind==="allow"){if(!n||e.route.kind!=="command")return;let a=ey(e);return{decision:"allow",command:a,segment:a,reason:"allowed",cwd:e.context.executionCwd,toolName:e.toolName,level:t.level,...t.configFallback?{configFallback:!0}:{}}}let i=t.decision.evidence.find((a)=>a.kind==="command"),s=i?.command??(r?ey(e):"");return{decision:"deny",command:s,segment:i?.segment??s,reason:t.decision.reason,cwd:e.context.executionCwd,toolName:e.toolName,level:t.level,...t.configFallback?{configFallback:!0}:{},ruleId:t.decision.ruleId,intent:t.decision.intent,failureStage:o?.stage,errorCode:o?.errorCode}}function ey(e){return"command"in e?e.command??"":""}function ny(e,t,n){if(!e)return;let r;try{r=t()}catch{return}if(typeof r!=="string"||!r.trim())return;Ol(r,e.command,e.segment,e.reason,e.cwd,{homeDir:n.homeDir,decision:e.decision,agent:n.agent,shape:n.shape,level:e.level,configFallback:e.configFallback,toolName:e.toolName,ruleId:e.ruleId,intent:e.intent,failureStage:e.failureStage,errorCode:e.errorCode})}function ry(e,t,n){let r;try{r=t()}catch{return}if(typeof r!=="string"||!r.trim())return;Ol(r,e.command??"",e.segment??e.command??"",e.reason,n.cwd??null,{homeDir:n.homeDir,decision:"deny",agent:n.agent,shape:n.shape,toolName:n.toolName??e.toolName,ruleId:e.ruleId,intent:e.intent})}import{accessSync as _1,constants as C1,realpathSync as UR,statSync as jR}from"fs";import{isAbsolute as Nl,relative as HR,resolve as oy,sep as VR}from"path";import{dirname as MR,isAbsolute as LR,parse as WR,sep as FR}from"path";function Vt(e,t=process.platform){if(t!=="win32")return!1;return(e[0]==="/"||e[0]==="\\")&&(e[1]==="/"||e[1]==="\\")}function qt(e,t,n){if(Vt(t))throw Error("Unsupported Windows namespace path");let r=LR(t)?ZR(t):"",o=r||e;for(let i of BR(r?t.slice(r.length):t)){if(i===""||i===".")continue;if(i===".."){o=MR(o);continue}let s=GR(o,i),a=n.entryKind(s),c=a==="symlink"?n.realpath(s):s;if(a==="missing"||c===null)throw Error(`Cannot resolve path component: ${s}`);o=c}return o}function GR(e,t){return e.endsWith("/")||e.endsWith("\\")?`${e}${t}`:`${e}${FR}${t}`}function ZR(e){return WR(e).root}function BR(e){let t=process.platform==="win32"?/[\\/]+/:/\/+/;return e.split(t)}function Dl(e,t){if(Vt(e))return;let n=t.flatMap((o)=>zl(o));if(!n[0])return;let r=zl(Nl(e)?e:oy(n[0],e))[0];if(!r)return;return n.some((o)=>sy(r,o))?r:void 0}function iy(e,t){if(Vt(e))return;return zl(Nl(e)?e:oy(t,e))[0]}function zl(e){try{let t=UR(e);return jR(t).isDirectory()?[t]:[]}catch{return[]}}function sy(e,t){let n=HR(t,e);return n===""||n!==".."&&!n.startsWith(`..${VR}`)&&!Nl(n)}var Kt="Command could not be safely analyzed (strict mode). Simplify the command and retry, or ask the user to verify.",It="Command exceeds maximum recursion depth and cannot be safely analyzed. Flatten the nesting and retry.",ay="CC Safety Net could not validate the command because its structure exceeds safe analysis limits.",cy="CC Safety Net could not analyze the command because it exceeds safe analysis limits. Simplify or split the command and retry.",Wi="CC Safety Net failed closed because command analysis failed unexpectedly. This is not caused by your command. Report it to the user.";function uy(e){let{reason:t,command:n,segment:r,toolName:o}=e,i=e.maxLen??200,s=e.redact??((c)=>c),a=`BLOCKED by CC Safety Net
 
 Reason: ${s(t)}`;if(e.ruleId)a+=`
 
@@ -58,7 +58,7 @@ ${qR(e.intent??"manual_only")}`,a}function qR(e){switch(e){case"hard_stop":retur
 `}}function pO(e){let t=/^"\$(?:([0-9]+|[@*])|\{([0-9]+|[@*])\})"$/.exec(e),n=/^\$(?:([0-9]+|[@*])|\{([0-9]+|[@*])\})$/.exec(e),r=t??n;if(!r)return null;let o=r[1]??r[2];return{parameter:o==="@"||o==="*"?o:Number(o),quoted:t!==null}}function gO(e,t,n,r){let o=t.slice(n+2);if(e.parameter==="@")return e.quoted?Vu(o):hO(o,r);if(e.parameter==="*"){let a=Vu(o);if(!a)return;let c=a.join(r[0]??"");return e.quoted?[c]:qu(c,r)}let i=t[n+1+e.parameter];if(i&&!Js(i))return;let s=Ao(i);return e.quoted?[s]:qu(s,r)}function Vu(e){return e.every(Js)?e.map(N):void 0}function hO(e,t){let n=Vu(e);if(!n)return;let r=n.map((o)=>qu(o,t));return r.some((o)=>o===void 0)?void 0:r.flatMap((o)=>o??[])}function qu(e,t){if(["*","?","[","]"].some((n)=>e.includes(n)))return;if(t==="")return e===""?[]:[e];if(t===` 	
 `)return e.trim().split(/\s+/).filter(Boolean);if(t.length!==1)return;return t===" "||t==="\t"||t===`
 `?e.trim().split(/\s+/).filter(Boolean):e.split(t).filter(Boolean)}function Js(e){if(!e)return!0;return e.provenance==="unknown"?!/[$`]/.test(N(e)):e.provenance==="literal"}function Ao(e){return e?N(e):""}function yO(e){return`'${e.replaceAll("'",`'"'"'`)}'`}function Ju(e,t){return Ku(et(e,"posix"),t)}function fr(e){return Ju(e,new Set(Array.from(e.matchAll(tS)).flatMap((t)=>{let n=t[1]??t[2];return n===void 0?[]:[n]})))}function Ku(e,t){if(e.status==="invalid"||e.status==="limited")return!1;let n=new Set(t);for(let r of e.nodes){if(r.kind==="group"){if(Ku(r.body,n))return!0;continue}if(r.kind!=="command")continue;if(r.nested.some((o)=>Ku(o,n))||iS(r.words,n))return!0;_O(r,n)}return!1}function iS(e,t){let n=e.findIndex((s)=>je(s.text)===null);if(n===-1)return!1;let r=e[n];if(!r)return!1;if(To(r,t))return!0;let o=H(r.text);if(o==="source"||o==="."){let s=e[n+1]?.text==="--"?n+2:n+1;return eS(e[s],t)}if(de.has(o)){let s=e.slice(n),a=yt(s.map((l)=>l.text)),c=a.commandIndex??a.scriptIndex;return!a.syntaxCheck&&c!==null&&eS(s[c],t)}let i=bO(e,n,t);if(i===null)return!1;if(i===-1)return!0;return iS(e.slice(i),t)}function bO(e,t,n){let r=H(e[t]?.text??"");if(r==="command")return vO(e,t+1);if(r==="exec")return SO(e,t+1);if(r==="env")return xO(e,t+1,n);return null}function vO(e,t){for(let n=t;n<e.length;n++){let r=e[n]?.text??"";if(r==="--")return e[n+1]?n+1:null;if(/^-[p]*[vV][pvV]*$/.test(r))return null;if(/^-p+$/.test(r))continue;return n}return null}function SO(e,t){for(let n=t;n<e.length;n++){let r=e[n]?.text??"";if(r==="--")return e[n+1]?n+1:null;if(r==="-a"){n++;continue}if(/^-a.+/.test(r)||/^-[cl]+$/.test(r))continue;return n}return null}function xO(e,t,n){for(let r=t;r<e.length;r++){let o=e[r],i=o?.text??"";if(i==="--")return e[r+1]?r+1:null;if(i==="-S"||i==="--split-string")return To(e[r+1],n)?-1:r+2;if(i.startsWith("-S")||i.startsWith("--split-string="))return To(o,n)?-1:r+1;if(i==="-u"||i==="--unset"||i==="-C"||i==="--chdir"||i==="-P"){r++;continue}if(i==="-i"||i==="-0"||i==="--null"||i.startsWith("-u=")||i.startsWith("--unset=")||i.startsWith("-C")||i.startsWith("--chdir=")||i.startsWith("-P"))continue;if(i.startsWith("-"))continue;if(je(i))continue;return r}return null}function _O(e,t){if(!e.words.every((n)=>je(n.text)!==null))return;for(let n of e.words){let r=je(n.text);if(!r)continue;if(To(n,t))t.add(r.name)}}function To(e,t){if(!e)return!1;return e.parts.filter((n)=>n.provenance==="variable").some((n)=>Array.from(n.raw.matchAll(tS)).some((r)=>{let o=r[1]??r[2];return o!==void 0&&(cO.test(o)||t.has(o))}))}function eS(e,t){return!!e&&(e.parts.some((n)=>n.provenance!=="literal"&&n.provenance!=="variable")||To(e,t))}var CO=new Set(["-c","-C","--git-dir","--work-tree","--namespace","--config-env"]),wO=new Set(["-c","-H","-l","--config","--context","--host","--log-level","--tlscacert","--tlscert","--tlskey"]),RO=new Set;function sS(e){if(e==="git")return CO;if(e==="docker")return wO;return RO}function pe(e,t){if(e.length===0||t.length===0)return null;let n=H(e[0]??""),r=we(e);for(let o of t){if(!EO(n,o.command))continue;if(!PO(n,e,o.subcommand))continue;if(AO(e,new Set(o.block_args),r))return{id:`custom.${o.name}`,reason:`[${o.name}] ${o.reason}`,intent:o.intent??"manual_only"}}return null}function EO(e,t){return e===H(t)}function PO(e,t,n){if(!n)return!0;return aS(t,1,n,sS(e))}function aS(e,t,n,r){let o=!1;for(let i=t;i<e.length;i++){let s=e[i];if(!s)continue;if(o){o=!1;continue}if(s==="--"){let a=e[i+1];if(a&&!a.startsWith("-"))return a===n;return!1}if(r.has(s)){o=!0;continue}if(s.startsWith("-")){if(!s.includes("=")&&kO(e,i,n,r))return!0;continue}return s===n}return!1}function kO(e,t,n,r){let o=e[t+1];if(!o||o.startsWith("-"))return!1;return aS(e,t+2,n,r)}function AO(e,t,n){for(let r of e)if(t.has(r))return!0;for(let r of n)if(t.has(r))return!0;return!1}function tn(e,t,n={}){if(e.length===0)return null;let r=e[0];if(!r)return null;let o=H(r);if(o==="eval"){let i=mr(j(e));if(i.kind==="dynamic")return pr(n,t);if(i.kind==="literal"&&t.analyzeNested){let s=t.analyzeNested(i.source,{effectiveCwd:t.cwd,envAssignments:t.envAssignments});if(s)return s}return vt(n,t)}if(de.has(o)){if(Ve(e))return null;let i=ht(e);if(i){if(n.dynamicSourceInput??n.dynamicInput){let c=pr(n,t);if(c)return c}if(fr(i)){let c=pr(n,t);if(c)return c}if(!t.analyzeNested)return null;let a=t.analyzeNested(i,{effectiveCwd:t.cwd,envAssignments:t.envAssignments});if(a)return a;return null}let s=bt(j(e));if(s.kind==="dynamic")return pr(n,t);if(s.kind==="literal"){if(n.dynamicSourceInput)return pr(n,t);return null}if(n.dynamicSourceInput??n.dynamicInput)return pr(n,t);return null}if($e.has(o))return O(Us(e,(i)=>t.analyzeNested?t.analyzeNested(i,{effectiveCwd:t.cwd,envAssignments:t.envAssignments}):null),t.policy)??pe(e,t.policy?.rules??[])??vt(n,t);if(Oe(o)){let i=os(e);if(!i)return vt(n,t);if(ue(t.policy,"interpreter.one-liner-paranoid",!!t.paranoidInterpreters)){let a=O(S("interpreter.one-liner-paranoid",tr),t.policy);if(a)return a}if(as(o,i))return vt(n,t);let s=t.analyzeNested?.(i,{effectiveCwd:t.cwd,envAssignments:t.envAssignments});if(s&&s.id!=="raw-text.dangerous-command"&&(s.reason!==Kt||ar(i)))return s;if(nr(i,t.scanWork))return O(S("interpreter.dangerous-command",vn),t.policy)??vt(n,t);return vt(n,t)}if(o==="rm"||o==="rmdir"){let i=o==="rm"&&(it(e)||n.dynamicRmInput);return O(dr(j(e),{environment:t.environment,cwd:t.cwd,originalCwd:t.originalCwd,strict:t.strict,paranoid:t.paranoidRm,allowTmpdirVar:t.allowTmpdirVar,tmpdirWordSplittingUnsafe:mt(t.envAssignments,t.environment),trustedTmpdirValue:$t(t.envAssignments,t.environment),protectedGitMetadata:t.protectedGitMetadata,policy:t.policy}),t.policy)??(i&&n.dynamicRmInput?vt(n,t):null)??(i?TO(n,t):null)}if(o==="find")return Vs(j(e),{...t,derivedCommandWorkBudget:t.derivedCommandWorkBudget,analyzeTokens:(i,s)=>tn(i,{...t,cwd:s??void 0,derivedCommandWorkBudget:t.derivedCommandWorkBudget},n)})??pe(e,t.policy?.rules??[])??vt(n,t);if(o==="git")return O(ur(j(e),{env:t.environment.env,cwd:t.cwd,envAssignments:t.envAssignments,policy:t.policy,worktreeMode:n.dynamicInput?!1:t.worktreeMode}),t.policy)??pe(e,t.policy?.rules??[])??vt(n,t);return pe(e,t.policy?.rules??[])??vt(n,t)}function pr(e,t){return e.shellDynamicMatch?O(e.shellDynamicMatch,t.policy):null}function vt(e,t){return e.dynamicSourceInput&&e.dynamicSourceMatch?O(e.dynamicSourceMatch,t.policy):null}function TO(e,t){return e.dynamicInput&&e.rmDynamicMatch?O(e.rmDynamicMatch,t.policy):null}var Xu="xargs rm -rf with dynamic input is dangerous. Use explicit file list instead.",Qu="xargs dynamic input can supply arbitrary executable command source. Use an explicit child command and arguments instead.",IO="__CC_SAFETY_NET_XARGS_INPUT__",Xs="__CC_SAFETY_NET_XARGS_INTERPRETER_INPUT__",Qs="rm",OO=/(?:^|[;&|]\s*|\b(?:eval|source)\s+|\b(?:ba|da|z|k)?sh\s+-c\s+)\s*["']?\$(?:([0-9]+|[@*]|[A-Za-z_][A-Za-z0-9_]*)|\{!?([0-9]+|[@*]|[A-Za-z_][A-Za-z0-9_]*)(?:[^}]*)\})/g,zO=/(?:^|[;&|]\s*)\s*eval\b((?:\\.|"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\\'";&|\r\n])*)/g,NO=/\$(?:([0-9]+|[@*]|[A-Za-z_][A-Za-z0-9_]*)|\{!?([0-9]+|[@*]|[A-Za-z_][A-Za-z0-9_]*)(?:[^}]*)\})/g,DO=/^(?:[0-9]+|[@*])$/;function uS(e,t){let n=e.map(N),{childStart:r,replacementToken:o}=kn(n),i=n.slice(r),s=S("xargs.shell-dynamic",Qu);if(MO(i,o,t)&&O(s,t.policy))return O(s,t.policy);for(let a of ot(i,t)){let c=a.tokens,l=o!==null&&c[0]!==i[0]&&(c[0]?.includes(o)??!1)?O(s,t.policy):null;if(l)return l;let u=pS(c,o,a.wrapperEnvAssignments),d=a.head==="rm"&&o!==null&&mS(c,o),f=tn(c,{...t,cwd:a.cwd,envAssignments:a.envAssignments},{dynamicInput:u,dynamicSourceInput:d||dS(c,a.head,o,a.wrapperEnvAssignments,u,t.scanWork,t.environment),dynamicRmInput:d,shellDynamicMatch:s,dynamicSourceMatch:s,rmDynamicMatch:S("xargs.rm-recursive-force-dynamic",Xu)});if(f)return f;let m=$O(c,o,t.policy?.rules??[]);if(m)return m;if(a.head==="git"){let h=o===null?[...c,IO]:c,b=o!==null&&(c.some((R)=>R.includes(o))||Array.from(a.envAssignments.values()).some((R)=>R.includes(o))),y=tn(h,{...t,cwd:a.cwd,envAssignments:a.envAssignments,worktreeMode:o===null||b?!1:t.worktreeMode});if(y)return y}let p=pe(c,t.policy?.rules??[]);if(p)return p}return null}function $O(e,t,n){if(n.length===0)return null;if(t===null){for(let o of n){let i=pe([...e,...o.subcommand?[o.subcommand]:[],...o.block_args],n);if(i)return i}return null}let r=new Set(n.flatMap((o)=>[o.subcommand,...o.block_args].flatMap((i)=>i?e.flatMap((s)=>ed(s,t,i)):[])));for(let o of r){let i=pe(e.map((s)=>s.replaceAll(t,o)),n);if(i)return i}return null}function ed(e,t,n){let r=e.indexOf(t);if(r===-1||e.indexOf(t,r+t.length)!==-1)return[];let o=e.slice(0,r),i=e.slice(r+t.length);return n.startsWith(o)&&n.endsWith(i)?[n.slice(o.length,n.length-i.length)]:[]}function dS(e,t,n,r,o,i,s){if(de.has(t)){if(Ve(e))return!1;if(n!==null&&LO(e,n))return!0;let a=ht(e);if(!a){let c=bt(j(e));if(c.kind==="literal")return n!==null&&c.source.includes(n);return c.kind==="none"&&o}if(n!==null&&a.includes(n))return!0;if(Dt(a,i))return!0;return WO(a,n,r)}if(Oe(t))return cS(e,n,ss,qy(t));if($e.has(t))return cS(e,n,zu,wv);if(t==="eval"){let a=mr(j(e));if(a.kind==="dynamic")return!0;if(n!==null)return a.kind==="literal"&&a.source.includes(n);return o}if(t==="find")return FO(e,n,i,s);if(t==="git"){let a=st(e);return n===null?a.subcommand===null:(a.subcommand?.includes(n)??!1)||a.subcommand!==null&&lr.has(a.subcommand.toLowerCase())&&fS(a.rest,n).some((c)=>c.includes(n))}return!1}function cS(e,t,n,r){let o=n(e);if(t===null)return o.optionsOpen||n([...e,Xs]).sources.some((c)=>c.value===Xs);if(o.sources.some((c)=>c.value.includes(t)))return!0;let i=new Set(o.sources.map((c)=>`${c.tokenIndex}\x00${c.kind}\x00${c.value}`)),s=r.flatMap((c)=>[c.selector,...c.valueForm==="attached-only"||c.valueForm==="attached-or-separate"?[`${c.selector}${Xs}`]:[],...c.valueForm==="equals-or-separate"?[`${c.selector}=${Xs}`]:[]]),a=new Set(s.flatMap((c)=>e.flatMap((l)=>ed(l,t,c))));return Array.from(a).some((c)=>n(e.map((l)=>l.replaceAll(t,c))).sources.some((l)=>!i.has(`${l.tokenIndex}\x00${l.kind}\x00${l.value}`)))}function MO(e,t,n){if(e.length===0||(e[0]??"").toLowerCase()==="command")return!1;let r=new Set(Array.from(ot(e,n),(i)=>i.head)),o=t===null?[...e,Qs]:e.map((i,s)=>s===0?i:i.replaceAll(t,Qs));return Array.from(ot(o,n)).some((i)=>i.head===Qs&&!r.has(Qs))}function mS(e,t){return fS(e.slice(1),t).some((n)=>n.includes(t)&&(n.startsWith("-")||n.startsWith(t)))}function fS(e,t){let n=e.findIndex((r)=>r==="--"&&!r.includes(t));return n===-1?e:e.slice(0,n)}function pS(e,t,n){if(t===null)return!0;return e.some((r)=>r.includes(t))||Array.from(n.values()).some((r)=>r.includes(t))}function LO(e,t){let n=yt(e);if(n.commandIndex!==null&&(e[n.commandIndex]??"").includes(t)||n.scriptIndex!==null&&(e[n.scriptIndex]??"").includes(t))return!0;return["-c","-nc","-cn",`--${t}`,t].some((o)=>e.some((i,s)=>{if(s===0||!i.includes(t))return!1;return ed(i,t,o).some((c)=>{let l=e.map((d,f)=>f===s?d.replaceAll(t,c):d),u=yt(l);if(u.commandIndex===null&&u.scriptIndex===null)return!1;if(n.commandIndex===null&&u.commandIndex!==null)return!0;if(n.scriptIndex===null&&u.scriptIndex!==null)return!0;if(u.commandIndex!==null&&(l[u.commandIndex]??"").includes(c))return!0;return u.scriptIndex!==null&&(l[u.scriptIndex]??"").includes(c)})}))}function WO(e,t,n){let r=new Set(t===null?[]:Array.from(n).filter(([,o])=>o.includes(t)).map(([o])=>o));for(let o of e.matchAll(OO))if(lS(o,r))return!0;for(let o of e.matchAll(zO))for(let i of(o[1]??"").matchAll(NO))if(lS(i,r))return!0;return Ju(e,r)}function lS(e,t){let n=e[1]??e[2];return n!==void 0&&(DO.test(n)||t.has(n))}function FO(e,t,n,r){if(t===null)return!0;let o=!1,i=0;for(let s=1;s<e.length;s++){let a=e[s]??"";if(!o&&!a.startsWith("-")&&a!=="!"&&a!=="("){if(a.indexOf(t)===0)return!0;continue}if(o=!0,i>0){i--;continue}if(Lt(a)){let l=Eo(e,s);s=l.nextIndex-1;for(let u of ot(l.tokens,{environment:r,cwd:void 0})){let d=pS(u.tokens,t,u.wrapperEnvAssignments);if(u.head==="rm"&&mS(u.tokens,t)||dS(u.tokens,u.head,t,u.wrapperEnvAssignments,d,n,r))return!0}continue}let c=Xt(a);if(c>0){if(i=c,a.includes(t))return!0;continue}if(a.includes(t))return!0}return!1}function kn(e){let t=new Set(["-L","-n","-P","-s","-a","-E","-R","-S","-e","-d","-J","--max-args","--max-procs","--max-chars","--arg-file","--eof","--delimiter","--max-lines","--process-slot-var"]),n=null,r=1;while(r<e.length){let o=e[r];if(!o)break;if(o==="--")return{childStart:r+1,replacementToken:n};if(o.startsWith("-")){if(o==="-I"){n=e[r+1]??"{}",r+=2;continue}if(o.startsWith("-I")&&o.length>2){n=o.slice(2),r++;continue}if(o==="--replace"){n="{}",r++;continue}if(o.startsWith("--replace=")){let i=o.slice(10);n=i===""?"{}":i,r++;continue}if(o==="-J"){n=e[r+1]??"{}",r+=2;continue}if(t.has(o))r+=2;else r++}else return{childStart:r,replacementToken:n}}return{childStart:e.length,replacementToken:n}}var Oo="parallel rm -rf with dynamic input is dangerous. Use explicit file list instead.",zo="parallel with shell -c can execute arbitrary commands from dynamic input. Run the inner command directly on an explicit file list instead.",ZO="parallel without a command reads executable commands from dynamic input. Use an explicit command template or ::: arguments instead.",BO="parallel command construction cannot be verified safely. Use the default ::: separator, literal arguments, and built-in replacement strings.",UO=/\{[^{}\s]*\}/,_S=/\{\}|\{-?\d+\}/g,jO=["e","f","source","file","-e","-f","--source","--file"],HO=["c","e","eval","m","r","Mmodule","import","require","-c","-e","-m","-r","--eval","--import","--require"],VO=new Set(["-L","-d","-n","--delay","--delimiter","--header","--joblog","--jl","--max-args","--max-lines","--nice","--results","--result","--res","--tagstring","--timeout"]),qO=new Set(["--arg-file","--colsep","--rpl","--arg-sep","--arg-file-sep"]),gS=new Set(["-S","--sshlogin","--slf","--sshloginfile"]),KO=new Set(["--workdir","--wd"]),hS="__CC_SAFETY_NET_PARALLEL_SOURCE__",YO=new TextEncoder,nd=V.maxDerivedBytes+4*V.maxPlaceholderReplacements;function Ee(e,t){for(let n of e){let r=t(n);if(r)return r}return null}function CS(e,t){return Ee([...e],(n)=>Dt(n,t.scanWork))}function wS(e,t){let n=e.map(N);if((t.envAssignments?.has("PARALLEL")?t.envAssignments.get("PARALLEL"):t.environment.env.get("PARALLEL"))?.trim()){let p=Tn(t);if(p)return p}if(n.length===2&&(n[1]==="--version"||n[1]==="--help"))return null;let o=zS(n),{template:i,jobs:s,runsRemotely:a,readsCommandsFromInput:c,unsupported:l,workdir:u,dryRun:d}=o;if(l){let p=Tn(t);if(p)return p;let h=CS(t.envAssignments?.values()??[],t);if(h)return h}if(c){let p=oz(t);if(p)return p}if(u!==void 0&&a){let p=Tn(t);if(p)return p}let f=cz(u,t.cwd,t.environment.paths);if(f===null){let p=Tn(t);if(p)return p}let m=a?{...t,cwd:void 0,originalCwd:void 0}:f===null||f===void 0||f===t.cwd?t:{...t,cwd:f};if(d){if([...ot(i,m)].flatMap((h)=>[...h.envAssignments.values()]).some(sd)){let h=Tn(t);if(h)return h}return null}if(i.length===0){if(s.some((b)=>b.length!==1)){let b=Tn(t);if(b)return b}let p=s.map((b)=>b[0]??"");ze(t.budget,rd(p));let h=AS(m.envAssignments,m.cwd,a);return Ee(p,(b)=>t.analyzeNested(b,h))}return Ee(ot(i,m),(p)=>JO(p,o,t,m))}function JO(e,t,n,r){let{jobs:o,templateHasPlaceholder:i,runsRemotely:s,usesStdin:a}=t,c=e.tokens,l={...r,cwd:e.cwd,envAssignments:e.envAssignments},u=[...e.envAssignments.values()];if(u.some(IS)){let y=Tn(n);if(y)return y}let d=CS(u,n);if(d)return d;let f=u.some(Q),m=i||f,p=a&&m,h=AS(e.envAssignments,e.wrapperCwd,s||p);if(de.has(e.head)){let y=()=>{if(!i||o.length===0)return null;return ze(n.budget,ea(c,o,"generic")),Ee(o,(E)=>tn(c.map((P)=>nn(P,E)),l))};if(Ve(c))return y();let R=ht(c);if(R){if(OS(R)){let v=An(n);if(v)return v;if(o.length===0)return null;return ze(n.budget,xS(R,o)),Ee(o,(T)=>n.analyzeNested(nn(R,T),h))}if(Q(R)){if(o.length>0)return ze(n.budget,xS(R,o)),Ee(o,(k)=>n.analyzeNested(nn(R,k),h));ze(n.budget,vS(R));let v=Po(R);if(v?.[0]&&H(v[0])==="rm"&&it(v)){let k=bS(n);if(k)return k}let T=v?tn(v,l,{dynamicInput:a,shellDynamicMatch:S("parallel.shell-dynamic",zo),rmDynamicMatch:S("parallel.rm-recursive-force-dynamic",Oo)}):null;if(T)return T;return n.analyzeNested(R,h)}let E=!f&&(!i||o.length>0)?(o.length>0?o:[void 0]).map((v)=>Ys(j(v===void 0?c:i?c.map((T)=>nn(T,v)):[...c,...v]),R)):[];if(E.some((v)=>v.kind==="dynamic")){let v=An(n);if(v)return v}let P=E.flatMap((v)=>v.kind==="literal"?[v.source]:[]);if(P.length>0)return ze(n.budget,rd(P)),Ee(P,(v)=>n.analyzeNested(v,h));if(ze(n.budget,vS(R)),fr(R)){let v=An(n);if(v)return v}let _=n.analyzeNested(R,h);if(_)return _;if(m)return An(n);return null}let w=bt(j(c));if(w.kind==="dynamic"||w.kind==="literal"&&Q(w.source))return An(n)??y();if(w.kind==="literal")return y();if(o.length>0){let E=An(n);if(E)return E;let P=y();if(P)return P;if(i)return null;let _=o.flatMap((v)=>v[0]===void 0?[]:[v[0]]);return ze(n.budget,rd(_)),Ee(_,(v)=>n.analyzeNested(v,h))}if(m||a)return An(n)??y();return null}if(e.head==="rm"&&it(c)){if(i&&o.length>0)return ze(n.budget,ea(c,o,"rm")),Ee(o,(R)=>td(c.map((w)=>od(w,R)),e.cwd,r));if(o.length>0)return ze(n.budget,SS(c,o)),Ee(o,(R)=>td([...c,...R],e.cwd,r));let y=td(c.flatMap((R,w)=>{if(w===0||!Q(R))return[R];return R.startsWith("-")?[od(R,[""])]:[]}),e.cwd,r);if(y)return y;return bS(n)}ze(n.budget,i&&o.length>0?ea(c,o,"generic"):o.length>0?SS(c,o):kS(c));let b=o.length>0?o:[void 0];return Ee(b,(y)=>{let R=y===void 0?c:i?c.map((z)=>nn(z,y)):[...c,...y],w=S("parallel.shell-dynamic",zo),E=a&&e.head==="find"?rz(R,r):null,P=ES(R,a,n.policy?.rules??[],n.budget)??E?.customResult??null,_=H(e.head),v=a&&(_==="rm"&&id(R)||_==="xargs"&&PS(R)||E?.rmOptions===!0),T=a&&(v||E?.executedSource===!0||E===null&&RS(R,_)),k=tn(R,{...l,worktreeMode:s||a||m?!1:n.worktreeMode},{dynamicInput:a||m,dynamicRmInput:v,dynamicSourceInput:P!==null||T,shellDynamicMatch:w,dynamicSourceMatch:w,rmDynamicMatch:S("parallel.rm-recursive-force-dynamic",Oo)});if(T){let z=O(w,n.policy);if(z)return z}return k??P??pe(R,n.policy?.rules??[])})}function RS(e,t){if(Q(e[0]??""))return!0;if(t==="eval"||t==="source"||t===".")return!0;if(t==="parallel"||t==="xargs")return!0;if(de.has(t))return ez(e);if(t==="git")return XO(e);if(t==="find")return!0;if($e.has(t))return yS(e,jO,Ro);if(Oe(t))return yS(e,HO,is);return!1}function id(e){let t=e.indexOf("--"),n=e.slice(1,t===-1?void 0:t);if(!e.some(Q))return t===-1;return n.some((o)=>Q(o)&&(o.startsWith("-")||OS(o)))}function XO(e){if(QO(e))return!0;let t=st(e);if(t.subcommand===null||Q(t.subcommand))return!0;if(!lr.has(t.subcommand.toLowerCase()))return!1;let n=t.rest.indexOf("--"),r=t.rest.slice(0,n===-1?void 0:n);if(!e.some(Q))return n===-1;return r.some(Q)}function QO(e){for(let t=1;t<e.length;t++){let n=e[t];if(!n||n==="--"||!n.startsWith("-"))return!1;if(n==="-c"||n==="--config-env"){if(Q(e[t+1]??""))return!0;t++;continue}if(n.startsWith("-c")&&n.length>2||n.startsWith("--config-env=")){if(Q(n))return!0;continue}if(Q(n))return!0}return!1}function ez(e){if(Ve(e))return!1;let t=ht(e);if(t!==null)return Q(t);let n=bt(j(e));if(n.kind==="literal")return Q(n.source);if(n.kind==="dynamic")return!0;return!e.some(Q)}function yS(e,t,n){let r=n(e);if(r.some((i)=>Q(i.value)))return!0;if(!e.some(Q))return n([...e,hS]).some((i)=>i.value===hS);let o=new Set(r.map((i)=>`${i.tokenIndex}\x00${i.kind}\x00${i.value}`));return t.some((i)=>n(e.map((s)=>nn(s,[i]))).some((s)=>!o.has(`${s.tokenIndex}\x00${s.kind}\x00${s.value}`)))}function ES(e,t,n,r){if(!t||n.length===0)return null;let o=n.filter((s)=>H(s.command)===H(e[0]??""));if(o.length===0)return null;let i=e.some(Q);if(ze(r,tz(e,o,i)),!i)return Ee(o,(s)=>pe([...e,...s.subcommand?[s.subcommand]:[],...s.block_args],[s]));return Ee(o,(s)=>{let a=new Set([s.subcommand,...s.block_args].flatMap((c)=>c?nz(e,c):[]));return Ee(a,(c)=>pe(e.map((l)=>nn(l,[c])),[s]))})}function tz(e,t,n){let r=n?In(qe(t.map((o)=>o.block_args.length+(o.subcommand?1:0)),V.maxChildAnalyses),2*Math.max(e.length,1),V.maxChildAnalyses):t.length;return{childAnalyses:r,derivedTokens:In(r,e.length,V.maxDerivedTokens)}}function nz(e,t){return e.flatMap((n)=>{let r=[...n.matchAll(/\{[^{}\s]*\}/g)];if(r.length!==1)return[];let o=r[0];if(!o||o.index===void 0)return[];let i=n.slice(0,o.index),s=n.slice(o.index+o[0].length);if(!t.startsWith(i)||!t.endsWith(s))return[t];let a=t.slice(i.length,t.length-s.length);return a!==t?[t,a]:[t]})}function rz(e,t){let n={customResult:null,executedSource:!e.some(Q),rmOptions:!1},r=!1,o=0,i=null,s=()=>{if(!i?.some(Q))return;for(let a of ot(i,t))n.executedSource||=RS(a.tokens,a.head),n.rmOptions||=a.head==="rm"&&id(a.tokens)||a.head==="xargs"&&PS(a.tokens),n.customResult??=ES(a.tokens,!0,t.policy?.rules??[],t.budget)};for(let a of e.slice(1)){if(!r&&!a.startsWith("-")&&a!=="!"&&a!=="("){n.executedSource||=Q(a);continue}if(r=!0,i){if(a===";"||a==="+"){s(),i=null;continue}i.push(a);continue}if(o>0){o--;continue}if(Lt(a)){i=[],n.executedSource||=Q(a);continue}let c=Xt(a);if(c>0){o=c,n.executedSource||=Q(a);continue}n.executedSource||=Q(a)}return s(),n}function PS(e){let t=e.slice(kn(e).childStart);return H(t[0]??"")==="rm"&&id(t)}function ta(e,t){return(n)=>O(S(e,t),n.policy)}var An=ta("parallel.shell-dynamic",zo),oz=ta("parallel.command-stream-dynamic",ZO),Tn=ta("parallel.command-stream-dynamic",BO),bS=ta("parallel.rm-recursive-force-dynamic",Oo);function td(e,t,n){return O(dr(j(e),{environment:n.environment,cwd:t,originalCwd:n.originalCwd,strict:n.strict,paranoid:n.paranoidRm,allowTmpdirVar:n.allowTmpdirVar,tmpdirWordSplittingUnsafe:mt(n.envAssignments??new Map,n.environment),trustedTmpdirValue:$t(n.envAssignments??new Map,n.environment),protectedGitMetadata:n.protectedGitMetadata,policy:n.policy}),n.policy)}function rd(e){return{childAnalyses:e.length,derivedTokens:e.length,derivedBytes:No(e)}}function vS(e){return kS([e])}function kS(e){return{childAnalyses:1,derivedTokens:e.length,derivedBytes:No(e)}}function SS(e,t){if(t.length>V.maxChildAnalyses)return{childAnalyses:t.length};return{childAnalyses:t.length,derivedTokens:qe(t.map((n)=>e.length+n.length),V.maxDerivedTokens),derivedBytes:qe([In(No(e),t.length,V.maxDerivedBytes),qe(t.map((n)=>No(n)),V.maxDerivedBytes)],V.maxDerivedBytes)}}function xS(e,t){return ea([e],t,"generic")}function ea(e,t,n){if(t.length>V.maxChildAnalyses)return{childAnalyses:t.length};let r=In(e.length,t.length,V.maxDerivedTokens);if(r>V.maxDerivedTokens)return{childAnalyses:t.length,derivedTokens:r};let o=az(e.map((c)=>sz(c,n))),i=In(o.occurrences,t.length,V.maxPlaceholderReplacements);if(i>V.maxPlaceholderReplacements)return{childAnalyses:t.length,derivedTokens:r,placeholderReplacements:i};if(iz(o,t,i))return{childAnalyses:t.length,derivedTokens:r,derivedBytes:V.maxDerivedBytes+1,placeholderReplacements:i};let s=n==="generic"?nn:od,a=qe(t.map((c)=>No(e.map((l)=>s(l,c)))),V.maxDerivedBytes);return{childAnalyses:t.length,derivedTokens:r,derivedBytes:a,placeholderReplacements:i}}function iz(e,t,n){let r=V.maxDerivedBytes+4*n;return qe([In(e.fixedBytes,t.length,r),In(e.occurrences,qe(t.map((o)=>o.reduce((i,s)=>Math.max(i,Io(s)),0)),r),r)],r)>r}function sz(e,t){let n=t==="generic"?e.matchAll(/\{[^{}\s]*\}/g):e.matchAll(_S),r=0,o=0,i=0;for(let s of n){if(r>=V.maxPlaceholderReplacements)return{occurrences:V.maxPlaceholderReplacements+1,fixedBytes:0};o=qe([o,Io(e.slice(i,s.index))],nd),r++,i=s.index+s[0].length}return{occurrences:r,fixedBytes:r===0?Io(e):qe([o,Io(e.slice(i))],nd)}}function az(e){return{occurrences:qe(e.map((t)=>t.occurrences),V.maxPlaceholderReplacements),fixedBytes:qe(e.map((t)=>t.fixedBytes),nd)}}function No(e,t=V.maxDerivedBytes){return qe(e.map(Io),t)}function Io(e){return YO.encode(e).byteLength}function qe(e,t){let n=0;for(let r of e){if(!Number.isSafeInteger(r)||r<0||r>t-n)return t+1;n+=r}return n}function In(e,t,n){if(!Number.isSafeInteger(e)||!Number.isSafeInteger(t)||e<0||t<0||e!==0&&t>Math.floor(n/e))return n+1;return e*t}function AS(e,t,n){let r={};if(e)r.envAssignments=e;if(n)return r.effectiveCwd=null,r.worktreeMode=!1,r;if(t!==void 0)r.effectiveCwd=t;return Object.keys(r).length>0?r:void 0}function nn(e,t){return e.replace(/\{[^{}\s]*\}/g,(n)=>TS(n,t))}function od(e,t){return e.replace(_S,(n)=>TS(n,t))}function TS(e,t){let n=/^\{(-?\d+)[^{}\s]*\}$/.exec(e)?.[1];if(n===void 0)return t[0]??"";let r=Number(n),o=r>0?r-1:t.length+r;return t[o]??""}function Q(e){return UO.test(e)}function IS(e){if(sd(e))return!0;for(let t of e.matchAll(/\{[^{}\s]*\}/g))if(!/^(?:\{\}|\{-?\d+\})$/.test(t[0]))return!0;return!1}function sd(e){let t=e.indexOf("{=");return t!==-1&&e.indexOf("=}",t+2)!==-1}function OS(e){return/^\{[^{}\s]*\}$/.test(e)}function zS(e){let t=1,n=[],r=e.length,o=-1,i=!1,s=!1,a=!1,c,l=e.some((p)=>p==="::::"||p==="::::+"||p===":::+");while(t<e.length){let p=e[t];if(p===void 0)break;if(p===":::"){o=t;break}if(p==="--"){let w=$u(e,t+1);n.push(...w.templateTokens),r=t+1,o=w.markerIndex;break}if(!p.startsWith("-")){let w=$u(e,t);n.push(...w.templateTokens),r=t,o=w.markerIndex;break}let h=e[t+1],b=p.indexOf("="),y=b===-1?p:p.slice(0,b),R=b===-1?void 0:p.slice(b+1);if(p==="--dry-run"){a=!0,t++;continue}if(p==="-I"||p.startsWith("-I")&&p.length>2){l||=(p==="-I"?h:p.slice(2))!=="{}",t+=p==="-I"?2:1;continue}if(p==="--replace"||p==="-i"){l=!0,t+=2;continue}if(y==="--replace"||p.startsWith("-i")&&p.length>2){let w=y==="--replace"?R:p.slice(2);l||=w!==""&&w!=="{}",t++;continue}if(p==="-a"||qO.has(y)){l=!0,t+=R===void 0?2:1;continue}if(p==="--pipe"||p==="--pipepart"){s=!0,t++;continue}if(y==="--env"){l=!0,t+=R===void 0?2:1;continue}if(gS.has(y)||p.startsWith("-S")&&p.length>2){i=!0,t+=gS.has(p)?2:1;continue}if(KO.has(y)){let w=R??h;if(w===void 0||w===":::"||w==="--"){l=!0,t++;continue}c=w,l||=R!==void 0&&w==="",t+=R===void 0?2:1;continue}if(p.startsWith("-j")&&p.length>2&&/^\d+$/.test(p.slice(2))){t++;continue}if(p.startsWith("--")&&R!==void 0){t++;continue}if(VO.has(p)){if(h===void 0||h===":::"||h==="--"){l=!0,t++;continue}t+=2;continue}t+=p==="-j"||p==="--jobs"?2:1}l||=n.some(a?sd:IS);let u=[];if(o!==-1){let p=[];for(let h=o+1;h<e.length;h++){let b=e[h];if(b===":::"){u.push(p),p=[];continue}if(b!==void 0)p.push(b)}u.push(p)}let d=lz(u),f=n.some(Q),m=n.length===0&&o===-1;return{template:n,jobs:d,childStart:r,templateHasPlaceholder:f,runsRemotely:i,usesStdin:s||o===-1,readsCommandsFromInput:m,unsupported:l,workdir:c,dryRun:a}}function cz(e,t,n){if(e===void 0)return;if(e==="..."||/[{}$`*?~[]/.test(e))return null;if(!t&&!GO(e))return null;try{return qt(t??e,e,n)}catch{return null}}function lz(e){if(e.length===0||e.some((n)=>n.length===0))return[];let t=[[]];for(let n of e){if(n.length===1){let o=n[0];if(o===void 0)return[];for(let i of t)i.push(o);continue}let r=[];for(let o of t)for(let i of n)if(r.push([...o,i]),r.length>V.maxChildAnalyses)return r;t=r}return t}function NS(e){return zS(e).childStart}var uz="dynamic command name contains shell substitution output and cannot be verified safely. Use a literal executable name.",na="shell substitution output can change guarded command structure and cannot be verified safely. Use literal subcommands and options.";function cd(e){return e?.parts.some((t)=>t.provenance==="command-substitution")??!1}function ad(e){return e?.parts.some((t)=>t.provenance==="literal"&&t.raw.replace(/^["']/,"").startsWith("-"))??!1}function $S(e,t,n,r,o=!1,i){let a=(po(e,t)||r&&e!=="powershell"&&t[0]?.provenance==="variable")&&ue(i,"shell.dynamic-executable",o)?S("shell.dynamic-executable",uz):null;return O(a,i)??MS(e,t,n,o,i)}function MS(e,t,n,r,o){if(t.length<2)return null;let i=t.flatMap((a,c)=>cd(a)?[c]:[]);if(i.length===0)return null;let s=H(t[0]?.text??"");if(s==="git"){let a=Yn(e,t),c=mz(a);if(ue(o,"shell.dynamic-structure",r)&&i.some((d)=>d<=c))return O(S("shell.dynamic-structure",na),o);if(O(ur(a,{env:n.env}),o))return null;let l=t[c]?.text.toLowerCase(),u=a.findIndex((d,f)=>f>c&&N(d)==="--");if(ue(o,"shell.dynamic-structure",r)&&l&&lr.has(l)&&i.some((d)=>d>c&&(u===-1||d<u)))return O(S("shell.dynamic-structure",na),o);return null}if(s==="find")return ue(o,"shell.dynamic-structure",r)&&fz(t)?O(S("shell.dynamic-structure",na),o):null;if(s==="rm"){let a=t.findIndex((l,u)=>u>0&&N(l)==="--"),c=it(t.map(N));return ue(o,"shell.dynamic-structure",r)&&i.some((l)=>(a===-1||l<a)&&(l<t.length-1||!c))?O(S("shell.dynamic-structure",na),o):null}if(s==="xargs")return DS(e,t.slice(kn(t.map(N)).childStart),"xargs",n,r,o);if(s==="parallel")return DS(e,t.slice(NS(t.map(N))),"parallel",n,r,o);return null}function DS(e,t,n,r,o,i){if(t.length===0)return null;let s=dz(t,r);if(po(e,s)){let c=O(S(`${n}.shell-dynamic`,n==="xargs"?Qu:zo),i);if(c)return c}let a=MS(e,s,r,o,i);if(a)return a;if(s[0]?.text==="rm"&&s.slice(1).some((c)=>cd(c)&&ad(c)))return O(S(`${n}.rm-recursive-force-dynamic`,n==="xargs"?Xu:Oo),i);return null}function dz(e,t){let n=Sn(e,t),r=n.rewritten?j(n.words.map(N)):n.words,o=r[0];return o&&N(o)==="busybox"?r.slice(1):r}function mz(e){let t=1;while(t<e.length){let n=e[t],r=n?N(n):"";if(dt.has(r)){t+=2;continue}if(r.startsWith("-")){t++;continue}return t}return t}function fz(e){let t=!1,n=0,r=!1,o=!1;for(let i=1;i<e.length;i++){let s=e[i];if(!s)continue;let a=cd(s);if(n>0){n--;continue}if(o){if(s.text===";"||s.text==="+"){o=!1,t=!0,r=!1;continue}if(a&&(r||ad(s)))return!0;r=!1;continue}if(!t&&!s.text.startsWith("-")){if(a&&(i>1||ad(s)))return!0;continue}if(t=!0,a)return!0;let c=Xt(s.text);if(c>0){n=c;continue}if(Lt(s.text))o=!0,r=!0}return!1}function ld(e,t){return e.some((n)=>{if(n.value==="-"&&(n.kind==="main-script"||n.kind==="program-file"))return!0;return!Zi(t[n.tokenIndex],n.value)})}var pz="dd writing to a /dev device can destroy a disk or partition. Run device writes manually after confirming the target.",gz="mkfs formatting a /dev device erases everything on it. Run the format manually after confirming the target.",hz="shred permanently destroys the given target. Use rm for ordinary deletes, or run shred manually.";function LS(e,t){let n=t.slice(1);if(e==="dd"&&n.some((r)=>/^of=\/dev\/.+/.test(r)))return S("dd.device-write",pz);if((e==="mkfs"||e.startsWith("mkfs."))&&n.some((r)=>r.startsWith("/dev/")))return S("mkfs.device",gz);if(e==="shred"&&n.length>0)return S("shred.target",hz);return null}var FS=[{heads:new Set(["rm","rmdir"]),analyze:(e)=>dr(e.words,{environment:e.options.environment,cwd:e.cwd,originalCwd:e.originalCwd,strict:e.options.strict,paranoid:e.options.paranoidRm,allowTmpdirVar:e.allowTmpdirVar,tmpdirWordSplittingUnsafe:mt(e.envAssignments,e.options.environment),trustedTmpdirValue:$t(e.envAssignments,e.options.environment),protectedGitMetadata:e.options.protectedGitMetadata,policy:e.options.policy})},{heads:new Set(["git"]),analyze:(e)=>ur(e.words,ud(e))},{heads:new Set(["find"]),analyze:(e)=>Vs(e.words,{environment:e.options.environment,cwd:e.cwd,originalCwd:e.originalCwd,strict:e.options.strict,allowTmpdirVar:e.allowTmpdirVar,tmpdirWordSplittingUnsafe:mt(e.envAssignments,e.options.environment),trustedTmpdirValue:$t(e.envAssignments,e.options.environment),protectedGitMetadata:e.options.protectedGitMetadata,derivedCommandWorkBudget:e.options.derivedCommandWorkBudget,envAssignments:e.envAssignments,policy:e.options.policy,analyzeTokens:e.analyzeChildTokens,analyzeNested:(t,n)=>On(e.options.analyzeNested(t,n))})},{heads:new Set(["xargs"]),analyze:(e)=>uS(e.words,{...WS(e),analyzeNested:(t,n)=>On(e.options.analyzeNested(t,n))})},{heads:new Set(["parallel"]),analyze:(e)=>wS(e.words,{...WS(e),budget:e.options.parallelBudget,analyzeNested:(t,n)=>On(e.options.analyzeNested(t,n))})}];function WS(e){return{environment:e.options.environment,cwd:e.cwd,originalCwd:e.originalCwd,strict:e.options.strict,paranoidRm:e.options.paranoidRm,paranoidInterpreters:e.options.paranoidInterpreters,allowTmpdirVar:e.allowTmpdirVar,protectedGitMetadata:e.options.protectedGitMetadata,derivedCommandWorkBudget:e.options.derivedCommandWorkBudget,envAssignments:e.envAssignments,worktreeMode:e.options.worktreeMode,policy:e.options.policy,scanWork:e.options.scanWork}}function On(e){return e?{id:e.ruleId??"",reason:e.reason,intent:e.intent??"manual_only"}:null}function ud(e){return{env:e.options.environment.env,cwd:e.cwd,dynamicArguments:e.dynamicArguments,envAssignments:e.envAssignments,policy:e.options.policy,worktreeMode:e.options.worktreeMode}}var US="shell execution source cannot be verified safely. Use a literal command string or ask the user to run it manually.";function jS(e){return FS.find((t)=>t.heads.has(e))?.analyze}function Do(e,t,n){let r=n.trace;if(e.length===0)return null;let o=n.commandView?.dialect??"posix",i=(A)=>A.map((Z)=>o==="posix"?N(Z):Z.text),s=n.effectiveCwd===null,a=s?void 0:n.effectiveCwd??n.cwd,c=s?void 0:n.cwd,l=ms(e);if(l.envAssignments.size>0)r?.recordSegment({type:"env-strip",input:i(e),envVars:[...l.envAssignments.keys()],output:i(l.words)});let u=Sn(l.words,n.environment,a,new Map([...n.envAssignments??[],...l.envAssignments])),d=u.envSplitValues??[];if(d.length>0){let A=[...d,...i(u.words)].join(" "),Z=Dt(A,n.scanWork);if(Z)return r?.recordSegment({type:"dangerous-text",token:A,matched:!0,reason:Z.reason}),St(Z);if(n.strict)return Me(r);let oe=fs(d,i(u.words));if(oe){Je(n.derivedCommandWorkBudget,oe.length);let le=n.analyzeNested(oe.join(" "),{effectiveCwd:u.cwd===void 0?n.effectiveCwd:u.cwd,envAssignments:new Map([...n.envAssignments??[],...l.envAssignments,...u.envAssignments])});if(le)return le}}let f=u.rewritten?j(i(u.words)):Yn(o,u.words),m=i(f),p={...n,wrapperNormalizationBudget:n.wrapperNormalizationBudget??{iterations:0}};if(r&&l.words.length>f.length){let A=i(l.words);r.recordSegment({type:"leading-tokens-stripped",input:A,removed:A.slice(0,A.length-f.length),output:m})}let h=new Map([...n.envAssignments??[],...l.envAssignments,...u.envAssignments]),b=m[0];if(!b)return null;if(Rn(b))throw new Ie;let y=H(b),R=u.cwd===null?void 0:u.cwd??a,w=u.cwd===null?void 0:c,E=u.cwd===void 0?n.effectiveCwd:u.cwd,P=!lo(h,n.environment),_=$S(o,u.words,n.environment,t===0,n.strict,n.policy);if(_)return r?.recordSegment({type:"rule-check",rule:"analyzer/segment.ts:analyzeDynamicCommandStructure",matched:!0,reason:_.reason}),St(_);let v=js(m,n.policy);if(v){for(let A of[v.childIndex,...v.alternativeChildIndices]){GS(p.wrapperNormalizationBudget);let Z=f.slice(A);r?.recordSegment({type:"transparent-wrapper",wrapper:v.wrapper,output:i(Z)});let oe=Do(Z,t,{...p,effectiveCwd:E,envAssignments:h});if(oe)return oe}return null}let T=y==="eval"?mr(f):y==="trap"?rS(f):void 0;if(T?.kind==="dynamic"&&(n.strict||!n.commandView||!Yu(n.commandView)))return Me(r);if(T?.kind==="literal"){r?.recordSegment({type:"recurse",reason:y==="eval"?"shell-eval":"shell-trap",innerCommand:T.source,depth:t+1});let A=n.analyzeNested(T.source,{effectiveCwd:E,envAssignments:h,functionDefinitions:n.functionDefinitions});if(A)return A}if(VS(b,y)){if(Ve(m))return null;let A=yz(m,h,E,n,r,t);if(A)return A;let Z=ht(m);if(Z){let Vn=Ys(f,Z);if(Vn.kind==="dynamic")return Me(r);let vl=Vn.kind==="literal"?Vn.source:Z,Th=bz(vl);r?.recordSegment({type:"shell-wrapper",wrapper:y,innerCommand:Th}),r?.recordSegment({type:"recurse",reason:"shell-wrapper",innerCommand:Th,depth:t+1});let Ih=n.analyzeNested(vl,{effectiveCwd:E,envAssignments:h});if(Ih)return Ih;return fr(vl)?Me(r):null}let oe=bt(f);if(oe.kind==="dynamic")return Me(r);if(oe.kind==="literal")return ia(oe.source,E,h,n,r,t);let le=oS(f,n.commandView?.redirections??[],n.hasPipelineInput??!1,n.literalShellInput);if(le.kind==="dynamic")return Me(r);if(le.kind==="literal")return r?.recordSegment({type:"recurse",reason:"shell-stdin",innerCommand:le.source,depth:t+1}),n.analyzeNested(le.source,{effectiveCwd:E,envAssignments:h})}if(y==="source"||y==="."){let A=m[1]==="-p"?2:null;if(A!==null){let Vn=n.commandView?f[A]:void 0;if(!Vn)return null;if(Vn.provenance!=="literal")return Me(r)}let Z=A===null?1:3,oe=m[Z]==="--"?Z+1:Z,le=n.commandView?f[oe]:void 0;if(!le)return null;if(le.provenance==="literal")return ia(le.text,E,h,n,r,t);if(n.strict||!n.commandView||!Yu(n.commandView))return Me(r)}if($e.has(y)){if(n.strict&&ld(Ro(m),f))return Me(r);let A=Us(m,(oe)=>On(n.analyzeNested(oe,{effectiveCwd:E,envAssignments:h}))),Z=O(A,n.policy);if(Z)return r?.recordSegment({type:"rule-check",rule:"awk:analyzeAwkSystemCallMatch",matched:!0,reason:Z.reason}),St(Z)}if(Oe(y)){if(n.strict&&ld(is(m),f))return Me(r);let A=os(m);if(A){let Z=ue(n.policy,"interpreter.one-liner-paranoid",!!n.paranoidInterpreters);if(r?.recordSegment({type:"interpreter",interpreter:y,codeArg:A,paranoidBlocked:Z}),Z){let le=O(S("interpreter.one-liner-paranoid",tr),n.policy);if(le)return St(le)}if(as(y,A))return null;r?.recordSegment({type:"recurse",reason:"interpreter",innerCommand:A,depth:t+1});let oe=n.analyzeNested(A,{effectiveCwd:E,envAssignments:h});if(oe&&oe.ruleId!=="raw-text.dangerous-command"&&(oe.reason!==Kt||ar(A)))return oe;if(nr(A,n.scanWork)){let le=O(S("interpreter.dangerous-command",vn),n.policy);if(le)return r?.recordSegment({type:"dangerous-text",token:A,matched:!0,reason:vn}),St(le)}r=void 0}}if(y==="busybox"&&m.length>1)return GS(p.wrapperNormalizationBudget),r?.recordSegment({type:"busybox",subcommand:m[1]??"unknown"}),r?.recordSegment({type:"recurse",reason:"busybox",innerCommand:m.slice(1).join(" "),depth:t+1}),Do(f.slice(1),t,{...p,effectiveCwd:E,envAssignments:h});let k=O(LS(y,m),n.policy);if(k)return r?.recordSegment({type:"rule-check",rule:"analyzer/device.ts:analyzeDeviceCommandMatch",matched:!0,reason:k.reason}),St(k);let z=r===p.trace?p:{...p,trace:r},M={words:f,head:y,cwd:R,originalCwd:w,envAssignments:h,allowTmpdirVar:P,dynamicArguments:u.words.some((A)=>A.provenance==="command-substitution"),depth:t,effectiveCwd:E,options:z,analyzeChildTokens:(A,Z)=>On(Do(j(A),t+1,{...z,commandView:void 0,effectiveCwd:Z,envAssignments:h}))??pe(A,z.policy.rules)},W=jS(y);if(y==="rm"||y==="xargs"||y==="parallel")r?.recordSegment({type:"tmpdir-check",tmpdirValue:h.has("TMPDIR")||n.environment.env.has("TMPDIR")?"<redacted>":null,isOverriddenToNonTemp:!P,allowTmpdirVar:P});let U=r&&y==="git"?Hv(M.words,ud(M)):void 0,ge=ZS(U?U.match:W?.(M)??null,n.policy);if(r)vz(M,ge,U?.relaxation??null);if(ge)return St(ge);let Ze=W!==void 0;if(!Ze)if(!ns.has(y)){let A=r?[]:void 0;for(let Z=1;Z<m.length;Z++){let oe=m[Z];if(!oe)continue;A?.push(oe);let le=ZS(Sz(M,m,Z),n.policy);if(le)return r?.recordSegment({type:"fallback-scan",tokensScanned:A??[],embeddedCommandFound:H(oe)}),St(le)}r?.recordSegment({type:"fallback-scan",tokensScanned:A??[]})}else r?.recordSegment({type:"fallback-scan",tokensScanned:[]});else r?.recordSegment({type:"fallback-scan",tokensScanned:[]});if(t===0||!Ze){let A=pe(m,n.policy.rules);if(r?.recordSegment({type:"custom-rules-check",rulesChecked:n.policy.rules.length>0,matched:!!A,reason:A?.reason}),A)return St(A)}else r?.recordSegment({type:"custom-rules-check",rulesChecked:!1,matched:!1});return null}function yz(e,t,n,r,o,i){let s=Xv(e);if(s.argvSource?.kind==="absent")return Me(o);if(s.argvSourceApplies&&s.argvSource){let c=ia(s.argvSource.value,n,t,r,o,i,!0);if(c)return c}if(!s.envSourceApplies||!s.envName)return null;let a=t.get(s.envName);if(!a)return null;return ia(a,n,t,r,o,i,!0)}function ia(e,t,n,r,o,i,s=!1){if(s&&/[$`*?[\]]/.test(e))return Me(o);let a=co(e,t,r.environment.paths),c=a?r.literalHeredocFiles?.get(a):void 0;if(c===void 0)return s?Me(o):null;return Je(r.derivedCommandWorkBudget,1),o?.recordSegment({type:"recurse",reason:"heredoc-file",innerCommand:c,depth:i+1}),r.analyzeNested(c,{effectiveCwd:t,envAssignments:n})}function bz(e){let t=e[0];return e.length>=2&&(t==='"'||t==="'")&&e.at(-1)===t?e.slice(1,-1):e}function vz(e,t,n){let r={git:"git:analyzeGitMatch",rm:"analyzer/rm.ts:analyzeRmMatch",find:"analyzer/find.ts:analyzeFindMatch",xargs:"analyzer/xargs.ts:analyzeXargs",parallel:"analyzer/parallel.ts:analyzeParallel"}[e.head];if(!r)return;if(e.options.trace?.recordSegment({type:"rule-check",rule:r,matched:!!t||!!n,reason:t?.reason??n?.originalReason}),n)e.options.trace?.recordSegment({type:"worktree-relaxation",originalReason:n.originalReason,gitCwd:n.gitCwd})}function GS(e){if(e.iterations>=Qn)throw new Ie;e.iterations++}function St(e){return{reason:e.reason,ruleId:e.id||void 0,intent:e.intent}}function Me(e){return e?.recordSegment({type:"error",message:US}),St(HS())}function HS(){return{id:"",reason:US,intent:"stop_and_explain"}}function VS(e,t){return de.has(t)||e==="$SHELL"||e==="${SHELL}"||de.has(G(t))}function Sz(e,t,n){let r=ot(t.slice(n),{environment:e.options.environment,cwd:e.cwd,envAssignments:e.envAssignments,policy:e.options.policy});for(let o of r){let i=xz(e,n,o);if(i)return i}return null}function xz(e,t,n){let r=n.tokens[0];if(!r)return null;let o=H(r);if(VS(r,o)){Je(e.options.derivedCommandWorkBudget,e.words.length-t);let c=n.tokens;if(Ve(c))return null;let l=ht(c);if(!l){if(bt(j(c)).kind==="dynamic")return HS();return oa(e,n)}let u=e.options.analyzeNested(l,{effectiveCwd:n.wrapperCwd===void 0?e.effectiveCwd:n.wrapperCwd,envAssignments:n.envAssignments});return u?On(u):oa(e,n)}let i=jS(o);if(!i||o==="xargs"||o==="parallel"){if(n.wrappedByTransparent&&e.options.policy.rules.length>0)Je(e.options.derivedCommandWorkBudget,e.words.length-t);return oa(e,n)}Je(e.options.derivedCommandWorkBudget,e.words.length-t);let s=[o,...n.tokens.slice(1)],a={...e,words:j(s),head:o,cwd:n.cwd,originalCwd:n.wrapperCwd===null?void 0:e.originalCwd,envAssignments:n.envAssignments,allowTmpdirVar:!lo(n.envAssignments,e.options.environment),effectiveCwd:n.wrapperCwd===void 0?e.effectiveCwd:n.wrapperCwd,options:o==="git"?{...e.options,worktreeMode:!1}:e.options};return i(a)??oa(e,n)}function oa(e,t){return t.wrappedByTransparent?pe(t.tokens,e.options.policy.rules):null}function ZS(e,t){return e?.id.startsWith("custom.")||e?.id==="raw-text.dangerous-command"?e:O(e,t)}var _z=/^\s*(?:\$\(\s*)?[({]*\s*(?:command\s+|builtin\s+)?(?:cd|pushd|popd)(?:\s|$)/,Cz=new Set(["cd","chdir","pop-location","popd","push-location","pushd","set-location","sl"]);function wz(e,t){let n=YS(e,t);if(n.length===0)return!1;let r=n[KS(n)];if(r==="cd"||r==="pushd"||r==="popd")return!0;return _z.test(e.join(" "))}function qS(e,t,n,r){if(e.dialect==="powershell"){let a=Rz(e.words,r);if(a.kind==="none")return;if(!t||a.kind==="unknown")return null;return BS(Az(a.target),t,n.paths)}let o=e.words.map(N);if(!wz(o,n))return;if(!t)return null;let i=YS(o,n,t),s=KS(i);if(s===-1||i[s]!=="cd")return null;return BS(i[s+1],t,n.paths)}function BS(e,t,n){if(!e||e==="-"||e.includes("$")||e.includes("`"))return null;try{return Tz(qt(t,e,n),t,n)?t:null}catch{return null}}function Rz(e,t){let n=Ez(e[0])?1:0,r=e[n];if(!Pz(r,n===1))return{kind:"none"};let o=r.text.toLowerCase(),i=o.split(/[\\/]/).pop()??o;if(!Cz.has(i))return{kind:"none"};if(o!==i||i==="pop-location"||i==="popd")return{kind:"unknown"};return kz(e.slice(n+1),t)}function Ez(e){return e?.provenance==="literal"&&!e.quoted&&e.raw===e.text&&(e.text==="&"||e.text===".")}function Pz(e,t){return e?.provenance==="literal"&&(t||!e.quoted&&e.raw===e.text)}function kz(e,t){let n;for(let r of e){if(r.provenance!=="literal"||n!==void 0)return{kind:"unknown"};n=r.text}if(n!==void 0)return{kind:"target",target:n};return t===void 0?{kind:"unknown"}:{kind:"target",target:t}}function Az(e){return e.includes("::")?void 0:e.replaceAll("\\","/")}function KS(e){let t=0;if(e[0]==="builtin"&&e.length>1)t=1;if(e[t]!=="time")return t;let n=t+1;while(e[n]?.startsWith("-"))n++;return n}function YS(e,t,n){let r=Iz(e);return or([...r],t,n)}function Tz(e,t,n){let r=n.realpath(e),o=n.realpath(t);if(r===null||o===null)return ra(e)===ra(t);return ra(r)===ra(o)}function Iz(e){let t=0;while(t<e.length){let n=e[t];if(n==="{"||n==="("||n==="$(")t++;else break}return e.slice(t)}var md="TMPDIR",fd="IFS",JS=/^([A-Za-z_][A-Za-z0-9_]*)\+=/,XS=/^[A-Za-z_][A-Za-z0-9_]*$/,QS=new Set(["export","typeset","declare","readonly"]),Oz=new Set(["builtin","command","time"]);function ex(e,t){return{env:e,effectiveEnvAssignments:Mz(e,t),shellAssignments:new Map}}function tx(e){return{env:e.env,effectiveEnvAssignments:e.effectiveEnvAssignments?new Map(e.effectiveEnvAssignments):void 0,shellAssignments:new Map(e.shellAssignments)}}function pd(e,t){let n=rx(e,t);n.assignments.filter((s)=>s.persists).forEach((s)=>{t.shellAssignments.set(s.name,s.value),gd(t,s)});let r=n.commandIndex;if(r!==-1&&QS.has(e[r]??""))e.filter((s)=>XS.test(s)&&dd(s)).forEach((s)=>{Lz(t,s)});let o=r===-1?-1:ox(e,r);if(o===-1||e[o]!=="unset")return;let i=Fz(e,o);if(i===null)return;e.slice(i).forEach((s)=>{Wz(t,s)})}function nx(e,t){let n=rx(e,t).assignments;if(n.length===0)return t.effectiveEnvAssignments;let r=new Map(t.effectiveEnvAssignments??[]);return n.forEach((o)=>{r.set(o.name,o.value)}),r}function rx(e,t){let n=e.findIndex((s)=>!zz(s)),r=n!==-1&&QS.has(e[ox(e,n)]??""),o=$z(t);return{assignments:e.flatMap((s,a)=>{let c=Nz(s,o,t.env);if(!c)return[];if(n!==-1&&a>n&&!r&&!Gl(c.name))return[];return o.set(c.name,c.value),[{...c,persists:n===-1||r}]}),commandIndex:n}}function ox(e,t){let n=t;while(Oz.has(e[n]??"")){n+=1;while(e[n]?.startsWith("-")){if(/^-p*[vV][pvV]*$/.test(e[n]??""))return t;n+=1}}return n}function zz(e){return je(e)!==null||JS.test(e)}function Nz(e,t,n){return je(e)??Dz(e,t,n)}function Dz(e,t,n){let r=ji(e,n,t);if(r)return r;let o=e.match(JS)?.[1];if(!o)return null;let i=e.indexOf("=");return{name:o,value:`${t.has(o)?t.get(o):n.get(o)??""}${e.slice(i+1)}`}}function dd(e){return e===md||e===fd||Zl(e)}function $z(e){return new Map([...e.effectiveEnvAssignments??[],...e.shellAssignments])}function Mz(e,t){let n=[...Bi,md,fd].map((r)=>{let o=e.get(r);return o===void 0?null:[r,o]}).filter((r)=>r!==null);if(n.length===0)return t;return new Map([...n,...t??[]])}function gd(e,t){let n=new Map(e.effectiveEnvAssignments??[]);n.set(t.name,t.value),e.effectiveEnvAssignments=n}function Lz(e,t){gd(e,{name:t,value:e.shellAssignments.get(t)??e.effectiveEnvAssignments?.get(t)??e.env.get(t)??""})}function Wz(e,t){if(!dd(t)&&!XS.test(t))return;if(e.shellAssignments.set(t,""),!dd(t)||t===md||t===fd||to(t)){gd(e,{name:t,value:""});return}if(!e.effectiveEnvAssignments?.has(t))return;let n=new Map(e.effectiveEnvAssignments);n.delete(t),e.effectiveEnvAssignments=n.size===0?void 0:n}function Fz(e,t){let n=t+1;while(n<e.length){let r=e[n];if(!r)return null;if(r==="--")return n+1;if(r==="-v"){n++;continue}if(r.startsWith("-"))return null;return n}return n}var Gz="Unquoted heredoc input is not supported safely. Quote the delimiter or ask the user to verify.",zn="This heredoc form or stdin consumer is not supported safely. Use a quoted heredoc with a supported consumer (cat, tee, git apply, git commit, gh pr create, gh issue create), or ask the user to verify.",Zz=64;function Sd(e,t,n,r){let o=n.derivedCommandWorkBudget===void 0,i=n.parallelBudget===void 0;try{return Bz(e,t,{...n,derivedCommandWorkBudget:n.derivedCommandWorkBudget??es(),parallelBudget:n.parallelBudget??Yy()},r)}catch(s){let a=s instanceof Ie&&o?Gy:s instanceof us&&i?Ky:void 0;if(!a)throw s;if(n.trace?.currentSegmentIndex!==void 0)n.trace.recordSegment({type:"error",message:a});else n.trace?.recordGlobal({type:"error",message:a});return{reason:a,segment:e,intent:"stop_and_explain"}}}function Bz(e,t,n,r){if(t>=ts)return n.trace?.recordSegment({type:"error",message:It}),{reason:It,segment:e,intent:"stop_and_explain"};let o=r??n.factStore?.getCommandProgram(e,n.shell??"auto")??et(e,n.shell);if(o.status==="limited")return n.trace?.recordSegment({type:"error",message:It}),{reason:It,segment:e,intent:"stop_and_explain"};if(o.status==="invalid"){let l=o.issues.find((u)=>u.code.includes("heredoc"));if(l){if(!n.strict)return vd(e,n);let u=`Unsupported heredoc syntax: ${l.message}`;return n.trace?.recordGlobal({type:"error",message:u}),{reason:u,segment:e,intent:"stop_and_explain"}}return ux(e,n),{reason:Kt,segment:e,intent:"stop_and_explain"}}if(n.strict&&o.status==="partial")return ux(e,n),{reason:Kt,segment:e,intent:"stop_and_explain"};if(o.issues.some((l)=>l.code.includes("quote"))&&!n.analyzePartialProgram)return vd(e,n);let s=n.cwd,a=n.effectiveCwd!==void 0?n.effectiveCwd:n.cwd,c=ex(n.environment.env,n.envAssignments);return ca(o,t,{...n,rootProgram:o},s,[{effectiveCwd:a,shellGitContextState:c,literalHeredocFiles:new Map(n.literalHeredocFiles),functionDefinitions:new Map(n.functionDefinitions)}]).result}function ca(e,t,n,r,o){let i=[...o],s,a;for(let[c,l]of e.nodes.entries()){if(l.kind==="connector"){a=l.operator;continue}let u=e.nodes[c+1],d=u?.kind==="connector"?u.operator:void 0,f=Uz(e,c,l,a,d),m=a==="&&"||a==="||",p=m?s:void 0,h=a==="&&"?p?.success??i:a==="||"?p?.failure??i:i,b=a==="||"?p?.success??[]:[],y=a==="&&"?p?.failure??[]:[],R=m||gr(d);if(l.kind==="function"){let k=h.flatMap((M)=>{let W=$o(M);return W.functionDefinitions.set(l.name,l.body),hd(M,[W],f,d==="&",gr(d))}),z=yd(k,[],b,y,a,d);i=z.states,s=z.conditionalStates,a=void 0;continue}if(l.kind==="group"){let k=[],z=[];for(let W of h){let U=ca(l.body,t,n,r,[$o(W)]);if(U.result)return U;if(k.push(...hd(W,U.states,f,d==="&",gr(d))),R)z.push(W,...f?U.states.map((ge)=>sa(W,ge)):U.states)}let M=yd(k,z,b,y,a,d);i=M.states,s=M.conditionalStates,a=void 0;continue}if(l.kind!=="command")continue;let w=n.trace?.flattenNested?n.trace.currentSegmentIndex:n.trace?.allocateSegment(),E=e.nodes[c-2],P=la(a)&&E?.kind==="command"?nS(E)??Hz(E):void 0,_=[],v=[];for(let k of h){let z=Vz(l,t,n,r,[$o(k)]);if(z.result)return{result:z.result,states:i};let M=e.dialect==="powershell"?z.states:z.states.map((W)=>sa(k,W));for(let W of M){let U=$o(W),ge=Yz(l,t,n.trace?{...n,trace:dx(n.trace,w)}:n,r,U,la(a),P);if(ge)return{result:ge,states:i};let Ze=lN(l,U.functionDefinitions);if(Ze)Je(n.derivedCommandWorkBudget,ua(Ze));let A=Ze?t+1>=ts?bd(l.displayText,n,[U]):ca(Ze,t+1,n,r,[U]):{result:null,states:[U]};if(A.result)return A;if(_.push(...hd(k,A.states,f,d==="&",gr(d))),R)v.push(k),v.push(...A.states.map((Z)=>f?sa(k,Z):Z))}}let T=yd(_,v,b,y,a,d);i=T.states,s=T.conditionalStates,a=void 0}return{result:null,states:i}}function Uz(e,t,n,r,o){if(n.kind==="group"&&n.style==="subshell")return!0;if(e.dialect==="posix"&&(la(r)||la(o)))return!0;if(o==="&")return!0;return e.dialect==="powershell"&&n.kind==="group"&&n.style==="brace"&&jz(e,t)}function hd(e,t,n,r,o){let i=n?t.map((a)=>sa(e,a)):[...t],s=o?i.flatMap((a)=>Mo(e.literalHeredocFiles,a.literalHeredocFiles)?[a]:[{...a,literalHeredocFiles:new Map(e.literalHeredocFiles)},a]):i;return r?[e,...s]:s}function sa(e,t){return{...e,literalHeredocFiles:new Map(t.literalHeredocFiles)}}function jz(e,t){let n=[...e.nodes.slice(0,t)].reverse().find((o)=>o.kind==="command"||o.kind==="connector");if(!n||n.kind!=="command")return!0;let r=n.words[0]?.text.toLowerCase();if(r==="&"||r===".")return!1;if(r==="write-output"||r==="function"||r==="start-job")return!0;if(qz(n))return!0;return n.source.replaceAll(/\s/g,"").toLowerCase()==="if($false)"}function la(e){return e==="|"||e==="|&"}function Hz(e){if(e?.dialect!=="powershell")return;if(e.words.length===1&&e.words[0]?.quoted&&e.words[0].provenance==="literal")return e.words[0].text;if(e.words[0]?.text.toLowerCase()==="write-output"&&e.words.length===2&&e.words[1]?.provenance==="literal")return e.words[1].text;return}function gr(e){return e==="&&"||e==="||"}function yd(e,t,n,r,o,i){let s={success:aa([...n,...e]),failure:aa([...r,...t])},a=gr(i)?s:void 0;return{states:gr(o)||a?aa([...s.success,...s.failure]):s.success,conditionalStates:a}}function dx(e,t,n=e.flattenNested){return{currentSegmentIndex:t,flattenNested:n,allocateSegment:e.allocateSegment,getNextSegmentIndex:e.getNextSegmentIndex,recordGlobal:e.recordGlobal,recordSegment:(r,o=t)=>e.recordSegment(r,o)}}function Vz(e,t,n,r,o){let i=e.nested.map((s)=>({program:s,depth:t}));if(e.dialect==="powershell"){let s=Kz(e);if(s){if(t+1>=ts)return bd(s,n,o);let a=et(s,"powershell");if(a.status==="limited")return bd(s,n,o);if(a.status!=="complete")return ix(i,n,r,o);Je(n.derivedCommandWorkBudget,ua(a)),i.push({program:a,depth:t+1})}}return ix(i,n,r,o)}function qz(e){let t=e.words[0];return t?.provenance==="variable"&&e.words.at(-1)?.text==="="?t.text.toLowerCase():void 0}function ix(e,t,n,r){let o=[...r];for(let i of e){let s=[];for(let a of o){let c=ca(i.program,i.depth,t,n,[$o(a)]);if(c.result)return c;s.push(...c.states)}o=aa(s)}return{result:null,states:o}}function Kz(e){let t=e.words[0]?.provenance==="literal"&&!e.words[0].quoted&&e.words[0].raw===e.words[0].text&&(e.words[0].text==="&"||e.words[0].text==="."),n=t?1:0,r=e.words[n];if(r?.provenance!=="literal"||!t&&(r.quoted||r.raw!==r.text)||!["iex","invoke-expression"].includes(r.text.toLowerCase()))return;let o=e.words.slice(n+1),i=o[0]&&!o[0].quoted&&o[0].raw===o[0].text&&["-c","-command"].includes(o[0].text.toLowerCase())?1:0,s=o[i];return o.length===i+1&&s?.quoted&&s.provenance==="literal"?s.text:void 0}function ua(e){return e.nodes.reduce((t,n)=>t+(n.kind==="command"?n.words.length+n.nested.reduce((r,o)=>r+ua(o),0):n.kind==="group"||n.kind==="function"?ua(n.body):0),0)}function bd(e,t,n){return t.trace?.recordSegment({type:"error",message:It}),{result:{reason:It,segment:e,intent:"stop_and_explain"},states:[...n]}}function Yz(e,t,n,r,o,i,s){let a=rN(e);if(a&&n.strict)return n.trace?.recordSegment({type:"error",message:a}),{reason:a,segment:e.source,intent:"stop_and_explain"};mx(e,o,"before-consumer",n.environment.paths);let c=Yn(e.dialect,e.words).map(N),l=e.displayText,u=nx(c,o.shellGitContextState);if(e.dialect==="powershell"){let m=O(_v(e,i,dN(n,o.effectiveCwd)),n.policy);if(n.trace?.recordSegment({type:"rule-check",rule:"analyzer/powershell/remove-item.ts:analyzePowerShellCommandViewMatch",matched:!!m,reason:m?.reason}),m)return uN(l,m)}if(c.length===1&&c[0]?.includes(" ")&&!po(e.dialect,e.words)){let m=O(Dt(c[0],n.scanWork),n.policy),p=m!==null&&!n.strict&&Ly(e,n.rootProgram,n.scanWork);if(m&&!p)return n.trace?.recordSegment({type:"dangerous-text",token:c[0],matched:!0,reason:m.reason}),{reason:m.reason,segment:l,ruleId:m.id,intent:m.intent};n.trace?.recordSegment({type:"dangerous-text",token:c[0],matched:!1});let h=sx(e,a,o,u,s,n);if(h)return h;return pd(c,o.shellGitContextState),null}let d=Do(e.words,t,{...n,commandView:e,cwd:r,effectiveCwd:o.effectiveCwd,envAssignments:u,literalHeredocFiles:o.literalHeredocFiles,functionDefinitions:o.functionDefinitions,hasPipelineInput:i,literalShellInput:s,analyzeNested:(m,p)=>{let h=p&&Object.hasOwn(p,"effectiveCwd")?p.effectiveCwd:o.effectiveCwd,b=Sd(m,t+1,{...n,derivedCommandWorkBudget:n.derivedCommandWorkBudget,effectiveCwd:h,envAssignments:p?.envAssignments??u,literalHeredocFiles:o.literalHeredocFiles,functionDefinitions:p?.functionDefinitions,worktreeMode:p?.worktreeMode??n.worktreeMode,trace:n.trace?dx(n.trace,n.trace.currentSegmentIndex,!0):void 0});return b?{reason:b.reason,ruleId:b.ruleId,intent:b.intent}:null}});if(d)return{...d,segment:l};let f=sx(e,a,o,u,s,n);if(f)return f;return pd(c,o.shellGitContextState),null}function sx(e,t,n,r,o,i){let s=oN(e,t,n,r??new Map,i);if(s)return s;return mx(e,n,"after-consumer",i.environment.paths),n.literalHeredocFiles.clear(),Qz(e,t,n,i.environment.paths),aN(e,n,o,i.environment,i.trace),null}var Jz=new Set([">>","<>"]);function mx(e,t,n,r){for(let i of e.redirections){if(!(n==="before-consumer"?Xz(i):Jz.has(i.operator)))continue;ax(i.target,t,r)}if(n!=="before-consumer"||!Le(e.words[0],"tee"))return;let o=fx(e.words.slice(1));if(!o)return;for(let i of o.operands)ax(i,t,r)}function Xz(e){if(e.operator===">"||e.operator===">|")return!0;return e.operator===">&"&&e.fd===void 0&&e.target?.provenance==="literal"&&!/^(?:[0-9]+|-)$/.test(e.target.text)}function ax(e,t,n){let r=e?.provenance==="literal"?co(e.text,t.effectiveCwd,n):void 0;if(!r)return;t.literalHeredocFiles.delete(r)}function Qz(e,t,n,r){if(t)return;let o=e.redirections.find((i)=>i.operator==="<<"||i.operator==="<<-")?.heredoc;if(!o||!da(o))return;for(let i of eN(e)){let s=co(i.text,n.effectiveCwd,r);if(!s||!Uy(s))continue;if(!n.literalHeredocFiles.has(s)&&n.literalHeredocFiles.size>=By)throw new Ie;n.literalHeredocFiles.set(s,o.body)}}function eN(e){let t=nN(e.redirections)?.target,n=cx(t)?[t]:[];if(Le(e.words[0],"cat"))return tN(e.words)?n:[];if(!Le(e.words[0],"tee"))return[];let r=fx(e.words.slice(1));if(!r||r.append||r.hasUnsupportedOptions||!r.operands.every(cx))return[];return[...r.operands,...n]}function tN(e){let t=!1;for(let n of e.slice(1)){if(t||n.provenance!=="literal")return!1;if(n.text==="--"){t=!0;continue}if(!/^-u+$/.test(n.text))return!1}return!0}function nN(e){let t=e.findLast((n)=>(n.fd??([">",">|",">>",">&"].includes(n.operator)?1:0))===1);return t?.operator===">"||t?.operator===">|"?t:void 0}function fx(e){let t=[],n=!0,r=!1,o=!1;for(let i of e){if(i.provenance!=="literal")return;if(n&&Le(i,"--")){n=!1;continue}if(n&&!i.quoted&&i.raw===i.text&&/^-[^-]/.test(i.text)){r||=i.text.slice(1).includes("a"),o||=[...i.text.slice(1)].some((s)=>s!=="a"&&s!=="i");continue}if(n&&!i.quoted&&i.raw===i.text&&i.text.startsWith("--")){r||=i.text==="--append",o||=i.text!=="--append"&&i.text!=="--ignore-interrupts";continue}t.push(i)}return{operands:t,append:r,hasUnsupportedOptions:o}}function cx(e){if(!e||e.provenance!=="literal"||e.text.length===0)return!1;if(e.quoted||e.raw!==e.text)return!0;return!e.raw.startsWith("~")&&!/[{}]/.test(e.raw)}function Le(e,t){return e?.text===t&&e.raw===t&&e.provenance==="literal"&&!e.quoted}function da(e){return e.quotedDelimiter||!/[$`\\]/.test(e.body)}function rN(e){let t=e.redirections.filter((s)=>s.operator==="<<"||s.operator==="<<-");if(t.length===0)return;if(t.length!==1)return zn;let n=t[0];if(!n?.heredoc)return zn;if(!da(n.heredoc))return Gz;if(n.fd!==void 0&&n.fd!==0)return zn;if(e.redirections.some((s)=>s!==n&&["<","<<","<<-","<<<","<&","<>"].includes(s.operator)))return zn;let r=e.redirections.some((s)=>s!==n&&lx(s.target));if(Le(e.words[0],"cat"))return r?zn:void 0;if(Le(e.words[0],"tee"))return r||e.words.slice(1).some(lx)?zn:void 0;let o=e.words[0],i=e.words[1];if(Le(o,"git")&&(Le(i,"apply")||Le(i,"commit")))return;if(Le(o,"gh")&&(Le(i,"pr")||Le(i,"issue"))&&Le(e.words[2],"create"))return;return zn}function lx(e){return e?.parts.some((t)=>t.provenance==="command-substitution"&&t.raw.startsWith(">("))??!1}function oN(e,t,n,r,o){if(!t)return null;let i=e.redirections.filter((l)=>l.operator==="<<"||l.operator==="<<-"),s=i.flatMap((l)=>l.heredoc?[l.heredoc.body]:[]);if(sN(e,i,n,r,o))return null;let a=iN(e,i,o);if(a!==void 0)return a?{reason:a.reason,segment:e.displayText,ruleId:a.id,intent:a.intent}:null;let c=vd(s.length===i.length?s.join(`
-`):e.source,o);return c?{...c,segment:e.displayText}:null}function iN(e,t,n){let r=t.length===1?t[0]:void 0;if(!r?.heredoc||!da(r.heredoc)||r.fd!==void 0&&r.fd!==0)return;let o=e.words[0];if(o?.provenance!=="literal"||!Oe(o.text))return;if(!e.words.slice(1).every((l)=>l.provenance==="literal"&&l.text.startsWith("-")))return;let s=r.heredoc.body,a=ue(n.policy,"interpreter.one-liner-paranoid",!!n.paranoidInterpreters);if(n.trace?.recordSegment({type:"interpreter",interpreter:o.text,codeArg:s,paranoidBlocked:a}),a){let l=O(S("interpreter.one-liner-paranoid",tr),n.policy);if(l)return l}if(!nr(s,n.scanWork))return null;let c=O(S("interpreter.dangerous-command",vn),n.policy);if(!c)return null;return n.trace?.recordSegment({type:"dangerous-text",token:s,matched:!0,reason:c.reason}),c}function sN(e,t,n,r,o){let i=t.length===1?t[0]:void 0;if(!i?.heredoc||!da(i.heredoc)||i.fd!==void 0&&i.fd!==0)return!1;let s=Sn(e.words,o.environment,n.effectiveCwd,r),a=s.words.map(N),c=H(a[0]??"");if((s.envSplitValues?.length??0)>0||!de.has(c)&&!de.has(G(c)))return!1;return Ve(a)}function aN(e,t,n,r,o){let i=qS(e,t.effectiveCwd,r,n);if(i===null)o?.recordSegment({type:"cwd-change",segment:e.words.map(N).join(" "),effectiveCwdNowUnknown:!0});if(i!==void 0)t.effectiveCwd=i}function $o(e){return{effectiveCwd:e.effectiveCwd,shellGitContextState:tx(e.shellGitContextState),literalHeredocFiles:new Map(e.literalHeredocFiles),functionDefinitions:new Map(e.functionDefinitions)}}function aa(e){let t=[];for(let n of e){if(!t.some((r)=>cN(r,n)))t.push(n);if(t.length>Zz)throw new Ie}return t}function cN(e,t){return e.effectiveCwd===t.effectiveCwd&&Mo(e.literalHeredocFiles,t.literalHeredocFiles)&&Mo(e.functionDefinitions,t.functionDefinitions)&&Mo(e.shellGitContextState.effectiveEnvAssignments,t.shellGitContextState.effectiveEnvAssignments)&&Mo(e.shellGitContextState.shellAssignments,t.shellGitContextState.shellAssignments)}function Mo(e,t){if(e===t)return!0;if(!e||!t||e.size!==t.size)return!1;return[...e].every(([n,r])=>t.get(n)===r&&t.has(n))}function lN(e,t){let n=ks(e);return n===void 0?void 0:t.get(n)}function uN(e,t){if(!t)return null;return{reason:t.reason,segment:e,ruleId:t.id,intent:t.intent}}function dN(e,t=e.effectiveCwd){let n=t===null;return{environment:e.environment,cwd:n?void 0:t??e.cwd,originalCwd:n?void 0:e.cwd,strict:e.strict,paranoid:e.paranoidRm,allowTmpdirVar:e.allowTmpdirVar,protectedGitMetadata:e.protectedGitMetadata,policy:e.policy}}function vd(e,t){let n=O(Dt(e,t.scanWork),t.policy),r=t.trace?.currentSegmentIndex??t.trace?.allocateSegment(),o={type:"dangerous-text",token:e,matched:!!n,reason:n?.reason};if(t.trace?.recordSegment(o,r),!n&&/^(?:cd|pushd)\s/.test(e))t.trace?.recordSegment({type:"cwd-change",segment:e,effectiveCwdNowUnknown:!0},r);return n?{reason:n.reason,segment:e,ruleId:n.id,intent:n.intent}:null}function ux(e,t){let n={type:"strict-unparseable",rawCommand:e,reason:Kt};if(t.trace?.currentSegmentIndex===void 0)t.trace?.recordGlobal(n);else t.trace.recordSegment(n)}var me={level:{name:"CC_SAFETY_NET_LEVEL"},strict:{name:"CC_SAFETY_NET_STRICT",legacyName:"SAFETY_NET_STRICT"},paranoid:{name:"CC_SAFETY_NET_PARANOID",legacyName:"SAFETY_NET_PARANOID"},paranoidRm:{name:"CC_SAFETY_NET_PARANOID_RM",legacyName:"SAFETY_NET_PARANOID_RM"},paranoidInterpreters:{name:"CC_SAFETY_NET_PARANOID_INTERPRETERS",legacyName:"SAFETY_NET_PARANOID_INTERPRETERS"},worktree:{name:"CC_SAFETY_NET_WORKTREE",legacyName:"SAFETY_NET_WORKTREE"},debug:{name:"CC_SAFETY_NET_DEBUG"},auditScope:{name:"CC_SAFETY_NET_AUDIT_SCOPE"}},ma=["standard","strict","paranoid"];function mN(e){return{failClosed:e==="strict"||e==="paranoid",paranoidRm:e==="paranoid",paranoidInterpreters:e==="paranoid"}}function fN(e,t){if(!t)return e;return ma.indexOf(t)>ma.indexOf(e)?t:e}function pN(){let e=Rd(me.level);if(e===void 0||e==="")return;if(ma.includes(e))return e;console.error(`CC Safety Net: ignored invalid ${me.level.name}=${JSON.stringify(e.slice(0,40))}. Use ${ma.join(", ")}.`);return}function gN(e){if(e===void 0||e==="all")return"all";if(e==="blocked")return"blocked";return"invalid"}function _d(){return gN(Rd(me.auditScope))==="all"}function Cd(e){if(e.failClosed&&e.paranoidRm&&e.paranoidInterpreters)return"paranoid";if(e.failClosed&&!e.paranoidRm&&!e.paranoidInterpreters)return"strict";if(!e.failClosed&&!e.paranoidRm&&!e.paranoidInterpreters)return"standard";return"custom"}function wd(e={}){let t=e.safety?.level??"standard",n=pN(),r=fN(t,n),o=mN(r),i={failClosed:r===t?"preset":"environment",paranoidRm:r===t?"preset":"environment",paranoidInterpreters:r===t?"preset":"environment"},s={failClosed:[`policy safety.level=${t}`],paranoidRm:[`policy safety.level=${t}`],paranoidInterpreters:[`policy safety.level=${t}`]};if(r!==t)s.failClosed.push(`env ${me.level.name}=${n}`),s.paranoidRm.push(`env ${me.level.name}=${n}`),s.paranoidInterpreters.push(`env ${me.level.name}=${n}`);if(e.safety?.overrides?.failClosed!==void 0)o.failClosed=e.safety.overrides.failClosed,i.failClosed="capability_override",s.failClosed.push("policy safety.overrides.fail_closed");if(e.safety?.overrides?.paranoidRm!==void 0)o.paranoidRm=e.safety.overrides.paranoidRm,i.paranoidRm="capability_override",s.paranoidRm.push("policy safety.overrides.paranoid_rm");if(e.safety?.overrides?.paranoidInterpreters!==void 0)o.paranoidInterpreters=e.safety.overrides.paranoidInterpreters,i.paranoidInterpreters="capability_override",s.paranoidInterpreters.push("policy safety.overrides.paranoid_interpreters");if(rn(me.strict))o.failClosed=!0,i.failClosed="environment",s.failClosed.push(`env ${me.strict.name}`);if(rn(me.paranoid))o.paranoidRm=!0,o.paranoidInterpreters=!0,i.paranoidRm="environment",i.paranoidInterpreters="environment",s.paranoidRm.push(`env ${me.paranoid.name}`),s.paranoidInterpreters.push(`env ${me.paranoid.name}`);if(rn(me.paranoidRm))o.paranoidRm=!0,i.paranoidRm="environment",s.paranoidRm.push(`env ${me.paranoidRm.name}`);if(rn(me.paranoidInterpreters))o.paranoidInterpreters=!0,i.paranoidInterpreters="environment",s.paranoidInterpreters.push(`env ${me.paranoidInterpreters.name}`);let a=!!e.worktreeMode||rn(me.worktree);return{strict:o.failClosed,paranoidRm:o.paranoidRm,paranoidInterpreters:o.paranoidInterpreters,worktreeMode:a,effectiveLevel:Cd(o),capabilities:{fail_closed:{enabled:o.failClosed,source:i.failClosed,sources:s.failClosed},paranoid_rm:{enabled:o.paranoidRm,source:i.paranoidRm,sources:s.paranoidRm},paranoid_interpreters:{enabled:o.paranoidInterpreters,source:i.paranoidInterpreters,sources:s.paranoidInterpreters}}}}function rn(e){let t=typeof e==="string"?xd(e):Rd(e);return t==="1"||t?.toLowerCase()==="true"}function xd(e){return Object.hasOwn(process.env,e)?process.env[e]:void 0}function Rd(e){let t=xd(e.name);if(t!==void 0)return t;if(e.legacyName)return xd(e.legacyName);return}function px(e){let t=e.effectiveCapabilities,n=e.strict??t.fail_closed.enabled,r=e.paranoidRm??t.paranoid_rm.enabled,o=e.paranoidInterpreters??t.paranoid_interpreters.enabled,i={fail_closed:Ed(t.fail_closed,e.strict,"strict"),paranoid_rm:Ed(t.paranoid_rm,e.paranoidRm,"paranoidRm"),paranoid_interpreters:Ed(t.paranoid_interpreters,e.paranoidInterpreters,"paranoidInterpreters")};return{policy:$y(e.policySnapshot.policy,i),effectiveCapabilities:i,effectiveLevel:Cd({failClosed:n,paranoidRm:r,paranoidInterpreters:o}),strict:n,paranoidRm:r,paranoidInterpreters:o,worktreeMode:e.worktreeMode??!1}}function Ed(e,t,n){if(t===void 0||t===e.enabled)return e;return{enabled:t,source:"capability_override",sources:[...e.sources,`analysis options.${n}`]}}function gx(e,t,n,r){let o=Sd(e,0,{...t,...px(t),factStore:r},n);if(!o)return null;return{kind:"deny",reason:o.reason,intent:o.intent??"manual_only",...o.ruleId?{ruleId:o.ruleId}:{},evidence:[{kind:"command",command:e,segment:o.segment}]}}import{basename as $$,dirname as Sh}from"path";function Lo(e,t,n,r,o){if(n.kind!=="command")return{toolName:e,input:t,route:n,context:r};return{toolName:e,input:t,route:n,context:r,command:o}}import{chmodSync as FU,existsSync as C$,mkdirSync as GU,readFileSync as w$}from"fs";import{dirname as R$,join as E$}from"path";import{createRequire as u$}from"module";var uh={};mn(uh,{$brand:()=>pa,$input:()=>ja,$output:()=>Ua,NEVER:()=>fa,TimePrecision:()=>mc,ZodAny:()=>wg,ZodArray:()=>kg,ZodBase64:()=>Kc,ZodBase64URL:()=>Yc,ZodBigInt:()=>qr,ZodBigIntFormat:()=>Qc,ZodBoolean:()=>Vr,ZodCIDRv4:()=>Vc,ZodCIDRv6:()=>qc,ZodCUID:()=>Fc,ZodCUID2:()=>Gc,ZodCatch:()=>Yg,ZodCodec:()=>al,ZodCustom:()=>vi,ZodCustomStringFormat:()=>jr,ZodDate:()=>pi,ZodDefault:()=>Ug,ZodDiscriminatedUnion:()=>Tg,ZodE164:()=>Jc,ZodEmail:()=>Mc,ZodEmoji:()=>Lc,ZodEnum:()=>Br,ZodError:()=>Kx,ZodExactOptional:()=>Gg,ZodFile:()=>Wg,ZodFirstPartyTypeKind:()=>cl,ZodFunction:()=>ih,ZodGUID:()=>li,ZodIPv4:()=>jc,ZodIPv6:()=>Hc,ZodISODate:()=>ii,ZodISODateTime:()=>oi,ZodISODuration:()=>ai,ZodISOTime:()=>si,ZodIntersection:()=>Ig,ZodIssueCode:()=>uC,ZodJWT:()=>Xc,ZodKSUID:()=>Uc,ZodLazy:()=>nh,ZodLiteral:()=>Lg,ZodMAC:()=>yg,ZodMap:()=>$g,ZodNaN:()=>Xg,ZodNanoID:()=>Wc,ZodNever:()=>Eg,ZodNonOptional:()=>il,ZodNull:()=>_g,ZodNullable:()=>Bg,ZodNumber:()=>Hr,ZodNumberFormat:()=>Zn,ZodObject:()=>hi,ZodOptional:()=>ol,ZodPipe:()=>sl,ZodPrefault:()=>Hg,ZodPromise:()=>oh,ZodReadonly:()=>Qg,ZodRealError:()=>_e,ZodRecord:()=>bi,ZodSet:()=>Mg,ZodString:()=>Ur,ZodStringFormat:()=>K,ZodSuccess:()=>Kg,ZodSymbol:()=>Sg,ZodTemplateLiteral:()=>th,ZodTransform:()=>Fg,ZodTuple:()=>zg,ZodType:()=>L,ZodULID:()=>Zc,ZodURL:()=>fi,ZodUUID:()=>Et,ZodUndefined:()=>xg,ZodUnion:()=>yi,ZodUnknown:()=>Rg,ZodVoid:()=>Pg,ZodXID:()=>Bc,ZodXor:()=>Ag,_ZodString:()=>$c,_default:()=>jg,_function:()=>tC,any:()=>z_,array:()=>gi,base64:()=>h_,base64url:()=>y_,bigint:()=>k_,boolean:()=>vg,catch:()=>Jg,check:()=>nC,cidrv4:()=>p_,cidrv6:()=>g_,clone:()=>he,codec:()=>X_,coerce:()=>ll,config:()=>se,core:()=>Rt,cuid:()=>s_,cuid2:()=>a_,custom:()=>rC,date:()=>D_,decode:()=>Pc,decodeAsync:()=>Ac,default:()=>i$,describe:()=>oC,discriminatedUnion:()=>G_,e164:()=>b_,email:()=>Yx,emoji:()=>o_,encode:()=>Ec,encodeAsync:()=>kc,endsWith:()=>Ir,enum:()=>nl,exactOptional:()=>Zg,file:()=>q_,flattenError:()=>vr,float32:()=>w_,float64:()=>R_,formatError:()=>Sr,fromJSONSchema:()=>lh,function:()=>tC,getErrorMap:()=>mC,globalRegistry:()=>Ae,gt:()=>Ct,gte:()=>xe,guid:()=>Jx,hash:()=>C_,hex:()=>__,hostname:()=>x_,httpUrl:()=>r_,includes:()=>Ar,instanceof:()=>sC,int:()=>Dc,int32:()=>E_,int64:()=>A_,intersection:()=>Og,ipv4:()=>d_,ipv6:()=>f_,iso:()=>ci,json:()=>cC,jwt:()=>v_,keyof:()=>$_,ksuid:()=>u_,lazy:()=>rh,length:()=>Fn,literal:()=>V_,locales:()=>Qo,looseObject:()=>W_,looseRecord:()=>B_,lowercase:()=>Pr,lt:()=>_t,lte:()=>Ge,mac:()=>m_,map:()=>U_,maxLength:()=>Wn,maxSize:()=>un,meta:()=>iC,mime:()=>Or,minLength:()=>Ft,minSize:()=>wt,multipleOf:()=>ln,nan:()=>J_,nanoid:()=>i_,nativeEnum:()=>H_,negative:()=>pc,never:()=>el,nonnegative:()=>hc,nonoptional:()=>qg,nonpositive:()=>gc,normalize:()=>zr,null:()=>Cg,nullable:()=>di,nullish:()=>K_,number:()=>bg,object:()=>M_,optional:()=>ui,overwrite:()=>at,parse:()=>_c,parseAsync:()=>Cc,partialRecord:()=>Z_,pipe:()=>mi,positive:()=>fc,prefault:()=>Vg,preprocess:()=>lC,prettifyError:()=>Sa,promise:()=>eC,property:()=>yc,readonly:()=>eh,record:()=>Dg,refine:()=>sh,regex:()=>Er,regexes:()=>Fe,registry:()=>ei,safeDecode:()=>Ic,safeDecodeAsync:()=>zc,safeEncode:()=>Tc,safeEncodeAsync:()=>Oc,safeParse:()=>wc,safeParseAsync:()=>Rc,set:()=>j_,setErrorMap:()=>dC,size:()=>Ln,slugify:()=>Mr,startsWith:()=>Tr,strictObject:()=>L_,string:()=>Nc,stringFormat:()=>S_,stringbool:()=>aC,success:()=>Y_,superRefine:()=>ah,symbol:()=>I_,templateLiteral:()=>Q_,toJSONSchema:()=>ri,toLowerCase:()=>Dr,toUpperCase:()=>$r,transform:()=>rl,treeifyError:()=>va,trim:()=>Nr,tuple:()=>Ng,uint32:()=>P_,uint64:()=>T_,ulid:()=>c_,undefined:()=>O_,union:()=>tl,unknown:()=>Gn,uppercase:()=>kr,url:()=>n_,util:()=>I,uuid:()=>Xx,uuidv4:()=>Qx,uuidv6:()=>e_,uuidv7:()=>t_,void:()=>N_,xid:()=>l_,xor:()=>F_,z:()=>ul});var ul={};mn(ul,{$brand:()=>pa,$input:()=>ja,$output:()=>Ua,NEVER:()=>fa,TimePrecision:()=>mc,ZodAny:()=>wg,ZodArray:()=>kg,ZodBase64:()=>Kc,ZodBase64URL:()=>Yc,ZodBigInt:()=>qr,ZodBigIntFormat:()=>Qc,ZodBoolean:()=>Vr,ZodCIDRv4:()=>Vc,ZodCIDRv6:()=>qc,ZodCUID:()=>Fc,ZodCUID2:()=>Gc,ZodCatch:()=>Yg,ZodCodec:()=>al,ZodCustom:()=>vi,ZodCustomStringFormat:()=>jr,ZodDate:()=>pi,ZodDefault:()=>Ug,ZodDiscriminatedUnion:()=>Tg,ZodE164:()=>Jc,ZodEmail:()=>Mc,ZodEmoji:()=>Lc,ZodEnum:()=>Br,ZodError:()=>Kx,ZodExactOptional:()=>Gg,ZodFile:()=>Wg,ZodFirstPartyTypeKind:()=>cl,ZodFunction:()=>ih,ZodGUID:()=>li,ZodIPv4:()=>jc,ZodIPv6:()=>Hc,ZodISODate:()=>ii,ZodISODateTime:()=>oi,ZodISODuration:()=>ai,ZodISOTime:()=>si,ZodIntersection:()=>Ig,ZodIssueCode:()=>uC,ZodJWT:()=>Xc,ZodKSUID:()=>Uc,ZodLazy:()=>nh,ZodLiteral:()=>Lg,ZodMAC:()=>yg,ZodMap:()=>$g,ZodNaN:()=>Xg,ZodNanoID:()=>Wc,ZodNever:()=>Eg,ZodNonOptional:()=>il,ZodNull:()=>_g,ZodNullable:()=>Bg,ZodNumber:()=>Hr,ZodNumberFormat:()=>Zn,ZodObject:()=>hi,ZodOptional:()=>ol,ZodPipe:()=>sl,ZodPrefault:()=>Hg,ZodPromise:()=>oh,ZodReadonly:()=>Qg,ZodRealError:()=>_e,ZodRecord:()=>bi,ZodSet:()=>Mg,ZodString:()=>Ur,ZodStringFormat:()=>K,ZodSuccess:()=>Kg,ZodSymbol:()=>Sg,ZodTemplateLiteral:()=>th,ZodTransform:()=>Fg,ZodTuple:()=>zg,ZodType:()=>L,ZodULID:()=>Zc,ZodURL:()=>fi,ZodUUID:()=>Et,ZodUndefined:()=>xg,ZodUnion:()=>yi,ZodUnknown:()=>Rg,ZodVoid:()=>Pg,ZodXID:()=>Bc,ZodXor:()=>Ag,_ZodString:()=>$c,_default:()=>jg,_function:()=>tC,any:()=>z_,array:()=>gi,base64:()=>h_,base64url:()=>y_,bigint:()=>k_,boolean:()=>vg,catch:()=>Jg,check:()=>nC,cidrv4:()=>p_,cidrv6:()=>g_,clone:()=>he,codec:()=>X_,coerce:()=>ll,config:()=>se,core:()=>Rt,cuid:()=>s_,cuid2:()=>a_,custom:()=>rC,date:()=>D_,decode:()=>Pc,decodeAsync:()=>Ac,describe:()=>oC,discriminatedUnion:()=>G_,e164:()=>b_,email:()=>Yx,emoji:()=>o_,encode:()=>Ec,encodeAsync:()=>kc,endsWith:()=>Ir,enum:()=>nl,exactOptional:()=>Zg,file:()=>q_,flattenError:()=>vr,float32:()=>w_,float64:()=>R_,formatError:()=>Sr,fromJSONSchema:()=>lh,function:()=>tC,getErrorMap:()=>mC,globalRegistry:()=>Ae,gt:()=>Ct,gte:()=>xe,guid:()=>Jx,hash:()=>C_,hex:()=>__,hostname:()=>x_,httpUrl:()=>r_,includes:()=>Ar,instanceof:()=>sC,int:()=>Dc,int32:()=>E_,int64:()=>A_,intersection:()=>Og,ipv4:()=>d_,ipv6:()=>f_,iso:()=>ci,json:()=>cC,jwt:()=>v_,keyof:()=>$_,ksuid:()=>u_,lazy:()=>rh,length:()=>Fn,literal:()=>V_,locales:()=>Qo,looseObject:()=>W_,looseRecord:()=>B_,lowercase:()=>Pr,lt:()=>_t,lte:()=>Ge,mac:()=>m_,map:()=>U_,maxLength:()=>Wn,maxSize:()=>un,meta:()=>iC,mime:()=>Or,minLength:()=>Ft,minSize:()=>wt,multipleOf:()=>ln,nan:()=>J_,nanoid:()=>i_,nativeEnum:()=>H_,negative:()=>pc,never:()=>el,nonnegative:()=>hc,nonoptional:()=>qg,nonpositive:()=>gc,normalize:()=>zr,null:()=>Cg,nullable:()=>di,nullish:()=>K_,number:()=>bg,object:()=>M_,optional:()=>ui,overwrite:()=>at,parse:()=>_c,parseAsync:()=>Cc,partialRecord:()=>Z_,pipe:()=>mi,positive:()=>fc,prefault:()=>Vg,preprocess:()=>lC,prettifyError:()=>Sa,promise:()=>eC,property:()=>yc,readonly:()=>eh,record:()=>Dg,refine:()=>sh,regex:()=>Er,regexes:()=>Fe,registry:()=>ei,safeDecode:()=>Ic,safeDecodeAsync:()=>zc,safeEncode:()=>Tc,safeEncodeAsync:()=>Oc,safeParse:()=>wc,safeParseAsync:()=>Rc,set:()=>j_,setErrorMap:()=>dC,size:()=>Ln,slugify:()=>Mr,startsWith:()=>Tr,strictObject:()=>L_,string:()=>Nc,stringFormat:()=>S_,stringbool:()=>aC,success:()=>Y_,superRefine:()=>ah,symbol:()=>I_,templateLiteral:()=>Q_,toJSONSchema:()=>ri,toLowerCase:()=>Dr,toUpperCase:()=>$r,transform:()=>rl,treeifyError:()=>va,trim:()=>Nr,tuple:()=>Ng,uint32:()=>P_,uint64:()=>T_,ulid:()=>c_,undefined:()=>O_,union:()=>tl,unknown:()=>Gn,uppercase:()=>kr,url:()=>n_,util:()=>I,uuid:()=>Xx,uuidv4:()=>Qx,uuidv6:()=>e_,uuidv7:()=>t_,void:()=>N_,xid:()=>l_,xor:()=>F_});var Rt={};mn(Rt,{$ZodAny:()=>df,$ZodArray:()=>hf,$ZodAsyncError:()=>xt,$ZodBase64:()=>ef,$ZodBase64URL:()=>tf,$ZodBigInt:()=>Ga,$ZodBigIntFormat:()=>af,$ZodBoolean:()=>Yo,$ZodCIDRv4:()=>Jm,$ZodCIDRv6:()=>Xm,$ZodCUID:()=>Wm,$ZodCUID2:()=>Fm,$ZodCatch:()=>Nf,$ZodCheck:()=>J,$ZodCheckBigIntFormat:()=>gm,$ZodCheckEndsWith:()=>Pm,$ZodCheckGreaterThan:()=>za,$ZodCheckIncludes:()=>Rm,$ZodCheckLengthEquals:()=>xm,$ZodCheckLessThan:()=>Oa,$ZodCheckLowerCase:()=>Cm,$ZodCheckMaxLength:()=>vm,$ZodCheckMaxSize:()=>hm,$ZodCheckMimeType:()=>Am,$ZodCheckMinLength:()=>Sm,$ZodCheckMinSize:()=>ym,$ZodCheckMultipleOf:()=>fm,$ZodCheckNumberFormat:()=>pm,$ZodCheckOverwrite:()=>Tm,$ZodCheckProperty:()=>km,$ZodCheckRegex:()=>_m,$ZodCheckSizeEquals:()=>bm,$ZodCheckStartsWith:()=>Em,$ZodCheckStringFormat:()=>Rr,$ZodCheckUpperCase:()=>wm,$ZodCodec:()=>Xo,$ZodCustom:()=>Zf,$ZodCustomStringFormat:()=>of,$ZodDate:()=>gf,$ZodDefault:()=>Tf,$ZodDiscriminatedUnion:()=>vf,$ZodE164:()=>nf,$ZodEmail:()=>Dm,$ZodEmoji:()=>Mm,$ZodEncodeError:()=>Nn,$ZodEnum:()=>wf,$ZodError:()=>Ho,$ZodExactOptional:()=>kf,$ZodFile:()=>Ef,$ZodFunction:()=>Wf,$ZodGUID:()=>zm,$ZodIPv4:()=>qm,$ZodIPv6:()=>Km,$ZodISODate:()=>jm,$ZodISODateTime:()=>Um,$ZodISODuration:()=>Vm,$ZodISOTime:()=>Hm,$ZodIntersection:()=>Sf,$ZodJWT:()=>rf,$ZodKSUID:()=>Bm,$ZodLazy:()=>Gf,$ZodLiteral:()=>Rf,$ZodMAC:()=>Ym,$ZodMap:()=>_f,$ZodNaN:()=>Df,$ZodNanoID:()=>Lm,$ZodNever:()=>ff,$ZodNonOptional:()=>Of,$ZodNull:()=>uf,$ZodNullable:()=>Af,$ZodNumber:()=>Fa,$ZodNumberFormat:()=>sf,$ZodObject:()=>Bx,$ZodObjectJIT:()=>yf,$ZodOptional:()=>Ba,$ZodPipe:()=>$f,$ZodPrefault:()=>If,$ZodPromise:()=>Ff,$ZodReadonly:()=>Mf,$ZodRealError:()=>ke,$ZodRecord:()=>xf,$ZodRegistry:()=>Bf,$ZodSet:()=>Cf,$ZodString:()=>Mn,$ZodStringFormat:()=>q,$ZodSuccess:()=>zf,$ZodSymbol:()=>cf,$ZodTemplateLiteral:()=>Lf,$ZodTransform:()=>Pf,$ZodTuple:()=>Za,$ZodType:()=>D,$ZodULID:()=>Gm,$ZodURL:()=>$m,$ZodUUID:()=>Nm,$ZodUndefined:()=>lf,$ZodUnion:()=>Jo,$ZodUnknown:()=>mf,$ZodVoid:()=>pf,$ZodXID:()=>Zm,$ZodXor:()=>bf,$brand:()=>pa,$constructor:()=>g,$input:()=>ja,$output:()=>Ua,Doc:()=>Na,JSONSchema:()=>Hx,JSONSchemaGenerator:()=>mg,NEVER:()=>fa,TimePrecision:()=>mc,_any:()=>fp,_array:()=>Sp,_base64:()=>cc,_base64url:()=>lc,_bigint:()=>sp,_boolean:()=>op,_catch:()=>BD,_check:()=>jx,_cidrv4:()=>sc,_cidrv6:()=>ac,_coercedBigint:()=>ap,_coercedBoolean:()=>ip,_coercedDate:()=>bp,_coercedNumber:()=>Xf,_coercedString:()=>jf,_cuid:()=>Qa,_cuid2:()=>ec,_custom:()=>_p,_date:()=>yp,_decode:()=>wa,_decodeAsync:()=>Ea,_default:()=>FD,_discriminatedUnion:()=>kD,_e164:()=>uc,_email:()=>Ha,_emoji:()=>Ja,_encode:()=>Ca,_encodeAsync:()=>Ra,_endsWith:()=>Ir,_enum:()=>ND,_file:()=>xp,_float32:()=>ep,_float64:()=>tp,_gt:()=>Ct,_gte:()=>xe,_guid:()=>ti,_includes:()=>Ar,_int:()=>Qf,_int32:()=>np,_int64:()=>cp,_intersection:()=>AD,_ipv4:()=>oc,_ipv6:()=>ic,_isoDate:()=>qf,_isoDateTime:()=>Vf,_isoDuration:()=>Yf,_isoTime:()=>Kf,_jwt:()=>dc,_ksuid:()=>rc,_lazy:()=>VD,_length:()=>Fn,_literal:()=>$D,_lowercase:()=>Pr,_lt:()=>_t,_lte:()=>Ge,_mac:()=>Hf,_map:()=>OD,_max:()=>Ge,_maxLength:()=>Wn,_maxSize:()=>un,_mime:()=>Or,_min:()=>xe,_minLength:()=>Ft,_minSize:()=>wt,_multipleOf:()=>ln,_nan:()=>vp,_nanoid:()=>Xa,_nativeEnum:()=>DD,_negative:()=>pc,_never:()=>gp,_nonnegative:()=>hc,_nonoptional:()=>GD,_nonpositive:()=>gc,_normalize:()=>zr,_null:()=>mp,_nullable:()=>WD,_number:()=>Jf,_optional:()=>LD,_overwrite:()=>at,_parse:()=>xr,_parseAsync:()=>_r,_pipe:()=>UD,_positive:()=>fc,_promise:()=>qD,_property:()=>yc,_readonly:()=>jD,_record:()=>ID,_refine:()=>Cp,_regex:()=>Er,_safeDecode:()=>ka,_safeDecodeAsync:()=>Ta,_safeEncode:()=>Pa,_safeEncodeAsync:()=>Aa,_safeParse:()=>Cr,_safeParseAsync:()=>wr,_set:()=>zD,_size:()=>Ln,_slugify:()=>Mr,_startsWith:()=>Tr,_string:()=>Uf,_stringFormat:()=>Lr,_stringbool:()=>Pp,_success:()=>ZD,_superRefine:()=>wp,_symbol:()=>up,_templateLiteral:()=>HD,_toLowerCase:()=>Dr,_toUpperCase:()=>$r,_transform:()=>MD,_trim:()=>Nr,_tuple:()=>TD,_uint32:()=>rp,_uint64:()=>lp,_ulid:()=>tc,_undefined:()=>dp,_union:()=>ED,_unknown:()=>pp,_uppercase:()=>kr,_url:()=>ni,_uuid:()=>Va,_uuidv4:()=>qa,_uuidv6:()=>Ka,_uuidv7:()=>Ya,_void:()=>hp,_xid:()=>nc,_xor:()=>PD,clone:()=>he,config:()=>se,createStandardJSONSchemaMethod:()=>bc,createToJSONSchemaMethod:()=>kp,decode:()=>UN,decodeAsync:()=>HN,describe:()=>Rp,encode:()=>BN,encodeAsync:()=>jN,extractDefs:()=>Gr,finalize:()=>Zr,flattenError:()=>vr,formatError:()=>Sr,globalConfig:()=>Wo,globalRegistry:()=>Ae,initializeContext:()=>Fr,isValidBase64:()=>Qm,isValidBase64URL:()=>Wx,isValidJWT:()=>Fx,locales:()=>Qo,meta:()=>Ep,parse:()=>xa,parseAsync:()=>_a,prettifyError:()=>Sa,process:()=>X,regexes:()=>Fe,registry:()=>ei,safeDecode:()=>qN,safeDecodeAsync:()=>YN,safeEncode:()=>VN,safeEncodeAsync:()=>KN,safeParse:()=>Md,safeParseAsync:()=>Ld,toDotPath:()=>xx,toJSONSchema:()=>ri,treeifyError:()=>va,util:()=>I,version:()=>Im});var fa=Object.freeze({status:"aborted"});function g(e,t,n){function r(a,c){if(!a._zod)Object.defineProperty(a,"_zod",{value:{def:c,constr:s,traits:new Set},enumerable:!1});if(a._zod.traits.has(e))return;a._zod.traits.add(e),t(a,c);let l=s.prototype,u=Object.keys(l);for(let d=0;d<u.length;d++){let f=u[d];if(!(f in a))a[f]=l[f].bind(a)}}let o=n?.Parent??Object;class i extends o{}Object.defineProperty(i,"name",{value:e});function s(a){var c;let l=n?.Parent?new i:this;r(l,a),(c=l._zod).deferred??(c.deferred=[]);for(let u of l._zod.deferred)u();return l}return Object.defineProperty(s,"init",{value:r}),Object.defineProperty(s,Symbol.hasInstance,{value:(a)=>{if(n?.Parent&&a instanceof n.Parent)return!0;return a?._zod?.traits?.has(e)}}),Object.defineProperty(s,"name",{value:e}),s}var pa=Symbol("zod_brand");class xt extends Error{constructor(){super("Encountered Promise during synchronous parse. Use .parseAsync() instead.")}}class Nn extends Error{constructor(e){super(`Encountered unidirectional transform during encode: ${e}`);this.name="ZodEncodeError"}}var Wo={};function se(e){if(e)Object.assign(Wo,e);return Wo}var I={};mn(I,{BIGINT_FORMAT_RANGES:()=>Dd,Class:()=>vx,NUMBER_FORMAT_RANGES:()=>Nd,aborted:()=>cn,allowsEval:()=>Td,assert:()=>xN,assertEqual:()=>yN,assertIs:()=>vN,assertNever:()=>SN,assertNotEqual:()=>bN,assignProp:()=>sn,base64ToUint8Array:()=>yx,base64urlToUint8Array:()=>LN,cached:()=>yr,captureStackTrace:()=>ya,cleanEnum:()=>MN,cleanRegex:()=>Zo,clone:()=>he,cloneDef:()=>CN,createTransparentProxy:()=>AN,defineLazy:()=>F,esc:()=>ha,escapeRegex:()=>Ke,extend:()=>ON,finalizeIssue:()=>Pe,floatSafeRemainder:()=>kd,getElementAtPath:()=>wN,getEnumValues:()=>Go,getLengthableOrigin:()=>jo,getParsedType:()=>kN,getSizableOrigin:()=>Uo,hexToUint8Array:()=>FN,isObject:()=>Dn,isPlainObject:()=>an,issue:()=>br,joinValues:()=>ga,jsonStringifyReplacer:()=>hr,merge:()=>NN,mergeDefs:()=>Wt,normalizeParams:()=>x,nullish:()=>on,numKeys:()=>PN,objectClone:()=>_N,omit:()=>IN,optionalKeys:()=>zd,parsedType:()=>$d,partial:()=>DN,pick:()=>TN,prefixIssues:()=>We,primitiveTypes:()=>Od,promiseAllObject:()=>RN,propertyKeyTypes:()=>Bo,randomString:()=>EN,required:()=>$N,safeExtend:()=>zN,shallowClone:()=>Id,slugify:()=>Ad,stringifyPrimitive:()=>ba,uint8ArrayToBase64:()=>bx,uint8ArrayToBase64url:()=>WN,uint8ArrayToHex:()=>GN,unwrapMessage:()=>Fo});function yN(e){return e}function bN(e){return e}function vN(e){}function SN(e){throw Error("Unexpected value in exhaustive check")}function xN(e){}function Go(e){let t=Object.values(e).filter((r)=>typeof r==="number");return Object.entries(e).filter(([r,o])=>t.indexOf(+r)===-1).map(([r,o])=>o)}function ga(e,t="|"){return e.map((n)=>ba(n)).join(t)}function hr(e,t){if(typeof t==="bigint")return t.toString();return t}function yr(e){return{get value(){{let n=e();return Object.defineProperty(this,"value",{value:n}),n}throw Error("cached value already set")}}}function on(e){return e===null||e===void 0}function Zo(e){let t=e.startsWith("^")?1:0,n=e.endsWith("$")?e.length-1:e.length;return e.slice(t,n)}function kd(e,t){let n=(e.toString().split(".")[1]||"").length,r=t.toString(),o=(r.split(".")[1]||"").length;if(o===0&&/\d?e-\d?/.test(r)){let c=r.match(/\d?e-(\d?)/);if(c?.[1])o=Number.parseInt(c[1])}let i=n>o?n:o,s=Number.parseInt(e.toFixed(i).replace(".","")),a=Number.parseInt(t.toFixed(i).replace(".",""));return s%a/10**i}var hx=Symbol("evaluating");function F(e,t,n){let r=void 0;Object.defineProperty(e,t,{get(){if(r===hx)return;if(r===void 0)r=hx,r=n();return r},set(o){Object.defineProperty(e,t,{value:o})},configurable:!0})}function _N(e){return Object.create(Object.getPrototypeOf(e),Object.getOwnPropertyDescriptors(e))}function sn(e,t,n){Object.defineProperty(e,t,{value:n,writable:!0,enumerable:!0,configurable:!0})}function Wt(...e){let t={};for(let n of e){let r=Object.getOwnPropertyDescriptors(n);Object.assign(t,r)}return Object.defineProperties({},t)}function CN(e){return Wt(e._zod.def)}function wN(e,t){if(!t)return e;return t.reduce((n,r)=>n?.[r],e)}function RN(e){let t=Object.keys(e),n=t.map((r)=>e[r]);return Promise.all(n).then((r)=>{let o={};for(let i=0;i<t.length;i++)o[t[i]]=r[i];return o})}function EN(e=10){let n="";for(let r=0;r<e;r++)n+="abcdefghijklmnopqrstuvwxyz"[Math.floor(Math.random()*26)];return n}function ha(e){return JSON.stringify(e)}function Ad(e){return e.toLowerCase().trim().replace(/[^\w\s-]/g,"").replace(/[\s_-]+/g,"-").replace(/^-+|-+$/g,"")}var ya="captureStackTrace"in Error?Error.captureStackTrace:(...e)=>{};function Dn(e){return typeof e==="object"&&e!==null&&!Array.isArray(e)}var Td=yr(()=>{if(typeof navigator<"u"&&navigator?.userAgent?.includes("Cloudflare"))return!1;try{return new Function(""),!0}catch(e){return!1}});function an(e){if(Dn(e)===!1)return!1;let t=e.constructor;if(t===void 0)return!0;if(typeof t!=="function")return!0;let n=t.prototype;if(Dn(n)===!1)return!1;if(Object.prototype.hasOwnProperty.call(n,"isPrototypeOf")===!1)return!1;return!0}function Id(e){if(an(e))return{...e};if(Array.isArray(e))return[...e];return e}function PN(e){let t=0;for(let n in e)if(Object.prototype.hasOwnProperty.call(e,n))t++;return t}var kN=(e)=>{let t=typeof e;switch(t){case"undefined":return"undefined";case"string":return"string";case"number":return Number.isNaN(e)?"nan":"number";case"boolean":return"boolean";case"function":return"function";case"bigint":return"bigint";case"symbol":return"symbol";case"object":if(Array.isArray(e))return"array";if(e===null)return"null";if(e.then&&typeof e.then==="function"&&e.catch&&typeof e.catch==="function")return"promise";if(typeof Map<"u"&&e instanceof Map)return"map";if(typeof Set<"u"&&e instanceof Set)return"set";if(typeof Date<"u"&&e instanceof Date)return"date";if(typeof File<"u"&&e instanceof File)return"file";return"object";default:throw Error(`Unknown data type: ${t}`)}},Bo=new Set(["string","number","symbol"]),Od=new Set(["string","number","bigint","boolean","symbol","undefined"]);function Ke(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function he(e,t,n){let r=new e._zod.constr(t??e._zod.def);if(!t||n?.parent)r._zod.parent=e;return r}function x(e){let t=e;if(!t)return{};if(typeof t==="string")return{error:()=>t};if(t?.message!==void 0){if(t?.error!==void 0)throw Error("Cannot specify both `message` and `error` params");t.error=t.message}if(delete t.message,typeof t.error==="string")return{...t,error:()=>t.error};return t}function AN(e){let t;return new Proxy({},{get(n,r,o){return t??(t=e()),Reflect.get(t,r,o)},set(n,r,o,i){return t??(t=e()),Reflect.set(t,r,o,i)},has(n,r){return t??(t=e()),Reflect.has(t,r)},deleteProperty(n,r){return t??(t=e()),Reflect.deleteProperty(t,r)},ownKeys(n){return t??(t=e()),Reflect.ownKeys(t)},getOwnPropertyDescriptor(n,r){return t??(t=e()),Reflect.getOwnPropertyDescriptor(t,r)},defineProperty(n,r,o){return t??(t=e()),Reflect.defineProperty(t,r,o)}})}function ba(e){if(typeof e==="bigint")return e.toString()+"n";if(typeof e==="string")return`"${e}"`;return`${e}`}function zd(e){return Object.keys(e).filter((t)=>e[t]._zod.optin==="optional"&&e[t]._zod.optout==="optional")}var Nd={safeint:[Number.MIN_SAFE_INTEGER,Number.MAX_SAFE_INTEGER],int32:[-2147483648,2147483647],uint32:[0,4294967295],float32:[-340282346638528860000000000000000000000,340282346638528860000000000000000000000],float64:[-Number.MAX_VALUE,Number.MAX_VALUE]},Dd={int64:[BigInt("-9223372036854775808"),BigInt("9223372036854775807")],uint64:[BigInt(0),BigInt("18446744073709551615")]};function TN(e,t){let n=e._zod.def,r=n.checks;if(r&&r.length>0)throw Error(".pick() cannot be used on object schemas containing refinements");let i=Wt(e._zod.def,{get shape(){let s={};for(let a in t){if(!(a in n.shape))throw Error(`Unrecognized key: "${a}"`);if(!t[a])continue;s[a]=n.shape[a]}return sn(this,"shape",s),s},checks:[]});return he(e,i)}function IN(e,t){let n=e._zod.def,r=n.checks;if(r&&r.length>0)throw Error(".omit() cannot be used on object schemas containing refinements");let i=Wt(e._zod.def,{get shape(){let s={...e._zod.def.shape};for(let a in t){if(!(a in n.shape))throw Error(`Unrecognized key: "${a}"`);if(!t[a])continue;delete s[a]}return sn(this,"shape",s),s},checks:[]});return he(e,i)}function ON(e,t){if(!an(t))throw Error("Invalid input to extend: expected a plain object");let n=e._zod.def.checks;if(n&&n.length>0){let i=e._zod.def.shape;for(let s in t)if(Object.getOwnPropertyDescriptor(i,s)!==void 0)throw Error("Cannot overwrite keys on object schemas containing refinements. Use `.safeExtend()` instead.")}let o=Wt(e._zod.def,{get shape(){let i={...e._zod.def.shape,...t};return sn(this,"shape",i),i}});return he(e,o)}function zN(e,t){if(!an(t))throw Error("Invalid input to safeExtend: expected a plain object");let n=Wt(e._zod.def,{get shape(){let r={...e._zod.def.shape,...t};return sn(this,"shape",r),r}});return he(e,n)}function NN(e,t){let n=Wt(e._zod.def,{get shape(){let r={...e._zod.def.shape,...t._zod.def.shape};return sn(this,"shape",r),r},get catchall(){return t._zod.def.catchall},checks:[]});return he(e,n)}function DN(e,t,n){let o=t._zod.def.checks;if(o&&o.length>0)throw Error(".partial() cannot be used on object schemas containing refinements");let s=Wt(t._zod.def,{get shape(){let a=t._zod.def.shape,c={...a};if(n)for(let l in n){if(!(l in a))throw Error(`Unrecognized key: "${l}"`);if(!n[l])continue;c[l]=e?new e({type:"optional",innerType:a[l]}):a[l]}else for(let l in a)c[l]=e?new e({type:"optional",innerType:a[l]}):a[l];return sn(this,"shape",c),c},checks:[]});return he(t,s)}function $N(e,t,n){let r=Wt(t._zod.def,{get shape(){let o=t._zod.def.shape,i={...o};if(n)for(let s in n){if(!(s in i))throw Error(`Unrecognized key: "${s}"`);if(!n[s])continue;i[s]=new e({type:"nonoptional",innerType:o[s]})}else for(let s in o)i[s]=new e({type:"nonoptional",innerType:o[s]});return sn(this,"shape",i),i}});return he(t,r)}function cn(e,t=0){if(e.aborted===!0)return!0;for(let n=t;n<e.issues.length;n++)if(e.issues[n]?.continue!==!0)return!0;return!1}function We(e,t){return t.map((n)=>{var r;return(r=n).path??(r.path=[]),n.path.unshift(e),n})}function Fo(e){return typeof e==="string"?e:e?.message}function Pe(e,t,n){let r={...e,path:e.path??[]};if(!e.message){let o=Fo(e.inst?._zod.def?.error?.(e))??Fo(t?.error?.(e))??Fo(n.customError?.(e))??Fo(n.localeError?.(e))??"Invalid input";r.message=o}if(delete r.inst,delete r.continue,!t?.reportInput)delete r.input;return r}function Uo(e){if(e instanceof Set)return"set";if(e instanceof Map)return"map";if(e instanceof File)return"file";return"unknown"}function jo(e){if(Array.isArray(e))return"array";if(typeof e==="string")return"string";return"unknown"}function $d(e){let t=typeof e;switch(t){case"number":return Number.isNaN(e)?"nan":"number";case"object":{if(e===null)return"null";if(Array.isArray(e))return"array";let n=e;if(n&&Object.getPrototypeOf(n)!==Object.prototype&&"constructor"in n&&n.constructor)return n.constructor.name}}return t}function br(...e){let[t,n,r]=e;if(typeof t==="string")return{message:t,code:"custom",input:n,inst:r};return{...t}}function MN(e){return Object.entries(e).filter(([t,n])=>Number.isNaN(Number.parseInt(t,10))).map((t)=>t[1])}function yx(e){let t=atob(e),n=new Uint8Array(t.length);for(let r=0;r<t.length;r++)n[r]=t.charCodeAt(r);return n}function bx(e){let t="";for(let n=0;n<e.length;n++)t+=String.fromCharCode(e[n]);return btoa(t)}function LN(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),n="=".repeat((4-t.length%4)%4);return yx(t+n)}function WN(e){return bx(e).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function FN(e){let t=e.replace(/^0x/,"");if(t.length%2!==0)throw Error("Invalid hex string length");let n=new Uint8Array(t.length/2);for(let r=0;r<t.length;r+=2)n[r/2]=Number.parseInt(t.slice(r,r+2),16);return n}function GN(e){return Array.from(e).map((t)=>t.toString(16).padStart(2,"0")).join("")}class vx{constructor(...e){}}var Sx=(e,t)=>{e.name="$ZodError",Object.defineProperty(e,"_zod",{value:e._zod,enumerable:!1}),Object.defineProperty(e,"issues",{value:t,enumerable:!1}),e.message=JSON.stringify(t,hr,2),Object.defineProperty(e,"toString",{value:()=>e.message,enumerable:!1})},Ho=g("$ZodError",Sx),ke=g("$ZodError",Sx,{Parent:Error});function vr(e,t=(n)=>n.message){let n={},r=[];for(let o of e.issues)if(o.path.length>0)n[o.path[0]]=n[o.path[0]]||[],n[o.path[0]].push(t(o));else r.push(t(o));return{formErrors:r,fieldErrors:n}}function Sr(e,t=(n)=>n.message){let n={_errors:[]},r=(o)=>{for(let i of o.issues)if(i.code==="invalid_union"&&i.errors.length)i.errors.map((s)=>r({issues:s}));else if(i.code==="invalid_key")r({issues:i.issues});else if(i.code==="invalid_element")r({issues:i.issues});else if(i.path.length===0)n._errors.push(t(i));else{let s=n,a=0;while(a<i.path.length){let c=i.path[a];if(a!==i.path.length-1)s[c]=s[c]||{_errors:[]};else s[c]=s[c]||{_errors:[]},s[c]._errors.push(t(i));s=s[c],a++}}};return r(e),n}function va(e,t=(n)=>n.message){let n={errors:[]},r=(o,i=[])=>{var s,a;for(let c of o.issues)if(c.code==="invalid_union"&&c.errors.length)c.errors.map((l)=>r({issues:l},c.path));else if(c.code==="invalid_key")r({issues:c.issues},c.path);else if(c.code==="invalid_element")r({issues:c.issues},c.path);else{let l=[...i,...c.path];if(l.length===0){n.errors.push(t(c));continue}let u=n,d=0;while(d<l.length){let f=l[d],m=d===l.length-1;if(typeof f==="string")u.properties??(u.properties={}),(s=u.properties)[f]??(s[f]={errors:[]}),u=u.properties[f];else u.items??(u.items=[]),(a=u.items)[f]??(a[f]={errors:[]}),u=u.items[f];if(m)u.errors.push(t(c));d++}}};return r(e),n}function xx(e){let t=[],n=e.map((r)=>typeof r==="object"?r.key:r);for(let r of n)if(typeof r==="number")t.push(`[${r}]`);else if(typeof r==="symbol")t.push(`[${JSON.stringify(String(r))}]`);else if(/[^\w$]/.test(r))t.push(`[${JSON.stringify(r)}]`);else{if(t.length)t.push(".");t.push(r)}return t.join("")}function Sa(e){let t=[],n=[...e.issues].sort((r,o)=>(r.path??[]).length-(o.path??[]).length);for(let r of n)if(t.push(`\u2716 ${r.message}`),r.path?.length)t.push(`  \u2192 at ${xx(r.path)}`);return t.join(`
+`):e.source,o);return c?{...c,segment:e.displayText}:null}function iN(e,t,n){let r=t.length===1?t[0]:void 0;if(!r?.heredoc||!da(r.heredoc)||r.fd!==void 0&&r.fd!==0)return;let o=e.words[0];if(o?.provenance!=="literal"||!Oe(o.text))return;if(!e.words.slice(1).every((l)=>l.provenance==="literal"&&l.text.startsWith("-")))return;let s=r.heredoc.body,a=ue(n.policy,"interpreter.one-liner-paranoid",!!n.paranoidInterpreters);if(n.trace?.recordSegment({type:"interpreter",interpreter:o.text,codeArg:s,paranoidBlocked:a}),a){let l=O(S("interpreter.one-liner-paranoid",tr),n.policy);if(l)return l}if(!nr(s,n.scanWork))return null;let c=O(S("interpreter.dangerous-command",vn),n.policy);if(!c)return null;return n.trace?.recordSegment({type:"dangerous-text",token:s,matched:!0,reason:c.reason}),c}function sN(e,t,n,r,o){let i=t.length===1?t[0]:void 0;if(!i?.heredoc||!da(i.heredoc)||i.fd!==void 0&&i.fd!==0)return!1;let s=Sn(e.words,o.environment,n.effectiveCwd,r),a=s.words.map(N),c=H(a[0]??"");if((s.envSplitValues?.length??0)>0||!de.has(c)&&!de.has(G(c)))return!1;return Ve(a)}function aN(e,t,n,r,o){let i=qS(e,t.effectiveCwd,r,n);if(i===null)o?.recordSegment({type:"cwd-change",segment:e.words.map(N).join(" "),effectiveCwdNowUnknown:!0});if(i!==void 0)t.effectiveCwd=i}function $o(e){return{effectiveCwd:e.effectiveCwd,shellGitContextState:tx(e.shellGitContextState),literalHeredocFiles:new Map(e.literalHeredocFiles),functionDefinitions:new Map(e.functionDefinitions)}}function aa(e){let t=[];for(let n of e){if(!t.some((r)=>cN(r,n)))t.push(n);if(t.length>Zz)throw new Ie}return t}function cN(e,t){return e.effectiveCwd===t.effectiveCwd&&Mo(e.literalHeredocFiles,t.literalHeredocFiles)&&Mo(e.functionDefinitions,t.functionDefinitions)&&Mo(e.shellGitContextState.effectiveEnvAssignments,t.shellGitContextState.effectiveEnvAssignments)&&Mo(e.shellGitContextState.shellAssignments,t.shellGitContextState.shellAssignments)}function Mo(e,t){if(e===t)return!0;if(!e||!t||e.size!==t.size)return!1;return[...e].every(([n,r])=>t.get(n)===r&&t.has(n))}function lN(e,t){let n=ks(e);return n===void 0?void 0:t.get(n)}function uN(e,t){if(!t)return null;return{reason:t.reason,segment:e,ruleId:t.id,intent:t.intent}}function dN(e,t=e.effectiveCwd){let n=t===null;return{environment:e.environment,cwd:n?void 0:t??e.cwd,originalCwd:n?void 0:e.cwd,strict:e.strict,paranoid:e.paranoidRm,allowTmpdirVar:e.allowTmpdirVar,protectedGitMetadata:e.protectedGitMetadata,policy:e.policy}}function vd(e,t){let n=O(Dt(e,t.scanWork),t.policy),r=t.trace?.currentSegmentIndex??t.trace?.allocateSegment(),o={type:"dangerous-text",token:e,matched:!!n,reason:n?.reason};if(t.trace?.recordSegment(o,r),!n&&/^(?:cd|pushd)\s/.test(e))t.trace?.recordSegment({type:"cwd-change",segment:e,effectiveCwdNowUnknown:!0},r);return n?{reason:n.reason,segment:e,ruleId:n.id,intent:n.intent}:null}function ux(e,t){let n={type:"strict-unparseable",rawCommand:e,reason:Kt};if(t.trace?.currentSegmentIndex===void 0)t.trace?.recordGlobal(n);else t.trace.recordSegment(n)}var me={level:{name:"CC_SAFETY_NET_LEVEL"},strict:{name:"CC_SAFETY_NET_STRICT",legacyName:"SAFETY_NET_STRICT"},paranoid:{name:"CC_SAFETY_NET_PARANOID",legacyName:"SAFETY_NET_PARANOID"},paranoidRm:{name:"CC_SAFETY_NET_PARANOID_RM",legacyName:"SAFETY_NET_PARANOID_RM"},paranoidInterpreters:{name:"CC_SAFETY_NET_PARANOID_INTERPRETERS",legacyName:"SAFETY_NET_PARANOID_INTERPRETERS"},worktree:{name:"CC_SAFETY_NET_WORKTREE",legacyName:"SAFETY_NET_WORKTREE"},debug:{name:"CC_SAFETY_NET_DEBUG"},auditScope:{name:"CC_SAFETY_NET_AUDIT_SCOPE"}},ma=["standard","strict","paranoid"];function mN(e){return{failClosed:e==="strict"||e==="paranoid",paranoidRm:e==="paranoid",paranoidInterpreters:e==="paranoid"}}function fN(e,t){if(!t)return e;return ma.indexOf(t)>ma.indexOf(e)?t:e}function pN(){let e=Rd(me.level);if(e===void 0||e==="")return;if(ma.includes(e))return e;console.error(`CC Safety Net: ignored invalid ${me.level.name}=${JSON.stringify(e.slice(0,40))}. Use ${ma.join(", ")}.`);return}function gN(e){if(e===void 0||e==="all")return"all";if(e==="blocked")return"blocked";return"invalid"}function _d(){return gN(Rd(me.auditScope))==="all"}function Cd(e){if(e.failClosed&&e.paranoidRm&&e.paranoidInterpreters)return"paranoid";if(e.failClosed&&!e.paranoidRm&&!e.paranoidInterpreters)return"strict";if(!e.failClosed&&!e.paranoidRm&&!e.paranoidInterpreters)return"standard";return"custom"}function wd(e={}){let t=e.safety?.level??"standard",n=pN(),r=fN(t,n),o=mN(r),i={failClosed:r===t?"preset":"environment",paranoidRm:r===t?"preset":"environment",paranoidInterpreters:r===t?"preset":"environment"},s={failClosed:[`policy safety.level=${t}`],paranoidRm:[`policy safety.level=${t}`],paranoidInterpreters:[`policy safety.level=${t}`]};if(r!==t)s.failClosed.push(`env ${me.level.name}=${n}`),s.paranoidRm.push(`env ${me.level.name}=${n}`),s.paranoidInterpreters.push(`env ${me.level.name}=${n}`);if(e.safety?.overrides?.failClosed!==void 0)o.failClosed=e.safety.overrides.failClosed,i.failClosed="capability_override",s.failClosed.push("policy safety.overrides.fail_closed");if(e.safety?.overrides?.paranoidRm!==void 0)o.paranoidRm=e.safety.overrides.paranoidRm,i.paranoidRm="capability_override",s.paranoidRm.push("policy safety.overrides.paranoid_rm");if(e.safety?.overrides?.paranoidInterpreters!==void 0)o.paranoidInterpreters=e.safety.overrides.paranoidInterpreters,i.paranoidInterpreters="capability_override",s.paranoidInterpreters.push("policy safety.overrides.paranoid_interpreters");if(rn(me.strict))o.failClosed=!0,i.failClosed="environment",s.failClosed.push(`env ${me.strict.name}`);if(rn(me.paranoid))o.paranoidRm=!0,o.paranoidInterpreters=!0,i.paranoidRm="environment",i.paranoidInterpreters="environment",s.paranoidRm.push(`env ${me.paranoid.name}`),s.paranoidInterpreters.push(`env ${me.paranoid.name}`);if(rn(me.paranoidRm))o.paranoidRm=!0,i.paranoidRm="environment",s.paranoidRm.push(`env ${me.paranoidRm.name}`);if(rn(me.paranoidInterpreters))o.paranoidInterpreters=!0,i.paranoidInterpreters="environment",s.paranoidInterpreters.push(`env ${me.paranoidInterpreters.name}`);let a=!!e.worktreeMode||rn(me.worktree);return{strict:o.failClosed,paranoidRm:o.paranoidRm,paranoidInterpreters:o.paranoidInterpreters,worktreeMode:a,effectiveLevel:Cd(o),capabilities:{fail_closed:{enabled:o.failClosed,source:i.failClosed,sources:s.failClosed},paranoid_rm:{enabled:o.paranoidRm,source:i.paranoidRm,sources:s.paranoidRm},paranoid_interpreters:{enabled:o.paranoidInterpreters,source:i.paranoidInterpreters,sources:s.paranoidInterpreters}}}}function rn(e){let t=typeof e==="string"?xd(e):Rd(e);return t==="1"||t?.toLowerCase()==="true"}function xd(e){return Object.hasOwn(process.env,e)?process.env[e]:void 0}function Rd(e){let t=xd(e.name);if(t!==void 0)return t;if(e.legacyName)return xd(e.legacyName);return}function px(e){let t=e.effectiveCapabilities,n=e.strict??t.fail_closed.enabled,r=e.paranoidRm??t.paranoid_rm.enabled,o=e.paranoidInterpreters??t.paranoid_interpreters.enabled,i={fail_closed:Ed(t.fail_closed,e.strict,"strict"),paranoid_rm:Ed(t.paranoid_rm,e.paranoidRm,"paranoidRm"),paranoid_interpreters:Ed(t.paranoid_interpreters,e.paranoidInterpreters,"paranoidInterpreters")};return{policy:$y(e.policySnapshot.policy,i),effectiveCapabilities:i,effectiveLevel:Cd({failClosed:n,paranoidRm:r,paranoidInterpreters:o}),strict:n,paranoidRm:r,paranoidInterpreters:o,worktreeMode:e.worktreeMode??!1}}function Ed(e,t,n){if(t===void 0||t===e.enabled)return e;return{enabled:t,source:"capability_override",sources:[...e.sources,`analysis options.${n}`]}}function gx(e,t,n,r){let o=Sd(e,0,{...t,...px(t),factStore:r},n);if(!o)return null;return{kind:"deny",reason:o.reason,intent:o.intent??"manual_only",...o.ruleId?{ruleId:o.ruleId}:{},evidence:[{kind:"command",command:e,segment:o.segment}]}}import{basename as $$,dirname as Sh}from"path";function Lo(e,t,n,r,o){if(n.kind!=="command")return{toolName:e,input:t,route:n,context:r};return{toolName:e,input:t,route:n,context:r,command:o}}import{chmodSync as ZU,existsSync as C$,mkdirSync as BU,readFileSync as w$}from"fs";import{dirname as R$,join as E$}from"path";import{createRequire as u$}from"module";var uh={};mn(uh,{$brand:()=>pa,$input:()=>ja,$output:()=>Ua,NEVER:()=>fa,TimePrecision:()=>mc,ZodAny:()=>wg,ZodArray:()=>kg,ZodBase64:()=>Kc,ZodBase64URL:()=>Yc,ZodBigInt:()=>qr,ZodBigIntFormat:()=>Qc,ZodBoolean:()=>Vr,ZodCIDRv4:()=>Vc,ZodCIDRv6:()=>qc,ZodCUID:()=>Fc,ZodCUID2:()=>Gc,ZodCatch:()=>Yg,ZodCodec:()=>al,ZodCustom:()=>vi,ZodCustomStringFormat:()=>jr,ZodDate:()=>pi,ZodDefault:()=>Ug,ZodDiscriminatedUnion:()=>Tg,ZodE164:()=>Jc,ZodEmail:()=>Mc,ZodEmoji:()=>Lc,ZodEnum:()=>Br,ZodError:()=>Kx,ZodExactOptional:()=>Gg,ZodFile:()=>Wg,ZodFirstPartyTypeKind:()=>cl,ZodFunction:()=>ih,ZodGUID:()=>li,ZodIPv4:()=>jc,ZodIPv6:()=>Hc,ZodISODate:()=>ii,ZodISODateTime:()=>oi,ZodISODuration:()=>ai,ZodISOTime:()=>si,ZodIntersection:()=>Ig,ZodIssueCode:()=>uC,ZodJWT:()=>Xc,ZodKSUID:()=>Uc,ZodLazy:()=>nh,ZodLiteral:()=>Lg,ZodMAC:()=>yg,ZodMap:()=>$g,ZodNaN:()=>Xg,ZodNanoID:()=>Wc,ZodNever:()=>Eg,ZodNonOptional:()=>il,ZodNull:()=>_g,ZodNullable:()=>Bg,ZodNumber:()=>Hr,ZodNumberFormat:()=>Zn,ZodObject:()=>hi,ZodOptional:()=>ol,ZodPipe:()=>sl,ZodPrefault:()=>Hg,ZodPromise:()=>oh,ZodReadonly:()=>Qg,ZodRealError:()=>_e,ZodRecord:()=>bi,ZodSet:()=>Mg,ZodString:()=>Ur,ZodStringFormat:()=>K,ZodSuccess:()=>Kg,ZodSymbol:()=>Sg,ZodTemplateLiteral:()=>th,ZodTransform:()=>Fg,ZodTuple:()=>zg,ZodType:()=>L,ZodULID:()=>Zc,ZodURL:()=>fi,ZodUUID:()=>Et,ZodUndefined:()=>xg,ZodUnion:()=>yi,ZodUnknown:()=>Rg,ZodVoid:()=>Pg,ZodXID:()=>Bc,ZodXor:()=>Ag,_ZodString:()=>$c,_default:()=>jg,_function:()=>tC,any:()=>z_,array:()=>gi,base64:()=>h_,base64url:()=>y_,bigint:()=>k_,boolean:()=>vg,catch:()=>Jg,check:()=>nC,cidrv4:()=>p_,cidrv6:()=>g_,clone:()=>he,codec:()=>X_,coerce:()=>ll,config:()=>se,core:()=>Rt,cuid:()=>s_,cuid2:()=>a_,custom:()=>rC,date:()=>D_,decode:()=>Pc,decodeAsync:()=>Ac,default:()=>i$,describe:()=>oC,discriminatedUnion:()=>G_,e164:()=>b_,email:()=>Yx,emoji:()=>o_,encode:()=>Ec,encodeAsync:()=>kc,endsWith:()=>Ir,enum:()=>nl,exactOptional:()=>Zg,file:()=>q_,flattenError:()=>vr,float32:()=>w_,float64:()=>R_,formatError:()=>Sr,fromJSONSchema:()=>lh,function:()=>tC,getErrorMap:()=>mC,globalRegistry:()=>Ae,gt:()=>Ct,gte:()=>xe,guid:()=>Jx,hash:()=>C_,hex:()=>__,hostname:()=>x_,httpUrl:()=>r_,includes:()=>Ar,instanceof:()=>sC,int:()=>Dc,int32:()=>E_,int64:()=>A_,intersection:()=>Og,ipv4:()=>d_,ipv6:()=>f_,iso:()=>ci,json:()=>cC,jwt:()=>v_,keyof:()=>$_,ksuid:()=>u_,lazy:()=>rh,length:()=>Fn,literal:()=>V_,locales:()=>Qo,looseObject:()=>W_,looseRecord:()=>B_,lowercase:()=>Pr,lt:()=>_t,lte:()=>Ge,mac:()=>m_,map:()=>U_,maxLength:()=>Wn,maxSize:()=>un,meta:()=>iC,mime:()=>Or,minLength:()=>Ft,minSize:()=>wt,multipleOf:()=>ln,nan:()=>J_,nanoid:()=>i_,nativeEnum:()=>H_,negative:()=>pc,never:()=>el,nonnegative:()=>hc,nonoptional:()=>qg,nonpositive:()=>gc,normalize:()=>zr,null:()=>Cg,nullable:()=>di,nullish:()=>K_,number:()=>bg,object:()=>M_,optional:()=>ui,overwrite:()=>at,parse:()=>_c,parseAsync:()=>Cc,partialRecord:()=>Z_,pipe:()=>mi,positive:()=>fc,prefault:()=>Vg,preprocess:()=>lC,prettifyError:()=>Sa,promise:()=>eC,property:()=>yc,readonly:()=>eh,record:()=>Dg,refine:()=>sh,regex:()=>Er,regexes:()=>Fe,registry:()=>ei,safeDecode:()=>Ic,safeDecodeAsync:()=>zc,safeEncode:()=>Tc,safeEncodeAsync:()=>Oc,safeParse:()=>wc,safeParseAsync:()=>Rc,set:()=>j_,setErrorMap:()=>dC,size:()=>Ln,slugify:()=>Mr,startsWith:()=>Tr,strictObject:()=>L_,string:()=>Nc,stringFormat:()=>S_,stringbool:()=>aC,success:()=>Y_,superRefine:()=>ah,symbol:()=>I_,templateLiteral:()=>Q_,toJSONSchema:()=>ri,toLowerCase:()=>Dr,toUpperCase:()=>$r,transform:()=>rl,treeifyError:()=>va,trim:()=>Nr,tuple:()=>Ng,uint32:()=>P_,uint64:()=>T_,ulid:()=>c_,undefined:()=>O_,union:()=>tl,unknown:()=>Gn,uppercase:()=>kr,url:()=>n_,util:()=>I,uuid:()=>Xx,uuidv4:()=>Qx,uuidv6:()=>e_,uuidv7:()=>t_,void:()=>N_,xid:()=>l_,xor:()=>F_,z:()=>ul});var ul={};mn(ul,{$brand:()=>pa,$input:()=>ja,$output:()=>Ua,NEVER:()=>fa,TimePrecision:()=>mc,ZodAny:()=>wg,ZodArray:()=>kg,ZodBase64:()=>Kc,ZodBase64URL:()=>Yc,ZodBigInt:()=>qr,ZodBigIntFormat:()=>Qc,ZodBoolean:()=>Vr,ZodCIDRv4:()=>Vc,ZodCIDRv6:()=>qc,ZodCUID:()=>Fc,ZodCUID2:()=>Gc,ZodCatch:()=>Yg,ZodCodec:()=>al,ZodCustom:()=>vi,ZodCustomStringFormat:()=>jr,ZodDate:()=>pi,ZodDefault:()=>Ug,ZodDiscriminatedUnion:()=>Tg,ZodE164:()=>Jc,ZodEmail:()=>Mc,ZodEmoji:()=>Lc,ZodEnum:()=>Br,ZodError:()=>Kx,ZodExactOptional:()=>Gg,ZodFile:()=>Wg,ZodFirstPartyTypeKind:()=>cl,ZodFunction:()=>ih,ZodGUID:()=>li,ZodIPv4:()=>jc,ZodIPv6:()=>Hc,ZodISODate:()=>ii,ZodISODateTime:()=>oi,ZodISODuration:()=>ai,ZodISOTime:()=>si,ZodIntersection:()=>Ig,ZodIssueCode:()=>uC,ZodJWT:()=>Xc,ZodKSUID:()=>Uc,ZodLazy:()=>nh,ZodLiteral:()=>Lg,ZodMAC:()=>yg,ZodMap:()=>$g,ZodNaN:()=>Xg,ZodNanoID:()=>Wc,ZodNever:()=>Eg,ZodNonOptional:()=>il,ZodNull:()=>_g,ZodNullable:()=>Bg,ZodNumber:()=>Hr,ZodNumberFormat:()=>Zn,ZodObject:()=>hi,ZodOptional:()=>ol,ZodPipe:()=>sl,ZodPrefault:()=>Hg,ZodPromise:()=>oh,ZodReadonly:()=>Qg,ZodRealError:()=>_e,ZodRecord:()=>bi,ZodSet:()=>Mg,ZodString:()=>Ur,ZodStringFormat:()=>K,ZodSuccess:()=>Kg,ZodSymbol:()=>Sg,ZodTemplateLiteral:()=>th,ZodTransform:()=>Fg,ZodTuple:()=>zg,ZodType:()=>L,ZodULID:()=>Zc,ZodURL:()=>fi,ZodUUID:()=>Et,ZodUndefined:()=>xg,ZodUnion:()=>yi,ZodUnknown:()=>Rg,ZodVoid:()=>Pg,ZodXID:()=>Bc,ZodXor:()=>Ag,_ZodString:()=>$c,_default:()=>jg,_function:()=>tC,any:()=>z_,array:()=>gi,base64:()=>h_,base64url:()=>y_,bigint:()=>k_,boolean:()=>vg,catch:()=>Jg,check:()=>nC,cidrv4:()=>p_,cidrv6:()=>g_,clone:()=>he,codec:()=>X_,coerce:()=>ll,config:()=>se,core:()=>Rt,cuid:()=>s_,cuid2:()=>a_,custom:()=>rC,date:()=>D_,decode:()=>Pc,decodeAsync:()=>Ac,describe:()=>oC,discriminatedUnion:()=>G_,e164:()=>b_,email:()=>Yx,emoji:()=>o_,encode:()=>Ec,encodeAsync:()=>kc,endsWith:()=>Ir,enum:()=>nl,exactOptional:()=>Zg,file:()=>q_,flattenError:()=>vr,float32:()=>w_,float64:()=>R_,formatError:()=>Sr,fromJSONSchema:()=>lh,function:()=>tC,getErrorMap:()=>mC,globalRegistry:()=>Ae,gt:()=>Ct,gte:()=>xe,guid:()=>Jx,hash:()=>C_,hex:()=>__,hostname:()=>x_,httpUrl:()=>r_,includes:()=>Ar,instanceof:()=>sC,int:()=>Dc,int32:()=>E_,int64:()=>A_,intersection:()=>Og,ipv4:()=>d_,ipv6:()=>f_,iso:()=>ci,json:()=>cC,jwt:()=>v_,keyof:()=>$_,ksuid:()=>u_,lazy:()=>rh,length:()=>Fn,literal:()=>V_,locales:()=>Qo,looseObject:()=>W_,looseRecord:()=>B_,lowercase:()=>Pr,lt:()=>_t,lte:()=>Ge,mac:()=>m_,map:()=>U_,maxLength:()=>Wn,maxSize:()=>un,meta:()=>iC,mime:()=>Or,minLength:()=>Ft,minSize:()=>wt,multipleOf:()=>ln,nan:()=>J_,nanoid:()=>i_,nativeEnum:()=>H_,negative:()=>pc,never:()=>el,nonnegative:()=>hc,nonoptional:()=>qg,nonpositive:()=>gc,normalize:()=>zr,null:()=>Cg,nullable:()=>di,nullish:()=>K_,number:()=>bg,object:()=>M_,optional:()=>ui,overwrite:()=>at,parse:()=>_c,parseAsync:()=>Cc,partialRecord:()=>Z_,pipe:()=>mi,positive:()=>fc,prefault:()=>Vg,preprocess:()=>lC,prettifyError:()=>Sa,promise:()=>eC,property:()=>yc,readonly:()=>eh,record:()=>Dg,refine:()=>sh,regex:()=>Er,regexes:()=>Fe,registry:()=>ei,safeDecode:()=>Ic,safeDecodeAsync:()=>zc,safeEncode:()=>Tc,safeEncodeAsync:()=>Oc,safeParse:()=>wc,safeParseAsync:()=>Rc,set:()=>j_,setErrorMap:()=>dC,size:()=>Ln,slugify:()=>Mr,startsWith:()=>Tr,strictObject:()=>L_,string:()=>Nc,stringFormat:()=>S_,stringbool:()=>aC,success:()=>Y_,superRefine:()=>ah,symbol:()=>I_,templateLiteral:()=>Q_,toJSONSchema:()=>ri,toLowerCase:()=>Dr,toUpperCase:()=>$r,transform:()=>rl,treeifyError:()=>va,trim:()=>Nr,tuple:()=>Ng,uint32:()=>P_,uint64:()=>T_,ulid:()=>c_,undefined:()=>O_,union:()=>tl,unknown:()=>Gn,uppercase:()=>kr,url:()=>n_,util:()=>I,uuid:()=>Xx,uuidv4:()=>Qx,uuidv6:()=>e_,uuidv7:()=>t_,void:()=>N_,xid:()=>l_,xor:()=>F_});var Rt={};mn(Rt,{$ZodAny:()=>df,$ZodArray:()=>hf,$ZodAsyncError:()=>xt,$ZodBase64:()=>ef,$ZodBase64URL:()=>tf,$ZodBigInt:()=>Ga,$ZodBigIntFormat:()=>af,$ZodBoolean:()=>Yo,$ZodCIDRv4:()=>Jm,$ZodCIDRv6:()=>Xm,$ZodCUID:()=>Wm,$ZodCUID2:()=>Fm,$ZodCatch:()=>Nf,$ZodCheck:()=>J,$ZodCheckBigIntFormat:()=>gm,$ZodCheckEndsWith:()=>Pm,$ZodCheckGreaterThan:()=>za,$ZodCheckIncludes:()=>Rm,$ZodCheckLengthEquals:()=>xm,$ZodCheckLessThan:()=>Oa,$ZodCheckLowerCase:()=>Cm,$ZodCheckMaxLength:()=>vm,$ZodCheckMaxSize:()=>hm,$ZodCheckMimeType:()=>Am,$ZodCheckMinLength:()=>Sm,$ZodCheckMinSize:()=>ym,$ZodCheckMultipleOf:()=>fm,$ZodCheckNumberFormat:()=>pm,$ZodCheckOverwrite:()=>Tm,$ZodCheckProperty:()=>km,$ZodCheckRegex:()=>_m,$ZodCheckSizeEquals:()=>bm,$ZodCheckStartsWith:()=>Em,$ZodCheckStringFormat:()=>Rr,$ZodCheckUpperCase:()=>wm,$ZodCodec:()=>Xo,$ZodCustom:()=>Zf,$ZodCustomStringFormat:()=>of,$ZodDate:()=>gf,$ZodDefault:()=>Tf,$ZodDiscriminatedUnion:()=>vf,$ZodE164:()=>nf,$ZodEmail:()=>Dm,$ZodEmoji:()=>Mm,$ZodEncodeError:()=>Nn,$ZodEnum:()=>wf,$ZodError:()=>Ho,$ZodExactOptional:()=>kf,$ZodFile:()=>Ef,$ZodFunction:()=>Wf,$ZodGUID:()=>zm,$ZodIPv4:()=>qm,$ZodIPv6:()=>Km,$ZodISODate:()=>jm,$ZodISODateTime:()=>Um,$ZodISODuration:()=>Vm,$ZodISOTime:()=>Hm,$ZodIntersection:()=>Sf,$ZodJWT:()=>rf,$ZodKSUID:()=>Bm,$ZodLazy:()=>Gf,$ZodLiteral:()=>Rf,$ZodMAC:()=>Ym,$ZodMap:()=>_f,$ZodNaN:()=>Df,$ZodNanoID:()=>Lm,$ZodNever:()=>ff,$ZodNonOptional:()=>Of,$ZodNull:()=>uf,$ZodNullable:()=>Af,$ZodNumber:()=>Fa,$ZodNumberFormat:()=>sf,$ZodObject:()=>Bx,$ZodObjectJIT:()=>yf,$ZodOptional:()=>Ba,$ZodPipe:()=>$f,$ZodPrefault:()=>If,$ZodPromise:()=>Ff,$ZodReadonly:()=>Mf,$ZodRealError:()=>ke,$ZodRecord:()=>xf,$ZodRegistry:()=>Bf,$ZodSet:()=>Cf,$ZodString:()=>Mn,$ZodStringFormat:()=>q,$ZodSuccess:()=>zf,$ZodSymbol:()=>cf,$ZodTemplateLiteral:()=>Lf,$ZodTransform:()=>Pf,$ZodTuple:()=>Za,$ZodType:()=>D,$ZodULID:()=>Gm,$ZodURL:()=>$m,$ZodUUID:()=>Nm,$ZodUndefined:()=>lf,$ZodUnion:()=>Jo,$ZodUnknown:()=>mf,$ZodVoid:()=>pf,$ZodXID:()=>Zm,$ZodXor:()=>bf,$brand:()=>pa,$constructor:()=>g,$input:()=>ja,$output:()=>Ua,Doc:()=>Na,JSONSchema:()=>Hx,JSONSchemaGenerator:()=>mg,NEVER:()=>fa,TimePrecision:()=>mc,_any:()=>fp,_array:()=>Sp,_base64:()=>cc,_base64url:()=>lc,_bigint:()=>sp,_boolean:()=>op,_catch:()=>BD,_check:()=>jx,_cidrv4:()=>sc,_cidrv6:()=>ac,_coercedBigint:()=>ap,_coercedBoolean:()=>ip,_coercedDate:()=>bp,_coercedNumber:()=>Xf,_coercedString:()=>jf,_cuid:()=>Qa,_cuid2:()=>ec,_custom:()=>_p,_date:()=>yp,_decode:()=>wa,_decodeAsync:()=>Ea,_default:()=>FD,_discriminatedUnion:()=>kD,_e164:()=>uc,_email:()=>Ha,_emoji:()=>Ja,_encode:()=>Ca,_encodeAsync:()=>Ra,_endsWith:()=>Ir,_enum:()=>ND,_file:()=>xp,_float32:()=>ep,_float64:()=>tp,_gt:()=>Ct,_gte:()=>xe,_guid:()=>ti,_includes:()=>Ar,_int:()=>Qf,_int32:()=>np,_int64:()=>cp,_intersection:()=>AD,_ipv4:()=>oc,_ipv6:()=>ic,_isoDate:()=>qf,_isoDateTime:()=>Vf,_isoDuration:()=>Yf,_isoTime:()=>Kf,_jwt:()=>dc,_ksuid:()=>rc,_lazy:()=>VD,_length:()=>Fn,_literal:()=>$D,_lowercase:()=>Pr,_lt:()=>_t,_lte:()=>Ge,_mac:()=>Hf,_map:()=>OD,_max:()=>Ge,_maxLength:()=>Wn,_maxSize:()=>un,_mime:()=>Or,_min:()=>xe,_minLength:()=>Ft,_minSize:()=>wt,_multipleOf:()=>ln,_nan:()=>vp,_nanoid:()=>Xa,_nativeEnum:()=>DD,_negative:()=>pc,_never:()=>gp,_nonnegative:()=>hc,_nonoptional:()=>GD,_nonpositive:()=>gc,_normalize:()=>zr,_null:()=>mp,_nullable:()=>WD,_number:()=>Jf,_optional:()=>LD,_overwrite:()=>at,_parse:()=>xr,_parseAsync:()=>_r,_pipe:()=>UD,_positive:()=>fc,_promise:()=>qD,_property:()=>yc,_readonly:()=>jD,_record:()=>ID,_refine:()=>Cp,_regex:()=>Er,_safeDecode:()=>ka,_safeDecodeAsync:()=>Ta,_safeEncode:()=>Pa,_safeEncodeAsync:()=>Aa,_safeParse:()=>Cr,_safeParseAsync:()=>wr,_set:()=>zD,_size:()=>Ln,_slugify:()=>Mr,_startsWith:()=>Tr,_string:()=>Uf,_stringFormat:()=>Lr,_stringbool:()=>Pp,_success:()=>ZD,_superRefine:()=>wp,_symbol:()=>up,_templateLiteral:()=>HD,_toLowerCase:()=>Dr,_toUpperCase:()=>$r,_transform:()=>MD,_trim:()=>Nr,_tuple:()=>TD,_uint32:()=>rp,_uint64:()=>lp,_ulid:()=>tc,_undefined:()=>dp,_union:()=>ED,_unknown:()=>pp,_uppercase:()=>kr,_url:()=>ni,_uuid:()=>Va,_uuidv4:()=>qa,_uuidv6:()=>Ka,_uuidv7:()=>Ya,_void:()=>hp,_xid:()=>nc,_xor:()=>PD,clone:()=>he,config:()=>se,createStandardJSONSchemaMethod:()=>bc,createToJSONSchemaMethod:()=>kp,decode:()=>UN,decodeAsync:()=>HN,describe:()=>Rp,encode:()=>BN,encodeAsync:()=>jN,extractDefs:()=>Gr,finalize:()=>Zr,flattenError:()=>vr,formatError:()=>Sr,globalConfig:()=>Wo,globalRegistry:()=>Ae,initializeContext:()=>Fr,isValidBase64:()=>Qm,isValidBase64URL:()=>Wx,isValidJWT:()=>Fx,locales:()=>Qo,meta:()=>Ep,parse:()=>xa,parseAsync:()=>_a,prettifyError:()=>Sa,process:()=>X,regexes:()=>Fe,registry:()=>ei,safeDecode:()=>qN,safeDecodeAsync:()=>YN,safeEncode:()=>VN,safeEncodeAsync:()=>KN,safeParse:()=>Md,safeParseAsync:()=>Ld,toDotPath:()=>xx,toJSONSchema:()=>ri,treeifyError:()=>va,util:()=>I,version:()=>Im});var fa=Object.freeze({status:"aborted"});function g(e,t,n){function r(a,c){if(!a._zod)Object.defineProperty(a,"_zod",{value:{def:c,constr:s,traits:new Set},enumerable:!1});if(a._zod.traits.has(e))return;a._zod.traits.add(e),t(a,c);let l=s.prototype,u=Object.keys(l);for(let d=0;d<u.length;d++){let f=u[d];if(!(f in a))a[f]=l[f].bind(a)}}let o=n?.Parent??Object;class i extends o{}Object.defineProperty(i,"name",{value:e});function s(a){var c;let l=n?.Parent?new i:this;r(l,a),(c=l._zod).deferred??(c.deferred=[]);for(let u of l._zod.deferred)u();return l}return Object.defineProperty(s,"init",{value:r}),Object.defineProperty(s,Symbol.hasInstance,{value:(a)=>{if(n?.Parent&&a instanceof n.Parent)return!0;return a?._zod?.traits?.has(e)}}),Object.defineProperty(s,"name",{value:e}),s}var pa=Symbol("zod_brand");class xt extends Error{constructor(){super("Encountered Promise during synchronous parse. Use .parseAsync() instead.")}}class Nn extends Error{constructor(e){super(`Encountered unidirectional transform during encode: ${e}`);this.name="ZodEncodeError"}}var Wo={};function se(e){if(e)Object.assign(Wo,e);return Wo}var I={};mn(I,{BIGINT_FORMAT_RANGES:()=>Dd,Class:()=>vx,NUMBER_FORMAT_RANGES:()=>Nd,aborted:()=>cn,allowsEval:()=>Td,assert:()=>xN,assertEqual:()=>yN,assertIs:()=>vN,assertNever:()=>SN,assertNotEqual:()=>bN,assignProp:()=>sn,base64ToUint8Array:()=>yx,base64urlToUint8Array:()=>LN,cached:()=>yr,captureStackTrace:()=>ya,cleanEnum:()=>MN,cleanRegex:()=>Zo,clone:()=>he,cloneDef:()=>CN,createTransparentProxy:()=>AN,defineLazy:()=>F,esc:()=>ha,escapeRegex:()=>Ke,extend:()=>ON,finalizeIssue:()=>Pe,floatSafeRemainder:()=>kd,getElementAtPath:()=>wN,getEnumValues:()=>Go,getLengthableOrigin:()=>jo,getParsedType:()=>kN,getSizableOrigin:()=>Uo,hexToUint8Array:()=>FN,isObject:()=>Dn,isPlainObject:()=>an,issue:()=>br,joinValues:()=>ga,jsonStringifyReplacer:()=>hr,merge:()=>NN,mergeDefs:()=>Wt,normalizeParams:()=>x,nullish:()=>on,numKeys:()=>PN,objectClone:()=>_N,omit:()=>IN,optionalKeys:()=>zd,parsedType:()=>$d,partial:()=>DN,pick:()=>TN,prefixIssues:()=>We,primitiveTypes:()=>Od,promiseAllObject:()=>RN,propertyKeyTypes:()=>Bo,randomString:()=>EN,required:()=>$N,safeExtend:()=>zN,shallowClone:()=>Id,slugify:()=>Ad,stringifyPrimitive:()=>ba,uint8ArrayToBase64:()=>bx,uint8ArrayToBase64url:()=>WN,uint8ArrayToHex:()=>GN,unwrapMessage:()=>Fo});function yN(e){return e}function bN(e){return e}function vN(e){}function SN(e){throw Error("Unexpected value in exhaustive check")}function xN(e){}function Go(e){let t=Object.values(e).filter((r)=>typeof r==="number");return Object.entries(e).filter(([r,o])=>t.indexOf(+r)===-1).map(([r,o])=>o)}function ga(e,t="|"){return e.map((n)=>ba(n)).join(t)}function hr(e,t){if(typeof t==="bigint")return t.toString();return t}function yr(e){return{get value(){{let n=e();return Object.defineProperty(this,"value",{value:n}),n}throw Error("cached value already set")}}}function on(e){return e===null||e===void 0}function Zo(e){let t=e.startsWith("^")?1:0,n=e.endsWith("$")?e.length-1:e.length;return e.slice(t,n)}function kd(e,t){let n=(e.toString().split(".")[1]||"").length,r=t.toString(),o=(r.split(".")[1]||"").length;if(o===0&&/\d?e-\d?/.test(r)){let c=r.match(/\d?e-(\d?)/);if(c?.[1])o=Number.parseInt(c[1])}let i=n>o?n:o,s=Number.parseInt(e.toFixed(i).replace(".","")),a=Number.parseInt(t.toFixed(i).replace(".",""));return s%a/10**i}var hx=Symbol("evaluating");function F(e,t,n){let r=void 0;Object.defineProperty(e,t,{get(){if(r===hx)return;if(r===void 0)r=hx,r=n();return r},set(o){Object.defineProperty(e,t,{value:o})},configurable:!0})}function _N(e){return Object.create(Object.getPrototypeOf(e),Object.getOwnPropertyDescriptors(e))}function sn(e,t,n){Object.defineProperty(e,t,{value:n,writable:!0,enumerable:!0,configurable:!0})}function Wt(...e){let t={};for(let n of e){let r=Object.getOwnPropertyDescriptors(n);Object.assign(t,r)}return Object.defineProperties({},t)}function CN(e){return Wt(e._zod.def)}function wN(e,t){if(!t)return e;return t.reduce((n,r)=>n?.[r],e)}function RN(e){let t=Object.keys(e),n=t.map((r)=>e[r]);return Promise.all(n).then((r)=>{let o={};for(let i=0;i<t.length;i++)o[t[i]]=r[i];return o})}function EN(e=10){let n="";for(let r=0;r<e;r++)n+="abcdefghijklmnopqrstuvwxyz"[Math.floor(Math.random()*26)];return n}function ha(e){return JSON.stringify(e)}function Ad(e){return e.toLowerCase().trim().replace(/[^\w\s-]/g,"").replace(/[\s_-]+/g,"-").replace(/^-+|-+$/g,"")}var ya="captureStackTrace"in Error?Error.captureStackTrace:(...e)=>{};function Dn(e){return typeof e==="object"&&e!==null&&!Array.isArray(e)}var Td=yr(()=>{if(typeof navigator<"u"&&navigator?.userAgent?.includes("Cloudflare"))return!1;try{return new Function(""),!0}catch(e){return!1}});function an(e){if(Dn(e)===!1)return!1;let t=e.constructor;if(t===void 0)return!0;if(typeof t!=="function")return!0;let n=t.prototype;if(Dn(n)===!1)return!1;if(Object.prototype.hasOwnProperty.call(n,"isPrototypeOf")===!1)return!1;return!0}function Id(e){if(an(e))return{...e};if(Array.isArray(e))return[...e];return e}function PN(e){let t=0;for(let n in e)if(Object.prototype.hasOwnProperty.call(e,n))t++;return t}var kN=(e)=>{let t=typeof e;switch(t){case"undefined":return"undefined";case"string":return"string";case"number":return Number.isNaN(e)?"nan":"number";case"boolean":return"boolean";case"function":return"function";case"bigint":return"bigint";case"symbol":return"symbol";case"object":if(Array.isArray(e))return"array";if(e===null)return"null";if(e.then&&typeof e.then==="function"&&e.catch&&typeof e.catch==="function")return"promise";if(typeof Map<"u"&&e instanceof Map)return"map";if(typeof Set<"u"&&e instanceof Set)return"set";if(typeof Date<"u"&&e instanceof Date)return"date";if(typeof File<"u"&&e instanceof File)return"file";return"object";default:throw Error(`Unknown data type: ${t}`)}},Bo=new Set(["string","number","symbol"]),Od=new Set(["string","number","bigint","boolean","symbol","undefined"]);function Ke(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function he(e,t,n){let r=new e._zod.constr(t??e._zod.def);if(!t||n?.parent)r._zod.parent=e;return r}function x(e){let t=e;if(!t)return{};if(typeof t==="string")return{error:()=>t};if(t?.message!==void 0){if(t?.error!==void 0)throw Error("Cannot specify both `message` and `error` params");t.error=t.message}if(delete t.message,typeof t.error==="string")return{...t,error:()=>t.error};return t}function AN(e){let t;return new Proxy({},{get(n,r,o){return t??(t=e()),Reflect.get(t,r,o)},set(n,r,o,i){return t??(t=e()),Reflect.set(t,r,o,i)},has(n,r){return t??(t=e()),Reflect.has(t,r)},deleteProperty(n,r){return t??(t=e()),Reflect.deleteProperty(t,r)},ownKeys(n){return t??(t=e()),Reflect.ownKeys(t)},getOwnPropertyDescriptor(n,r){return t??(t=e()),Reflect.getOwnPropertyDescriptor(t,r)},defineProperty(n,r,o){return t??(t=e()),Reflect.defineProperty(t,r,o)}})}function ba(e){if(typeof e==="bigint")return e.toString()+"n";if(typeof e==="string")return`"${e}"`;return`${e}`}function zd(e){return Object.keys(e).filter((t)=>e[t]._zod.optin==="optional"&&e[t]._zod.optout==="optional")}var Nd={safeint:[Number.MIN_SAFE_INTEGER,Number.MAX_SAFE_INTEGER],int32:[-2147483648,2147483647],uint32:[0,4294967295],float32:[-340282346638528860000000000000000000000,340282346638528860000000000000000000000],float64:[-Number.MAX_VALUE,Number.MAX_VALUE]},Dd={int64:[BigInt("-9223372036854775808"),BigInt("9223372036854775807")],uint64:[BigInt(0),BigInt("18446744073709551615")]};function TN(e,t){let n=e._zod.def,r=n.checks;if(r&&r.length>0)throw Error(".pick() cannot be used on object schemas containing refinements");let i=Wt(e._zod.def,{get shape(){let s={};for(let a in t){if(!(a in n.shape))throw Error(`Unrecognized key: "${a}"`);if(!t[a])continue;s[a]=n.shape[a]}return sn(this,"shape",s),s},checks:[]});return he(e,i)}function IN(e,t){let n=e._zod.def,r=n.checks;if(r&&r.length>0)throw Error(".omit() cannot be used on object schemas containing refinements");let i=Wt(e._zod.def,{get shape(){let s={...e._zod.def.shape};for(let a in t){if(!(a in n.shape))throw Error(`Unrecognized key: "${a}"`);if(!t[a])continue;delete s[a]}return sn(this,"shape",s),s},checks:[]});return he(e,i)}function ON(e,t){if(!an(t))throw Error("Invalid input to extend: expected a plain object");let n=e._zod.def.checks;if(n&&n.length>0){let i=e._zod.def.shape;for(let s in t)if(Object.getOwnPropertyDescriptor(i,s)!==void 0)throw Error("Cannot overwrite keys on object schemas containing refinements. Use `.safeExtend()` instead.")}let o=Wt(e._zod.def,{get shape(){let i={...e._zod.def.shape,...t};return sn(this,"shape",i),i}});return he(e,o)}function zN(e,t){if(!an(t))throw Error("Invalid input to safeExtend: expected a plain object");let n=Wt(e._zod.def,{get shape(){let r={...e._zod.def.shape,...t};return sn(this,"shape",r),r}});return he(e,n)}function NN(e,t){let n=Wt(e._zod.def,{get shape(){let r={...e._zod.def.shape,...t._zod.def.shape};return sn(this,"shape",r),r},get catchall(){return t._zod.def.catchall},checks:[]});return he(e,n)}function DN(e,t,n){let o=t._zod.def.checks;if(o&&o.length>0)throw Error(".partial() cannot be used on object schemas containing refinements");let s=Wt(t._zod.def,{get shape(){let a=t._zod.def.shape,c={...a};if(n)for(let l in n){if(!(l in a))throw Error(`Unrecognized key: "${l}"`);if(!n[l])continue;c[l]=e?new e({type:"optional",innerType:a[l]}):a[l]}else for(let l in a)c[l]=e?new e({type:"optional",innerType:a[l]}):a[l];return sn(this,"shape",c),c},checks:[]});return he(t,s)}function $N(e,t,n){let r=Wt(t._zod.def,{get shape(){let o=t._zod.def.shape,i={...o};if(n)for(let s in n){if(!(s in i))throw Error(`Unrecognized key: "${s}"`);if(!n[s])continue;i[s]=new e({type:"nonoptional",innerType:o[s]})}else for(let s in o)i[s]=new e({type:"nonoptional",innerType:o[s]});return sn(this,"shape",i),i}});return he(t,r)}function cn(e,t=0){if(e.aborted===!0)return!0;for(let n=t;n<e.issues.length;n++)if(e.issues[n]?.continue!==!0)return!0;return!1}function We(e,t){return t.map((n)=>{var r;return(r=n).path??(r.path=[]),n.path.unshift(e),n})}function Fo(e){return typeof e==="string"?e:e?.message}function Pe(e,t,n){let r={...e,path:e.path??[]};if(!e.message){let o=Fo(e.inst?._zod.def?.error?.(e))??Fo(t?.error?.(e))??Fo(n.customError?.(e))??Fo(n.localeError?.(e))??"Invalid input";r.message=o}if(delete r.inst,delete r.continue,!t?.reportInput)delete r.input;return r}function Uo(e){if(e instanceof Set)return"set";if(e instanceof Map)return"map";if(e instanceof File)return"file";return"unknown"}function jo(e){if(Array.isArray(e))return"array";if(typeof e==="string")return"string";return"unknown"}function $d(e){let t=typeof e;switch(t){case"number":return Number.isNaN(e)?"nan":"number";case"object":{if(e===null)return"null";if(Array.isArray(e))return"array";let n=e;if(n&&Object.getPrototypeOf(n)!==Object.prototype&&"constructor"in n&&n.constructor)return n.constructor.name}}return t}function br(...e){let[t,n,r]=e;if(typeof t==="string")return{message:t,code:"custom",input:n,inst:r};return{...t}}function MN(e){return Object.entries(e).filter(([t,n])=>Number.isNaN(Number.parseInt(t,10))).map((t)=>t[1])}function yx(e){let t=atob(e),n=new Uint8Array(t.length);for(let r=0;r<t.length;r++)n[r]=t.charCodeAt(r);return n}function bx(e){let t="";for(let n=0;n<e.length;n++)t+=String.fromCharCode(e[n]);return btoa(t)}function LN(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),n="=".repeat((4-t.length%4)%4);return yx(t+n)}function WN(e){return bx(e).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function FN(e){let t=e.replace(/^0x/,"");if(t.length%2!==0)throw Error("Invalid hex string length");let n=new Uint8Array(t.length/2);for(let r=0;r<t.length;r+=2)n[r/2]=Number.parseInt(t.slice(r,r+2),16);return n}function GN(e){return Array.from(e).map((t)=>t.toString(16).padStart(2,"0")).join("")}class vx{constructor(...e){}}var Sx=(e,t)=>{e.name="$ZodError",Object.defineProperty(e,"_zod",{value:e._zod,enumerable:!1}),Object.defineProperty(e,"issues",{value:t,enumerable:!1}),e.message=JSON.stringify(t,hr,2),Object.defineProperty(e,"toString",{value:()=>e.message,enumerable:!1})},Ho=g("$ZodError",Sx),ke=g("$ZodError",Sx,{Parent:Error});function vr(e,t=(n)=>n.message){let n={},r=[];for(let o of e.issues)if(o.path.length>0)n[o.path[0]]=n[o.path[0]]||[],n[o.path[0]].push(t(o));else r.push(t(o));return{formErrors:r,fieldErrors:n}}function Sr(e,t=(n)=>n.message){let n={_errors:[]},r=(o)=>{for(let i of o.issues)if(i.code==="invalid_union"&&i.errors.length)i.errors.map((s)=>r({issues:s}));else if(i.code==="invalid_key")r({issues:i.issues});else if(i.code==="invalid_element")r({issues:i.issues});else if(i.path.length===0)n._errors.push(t(i));else{let s=n,a=0;while(a<i.path.length){let c=i.path[a];if(a!==i.path.length-1)s[c]=s[c]||{_errors:[]};else s[c]=s[c]||{_errors:[]},s[c]._errors.push(t(i));s=s[c],a++}}};return r(e),n}function va(e,t=(n)=>n.message){let n={errors:[]},r=(o,i=[])=>{var s,a;for(let c of o.issues)if(c.code==="invalid_union"&&c.errors.length)c.errors.map((l)=>r({issues:l},c.path));else if(c.code==="invalid_key")r({issues:c.issues},c.path);else if(c.code==="invalid_element")r({issues:c.issues},c.path);else{let l=[...i,...c.path];if(l.length===0){n.errors.push(t(c));continue}let u=n,d=0;while(d<l.length){let f=l[d],m=d===l.length-1;if(typeof f==="string")u.properties??(u.properties={}),(s=u.properties)[f]??(s[f]={errors:[]}),u=u.properties[f];else u.items??(u.items=[]),(a=u.items)[f]??(a[f]={errors:[]}),u=u.items[f];if(m)u.errors.push(t(c));d++}}};return r(e),n}function xx(e){let t=[],n=e.map((r)=>typeof r==="object"?r.key:r);for(let r of n)if(typeof r==="number")t.push(`[${r}]`);else if(typeof r==="symbol")t.push(`[${JSON.stringify(String(r))}]`);else if(/[^\w$]/.test(r))t.push(`[${JSON.stringify(r)}]`);else{if(t.length)t.push(".");t.push(r)}return t.join("")}function Sa(e){let t=[],n=[...e.issues].sort((r,o)=>(r.path??[]).length-(o.path??[]).length);for(let r of n)if(t.push(`\u2716 ${r.message}`),r.path?.length)t.push(`  \u2192 at ${xx(r.path)}`);return t.join(`
 `)}var xr=(e)=>(t,n,r,o)=>{let i=r?Object.assign(r,{async:!1}):{async:!1},s=t._zod.run({value:n,issues:[]},i);if(s instanceof Promise)throw new xt;if(s.issues.length){let a=new(o?.Err??e)(s.issues.map((c)=>Pe(c,i,se())));throw ya(a,o?.callee),a}return s.value},xa=xr(ke),_r=(e)=>async(t,n,r,o)=>{let i=r?Object.assign(r,{async:!0}):{async:!0},s=t._zod.run({value:n,issues:[]},i);if(s instanceof Promise)s=await s;if(s.issues.length){let a=new(o?.Err??e)(s.issues.map((c)=>Pe(c,i,se())));throw ya(a,o?.callee),a}return s.value},_a=_r(ke),Cr=(e)=>(t,n,r)=>{let o=r?{...r,async:!1}:{async:!1},i=t._zod.run({value:n,issues:[]},o);if(i instanceof Promise)throw new xt;return i.issues.length?{success:!1,error:new(e??Ho)(i.issues.map((s)=>Pe(s,o,se())))}:{success:!0,data:i.value}},Md=Cr(ke),wr=(e)=>async(t,n,r)=>{let o=r?Object.assign(r,{async:!0}):{async:!0},i=t._zod.run({value:n,issues:[]},o);if(i instanceof Promise)i=await i;return i.issues.length?{success:!1,error:new e(i.issues.map((s)=>Pe(s,o,se())))}:{success:!0,data:i.value}},Ld=wr(ke),Ca=(e)=>(t,n,r)=>{let o=r?Object.assign(r,{direction:"backward"}):{direction:"backward"};return xr(e)(t,n,o)},BN=Ca(ke),wa=(e)=>(t,n,r)=>xr(e)(t,n,r),UN=wa(ke),Ra=(e)=>async(t,n,r)=>{let o=r?Object.assign(r,{direction:"backward"}):{direction:"backward"};return _r(e)(t,n,o)},jN=Ra(ke),Ea=(e)=>async(t,n,r)=>_r(e)(t,n,r),HN=Ea(ke),Pa=(e)=>(t,n,r)=>{let o=r?Object.assign(r,{direction:"backward"}):{direction:"backward"};return Cr(e)(t,n,o)},VN=Pa(ke),ka=(e)=>(t,n,r)=>Cr(e)(t,n,r),qN=ka(ke),Aa=(e)=>async(t,n,r)=>{let o=r?Object.assign(r,{direction:"backward"}):{direction:"backward"};return wr(e)(t,n,o)},KN=Aa(ke),Ta=(e)=>async(t,n,r)=>wr(e)(t,n,r),YN=Ta(ke);var Fe={};mn(Fe,{base64:()=>em,base64url:()=>Ia,bigint:()=>sm,boolean:()=>cm,browserEmail:()=>oD,cidrv4:()=>Xd,cidrv6:()=>Qd,cuid:()=>Wd,cuid2:()=>Fd,date:()=>nm,datetime:()=>om,domain:()=>aD,duration:()=>jd,e164:()=>tm,email:()=>Vd,emoji:()=>qd,extendedDuration:()=>JN,guid:()=>Hd,hex:()=>cD,hostname:()=>sD,html5Email:()=>tD,idnEmail:()=>rD,integer:()=>am,ipv4:()=>Kd,ipv6:()=>Yd,ksuid:()=>Bd,lowercase:()=>dm,mac:()=>Jd,md5_base64:()=>uD,md5_base64url:()=>dD,md5_hex:()=>lD,nanoid:()=>Ud,null:()=>lm,number:()=>Vo,rfc5322Email:()=>nD,sha1_base64:()=>fD,sha1_base64url:()=>pD,sha1_hex:()=>mD,sha256_base64:()=>hD,sha256_base64url:()=>yD,sha256_hex:()=>gD,sha384_base64:()=>vD,sha384_base64url:()=>SD,sha384_hex:()=>bD,sha512_base64:()=>_D,sha512_base64url:()=>CD,sha512_hex:()=>xD,string:()=>im,time:()=>rm,ulid:()=>Gd,undefined:()=>um,unicodeEmail:()=>_x,uppercase:()=>mm,uuid:()=>$n,uuid4:()=>XN,uuid6:()=>QN,uuid7:()=>eD,xid:()=>Zd});var Wd=/^[cC][^\s-]{8,}$/,Fd=/^[0-9a-z]+$/,Gd=/^[0-9A-HJKMNP-TV-Za-hjkmnp-tv-z]{26}$/,Zd=/^[0-9a-vA-V]{20}$/,Bd=/^[A-Za-z0-9]{27}$/,Ud=/^[a-zA-Z0-9_-]{21}$/,jd=/^P(?:(\d+W)|(?!.*W)(?=\d|T\d)(\d+Y)?(\d+M)?(\d+D)?(T(?=\d)(\d+H)?(\d+M)?(\d+([.,]\d+)?S)?)?)$/,JN=/^[-+]?P(?!$)(?:(?:[-+]?\d+Y)|(?:[-+]?\d+[.,]\d+Y$))?(?:(?:[-+]?\d+M)|(?:[-+]?\d+[.,]\d+M$))?(?:(?:[-+]?\d+W)|(?:[-+]?\d+[.,]\d+W$))?(?:(?:[-+]?\d+D)|(?:[-+]?\d+[.,]\d+D$))?(?:T(?=[\d+-])(?:(?:[-+]?\d+H)|(?:[-+]?\d+[.,]\d+H$))?(?:(?:[-+]?\d+M)|(?:[-+]?\d+[.,]\d+M$))?(?:[-+]?\d+(?:[.,]\d+)?S)?)??$/,Hd=/^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$/,$n=(e)=>{if(!e)return/^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/;return new RegExp(`^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-${e}[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$`)},XN=$n(4),QN=$n(6),eD=$n(7),Vd=/^(?!\.)(?!.*\.\.)([A-Za-z0-9_'+\-\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$/,tD=/^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/,nD=/^(([^<>()\[\]\\.,;:\s@"]+(\.[^<>()\[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/,_x=/^[^\s@"]{1,64}@[^\s@]{1,255}$/u,rD=_x,oD=/^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/,iD="^(\\p{Extended_Pictographic}|\\p{Emoji_Component})+$";function qd(){return new RegExp(iD,"u")}var Kd=/^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/,Yd=/^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:))$/,Jd=(e)=>{let t=Ke(e??":");return new RegExp(`^(?:[0-9A-F]{2}${t}){5}[0-9A-F]{2}$|^(?:[0-9a-f]{2}${t}){5}[0-9a-f]{2}$`)},Xd=/^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\/([0-9]|[1-2][0-9]|3[0-2])$/,Qd=/^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|::|([0-9a-fA-F]{1,4})?::([0-9a-fA-F]{1,4}:?){0,6})\/(12[0-8]|1[01][0-9]|[1-9]?[0-9])$/,em=/^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0-9a-zA-Z+/]{3}=))?$/,Ia=/^[A-Za-z0-9_-]*$/,sD=/^(?=.{1,253}\.?$)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[-0-9a-zA-Z]{0,61}[0-9a-zA-Z])?)*\.?$/,aD=/^([a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/,tm=/^\+[1-9]\d{6,14}$/,Cx="(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))",nm=new RegExp(`^${Cx}$`);function wx(e){return typeof e.precision==="number"?e.precision===-1?"(?:[01]\\d|2[0-3]):[0-5]\\d":e.precision===0?"(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d":`(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d\\.\\d{${e.precision}}`:"(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?"}function rm(e){return new RegExp(`^${wx(e)}$`)}function om(e){let t=wx({precision:e.precision}),n=["Z"];if(e.local)n.push("");if(e.offset)n.push("([+-](?:[01]\\d|2[0-3]):[0-5]\\d)");let r=`${t}(?:${n.join("|")})`;return new RegExp(`^${Cx}T(?:${r})$`)}var im=(e)=>{let t=e?`[\\s\\S]{${e?.minimum??0},${e?.maximum??""}}`:"[\\s\\S]*";return new RegExp(`^${t}$`)},sm=/^-?\d+n?$/,am=/^-?\d+$/,Vo=/^-?\d+(?:\.\d+)?$/,cm=/^(?:true|false)$/i,lm=/^null$/i;var um=/^undefined$/i;var dm=/^[^A-Z]*$/,mm=/^[^a-z]*$/,cD=/^[0-9a-fA-F]*$/;function qo(e,t){return new RegExp(`^[A-Za-z0-9+/]{${e}}${t}$`)}function Ko(e){return new RegExp(`^[A-Za-z0-9_-]{${e}}$`)}var lD=/^[0-9a-fA-F]{32}$/,uD=qo(22,"=="),dD=Ko(22),mD=/^[0-9a-fA-F]{40}$/,fD=qo(27,"="),pD=Ko(27),gD=/^[0-9a-fA-F]{64}$/,hD=qo(43,"="),yD=Ko(43),bD=/^[0-9a-fA-F]{96}$/,vD=qo(64,""),SD=Ko(64),xD=/^[0-9a-fA-F]{128}$/,_D=qo(86,"=="),CD=Ko(86);var J=g("$ZodCheck",(e,t)=>{var n;e._zod??(e._zod={}),e._zod.def=t,(n=e._zod).onattach??(n.onattach=[])}),Ex={number:"number",bigint:"bigint",object:"date"},Oa=g("$ZodCheckLessThan",(e,t)=>{J.init(e,t);let n=Ex[typeof t.value];e._zod.onattach.push((r)=>{let o=r._zod.bag,i=(t.inclusive?o.maximum:o.exclusiveMaximum)??Number.POSITIVE_INFINITY;if(t.value<i)if(t.inclusive)o.maximum=t.value;else o.exclusiveMaximum=t.value}),e._zod.check=(r)=>{if(t.inclusive?r.value<=t.value:r.value<t.value)return;r.issues.push({origin:n,code:"too_big",maximum:typeof t.value==="object"?t.value.getTime():t.value,input:r.value,inclusive:t.inclusive,inst:e,continue:!t.abort})}}),za=g("$ZodCheckGreaterThan",(e,t)=>{J.init(e,t);let n=Ex[typeof t.value];e._zod.onattach.push((r)=>{let o=r._zod.bag,i=(t.inclusive?o.minimum:o.exclusiveMinimum)??Number.NEGATIVE_INFINITY;if(t.value>i)if(t.inclusive)o.minimum=t.value;else o.exclusiveMinimum=t.value}),e._zod.check=(r)=>{if(t.inclusive?r.value>=t.value:r.value>t.value)return;r.issues.push({origin:n,code:"too_small",minimum:typeof t.value==="object"?t.value.getTime():t.value,input:r.value,inclusive:t.inclusive,inst:e,continue:!t.abort})}}),fm=g("$ZodCheckMultipleOf",(e,t)=>{J.init(e,t),e._zod.onattach.push((n)=>{var r;(r=n._zod.bag).multipleOf??(r.multipleOf=t.value)}),e._zod.check=(n)=>{if(typeof n.value!==typeof t.value)throw Error("Cannot mix number and bigint in multiple_of check.");if(typeof n.value==="bigint"?n.value%t.value===BigInt(0):kd(n.value,t.value)===0)return;n.issues.push({origin:typeof n.value,code:"not_multiple_of",divisor:t.value,input:n.value,inst:e,continue:!t.abort})}}),pm=g("$ZodCheckNumberFormat",(e,t)=>{J.init(e,t),t.format=t.format||"float64";let n=t.format?.includes("int"),r=n?"int":"number",[o,i]=Nd[t.format];e._zod.onattach.push((s)=>{let a=s._zod.bag;if(a.format=t.format,a.minimum=o,a.maximum=i,n)a.pattern=am}),e._zod.check=(s)=>{let a=s.value;if(n){if(!Number.isInteger(a)){s.issues.push({expected:r,format:t.format,code:"invalid_type",continue:!1,input:a,inst:e});return}if(!Number.isSafeInteger(a)){if(a>0)s.issues.push({input:a,code:"too_big",maximum:Number.MAX_SAFE_INTEGER,note:"Integers must be within the safe integer range.",inst:e,origin:r,inclusive:!0,continue:!t.abort});else s.issues.push({input:a,code:"too_small",minimum:Number.MIN_SAFE_INTEGER,note:"Integers must be within the safe integer range.",inst:e,origin:r,inclusive:!0,continue:!t.abort});return}}if(a<o)s.issues.push({origin:"number",input:a,code:"too_small",minimum:o,inclusive:!0,inst:e,continue:!t.abort});if(a>i)s.issues.push({origin:"number",input:a,code:"too_big",maximum:i,inclusive:!0,inst:e,continue:!t.abort})}}),gm=g("$ZodCheckBigIntFormat",(e,t)=>{J.init(e,t);let[n,r]=Dd[t.format];e._zod.onattach.push((o)=>{let i=o._zod.bag;i.format=t.format,i.minimum=n,i.maximum=r}),e._zod.check=(o)=>{let i=o.value;if(i<n)o.issues.push({origin:"bigint",input:i,code:"too_small",minimum:n,inclusive:!0,inst:e,continue:!t.abort});if(i>r)o.issues.push({origin:"bigint",input:i,code:"too_big",maximum:r,inclusive:!0,inst:e,continue:!t.abort})}}),hm=g("$ZodCheckMaxSize",(e,t)=>{var n;J.init(e,t),(n=e._zod.def).when??(n.when=(r)=>{let o=r.value;return!on(o)&&o.size!==void 0}),e._zod.onattach.push((r)=>{let o=r._zod.bag.maximum??Number.POSITIVE_INFINITY;if(t.maximum<o)r._zod.bag.maximum=t.maximum}),e._zod.check=(r)=>{let o=r.value;if(o.size<=t.maximum)return;r.issues.push({origin:Uo(o),code:"too_big",maximum:t.maximum,inclusive:!0,input:o,inst:e,continue:!t.abort})}}),ym=g("$ZodCheckMinSize",(e,t)=>{var n;J.init(e,t),(n=e._zod.def).when??(n.when=(r)=>{let o=r.value;return!on(o)&&o.size!==void 0}),e._zod.onattach.push((r)=>{let o=r._zod.bag.minimum??Number.NEGATIVE_INFINITY;if(t.minimum>o)r._zod.bag.minimum=t.minimum}),e._zod.check=(r)=>{let o=r.value;if(o.size>=t.minimum)return;r.issues.push({origin:Uo(o),code:"too_small",minimum:t.minimum,inclusive:!0,input:o,inst:e,continue:!t.abort})}}),bm=g("$ZodCheckSizeEquals",(e,t)=>{var n;J.init(e,t),(n=e._zod.def).when??(n.when=(r)=>{let o=r.value;return!on(o)&&o.size!==void 0}),e._zod.onattach.push((r)=>{let o=r._zod.bag;o.minimum=t.size,o.maximum=t.size,o.size=t.size}),e._zod.check=(r)=>{let o=r.value,i=o.size;if(i===t.size)return;let s=i>t.size;r.issues.push({origin:Uo(o),...s?{code:"too_big",maximum:t.size}:{code:"too_small",minimum:t.size},inclusive:!0,exact:!0,input:r.value,inst:e,continue:!t.abort})}}),vm=g("$ZodCheckMaxLength",(e,t)=>{var n;J.init(e,t),(n=e._zod.def).when??(n.when=(r)=>{let o=r.value;return!on(o)&&o.length!==void 0}),e._zod.onattach.push((r)=>{let o=r._zod.bag.maximum??Number.POSITIVE_INFINITY;if(t.maximum<o)r._zod.bag.maximum=t.maximum}),e._zod.check=(r)=>{let o=r.value;if(o.length<=t.maximum)return;let s=jo(o);r.issues.push({origin:s,code:"too_big",maximum:t.maximum,inclusive:!0,input:o,inst:e,continue:!t.abort})}}),Sm=g("$ZodCheckMinLength",(e,t)=>{var n;J.init(e,t),(n=e._zod.def).when??(n.when=(r)=>{let o=r.value;return!on(o)&&o.length!==void 0}),e._zod.onattach.push((r)=>{let o=r._zod.bag.minimum??Number.NEGATIVE_INFINITY;if(t.minimum>o)r._zod.bag.minimum=t.minimum}),e._zod.check=(r)=>{let o=r.value;if(o.length>=t.minimum)return;let s=jo(o);r.issues.push({origin:s,code:"too_small",minimum:t.minimum,inclusive:!0,input:o,inst:e,continue:!t.abort})}}),xm=g("$ZodCheckLengthEquals",(e,t)=>{var n;J.init(e,t),(n=e._zod.def).when??(n.when=(r)=>{let o=r.value;return!on(o)&&o.length!==void 0}),e._zod.onattach.push((r)=>{let o=r._zod.bag;o.minimum=t.length,o.maximum=t.length,o.length=t.length}),e._zod.check=(r)=>{let o=r.value,i=o.length;if(i===t.length)return;let s=jo(o),a=i>t.length;r.issues.push({origin:s,...a?{code:"too_big",maximum:t.length}:{code:"too_small",minimum:t.length},inclusive:!0,exact:!0,input:r.value,inst:e,continue:!t.abort})}}),Rr=g("$ZodCheckStringFormat",(e,t)=>{var n,r;if(J.init(e,t),e._zod.onattach.push((o)=>{let i=o._zod.bag;if(i.format=t.format,t.pattern)i.patterns??(i.patterns=new Set),i.patterns.add(t.pattern)}),t.pattern)(n=e._zod).check??(n.check=(o)=>{if(t.pattern.lastIndex=0,t.pattern.test(o.value))return;o.issues.push({origin:"string",code:"invalid_format",format:t.format,input:o.value,...t.pattern?{pattern:t.pattern.toString()}:{},inst:e,continue:!t.abort})});else(r=e._zod).check??(r.check=()=>{})}),_m=g("$ZodCheckRegex",(e,t)=>{Rr.init(e,t),e._zod.check=(n)=>{if(t.pattern.lastIndex=0,t.pattern.test(n.value))return;n.issues.push({origin:"string",code:"invalid_format",format:"regex",input:n.value,pattern:t.pattern.toString(),inst:e,continue:!t.abort})}}),Cm=g("$ZodCheckLowerCase",(e,t)=>{t.pattern??(t.pattern=dm),Rr.init(e,t)}),wm=g("$ZodCheckUpperCase",(e,t)=>{t.pattern??(t.pattern=mm),Rr.init(e,t)}),Rm=g("$ZodCheckIncludes",(e,t)=>{J.init(e,t);let n=Ke(t.includes),r=new RegExp(typeof t.position==="number"?`^.{${t.position}}${n}`:n);t.pattern=r,e._zod.onattach.push((o)=>{let i=o._zod.bag;i.patterns??(i.patterns=new Set),i.patterns.add(r)}),e._zod.check=(o)=>{if(o.value.includes(t.includes,t.position))return;o.issues.push({origin:"string",code:"invalid_format",format:"includes",includes:t.includes,input:o.value,inst:e,continue:!t.abort})}}),Em=g("$ZodCheckStartsWith",(e,t)=>{J.init(e,t);let n=new RegExp(`^${Ke(t.prefix)}.*`);t.pattern??(t.pattern=n),e._zod.onattach.push((r)=>{let o=r._zod.bag;o.patterns??(o.patterns=new Set),o.patterns.add(n)}),e._zod.check=(r)=>{if(r.value.startsWith(t.prefix))return;r.issues.push({origin:"string",code:"invalid_format",format:"starts_with",prefix:t.prefix,input:r.value,inst:e,continue:!t.abort})}}),Pm=g("$ZodCheckEndsWith",(e,t)=>{J.init(e,t);let n=new RegExp(`.*${Ke(t.suffix)}$`);t.pattern??(t.pattern=n),e._zod.onattach.push((r)=>{let o=r._zod.bag;o.patterns??(o.patterns=new Set),o.patterns.add(n)}),e._zod.check=(r)=>{if(r.value.endsWith(t.suffix))return;r.issues.push({origin:"string",code:"invalid_format",format:"ends_with",suffix:t.suffix,input:r.value,inst:e,continue:!t.abort})}});function Rx(e,t,n){if(e.issues.length)t.issues.push(...We(n,e.issues))}var km=g("$ZodCheckProperty",(e,t)=>{J.init(e,t),e._zod.check=(n)=>{let r=t.schema._zod.run({value:n.value[t.property],issues:[]},{});if(r instanceof Promise)return r.then((o)=>Rx(o,n,t.property));Rx(r,n,t.property);return}}),Am=g("$ZodCheckMimeType",(e,t)=>{J.init(e,t);let n=new Set(t.mime);e._zod.onattach.push((r)=>{r._zod.bag.mime=t.mime}),e._zod.check=(r)=>{if(n.has(r.value.type))return;r.issues.push({code:"invalid_value",values:t.mime,input:r.value.type,inst:e,continue:!t.abort})}}),Tm=g("$ZodCheckOverwrite",(e,t)=>{J.init(e,t),e._zod.check=(n)=>{n.value=t.tx(n.value)}});class Na{constructor(e=[]){if(this.content=[],this.indent=0,this)this.args=e}indented(e){this.indent+=1,e(this),this.indent-=1}write(e){if(typeof e==="function"){e(this,{execution:"sync"}),e(this,{execution:"async"});return}let n=e.split(`
 `).filter((i)=>i),r=Math.min(...n.map((i)=>i.length-i.trimStart().length)),o=n.map((i)=>i.slice(r)).map((i)=>" ".repeat(this.indent*2)+i);for(let i of o)this.content.push(i)}compile(){let e=Function,t=this?.args,r=[...(this?.content??[""]).map((o)=>`  ${o}`)];return new e(...t,r.join(`
 `))}}var Im={major:4,minor:3,patch:5};var D=g("$ZodType",(e,t)=>{var n;e??(e={}),e._zod.def=t,e._zod.bag=e._zod.bag||{},e._zod.version=Im;let r=[...e._zod.def.checks??[]];if(e._zod.traits.has("$ZodCheck"))r.unshift(e);for(let o of r)for(let i of o._zod.onattach)i(e);if(r.length===0)(n=e._zod).deferred??(n.deferred=[]),e._zod.deferred?.push(()=>{e._zod.run=e._zod.parse});else{let o=(s,a,c)=>{let l=cn(s),u;for(let d of a){if(d._zod.def.when){if(!d._zod.def.when(s))continue}else if(l)continue;let f=s.issues.length,m=d._zod.check(s);if(m instanceof Promise&&c?.async===!1)throw new xt;if(u||m instanceof Promise)u=(u??Promise.resolve()).then(async()=>{if(await m,s.issues.length===f)return;if(!l)l=cn(s,f)});else{if(s.issues.length===f)continue;if(!l)l=cn(s,f)}}if(u)return u.then(()=>s);return s},i=(s,a,c)=>{if(cn(s))return s.aborted=!0,s;let l=o(a,r,c);if(l instanceof Promise){if(c.async===!1)throw new xt;return l.then((u)=>e._zod.parse(u,c))}return e._zod.parse(l,c)};e._zod.run=(s,a)=>{if(a.skipChecks)return e._zod.parse(s,a);if(a.direction==="backward"){let l=e._zod.parse({value:s.value,issues:[]},{...a,skipChecks:!0});if(l instanceof Promise)return l.then((u)=>i(u,s,a));return i(l,s,a)}let c=e._zod.parse(s,a);if(c instanceof Promise){if(a.async===!1)throw new xt;return c.then((l)=>o(l,r,a))}return o(c,r,a)}}F(e,"~standard",()=>({validate:(o)=>{try{let i=Md(e,o);return i.success?{value:i.data}:{issues:i.error?.issues}}catch(i){return Ld(e,o).then((s)=>s.success?{value:s.data}:{issues:s.error?.issues})}},vendor:"zod",version:1}))}),Mn=g("$ZodString",(e,t)=>{D.init(e,t),e._zod.pattern=[...e?._zod.bag?.patterns??[]].pop()??im(e._zod.bag),e._zod.parse=(n,r)=>{if(t.coerce)try{n.value=String(n.value)}catch(o){}if(typeof n.value==="string")return n;return n.issues.push({expected:"string",code:"invalid_type",input:n.value,inst:e}),n}}),q=g("$ZodStringFormat",(e,t)=>{Rr.init(e,t),Mn.init(e,t)}),zm=g("$ZodGUID",(e,t)=>{t.pattern??(t.pattern=Hd),q.init(e,t)}),Nm=g("$ZodUUID",(e,t)=>{if(t.version){let r={v1:1,v2:2,v3:3,v4:4,v5:5,v6:6,v7:7,v8:8}[t.version];if(r===void 0)throw Error(`Invalid UUID version: "${t.version}"`);t.pattern??(t.pattern=$n(r))}else t.pattern??(t.pattern=$n());q.init(e,t)}),Dm=g("$ZodEmail",(e,t)=>{t.pattern??(t.pattern=Vd),q.init(e,t)}),$m=g("$ZodURL",(e,t)=>{q.init(e,t),e._zod.check=(n)=>{try{let r=n.value.trim(),o=new URL(r);if(t.hostname){if(t.hostname.lastIndex=0,!t.hostname.test(o.hostname))n.issues.push({code:"invalid_format",format:"url",note:"Invalid hostname",pattern:t.hostname.source,input:n.value,inst:e,continue:!t.abort})}if(t.protocol){if(t.protocol.lastIndex=0,!t.protocol.test(o.protocol.endsWith(":")?o.protocol.slice(0,-1):o.protocol))n.issues.push({code:"invalid_format",format:"url",note:"Invalid protocol",pattern:t.protocol.source,input:n.value,inst:e,continue:!t.abort})}if(t.normalize)n.value=o.href;else n.value=r;return}catch(r){n.issues.push({code:"invalid_format",format:"url",input:n.value,inst:e,continue:!t.abort})}}}),Mm=g("$ZodEmoji",(e,t)=>{t.pattern??(t.pattern=qd()),q.init(e,t)}),Lm=g("$ZodNanoID",(e,t)=>{t.pattern??(t.pattern=Ud),q.init(e,t)}),Wm=g("$ZodCUID",(e,t)=>{t.pattern??(t.pattern=Wd),q.init(e,t)}),Fm=g("$ZodCUID2",(e,t)=>{t.pattern??(t.pattern=Fd),q.init(e,t)}),Gm=g("$ZodULID",(e,t)=>{t.pattern??(t.pattern=Gd),q.init(e,t)}),Zm=g("$ZodXID",(e,t)=>{t.pattern??(t.pattern=Zd),q.init(e,t)}),Bm=g("$ZodKSUID",(e,t)=>{t.pattern??(t.pattern=Bd),q.init(e,t)}),Um=g("$ZodISODateTime",(e,t)=>{t.pattern??(t.pattern=om(t)),q.init(e,t)}),jm=g("$ZodISODate",(e,t)=>{t.pattern??(t.pattern=nm),q.init(e,t)}),Hm=g("$ZodISOTime",(e,t)=>{t.pattern??(t.pattern=rm(t)),q.init(e,t)}),Vm=g("$ZodISODuration",(e,t)=>{t.pattern??(t.pattern=jd),q.init(e,t)}),qm=g("$ZodIPv4",(e,t)=>{t.pattern??(t.pattern=Kd),q.init(e,t),e._zod.bag.format="ipv4"}),Km=g("$ZodIPv6",(e,t)=>{t.pattern??(t.pattern=Yd),q.init(e,t),e._zod.bag.format="ipv6",e._zod.check=(n)=>{try{new URL(`http://[${n.value}]`)}catch{n.issues.push({code:"invalid_format",format:"ipv6",input:n.value,inst:e,continue:!t.abort})}}}),Ym=g("$ZodMAC",(e,t)=>{t.pattern??(t.pattern=Jd(t.delimiter)),q.init(e,t),e._zod.bag.format="mac"}),Jm=g("$ZodCIDRv4",(e,t)=>{t.pattern??(t.pattern=Xd),q.init(e,t)}),Xm=g("$ZodCIDRv6",(e,t)=>{t.pattern??(t.pattern=Qd),q.init(e,t),e._zod.check=(n)=>{let r=n.value.split("/");try{if(r.length!==2)throw Error();let[o,i]=r;if(!i)throw Error();let s=Number(i);if(`${s}`!==i)throw Error();if(s<0||s>128)throw Error();new URL(`http://[${o}]`)}catch{n.issues.push({code:"invalid_format",format:"cidrv6",input:n.value,inst:e,continue:!t.abort})}}});function Qm(e){if(e==="")return!0;if(e.length%4!==0)return!1;try{return atob(e),!0}catch{return!1}}var ef=g("$ZodBase64",(e,t)=>{t.pattern??(t.pattern=em),q.init(e,t),e._zod.bag.contentEncoding="base64",e._zod.check=(n)=>{if(Qm(n.value))return;n.issues.push({code:"invalid_format",format:"base64",input:n.value,inst:e,continue:!t.abort})}});function Wx(e){if(!Ia.test(e))return!1;let t=e.replace(/[-_]/g,(r)=>r==="-"?"+":"/"),n=t.padEnd(Math.ceil(t.length/4)*4,"=");return Qm(n)}var tf=g("$ZodBase64URL",(e,t)=>{t.pattern??(t.pattern=Ia),q.init(e,t),e._zod.bag.contentEncoding="base64url",e._zod.check=(n)=>{if(Wx(n.value))return;n.issues.push({code:"invalid_format",format:"base64url",input:n.value,inst:e,continue:!t.abort})}}),nf=g("$ZodE164",(e,t)=>{t.pattern??(t.pattern=tm),q.init(e,t)});function Fx(e,t=null){try{let n=e.split(".");if(n.length!==3)return!1;let[r]=n;if(!r)return!1;let o=JSON.parse(atob(r));if("typ"in o&&o?.typ!=="JWT")return!1;if(!o.alg)return!1;if(t&&(!("alg"in o)||o.alg!==t))return!1;return!0}catch{return!1}}var rf=g("$ZodJWT",(e,t)=>{q.init(e,t),e._zod.check=(n)=>{if(Fx(n.value,t.alg))return;n.issues.push({code:"invalid_format",format:"jwt",input:n.value,inst:e,continue:!t.abort})}}),of=g("$ZodCustomStringFormat",(e,t)=>{q.init(e,t),e._zod.check=(n)=>{if(t.fn(n.value))return;n.issues.push({code:"invalid_format",format:t.format,input:n.value,inst:e,continue:!t.abort})}}),Fa=g("$ZodNumber",(e,t)=>{D.init(e,t),e._zod.pattern=e._zod.bag.pattern??Vo,e._zod.parse=(n,r)=>{if(t.coerce)try{n.value=Number(n.value)}catch(s){}let o=n.value;if(typeof o==="number"&&!Number.isNaN(o)&&Number.isFinite(o))return n;let i=typeof o==="number"?Number.isNaN(o)?"NaN":!Number.isFinite(o)?"Infinity":void 0:void 0;return n.issues.push({expected:"number",code:"invalid_type",input:o,inst:e,...i?{received:i}:{}}),n}}),sf=g("$ZodNumberFormat",(e,t)=>{pm.init(e,t),Fa.init(e,t)}),Yo=g("$ZodBoolean",(e,t)=>{D.init(e,t),e._zod.pattern=cm,e._zod.parse=(n,r)=>{if(t.coerce)try{n.value=Boolean(n.value)}catch(i){}let o=n.value;if(typeof o==="boolean")return n;return n.issues.push({expected:"boolean",code:"invalid_type",input:o,inst:e}),n}}),Ga=g("$ZodBigInt",(e,t)=>{D.init(e,t),e._zod.pattern=sm,e._zod.parse=(n,r)=>{if(t.coerce)try{n.value=BigInt(n.value)}catch(o){}if(typeof n.value==="bigint")return n;return n.issues.push({expected:"bigint",code:"invalid_type",input:n.value,inst:e}),n}}),af=g("$ZodBigIntFormat",(e,t)=>{gm.init(e,t),Ga.init(e,t)}),cf=g("$ZodSymbol",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{let o=n.value;if(typeof o==="symbol")return n;return n.issues.push({expected:"symbol",code:"invalid_type",input:o,inst:e}),n}}),lf=g("$ZodUndefined",(e,t)=>{D.init(e,t),e._zod.pattern=um,e._zod.values=new Set([void 0]),e._zod.optin="optional",e._zod.optout="optional",e._zod.parse=(n,r)=>{let o=n.value;if(typeof o>"u")return n;return n.issues.push({expected:"undefined",code:"invalid_type",input:o,inst:e}),n}}),uf=g("$ZodNull",(e,t)=>{D.init(e,t),e._zod.pattern=lm,e._zod.values=new Set([null]),e._zod.parse=(n,r)=>{let o=n.value;if(o===null)return n;return n.issues.push({expected:"null",code:"invalid_type",input:o,inst:e}),n}}),df=g("$ZodAny",(e,t)=>{D.init(e,t),e._zod.parse=(n)=>n}),mf=g("$ZodUnknown",(e,t)=>{D.init(e,t),e._zod.parse=(n)=>n}),ff=g("$ZodNever",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>(n.issues.push({expected:"never",code:"invalid_type",input:n.value,inst:e}),n)}),pf=g("$ZodVoid",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{let o=n.value;if(typeof o>"u")return n;return n.issues.push({expected:"void",code:"invalid_type",input:o,inst:e}),n}}),gf=g("$ZodDate",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{if(t.coerce)try{n.value=new Date(n.value)}catch(a){}let o=n.value,i=o instanceof Date;if(i&&!Number.isNaN(o.getTime()))return n;return n.issues.push({expected:"date",code:"invalid_type",input:o,...i?{received:"Invalid Date"}:{},inst:e}),n}});function kx(e,t,n){if(e.issues.length)t.issues.push(...We(n,e.issues));t.value[n]=e.value}var hf=g("$ZodArray",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{let o=n.value;if(!Array.isArray(o))return n.issues.push({expected:"array",code:"invalid_type",input:o,inst:e}),n;n.value=Array(o.length);let i=[];for(let s=0;s<o.length;s++){let a=o[s],c=t.element._zod.run({value:a,issues:[]},r);if(c instanceof Promise)i.push(c.then((l)=>kx(l,n,s)));else kx(c,n,s)}if(i.length)return Promise.all(i).then(()=>n);return n}});function Wa(e,t,n,r,o){if(e.issues.length){if(o&&!(n in r))return;t.issues.push(...We(n,e.issues))}if(e.value===void 0){if(n in r)t.value[n]=void 0}else t.value[n]=e.value}function Gx(e){let t=Object.keys(e.shape);for(let r of t)if(!e.shape?.[r]?._zod?.traits?.has("$ZodType"))throw Error(`Invalid element at key "${r}": expected a Zod schema`);let n=zd(e.shape);return{...e,keys:t,keySet:new Set(t),numKeys:t.length,optionalKeys:new Set(n)}}function Zx(e,t,n,r,o,i){let s=[],a=o.keySet,c=o.catchall._zod,l=c.def.type,u=c.optout==="optional";for(let d in t){if(a.has(d))continue;if(l==="never"){s.push(d);continue}let f=c.run({value:t[d],issues:[]},r);if(f instanceof Promise)e.push(f.then((m)=>Wa(m,n,d,t,u)));else Wa(f,n,d,t,u)}if(s.length)n.issues.push({code:"unrecognized_keys",keys:s,input:t,inst:i});if(!e.length)return n;return Promise.all(e).then(()=>n)}var Bx=g("$ZodObject",(e,t)=>{if(D.init(e,t),!Object.getOwnPropertyDescriptor(t,"shape")?.get){let a=t.shape;Object.defineProperty(t,"shape",{get:()=>{let c={...a};return Object.defineProperty(t,"shape",{value:c}),c}})}let r=yr(()=>Gx(t));F(e._zod,"propValues",()=>{let a=t.shape,c={};for(let l in a){let u=a[l]._zod;if(u.values){c[l]??(c[l]=new Set);for(let d of u.values)c[l].add(d)}}return c});let o=Dn,i=t.catchall,s;e._zod.parse=(a,c)=>{s??(s=r.value);let l=a.value;if(!o(l))return a.issues.push({expected:"object",code:"invalid_type",input:l,inst:e}),a;a.value={};let u=[],d=s.shape;for(let f of s.keys){let m=d[f],p=m._zod.optout==="optional",h=m._zod.run({value:l[f],issues:[]},c);if(h instanceof Promise)u.push(h.then((b)=>Wa(b,a,f,l,p)));else Wa(h,a,f,l,p)}if(!i)return u.length?Promise.all(u).then(()=>a):a;return Zx(u,l,a,c,r.value,e)}}),yf=g("$ZodObjectJIT",(e,t)=>{Bx.init(e,t);let n=e._zod.parse,r=yr(()=>Gx(t)),o=(f)=>{let m=new Na(["shape","payload","ctx"]),p=r.value,h=(w)=>{let E=ha(w);return`shape[${E}]._zod.run({ value: input[${E}], issues: [] }, ctx)`};m.write("const input = payload.value;");let b=Object.create(null),y=0;for(let w of p.keys)b[w]=`key_${y++}`;m.write("const newResult = {};");for(let w of p.keys){let E=b[w],P=ha(w),v=f[w]?._zod?.optout==="optional";if(m.write(`const ${E} = ${h(w)};`),v)m.write(`
@@ -95,6 +95,6 @@ ${qR(e.intent??"manual_only")}`,a}function qR(e){switch(e){case"hard_stop":retur
           newResult[${P}] = ${E}.value;
         }
         
-      `)}m.write("payload.value = newResult;"),m.write("return payload;");let R=m.compile();return(w,E)=>R(f,w,E)},i,s=Dn,a=!Wo.jitless,l=a&&Td.value,u=t.catchall,d;e._zod.parse=(f,m)=>{d??(d=r.value);let p=f.value;if(!s(p))return f.issues.push({expected:"object",code:"invalid_type",input:p,inst:e}),f;if(a&&l&&m?.async===!1&&m.jitless!==!0){if(!i)i=o(t.shape);if(f=i(f,m),!u)return f;return Zx([],p,f,m,d,e)}return n(f,m)}});function Ax(e,t,n,r){for(let i of e)if(i.issues.length===0)return t.value=i.value,t;let o=e.filter((i)=>!cn(i));if(o.length===1)return t.value=o[0].value,o[0];return t.issues.push({code:"invalid_union",input:t.value,inst:n,errors:e.map((i)=>i.issues.map((s)=>Pe(s,r,se())))}),t}var Jo=g("$ZodUnion",(e,t)=>{D.init(e,t),F(e._zod,"optin",()=>t.options.some((o)=>o._zod.optin==="optional")?"optional":void 0),F(e._zod,"optout",()=>t.options.some((o)=>o._zod.optout==="optional")?"optional":void 0),F(e._zod,"values",()=>{if(t.options.every((o)=>o._zod.values))return new Set(t.options.flatMap((o)=>Array.from(o._zod.values)));return}),F(e._zod,"pattern",()=>{if(t.options.every((o)=>o._zod.pattern)){let o=t.options.map((i)=>i._zod.pattern);return new RegExp(`^(${o.map((i)=>Zo(i.source)).join("|")})$`)}return});let n=t.options.length===1,r=t.options[0]._zod.run;e._zod.parse=(o,i)=>{if(n)return r(o,i);let s=!1,a=[];for(let c of t.options){let l=c._zod.run({value:o.value,issues:[]},i);if(l instanceof Promise)a.push(l),s=!0;else{if(l.issues.length===0)return l;a.push(l)}}if(!s)return Ax(a,o,e,i);return Promise.all(a).then((c)=>Ax(c,o,e,i))}});function Tx(e,t,n,r){let o=e.filter((i)=>i.issues.length===0);if(o.length===1)return t.value=o[0].value,t;if(o.length===0)t.issues.push({code:"invalid_union",input:t.value,inst:n,errors:e.map((i)=>i.issues.map((s)=>Pe(s,r,se())))});else t.issues.push({code:"invalid_union",input:t.value,inst:n,errors:[],inclusive:!1});return t}var bf=g("$ZodXor",(e,t)=>{Jo.init(e,t),t.inclusive=!1;let n=t.options.length===1,r=t.options[0]._zod.run;e._zod.parse=(o,i)=>{if(n)return r(o,i);let s=!1,a=[];for(let c of t.options){let l=c._zod.run({value:o.value,issues:[]},i);if(l instanceof Promise)a.push(l),s=!0;else a.push(l)}if(!s)return Tx(a,o,e,i);return Promise.all(a).then((c)=>Tx(c,o,e,i))}}),vf=g("$ZodDiscriminatedUnion",(e,t)=>{t.inclusive=!1,Jo.init(e,t);let n=e._zod.parse;F(e._zod,"propValues",()=>{let o={};for(let i of t.options){let s=i._zod.propValues;if(!s||Object.keys(s).length===0)throw Error(`Invalid discriminated union option at index "${t.options.indexOf(i)}"`);for(let[a,c]of Object.entries(s)){if(!o[a])o[a]=new Set;for(let l of c)o[a].add(l)}}return o});let r=yr(()=>{let o=t.options,i=new Map;for(let s of o){let a=s._zod.propValues?.[t.discriminator];if(!a||a.size===0)throw Error(`Invalid discriminated union option at index "${t.options.indexOf(s)}"`);for(let c of a){if(i.has(c))throw Error(`Duplicate discriminator value "${String(c)}"`);i.set(c,s)}}return i});e._zod.parse=(o,i)=>{let s=o.value;if(!Dn(s))return o.issues.push({code:"invalid_type",expected:"object",input:s,inst:e}),o;let a=r.value.get(s?.[t.discriminator]);if(a)return a._zod.run(o,i);if(t.unionFallback)return n(o,i);return o.issues.push({code:"invalid_union",errors:[],note:"No matching discriminator",discriminator:t.discriminator,input:s,path:[t.discriminator],inst:e}),o}}),Sf=g("$ZodIntersection",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{let o=n.value,i=t.left._zod.run({value:o,issues:[]},r),s=t.right._zod.run({value:o,issues:[]},r);if(i instanceof Promise||s instanceof Promise)return Promise.all([i,s]).then(([c,l])=>Ix(n,c,l));return Ix(n,i,s)}});function Om(e,t){if(e===t)return{valid:!0,data:e};if(e instanceof Date&&t instanceof Date&&+e===+t)return{valid:!0,data:e};if(an(e)&&an(t)){let n=Object.keys(t),r=Object.keys(e).filter((i)=>n.indexOf(i)!==-1),o={...e,...t};for(let i of r){let s=Om(e[i],t[i]);if(!s.valid)return{valid:!1,mergeErrorPath:[i,...s.mergeErrorPath]};o[i]=s.data}return{valid:!0,data:o}}if(Array.isArray(e)&&Array.isArray(t)){if(e.length!==t.length)return{valid:!1,mergeErrorPath:[]};let n=[];for(let r=0;r<e.length;r++){let o=e[r],i=t[r],s=Om(o,i);if(!s.valid)return{valid:!1,mergeErrorPath:[r,...s.mergeErrorPath]};n.push(s.data)}return{valid:!0,data:n}}return{valid:!1,mergeErrorPath:[]}}function Ix(e,t,n){let r=new Map,o;for(let a of t.issues)if(a.code==="unrecognized_keys"){o??(o=a);for(let c of a.keys){if(!r.has(c))r.set(c,{});r.get(c).l=!0}}else e.issues.push(a);for(let a of n.issues)if(a.code==="unrecognized_keys")for(let c of a.keys){if(!r.has(c))r.set(c,{});r.get(c).r=!0}else e.issues.push(a);let i=[...r].filter(([,a])=>a.l&&a.r).map(([a])=>a);if(i.length&&o)e.issues.push({...o,keys:i});if(cn(e))return e;let s=Om(t.value,n.value);if(!s.valid)throw Error(`Unmergable intersection. Error path: ${JSON.stringify(s.mergeErrorPath)}`);return e.value=s.data,e}var Za=g("$ZodTuple",(e,t)=>{D.init(e,t);let n=t.items;e._zod.parse=(r,o)=>{let i=r.value;if(!Array.isArray(i))return r.issues.push({input:i,inst:e,expected:"tuple",code:"invalid_type"}),r;r.value=[];let s=[],a=[...n].reverse().findIndex((u)=>u._zod.optin!=="optional"),c=a===-1?0:n.length-a;if(!t.rest){let u=i.length>n.length,d=i.length<c-1;if(u||d)return r.issues.push({...u?{code:"too_big",maximum:n.length,inclusive:!0}:{code:"too_small",minimum:n.length},input:i,inst:e,origin:"array"}),r}let l=-1;for(let u of n){if(l++,l>=i.length){if(l>=c)continue}let d=u._zod.run({value:i[l],issues:[]},o);if(d instanceof Promise)s.push(d.then((f)=>Da(f,r,l)));else Da(d,r,l)}if(t.rest){let u=i.slice(n.length);for(let d of u){l++;let f=t.rest._zod.run({value:d,issues:[]},o);if(f instanceof Promise)s.push(f.then((m)=>Da(m,r,l)));else Da(f,r,l)}}if(s.length)return Promise.all(s).then(()=>r);return r}});function Da(e,t,n){if(e.issues.length)t.issues.push(...We(n,e.issues));t.value[n]=e.value}var xf=g("$ZodRecord",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{let o=n.value;if(!an(o))return n.issues.push({expected:"record",code:"invalid_type",input:o,inst:e}),n;let i=[],s=t.keyType._zod.values;if(s){n.value={};let a=new Set;for(let l of s)if(typeof l==="string"||typeof l==="number"||typeof l==="symbol"){a.add(typeof l==="number"?l.toString():l);let u=t.valueType._zod.run({value:o[l],issues:[]},r);if(u instanceof Promise)i.push(u.then((d)=>{if(d.issues.length)n.issues.push(...We(l,d.issues));n.value[l]=d.value}));else{if(u.issues.length)n.issues.push(...We(l,u.issues));n.value[l]=u.value}}let c;for(let l in o)if(!a.has(l))c=c??[],c.push(l);if(c&&c.length>0)n.issues.push({code:"unrecognized_keys",input:o,inst:e,keys:c})}else{n.value={};for(let a of Reflect.ownKeys(o)){if(a==="__proto__")continue;let c=t.keyType._zod.run({value:a,issues:[]},r);if(c instanceof Promise)throw Error("Async schemas not supported in object keys currently");if(typeof a==="string"&&Vo.test(a)&&c.issues.length&&c.issues.some((d)=>d.code==="invalid_type"&&d.expected==="number")){let d=t.keyType._zod.run({value:Number(a),issues:[]},r);if(d instanceof Promise)throw Error("Async schemas not supported in object keys currently");if(d.issues.length===0)c=d}if(c.issues.length){if(t.mode==="loose")n.value[a]=o[a];else n.issues.push({code:"invalid_key",origin:"record",issues:c.issues.map((d)=>Pe(d,r,se())),input:a,path:[a],inst:e});continue}let u=t.valueType._zod.run({value:o[a],issues:[]},r);if(u instanceof Promise)i.push(u.then((d)=>{if(d.issues.length)n.issues.push(...We(a,d.issues));n.value[c.value]=d.value}));else{if(u.issues.length)n.issues.push(...We(a,u.issues));n.value[c.value]=u.value}}}if(i.length)return Promise.all(i).then(()=>n);return n}}),_f=g("$ZodMap",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{let o=n.value;if(!(o instanceof Map))return n.issues.push({expected:"map",code:"invalid_type",input:o,inst:e}),n;let i=[];n.value=new Map;for(let[s,a]of o){let c=t.keyType._zod.run({value:s,issues:[]},r),l=t.valueType._zod.run({value:a,issues:[]},r);if(c instanceof Promise||l instanceof Promise)i.push(Promise.all([c,l]).then(([u,d])=>{Ox(u,d,n,s,o,e,r)}));else Ox(c,l,n,s,o,e,r)}if(i.length)return Promise.all(i).then(()=>n);return n}});function Ox(e,t,n,r,o,i,s){if(e.issues.length)if(Bo.has(typeof r))n.issues.push(...We(r,e.issues));else n.issues.push({code:"invalid_key",origin:"map",input:o,inst:i,issues:e.issues.map((a)=>Pe(a,s,se()))});if(t.issues.length)if(Bo.has(typeof r))n.issues.push(...We(r,t.issues));else n.issues.push({origin:"map",code:"invalid_element",input:o,inst:i,key:r,issues:t.issues.map((a)=>Pe(a,s,se()))});n.value.set(e.value,t.value)}var Cf=g("$ZodSet",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{let o=n.value;if(!(o instanceof Set))return n.issues.push({input:o,inst:e,expected:"set",code:"invalid_type"}),n;let i=[];n.value=new Set;for(let s of o){let a=t.valueType._zod.run({value:s,issues:[]},r);if(a instanceof Promise)i.push(a.then((c)=>zx(c,n)));else zx(a,n)}if(i.length)return Promise.all(i).then(()=>n);return n}});function zx(e,t){if(e.issues.length)t.issues.push(...e.issues);t.value.add(e.value)}var wf=g("$ZodEnum",(e,t)=>{D.init(e,t);let n=Go(t.entries),r=new Set(n);e._zod.values=r,e._zod.pattern=new RegExp(`^(${n.filter((o)=>Bo.has(typeof o)).map((o)=>typeof o==="string"?Ke(o):o.toString()).join("|")})$`),e._zod.parse=(o,i)=>{let s=o.value;if(r.has(s))return o;return o.issues.push({code:"invalid_value",values:n,input:s,inst:e}),o}}),Rf=g("$ZodLiteral",(e,t)=>{if(D.init(e,t),t.values.length===0)throw Error("Cannot create literal schema with no valid values");let n=new Set(t.values);e._zod.values=n,e._zod.pattern=new RegExp(`^(${t.values.map((r)=>typeof r==="string"?Ke(r):r?Ke(r.toString()):String(r)).join("|")})$`),e._zod.parse=(r,o)=>{let i=r.value;if(n.has(i))return r;return r.issues.push({code:"invalid_value",values:t.values,input:i,inst:e}),r}}),Ef=g("$ZodFile",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{let o=n.value;if(o instanceof File)return n;return n.issues.push({expected:"file",code:"invalid_type",input:o,inst:e}),n}}),Pf=g("$ZodTransform",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{if(r.direction==="backward")throw new Nn(e.constructor.name);let o=t.transform(n.value,n);if(r.async)return(o instanceof Promise?o:Promise.resolve(o)).then((s)=>(n.value=s,n));if(o instanceof Promise)throw new xt;return n.value=o,n}});function Nx(e,t){if(e.issues.length&&t===void 0)return{issues:[],value:void 0};return e}var Ba=g("$ZodOptional",(e,t)=>{D.init(e,t),e._zod.optin="optional",e._zod.optout="optional",F(e._zod,"values",()=>t.innerType._zod.values?new Set([...t.innerType._zod.values,void 0]):void 0),F(e._zod,"pattern",()=>{let n=t.innerType._zod.pattern;return n?new RegExp(`^(${Zo(n.source)})?$`):void 0}),e._zod.parse=(n,r)=>{if(t.innerType._zod.optin==="optional"){let o=t.innerType._zod.run(n,r);if(o instanceof Promise)return o.then((i)=>Nx(i,n.value));return Nx(o,n.value)}if(n.value===void 0)return n;return t.innerType._zod.run(n,r)}}),kf=g("$ZodExactOptional",(e,t)=>{Ba.init(e,t),F(e._zod,"values",()=>t.innerType._zod.values),F(e._zod,"pattern",()=>t.innerType._zod.pattern),e._zod.parse=(n,r)=>t.innerType._zod.run(n,r)}),Af=g("$ZodNullable",(e,t)=>{D.init(e,t),F(e._zod,"optin",()=>t.innerType._zod.optin),F(e._zod,"optout",()=>t.innerType._zod.optout),F(e._zod,"pattern",()=>{let n=t.innerType._zod.pattern;return n?new RegExp(`^(${Zo(n.source)}|null)$`):void 0}),F(e._zod,"values",()=>t.innerType._zod.values?new Set([...t.innerType._zod.values,null]):void 0),e._zod.parse=(n,r)=>{if(n.value===null)return n;return t.innerType._zod.run(n,r)}}),Tf=g("$ZodDefault",(e,t)=>{D.init(e,t),e._zod.optin="optional",F(e._zod,"values",()=>t.innerType._zod.values),e._zod.parse=(n,r)=>{if(r.direction==="backward")return t.innerType._zod.run(n,r);if(n.value===void 0)return n.value=t.defaultValue,n;let o=t.innerType._zod.run(n,r);if(o instanceof Promise)return o.then((i)=>Dx(i,t));return Dx(o,t)}});function Dx(e,t){if(e.value===void 0)e.value=t.defaultValue;return e}var If=g("$ZodPrefault",(e,t)=>{D.init(e,t),e._zod.optin="optional",F(e._zod,"values",()=>t.innerType._zod.values),e._zod.parse=(n,r)=>{if(r.direction==="backward")return t.innerType._zod.run(n,r);if(n.value===void 0)n.value=t.defaultValue;return t.innerType._zod.run(n,r)}}),Of=g("$ZodNonOptional",(e,t)=>{D.init(e,t),F(e._zod,"values",()=>{let n=t.innerType._zod.values;return n?new Set([...n].filter((r)=>r!==void 0)):void 0}),e._zod.parse=(n,r)=>{let o=t.innerType._zod.run(n,r);if(o instanceof Promise)return o.then((i)=>$x(i,e));return $x(o,e)}});function $x(e,t){if(!e.issues.length&&e.value===void 0)e.issues.push({code:"invalid_type",expected:"nonoptional",input:e.value,inst:t});return e}var zf=g("$ZodSuccess",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{if(r.direction==="backward")throw new Nn("ZodSuccess");let o=t.innerType._zod.run(n,r);if(o instanceof Promise)return o.then((i)=>(n.value=i.issues.length===0,n));return n.value=o.issues.length===0,n}}),Nf=g("$ZodCatch",(e,t)=>{D.init(e,t),F(e._zod,"optin",()=>t.innerType._zod.optin),F(e._zod,"optout",()=>t.innerType._zod.optout),F(e._zod,"values",()=>t.innerType._zod.values),e._zod.parse=(n,r)=>{if(r.direction==="backward")return t.innerType._zod.run(n,r);let o=t.innerType._zod.run(n,r);if(o instanceof Promise)return o.then((i)=>{if(n.value=i.value,i.issues.length)n.value=t.catchValue({...n,error:{issues:i.issues.map((s)=>Pe(s,r,se()))},input:n.value}),n.issues=[];return n});if(n.value=o.value,o.issues.length)n.value=t.catchValue({...n,error:{issues:o.issues.map((i)=>Pe(i,r,se()))},input:n.value}),n.issues=[];return n}}),Df=g("$ZodNaN",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{if(typeof n.value!=="number"||!Number.isNaN(n.value))return n.issues.push({input:n.value,inst:e,expected:"nan",code:"invalid_type"}),n;return n}}),$f=g("$ZodPipe",(e,t)=>{D.init(e,t),F(e._zod,"values",()=>t.in._zod.values),F(e._zod,"optin",()=>t.in._zod.optin),F(e._zod,"optout",()=>t.out._zod.optout),F(e._zod,"propValues",()=>t.in._zod.propValues),e._zod.parse=(n,r)=>{if(r.direction==="backward"){let i=t.out._zod.run(n,r);if(i instanceof Promise)return i.then((s)=>$a(s,t.in,r));return $a(i,t.in,r)}let o=t.in._zod.run(n,r);if(o instanceof Promise)return o.then((i)=>$a(i,t.out,r));return $a(o,t.out,r)}});function $a(e,t,n){if(e.issues.length)return e.aborted=!0,e;return t._zod.run({value:e.value,issues:e.issues},n)}var Xo=g("$ZodCodec",(e,t)=>{D.init(e,t),F(e._zod,"values",()=>t.in._zod.values),F(e._zod,"optin",()=>t.in._zod.optin),F(e._zod,"optout",()=>t.out._zod.optout),F(e._zod,"propValues",()=>t.in._zod.propValues),e._zod.parse=(n,r)=>{if((r.direction||"forward")==="forward"){let i=t.in._zod.run(n,r);if(i instanceof Promise)return i.then((s)=>Ma(s,t,r));return Ma(i,t,r)}else{let i=t.out._zod.run(n,r);if(i instanceof Promise)return i.then((s)=>Ma(s,t,r));return Ma(i,t,r)}}});function Ma(e,t,n){if(e.issues.length)return e.aborted=!0,e;if((n.direction||"forward")==="forward"){let o=t.transform(e.value,e);if(o instanceof Promise)return o.then((i)=>La(e,i,t.out,n));return La(e,o,t.out,n)}else{let o=t.reverseTransform(e.value,e);if(o instanceof Promise)return o.then((i)=>La(e,i,t.in,n));return La(e,o,t.in,n)}}function La(e,t,n,r){if(e.issues.length)return e.aborted=!0,e;return n._zod.run({value:t,issues:e.issues},r)}var Mf=g("$ZodReadonly",(e,t)=>{D.init(e,t),F(e._zod,"propValues",()=>t.innerType._zod.propValues),F(e._zod,"values",()=>t.innerType._zod.values),F(e._zod,"optin",()=>t.innerType?._zod?.optin),F(e._zod,"optout",()=>t.innerType?._zod?.optout),e._zod.parse=(n,r)=>{if(r.direction==="backward")return t.innerType._zod.run(n,r);let o=t.innerType._zod.run(n,r);if(o instanceof Promise)return o.then(Mx);return Mx(o)}});function Mx(e){return e.value=Object.freeze(e.value),e}var Lf=g("$ZodTemplateLiteral",(e,t)=>{D.init(e,t);let n=[];for(let r of t.parts)if(typeof r==="object"&&r!==null){if(!r._zod.pattern)throw Error(`Invalid template literal part, no pattern found: ${[...r._zod.traits].shift()}`);let o=r._zod.pattern instanceof RegExp?r._zod.pattern.source:r._zod.pattern;if(!o)throw Error(`Invalid template literal part: ${r._zod.traits}`);let i=o.startsWith("^")?1:0,s=o.endsWith("$")?o.length-1:o.length;n.push(o.slice(i,s))}else if(r===null||Od.has(typeof r))n.push(Ke(`${r}`));else throw Error(`Invalid template literal part: ${r}`);e._zod.pattern=new RegExp(`^${n.join("")}$`),e._zod.parse=(r,o)=>{if(typeof r.value!=="string")return r.issues.push({input:r.value,inst:e,expected:"string",code:"invalid_type"}),r;if(e._zod.pattern.lastIndex=0,!e._zod.pattern.test(r.value))return r.issues.push({input:r.value,inst:e,code:"invalid_format",format:t.format??"template_literal",pattern:e._zod.pattern.source}),r;return r}}),Wf=g("$ZodFunction",(e,t)=>(D.init(e,t),e._def=t,e._zod.def=t,e.implement=(n)=>{if(typeof n!=="function")throw Error("implement() must be called with a function");return function(...r){let o=e._def.input?xa(e._def.input,r):r,i=Reflect.apply(n,this,o);if(e._def.output)return xa(e._def.output,i);return i}},e.implementAsync=(n)=>{if(typeof n!=="function")throw Error("implementAsync() must be called with a function");return async function(...r){let o=e._def.input?await _a(e._def.input,r):r,i=await Reflect.apply(n,this,o);if(e._def.output)return await _a(e._def.output,i);return i}},e._zod.parse=(n,r)=>{if(typeof n.value!=="function")return n.issues.push({code:"invalid_type",expected:"function",input:n.value,inst:e}),n;if(e._def.output&&e._def.output._zod.def.type==="promise")n.value=e.implementAsync(n.value);else n.value=e.implement(n.value);return n},e.input=(...n)=>{let r=e.constructor;if(Array.isArray(n[0]))return new r({type:"function",input:new Za({type:"tuple",items:n[0],rest:n[1]}),output:e._def.output});return new r({type:"function",input:n[0],output:e._def.output})},e.output=(n)=>new e.constructor({type:"function",input:e._def.input,output:n}),e)),Ff=g("$ZodPromise",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>Promise.resolve(n.value).then((o)=>t.innerType._zod.run({value:o,issues:[]},r))}),Gf=g("$ZodLazy",(e,t)=>{D.init(e,t),F(e._zod,"innerType",()=>t.getter()),F(e._zod,"pattern",()=>e._zod.innerType?._zod?.pattern),F(e._zod,"propValues",()=>e._zod.innerType?._zod?.propValues),F(e._zod,"optin",()=>e._zod.innerType?._zod?.optin??void 0),F(e._zod,"optout",()=>e._zod.innerType?._zod?.optout??void 0),e._zod.parse=(n,r)=>e._zod.innerType._zod.run(n,r)}),Zf=g("$ZodCustom",(e,t)=>{J.init(e,t),D.init(e,t),e._zod.parse=(n,r)=>n,e._zod.check=(n)=>{let r=n.value,o=t.fn(r);if(o instanceof Promise)return o.then((i)=>Lx(i,n,r,e));Lx(o,n,r,e);return}});function Lx(e,t,n,r){if(!e){let o={code:"custom",input:n,inst:r,path:[...r._zod.def.path??[]],continue:!r._zod.def.abort};if(r._zod.def.params)o.params=r._zod.def.params;t.issues.push(br(o))}}var Qo={};var Ux,Ua=Symbol("ZodOutput"),ja=Symbol("ZodInput");class Bf{constructor(){this._map=new WeakMap,this._idmap=new Map}add(e,...t){let n=t[0];if(this._map.set(e,n),n&&typeof n==="object"&&"id"in n)this._idmap.set(n.id,e);return this}clear(){return this._map=new WeakMap,this._idmap=new Map,this}remove(e){let t=this._map.get(e);if(t&&typeof t==="object"&&"id"in t)this._idmap.delete(t.id);return this._map.delete(e),this}get(e){let t=e._zod.parent;if(t){let n={...this.get(t)??{}};delete n.id;let r={...n,...this._map.get(e)};return Object.keys(r).length?r:void 0}return this._map.get(e)}has(e){return this._map.has(e)}}function ei(){return new Bf}(Ux=globalThis).__zod_globalRegistry??(Ux.__zod_globalRegistry=ei());var Ae=globalThis.__zod_globalRegistry;function Uf(e,t){return new e({type:"string",...x(t)})}function jf(e,t){return new e({type:"string",coerce:!0,...x(t)})}function Ha(e,t){return new e({type:"string",format:"email",check:"string_format",abort:!1,...x(t)})}function ti(e,t){return new e({type:"string",format:"guid",check:"string_format",abort:!1,...x(t)})}function Va(e,t){return new e({type:"string",format:"uuid",check:"string_format",abort:!1,...x(t)})}function qa(e,t){return new e({type:"string",format:"uuid",check:"string_format",abort:!1,version:"v4",...x(t)})}function Ka(e,t){return new e({type:"string",format:"uuid",check:"string_format",abort:!1,version:"v6",...x(t)})}function Ya(e,t){return new e({type:"string",format:"uuid",check:"string_format",abort:!1,version:"v7",...x(t)})}function ni(e,t){return new e({type:"string",format:"url",check:"string_format",abort:!1,...x(t)})}function Ja(e,t){return new e({type:"string",format:"emoji",check:"string_format",abort:!1,...x(t)})}function Xa(e,t){return new e({type:"string",format:"nanoid",check:"string_format",abort:!1,...x(t)})}function Qa(e,t){return new e({type:"string",format:"cuid",check:"string_format",abort:!1,...x(t)})}function ec(e,t){return new e({type:"string",format:"cuid2",check:"string_format",abort:!1,...x(t)})}function tc(e,t){return new e({type:"string",format:"ulid",check:"string_format",abort:!1,...x(t)})}function nc(e,t){return new e({type:"string",format:"xid",check:"string_format",abort:!1,...x(t)})}function rc(e,t){return new e({type:"string",format:"ksuid",check:"string_format",abort:!1,...x(t)})}function oc(e,t){return new e({type:"string",format:"ipv4",check:"string_format",abort:!1,...x(t)})}function ic(e,t){return new e({type:"string",format:"ipv6",check:"string_format",abort:!1,...x(t)})}function Hf(e,t){return new e({type:"string",format:"mac",check:"string_format",abort:!1,...x(t)})}function sc(e,t){return new e({type:"string",format:"cidrv4",check:"string_format",abort:!1,...x(t)})}function ac(e,t){return new e({type:"string",format:"cidrv6",check:"string_format",abort:!1,...x(t)})}function cc(e,t){return new e({type:"string",format:"base64",check:"string_format",abort:!1,...x(t)})}function lc(e,t){return new e({type:"string",format:"base64url",check:"string_format",abort:!1,...x(t)})}function uc(e,t){return new e({type:"string",format:"e164",check:"string_format",abort:!1,...x(t)})}function dc(e,t){return new e({type:"string",format:"jwt",check:"string_format",abort:!1,...x(t)})}var mc={Any:null,Minute:-1,Second:0,Millisecond:3,Microsecond:6};function Vf(e,t){return new e({type:"string",format:"datetime",check:"string_format",offset:!1,local:!1,precision:null,...x(t)})}function qf(e,t){return new e({type:"string",format:"date",check:"string_format",...x(t)})}function Kf(e,t){return new e({type:"string",format:"time",check:"string_format",precision:null,...x(t)})}function Yf(e,t){return new e({type:"string",format:"duration",check:"string_format",...x(t)})}function Jf(e,t){return new e({type:"number",checks:[],...x(t)})}function Xf(e,t){return new e({type:"number",coerce:!0,checks:[],...x(t)})}function Qf(e,t){return new e({type:"number",check:"number_format",abort:!1,format:"safeint",...x(t)})}function ep(e,t){return new e({type:"number",check:"number_format",abort:!1,format:"float32",...x(t)})}function tp(e,t){return new e({type:"number",check:"number_format",abort:!1,format:"float64",...x(t)})}function np(e,t){return new e({type:"number",check:"number_format",abort:!1,format:"int32",...x(t)})}function rp(e,t){return new e({type:"number",check:"number_format",abort:!1,format:"uint32",...x(t)})}function op(e,t){return new e({type:"boolean",...x(t)})}function ip(e,t){return new e({type:"boolean",coerce:!0,...x(t)})}function sp(e,t){return new e({type:"bigint",...x(t)})}function ap(e,t){return new e({type:"bigint",coerce:!0,...x(t)})}function cp(e,t){return new e({type:"bigint",check:"bigint_format",abort:!1,format:"int64",...x(t)})}function lp(e,t){return new e({type:"bigint",check:"bigint_format",abort:!1,format:"uint64",...x(t)})}function up(e,t){return new e({type:"symbol",...x(t)})}function dp(e,t){return new e({type:"undefined",...x(t)})}function mp(e,t){return new e({type:"null",...x(t)})}function fp(e){return new e({type:"any"})}function pp(e){return new e({type:"unknown"})}function gp(e,t){return new e({type:"never",...x(t)})}function hp(e,t){return new e({type:"void",...x(t)})}function yp(e,t){return new e({type:"date",...x(t)})}function bp(e,t){return new e({type:"date",coerce:!0,...x(t)})}function vp(e,t){return new e({type:"nan",...x(t)})}function _t(e,t){return new Oa({check:"less_than",...x(t),value:e,inclusive:!1})}function Ge(e,t){return new Oa({check:"less_than",...x(t),value:e,inclusive:!0})}function Ct(e,t){return new za({check:"greater_than",...x(t),value:e,inclusive:!1})}function xe(e,t){return new za({check:"greater_than",...x(t),value:e,inclusive:!0})}function fc(e){return Ct(0,e)}function pc(e){return _t(0,e)}function gc(e){return Ge(0,e)}function hc(e){return xe(0,e)}function ln(e,t){return new fm({check:"multiple_of",...x(t),value:e})}function un(e,t){return new hm({check:"max_size",...x(t),maximum:e})}function wt(e,t){return new ym({check:"min_size",...x(t),minimum:e})}function Ln(e,t){return new bm({check:"size_equals",...x(t),size:e})}function Wn(e,t){return new vm({check:"max_length",...x(t),maximum:e})}function Ft(e,t){return new Sm({check:"min_length",...x(t),minimum:e})}function Fn(e,t){return new xm({check:"length_equals",...x(t),length:e})}function Er(e,t){return new _m({check:"string_format",format:"regex",...x(t),pattern:e})}function Pr(e){return new Cm({check:"string_format",format:"lowercase",...x(e)})}function kr(e){return new wm({check:"string_format",format:"uppercase",...x(e)})}function Ar(e,t){return new Rm({check:"string_format",format:"includes",...x(t),includes:e})}function Tr(e,t){return new Em({check:"string_format",format:"starts_with",...x(t),prefix:e})}function Ir(e,t){return new Pm({check:"string_format",format:"ends_with",...x(t),suffix:e})}function yc(e,t,n){return new km({check:"property",property:e,schema:t,...x(n)})}function Or(e,t){return new Am({check:"mime_type",mime:e,...x(t)})}function at(e){return new Tm({check:"overwrite",tx:e})}function zr(e){return at((t)=>t.normalize(e))}function Nr(){return at((e)=>e.trim())}function Dr(){return at((e)=>e.toLowerCase())}function $r(){return at((e)=>e.toUpperCase())}function Mr(){return at((e)=>Ad(e))}function Sp(e,t,n){return new e({type:"array",element:t,...x(n)})}function ED(e,t,n){return new e({type:"union",options:t,...x(n)})}function PD(e,t,n){return new e({type:"union",options:t,inclusive:!1,...x(n)})}function kD(e,t,n,r){return new e({type:"union",options:n,discriminator:t,...x(r)})}function AD(e,t,n){return new e({type:"intersection",left:t,right:n})}function TD(e,t,n,r){let o=n instanceof D;return new e({type:"tuple",items:t,rest:o?n:null,...x(o?r:n)})}function ID(e,t,n,r){return new e({type:"record",keyType:t,valueType:n,...x(r)})}function OD(e,t,n,r){return new e({type:"map",keyType:t,valueType:n,...x(r)})}function zD(e,t,n){return new e({type:"set",valueType:t,...x(n)})}function ND(e,t,n){let r=Array.isArray(t)?Object.fromEntries(t.map((o)=>[o,o])):t;return new e({type:"enum",entries:r,...x(n)})}function DD(e,t,n){return new e({type:"enum",entries:t,...x(n)})}function $D(e,t,n){return new e({type:"literal",values:Array.isArray(t)?t:[t],...x(n)})}function xp(e,t){return new e({type:"file",...x(t)})}function MD(e,t){return new e({type:"transform",transform:t})}function LD(e,t){return new e({type:"optional",innerType:t})}function WD(e,t){return new e({type:"nullable",innerType:t})}function FD(e,t,n){return new e({type:"default",innerType:t,get defaultValue(){return typeof n==="function"?n():Id(n)}})}function GD(e,t,n){return new e({type:"nonoptional",innerType:t,...x(n)})}function ZD(e,t){return new e({type:"success",innerType:t})}function BD(e,t,n){return new e({type:"catch",innerType:t,catchValue:typeof n==="function"?n:()=>n})}function UD(e,t,n){return new e({type:"pipe",in:t,out:n})}function jD(e,t){return new e({type:"readonly",innerType:t})}function HD(e,t,n){return new e({type:"template_literal",parts:t,...x(n)})}function VD(e,t){return new e({type:"lazy",getter:t})}function qD(e,t){return new e({type:"promise",innerType:t})}function _p(e,t,n){let r=x(n);return r.abort??(r.abort=!0),new e({type:"custom",check:"custom",fn:t,...r})}function Cp(e,t,n){return new e({type:"custom",check:"custom",fn:t,...x(n)})}function wp(e){let t=jx((n)=>(n.addIssue=(r)=>{if(typeof r==="string")n.issues.push(br(r,n.value,t._zod.def));else{let o=r;if(o.fatal)o.continue=!1;o.code??(o.code="custom"),o.input??(o.input=n.value),o.inst??(o.inst=t),o.continue??(o.continue=!t._zod.def.abort),n.issues.push(br(o))}},e(n.value,n)));return t}function jx(e,t){let n=new J({check:"custom",...x(t)});return n._zod.check=e,n}function Rp(e){let t=new J({check:"describe"});return t._zod.onattach=[(n)=>{let r=Ae.get(n)??{};Ae.add(n,{...r,description:e})}],t._zod.check=()=>{},t}function Ep(e){let t=new J({check:"meta"});return t._zod.onattach=[(n)=>{let r=Ae.get(n)??{};Ae.add(n,{...r,...e})}],t._zod.check=()=>{},t}function Pp(e,t){let n=x(t),r=n.truthy??["true","1","yes","on","y","enabled"],o=n.falsy??["false","0","no","off","n","disabled"];if(n.case!=="sensitive")r=r.map((m)=>typeof m==="string"?m.toLowerCase():m),o=o.map((m)=>typeof m==="string"?m.toLowerCase():m);let i=new Set(r),s=new Set(o),a=e.Codec??Xo,c=e.Boolean??Yo,u=new(e.String??Mn)({type:"string",error:n.error}),d=new c({type:"boolean",error:n.error}),f=new a({type:"pipe",in:u,out:d,transform:(m,p)=>{let h=m;if(n.case!=="sensitive")h=h.toLowerCase();if(i.has(h))return!0;else if(s.has(h))return!1;else return p.issues.push({code:"invalid_value",expected:"stringbool",values:[...i,...s],input:p.value,inst:f,continue:!1}),{}},reverseTransform:(m,p)=>{if(m===!0)return r[0]||"true";else return o[0]||"false"},error:n.error});return f}function Lr(e,t,n,r={}){let o=x(r),i={...x(r),check:"string_format",type:"string",format:t,fn:typeof n==="function"?n:(a)=>n.test(a),...o};if(n instanceof RegExp)i.pattern=n;return new e(i)}var Wr=()=>{throw Error("JSON Schema conversion is not bundled into this plugin artifact")},kp=()=>Wr,bc=()=>Wr,Fr=Wr,X=Wr,Gr=Wr,Zr=Wr;var KD={guid:"uuid",url:"uri",datetime:"date-time",json_string:"json-string",regex:""},Ap=(e,t,n,r)=>{let o=n;o.type="string";let{minimum:i,maximum:s,format:a,patterns:c,contentEncoding:l}=e._zod.bag;if(typeof i==="number")o.minLength=i;if(typeof s==="number")o.maxLength=s;if(a){if(o.format=KD[a]??a,o.format==="")delete o.format;if(a==="time")delete o.format}if(l)o.contentEncoding=l;if(c&&c.size>0){let u=[...c];if(u.length===1)o.pattern=u[0].source;else if(u.length>1)o.allOf=[...u.map((d)=>({...t.target==="draft-07"||t.target==="draft-04"||t.target==="openapi-3.0"?{type:"string"}:{},pattern:d.source}))]}},Tp=(e,t,n,r)=>{let o=n,{minimum:i,maximum:s,format:a,multipleOf:c,exclusiveMaximum:l,exclusiveMinimum:u}=e._zod.bag;if(typeof a==="string"&&a.includes("int"))o.type="integer";else o.type="number";if(typeof u==="number")if(t.target==="draft-04"||t.target==="openapi-3.0")o.minimum=u,o.exclusiveMinimum=!0;else o.exclusiveMinimum=u;if(typeof i==="number"){if(o.minimum=i,typeof u==="number"&&t.target!=="draft-04")if(u>=i)delete o.minimum;else delete o.exclusiveMinimum}if(typeof l==="number")if(t.target==="draft-04"||t.target==="openapi-3.0")o.maximum=l,o.exclusiveMaximum=!0;else o.exclusiveMaximum=l;if(typeof s==="number"){if(o.maximum=s,typeof l==="number"&&t.target!=="draft-04")if(l<=s)delete o.maximum;else delete o.exclusiveMaximum}if(typeof c==="number")o.multipleOf=c},Ip=(e,t,n,r)=>{n.type="boolean"},Op=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("BigInt cannot be represented in JSON Schema")},zp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Symbols cannot be represented in JSON Schema")},Np=(e,t,n,r)=>{if(t.target==="openapi-3.0")n.type="string",n.nullable=!0,n.enum=[null];else n.type="null"},Dp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Undefined cannot be represented in JSON Schema")},$p=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Void cannot be represented in JSON Schema")},Mp=(e,t,n,r)=>{n.not={}},Lp=(e,t,n,r)=>{},Wp=(e,t,n,r)=>{},Fp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Date cannot be represented in JSON Schema")},Gp=(e,t,n,r)=>{let o=e._zod.def,i=Go(o.entries);if(i.every((s)=>typeof s==="number"))n.type="number";if(i.every((s)=>typeof s==="string"))n.type="string";n.enum=i},Zp=(e,t,n,r)=>{let o=e._zod.def,i=[];for(let s of o.values)if(s===void 0){if(t.unrepresentable==="throw")throw Error("Literal `undefined` cannot be represented in JSON Schema")}else if(typeof s==="bigint")if(t.unrepresentable==="throw")throw Error("BigInt literals cannot be represented in JSON Schema");else i.push(Number(s));else i.push(s);if(i.length===0);else if(i.length===1){let s=i[0];if(n.type=s===null?"null":typeof s,t.target==="draft-04"||t.target==="openapi-3.0")n.enum=[s];else n.const=s}else{if(i.every((s)=>typeof s==="number"))n.type="number";if(i.every((s)=>typeof s==="string"))n.type="string";if(i.every((s)=>typeof s==="boolean"))n.type="boolean";if(i.every((s)=>s===null))n.type="null";n.enum=i}},Bp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("NaN cannot be represented in JSON Schema")},Up=(e,t,n,r)=>{let o=n,i=e._zod.pattern;if(!i)throw Error("Pattern not found in template literal");o.type="string",o.pattern=i.source},jp=(e,t,n,r)=>{let o=n,i={type:"string",format:"binary",contentEncoding:"binary"},{minimum:s,maximum:a,mime:c}=e._zod.bag;if(s!==void 0)i.minLength=s;if(a!==void 0)i.maxLength=a;if(c)if(c.length===1)i.contentMediaType=c[0],Object.assign(o,i);else Object.assign(o,i),o.anyOf=c.map((l)=>({contentMediaType:l}));else Object.assign(o,i)},Hp=(e,t,n,r)=>{n.type="boolean"},Vp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Custom types cannot be represented in JSON Schema")},qp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Function types cannot be represented in JSON Schema")},Kp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Transforms cannot be represented in JSON Schema")},Yp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Map cannot be represented in JSON Schema")},Jp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Set cannot be represented in JSON Schema")},Xp=(e,t,n,r)=>{let o=n,i=e._zod.def,{minimum:s,maximum:a}=e._zod.bag;if(typeof s==="number")o.minItems=s;if(typeof a==="number")o.maxItems=a;o.type="array",o.items=X(i.element,t,{...r,path:[...r.path,"items"]})},Qp=(e,t,n,r)=>{let o=n,i=e._zod.def;o.type="object",o.properties={};let s=i.shape;for(let l in s)o.properties[l]=X(s[l],t,{...r,path:[...r.path,"properties",l]});let a=new Set(Object.keys(s)),c=new Set([...a].filter((l)=>{let u=i.shape[l]._zod;if(t.io==="input")return u.optin===void 0;else return u.optout===void 0}));if(c.size>0)o.required=Array.from(c);if(i.catchall?._zod.def.type==="never")o.additionalProperties=!1;else if(!i.catchall){if(t.io==="output")o.additionalProperties=!1}else if(i.catchall)o.additionalProperties=X(i.catchall,t,{...r,path:[...r.path,"additionalProperties"]})},Sc=(e,t,n,r)=>{let o=e._zod.def,i=o.inclusive===!1,s=o.options.map((a,c)=>X(a,t,{...r,path:[...r.path,i?"oneOf":"anyOf",c]}));if(i)n.oneOf=s;else n.anyOf=s},eg=(e,t,n,r)=>{let o=e._zod.def,i=X(o.left,t,{...r,path:[...r.path,"allOf",0]}),s=X(o.right,t,{...r,path:[...r.path,"allOf",1]}),a=(l)=>("allOf"in l)&&Object.keys(l).length===1,c=[...a(i)?i.allOf:[i],...a(s)?s.allOf:[s]];n.allOf=c},tg=(e,t,n,r)=>{let o=n,i=e._zod.def;o.type="array";let s=t.target==="draft-2020-12"?"prefixItems":"items",a=t.target==="draft-2020-12"?"items":t.target==="openapi-3.0"?"items":"additionalItems",c=i.items.map((f,m)=>X(f,t,{...r,path:[...r.path,s,m]})),l=i.rest?X(i.rest,t,{...r,path:[...r.path,a,...t.target==="openapi-3.0"?[i.items.length]:[]]}):null;if(t.target==="draft-2020-12"){if(o.prefixItems=c,l)o.items=l}else if(t.target==="openapi-3.0"){if(o.items={anyOf:c},l)o.items.anyOf.push(l);if(o.minItems=c.length,!l)o.maxItems=c.length}else if(o.items=c,l)o.additionalItems=l;let{minimum:u,maximum:d}=e._zod.bag;if(typeof u==="number")o.minItems=u;if(typeof d==="number")o.maxItems=d},ng=(e,t,n,r)=>{let o=n,i=e._zod.def;o.type="object";let s=i.keyType,c=s._zod.bag?.patterns;if(i.mode==="loose"&&c&&c.size>0){let u=X(i.valueType,t,{...r,path:[...r.path,"patternProperties","*"]});o.patternProperties={};for(let d of c)o.patternProperties[d.source]=u}else{if(t.target==="draft-07"||t.target==="draft-2020-12")o.propertyNames=X(i.keyType,t,{...r,path:[...r.path,"propertyNames"]});o.additionalProperties=X(i.valueType,t,{...r,path:[...r.path,"additionalProperties"]})}let l=s._zod.values;if(l){let u=[...l].filter((d)=>typeof d==="string"||typeof d==="number");if(u.length>0)o.required=u}},rg=(e,t,n,r)=>{let o=e._zod.def,i=X(o.innerType,t,r),s=t.seen.get(e);if(t.target==="openapi-3.0")s.ref=o.innerType,n.nullable=!0;else n.anyOf=[i,{type:"null"}]},og=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);i.ref=o.innerType},ig=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);i.ref=o.innerType,n.default=JSON.parse(JSON.stringify(o.defaultValue))},sg=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);if(i.ref=o.innerType,t.io==="input")n._prefault=JSON.parse(JSON.stringify(o.defaultValue))},ag=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);i.ref=o.innerType;let s;try{s=o.catchValue(void 0)}catch{throw Error("Dynamic catch values are not supported in JSON Schema")}n.default=s},cg=(e,t,n,r)=>{let o=e._zod.def,i=t.io==="input"?o.in._zod.def.type==="transform"?o.out:o.in:o.out;X(i,t,r);let s=t.seen.get(e);s.ref=i},lg=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);i.ref=o.innerType,n.readOnly=!0},ug=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);i.ref=o.innerType},xc=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);i.ref=o.innerType},dg=(e,t,n,r)=>{let o=e._zod.innerType;X(o,t,r);let i=t.seen.get(e);i.ref=o},vc={string:Ap,number:Tp,boolean:Ip,bigint:Op,symbol:zp,null:Np,undefined:Dp,void:$p,never:Mp,any:Lp,unknown:Wp,date:Fp,enum:Gp,literal:Zp,nan:Bp,template_literal:Up,file:jp,success:Hp,custom:Vp,function:qp,transform:Kp,map:Yp,set:Jp,array:Xp,object:Qp,union:Sc,intersection:eg,tuple:tg,record:ng,nullable:rg,nonoptional:og,default:ig,prefault:sg,catch:ag,pipe:cg,readonly:lg,promise:ug,optional:xc,lazy:dg};function ri(e,t){if("_idmap"in e){let r=e,o=Fr({...t,processors:vc}),i={};for(let c of r._idmap.entries()){let[l,u]=c;X(u,o)}let s={},a={registry:r,uri:t?.uri,defs:i};o.external=a;for(let c of r._idmap.entries()){let[l,u]=c;Gr(o,u),s[l]=Zr(o,u)}if(Object.keys(i).length>0){let c=o.target==="draft-2020-12"?"$defs":"definitions";s.__shared={[c]:i}}return{schemas:s}}let n=Fr({...t,processors:vc});return X(e,n),Gr(n,e),Zr(n,e)}class mg{get metadataRegistry(){return this.ctx.metadataRegistry}get target(){return this.ctx.target}get unrepresentable(){return this.ctx.unrepresentable}get override(){return this.ctx.override}get io(){return this.ctx.io}get counter(){return this.ctx.counter}set counter(e){this.ctx.counter=e}get seen(){return this.ctx.seen}constructor(e){let t=e?.target??"draft-2020-12";if(t==="draft-4")t="draft-04";if(t==="draft-7")t="draft-07";this.ctx=Fr({processors:vc,target:t,...e?.metadata&&{metadata:e.metadata},...e?.unrepresentable&&{unrepresentable:e.unrepresentable},...e?.override&&{override:e.override},...e?.io&&{io:e.io}})}process(e,t={path:[],schemaPath:[]}){return X(e,this.ctx,t)}emit(e,t){if(t){if(t.cycles)this.ctx.cycles=t.cycles;if(t.reused)this.ctx.reused=t.reused;if(t.external)this.ctx.external=t.external}Gr(this.ctx,e);let n=Zr(this.ctx,e),{"~standard":r,...o}=n;return o}}var Hx={};var ci={};mn(ci,{ZodISODate:()=>ii,ZodISODateTime:()=>oi,ZodISODuration:()=>ai,ZodISOTime:()=>si,date:()=>pg,datetime:()=>fg,duration:()=>hg,time:()=>gg});var oi=g("ZodISODateTime",(e,t)=>{Um.init(e,t),K.init(e,t)});function fg(e){return Vf(oi,e)}var ii=g("ZodISODate",(e,t)=>{jm.init(e,t),K.init(e,t)});function pg(e){return qf(ii,e)}var si=g("ZodISOTime",(e,t)=>{Hm.init(e,t),K.init(e,t)});function gg(e){return Kf(si,e)}var ai=g("ZodISODuration",(e,t)=>{Vm.init(e,t),K.init(e,t)});function hg(e){return Yf(ai,e)}var qx=(e,t)=>{Ho.init(e,t),e.name="ZodError",Object.defineProperties(e,{format:{value:(n)=>Sr(e,n)},flatten:{value:(n)=>vr(e,n)},addIssue:{value:(n)=>{e.issues.push(n),e.message=JSON.stringify(e.issues,hr,2)}},addIssues:{value:(n)=>{e.issues.push(...n),e.message=JSON.stringify(e.issues,hr,2)}},isEmpty:{get(){return e.issues.length===0}}})},Kx=g("ZodError",qx),_e=g("ZodError",qx,{Parent:Error});var _c=xr(_e),Cc=_r(_e),wc=Cr(_e),Rc=wr(_e),Ec=Ca(_e),Pc=wa(_e),kc=Ra(_e),Ac=Ea(_e),Tc=Pa(_e),Ic=ka(_e),Oc=Aa(_e),zc=Ta(_e);var L=g("ZodType",(e,t)=>(D.init(e,t),Object.assign(e["~standard"],{jsonSchema:{input:bc(e,"input"),output:bc(e,"output")}}),e.toJSONSchema=kp(e,{}),e.def=t,e.type=t.type,Object.defineProperty(e,"_def",{value:t}),e.check=(...n)=>e.clone(I.mergeDefs(t,{checks:[...t.checks??[],...n.map((r)=>typeof r==="function"?{_zod:{check:r,def:{check:"custom"},onattach:[]}}:r)]}),{parent:!0}),e.with=e.check,e.clone=(n,r)=>he(e,n,r),e.brand=()=>e,e.register=(n,r)=>(n.add(e,r),e),e.parse=(n,r)=>_c(e,n,r,{callee:e.parse}),e.safeParse=(n,r)=>wc(e,n,r),e.parseAsync=async(n,r)=>Cc(e,n,r,{callee:e.parseAsync}),e.safeParseAsync=async(n,r)=>Rc(e,n,r),e.spa=e.safeParseAsync,e.encode=(n,r)=>Ec(e,n,r),e.decode=(n,r)=>Pc(e,n,r),e.encodeAsync=async(n,r)=>kc(e,n,r),e.decodeAsync=async(n,r)=>Ac(e,n,r),e.safeEncode=(n,r)=>Tc(e,n,r),e.safeDecode=(n,r)=>Ic(e,n,r),e.safeEncodeAsync=async(n,r)=>Oc(e,n,r),e.safeDecodeAsync=async(n,r)=>zc(e,n,r),e.refine=(n,r)=>e.check(sh(n,r)),e.superRefine=(n)=>e.check(ah(n)),e.overwrite=(n)=>e.check(at(n)),e.optional=()=>ui(e),e.exactOptional=()=>Zg(e),e.nullable=()=>di(e),e.nullish=()=>ui(di(e)),e.nonoptional=(n)=>qg(e,n),e.array=()=>gi(e),e.or=(n)=>tl([e,n]),e.and=(n)=>Og(e,n),e.transform=(n)=>mi(e,rl(n)),e.default=(n)=>jg(e,n),e.prefault=(n)=>Vg(e,n),e.catch=(n)=>Jg(e,n),e.pipe=(n)=>mi(e,n),e.readonly=()=>eh(e),e.describe=(n)=>{let r=e.clone();return Ae.add(r,{description:n}),r},Object.defineProperty(e,"description",{get(){return Ae.get(e)?.description},configurable:!0}),e.meta=(...n)=>{if(n.length===0)return Ae.get(e);let r=e.clone();return Ae.add(r,n[0]),r},e.isOptional=()=>e.safeParse(void 0).success,e.isNullable=()=>e.safeParse(null).success,e.apply=(n)=>n(e),e)),$c=g("_ZodString",(e,t)=>{Mn.init(e,t),L.init(e,t),e._zod.processJSONSchema=(r,o,i)=>Ap(e,r,o,i);let n=e._zod.bag;e.format=n.format??null,e.minLength=n.minimum??null,e.maxLength=n.maximum??null,e.regex=(...r)=>e.check(Er(...r)),e.includes=(...r)=>e.check(Ar(...r)),e.startsWith=(...r)=>e.check(Tr(...r)),e.endsWith=(...r)=>e.check(Ir(...r)),e.min=(...r)=>e.check(Ft(...r)),e.max=(...r)=>e.check(Wn(...r)),e.length=(...r)=>e.check(Fn(...r)),e.nonempty=(...r)=>e.check(Ft(1,...r)),e.lowercase=(r)=>e.check(Pr(r)),e.uppercase=(r)=>e.check(kr(r)),e.trim=()=>e.check(Nr()),e.normalize=(...r)=>e.check(zr(...r)),e.toLowerCase=()=>e.check(Dr()),e.toUpperCase=()=>e.check($r()),e.slugify=()=>e.check(Mr())}),Ur=g("ZodString",(e,t)=>{Mn.init(e,t),$c.init(e,t),e.email=(n)=>e.check(Ha(Mc,n)),e.url=(n)=>e.check(ni(fi,n)),e.jwt=(n)=>e.check(dc(Xc,n)),e.emoji=(n)=>e.check(Ja(Lc,n)),e.guid=(n)=>e.check(ti(li,n)),e.uuid=(n)=>e.check(Va(Et,n)),e.uuidv4=(n)=>e.check(qa(Et,n)),e.uuidv6=(n)=>e.check(Ka(Et,n)),e.uuidv7=(n)=>e.check(Ya(Et,n)),e.nanoid=(n)=>e.check(Xa(Wc,n)),e.guid=(n)=>e.check(ti(li,n)),e.cuid=(n)=>e.check(Qa(Fc,n)),e.cuid2=(n)=>e.check(ec(Gc,n)),e.ulid=(n)=>e.check(tc(Zc,n)),e.base64=(n)=>e.check(cc(Kc,n)),e.base64url=(n)=>e.check(lc(Yc,n)),e.xid=(n)=>e.check(nc(Bc,n)),e.ksuid=(n)=>e.check(rc(Uc,n)),e.ipv4=(n)=>e.check(oc(jc,n)),e.ipv6=(n)=>e.check(ic(Hc,n)),e.cidrv4=(n)=>e.check(sc(Vc,n)),e.cidrv6=(n)=>e.check(ac(qc,n)),e.e164=(n)=>e.check(uc(Jc,n)),e.datetime=(n)=>e.check(fg(n)),e.date=(n)=>e.check(pg(n)),e.time=(n)=>e.check(gg(n)),e.duration=(n)=>e.check(hg(n))});function Nc(e){return Uf(Ur,e)}var K=g("ZodStringFormat",(e,t)=>{q.init(e,t),$c.init(e,t)}),Mc=g("ZodEmail",(e,t)=>{Dm.init(e,t),K.init(e,t)});function Yx(e){return Ha(Mc,e)}var li=g("ZodGUID",(e,t)=>{zm.init(e,t),K.init(e,t)});function Jx(e){return ti(li,e)}var Et=g("ZodUUID",(e,t)=>{Nm.init(e,t),K.init(e,t)});function Xx(e){return Va(Et,e)}function Qx(e){return qa(Et,e)}function e_(e){return Ka(Et,e)}function t_(e){return Ya(Et,e)}var fi=g("ZodURL",(e,t)=>{$m.init(e,t),K.init(e,t)});function n_(e){return ni(fi,e)}function r_(e){return ni(fi,{protocol:/^https?$/,hostname:Fe.domain,...I.normalizeParams(e)})}var Lc=g("ZodEmoji",(e,t)=>{Mm.init(e,t),K.init(e,t)});function o_(e){return Ja(Lc,e)}var Wc=g("ZodNanoID",(e,t)=>{Lm.init(e,t),K.init(e,t)});function i_(e){return Xa(Wc,e)}var Fc=g("ZodCUID",(e,t)=>{Wm.init(e,t),K.init(e,t)});function s_(e){return Qa(Fc,e)}var Gc=g("ZodCUID2",(e,t)=>{Fm.init(e,t),K.init(e,t)});function a_(e){return ec(Gc,e)}var Zc=g("ZodULID",(e,t)=>{Gm.init(e,t),K.init(e,t)});function c_(e){return tc(Zc,e)}var Bc=g("ZodXID",(e,t)=>{Zm.init(e,t),K.init(e,t)});function l_(e){return nc(Bc,e)}var Uc=g("ZodKSUID",(e,t)=>{Bm.init(e,t),K.init(e,t)});function u_(e){return rc(Uc,e)}var jc=g("ZodIPv4",(e,t)=>{qm.init(e,t),K.init(e,t)});function d_(e){return oc(jc,e)}var yg=g("ZodMAC",(e,t)=>{Ym.init(e,t),K.init(e,t)});function m_(e){return Hf(yg,e)}var Hc=g("ZodIPv6",(e,t)=>{Km.init(e,t),K.init(e,t)});function f_(e){return ic(Hc,e)}var Vc=g("ZodCIDRv4",(e,t)=>{Jm.init(e,t),K.init(e,t)});function p_(e){return sc(Vc,e)}var qc=g("ZodCIDRv6",(e,t)=>{Xm.init(e,t),K.init(e,t)});function g_(e){return ac(qc,e)}var Kc=g("ZodBase64",(e,t)=>{ef.init(e,t),K.init(e,t)});function h_(e){return cc(Kc,e)}var Yc=g("ZodBase64URL",(e,t)=>{tf.init(e,t),K.init(e,t)});function y_(e){return lc(Yc,e)}var Jc=g("ZodE164",(e,t)=>{nf.init(e,t),K.init(e,t)});function b_(e){return uc(Jc,e)}var Xc=g("ZodJWT",(e,t)=>{rf.init(e,t),K.init(e,t)});function v_(e){return dc(Xc,e)}var jr=g("ZodCustomStringFormat",(e,t)=>{of.init(e,t),K.init(e,t)});function S_(e,t,n={}){return Lr(jr,e,t,n)}function x_(e){return Lr(jr,"hostname",Fe.hostname,e)}function __(e){return Lr(jr,"hex",Fe.hex,e)}function C_(e,t){let n=t?.enc??"hex",r=`${e}_${n}`,o=Fe[r];if(!o)throw Error(`Unrecognized hash format: ${r}`);return Lr(jr,r,o,t)}var Hr=g("ZodNumber",(e,t)=>{Fa.init(e,t),L.init(e,t),e._zod.processJSONSchema=(r,o,i)=>Tp(e,r,o,i),e.gt=(r,o)=>e.check(Ct(r,o)),e.gte=(r,o)=>e.check(xe(r,o)),e.min=(r,o)=>e.check(xe(r,o)),e.lt=(r,o)=>e.check(_t(r,o)),e.lte=(r,o)=>e.check(Ge(r,o)),e.max=(r,o)=>e.check(Ge(r,o)),e.int=(r)=>e.check(Dc(r)),e.safe=(r)=>e.check(Dc(r)),e.positive=(r)=>e.check(Ct(0,r)),e.nonnegative=(r)=>e.check(xe(0,r)),e.negative=(r)=>e.check(_t(0,r)),e.nonpositive=(r)=>e.check(Ge(0,r)),e.multipleOf=(r,o)=>e.check(ln(r,o)),e.step=(r,o)=>e.check(ln(r,o)),e.finite=()=>e;let n=e._zod.bag;e.minValue=Math.max(n.minimum??Number.NEGATIVE_INFINITY,n.exclusiveMinimum??Number.NEGATIVE_INFINITY)??null,e.maxValue=Math.min(n.maximum??Number.POSITIVE_INFINITY,n.exclusiveMaximum??Number.POSITIVE_INFINITY)??null,e.isInt=(n.format??"").includes("int")||Number.isSafeInteger(n.multipleOf??0.5),e.isFinite=!0,e.format=n.format??null});function bg(e){return Jf(Hr,e)}var Zn=g("ZodNumberFormat",(e,t)=>{sf.init(e,t),Hr.init(e,t)});function Dc(e){return Qf(Zn,e)}function w_(e){return ep(Zn,e)}function R_(e){return tp(Zn,e)}function E_(e){return np(Zn,e)}function P_(e){return rp(Zn,e)}var Vr=g("ZodBoolean",(e,t)=>{Yo.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Ip(e,n,r,o)});function vg(e){return op(Vr,e)}var qr=g("ZodBigInt",(e,t)=>{Ga.init(e,t),L.init(e,t),e._zod.processJSONSchema=(r,o,i)=>Op(e,r,o,i),e.gte=(r,o)=>e.check(xe(r,o)),e.min=(r,o)=>e.check(xe(r,o)),e.gt=(r,o)=>e.check(Ct(r,o)),e.gte=(r,o)=>e.check(xe(r,o)),e.min=(r,o)=>e.check(xe(r,o)),e.lt=(r,o)=>e.check(_t(r,o)),e.lte=(r,o)=>e.check(Ge(r,o)),e.max=(r,o)=>e.check(Ge(r,o)),e.positive=(r)=>e.check(Ct(BigInt(0),r)),e.negative=(r)=>e.check(_t(BigInt(0),r)),e.nonpositive=(r)=>e.check(Ge(BigInt(0),r)),e.nonnegative=(r)=>e.check(xe(BigInt(0),r)),e.multipleOf=(r,o)=>e.check(ln(r,o));let n=e._zod.bag;e.minValue=n.minimum??null,e.maxValue=n.maximum??null,e.format=n.format??null});function k_(e){return sp(qr,e)}var Qc=g("ZodBigIntFormat",(e,t)=>{af.init(e,t),qr.init(e,t)});function A_(e){return cp(Qc,e)}function T_(e){return lp(Qc,e)}var Sg=g("ZodSymbol",(e,t)=>{cf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>zp(e,n,r,o)});function I_(e){return up(Sg,e)}var xg=g("ZodUndefined",(e,t)=>{lf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Dp(e,n,r,o)});function O_(e){return dp(xg,e)}var _g=g("ZodNull",(e,t)=>{uf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Np(e,n,r,o)});function Cg(e){return mp(_g,e)}var wg=g("ZodAny",(e,t)=>{df.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Lp(e,n,r,o)});function z_(){return fp(wg)}var Rg=g("ZodUnknown",(e,t)=>{mf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Wp(e,n,r,o)});function Gn(){return pp(Rg)}var Eg=g("ZodNever",(e,t)=>{ff.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Mp(e,n,r,o)});function el(e){return gp(Eg,e)}var Pg=g("ZodVoid",(e,t)=>{pf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>$p(e,n,r,o)});function N_(e){return hp(Pg,e)}var pi=g("ZodDate",(e,t)=>{gf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(r,o,i)=>Fp(e,r,o,i),e.min=(r,o)=>e.check(xe(r,o)),e.max=(r,o)=>e.check(Ge(r,o));let n=e._zod.bag;e.minDate=n.minimum?new Date(n.minimum):null,e.maxDate=n.maximum?new Date(n.maximum):null});function D_(e){return yp(pi,e)}var kg=g("ZodArray",(e,t)=>{hf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Xp(e,n,r,o),e.element=t.element,e.min=(n,r)=>e.check(Ft(n,r)),e.nonempty=(n)=>e.check(Ft(1,n)),e.max=(n,r)=>e.check(Wn(n,r)),e.length=(n,r)=>e.check(Fn(n,r)),e.unwrap=()=>e.element});function gi(e,t){return Sp(kg,e,t)}function $_(e){let t=e._zod.def.shape;return nl(Object.keys(t))}var hi=g("ZodObject",(e,t)=>{yf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Qp(e,n,r,o),I.defineLazy(e,"shape",()=>t.shape),e.keyof=()=>nl(Object.keys(e._zod.def.shape)),e.catchall=(n)=>e.clone({...e._zod.def,catchall:n}),e.passthrough=()=>e.clone({...e._zod.def,catchall:Gn()}),e.loose=()=>e.clone({...e._zod.def,catchall:Gn()}),e.strict=()=>e.clone({...e._zod.def,catchall:el()}),e.strip=()=>e.clone({...e._zod.def,catchall:void 0}),e.extend=(n)=>I.extend(e,n),e.safeExtend=(n)=>I.safeExtend(e,n),e.merge=(n)=>I.merge(e,n),e.pick=(n)=>I.pick(e,n),e.omit=(n)=>I.omit(e,n),e.partial=(...n)=>I.partial(ol,e,n[0]),e.required=(...n)=>I.required(il,e,n[0])});function M_(e,t){let n={type:"object",shape:e??{},...I.normalizeParams(t)};return new hi(n)}function L_(e,t){return new hi({type:"object",shape:e,catchall:el(),...I.normalizeParams(t)})}function W_(e,t){return new hi({type:"object",shape:e,catchall:Gn(),...I.normalizeParams(t)})}var yi=g("ZodUnion",(e,t)=>{Jo.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Sc(e,n,r,o),e.options=t.options});function tl(e,t){return new yi({type:"union",options:e,...I.normalizeParams(t)})}var Ag=g("ZodXor",(e,t)=>{yi.init(e,t),bf.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Sc(e,n,r,o),e.options=t.options});function F_(e,t){return new Ag({type:"union",options:e,inclusive:!1,...I.normalizeParams(t)})}var Tg=g("ZodDiscriminatedUnion",(e,t)=>{yi.init(e,t),vf.init(e,t)});function G_(e,t,n){return new Tg({type:"union",options:t,discriminator:e,...I.normalizeParams(n)})}var Ig=g("ZodIntersection",(e,t)=>{Sf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>eg(e,n,r,o)});function Og(e,t){return new Ig({type:"intersection",left:e,right:t})}var zg=g("ZodTuple",(e,t)=>{Za.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>tg(e,n,r,o),e.rest=(n)=>e.clone({...e._zod.def,rest:n})});function Ng(e,t,n){let r=t instanceof D,o=r?n:t;return new zg({type:"tuple",items:e,rest:r?t:null,...I.normalizeParams(o)})}var bi=g("ZodRecord",(e,t)=>{xf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>ng(e,n,r,o),e.keyType=t.keyType,e.valueType=t.valueType});function Dg(e,t,n){return new bi({type:"record",keyType:e,valueType:t,...I.normalizeParams(n)})}function Z_(e,t,n){let r=he(e);return r._zod.values=void 0,new bi({type:"record",keyType:r,valueType:t,...I.normalizeParams(n)})}function B_(e,t,n){return new bi({type:"record",keyType:e,valueType:t,mode:"loose",...I.normalizeParams(n)})}var $g=g("ZodMap",(e,t)=>{_f.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Yp(e,n,r,o),e.keyType=t.keyType,e.valueType=t.valueType,e.min=(...n)=>e.check(wt(...n)),e.nonempty=(n)=>e.check(wt(1,n)),e.max=(...n)=>e.check(un(...n)),e.size=(...n)=>e.check(Ln(...n))});function U_(e,t,n){return new $g({type:"map",keyType:e,valueType:t,...I.normalizeParams(n)})}var Mg=g("ZodSet",(e,t)=>{Cf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Jp(e,n,r,o),e.min=(...n)=>e.check(wt(...n)),e.nonempty=(n)=>e.check(wt(1,n)),e.max=(...n)=>e.check(un(...n)),e.size=(...n)=>e.check(Ln(...n))});function j_(e,t){return new Mg({type:"set",valueType:e,...I.normalizeParams(t)})}var Br=g("ZodEnum",(e,t)=>{wf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(r,o,i)=>Gp(e,r,o,i),e.enum=t.entries,e.options=Object.values(t.entries);let n=new Set(Object.keys(t.entries));e.extract=(r,o)=>{let i={};for(let s of r)if(n.has(s))i[s]=t.entries[s];else throw Error(`Key ${s} not found in enum`);return new Br({...t,checks:[],...I.normalizeParams(o),entries:i})},e.exclude=(r,o)=>{let i={...t.entries};for(let s of r)if(n.has(s))delete i[s];else throw Error(`Key ${s} not found in enum`);return new Br({...t,checks:[],...I.normalizeParams(o),entries:i})}});function nl(e,t){let n=Array.isArray(e)?Object.fromEntries(e.map((r)=>[r,r])):e;return new Br({type:"enum",entries:n,...I.normalizeParams(t)})}function H_(e,t){return new Br({type:"enum",entries:e,...I.normalizeParams(t)})}var Lg=g("ZodLiteral",(e,t)=>{Rf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Zp(e,n,r,o),e.values=new Set(t.values),Object.defineProperty(e,"value",{get(){if(t.values.length>1)throw Error("This schema contains multiple valid literal values. Use `.values` instead.");return t.values[0]}})});function V_(e,t){return new Lg({type:"literal",values:Array.isArray(e)?e:[e],...I.normalizeParams(t)})}var Wg=g("ZodFile",(e,t)=>{Ef.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>jp(e,n,r,o),e.min=(n,r)=>e.check(wt(n,r)),e.max=(n,r)=>e.check(un(n,r)),e.mime=(n,r)=>e.check(Or(Array.isArray(n)?n:[n],r))});function q_(e){return xp(Wg,e)}var Fg=g("ZodTransform",(e,t)=>{Pf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Kp(e,n,r,o),e._zod.parse=(n,r)=>{if(r.direction==="backward")throw new Nn(e.constructor.name);n.addIssue=(i)=>{if(typeof i==="string")n.issues.push(I.issue(i,n.value,t));else{let s=i;if(s.fatal)s.continue=!1;s.code??(s.code="custom"),s.input??(s.input=n.value),s.inst??(s.inst=e),n.issues.push(I.issue(s))}};let o=t.transform(n.value,n);if(o instanceof Promise)return o.then((i)=>(n.value=i,n));return n.value=o,n}});function rl(e){return new Fg({type:"transform",transform:e})}var ol=g("ZodOptional",(e,t)=>{Ba.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>xc(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function ui(e){return new ol({type:"optional",innerType:e})}var Gg=g("ZodExactOptional",(e,t)=>{kf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>xc(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function Zg(e){return new Gg({type:"optional",innerType:e})}var Bg=g("ZodNullable",(e,t)=>{Af.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>rg(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function di(e){return new Bg({type:"nullable",innerType:e})}function K_(e){return ui(di(e))}var Ug=g("ZodDefault",(e,t)=>{Tf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>ig(e,n,r,o),e.unwrap=()=>e._zod.def.innerType,e.removeDefault=e.unwrap});function jg(e,t){return new Ug({type:"default",innerType:e,get defaultValue(){return typeof t==="function"?t():I.shallowClone(t)}})}var Hg=g("ZodPrefault",(e,t)=>{If.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>sg(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function Vg(e,t){return new Hg({type:"prefault",innerType:e,get defaultValue(){return typeof t==="function"?t():I.shallowClone(t)}})}var il=g("ZodNonOptional",(e,t)=>{Of.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>og(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function qg(e,t){return new il({type:"nonoptional",innerType:e,...I.normalizeParams(t)})}var Kg=g("ZodSuccess",(e,t)=>{zf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Hp(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function Y_(e){return new Kg({type:"success",innerType:e})}var Yg=g("ZodCatch",(e,t)=>{Nf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>ag(e,n,r,o),e.unwrap=()=>e._zod.def.innerType,e.removeCatch=e.unwrap});function Jg(e,t){return new Yg({type:"catch",innerType:e,catchValue:typeof t==="function"?t:()=>t})}var Xg=g("ZodNaN",(e,t)=>{Df.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Bp(e,n,r,o)});function J_(e){return vp(Xg,e)}var sl=g("ZodPipe",(e,t)=>{$f.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>cg(e,n,r,o),e.in=t.in,e.out=t.out});function mi(e,t){return new sl({type:"pipe",in:e,out:t})}var al=g("ZodCodec",(e,t)=>{sl.init(e,t),Xo.init(e,t)});function X_(e,t,n){return new al({type:"pipe",in:e,out:t,transform:n.decode,reverseTransform:n.encode})}var Qg=g("ZodReadonly",(e,t)=>{Mf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>lg(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function eh(e){return new Qg({type:"readonly",innerType:e})}var th=g("ZodTemplateLiteral",(e,t)=>{Lf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Up(e,n,r,o)});function Q_(e,t){return new th({type:"template_literal",parts:e,...I.normalizeParams(t)})}var nh=g("ZodLazy",(e,t)=>{Gf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>dg(e,n,r,o),e.unwrap=()=>e._zod.def.getter()});function rh(e){return new nh({type:"lazy",getter:e})}var oh=g("ZodPromise",(e,t)=>{Ff.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>ug(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function eC(e){return new oh({type:"promise",innerType:e})}var ih=g("ZodFunction",(e,t)=>{Wf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>qp(e,n,r,o)});function tC(e){return new ih({type:"function",input:Array.isArray(e?.input)?Ng(e?.input):e?.input??gi(Gn()),output:e?.output??Gn()})}var vi=g("ZodCustom",(e,t)=>{Zf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Vp(e,n,r,o)});function nC(e){let t=new J({check:"custom"});return t._zod.check=e,t}function rC(e,t){return _p(vi,e??(()=>!0),t)}function sh(e,t={}){return Cp(vi,e,t)}function ah(e){return wp(e)}var oC=Rp,iC=Ep;function sC(e,t={}){let n=new vi({type:"custom",check:"custom",fn:(r)=>r instanceof e,abort:!0,...I.normalizeParams(t)});return n._zod.bag.Class=e,n._zod.check=(r)=>{if(!(r.value instanceof e))r.issues.push({code:"invalid_type",expected:e.name,input:r.value,inst:n,path:[...n._zod.def.path??[]]})},n}var aC=(...e)=>Pp({Codec:al,Boolean:Vr,String:Ur},...e);function cC(e){let t=rh(()=>tl([Nc(e),bg(),vg(),Cg(),gi(t),Dg(Nc(),t)]));return t}function lC(e,t){return mi(rl(e),t)}var uC={invalid_type:"invalid_type",too_big:"too_big",too_small:"too_small",invalid_format:"invalid_format",not_multiple_of:"not_multiple_of",unrecognized_keys:"unrecognized_keys",invalid_union:"invalid_union",invalid_key:"invalid_key",invalid_element:"invalid_element",invalid_value:"invalid_value",custom:"custom"};function dC(e){se({customError:e})}function mC(){return se().customError}var cl;(function(e){})(cl||(cl={}));var QD=()=>{let e={string:{unit:"characters",verb:"to have"},file:{unit:"bytes",verb:"to have"},array:{unit:"items",verb:"to have"},set:{unit:"items",verb:"to have"},map:{unit:"entries",verb:"to have"}};function t(o){return e[o]??null}let n={regex:"input",email:"email address",url:"URL",emoji:"emoji",uuid:"UUID",uuidv4:"UUIDv4",uuidv6:"UUIDv6",nanoid:"nanoid",guid:"GUID",cuid:"cuid",cuid2:"cuid2",ulid:"ULID",xid:"XID",ksuid:"KSUID",datetime:"ISO datetime",date:"ISO date",time:"ISO time",duration:"ISO duration",ipv4:"IPv4 address",ipv6:"IPv6 address",mac:"MAC address",cidrv4:"IPv4 range",cidrv6:"IPv6 range",base64:"base64-encoded string",base64url:"base64url-encoded string",json_string:"JSON string",e164:"E.164 number",jwt:"JWT",template_literal:"input"},r={nan:"NaN"};return(o)=>{switch(o.code){case"invalid_type":{let i=r[o.expected]??o.expected,s=$d(o.input),a=r[s]??s;return`Invalid input: expected ${i}, received ${a}`}case"invalid_value":if(o.values.length===1)return`Invalid input: expected ${ba(o.values[0])}`;return`Invalid option: expected one of ${ga(o.values,"|")}`;case"too_big":{let i=o.inclusive?"<=":"<",s=t(o.origin);if(s)return`Too big: expected ${o.origin??"value"} to have ${i}${o.maximum.toString()} ${s.unit??"elements"}`;return`Too big: expected ${o.origin??"value"} to be ${i}${o.maximum.toString()}`}case"too_small":{let i=o.inclusive?">=":">",s=t(o.origin);if(s)return`Too small: expected ${o.origin} to have ${i}${o.minimum.toString()} ${s.unit}`;return`Too small: expected ${o.origin} to be ${i}${o.minimum.toString()}`}case"invalid_format":{let i=o;if(i.format==="starts_with")return`Invalid string: must start with "${i.prefix}"`;if(i.format==="ends_with")return`Invalid string: must end with "${i.suffix}"`;if(i.format==="includes")return`Invalid string: must include "${i.includes}"`;if(i.format==="regex")return`Invalid string: must match pattern ${i.pattern}`;return`Invalid ${n[i.format]??o.format}`}case"not_multiple_of":return`Invalid number: must be a multiple of ${o.divisor}`;case"unrecognized_keys":return`Unrecognized key${o.keys.length>1?"s":""}: ${ga(o.keys,", ")}`;case"invalid_key":return`Invalid key in ${o.origin}`;case"invalid_union":return"Invalid input";case"invalid_element":return`Invalid value in ${o.origin}`;default:return"Invalid input"}}};function ch(){return{localeError:QD()}}var lh=()=>{throw Error("JSON Schema conversion is not bundled into this plugin artifact")};var ll={};mn(ll,{bigint:()=>r$,boolean:()=>n$,date:()=>o$,number:()=>t$,string:()=>e$});function e$(e){return jf(Ur,e)}function t$(e){return Xf(Hr,e)}function n$(e){return ip(Vr,e)}function r$(e){return ap(qr,e)}function o$(e){return bp(pi,e)}se(ch());var i$=ul;var fC=Object.freeze(["hard_stop","use_alternative","scope_down","manual_only","stop_and_explain"]);var Si=64,pC="Rule config exceeds CC Safety Net's safe source limit.";var gU=Object.freeze({maxSources:64,concurrency:4,maxRequests:131,maxResponseBytes:67108864});var dh=[{id:"secret.basename.env",category:"Basename",label:".env",description:"Blocks exact .env files.",basename:".env"},{id:"secret.basename.npmrc",category:"Basename",label:".npmrc",description:"Blocks npm credential config files.",basename:".npmrc"},{id:"secret.basename.pypirc",category:"Basename",label:".pypirc",description:"Blocks Python package index credential files.",basename:".pypirc"},{id:"secret.basename.netrc",category:"Basename",label:".netrc",description:"Blocks machine login credential files.",basename:".netrc"},{id:"secret.basename.git-credentials",category:"Basename",label:".git-credentials",description:"Blocks Git credential storage files.",basename:".git-credentials"},{id:"secret.basename.id-rsa",category:"Basename",label:"id_rsa",description:"Blocks RSA private key basenames.",basename:"id_rsa"},{id:"secret.basename.id-ed25519",category:"Basename",label:"id_ed25519",description:"Blocks Ed25519 private key basenames.",basename:"id_ed25519"},{id:"secret.basename.id-ecdsa",category:"Basename",label:"id_ecdsa",description:"Blocks ECDSA private key basenames.",basename:"id_ecdsa"},{id:"secret.basename.credentials",category:"Basename",label:"credentials",description:"Blocks generic credentials file basenames.",basename:"credentials"}],dl={id:"secret.pattern.env-variant",category:"Pattern",label:".env.*",description:"Blocks environment-specific .env variants."},s$=[".bak",".backup",".copy",".disabled",".old",".orig",".save",".tmp"],a$=[{idSlug:"kube-config",label:"~/.kube/config",directoryParts:[".kube"],basename:"config"},{idSlug:"docker-config",label:"~/.docker/config.json",directoryParts:[".docker"],basename:"config.json"}],mh=[{id:"secret.home.ssh",category:"Home path",label:"~/.ssh",description:"Blocks home SSH configuration and key paths.",suffixParts:[".ssh"]},{id:"secret.home.aws",category:"Home path",label:"~/.aws",description:"Blocks home AWS credential and config paths.",suffixParts:[".aws"]},{id:"secret.home.gcp",category:"Home path",label:"~/.gcp",description:"Blocks home GCP credential paths.",suffixParts:[".gcp"]},{id:"secret.home.gcloud-config",category:"Home path",label:"~/.config/gcloud",description:"Blocks home Google Cloud SDK credential paths.",suffixParts:[".config","gcloud"]},{id:"secret.home.kube-config",category:"Home path",label:"~/.kube/config",description:"Blocks home Kubernetes config files.",suffixParts:[".kube","config"]},{id:"secret.home.docker-config",category:"Home path",label:"~/.docker/config.json",description:"Blocks home Docker credential config files.",suffixParts:[".docker","config.json"]},...a$.flatMap((e)=>s$.map((t)=>({id:["secret.home",e.idSlug,t.slice(1)].join("."),category:"Home path",label:[e.label,t].join(""),description:["Blocks home ",e.label,t," credential backup files."].join(""),suffixParts:[...e.directoryParts,[e.basename,t].join("")]}))),{id:"secret.home.gh-hosts",category:"Home path",label:"~/.config/gh/hosts.yml",description:"Blocks GitHub CLI host credential files.",suffixParts:[".config","gh","hosts.yml"]}];var ml=[{id:"secret.cli.claude-code",category:"Coding CLI credential",label:"Claude Code credentials",paths:["~/.claude/.credentials.json"]},{id:"secret.cli.claude-code.config",category:"Coding CLI config",label:"Claude Code config",paths:["~/.claude/settings.json","~/.claude/settings.local.json","~/.claude.json","<project>/.claude/settings.local.json","<project>/.mcp.json"]},{id:"secret.cli.antigravity",category:"Coding CLI config",label:"Antigravity CLI hook config",paths:["~/.gemini/config/hooks.json","~/.gemini/config/mcp_config.json"]},{id:"secret.cli.codex",category:"Coding CLI credential",label:"Codex credentials",paths:["~/.codex/auth.json","~/.codex/.credentials.json","~/.codex/secrets","~/.codex/.sandbox-secrets"]},{id:"secret.cli.codex.config",category:"Coding CLI config",label:"Codex config",paths:["~/.codex/config.toml","~/.codex/<name>.config.toml"]},{id:"secret.cli.gemini",category:"Coding CLI credential",label:"Gemini CLI credentials",paths:["~/.gemini/oauth_creds.json","~/.gemini/mcp-oauth-tokens.json","~/.gemini/a2a-oauth-tokens.json","~/.gemini/gemini-credentials.json"]},{id:"secret.cli.gemini.config",category:"Coding CLI config",label:"Gemini CLI config",paths:["~/.gemini/settings.json","~/.gemini/google_accounts.json","<project>/.gemini/settings.json","/Library/Application Support/GeminiCli/settings.json","/etc/gemini-cli/settings.json"]},{id:"secret.cli.copilot-cli",category:"Coding CLI credential",label:"GitHub Copilot CLI credentials",paths:["~/.copilot/config.json","~/.copilot/mcp-oauth-config","~/.copilot/mcp-secrets"]},{id:"secret.cli.copilot-cli.config",category:"Coding CLI config",label:"GitHub Copilot CLI config",paths:["~/.copilot/mcp-config.json"]},{id:"secret.cli.kimi-code",category:"Coding CLI credential",label:"Kimi Code credentials",paths:["~/.kimi-code/server.token","~/.kimi-code/credentials","~/.kimi/credentials","~/.kimi/mcp-oauth"]},{id:"secret.cli.kimi-code.config",category:"Coding CLI config",label:"Kimi Code config",paths:["~/.kimi-code/config.toml","~/.kimi-code/mcp.json","~/.kimi/config.toml","~/.kimi/config.json","~/.kimi/config.json.bak","~/.kimi/mcp.json","<project>/.kimi-code/mcp.json"]},{id:"secret.cli.opencode",category:"Coding CLI credential",label:"OpenCode credentials",paths:["~/.local/share/opencode/auth.json","~/.local/share/opencode/mcp-auth.json","~/.local/share/opencode/opencode.db"]},{id:"secret.cli.opencode.config",category:"Coding CLI config",label:"OpenCode config",paths:["~/.config/opencode/opencode.json","~/.config/opencode/opencode.jsonc","/Library/Application Support/opencode/opencode.json","/etc/opencode/opencode.json","<project>/opencode.json","<project>/opencode.jsonc"]},{id:"secret.cli.pi",category:"Coding CLI credential",label:"Pi credentials",paths:["~/.pi/agent/auth.json"]},{id:"secret.cli.pi.config",category:"Coding CLI config",label:"Pi config",paths:["~/.pi/agent/models.json"]},{id:"secret.cli.amp",category:"Coding CLI credential",label:"Amp Code credentials",paths:["~/.local/share/amp/secrets.json","~/.amp/oauth"]},{id:"secret.cli.amp.config",category:"Coding CLI config",label:"Amp Code config",paths:["~/.config/amp/settings.json","~/.config/amp/settings.jsonc","<project>/.amp/settings.json","<project>/.amp/settings.jsonc"]},{id:"secret.cli.cursor",category:"Coding CLI credential",label:"Cursor CLI credentials",paths:["~/.cursor/auth.json","~/.config/cursor/auth.json","~/.cursor/projects/<name>/mcp-auth.json"]},{id:"secret.cli.cursor.config",category:"Coding CLI config",label:"Cursor CLI config",paths:["~/.cursor/mcp.json","<project>/.cursor/mcp.json"]}],gC=[{prefix:"id_rsa",slug:"id-rsa",label:"id_rsa"},{prefix:"id_dsa",slug:"id-dsa",label:"id_dsa"},{prefix:"id_ed25519",slug:"id-ed25519",label:"id_ed25519"},{prefix:"id_ecdsa",slug:"id-ecdsa",label:"id_ecdsa"},{prefix:"credentials",slug:"credentials",label:"credentials"}],c$=[".bak",".backup",".copy",".disabled",".key",".old",".orig",".pem",".save",".tmp"],fh=gC.map((e)=>({id:`secret.variant.${e.slug}.separator`,category:"Variant",label:`${e.label}-* / ${e.label}_*`,description:`Blocks ${e.label} variants with dash or underscore suffixes.`,prefix:e.prefix})),ph=gC.flatMap((e)=>c$.map((t)=>({id:`secret.variant.${e.slug}.${t.slice(1)}`,category:"Variant",label:`${e.label}${t}`,description:`Blocks ${e.label}${t} private credential variants.`,prefix:e.prefix,suffix:t}))),xi={id:"secret.pattern.ssh-key-basename",category:"Pattern",label:"*_(rsa|dsa|ed25519|ecdsa)",description:"Blocks extensionless SSH private key-like basenames.",pattern:/^.*_(rsa|dsa|ed25519|ecdsa)$/},gh=["agilekeychain","asc","bek","cscfg","fve","gnucash","jks","keychain","kwallet","mdf","ovpn","p12","pcap","pem","pfx","pkcs12","psafe3","rdp","sdf","tblk","tpm"].map((e)=>({id:`secret.ext.${e}`,category:"Extension",label:`.${e}`,description:`Blocks files with the .${e} extension.`,extension:e})),hh=[{id:"secret.ext-pattern.key",category:"Extension pattern",label:".key / .keypair",description:"Blocks key and keypair extension patterns.",pattern:/^key(pair)?$/},{id:"secret.ext-pattern.keystore",category:"Extension pattern",label:".keystore / .keyring",description:"Blocks keystore and keyring extension patterns.",pattern:/^key(store|ring)$/},{id:"secret.ext-pattern.kdbx",category:"Extension pattern",label:".kdb / .kdbx",description:"Blocks KeePass database extension patterns.",pattern:/^kdbx?$/}],hC=[...dh,dl,...mh,...fh,...ph,xi,...gh,...hh,...ml].map((e)=>({id:e.id,category:e.category,label:e.label,...e.category==="Coding CLI config"?{defaultOff:!0}:{},..."paths"in e?{paths:e.paths}:{description:e.description}})),yC=new Set(ml.flatMap((e)=>e.category==="Coding CLI config"?[e.id]:[])),l$=hC.map((e)=>e.id),fl=new Set(l$);var AU=u$(import.meta.url),bC,d$=Array(Si+1).fill("over-limit"),vC=/^[^/]+\/[^/]+$/,m$=/^sha256:[a-f0-9]{64}$/,pl=`must be an integer between ${Sl} and ${xl}`,f$=["version","rules","overrides","transparent_wrappers"],p$=["version","safety","workflow","destructive_command_protection","secret_protection","audit"];function SC(e){if(!Ye(e)||!Array.isArray(e.rules)||e.rules.length<=Si)return e;return{$schema:e.$schema,version:e.version,rules:d$,overrides:e.overrides,transparent_wrappers:e.transparent_wrappers}}function g$(){let e=uh,t=(_)=>{let v=e.superRefine(_);return v._zod.def.when=()=>!0,v},n=e.enum(fC),r=e.union([e.literal("off"),e.looseObject({reason:e.string({error:"required non-empty string"}).min(1,"required non-empty string").max(er,`must be at most ${er} characters`).describe("Replacement block reason"),intent:n.optional()})],{error:'must be "off" or an object'}).describe("Disable a rule or replace its block reason and intent."),o=e.string({error:"must be a rulebook source string"}).min(1,"must be a non-empty rulebook source string"),i=e.string({error:"must be a command string"}).regex(bn,"must match command pattern").describe("Command name such as 'git', 'docker', or 'rtk'."),s=e.looseObject({$schema:e.unknown().optional().describe("JSON Schema reference for IDE support"),version:e.literal(1).describe("Schema version (must be 1)"),rules:e.array(o,{error:"must be an array of rulebook source strings"}).max(Si,pC).default([]).describe("Rulebook source strings such as project-rules or owner/repo#main/team-rules"),overrides:e.record(e.string().meta({pattern:vC.source}),r).default({}).describe("Rule overrides by id"),transparent_wrappers:e.array(i,{error:"must be an array of command strings"}).default([]).describe("Commands that transparently execute a visible protected child command")}),a=(_,v)=>{if(!Ye(_))return;if(Array.isArray(_.rules)&&_.rules.length<=Si){let k=new Set;_.rules.forEach((z,M)=>{if(typeof z!=="string"||z==="")return;if(z.trim()===""){v.addIssue({code:"custom",message:"must be a non-empty rulebook source string",path:["rules",M]});return}let W=Xr(z);if(W){v.addIssue({code:"custom",message:W,path:["rules",M]});return}if(k.has(z)){v.addIssue({code:"custom",message:`duplicate rulebook source "${z}"`,path:["rules",M]});return}k.add(z)})}if(Ye(_.overrides))for(let k of Object.keys(_.overrides)){if(vC.test(k))continue;v.addIssue({code:"custom",message:"must use <rulebook-name>/<rule-name>",path:["overrides",k]})}if(!Array.isArray(_.transparent_wrappers))return;let T=new Set;_.transparent_wrappers.forEach((k,z)=>{if(typeof k!=="string"||!bn.test(k))return;if(T.has(k)){v.addIssue({code:"custom",message:`duplicate command "${k}"`,path:["transparent_wrappers",z]});return}if(Av(k)){v.addIssue({code:"custom",message:`reserved command "${k}" cannot be a wrapper`,path:["transparent_wrappers",z]});return}T.add(k)})},c=e.preprocess(SC,s.check(e.superRefine(a))),l=e.preprocess(SC,s.check(t(a))),u=e.strictObject({fail_closed:e.boolean().optional(),paranoid_rm:e.boolean().optional(),paranoid_interpreters:e.boolean().optional()}),d=(_,v)=>e.intersection(e.record(e.string().refine((T)=>_.has(T),{error:(T)=>`unknown ${v} rule id "${String(T.input)}"`}),e.unknown()),e.record(e.string(),e.enum(["on","off"]))),f=(_)=>e.array(e.string({error:"must be a non-empty path string"}),{error:"must be an array of paths"}).check(t((v,T)=>{if(!Array.isArray(v))return;let k=hn();v.forEach((z,M)=>{if(typeof z!=="string")return;let W=_(z,k);if(W)T.addIssue({code:"custom",message:W,path:[M]})})})),m=e.strictObject({version:e.literal(1),safety:e.strictObject({level:e.enum(["standard","strict","paranoid"]).optional(),overrides:u.optional()}).optional(),workflow:e.strictObject({worktree_mode:e.boolean().optional()}).optional(),destructive_command_protection:e.strictObject({enabled:e.boolean().optional(),overrides:d(Xi,"destructive command").optional(),allow_paths:f(Ws).optional()}).optional(),secret_protection:e.strictObject({enabled:e.boolean().optional(),overrides:d(fl,"secret protection").optional(),deny_paths:f(Fs).optional(),allow_paths:f(Gs).optional()}).optional(),audit:e.strictObject({retention_days:e.number({error:pl}).int(pl).min(Sl,pl).max(xl,pl).optional().describe("Days of audit log history to keep before the sweep deletes it")}).optional()}),p=(_)=>{let v=(M,W)=>_==="legacy"?M:W,T=v("must match pattern (letters, numbers, hyphens, underscores)","must match command pattern"),k=`required non-empty string up to ${er} characters`,z=e.looseObject({name:e.string({error:"required string"}).regex(ut,v("must match pattern (letters, numbers, hyphens, underscores; max 64 chars)","must match rule name pattern")),command:e.string({error:v("required string","required string matching command pattern")}).regex(bn,v(T,"required string matching command pattern")),subcommand:e.string({error:v("must be a string if provided","must match command pattern")}).regex(bn,T).optional(),block_args:e.array(e.string({error:v("must be a string","must be a non-empty string")}).refine((M)=>M!=="",{error:v("must not be empty","must be a non-empty string")}),{error:v("required array","required non-empty array")}).refine((M)=>M.length>0,{error:v("must have at least one element","required non-empty array")}),reason:e.string({error:v("required string",k)}).refine((M)=>M!=="",{error:v("must not be empty",k)}).refine((M)=>M.length<=er,{error:v(`must be at most ${er} characters`,k)}),intent:n.optional()},{error:"must be an object"});return e.array(z,{error:v("must be an array","required array")}).check(t((M,W)=>{if(!Array.isArray(M))return;let U=new Set;M.forEach((ge,Ze)=>{let A=Ye(ge)?ge.name:void 0;if(typeof A!=="string")return;if(U.has(A.toLowerCase())){W.addIssue({code:"custom",message:`duplicate rule name "${A}"`,path:[Ze,"name"]});return}U.add(A.toLowerCase())})}))},h=e.looseObject({version:e.literal(1),rules:p("legacy").optional()}),b="required string matching rule name pattern",y=e.looseObject({command:e.string({error:"required non-empty string"}).refine((_)=>_.trim()!=="",{error:"required non-empty string"}),expect:e.enum(["blocked","allowed"]),rule:e.string({error:"must be a string if provided"}).optional()},{error:"must be an object"}).check(t((_,v)=>{if(!Ye(_))return;if(_.expect!=="blocked"||typeof _.rule==="string")return;v.addIssue({code:"custom",message:"required string for blocked fixtures",path:["rule"]})})),R=e.looseObject({name:e.string({error:"required string matching rule name pattern"}).regex(ut,"required string matching rule name pattern"),version:e.string({error:"required non-empty string"}).refine((_)=>_!=="",{error:"required non-empty string"}),allowed_commands:e.array(e.string({error:"must match command pattern"}).regex(bn,"must match command pattern"),{error:"required array"}).check(t((_,v)=>{if(!Array.isArray(_))return;let T=new Set;_.forEach((k,z)=>{if(typeof k!=="string"||!bn.test(k))return;if(T.has(k)){v.addIssue({code:"custom",message:`duplicate command "${k}"`,path:[z]});return}T.add(k)})})),rules:p("rulebook"),tests:e.array(y,{error:"must be an array if provided"}).optional()}).check(t((_,v)=>{if(!Ye(_))return;let T=new Set(yh(_));if(Array.isArray(_.tests)){let z=new Set(_.tests.flatMap((M)=>Ye(M)&&M.expect==="blocked"&&typeof M.rule==="string"?[M.rule]:[]));for(let M of z){if(T.has(M))continue;v.addIssue({code:"custom",message:`blocked fixture references unknown rule "${M}"`,path:["tests"]})}}if(!Array.isArray(_.allowed_commands)||!Array.isArray(_.rules))return;let k=new Set(_.allowed_commands.filter((z)=>typeof z==="string"));_.rules.forEach((z,M)=>{let W=Ye(z)?z.command:void 0;if(typeof W!=="string"||k.has(W))return;v.addIssue({code:"custom",message:`"${W}" must be listed in allowed_commands`,path:["rules",M,"command"]})})})),w=e.string({error:"required string"}).refine((_)=>_.trim()!=="",{error:"required string"}),E=e.looseObject({spec:w,name:w,version:w,digest:e.string({error:"required sha256 digest"}).regex(m$,"required sha256 digest")},{error:"must be an object"}),P=e.looseObject({rulebooks:e.array(e.intersection(E,e.discriminatedUnion("kind",[e.object({kind:e.literal("local-directory"),path:w}),e.object({kind:e.literal("github"),owner:w,repo:w,ref:w,commit:w,path:w,display_ref:e.unknown().optional()})],{error:(_)=>{if(!Ye(_.input))return"must be an object";let v=_.input.kind;return typeof v==="string"?`unknown kind "${v}"`:"required string"}})))});return{RulesConfigSchema:c,RulesConfigDiagnosticSchema:l,RuleOverrideSchema:r,UserPolicySchema:m,LegacyConfigSchema:h,RulebookSchema:R,RulesLockfileSchema:P}}function _i(){return bC??=g$(),bC}function xC(){return _i().RulesConfigSchema}function h$(){return _i().UserPolicySchema}function _C(){return _i().RulebookSchema}function CC(){return _i().RulesLockfileSchema}function yh(e){let t=Ye(e)?e.rules:void 0;return(Array.isArray(t)?t:[]).flatMap((n)=>{let r=Ye(n)?n.name:void 0;return typeof r==="string"?[r]:[]})}function wC(e){let t=_i().RulesConfigDiagnosticSchema.safeParse(e);if(t.success)return{errors:[],sources:new Set(t.data.rules)};return{errors:Kr(PC(t.error.issues,f$)),sources:S$(e,t.error.issues)}}function RC(e){let t=h$().safeParse(e);if(t.success)return[];return Kr(PC(t.error.issues,p$)," ")}function Kr(e,t=": ",n=" "){return[...new Set(e.flatMap((r)=>EC(r,t,n,[])))]}function EC(e,t,n,r){let o=[...r,...e.path],i=v$(o);if(e.code==="unrecognized_keys")return e.keys.map((s)=>`${i?`${i}.`:""}unknown field "${s}"`);if(e.code==="invalid_key")return e.issues.map((s)=>s.message);if(e.code==="invalid_union"){let s=e.errors.flat().filter((a)=>a.path.length>0);if(s.length>0)return s.flatMap((a)=>EC(a,t,n,o))}if(o.length===0)return[e.code==="invalid_type"?"Config must be an object":e.message];if(o.length===1&&(e.code==="too_big"||e.code==="too_small")&&e.origin==="array")return[e.message];return[`${i}${o.length===1?n:t}${y$(e)}`]}function y$(e){if(e.code==="invalid_value")return`must be ${b$(e.values)}`;if(e.code!=="invalid_type"||!e.message.startsWith("Invalid input:"))return e.message;if(e.expected==="object"||e.expected==="record")return"must be an object if provided";return e.expected==="boolean"?"must be a boolean":e.message}function b$(e){if(e.length>3)return`one of ${e.join(", ")}`;let t=e.map((n)=>typeof n==="string"?`"${n}"`:String(n));if(t.length<2)return`${t[0]}`;return`${t.slice(0,-1).join(", ")}${t.length>2?",":""} or ${t.at(-1)}`}function v$(e){return e.map((t,n)=>{if(typeof t==="number")return`[${t}]`;return n===0?String(t):`.${String(t)}`}).join("")}function PC(e,t){let n=e.map((i)=>i.path[1]),r=[...new Set(n.filter((i)=>typeof i==="string"))],o=(i,s)=>[i.path.length===0?-1:t.indexOf(String(i.path[0])),typeof s==="number"?s:r.indexOf(String(s)),i.code==="custom"?0:1];return e.map((i,s)=>({issue:i,rank:o(i,n[s])})).sort((i,s)=>i.rank[0]-s.rank[0]||i.rank[1]-s.rank[1]||i.rank[2]-s.rank[2]).map((i)=>i.issue)}function S$(e,t){let n=Ye(e)?e.rules:void 0;if(!Array.isArray(n))return new Set;if(t.some((o)=>o.path.length===1&&o.path[0]==="rules"))return new Set;let r=new Set(t.filter((o)=>o.path[0]==="rules"&&typeof o.path[1]==="number").map((o)=>o.path[1]));return new Set(n.filter((o,i)=>typeof o==="string"&&!r.has(i)))}function Ye(e){return!!e&&typeof e==="object"&&!Array.isArray(e)}function x$(e){return wC(e)}function bh(e){try{let t=fn(_$(e));if(t===null)return{config:null,errors:[]};if(!t.trim())return{config:null,errors:["Config file is empty"]};let n=JSON.parse(t),r=x$(n);if(r.errors.length>0)return{config:null,errors:r.errors};let o=xC().parse(n);return{config:{version:1,rules:o.rules??[],overrides:o.overrides??{},transparent_wrappers:o.transparent_wrappers??[]},errors:[]}}catch(t){if(t instanceof ae)return{config:null,errors:[t.message]};let n=t instanceof Error?t.message:String(t);return{config:null,errors:[t instanceof SyntaxError?"Invalid JSON":n]}}}function _$(e){return typeof e==="string"?Ni(e):e}var P$=new Set(["standard","strict","paranoid"]),k$={version:1,safety:{level:"standard",overrides:{}},workflow:{worktree_mode:!1},destructive_command_protection:{enabled:!0,overrides:{},allow_paths:[]},secret_protection:{enabled:!0,overrides:{},deny_paths:[],allow_paths:[]},audit:{retention_days:Ti}};function vh(e){return E$(R$(pn(e)),Mi)}function IC(e={}){let t=z$(vh(e));return{...t.policy,errors:t.errors,...t.fallback?{fallback:t.fallback}:{}}}function kC(e){if(!Pt(e))return O$();let t=Pt(e.safety)?e.safety:{},n=Pt(t.overrides)?t.overrides:{},r=Pt(e.workflow)?e.workflow:{},o=Pt(e.destructive_command_protection)?e.destructive_command_protection:{},i=Pt(e.secret_protection)?e.secret_protection:{};return{version:1,safety:{level:P$.has(t.level)?t.level:"standard",overrides:{...typeof n.fail_closed==="boolean"?{fail_closed:n.fail_closed}:{},...typeof n.paranoid_rm==="boolean"?{paranoid_rm:n.paranoid_rm}:{},...typeof n.paranoid_interpreters==="boolean"?{paranoid_interpreters:n.paranoid_interpreters}:{}}},workflow:{worktree_mode:typeof r.worktree_mode==="boolean"?r.worktree_mode:!1},destructive_command_protection:{enabled:typeof o.enabled==="boolean"?o.enabled:!0,overrides:AC(o.overrides,Xi),allow_paths:T$(o.allow_paths)},secret_protection:{enabled:typeof i.enabled==="boolean"?i.enabled:!0,overrides:AC(i.overrides,fl),deny_paths:A$(i.deny_paths),allow_paths:I$(i.allow_paths)},audit:{retention_days:Ii(Pt(e.audit)?e.audit.retention_days:void 0)}}}function AC(e,t){if(!Pt(e))return{};return Object.fromEntries(Object.entries(e).flatMap(([n,r])=>t.has(n)&&(r==="on"||r==="off")?[[n,r]]:[]))}function A$(e){if(!Array.isArray(e))return[];let t=hn();return e.filter((n)=>Fs(n,t)===null)}function T$(e){if(!Array.isArray(e))return[];let t=hn();return e.filter((n)=>Ws(n,t)===null)}function I$(e){if(!Array.isArray(e))return[];let t=hn();return e.filter((n)=>Gs(n,t)===null)}function Pt(e){return!!e&&typeof e==="object"&&!Array.isArray(e)}function O$(){return structuredClone(k$)}function z$(e){let t=N$();if(!C$(e)){let n=globalThis.__CC_SAFETY_NET_EMBEDDED_POLICY__;if(!Pt(n))return{policy:t,errors:[]};return{policy:TC(kC(n)),errors:[]}}try{let n=w$(e,"utf-8");if(!n.trim())return{policy:t,errors:[`${e}: Config file is empty`],fallback:"defaults"};let r=JSON.parse(n),o=RC(r),i=TC(kC(r));if(o.length>0)return{policy:i,errors:o.map((s)=>`${e}: ${s}`),fallback:Pt(r)?"salvaged":"defaults"};return{policy:i,errors:[]}}catch(n){let r=n instanceof Error?n.message:String(n);return{policy:t,errors:[`${e}: ${n instanceof SyntaxError?"Invalid JSON":r}`],fallback:"defaults"}}}function OC(e){let t=Object.entries(e),n=new Set(t.flatMap(([r,o])=>o==="on"?[r]:[]));return[...new Set([...[...yC].filter((r)=>!n.has(r)),...t.flatMap(([r,o])=>o==="off"?[r]:[])])]}function N$(){return{safety:{},worktreeMode:!1,destructiveCommandProtectionEnabled:!0,destructiveCommandRuleOverrides:{},destructiveCommandAllowPaths:[],secretProtection:{enabled:!0,disabledRules:OC({}),denyPaths:[],allowPaths:[]}}}function TC(e){return{safety:D$(e.safety),worktreeMode:e.workflow.worktree_mode,destructiveCommandProtectionEnabled:e.destructive_command_protection.enabled,destructiveCommandRuleOverrides:e.destructive_command_protection.overrides,destructiveCommandAllowPaths:e.destructive_command_protection.allow_paths,secretProtection:{enabled:e.secret_protection.enabled,disabledRules:OC(e.secret_protection.overrides),denyPaths:e.secret_protection.deny_paths,allowPaths:e.secret_protection.allow_paths}}}function D$(e){let t={...e.overrides.fail_closed!==void 0?{failClosed:e.overrides.fail_closed}:{},...e.overrides.paranoid_rm!==void 0?{paranoidRm:e.overrides.paranoid_rm}:{},...e.overrides.paranoid_interpreters!==void 0?{paranoidInterpreters:e.overrides.paranoid_interpreters}:{}};return{level:e.level,...Object.keys(t).length>0?{overrides:t}:{}}}var $C="This path contains the protected policy config and you must not modify or delete it.",M$=new Set(["[","cat","file","grep","head","jq","less","ls","more","rg","sed","stat","tail","test","wc"]);function MC(e){let t=gn(Ot()),n=B$(e.invocation.context.executionCwd,t);if(e.invocation.route.kind==="patch")return zC(e.paths,!1,e.invocation.context.executionCwd,n,t);let r=Ne(e,"input-candidate");if(e.invocation.route.kind==="command")return r?NC(r.shell,e.invocation.context.executionCwd,n,t):null;if(e.invocation.route.kind==="unknown"&&r){let o=NC(r.shell,e.invocation.context.executionCwd,n,t);if(o)return o}return zC(e.paths,e.invocation.route.kind==="grep"||e.invocation.route.kind==="glob"||Os(e.invocation.toolName),e.invocation.context.executionCwd,n,t)}function zC(e,t,n,r,o){if(t)return null;let i=e.find((s)=>Ci(s,n,r,o));return i?{target:i}:null}function NC(e,t,n,r){let o=Ns(e,t,r,{findSegmentTarget:(i,s)=>L$(i,s,n,r)?.target??null,isRedirectionTarget:(i,s)=>Ci(i,s.cwd,n,r),findMalformedTarget:(i)=>Z$(i,t,n,r)?.target??null,normalizeCwd:ve});return o?{target:o}:null}function L$(e,t,n,r){if(So(e))return null;let o=r.environment,i=Yt([...e],o),s=G(i[0]??"").toLowerCase(),a=i.slice(1);if(s==="rm"&&W$(a)){let c=F$(a).find((l)=>DC(De(l,t.variables),t.cwd,n,r));if(c)return{target:c}}if(s==="find"){if(Ks(i,1)||Lu(i,o)){let l=(qs(j(i))??j(["."])).find((u)=>{let d=De(u.text,t.variables);return Ci(d,t.cwd,n,r)||DC(d,t.cwd,n,r)})?.text;if(l)return{target:l}}}if(s==="mv"){let c=Ds(a).sources.find((l)=>U$(De(l,t.variables),t.cwd,n,r));if(c)return{target:c}}if(G$(e,o))return null;for(let c of[...e,...i])for(let l of LC(c))if(Ci(De(l,t.variables),t.cwd,n,r))return{target:l};return null}function W$(e){return e.some((t)=>t==="--recursive"||t.startsWith("-")&&!t.startsWith("--")&&/[rR]/.test(t.slice(1)))}function F$(e){let t=e.indexOf("--");if(t!==-1)return[...e.slice(0,t).filter((n)=>!n.startsWith("-")),...e.slice(t+1)];return e.filter((n)=>!n.startsWith("-"))}function G$(e,t){let n=Yt([...e],t);if(n.length===0)return!1;let r=G(n[0]??"").toLowerCase();if(!M$.has(r))return!1;if(r!=="sed")return!0;return!n.slice(1).some((o)=>o.startsWith("-i")||o==="--in-place"||o.startsWith("--in-place="))}function Z$(e,t,n,r){for(let o of e.split(/\s+/))for(let i of LC(o))if(Ci(i,t,n,r))return{target:i};return null}function LC(e){let t=e.trim().replace(/^['"]|['"]$/g,""),n=t.indexOf("=");return n===-1||n===t.length-1?[t]:[t,t.slice(n+1)]}function B$(e,t){let n=ve(vh(),e,t),r=Sh(n),o=new Set;for(let i=r;;i=Sh(i))if(o.add(Yr(i)),Sh(i)===i)break;return{file:Yr(n),directoryAndAncestors:o}}function Ci(e,t,n,r){let o=rv(e,t,r,(i)=>Yr(i)===$$(n.file));return o!==null&&Yr(o)===n.file}function DC(e,t,n,r){return n.directoryAndAncestors.has(Yr(ve(e,t,r)))}function U$(e,t,n,r){let o=Yr(ve(e,t,r));return o===n.file||n.directoryAndAncestors.has(o)}function Yr(e){return process.platform==="win32"?e.toLowerCase():e}import{homedir as _h}from"os";import{isAbsolute as gl,posix as j$,resolve as yl,win32 as H$}from"path";import{fileURLToPath as V$}from"url";var KC="Access to a sensitive path is not allowed.",YC=new Set(["echo","printf"]),q$=new Set(["find"]),K$=new Set(["-exec","-execdir"]),Y$=new Set([";","+"]),J$=new Set(["-delete","-exec","-execdir","-fls","-fprint","-fprint0","-fprintf","-ok","-okdir"]),X$=new Set(["-name","-iname","-path","-ipath","-wholename","-iwholename","-samefile"]),Q$=new Set(["python","python2","python3","node","deno","bun","ruby","perl","php","rscript","osascript","bash","sh","zsh","dash","ksh"]),e0=new Set(["node","bun"]),t0=new Set(["bun","child_process","deno","dotenv","fs","subprocess"]),n0=new Set(["append","awk","base64","cat","chmod","chown","connect","copy","cp","database","dd","eval","exec","fetch","file","function","grep","head","include","load","move","mv","open","popen","read","remove","rename","require","rg","rm","sed","shell","source","spawn","strings","system","tail","tar","truncate","unlink","write","xxd","zip"]),JC=new Set(["-c","-e","-r","-E","--eval","--exec"]),r0=new Set(["src/cli/cc-safety-net.ts","dist/bin/cc-safety-net.js"]),WC=new Set(["cc-safety-net","ccsn"]),o0=new Set(["bunx","npx","pnpx"]),i0=new Set(["bun","node"]),s0=new Map([["c",new Set(["bash","sh","zsh","dash","ksh","python"])],["e",new Set(["node","deno","bun","ruby","perl","rscript","osascript"])],["E",new Set(["perl"])],["r",new Set(["php"])]]),a0=new Set(["grep","rg"]),FC="f",GC="file",c0="files",l0=new Set(["e","f"]),u0=new Set(["regexp","file"]),d0=new Set(["e","f","A","B","C","m"]),m0=new Set(["regexp","file","after-context","before-context","context","max-count"]),f0=new Set(["|","|&"]),xh="__CC_SAFETY_NET_PIPE_INPUT__",XC=new Set(["bash","sh","zsh","dash","ksh"]),p0=new Map([["bash",new Set(["-O"])],["sh",new Set(["-O"])],["zsh",new Set(["-o"])],["dash",new Set(["-o"])],["ksh",new Set(["-o"])],["python",new Set(["-W","-X"])],["node",new Set(["-r","--require","--loader","--import","--input-type"])]]);function ZC(e,t,n,r,o){let i=eo();for(let s of e){if(tM(s,t,n?.denyPaths??[],r,i))return{target:s,ruleId:"secret.deny-path"};if(o&&!o.has(s))continue;let a=Q0(s,t,n,i);if(a){if(!a.startsWith("secret.cli.")&&nM(s,t,n?.allowPaths??[],r,i))continue;return{target:s,ruleId:a}}}return null}function QC(e,t,n={}){let r=BC(e),o=ZC(r,e.invocation.context.executionCwd,t,e.invocation.context.configCwd),i=o?.ruleId!=="secret.deny-path"&&n.strict===!1?BC(e,{refineJavaScriptInlineData:!0}):r,s=i.length===r.length?o:ZC(r,e.invocation.context.executionCwd,t,e.invocation.context.configCwd,new Set(i));if(s?.ruleId!=="secret.deny-path"&&n.strict===!1&&g0(e))return null;return s}function g0(e){if(e.invocation.route.kind!=="command")return!1;let t=Ne(e,"input-candidate")??Ne(e,"declared-command");if(!t)return!1;if(t.program.nodes.some((s)=>s.kind==="command"&&s.nested.length>0))return!1;let n=[];for(let s of t.shell.entries){if(s.kind==="operator"&&s.boundary)return!1;if(s.kind==="redirection")return!1;if(s.kind!=="operator")n.push(gt(s.text))}let r=Jr(n);if(r.length===0)return!1;let o=Un(r[0]??"").toLowerCase(),i=r.slice(1);if(o==="ls"||o==="stat")return!0;if(o==="test")return i.length===2&&(i[0]==="-e"||i[0]==="-f");if(o!=="find")return!1;return!i.some((s)=>J$.has(s))}function BC(e,t={}){if(e.invocation.route.kind==="command"){let r=Ne(e,"input-candidate");return r?Ei(r.shell,e.store,t):[]}if(e.invocation.route.kind!=="unknown")return[...e.paths];let n=Ne(e,"input-candidate");return[...n?Ei(n.shell,e.store,t):[],...e.paths]}function Ei(e,t,n){if(e.status==="structural-limit")throw new pt;if(e.status==="unclosed-quote")return[];if(e.status==="invalid")throw Error("Unable to parse command for secret protection");let r=[...e.assignmentFallbacks,...D0(gt(e.source),t,n)],o=[],i=null;for(let s of e.entries){if(s.kind==="operator"){if(!s.boundary)continue;if(o.length>0){if(r.push(...hl(o,t,n)),i!==null)r.push(...jC(i,o,t,n));i=f0.has(s.operator)?o:null,o=[]}else i=null;continue}if(s.kind==="redirection"){let a=s.target?gt(s.target):void 0;if(a&&s.targetOrder==="legacy-segment")o.push(a);else if(a)r.push(a);continue}o.push(gt(s.text))}if(o.length>0){if(r.push(...hl(o,t,n)),i!==null)r.push(...jC(i,o,t,n))}return r}function hl(e,t,n){let r=R0(e),o=Jr(e);if(o.length===0)return r;let i=o[0]??"",s=Un(i).toLowerCase(),a=o.slice(1),c=y0(i,s,a);if(c)return[...r,...c];if(YC.has(s))return r;if(a0.has(s))return[...r,...B0(a)];if(q$.has(s))return[...r,...E0(a,t,n)];if($e.has(s))return[...r,...a.flatMap((l)=>HC("awk",l)),...a.flatMap((l)=>k0(l,t,n)),...a.flatMap(A0)];if(nw(s)){if(XC.has(s)){let l=ev(s,a);if(l!==null&&t.getShellSyntax(l).status==="structural-limit")throw new pt}return[...r,...P0(s,a,n)]}return[...r,...a.flatMap((l)=>HC(s,l))]}function h0(e,t){if(WC.has(e))return t[0]==="explain"?0:null;if(o0.has(e)){let n=t[0]==="-y"||t[0]==="--yes"?1:0;return WC.has(t[n]??"")&&t[n+1]==="explain"?n+1:null}if(i0.has(e)){if(UC(t[0])&&t[1]==="explain")return 1;if(e==="bun"&&t[0]==="run"&&UC(t[1])&&t[2]==="explain")return 2}return null}function y0(e,t,n){let r=h0(t,n);if(r===null)return null;let o=[e,...n.slice(0,r)],i=n.slice(r+1);for(let s=0;s<i.length;s++){let a=i[s];if(a==="--json"||a==="--help"||a==="-h")continue;if(a==="--cwd"){let c=i[s+1];if(c&&!c.startsWith("--"))o.push(c);s++;continue}return o}return o}function UC(e){let t=e?.replaceAll("\\","/");return[...r0].some((n)=>t===n||t?.endsWith(`/${n}`))}function jC(e,t,n,r){if(_0(t,n,r))return b0(e);let o=C0(t);if(o===null)return[];return v0(e).flatMap((i)=>XC.has(o)?Ei(n.getShellSyntax(i),n,r):ow(i))}function b0(e){let t=Jr(e);if(t.length===0)return[];let n=Un(t[0]??"").toLowerCase();if(!YC.has(n))return[];return t.slice(1)}function v0(e){let t=Jr(e);if(t.length===0)return[];let n=Un(t[0]??"").toLowerCase(),r=t.slice(1);if(n==="echo"){let o=r.findIndex((i)=>!/^-[neE]+$/.test(i));return[(o===-1?[]:r.slice(o)).join(" ")]}if(n==="printf")return S0(r);return[]}function S0(e){let t=e[0];if(t===void 0)return[];let n=(t.match(/%%|%[bqs]/g)??[]).filter((o)=>o!=="%%").length;if(n===0||e.length===1)return[ew(t)];let r=e.slice(1);return Array.from({length:Math.ceil(r.length/n)},(o,i)=>x0(t,r.slice(i*n,(i+1)*n)))}function x0(e,t){let n=0;return ew(e.replace(/%%|%[bqs]/g,(r)=>{if(r==="%%")return"%";let o=t[n]??"";return n++,o}))}function ew(e){return e.replace(/\\n/g,`
+      `)}m.write("payload.value = newResult;"),m.write("return payload;");let R=m.compile();return(w,E)=>R(f,w,E)},i,s=Dn,a=!Wo.jitless,l=a&&Td.value,u=t.catchall,d;e._zod.parse=(f,m)=>{d??(d=r.value);let p=f.value;if(!s(p))return f.issues.push({expected:"object",code:"invalid_type",input:p,inst:e}),f;if(a&&l&&m?.async===!1&&m.jitless!==!0){if(!i)i=o(t.shape);if(f=i(f,m),!u)return f;return Zx([],p,f,m,d,e)}return n(f,m)}});function Ax(e,t,n,r){for(let i of e)if(i.issues.length===0)return t.value=i.value,t;let o=e.filter((i)=>!cn(i));if(o.length===1)return t.value=o[0].value,o[0];return t.issues.push({code:"invalid_union",input:t.value,inst:n,errors:e.map((i)=>i.issues.map((s)=>Pe(s,r,se())))}),t}var Jo=g("$ZodUnion",(e,t)=>{D.init(e,t),F(e._zod,"optin",()=>t.options.some((o)=>o._zod.optin==="optional")?"optional":void 0),F(e._zod,"optout",()=>t.options.some((o)=>o._zod.optout==="optional")?"optional":void 0),F(e._zod,"values",()=>{if(t.options.every((o)=>o._zod.values))return new Set(t.options.flatMap((o)=>Array.from(o._zod.values)));return}),F(e._zod,"pattern",()=>{if(t.options.every((o)=>o._zod.pattern)){let o=t.options.map((i)=>i._zod.pattern);return new RegExp(`^(${o.map((i)=>Zo(i.source)).join("|")})$`)}return});let n=t.options.length===1,r=t.options[0]._zod.run;e._zod.parse=(o,i)=>{if(n)return r(o,i);let s=!1,a=[];for(let c of t.options){let l=c._zod.run({value:o.value,issues:[]},i);if(l instanceof Promise)a.push(l),s=!0;else{if(l.issues.length===0)return l;a.push(l)}}if(!s)return Ax(a,o,e,i);return Promise.all(a).then((c)=>Ax(c,o,e,i))}});function Tx(e,t,n,r){let o=e.filter((i)=>i.issues.length===0);if(o.length===1)return t.value=o[0].value,t;if(o.length===0)t.issues.push({code:"invalid_union",input:t.value,inst:n,errors:e.map((i)=>i.issues.map((s)=>Pe(s,r,se())))});else t.issues.push({code:"invalid_union",input:t.value,inst:n,errors:[],inclusive:!1});return t}var bf=g("$ZodXor",(e,t)=>{Jo.init(e,t),t.inclusive=!1;let n=t.options.length===1,r=t.options[0]._zod.run;e._zod.parse=(o,i)=>{if(n)return r(o,i);let s=!1,a=[];for(let c of t.options){let l=c._zod.run({value:o.value,issues:[]},i);if(l instanceof Promise)a.push(l),s=!0;else a.push(l)}if(!s)return Tx(a,o,e,i);return Promise.all(a).then((c)=>Tx(c,o,e,i))}}),vf=g("$ZodDiscriminatedUnion",(e,t)=>{t.inclusive=!1,Jo.init(e,t);let n=e._zod.parse;F(e._zod,"propValues",()=>{let o={};for(let i of t.options){let s=i._zod.propValues;if(!s||Object.keys(s).length===0)throw Error(`Invalid discriminated union option at index "${t.options.indexOf(i)}"`);for(let[a,c]of Object.entries(s)){if(!o[a])o[a]=new Set;for(let l of c)o[a].add(l)}}return o});let r=yr(()=>{let o=t.options,i=new Map;for(let s of o){let a=s._zod.propValues?.[t.discriminator];if(!a||a.size===0)throw Error(`Invalid discriminated union option at index "${t.options.indexOf(s)}"`);for(let c of a){if(i.has(c))throw Error(`Duplicate discriminator value "${String(c)}"`);i.set(c,s)}}return i});e._zod.parse=(o,i)=>{let s=o.value;if(!Dn(s))return o.issues.push({code:"invalid_type",expected:"object",input:s,inst:e}),o;let a=r.value.get(s?.[t.discriminator]);if(a)return a._zod.run(o,i);if(t.unionFallback)return n(o,i);return o.issues.push({code:"invalid_union",errors:[],note:"No matching discriminator",discriminator:t.discriminator,input:s,path:[t.discriminator],inst:e}),o}}),Sf=g("$ZodIntersection",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{let o=n.value,i=t.left._zod.run({value:o,issues:[]},r),s=t.right._zod.run({value:o,issues:[]},r);if(i instanceof Promise||s instanceof Promise)return Promise.all([i,s]).then(([c,l])=>Ix(n,c,l));return Ix(n,i,s)}});function Om(e,t){if(e===t)return{valid:!0,data:e};if(e instanceof Date&&t instanceof Date&&+e===+t)return{valid:!0,data:e};if(an(e)&&an(t)){let n=Object.keys(t),r=Object.keys(e).filter((i)=>n.indexOf(i)!==-1),o={...e,...t};for(let i of r){let s=Om(e[i],t[i]);if(!s.valid)return{valid:!1,mergeErrorPath:[i,...s.mergeErrorPath]};o[i]=s.data}return{valid:!0,data:o}}if(Array.isArray(e)&&Array.isArray(t)){if(e.length!==t.length)return{valid:!1,mergeErrorPath:[]};let n=[];for(let r=0;r<e.length;r++){let o=e[r],i=t[r],s=Om(o,i);if(!s.valid)return{valid:!1,mergeErrorPath:[r,...s.mergeErrorPath]};n.push(s.data)}return{valid:!0,data:n}}return{valid:!1,mergeErrorPath:[]}}function Ix(e,t,n){let r=new Map,o;for(let a of t.issues)if(a.code==="unrecognized_keys"){o??(o=a);for(let c of a.keys){if(!r.has(c))r.set(c,{});r.get(c).l=!0}}else e.issues.push(a);for(let a of n.issues)if(a.code==="unrecognized_keys")for(let c of a.keys){if(!r.has(c))r.set(c,{});r.get(c).r=!0}else e.issues.push(a);let i=[...r].filter(([,a])=>a.l&&a.r).map(([a])=>a);if(i.length&&o)e.issues.push({...o,keys:i});if(cn(e))return e;let s=Om(t.value,n.value);if(!s.valid)throw Error(`Unmergable intersection. Error path: ${JSON.stringify(s.mergeErrorPath)}`);return e.value=s.data,e}var Za=g("$ZodTuple",(e,t)=>{D.init(e,t);let n=t.items;e._zod.parse=(r,o)=>{let i=r.value;if(!Array.isArray(i))return r.issues.push({input:i,inst:e,expected:"tuple",code:"invalid_type"}),r;r.value=[];let s=[],a=[...n].reverse().findIndex((u)=>u._zod.optin!=="optional"),c=a===-1?0:n.length-a;if(!t.rest){let u=i.length>n.length,d=i.length<c-1;if(u||d)return r.issues.push({...u?{code:"too_big",maximum:n.length,inclusive:!0}:{code:"too_small",minimum:n.length},input:i,inst:e,origin:"array"}),r}let l=-1;for(let u of n){if(l++,l>=i.length){if(l>=c)continue}let d=u._zod.run({value:i[l],issues:[]},o);if(d instanceof Promise)s.push(d.then((f)=>Da(f,r,l)));else Da(d,r,l)}if(t.rest){let u=i.slice(n.length);for(let d of u){l++;let f=t.rest._zod.run({value:d,issues:[]},o);if(f instanceof Promise)s.push(f.then((m)=>Da(m,r,l)));else Da(f,r,l)}}if(s.length)return Promise.all(s).then(()=>r);return r}});function Da(e,t,n){if(e.issues.length)t.issues.push(...We(n,e.issues));t.value[n]=e.value}var xf=g("$ZodRecord",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{let o=n.value;if(!an(o))return n.issues.push({expected:"record",code:"invalid_type",input:o,inst:e}),n;let i=[],s=t.keyType._zod.values;if(s){n.value={};let a=new Set;for(let l of s)if(typeof l==="string"||typeof l==="number"||typeof l==="symbol"){a.add(typeof l==="number"?l.toString():l);let u=t.valueType._zod.run({value:o[l],issues:[]},r);if(u instanceof Promise)i.push(u.then((d)=>{if(d.issues.length)n.issues.push(...We(l,d.issues));n.value[l]=d.value}));else{if(u.issues.length)n.issues.push(...We(l,u.issues));n.value[l]=u.value}}let c;for(let l in o)if(!a.has(l))c=c??[],c.push(l);if(c&&c.length>0)n.issues.push({code:"unrecognized_keys",input:o,inst:e,keys:c})}else{n.value={};for(let a of Reflect.ownKeys(o)){if(a==="__proto__")continue;let c=t.keyType._zod.run({value:a,issues:[]},r);if(c instanceof Promise)throw Error("Async schemas not supported in object keys currently");if(typeof a==="string"&&Vo.test(a)&&c.issues.length&&c.issues.some((d)=>d.code==="invalid_type"&&d.expected==="number")){let d=t.keyType._zod.run({value:Number(a),issues:[]},r);if(d instanceof Promise)throw Error("Async schemas not supported in object keys currently");if(d.issues.length===0)c=d}if(c.issues.length){if(t.mode==="loose")n.value[a]=o[a];else n.issues.push({code:"invalid_key",origin:"record",issues:c.issues.map((d)=>Pe(d,r,se())),input:a,path:[a],inst:e});continue}let u=t.valueType._zod.run({value:o[a],issues:[]},r);if(u instanceof Promise)i.push(u.then((d)=>{if(d.issues.length)n.issues.push(...We(a,d.issues));n.value[c.value]=d.value}));else{if(u.issues.length)n.issues.push(...We(a,u.issues));n.value[c.value]=u.value}}}if(i.length)return Promise.all(i).then(()=>n);return n}}),_f=g("$ZodMap",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{let o=n.value;if(!(o instanceof Map))return n.issues.push({expected:"map",code:"invalid_type",input:o,inst:e}),n;let i=[];n.value=new Map;for(let[s,a]of o){let c=t.keyType._zod.run({value:s,issues:[]},r),l=t.valueType._zod.run({value:a,issues:[]},r);if(c instanceof Promise||l instanceof Promise)i.push(Promise.all([c,l]).then(([u,d])=>{Ox(u,d,n,s,o,e,r)}));else Ox(c,l,n,s,o,e,r)}if(i.length)return Promise.all(i).then(()=>n);return n}});function Ox(e,t,n,r,o,i,s){if(e.issues.length)if(Bo.has(typeof r))n.issues.push(...We(r,e.issues));else n.issues.push({code:"invalid_key",origin:"map",input:o,inst:i,issues:e.issues.map((a)=>Pe(a,s,se()))});if(t.issues.length)if(Bo.has(typeof r))n.issues.push(...We(r,t.issues));else n.issues.push({origin:"map",code:"invalid_element",input:o,inst:i,key:r,issues:t.issues.map((a)=>Pe(a,s,se()))});n.value.set(e.value,t.value)}var Cf=g("$ZodSet",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{let o=n.value;if(!(o instanceof Set))return n.issues.push({input:o,inst:e,expected:"set",code:"invalid_type"}),n;let i=[];n.value=new Set;for(let s of o){let a=t.valueType._zod.run({value:s,issues:[]},r);if(a instanceof Promise)i.push(a.then((c)=>zx(c,n)));else zx(a,n)}if(i.length)return Promise.all(i).then(()=>n);return n}});function zx(e,t){if(e.issues.length)t.issues.push(...e.issues);t.value.add(e.value)}var wf=g("$ZodEnum",(e,t)=>{D.init(e,t);let n=Go(t.entries),r=new Set(n);e._zod.values=r,e._zod.pattern=new RegExp(`^(${n.filter((o)=>Bo.has(typeof o)).map((o)=>typeof o==="string"?Ke(o):o.toString()).join("|")})$`),e._zod.parse=(o,i)=>{let s=o.value;if(r.has(s))return o;return o.issues.push({code:"invalid_value",values:n,input:s,inst:e}),o}}),Rf=g("$ZodLiteral",(e,t)=>{if(D.init(e,t),t.values.length===0)throw Error("Cannot create literal schema with no valid values");let n=new Set(t.values);e._zod.values=n,e._zod.pattern=new RegExp(`^(${t.values.map((r)=>typeof r==="string"?Ke(r):r?Ke(r.toString()):String(r)).join("|")})$`),e._zod.parse=(r,o)=>{let i=r.value;if(n.has(i))return r;return r.issues.push({code:"invalid_value",values:t.values,input:i,inst:e}),r}}),Ef=g("$ZodFile",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{let o=n.value;if(o instanceof File)return n;return n.issues.push({expected:"file",code:"invalid_type",input:o,inst:e}),n}}),Pf=g("$ZodTransform",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{if(r.direction==="backward")throw new Nn(e.constructor.name);let o=t.transform(n.value,n);if(r.async)return(o instanceof Promise?o:Promise.resolve(o)).then((s)=>(n.value=s,n));if(o instanceof Promise)throw new xt;return n.value=o,n}});function Nx(e,t){if(e.issues.length&&t===void 0)return{issues:[],value:void 0};return e}var Ba=g("$ZodOptional",(e,t)=>{D.init(e,t),e._zod.optin="optional",e._zod.optout="optional",F(e._zod,"values",()=>t.innerType._zod.values?new Set([...t.innerType._zod.values,void 0]):void 0),F(e._zod,"pattern",()=>{let n=t.innerType._zod.pattern;return n?new RegExp(`^(${Zo(n.source)})?$`):void 0}),e._zod.parse=(n,r)=>{if(t.innerType._zod.optin==="optional"){let o=t.innerType._zod.run(n,r);if(o instanceof Promise)return o.then((i)=>Nx(i,n.value));return Nx(o,n.value)}if(n.value===void 0)return n;return t.innerType._zod.run(n,r)}}),kf=g("$ZodExactOptional",(e,t)=>{Ba.init(e,t),F(e._zod,"values",()=>t.innerType._zod.values),F(e._zod,"pattern",()=>t.innerType._zod.pattern),e._zod.parse=(n,r)=>t.innerType._zod.run(n,r)}),Af=g("$ZodNullable",(e,t)=>{D.init(e,t),F(e._zod,"optin",()=>t.innerType._zod.optin),F(e._zod,"optout",()=>t.innerType._zod.optout),F(e._zod,"pattern",()=>{let n=t.innerType._zod.pattern;return n?new RegExp(`^(${Zo(n.source)}|null)$`):void 0}),F(e._zod,"values",()=>t.innerType._zod.values?new Set([...t.innerType._zod.values,null]):void 0),e._zod.parse=(n,r)=>{if(n.value===null)return n;return t.innerType._zod.run(n,r)}}),Tf=g("$ZodDefault",(e,t)=>{D.init(e,t),e._zod.optin="optional",F(e._zod,"values",()=>t.innerType._zod.values),e._zod.parse=(n,r)=>{if(r.direction==="backward")return t.innerType._zod.run(n,r);if(n.value===void 0)return n.value=t.defaultValue,n;let o=t.innerType._zod.run(n,r);if(o instanceof Promise)return o.then((i)=>Dx(i,t));return Dx(o,t)}});function Dx(e,t){if(e.value===void 0)e.value=t.defaultValue;return e}var If=g("$ZodPrefault",(e,t)=>{D.init(e,t),e._zod.optin="optional",F(e._zod,"values",()=>t.innerType._zod.values),e._zod.parse=(n,r)=>{if(r.direction==="backward")return t.innerType._zod.run(n,r);if(n.value===void 0)n.value=t.defaultValue;return t.innerType._zod.run(n,r)}}),Of=g("$ZodNonOptional",(e,t)=>{D.init(e,t),F(e._zod,"values",()=>{let n=t.innerType._zod.values;return n?new Set([...n].filter((r)=>r!==void 0)):void 0}),e._zod.parse=(n,r)=>{let o=t.innerType._zod.run(n,r);if(o instanceof Promise)return o.then((i)=>$x(i,e));return $x(o,e)}});function $x(e,t){if(!e.issues.length&&e.value===void 0)e.issues.push({code:"invalid_type",expected:"nonoptional",input:e.value,inst:t});return e}var zf=g("$ZodSuccess",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{if(r.direction==="backward")throw new Nn("ZodSuccess");let o=t.innerType._zod.run(n,r);if(o instanceof Promise)return o.then((i)=>(n.value=i.issues.length===0,n));return n.value=o.issues.length===0,n}}),Nf=g("$ZodCatch",(e,t)=>{D.init(e,t),F(e._zod,"optin",()=>t.innerType._zod.optin),F(e._zod,"optout",()=>t.innerType._zod.optout),F(e._zod,"values",()=>t.innerType._zod.values),e._zod.parse=(n,r)=>{if(r.direction==="backward")return t.innerType._zod.run(n,r);let o=t.innerType._zod.run(n,r);if(o instanceof Promise)return o.then((i)=>{if(n.value=i.value,i.issues.length)n.value=t.catchValue({...n,error:{issues:i.issues.map((s)=>Pe(s,r,se()))},input:n.value}),n.issues=[];return n});if(n.value=o.value,o.issues.length)n.value=t.catchValue({...n,error:{issues:o.issues.map((i)=>Pe(i,r,se()))},input:n.value}),n.issues=[];return n}}),Df=g("$ZodNaN",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>{if(typeof n.value!=="number"||!Number.isNaN(n.value))return n.issues.push({input:n.value,inst:e,expected:"nan",code:"invalid_type"}),n;return n}}),$f=g("$ZodPipe",(e,t)=>{D.init(e,t),F(e._zod,"values",()=>t.in._zod.values),F(e._zod,"optin",()=>t.in._zod.optin),F(e._zod,"optout",()=>t.out._zod.optout),F(e._zod,"propValues",()=>t.in._zod.propValues),e._zod.parse=(n,r)=>{if(r.direction==="backward"){let i=t.out._zod.run(n,r);if(i instanceof Promise)return i.then((s)=>$a(s,t.in,r));return $a(i,t.in,r)}let o=t.in._zod.run(n,r);if(o instanceof Promise)return o.then((i)=>$a(i,t.out,r));return $a(o,t.out,r)}});function $a(e,t,n){if(e.issues.length)return e.aborted=!0,e;return t._zod.run({value:e.value,issues:e.issues},n)}var Xo=g("$ZodCodec",(e,t)=>{D.init(e,t),F(e._zod,"values",()=>t.in._zod.values),F(e._zod,"optin",()=>t.in._zod.optin),F(e._zod,"optout",()=>t.out._zod.optout),F(e._zod,"propValues",()=>t.in._zod.propValues),e._zod.parse=(n,r)=>{if((r.direction||"forward")==="forward"){let i=t.in._zod.run(n,r);if(i instanceof Promise)return i.then((s)=>Ma(s,t,r));return Ma(i,t,r)}else{let i=t.out._zod.run(n,r);if(i instanceof Promise)return i.then((s)=>Ma(s,t,r));return Ma(i,t,r)}}});function Ma(e,t,n){if(e.issues.length)return e.aborted=!0,e;if((n.direction||"forward")==="forward"){let o=t.transform(e.value,e);if(o instanceof Promise)return o.then((i)=>La(e,i,t.out,n));return La(e,o,t.out,n)}else{let o=t.reverseTransform(e.value,e);if(o instanceof Promise)return o.then((i)=>La(e,i,t.in,n));return La(e,o,t.in,n)}}function La(e,t,n,r){if(e.issues.length)return e.aborted=!0,e;return n._zod.run({value:t,issues:e.issues},r)}var Mf=g("$ZodReadonly",(e,t)=>{D.init(e,t),F(e._zod,"propValues",()=>t.innerType._zod.propValues),F(e._zod,"values",()=>t.innerType._zod.values),F(e._zod,"optin",()=>t.innerType?._zod?.optin),F(e._zod,"optout",()=>t.innerType?._zod?.optout),e._zod.parse=(n,r)=>{if(r.direction==="backward")return t.innerType._zod.run(n,r);let o=t.innerType._zod.run(n,r);if(o instanceof Promise)return o.then(Mx);return Mx(o)}});function Mx(e){return e.value=Object.freeze(e.value),e}var Lf=g("$ZodTemplateLiteral",(e,t)=>{D.init(e,t);let n=[];for(let r of t.parts)if(typeof r==="object"&&r!==null){if(!r._zod.pattern)throw Error(`Invalid template literal part, no pattern found: ${[...r._zod.traits].shift()}`);let o=r._zod.pattern instanceof RegExp?r._zod.pattern.source:r._zod.pattern;if(!o)throw Error(`Invalid template literal part: ${r._zod.traits}`);let i=o.startsWith("^")?1:0,s=o.endsWith("$")?o.length-1:o.length;n.push(o.slice(i,s))}else if(r===null||Od.has(typeof r))n.push(Ke(`${r}`));else throw Error(`Invalid template literal part: ${r}`);e._zod.pattern=new RegExp(`^${n.join("")}$`),e._zod.parse=(r,o)=>{if(typeof r.value!=="string")return r.issues.push({input:r.value,inst:e,expected:"string",code:"invalid_type"}),r;if(e._zod.pattern.lastIndex=0,!e._zod.pattern.test(r.value))return r.issues.push({input:r.value,inst:e,code:"invalid_format",format:t.format??"template_literal",pattern:e._zod.pattern.source}),r;return r}}),Wf=g("$ZodFunction",(e,t)=>(D.init(e,t),e._def=t,e._zod.def=t,e.implement=(n)=>{if(typeof n!=="function")throw Error("implement() must be called with a function");return function(...r){let o=e._def.input?xa(e._def.input,r):r,i=Reflect.apply(n,this,o);if(e._def.output)return xa(e._def.output,i);return i}},e.implementAsync=(n)=>{if(typeof n!=="function")throw Error("implementAsync() must be called with a function");return async function(...r){let o=e._def.input?await _a(e._def.input,r):r,i=await Reflect.apply(n,this,o);if(e._def.output)return await _a(e._def.output,i);return i}},e._zod.parse=(n,r)=>{if(typeof n.value!=="function")return n.issues.push({code:"invalid_type",expected:"function",input:n.value,inst:e}),n;if(e._def.output&&e._def.output._zod.def.type==="promise")n.value=e.implementAsync(n.value);else n.value=e.implement(n.value);return n},e.input=(...n)=>{let r=e.constructor;if(Array.isArray(n[0]))return new r({type:"function",input:new Za({type:"tuple",items:n[0],rest:n[1]}),output:e._def.output});return new r({type:"function",input:n[0],output:e._def.output})},e.output=(n)=>new e.constructor({type:"function",input:e._def.input,output:n}),e)),Ff=g("$ZodPromise",(e,t)=>{D.init(e,t),e._zod.parse=(n,r)=>Promise.resolve(n.value).then((o)=>t.innerType._zod.run({value:o,issues:[]},r))}),Gf=g("$ZodLazy",(e,t)=>{D.init(e,t),F(e._zod,"innerType",()=>t.getter()),F(e._zod,"pattern",()=>e._zod.innerType?._zod?.pattern),F(e._zod,"propValues",()=>e._zod.innerType?._zod?.propValues),F(e._zod,"optin",()=>e._zod.innerType?._zod?.optin??void 0),F(e._zod,"optout",()=>e._zod.innerType?._zod?.optout??void 0),e._zod.parse=(n,r)=>e._zod.innerType._zod.run(n,r)}),Zf=g("$ZodCustom",(e,t)=>{J.init(e,t),D.init(e,t),e._zod.parse=(n,r)=>n,e._zod.check=(n)=>{let r=n.value,o=t.fn(r);if(o instanceof Promise)return o.then((i)=>Lx(i,n,r,e));Lx(o,n,r,e);return}});function Lx(e,t,n,r){if(!e){let o={code:"custom",input:n,inst:r,path:[...r._zod.def.path??[]],continue:!r._zod.def.abort};if(r._zod.def.params)o.params=r._zod.def.params;t.issues.push(br(o))}}var Qo={};var Ux,Ua=Symbol("ZodOutput"),ja=Symbol("ZodInput");class Bf{constructor(){this._map=new WeakMap,this._idmap=new Map}add(e,...t){let n=t[0];if(this._map.set(e,n),n&&typeof n==="object"&&"id"in n)this._idmap.set(n.id,e);return this}clear(){return this._map=new WeakMap,this._idmap=new Map,this}remove(e){let t=this._map.get(e);if(t&&typeof t==="object"&&"id"in t)this._idmap.delete(t.id);return this._map.delete(e),this}get(e){let t=e._zod.parent;if(t){let n={...this.get(t)??{}};delete n.id;let r={...n,...this._map.get(e)};return Object.keys(r).length?r:void 0}return this._map.get(e)}has(e){return this._map.has(e)}}function ei(){return new Bf}(Ux=globalThis).__zod_globalRegistry??(Ux.__zod_globalRegistry=ei());var Ae=globalThis.__zod_globalRegistry;function Uf(e,t){return new e({type:"string",...x(t)})}function jf(e,t){return new e({type:"string",coerce:!0,...x(t)})}function Ha(e,t){return new e({type:"string",format:"email",check:"string_format",abort:!1,...x(t)})}function ti(e,t){return new e({type:"string",format:"guid",check:"string_format",abort:!1,...x(t)})}function Va(e,t){return new e({type:"string",format:"uuid",check:"string_format",abort:!1,...x(t)})}function qa(e,t){return new e({type:"string",format:"uuid",check:"string_format",abort:!1,version:"v4",...x(t)})}function Ka(e,t){return new e({type:"string",format:"uuid",check:"string_format",abort:!1,version:"v6",...x(t)})}function Ya(e,t){return new e({type:"string",format:"uuid",check:"string_format",abort:!1,version:"v7",...x(t)})}function ni(e,t){return new e({type:"string",format:"url",check:"string_format",abort:!1,...x(t)})}function Ja(e,t){return new e({type:"string",format:"emoji",check:"string_format",abort:!1,...x(t)})}function Xa(e,t){return new e({type:"string",format:"nanoid",check:"string_format",abort:!1,...x(t)})}function Qa(e,t){return new e({type:"string",format:"cuid",check:"string_format",abort:!1,...x(t)})}function ec(e,t){return new e({type:"string",format:"cuid2",check:"string_format",abort:!1,...x(t)})}function tc(e,t){return new e({type:"string",format:"ulid",check:"string_format",abort:!1,...x(t)})}function nc(e,t){return new e({type:"string",format:"xid",check:"string_format",abort:!1,...x(t)})}function rc(e,t){return new e({type:"string",format:"ksuid",check:"string_format",abort:!1,...x(t)})}function oc(e,t){return new e({type:"string",format:"ipv4",check:"string_format",abort:!1,...x(t)})}function ic(e,t){return new e({type:"string",format:"ipv6",check:"string_format",abort:!1,...x(t)})}function Hf(e,t){return new e({type:"string",format:"mac",check:"string_format",abort:!1,...x(t)})}function sc(e,t){return new e({type:"string",format:"cidrv4",check:"string_format",abort:!1,...x(t)})}function ac(e,t){return new e({type:"string",format:"cidrv6",check:"string_format",abort:!1,...x(t)})}function cc(e,t){return new e({type:"string",format:"base64",check:"string_format",abort:!1,...x(t)})}function lc(e,t){return new e({type:"string",format:"base64url",check:"string_format",abort:!1,...x(t)})}function uc(e,t){return new e({type:"string",format:"e164",check:"string_format",abort:!1,...x(t)})}function dc(e,t){return new e({type:"string",format:"jwt",check:"string_format",abort:!1,...x(t)})}var mc={Any:null,Minute:-1,Second:0,Millisecond:3,Microsecond:6};function Vf(e,t){return new e({type:"string",format:"datetime",check:"string_format",offset:!1,local:!1,precision:null,...x(t)})}function qf(e,t){return new e({type:"string",format:"date",check:"string_format",...x(t)})}function Kf(e,t){return new e({type:"string",format:"time",check:"string_format",precision:null,...x(t)})}function Yf(e,t){return new e({type:"string",format:"duration",check:"string_format",...x(t)})}function Jf(e,t){return new e({type:"number",checks:[],...x(t)})}function Xf(e,t){return new e({type:"number",coerce:!0,checks:[],...x(t)})}function Qf(e,t){return new e({type:"number",check:"number_format",abort:!1,format:"safeint",...x(t)})}function ep(e,t){return new e({type:"number",check:"number_format",abort:!1,format:"float32",...x(t)})}function tp(e,t){return new e({type:"number",check:"number_format",abort:!1,format:"float64",...x(t)})}function np(e,t){return new e({type:"number",check:"number_format",abort:!1,format:"int32",...x(t)})}function rp(e,t){return new e({type:"number",check:"number_format",abort:!1,format:"uint32",...x(t)})}function op(e,t){return new e({type:"boolean",...x(t)})}function ip(e,t){return new e({type:"boolean",coerce:!0,...x(t)})}function sp(e,t){return new e({type:"bigint",...x(t)})}function ap(e,t){return new e({type:"bigint",coerce:!0,...x(t)})}function cp(e,t){return new e({type:"bigint",check:"bigint_format",abort:!1,format:"int64",...x(t)})}function lp(e,t){return new e({type:"bigint",check:"bigint_format",abort:!1,format:"uint64",...x(t)})}function up(e,t){return new e({type:"symbol",...x(t)})}function dp(e,t){return new e({type:"undefined",...x(t)})}function mp(e,t){return new e({type:"null",...x(t)})}function fp(e){return new e({type:"any"})}function pp(e){return new e({type:"unknown"})}function gp(e,t){return new e({type:"never",...x(t)})}function hp(e,t){return new e({type:"void",...x(t)})}function yp(e,t){return new e({type:"date",...x(t)})}function bp(e,t){return new e({type:"date",coerce:!0,...x(t)})}function vp(e,t){return new e({type:"nan",...x(t)})}function _t(e,t){return new Oa({check:"less_than",...x(t),value:e,inclusive:!1})}function Ge(e,t){return new Oa({check:"less_than",...x(t),value:e,inclusive:!0})}function Ct(e,t){return new za({check:"greater_than",...x(t),value:e,inclusive:!1})}function xe(e,t){return new za({check:"greater_than",...x(t),value:e,inclusive:!0})}function fc(e){return Ct(0,e)}function pc(e){return _t(0,e)}function gc(e){return Ge(0,e)}function hc(e){return xe(0,e)}function ln(e,t){return new fm({check:"multiple_of",...x(t),value:e})}function un(e,t){return new hm({check:"max_size",...x(t),maximum:e})}function wt(e,t){return new ym({check:"min_size",...x(t),minimum:e})}function Ln(e,t){return new bm({check:"size_equals",...x(t),size:e})}function Wn(e,t){return new vm({check:"max_length",...x(t),maximum:e})}function Ft(e,t){return new Sm({check:"min_length",...x(t),minimum:e})}function Fn(e,t){return new xm({check:"length_equals",...x(t),length:e})}function Er(e,t){return new _m({check:"string_format",format:"regex",...x(t),pattern:e})}function Pr(e){return new Cm({check:"string_format",format:"lowercase",...x(e)})}function kr(e){return new wm({check:"string_format",format:"uppercase",...x(e)})}function Ar(e,t){return new Rm({check:"string_format",format:"includes",...x(t),includes:e})}function Tr(e,t){return new Em({check:"string_format",format:"starts_with",...x(t),prefix:e})}function Ir(e,t){return new Pm({check:"string_format",format:"ends_with",...x(t),suffix:e})}function yc(e,t,n){return new km({check:"property",property:e,schema:t,...x(n)})}function Or(e,t){return new Am({check:"mime_type",mime:e,...x(t)})}function at(e){return new Tm({check:"overwrite",tx:e})}function zr(e){return at((t)=>t.normalize(e))}function Nr(){return at((e)=>e.trim())}function Dr(){return at((e)=>e.toLowerCase())}function $r(){return at((e)=>e.toUpperCase())}function Mr(){return at((e)=>Ad(e))}function Sp(e,t,n){return new e({type:"array",element:t,...x(n)})}function ED(e,t,n){return new e({type:"union",options:t,...x(n)})}function PD(e,t,n){return new e({type:"union",options:t,inclusive:!1,...x(n)})}function kD(e,t,n,r){return new e({type:"union",options:n,discriminator:t,...x(r)})}function AD(e,t,n){return new e({type:"intersection",left:t,right:n})}function TD(e,t,n,r){let o=n instanceof D;return new e({type:"tuple",items:t,rest:o?n:null,...x(o?r:n)})}function ID(e,t,n,r){return new e({type:"record",keyType:t,valueType:n,...x(r)})}function OD(e,t,n,r){return new e({type:"map",keyType:t,valueType:n,...x(r)})}function zD(e,t,n){return new e({type:"set",valueType:t,...x(n)})}function ND(e,t,n){let r=Array.isArray(t)?Object.fromEntries(t.map((o)=>[o,o])):t;return new e({type:"enum",entries:r,...x(n)})}function DD(e,t,n){return new e({type:"enum",entries:t,...x(n)})}function $D(e,t,n){return new e({type:"literal",values:Array.isArray(t)?t:[t],...x(n)})}function xp(e,t){return new e({type:"file",...x(t)})}function MD(e,t){return new e({type:"transform",transform:t})}function LD(e,t){return new e({type:"optional",innerType:t})}function WD(e,t){return new e({type:"nullable",innerType:t})}function FD(e,t,n){return new e({type:"default",innerType:t,get defaultValue(){return typeof n==="function"?n():Id(n)}})}function GD(e,t,n){return new e({type:"nonoptional",innerType:t,...x(n)})}function ZD(e,t){return new e({type:"success",innerType:t})}function BD(e,t,n){return new e({type:"catch",innerType:t,catchValue:typeof n==="function"?n:()=>n})}function UD(e,t,n){return new e({type:"pipe",in:t,out:n})}function jD(e,t){return new e({type:"readonly",innerType:t})}function HD(e,t,n){return new e({type:"template_literal",parts:t,...x(n)})}function VD(e,t){return new e({type:"lazy",getter:t})}function qD(e,t){return new e({type:"promise",innerType:t})}function _p(e,t,n){let r=x(n);return r.abort??(r.abort=!0),new e({type:"custom",check:"custom",fn:t,...r})}function Cp(e,t,n){return new e({type:"custom",check:"custom",fn:t,...x(n)})}function wp(e){let t=jx((n)=>(n.addIssue=(r)=>{if(typeof r==="string")n.issues.push(br(r,n.value,t._zod.def));else{let o=r;if(o.fatal)o.continue=!1;o.code??(o.code="custom"),o.input??(o.input=n.value),o.inst??(o.inst=t),o.continue??(o.continue=!t._zod.def.abort),n.issues.push(br(o))}},e(n.value,n)));return t}function jx(e,t){let n=new J({check:"custom",...x(t)});return n._zod.check=e,n}function Rp(e){let t=new J({check:"describe"});return t._zod.onattach=[(n)=>{let r=Ae.get(n)??{};Ae.add(n,{...r,description:e})}],t._zod.check=()=>{},t}function Ep(e){let t=new J({check:"meta"});return t._zod.onattach=[(n)=>{let r=Ae.get(n)??{};Ae.add(n,{...r,...e})}],t._zod.check=()=>{},t}function Pp(e,t){let n=x(t),r=n.truthy??["true","1","yes","on","y","enabled"],o=n.falsy??["false","0","no","off","n","disabled"];if(n.case!=="sensitive")r=r.map((m)=>typeof m==="string"?m.toLowerCase():m),o=o.map((m)=>typeof m==="string"?m.toLowerCase():m);let i=new Set(r),s=new Set(o),a=e.Codec??Xo,c=e.Boolean??Yo,u=new(e.String??Mn)({type:"string",error:n.error}),d=new c({type:"boolean",error:n.error}),f=new a({type:"pipe",in:u,out:d,transform:(m,p)=>{let h=m;if(n.case!=="sensitive")h=h.toLowerCase();if(i.has(h))return!0;else if(s.has(h))return!1;else return p.issues.push({code:"invalid_value",expected:"stringbool",values:[...i,...s],input:p.value,inst:f,continue:!1}),{}},reverseTransform:(m,p)=>{if(m===!0)return r[0]||"true";else return o[0]||"false"},error:n.error});return f}function Lr(e,t,n,r={}){let o=x(r),i={...x(r),check:"string_format",type:"string",format:t,fn:typeof n==="function"?n:(a)=>n.test(a),...o};if(n instanceof RegExp)i.pattern=n;return new e(i)}var Wr=()=>{throw Error("JSON Schema conversion is not bundled into this plugin artifact")},kp=()=>Wr,bc=()=>Wr,Fr=Wr,X=Wr,Gr=Wr,Zr=Wr;var KD={guid:"uuid",url:"uri",datetime:"date-time",json_string:"json-string",regex:""},Ap=(e,t,n,r)=>{let o=n;o.type="string";let{minimum:i,maximum:s,format:a,patterns:c,contentEncoding:l}=e._zod.bag;if(typeof i==="number")o.minLength=i;if(typeof s==="number")o.maxLength=s;if(a){if(o.format=KD[a]??a,o.format==="")delete o.format;if(a==="time")delete o.format}if(l)o.contentEncoding=l;if(c&&c.size>0){let u=[...c];if(u.length===1)o.pattern=u[0].source;else if(u.length>1)o.allOf=[...u.map((d)=>({...t.target==="draft-07"||t.target==="draft-04"||t.target==="openapi-3.0"?{type:"string"}:{},pattern:d.source}))]}},Tp=(e,t,n,r)=>{let o=n,{minimum:i,maximum:s,format:a,multipleOf:c,exclusiveMaximum:l,exclusiveMinimum:u}=e._zod.bag;if(typeof a==="string"&&a.includes("int"))o.type="integer";else o.type="number";if(typeof u==="number")if(t.target==="draft-04"||t.target==="openapi-3.0")o.minimum=u,o.exclusiveMinimum=!0;else o.exclusiveMinimum=u;if(typeof i==="number"){if(o.minimum=i,typeof u==="number"&&t.target!=="draft-04")if(u>=i)delete o.minimum;else delete o.exclusiveMinimum}if(typeof l==="number")if(t.target==="draft-04"||t.target==="openapi-3.0")o.maximum=l,o.exclusiveMaximum=!0;else o.exclusiveMaximum=l;if(typeof s==="number"){if(o.maximum=s,typeof l==="number"&&t.target!=="draft-04")if(l<=s)delete o.maximum;else delete o.exclusiveMaximum}if(typeof c==="number")o.multipleOf=c},Ip=(e,t,n,r)=>{n.type="boolean"},Op=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("BigInt cannot be represented in JSON Schema")},zp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Symbols cannot be represented in JSON Schema")},Np=(e,t,n,r)=>{if(t.target==="openapi-3.0")n.type="string",n.nullable=!0,n.enum=[null];else n.type="null"},Dp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Undefined cannot be represented in JSON Schema")},$p=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Void cannot be represented in JSON Schema")},Mp=(e,t,n,r)=>{n.not={}},Lp=(e,t,n,r)=>{},Wp=(e,t,n,r)=>{},Fp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Date cannot be represented in JSON Schema")},Gp=(e,t,n,r)=>{let o=e._zod.def,i=Go(o.entries);if(i.every((s)=>typeof s==="number"))n.type="number";if(i.every((s)=>typeof s==="string"))n.type="string";n.enum=i},Zp=(e,t,n,r)=>{let o=e._zod.def,i=[];for(let s of o.values)if(s===void 0){if(t.unrepresentable==="throw")throw Error("Literal `undefined` cannot be represented in JSON Schema")}else if(typeof s==="bigint")if(t.unrepresentable==="throw")throw Error("BigInt literals cannot be represented in JSON Schema");else i.push(Number(s));else i.push(s);if(i.length===0);else if(i.length===1){let s=i[0];if(n.type=s===null?"null":typeof s,t.target==="draft-04"||t.target==="openapi-3.0")n.enum=[s];else n.const=s}else{if(i.every((s)=>typeof s==="number"))n.type="number";if(i.every((s)=>typeof s==="string"))n.type="string";if(i.every((s)=>typeof s==="boolean"))n.type="boolean";if(i.every((s)=>s===null))n.type="null";n.enum=i}},Bp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("NaN cannot be represented in JSON Schema")},Up=(e,t,n,r)=>{let o=n,i=e._zod.pattern;if(!i)throw Error("Pattern not found in template literal");o.type="string",o.pattern=i.source},jp=(e,t,n,r)=>{let o=n,i={type:"string",format:"binary",contentEncoding:"binary"},{minimum:s,maximum:a,mime:c}=e._zod.bag;if(s!==void 0)i.minLength=s;if(a!==void 0)i.maxLength=a;if(c)if(c.length===1)i.contentMediaType=c[0],Object.assign(o,i);else Object.assign(o,i),o.anyOf=c.map((l)=>({contentMediaType:l}));else Object.assign(o,i)},Hp=(e,t,n,r)=>{n.type="boolean"},Vp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Custom types cannot be represented in JSON Schema")},qp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Function types cannot be represented in JSON Schema")},Kp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Transforms cannot be represented in JSON Schema")},Yp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Map cannot be represented in JSON Schema")},Jp=(e,t,n,r)=>{if(t.unrepresentable==="throw")throw Error("Set cannot be represented in JSON Schema")},Xp=(e,t,n,r)=>{let o=n,i=e._zod.def,{minimum:s,maximum:a}=e._zod.bag;if(typeof s==="number")o.minItems=s;if(typeof a==="number")o.maxItems=a;o.type="array",o.items=X(i.element,t,{...r,path:[...r.path,"items"]})},Qp=(e,t,n,r)=>{let o=n,i=e._zod.def;o.type="object",o.properties={};let s=i.shape;for(let l in s)o.properties[l]=X(s[l],t,{...r,path:[...r.path,"properties",l]});let a=new Set(Object.keys(s)),c=new Set([...a].filter((l)=>{let u=i.shape[l]._zod;if(t.io==="input")return u.optin===void 0;else return u.optout===void 0}));if(c.size>0)o.required=Array.from(c);if(i.catchall?._zod.def.type==="never")o.additionalProperties=!1;else if(!i.catchall){if(t.io==="output")o.additionalProperties=!1}else if(i.catchall)o.additionalProperties=X(i.catchall,t,{...r,path:[...r.path,"additionalProperties"]})},Sc=(e,t,n,r)=>{let o=e._zod.def,i=o.inclusive===!1,s=o.options.map((a,c)=>X(a,t,{...r,path:[...r.path,i?"oneOf":"anyOf",c]}));if(i)n.oneOf=s;else n.anyOf=s},eg=(e,t,n,r)=>{let o=e._zod.def,i=X(o.left,t,{...r,path:[...r.path,"allOf",0]}),s=X(o.right,t,{...r,path:[...r.path,"allOf",1]}),a=(l)=>("allOf"in l)&&Object.keys(l).length===1,c=[...a(i)?i.allOf:[i],...a(s)?s.allOf:[s]];n.allOf=c},tg=(e,t,n,r)=>{let o=n,i=e._zod.def;o.type="array";let s=t.target==="draft-2020-12"?"prefixItems":"items",a=t.target==="draft-2020-12"?"items":t.target==="openapi-3.0"?"items":"additionalItems",c=i.items.map((f,m)=>X(f,t,{...r,path:[...r.path,s,m]})),l=i.rest?X(i.rest,t,{...r,path:[...r.path,a,...t.target==="openapi-3.0"?[i.items.length]:[]]}):null;if(t.target==="draft-2020-12"){if(o.prefixItems=c,l)o.items=l}else if(t.target==="openapi-3.0"){if(o.items={anyOf:c},l)o.items.anyOf.push(l);if(o.minItems=c.length,!l)o.maxItems=c.length}else if(o.items=c,l)o.additionalItems=l;let{minimum:u,maximum:d}=e._zod.bag;if(typeof u==="number")o.minItems=u;if(typeof d==="number")o.maxItems=d},ng=(e,t,n,r)=>{let o=n,i=e._zod.def;o.type="object";let s=i.keyType,c=s._zod.bag?.patterns;if(i.mode==="loose"&&c&&c.size>0){let u=X(i.valueType,t,{...r,path:[...r.path,"patternProperties","*"]});o.patternProperties={};for(let d of c)o.patternProperties[d.source]=u}else{if(t.target==="draft-07"||t.target==="draft-2020-12")o.propertyNames=X(i.keyType,t,{...r,path:[...r.path,"propertyNames"]});o.additionalProperties=X(i.valueType,t,{...r,path:[...r.path,"additionalProperties"]})}let l=s._zod.values;if(l){let u=[...l].filter((d)=>typeof d==="string"||typeof d==="number");if(u.length>0)o.required=u}},rg=(e,t,n,r)=>{let o=e._zod.def,i=X(o.innerType,t,r),s=t.seen.get(e);if(t.target==="openapi-3.0")s.ref=o.innerType,n.nullable=!0;else n.anyOf=[i,{type:"null"}]},og=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);i.ref=o.innerType},ig=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);i.ref=o.innerType,n.default=JSON.parse(JSON.stringify(o.defaultValue))},sg=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);if(i.ref=o.innerType,t.io==="input")n._prefault=JSON.parse(JSON.stringify(o.defaultValue))},ag=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);i.ref=o.innerType;let s;try{s=o.catchValue(void 0)}catch{throw Error("Dynamic catch values are not supported in JSON Schema")}n.default=s},cg=(e,t,n,r)=>{let o=e._zod.def,i=t.io==="input"?o.in._zod.def.type==="transform"?o.out:o.in:o.out;X(i,t,r);let s=t.seen.get(e);s.ref=i},lg=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);i.ref=o.innerType,n.readOnly=!0},ug=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);i.ref=o.innerType},xc=(e,t,n,r)=>{let o=e._zod.def;X(o.innerType,t,r);let i=t.seen.get(e);i.ref=o.innerType},dg=(e,t,n,r)=>{let o=e._zod.innerType;X(o,t,r);let i=t.seen.get(e);i.ref=o},vc={string:Ap,number:Tp,boolean:Ip,bigint:Op,symbol:zp,null:Np,undefined:Dp,void:$p,never:Mp,any:Lp,unknown:Wp,date:Fp,enum:Gp,literal:Zp,nan:Bp,template_literal:Up,file:jp,success:Hp,custom:Vp,function:qp,transform:Kp,map:Yp,set:Jp,array:Xp,object:Qp,union:Sc,intersection:eg,tuple:tg,record:ng,nullable:rg,nonoptional:og,default:ig,prefault:sg,catch:ag,pipe:cg,readonly:lg,promise:ug,optional:xc,lazy:dg};function ri(e,t){if("_idmap"in e){let r=e,o=Fr({...t,processors:vc}),i={};for(let c of r._idmap.entries()){let[l,u]=c;X(u,o)}let s={},a={registry:r,uri:t?.uri,defs:i};o.external=a;for(let c of r._idmap.entries()){let[l,u]=c;Gr(o,u),s[l]=Zr(o,u)}if(Object.keys(i).length>0){let c=o.target==="draft-2020-12"?"$defs":"definitions";s.__shared={[c]:i}}return{schemas:s}}let n=Fr({...t,processors:vc});return X(e,n),Gr(n,e),Zr(n,e)}class mg{get metadataRegistry(){return this.ctx.metadataRegistry}get target(){return this.ctx.target}get unrepresentable(){return this.ctx.unrepresentable}get override(){return this.ctx.override}get io(){return this.ctx.io}get counter(){return this.ctx.counter}set counter(e){this.ctx.counter=e}get seen(){return this.ctx.seen}constructor(e){let t=e?.target??"draft-2020-12";if(t==="draft-4")t="draft-04";if(t==="draft-7")t="draft-07";this.ctx=Fr({processors:vc,target:t,...e?.metadata&&{metadata:e.metadata},...e?.unrepresentable&&{unrepresentable:e.unrepresentable},...e?.override&&{override:e.override},...e?.io&&{io:e.io}})}process(e,t={path:[],schemaPath:[]}){return X(e,this.ctx,t)}emit(e,t){if(t){if(t.cycles)this.ctx.cycles=t.cycles;if(t.reused)this.ctx.reused=t.reused;if(t.external)this.ctx.external=t.external}Gr(this.ctx,e);let n=Zr(this.ctx,e),{"~standard":r,...o}=n;return o}}var Hx={};var ci={};mn(ci,{ZodISODate:()=>ii,ZodISODateTime:()=>oi,ZodISODuration:()=>ai,ZodISOTime:()=>si,date:()=>pg,datetime:()=>fg,duration:()=>hg,time:()=>gg});var oi=g("ZodISODateTime",(e,t)=>{Um.init(e,t),K.init(e,t)});function fg(e){return Vf(oi,e)}var ii=g("ZodISODate",(e,t)=>{jm.init(e,t),K.init(e,t)});function pg(e){return qf(ii,e)}var si=g("ZodISOTime",(e,t)=>{Hm.init(e,t),K.init(e,t)});function gg(e){return Kf(si,e)}var ai=g("ZodISODuration",(e,t)=>{Vm.init(e,t),K.init(e,t)});function hg(e){return Yf(ai,e)}var qx=(e,t)=>{Ho.init(e,t),e.name="ZodError",Object.defineProperties(e,{format:{value:(n)=>Sr(e,n)},flatten:{value:(n)=>vr(e,n)},addIssue:{value:(n)=>{e.issues.push(n),e.message=JSON.stringify(e.issues,hr,2)}},addIssues:{value:(n)=>{e.issues.push(...n),e.message=JSON.stringify(e.issues,hr,2)}},isEmpty:{get(){return e.issues.length===0}}})},Kx=g("ZodError",qx),_e=g("ZodError",qx,{Parent:Error});var _c=xr(_e),Cc=_r(_e),wc=Cr(_e),Rc=wr(_e),Ec=Ca(_e),Pc=wa(_e),kc=Ra(_e),Ac=Ea(_e),Tc=Pa(_e),Ic=ka(_e),Oc=Aa(_e),zc=Ta(_e);var L=g("ZodType",(e,t)=>(D.init(e,t),Object.assign(e["~standard"],{jsonSchema:{input:bc(e,"input"),output:bc(e,"output")}}),e.toJSONSchema=kp(e,{}),e.def=t,e.type=t.type,Object.defineProperty(e,"_def",{value:t}),e.check=(...n)=>e.clone(I.mergeDefs(t,{checks:[...t.checks??[],...n.map((r)=>typeof r==="function"?{_zod:{check:r,def:{check:"custom"},onattach:[]}}:r)]}),{parent:!0}),e.with=e.check,e.clone=(n,r)=>he(e,n,r),e.brand=()=>e,e.register=(n,r)=>(n.add(e,r),e),e.parse=(n,r)=>_c(e,n,r,{callee:e.parse}),e.safeParse=(n,r)=>wc(e,n,r),e.parseAsync=async(n,r)=>Cc(e,n,r,{callee:e.parseAsync}),e.safeParseAsync=async(n,r)=>Rc(e,n,r),e.spa=e.safeParseAsync,e.encode=(n,r)=>Ec(e,n,r),e.decode=(n,r)=>Pc(e,n,r),e.encodeAsync=async(n,r)=>kc(e,n,r),e.decodeAsync=async(n,r)=>Ac(e,n,r),e.safeEncode=(n,r)=>Tc(e,n,r),e.safeDecode=(n,r)=>Ic(e,n,r),e.safeEncodeAsync=async(n,r)=>Oc(e,n,r),e.safeDecodeAsync=async(n,r)=>zc(e,n,r),e.refine=(n,r)=>e.check(sh(n,r)),e.superRefine=(n)=>e.check(ah(n)),e.overwrite=(n)=>e.check(at(n)),e.optional=()=>ui(e),e.exactOptional=()=>Zg(e),e.nullable=()=>di(e),e.nullish=()=>ui(di(e)),e.nonoptional=(n)=>qg(e,n),e.array=()=>gi(e),e.or=(n)=>tl([e,n]),e.and=(n)=>Og(e,n),e.transform=(n)=>mi(e,rl(n)),e.default=(n)=>jg(e,n),e.prefault=(n)=>Vg(e,n),e.catch=(n)=>Jg(e,n),e.pipe=(n)=>mi(e,n),e.readonly=()=>eh(e),e.describe=(n)=>{let r=e.clone();return Ae.add(r,{description:n}),r},Object.defineProperty(e,"description",{get(){return Ae.get(e)?.description},configurable:!0}),e.meta=(...n)=>{if(n.length===0)return Ae.get(e);let r=e.clone();return Ae.add(r,n[0]),r},e.isOptional=()=>e.safeParse(void 0).success,e.isNullable=()=>e.safeParse(null).success,e.apply=(n)=>n(e),e)),$c=g("_ZodString",(e,t)=>{Mn.init(e,t),L.init(e,t),e._zod.processJSONSchema=(r,o,i)=>Ap(e,r,o,i);let n=e._zod.bag;e.format=n.format??null,e.minLength=n.minimum??null,e.maxLength=n.maximum??null,e.regex=(...r)=>e.check(Er(...r)),e.includes=(...r)=>e.check(Ar(...r)),e.startsWith=(...r)=>e.check(Tr(...r)),e.endsWith=(...r)=>e.check(Ir(...r)),e.min=(...r)=>e.check(Ft(...r)),e.max=(...r)=>e.check(Wn(...r)),e.length=(...r)=>e.check(Fn(...r)),e.nonempty=(...r)=>e.check(Ft(1,...r)),e.lowercase=(r)=>e.check(Pr(r)),e.uppercase=(r)=>e.check(kr(r)),e.trim=()=>e.check(Nr()),e.normalize=(...r)=>e.check(zr(...r)),e.toLowerCase=()=>e.check(Dr()),e.toUpperCase=()=>e.check($r()),e.slugify=()=>e.check(Mr())}),Ur=g("ZodString",(e,t)=>{Mn.init(e,t),$c.init(e,t),e.email=(n)=>e.check(Ha(Mc,n)),e.url=(n)=>e.check(ni(fi,n)),e.jwt=(n)=>e.check(dc(Xc,n)),e.emoji=(n)=>e.check(Ja(Lc,n)),e.guid=(n)=>e.check(ti(li,n)),e.uuid=(n)=>e.check(Va(Et,n)),e.uuidv4=(n)=>e.check(qa(Et,n)),e.uuidv6=(n)=>e.check(Ka(Et,n)),e.uuidv7=(n)=>e.check(Ya(Et,n)),e.nanoid=(n)=>e.check(Xa(Wc,n)),e.guid=(n)=>e.check(ti(li,n)),e.cuid=(n)=>e.check(Qa(Fc,n)),e.cuid2=(n)=>e.check(ec(Gc,n)),e.ulid=(n)=>e.check(tc(Zc,n)),e.base64=(n)=>e.check(cc(Kc,n)),e.base64url=(n)=>e.check(lc(Yc,n)),e.xid=(n)=>e.check(nc(Bc,n)),e.ksuid=(n)=>e.check(rc(Uc,n)),e.ipv4=(n)=>e.check(oc(jc,n)),e.ipv6=(n)=>e.check(ic(Hc,n)),e.cidrv4=(n)=>e.check(sc(Vc,n)),e.cidrv6=(n)=>e.check(ac(qc,n)),e.e164=(n)=>e.check(uc(Jc,n)),e.datetime=(n)=>e.check(fg(n)),e.date=(n)=>e.check(pg(n)),e.time=(n)=>e.check(gg(n)),e.duration=(n)=>e.check(hg(n))});function Nc(e){return Uf(Ur,e)}var K=g("ZodStringFormat",(e,t)=>{q.init(e,t),$c.init(e,t)}),Mc=g("ZodEmail",(e,t)=>{Dm.init(e,t),K.init(e,t)});function Yx(e){return Ha(Mc,e)}var li=g("ZodGUID",(e,t)=>{zm.init(e,t),K.init(e,t)});function Jx(e){return ti(li,e)}var Et=g("ZodUUID",(e,t)=>{Nm.init(e,t),K.init(e,t)});function Xx(e){return Va(Et,e)}function Qx(e){return qa(Et,e)}function e_(e){return Ka(Et,e)}function t_(e){return Ya(Et,e)}var fi=g("ZodURL",(e,t)=>{$m.init(e,t),K.init(e,t)});function n_(e){return ni(fi,e)}function r_(e){return ni(fi,{protocol:/^https?$/,hostname:Fe.domain,...I.normalizeParams(e)})}var Lc=g("ZodEmoji",(e,t)=>{Mm.init(e,t),K.init(e,t)});function o_(e){return Ja(Lc,e)}var Wc=g("ZodNanoID",(e,t)=>{Lm.init(e,t),K.init(e,t)});function i_(e){return Xa(Wc,e)}var Fc=g("ZodCUID",(e,t)=>{Wm.init(e,t),K.init(e,t)});function s_(e){return Qa(Fc,e)}var Gc=g("ZodCUID2",(e,t)=>{Fm.init(e,t),K.init(e,t)});function a_(e){return ec(Gc,e)}var Zc=g("ZodULID",(e,t)=>{Gm.init(e,t),K.init(e,t)});function c_(e){return tc(Zc,e)}var Bc=g("ZodXID",(e,t)=>{Zm.init(e,t),K.init(e,t)});function l_(e){return nc(Bc,e)}var Uc=g("ZodKSUID",(e,t)=>{Bm.init(e,t),K.init(e,t)});function u_(e){return rc(Uc,e)}var jc=g("ZodIPv4",(e,t)=>{qm.init(e,t),K.init(e,t)});function d_(e){return oc(jc,e)}var yg=g("ZodMAC",(e,t)=>{Ym.init(e,t),K.init(e,t)});function m_(e){return Hf(yg,e)}var Hc=g("ZodIPv6",(e,t)=>{Km.init(e,t),K.init(e,t)});function f_(e){return ic(Hc,e)}var Vc=g("ZodCIDRv4",(e,t)=>{Jm.init(e,t),K.init(e,t)});function p_(e){return sc(Vc,e)}var qc=g("ZodCIDRv6",(e,t)=>{Xm.init(e,t),K.init(e,t)});function g_(e){return ac(qc,e)}var Kc=g("ZodBase64",(e,t)=>{ef.init(e,t),K.init(e,t)});function h_(e){return cc(Kc,e)}var Yc=g("ZodBase64URL",(e,t)=>{tf.init(e,t),K.init(e,t)});function y_(e){return lc(Yc,e)}var Jc=g("ZodE164",(e,t)=>{nf.init(e,t),K.init(e,t)});function b_(e){return uc(Jc,e)}var Xc=g("ZodJWT",(e,t)=>{rf.init(e,t),K.init(e,t)});function v_(e){return dc(Xc,e)}var jr=g("ZodCustomStringFormat",(e,t)=>{of.init(e,t),K.init(e,t)});function S_(e,t,n={}){return Lr(jr,e,t,n)}function x_(e){return Lr(jr,"hostname",Fe.hostname,e)}function __(e){return Lr(jr,"hex",Fe.hex,e)}function C_(e,t){let n=t?.enc??"hex",r=`${e}_${n}`,o=Fe[r];if(!o)throw Error(`Unrecognized hash format: ${r}`);return Lr(jr,r,o,t)}var Hr=g("ZodNumber",(e,t)=>{Fa.init(e,t),L.init(e,t),e._zod.processJSONSchema=(r,o,i)=>Tp(e,r,o,i),e.gt=(r,o)=>e.check(Ct(r,o)),e.gte=(r,o)=>e.check(xe(r,o)),e.min=(r,o)=>e.check(xe(r,o)),e.lt=(r,o)=>e.check(_t(r,o)),e.lte=(r,o)=>e.check(Ge(r,o)),e.max=(r,o)=>e.check(Ge(r,o)),e.int=(r)=>e.check(Dc(r)),e.safe=(r)=>e.check(Dc(r)),e.positive=(r)=>e.check(Ct(0,r)),e.nonnegative=(r)=>e.check(xe(0,r)),e.negative=(r)=>e.check(_t(0,r)),e.nonpositive=(r)=>e.check(Ge(0,r)),e.multipleOf=(r,o)=>e.check(ln(r,o)),e.step=(r,o)=>e.check(ln(r,o)),e.finite=()=>e;let n=e._zod.bag;e.minValue=Math.max(n.minimum??Number.NEGATIVE_INFINITY,n.exclusiveMinimum??Number.NEGATIVE_INFINITY)??null,e.maxValue=Math.min(n.maximum??Number.POSITIVE_INFINITY,n.exclusiveMaximum??Number.POSITIVE_INFINITY)??null,e.isInt=(n.format??"").includes("int")||Number.isSafeInteger(n.multipleOf??0.5),e.isFinite=!0,e.format=n.format??null});function bg(e){return Jf(Hr,e)}var Zn=g("ZodNumberFormat",(e,t)=>{sf.init(e,t),Hr.init(e,t)});function Dc(e){return Qf(Zn,e)}function w_(e){return ep(Zn,e)}function R_(e){return tp(Zn,e)}function E_(e){return np(Zn,e)}function P_(e){return rp(Zn,e)}var Vr=g("ZodBoolean",(e,t)=>{Yo.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Ip(e,n,r,o)});function vg(e){return op(Vr,e)}var qr=g("ZodBigInt",(e,t)=>{Ga.init(e,t),L.init(e,t),e._zod.processJSONSchema=(r,o,i)=>Op(e,r,o,i),e.gte=(r,o)=>e.check(xe(r,o)),e.min=(r,o)=>e.check(xe(r,o)),e.gt=(r,o)=>e.check(Ct(r,o)),e.gte=(r,o)=>e.check(xe(r,o)),e.min=(r,o)=>e.check(xe(r,o)),e.lt=(r,o)=>e.check(_t(r,o)),e.lte=(r,o)=>e.check(Ge(r,o)),e.max=(r,o)=>e.check(Ge(r,o)),e.positive=(r)=>e.check(Ct(BigInt(0),r)),e.negative=(r)=>e.check(_t(BigInt(0),r)),e.nonpositive=(r)=>e.check(Ge(BigInt(0),r)),e.nonnegative=(r)=>e.check(xe(BigInt(0),r)),e.multipleOf=(r,o)=>e.check(ln(r,o));let n=e._zod.bag;e.minValue=n.minimum??null,e.maxValue=n.maximum??null,e.format=n.format??null});function k_(e){return sp(qr,e)}var Qc=g("ZodBigIntFormat",(e,t)=>{af.init(e,t),qr.init(e,t)});function A_(e){return cp(Qc,e)}function T_(e){return lp(Qc,e)}var Sg=g("ZodSymbol",(e,t)=>{cf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>zp(e,n,r,o)});function I_(e){return up(Sg,e)}var xg=g("ZodUndefined",(e,t)=>{lf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Dp(e,n,r,o)});function O_(e){return dp(xg,e)}var _g=g("ZodNull",(e,t)=>{uf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Np(e,n,r,o)});function Cg(e){return mp(_g,e)}var wg=g("ZodAny",(e,t)=>{df.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Lp(e,n,r,o)});function z_(){return fp(wg)}var Rg=g("ZodUnknown",(e,t)=>{mf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Wp(e,n,r,o)});function Gn(){return pp(Rg)}var Eg=g("ZodNever",(e,t)=>{ff.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Mp(e,n,r,o)});function el(e){return gp(Eg,e)}var Pg=g("ZodVoid",(e,t)=>{pf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>$p(e,n,r,o)});function N_(e){return hp(Pg,e)}var pi=g("ZodDate",(e,t)=>{gf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(r,o,i)=>Fp(e,r,o,i),e.min=(r,o)=>e.check(xe(r,o)),e.max=(r,o)=>e.check(Ge(r,o));let n=e._zod.bag;e.minDate=n.minimum?new Date(n.minimum):null,e.maxDate=n.maximum?new Date(n.maximum):null});function D_(e){return yp(pi,e)}var kg=g("ZodArray",(e,t)=>{hf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Xp(e,n,r,o),e.element=t.element,e.min=(n,r)=>e.check(Ft(n,r)),e.nonempty=(n)=>e.check(Ft(1,n)),e.max=(n,r)=>e.check(Wn(n,r)),e.length=(n,r)=>e.check(Fn(n,r)),e.unwrap=()=>e.element});function gi(e,t){return Sp(kg,e,t)}function $_(e){let t=e._zod.def.shape;return nl(Object.keys(t))}var hi=g("ZodObject",(e,t)=>{yf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Qp(e,n,r,o),I.defineLazy(e,"shape",()=>t.shape),e.keyof=()=>nl(Object.keys(e._zod.def.shape)),e.catchall=(n)=>e.clone({...e._zod.def,catchall:n}),e.passthrough=()=>e.clone({...e._zod.def,catchall:Gn()}),e.loose=()=>e.clone({...e._zod.def,catchall:Gn()}),e.strict=()=>e.clone({...e._zod.def,catchall:el()}),e.strip=()=>e.clone({...e._zod.def,catchall:void 0}),e.extend=(n)=>I.extend(e,n),e.safeExtend=(n)=>I.safeExtend(e,n),e.merge=(n)=>I.merge(e,n),e.pick=(n)=>I.pick(e,n),e.omit=(n)=>I.omit(e,n),e.partial=(...n)=>I.partial(ol,e,n[0]),e.required=(...n)=>I.required(il,e,n[0])});function M_(e,t){let n={type:"object",shape:e??{},...I.normalizeParams(t)};return new hi(n)}function L_(e,t){return new hi({type:"object",shape:e,catchall:el(),...I.normalizeParams(t)})}function W_(e,t){return new hi({type:"object",shape:e,catchall:Gn(),...I.normalizeParams(t)})}var yi=g("ZodUnion",(e,t)=>{Jo.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Sc(e,n,r,o),e.options=t.options});function tl(e,t){return new yi({type:"union",options:e,...I.normalizeParams(t)})}var Ag=g("ZodXor",(e,t)=>{yi.init(e,t),bf.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Sc(e,n,r,o),e.options=t.options});function F_(e,t){return new Ag({type:"union",options:e,inclusive:!1,...I.normalizeParams(t)})}var Tg=g("ZodDiscriminatedUnion",(e,t)=>{yi.init(e,t),vf.init(e,t)});function G_(e,t,n){return new Tg({type:"union",options:t,discriminator:e,...I.normalizeParams(n)})}var Ig=g("ZodIntersection",(e,t)=>{Sf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>eg(e,n,r,o)});function Og(e,t){return new Ig({type:"intersection",left:e,right:t})}var zg=g("ZodTuple",(e,t)=>{Za.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>tg(e,n,r,o),e.rest=(n)=>e.clone({...e._zod.def,rest:n})});function Ng(e,t,n){let r=t instanceof D,o=r?n:t;return new zg({type:"tuple",items:e,rest:r?t:null,...I.normalizeParams(o)})}var bi=g("ZodRecord",(e,t)=>{xf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>ng(e,n,r,o),e.keyType=t.keyType,e.valueType=t.valueType});function Dg(e,t,n){return new bi({type:"record",keyType:e,valueType:t,...I.normalizeParams(n)})}function Z_(e,t,n){let r=he(e);return r._zod.values=void 0,new bi({type:"record",keyType:r,valueType:t,...I.normalizeParams(n)})}function B_(e,t,n){return new bi({type:"record",keyType:e,valueType:t,mode:"loose",...I.normalizeParams(n)})}var $g=g("ZodMap",(e,t)=>{_f.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Yp(e,n,r,o),e.keyType=t.keyType,e.valueType=t.valueType,e.min=(...n)=>e.check(wt(...n)),e.nonempty=(n)=>e.check(wt(1,n)),e.max=(...n)=>e.check(un(...n)),e.size=(...n)=>e.check(Ln(...n))});function U_(e,t,n){return new $g({type:"map",keyType:e,valueType:t,...I.normalizeParams(n)})}var Mg=g("ZodSet",(e,t)=>{Cf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Jp(e,n,r,o),e.min=(...n)=>e.check(wt(...n)),e.nonempty=(n)=>e.check(wt(1,n)),e.max=(...n)=>e.check(un(...n)),e.size=(...n)=>e.check(Ln(...n))});function j_(e,t){return new Mg({type:"set",valueType:e,...I.normalizeParams(t)})}var Br=g("ZodEnum",(e,t)=>{wf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(r,o,i)=>Gp(e,r,o,i),e.enum=t.entries,e.options=Object.values(t.entries);let n=new Set(Object.keys(t.entries));e.extract=(r,o)=>{let i={};for(let s of r)if(n.has(s))i[s]=t.entries[s];else throw Error(`Key ${s} not found in enum`);return new Br({...t,checks:[],...I.normalizeParams(o),entries:i})},e.exclude=(r,o)=>{let i={...t.entries};for(let s of r)if(n.has(s))delete i[s];else throw Error(`Key ${s} not found in enum`);return new Br({...t,checks:[],...I.normalizeParams(o),entries:i})}});function nl(e,t){let n=Array.isArray(e)?Object.fromEntries(e.map((r)=>[r,r])):e;return new Br({type:"enum",entries:n,...I.normalizeParams(t)})}function H_(e,t){return new Br({type:"enum",entries:e,...I.normalizeParams(t)})}var Lg=g("ZodLiteral",(e,t)=>{Rf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Zp(e,n,r,o),e.values=new Set(t.values),Object.defineProperty(e,"value",{get(){if(t.values.length>1)throw Error("This schema contains multiple valid literal values. Use `.values` instead.");return t.values[0]}})});function V_(e,t){return new Lg({type:"literal",values:Array.isArray(e)?e:[e],...I.normalizeParams(t)})}var Wg=g("ZodFile",(e,t)=>{Ef.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>jp(e,n,r,o),e.min=(n,r)=>e.check(wt(n,r)),e.max=(n,r)=>e.check(un(n,r)),e.mime=(n,r)=>e.check(Or(Array.isArray(n)?n:[n],r))});function q_(e){return xp(Wg,e)}var Fg=g("ZodTransform",(e,t)=>{Pf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Kp(e,n,r,o),e._zod.parse=(n,r)=>{if(r.direction==="backward")throw new Nn(e.constructor.name);n.addIssue=(i)=>{if(typeof i==="string")n.issues.push(I.issue(i,n.value,t));else{let s=i;if(s.fatal)s.continue=!1;s.code??(s.code="custom"),s.input??(s.input=n.value),s.inst??(s.inst=e),n.issues.push(I.issue(s))}};let o=t.transform(n.value,n);if(o instanceof Promise)return o.then((i)=>(n.value=i,n));return n.value=o,n}});function rl(e){return new Fg({type:"transform",transform:e})}var ol=g("ZodOptional",(e,t)=>{Ba.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>xc(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function ui(e){return new ol({type:"optional",innerType:e})}var Gg=g("ZodExactOptional",(e,t)=>{kf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>xc(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function Zg(e){return new Gg({type:"optional",innerType:e})}var Bg=g("ZodNullable",(e,t)=>{Af.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>rg(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function di(e){return new Bg({type:"nullable",innerType:e})}function K_(e){return ui(di(e))}var Ug=g("ZodDefault",(e,t)=>{Tf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>ig(e,n,r,o),e.unwrap=()=>e._zod.def.innerType,e.removeDefault=e.unwrap});function jg(e,t){return new Ug({type:"default",innerType:e,get defaultValue(){return typeof t==="function"?t():I.shallowClone(t)}})}var Hg=g("ZodPrefault",(e,t)=>{If.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>sg(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function Vg(e,t){return new Hg({type:"prefault",innerType:e,get defaultValue(){return typeof t==="function"?t():I.shallowClone(t)}})}var il=g("ZodNonOptional",(e,t)=>{Of.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>og(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function qg(e,t){return new il({type:"nonoptional",innerType:e,...I.normalizeParams(t)})}var Kg=g("ZodSuccess",(e,t)=>{zf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Hp(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function Y_(e){return new Kg({type:"success",innerType:e})}var Yg=g("ZodCatch",(e,t)=>{Nf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>ag(e,n,r,o),e.unwrap=()=>e._zod.def.innerType,e.removeCatch=e.unwrap});function Jg(e,t){return new Yg({type:"catch",innerType:e,catchValue:typeof t==="function"?t:()=>t})}var Xg=g("ZodNaN",(e,t)=>{Df.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Bp(e,n,r,o)});function J_(e){return vp(Xg,e)}var sl=g("ZodPipe",(e,t)=>{$f.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>cg(e,n,r,o),e.in=t.in,e.out=t.out});function mi(e,t){return new sl({type:"pipe",in:e,out:t})}var al=g("ZodCodec",(e,t)=>{sl.init(e,t),Xo.init(e,t)});function X_(e,t,n){return new al({type:"pipe",in:e,out:t,transform:n.decode,reverseTransform:n.encode})}var Qg=g("ZodReadonly",(e,t)=>{Mf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>lg(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function eh(e){return new Qg({type:"readonly",innerType:e})}var th=g("ZodTemplateLiteral",(e,t)=>{Lf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Up(e,n,r,o)});function Q_(e,t){return new th({type:"template_literal",parts:e,...I.normalizeParams(t)})}var nh=g("ZodLazy",(e,t)=>{Gf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>dg(e,n,r,o),e.unwrap=()=>e._zod.def.getter()});function rh(e){return new nh({type:"lazy",getter:e})}var oh=g("ZodPromise",(e,t)=>{Ff.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>ug(e,n,r,o),e.unwrap=()=>e._zod.def.innerType});function eC(e){return new oh({type:"promise",innerType:e})}var ih=g("ZodFunction",(e,t)=>{Wf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>qp(e,n,r,o)});function tC(e){return new ih({type:"function",input:Array.isArray(e?.input)?Ng(e?.input):e?.input??gi(Gn()),output:e?.output??Gn()})}var vi=g("ZodCustom",(e,t)=>{Zf.init(e,t),L.init(e,t),e._zod.processJSONSchema=(n,r,o)=>Vp(e,n,r,o)});function nC(e){let t=new J({check:"custom"});return t._zod.check=e,t}function rC(e,t){return _p(vi,e??(()=>!0),t)}function sh(e,t={}){return Cp(vi,e,t)}function ah(e){return wp(e)}var oC=Rp,iC=Ep;function sC(e,t={}){let n=new vi({type:"custom",check:"custom",fn:(r)=>r instanceof e,abort:!0,...I.normalizeParams(t)});return n._zod.bag.Class=e,n._zod.check=(r)=>{if(!(r.value instanceof e))r.issues.push({code:"invalid_type",expected:e.name,input:r.value,inst:n,path:[...n._zod.def.path??[]]})},n}var aC=(...e)=>Pp({Codec:al,Boolean:Vr,String:Ur},...e);function cC(e){let t=rh(()=>tl([Nc(e),bg(),vg(),Cg(),gi(t),Dg(Nc(),t)]));return t}function lC(e,t){return mi(rl(e),t)}var uC={invalid_type:"invalid_type",too_big:"too_big",too_small:"too_small",invalid_format:"invalid_format",not_multiple_of:"not_multiple_of",unrecognized_keys:"unrecognized_keys",invalid_union:"invalid_union",invalid_key:"invalid_key",invalid_element:"invalid_element",invalid_value:"invalid_value",custom:"custom"};function dC(e){se({customError:e})}function mC(){return se().customError}var cl;(function(e){})(cl||(cl={}));var QD=()=>{let e={string:{unit:"characters",verb:"to have"},file:{unit:"bytes",verb:"to have"},array:{unit:"items",verb:"to have"},set:{unit:"items",verb:"to have"},map:{unit:"entries",verb:"to have"}};function t(o){return e[o]??null}let n={regex:"input",email:"email address",url:"URL",emoji:"emoji",uuid:"UUID",uuidv4:"UUIDv4",uuidv6:"UUIDv6",nanoid:"nanoid",guid:"GUID",cuid:"cuid",cuid2:"cuid2",ulid:"ULID",xid:"XID",ksuid:"KSUID",datetime:"ISO datetime",date:"ISO date",time:"ISO time",duration:"ISO duration",ipv4:"IPv4 address",ipv6:"IPv6 address",mac:"MAC address",cidrv4:"IPv4 range",cidrv6:"IPv6 range",base64:"base64-encoded string",base64url:"base64url-encoded string",json_string:"JSON string",e164:"E.164 number",jwt:"JWT",template_literal:"input"},r={nan:"NaN"};return(o)=>{switch(o.code){case"invalid_type":{let i=r[o.expected]??o.expected,s=$d(o.input),a=r[s]??s;return`Invalid input: expected ${i}, received ${a}`}case"invalid_value":if(o.values.length===1)return`Invalid input: expected ${ba(o.values[0])}`;return`Invalid option: expected one of ${ga(o.values,"|")}`;case"too_big":{let i=o.inclusive?"<=":"<",s=t(o.origin);if(s)return`Too big: expected ${o.origin??"value"} to have ${i}${o.maximum.toString()} ${s.unit??"elements"}`;return`Too big: expected ${o.origin??"value"} to be ${i}${o.maximum.toString()}`}case"too_small":{let i=o.inclusive?">=":">",s=t(o.origin);if(s)return`Too small: expected ${o.origin} to have ${i}${o.minimum.toString()} ${s.unit}`;return`Too small: expected ${o.origin} to be ${i}${o.minimum.toString()}`}case"invalid_format":{let i=o;if(i.format==="starts_with")return`Invalid string: must start with "${i.prefix}"`;if(i.format==="ends_with")return`Invalid string: must end with "${i.suffix}"`;if(i.format==="includes")return`Invalid string: must include "${i.includes}"`;if(i.format==="regex")return`Invalid string: must match pattern ${i.pattern}`;return`Invalid ${n[i.format]??o.format}`}case"not_multiple_of":return`Invalid number: must be a multiple of ${o.divisor}`;case"unrecognized_keys":return`Unrecognized key${o.keys.length>1?"s":""}: ${ga(o.keys,", ")}`;case"invalid_key":return`Invalid key in ${o.origin}`;case"invalid_union":return"Invalid input";case"invalid_element":return`Invalid value in ${o.origin}`;default:return"Invalid input"}}};function ch(){return{localeError:QD()}}var lh=()=>{throw Error("JSON Schema conversion is not bundled into this plugin artifact")};var ll={};mn(ll,{bigint:()=>r$,boolean:()=>n$,date:()=>o$,number:()=>t$,string:()=>e$});function e$(e){return jf(Ur,e)}function t$(e){return Xf(Hr,e)}function n$(e){return ip(Vr,e)}function r$(e){return ap(qr,e)}function o$(e){return bp(pi,e)}se(ch());var i$=ul;var fC=Object.freeze(["hard_stop","use_alternative","scope_down","manual_only","stop_and_explain"]);var Si=64,pC="Rule config exceeds CC Safety Net's safe source limit.";var yU=Object.freeze({maxSources:64,concurrency:4,maxRequests:131,maxResponseBytes:67108864});var dh=[{id:"secret.basename.env",category:"Basename",label:".env",description:"Blocks exact .env files.",basename:".env"},{id:"secret.basename.npmrc",category:"Basename",label:".npmrc",description:"Blocks npm credential config files.",basename:".npmrc"},{id:"secret.basename.pypirc",category:"Basename",label:".pypirc",description:"Blocks Python package index credential files.",basename:".pypirc"},{id:"secret.basename.netrc",category:"Basename",label:".netrc",description:"Blocks machine login credential files.",basename:".netrc"},{id:"secret.basename.git-credentials",category:"Basename",label:".git-credentials",description:"Blocks Git credential storage files.",basename:".git-credentials"},{id:"secret.basename.id-rsa",category:"Basename",label:"id_rsa",description:"Blocks RSA private key basenames.",basename:"id_rsa"},{id:"secret.basename.id-ed25519",category:"Basename",label:"id_ed25519",description:"Blocks Ed25519 private key basenames.",basename:"id_ed25519"},{id:"secret.basename.id-ecdsa",category:"Basename",label:"id_ecdsa",description:"Blocks ECDSA private key basenames.",basename:"id_ecdsa"},{id:"secret.basename.credentials",category:"Basename",label:"credentials",description:"Blocks generic credentials file basenames.",basename:"credentials"}],dl={id:"secret.pattern.env-variant",category:"Pattern",label:".env.*",description:"Blocks environment-specific .env variants."},s$=[".bak",".backup",".copy",".disabled",".old",".orig",".save",".tmp"],a$=[{idSlug:"kube-config",label:"~/.kube/config",directoryParts:[".kube"],basename:"config"},{idSlug:"docker-config",label:"~/.docker/config.json",directoryParts:[".docker"],basename:"config.json"}],mh=[{id:"secret.home.ssh",category:"Home path",label:"~/.ssh",description:"Blocks home SSH configuration and key paths.",suffixParts:[".ssh"]},{id:"secret.home.aws",category:"Home path",label:"~/.aws",description:"Blocks home AWS credential and config paths.",suffixParts:[".aws"]},{id:"secret.home.gcp",category:"Home path",label:"~/.gcp",description:"Blocks home GCP credential paths.",suffixParts:[".gcp"]},{id:"secret.home.gcloud-config",category:"Home path",label:"~/.config/gcloud",description:"Blocks home Google Cloud SDK credential paths.",suffixParts:[".config","gcloud"]},{id:"secret.home.kube-config",category:"Home path",label:"~/.kube/config",description:"Blocks home Kubernetes config files.",suffixParts:[".kube","config"]},{id:"secret.home.docker-config",category:"Home path",label:"~/.docker/config.json",description:"Blocks home Docker credential config files.",suffixParts:[".docker","config.json"]},...a$.flatMap((e)=>s$.map((t)=>({id:["secret.home",e.idSlug,t.slice(1)].join("."),category:"Home path",label:[e.label,t].join(""),description:["Blocks home ",e.label,t," credential backup files."].join(""),suffixParts:[...e.directoryParts,[e.basename,t].join("")]}))),{id:"secret.home.gh-hosts",category:"Home path",label:"~/.config/gh/hosts.yml",description:"Blocks GitHub CLI host credential files.",suffixParts:[".config","gh","hosts.yml"]}];var ml=[{id:"secret.cli.claude-code",category:"Coding CLI credential",label:"Claude Code credentials",paths:["~/.claude/.credentials.json"]},{id:"secret.cli.claude-code.config",category:"Coding CLI config",label:"Claude Code config",paths:["~/.claude/settings.json","~/.claude/settings.local.json","~/.claude.json","<project>/.claude/settings.local.json","<project>/.mcp.json"]},{id:"secret.cli.antigravity",category:"Coding CLI config",label:"Antigravity CLI hook config",paths:["~/.gemini/config/hooks.json","~/.gemini/config/mcp_config.json"]},{id:"secret.cli.codex",category:"Coding CLI credential",label:"Codex credentials",paths:["~/.codex/auth.json","~/.codex/.credentials.json","~/.codex/secrets","~/.codex/.sandbox-secrets"]},{id:"secret.cli.codex.config",category:"Coding CLI config",label:"Codex config",paths:["~/.codex/config.toml","~/.codex/<name>.config.toml"]},{id:"secret.cli.gemini",category:"Coding CLI credential",label:"Gemini CLI credentials",paths:["~/.gemini/oauth_creds.json","~/.gemini/mcp-oauth-tokens.json","~/.gemini/a2a-oauth-tokens.json","~/.gemini/gemini-credentials.json"]},{id:"secret.cli.gemini.config",category:"Coding CLI config",label:"Gemini CLI config",paths:["~/.gemini/settings.json","~/.gemini/google_accounts.json","<project>/.gemini/settings.json","/Library/Application Support/GeminiCli/settings.json","/etc/gemini-cli/settings.json"]},{id:"secret.cli.copilot-cli",category:"Coding CLI credential",label:"GitHub Copilot CLI credentials",paths:["~/.copilot/config.json","~/.copilot/mcp-oauth-config","~/.copilot/mcp-secrets"]},{id:"secret.cli.copilot-cli.config",category:"Coding CLI config",label:"GitHub Copilot CLI config",paths:["~/.copilot/mcp-config.json"]},{id:"secret.cli.kimi-code",category:"Coding CLI credential",label:"Kimi Code credentials",paths:["~/.kimi-code/server.token","~/.kimi-code/credentials","~/.kimi/credentials","~/.kimi/mcp-oauth"]},{id:"secret.cli.kimi-code.config",category:"Coding CLI config",label:"Kimi Code config",paths:["~/.kimi-code/config.toml","~/.kimi-code/mcp.json","~/.kimi/config.toml","~/.kimi/config.json","~/.kimi/config.json.bak","~/.kimi/mcp.json","<project>/.kimi-code/mcp.json"]},{id:"secret.cli.opencode",category:"Coding CLI credential",label:"OpenCode credentials",paths:["~/.local/share/opencode/auth.json","~/.local/share/opencode/mcp-auth.json","~/.local/share/opencode/opencode.db"]},{id:"secret.cli.opencode.config",category:"Coding CLI config",label:"OpenCode config",paths:["~/.config/opencode/opencode.json","~/.config/opencode/opencode.jsonc","/Library/Application Support/opencode/opencode.json","/etc/opencode/opencode.json","<project>/opencode.json","<project>/opencode.jsonc"]},{id:"secret.cli.pi",category:"Coding CLI credential",label:"Pi credentials",paths:["~/.pi/agent/auth.json"]},{id:"secret.cli.pi.config",category:"Coding CLI config",label:"Pi config",paths:["~/.pi/agent/models.json"]},{id:"secret.cli.amp",category:"Coding CLI credential",label:"Amp Code credentials",paths:["~/.local/share/amp/secrets.json","~/.amp/oauth"]},{id:"secret.cli.amp.config",category:"Coding CLI config",label:"Amp Code config",paths:["~/.config/amp/settings.json","~/.config/amp/settings.jsonc","<project>/.amp/settings.json","<project>/.amp/settings.jsonc"]},{id:"secret.cli.cursor",category:"Coding CLI credential",label:"Cursor CLI credentials",paths:["~/.cursor/auth.json","~/.config/cursor/auth.json","~/.cursor/projects/<name>/mcp-auth.json"]},{id:"secret.cli.cursor.config",category:"Coding CLI config",label:"Cursor CLI config",paths:["~/.cursor/mcp.json","<project>/.cursor/mcp.json"]}],gC=[{prefix:"id_rsa",slug:"id-rsa",label:"id_rsa"},{prefix:"id_dsa",slug:"id-dsa",label:"id_dsa"},{prefix:"id_ed25519",slug:"id-ed25519",label:"id_ed25519"},{prefix:"id_ecdsa",slug:"id-ecdsa",label:"id_ecdsa"},{prefix:"credentials",slug:"credentials",label:"credentials"}],c$=[".bak",".backup",".copy",".disabled",".key",".old",".orig",".pem",".save",".tmp"],fh=gC.map((e)=>({id:`secret.variant.${e.slug}.separator`,category:"Variant",label:`${e.label}-* / ${e.label}_*`,description:`Blocks ${e.label} variants with dash or underscore suffixes.`,prefix:e.prefix})),ph=gC.flatMap((e)=>c$.map((t)=>({id:`secret.variant.${e.slug}.${t.slice(1)}`,category:"Variant",label:`${e.label}${t}`,description:`Blocks ${e.label}${t} private credential variants.`,prefix:e.prefix,suffix:t}))),xi={id:"secret.pattern.ssh-key-basename",category:"Pattern",label:"*_(rsa|dsa|ed25519|ecdsa)",description:"Blocks extensionless SSH private key-like basenames.",pattern:/^.*_(rsa|dsa|ed25519|ecdsa)$/},gh=["agilekeychain","asc","bek","cscfg","fve","gnucash","jks","keychain","kwallet","mdf","ovpn","p12","pcap","pem","pfx","pkcs12","psafe3","rdp","sdf","tblk","tpm"].map((e)=>({id:`secret.ext.${e}`,category:"Extension",label:`.${e}`,description:`Blocks files with the .${e} extension.`,extension:e})),hh=[{id:"secret.ext-pattern.key",category:"Extension pattern",label:".key / .keypair",description:"Blocks key and keypair extension patterns.",pattern:/^key(pair)?$/},{id:"secret.ext-pattern.keystore",category:"Extension pattern",label:".keystore / .keyring",description:"Blocks keystore and keyring extension patterns.",pattern:/^key(store|ring)$/},{id:"secret.ext-pattern.kdbx",category:"Extension pattern",label:".kdb / .kdbx",description:"Blocks KeePass database extension patterns.",pattern:/^kdbx?$/}],hC=[...dh,dl,...mh,...fh,...ph,xi,...gh,...hh,...ml].map((e)=>({id:e.id,category:e.category,label:e.label,...e.category==="Coding CLI config"?{defaultOff:!0}:{},..."paths"in e?{paths:e.paths}:{description:e.description}})),yC=new Set(ml.flatMap((e)=>e.category==="Coding CLI config"?[e.id]:[])),l$=hC.map((e)=>e.id),fl=new Set(l$);var IU=u$(import.meta.url),bC,d$=Array(Si+1).fill("over-limit"),vC=/^[^/]+\/[^/]+$/,m$=/^sha256:[a-f0-9]{64}$/,pl=`must be an integer between ${Sl} and ${xl}`,f$=["version","rules","overrides","transparent_wrappers"],p$=["version","safety","workflow","destructive_command_protection","secret_protection","audit"];function SC(e){if(!Ye(e)||!Array.isArray(e.rules)||e.rules.length<=Si)return e;return{$schema:e.$schema,version:e.version,rules:d$,overrides:e.overrides,transparent_wrappers:e.transparent_wrappers}}function g$(){let e=uh,t=(_)=>{let v=e.superRefine(_);return v._zod.def.when=()=>!0,v},n=e.enum(fC),r=e.union([e.literal("off"),e.looseObject({reason:e.string({error:"required non-empty string"}).min(1,"required non-empty string").max(er,`must be at most ${er} characters`).describe("Replacement block reason"),intent:n.optional()})],{error:'must be "off" or an object'}).describe("Disable a rule or replace its block reason and intent."),o=e.string({error:"must be a rulebook source string"}).min(1,"must be a non-empty rulebook source string"),i=e.string({error:"must be a command string"}).regex(bn,"must match command pattern").describe("Command name such as 'git', 'docker', or 'rtk'."),s=e.looseObject({$schema:e.unknown().optional().describe("JSON Schema reference for IDE support"),version:e.literal(1).describe("Schema version (must be 1)"),rules:e.array(o,{error:"must be an array of rulebook source strings"}).max(Si,pC).default([]).describe("Rulebook source strings such as project-rules or owner/repo#main/team-rules"),overrides:e.record(e.string().meta({pattern:vC.source}),r).default({}).describe("Rule overrides by id"),transparent_wrappers:e.array(i,{error:"must be an array of command strings"}).default([]).describe("Commands that transparently execute a visible protected child command")}),a=(_,v)=>{if(!Ye(_))return;if(Array.isArray(_.rules)&&_.rules.length<=Si){let k=new Set;_.rules.forEach((z,M)=>{if(typeof z!=="string"||z==="")return;if(z.trim()===""){v.addIssue({code:"custom",message:"must be a non-empty rulebook source string",path:["rules",M]});return}let W=Xr(z);if(W){v.addIssue({code:"custom",message:W,path:["rules",M]});return}if(k.has(z)){v.addIssue({code:"custom",message:`duplicate rulebook source "${z}"`,path:["rules",M]});return}k.add(z)})}if(Ye(_.overrides))for(let k of Object.keys(_.overrides)){if(vC.test(k))continue;v.addIssue({code:"custom",message:"must use <rulebook-name>/<rule-name>",path:["overrides",k]})}if(!Array.isArray(_.transparent_wrappers))return;let T=new Set;_.transparent_wrappers.forEach((k,z)=>{if(typeof k!=="string"||!bn.test(k))return;if(T.has(k)){v.addIssue({code:"custom",message:`duplicate command "${k}"`,path:["transparent_wrappers",z]});return}if(Av(k)){v.addIssue({code:"custom",message:`reserved command "${k}" cannot be a wrapper`,path:["transparent_wrappers",z]});return}T.add(k)})},c=e.preprocess(SC,s.check(e.superRefine(a))),l=e.preprocess(SC,s.check(t(a))),u=e.strictObject({fail_closed:e.boolean().optional(),paranoid_rm:e.boolean().optional(),paranoid_interpreters:e.boolean().optional()}),d=(_,v)=>e.intersection(e.record(e.string().refine((T)=>_.has(T),{error:(T)=>`unknown ${v} rule id "${String(T.input)}"`}),e.unknown()),e.record(e.string(),e.enum(["on","off"]))),f=(_)=>e.array(e.string({error:"must be a non-empty path string"}),{error:"must be an array of paths"}).check(t((v,T)=>{if(!Array.isArray(v))return;let k=hn();v.forEach((z,M)=>{if(typeof z!=="string")return;let W=_(z,k);if(W)T.addIssue({code:"custom",message:W,path:[M]})})})),m=e.strictObject({version:e.literal(1),safety:e.strictObject({level:e.enum(["standard","strict","paranoid"]).optional(),overrides:u.optional()}).optional(),workflow:e.strictObject({worktree_mode:e.boolean().optional()}).optional(),destructive_command_protection:e.strictObject({enabled:e.boolean().optional(),overrides:d(Xi,"destructive command").optional(),allow_paths:f(Ws).optional()}).optional(),secret_protection:e.strictObject({enabled:e.boolean().optional(),overrides:d(fl,"secret protection").optional(),deny_paths:f(Fs).optional(),allow_paths:f(Gs).optional()}).optional(),audit:e.strictObject({retention_days:e.number({error:pl}).int(pl).min(Sl,pl).max(xl,pl).optional().describe("Days of audit log history to keep before the sweep deletes it")}).optional()}),p=(_)=>{let v=(M,W)=>_==="legacy"?M:W,T=v("must match pattern (letters, numbers, hyphens, underscores)","must match command pattern"),k=`required non-empty string up to ${er} characters`,z=e.looseObject({name:e.string({error:"required string"}).regex(ut,v("must match pattern (letters, numbers, hyphens, underscores; max 64 chars)","must match rule name pattern")),command:e.string({error:v("required string","required string matching command pattern")}).regex(bn,v(T,"required string matching command pattern")),subcommand:e.string({error:v("must be a string if provided","must match command pattern")}).regex(bn,T).optional(),block_args:e.array(e.string({error:v("must be a string","must be a non-empty string")}).refine((M)=>M!=="",{error:v("must not be empty","must be a non-empty string")}),{error:v("required array","required non-empty array")}).refine((M)=>M.length>0,{error:v("must have at least one element","required non-empty array")}),reason:e.string({error:v("required string",k)}).refine((M)=>M!=="",{error:v("must not be empty",k)}).refine((M)=>M.length<=er,{error:v(`must be at most ${er} characters`,k)}),intent:n.optional()},{error:"must be an object"});return e.array(z,{error:v("must be an array","required array")}).check(t((M,W)=>{if(!Array.isArray(M))return;let U=new Set;M.forEach((ge,Ze)=>{let A=Ye(ge)?ge.name:void 0;if(typeof A!=="string")return;if(U.has(A.toLowerCase())){W.addIssue({code:"custom",message:`duplicate rule name "${A}"`,path:[Ze,"name"]});return}U.add(A.toLowerCase())})}))},h=e.looseObject({version:e.literal(1),rules:p("legacy").optional()}),b="required string matching rule name pattern",y=e.looseObject({command:e.string({error:"required non-empty string"}).refine((_)=>_.trim()!=="",{error:"required non-empty string"}),expect:e.enum(["blocked","allowed"]),rule:e.string({error:"must be a string if provided"}).optional()},{error:"must be an object"}).check(t((_,v)=>{if(!Ye(_))return;if(_.expect!=="blocked"||typeof _.rule==="string")return;v.addIssue({code:"custom",message:"required string for blocked fixtures",path:["rule"]})})),R=e.looseObject({name:e.string({error:"required string matching rule name pattern"}).regex(ut,"required string matching rule name pattern"),version:e.string({error:"required non-empty string"}).refine((_)=>_!=="",{error:"required non-empty string"}),allowed_commands:e.array(e.string({error:"must match command pattern"}).regex(bn,"must match command pattern"),{error:"required array"}).check(t((_,v)=>{if(!Array.isArray(_))return;let T=new Set;_.forEach((k,z)=>{if(typeof k!=="string"||!bn.test(k))return;if(T.has(k)){v.addIssue({code:"custom",message:`duplicate command "${k}"`,path:[z]});return}T.add(k)})})),rules:p("rulebook"),tests:e.array(y,{error:"must be an array if provided"}).optional()}).check(t((_,v)=>{if(!Ye(_))return;let T=new Set(yh(_));if(Array.isArray(_.tests)){let z=new Set(_.tests.flatMap((M)=>Ye(M)&&M.expect==="blocked"&&typeof M.rule==="string"?[M.rule]:[]));for(let M of z){if(T.has(M))continue;v.addIssue({code:"custom",message:`blocked fixture references unknown rule "${M}"`,path:["tests"]})}}if(!Array.isArray(_.allowed_commands)||!Array.isArray(_.rules))return;let k=new Set(_.allowed_commands.filter((z)=>typeof z==="string"));_.rules.forEach((z,M)=>{let W=Ye(z)?z.command:void 0;if(typeof W!=="string"||k.has(W))return;v.addIssue({code:"custom",message:`"${W}" must be listed in allowed_commands`,path:["rules",M,"command"]})})})),w=e.string({error:"required string"}).refine((_)=>_.trim()!=="",{error:"required string"}),E=e.looseObject({spec:w,name:w,version:w,digest:e.string({error:"required sha256 digest"}).regex(m$,"required sha256 digest")},{error:"must be an object"}),P=e.looseObject({rulebooks:e.array(e.intersection(E,e.discriminatedUnion("kind",[e.object({kind:e.literal("local-directory"),path:w}),e.object({kind:e.literal("github"),owner:w,repo:w,ref:w,commit:w,path:w,display_ref:e.unknown().optional()})],{error:(_)=>{if(!Ye(_.input))return"must be an object";let v=_.input.kind;return typeof v==="string"?`unknown kind "${v}"`:"required string"}})))});return{RulesConfigSchema:c,RulesConfigDiagnosticSchema:l,RuleOverrideSchema:r,UserPolicySchema:m,LegacyConfigSchema:h,RulebookSchema:R,RulesLockfileSchema:P}}function _i(){return bC??=g$(),bC}function xC(){return _i().RulesConfigSchema}function h$(){return _i().UserPolicySchema}function _C(){return _i().RulebookSchema}function CC(){return _i().RulesLockfileSchema}function yh(e){let t=Ye(e)?e.rules:void 0;return(Array.isArray(t)?t:[]).flatMap((n)=>{let r=Ye(n)?n.name:void 0;return typeof r==="string"?[r]:[]})}function wC(e){let t=_i().RulesConfigDiagnosticSchema.safeParse(e);if(t.success)return{errors:[],sources:new Set(t.data.rules)};return{errors:Kr(PC(t.error.issues,f$)),sources:S$(e,t.error.issues)}}function RC(e){let t=h$().safeParse(e);if(t.success)return[];return Kr(PC(t.error.issues,p$)," ")}function Kr(e,t=": ",n=" "){return[...new Set(e.flatMap((r)=>EC(r,t,n,[])))]}function EC(e,t,n,r){let o=[...r,...e.path],i=v$(o);if(e.code==="unrecognized_keys")return e.keys.map((s)=>`${i?`${i}.`:""}unknown field "${s}"`);if(e.code==="invalid_key")return e.issues.map((s)=>s.message);if(e.code==="invalid_union"){let s=e.errors.flat().filter((a)=>a.path.length>0);if(s.length>0)return s.flatMap((a)=>EC(a,t,n,o))}if(o.length===0)return[e.code==="invalid_type"?"Config must be an object":e.message];if(o.length===1&&(e.code==="too_big"||e.code==="too_small")&&e.origin==="array")return[e.message];return[`${i}${o.length===1?n:t}${y$(e)}`]}function y$(e){if(e.code==="invalid_value")return`must be ${b$(e.values)}`;if(e.code!=="invalid_type"||!e.message.startsWith("Invalid input:"))return e.message;if(e.expected==="object"||e.expected==="record")return"must be an object if provided";return e.expected==="boolean"?"must be a boolean":e.message}function b$(e){if(e.length>3)return`one of ${e.join(", ")}`;let t=e.map((n)=>typeof n==="string"?`"${n}"`:String(n));if(t.length<2)return`${t[0]}`;return`${t.slice(0,-1).join(", ")}${t.length>2?",":""} or ${t.at(-1)}`}function v$(e){return e.map((t,n)=>{if(typeof t==="number")return`[${t}]`;return n===0?String(t):`.${String(t)}`}).join("")}function PC(e,t){let n=e.map((i)=>i.path[1]),r=[...new Set(n.filter((i)=>typeof i==="string"))],o=(i,s)=>[i.path.length===0?-1:t.indexOf(String(i.path[0])),typeof s==="number"?s:r.indexOf(String(s)),i.code==="custom"?0:1];return e.map((i,s)=>({issue:i,rank:o(i,n[s])})).sort((i,s)=>i.rank[0]-s.rank[0]||i.rank[1]-s.rank[1]||i.rank[2]-s.rank[2]).map((i)=>i.issue)}function S$(e,t){let n=Ye(e)?e.rules:void 0;if(!Array.isArray(n))return new Set;if(t.some((o)=>o.path.length===1&&o.path[0]==="rules"))return new Set;let r=new Set(t.filter((o)=>o.path[0]==="rules"&&typeof o.path[1]==="number").map((o)=>o.path[1]));return new Set(n.filter((o,i)=>typeof o==="string"&&!r.has(i)))}function Ye(e){return!!e&&typeof e==="object"&&!Array.isArray(e)}function x$(e){return wC(e)}function bh(e){try{let t=fn(_$(e));if(t===null)return{config:null,errors:[]};if(!t.trim())return{config:null,errors:["Config file is empty"]};let n=JSON.parse(t),r=x$(n);if(r.errors.length>0)return{config:null,errors:r.errors};let o=xC().parse(n);return{config:{version:1,rules:o.rules??[],overrides:o.overrides??{},transparent_wrappers:o.transparent_wrappers??[]},errors:[]}}catch(t){if(t instanceof ae)return{config:null,errors:[t.message]};let n=t instanceof Error?t.message:String(t);return{config:null,errors:[t instanceof SyntaxError?"Invalid JSON":n]}}}function _$(e){return typeof e==="string"?Ni(e):e}var P$=new Set(["standard","strict","paranoid"]),k$={version:1,safety:{level:"standard",overrides:{}},workflow:{worktree_mode:!1},destructive_command_protection:{enabled:!0,overrides:{},allow_paths:[]},secret_protection:{enabled:!0,overrides:{},deny_paths:[],allow_paths:[]},audit:{retention_days:Ti}};function vh(e){return E$(R$(pn(e)),Mi)}function IC(e={}){let t=z$(vh(e));return{...t.policy,errors:t.errors,...t.fallback?{fallback:t.fallback}:{}}}function kC(e){if(!Pt(e))return O$();let t=Pt(e.safety)?e.safety:{},n=Pt(t.overrides)?t.overrides:{},r=Pt(e.workflow)?e.workflow:{},o=Pt(e.destructive_command_protection)?e.destructive_command_protection:{},i=Pt(e.secret_protection)?e.secret_protection:{};return{version:1,safety:{level:P$.has(t.level)?t.level:"standard",overrides:{...typeof n.fail_closed==="boolean"?{fail_closed:n.fail_closed}:{},...typeof n.paranoid_rm==="boolean"?{paranoid_rm:n.paranoid_rm}:{},...typeof n.paranoid_interpreters==="boolean"?{paranoid_interpreters:n.paranoid_interpreters}:{}}},workflow:{worktree_mode:typeof r.worktree_mode==="boolean"?r.worktree_mode:!1},destructive_command_protection:{enabled:typeof o.enabled==="boolean"?o.enabled:!0,overrides:AC(o.overrides,Xi),allow_paths:T$(o.allow_paths)},secret_protection:{enabled:typeof i.enabled==="boolean"?i.enabled:!0,overrides:AC(i.overrides,fl),deny_paths:A$(i.deny_paths),allow_paths:I$(i.allow_paths)},audit:{retention_days:Ii(Pt(e.audit)?e.audit.retention_days:void 0)}}}function AC(e,t){if(!Pt(e))return{};return Object.fromEntries(Object.entries(e).flatMap(([n,r])=>t.has(n)&&(r==="on"||r==="off")?[[n,r]]:[]))}function A$(e){if(!Array.isArray(e))return[];let t=hn();return e.filter((n)=>Fs(n,t)===null)}function T$(e){if(!Array.isArray(e))return[];let t=hn();return e.filter((n)=>Ws(n,t)===null)}function I$(e){if(!Array.isArray(e))return[];let t=hn();return e.filter((n)=>Gs(n,t)===null)}function Pt(e){return!!e&&typeof e==="object"&&!Array.isArray(e)}function O$(){return structuredClone(k$)}function z$(e){let t=N$();if(!C$(e)){let n=globalThis.__CC_SAFETY_NET_EMBEDDED_POLICY__;if(!Pt(n))return{policy:t,errors:[]};return{policy:TC(kC(n)),errors:[]}}try{let n=w$(e,"utf-8");if(!n.trim())return{policy:t,errors:[`${e}: Config file is empty`],fallback:"defaults"};let r=JSON.parse(n),o=RC(r),i=TC(kC(r));if(o.length>0)return{policy:i,errors:o.map((s)=>`${e}: ${s}`),fallback:Pt(r)?"salvaged":"defaults"};return{policy:i,errors:[]}}catch(n){let r=n instanceof Error?n.message:String(n);return{policy:t,errors:[`${e}: ${n instanceof SyntaxError?"Invalid JSON":r}`],fallback:"defaults"}}}function OC(e){let t=Object.entries(e),n=new Set(t.flatMap(([r,o])=>o==="on"?[r]:[]));return[...new Set([...[...yC].filter((r)=>!n.has(r)),...t.flatMap(([r,o])=>o==="off"?[r]:[])])]}function N$(){return{safety:{},worktreeMode:!1,destructiveCommandProtectionEnabled:!0,destructiveCommandRuleOverrides:{},destructiveCommandAllowPaths:[],secretProtection:{enabled:!0,disabledRules:OC({}),denyPaths:[],allowPaths:[]}}}function TC(e){return{safety:D$(e.safety),worktreeMode:e.workflow.worktree_mode,destructiveCommandProtectionEnabled:e.destructive_command_protection.enabled,destructiveCommandRuleOverrides:e.destructive_command_protection.overrides,destructiveCommandAllowPaths:e.destructive_command_protection.allow_paths,secretProtection:{enabled:e.secret_protection.enabled,disabledRules:OC(e.secret_protection.overrides),denyPaths:e.secret_protection.deny_paths,allowPaths:e.secret_protection.allow_paths}}}function D$(e){let t={...e.overrides.fail_closed!==void 0?{failClosed:e.overrides.fail_closed}:{},...e.overrides.paranoid_rm!==void 0?{paranoidRm:e.overrides.paranoid_rm}:{},...e.overrides.paranoid_interpreters!==void 0?{paranoidInterpreters:e.overrides.paranoid_interpreters}:{}};return{level:e.level,...Object.keys(t).length>0?{overrides:t}:{}}}var $C="This path contains the protected policy config and you must not modify or delete it.",M$=new Set(["[","cat","file","grep","head","jq","less","ls","more","rg","sed","stat","tail","test","wc"]);function MC(e){let t=gn(Ot()),n=B$(e.invocation.context.executionCwd,t);if(e.invocation.route.kind==="patch")return zC(e.paths,!1,e.invocation.context.executionCwd,n,t);let r=Ne(e,"input-candidate");if(e.invocation.route.kind==="command")return r?NC(r.shell,e.invocation.context.executionCwd,n,t):null;if(e.invocation.route.kind==="unknown"&&r){let o=NC(r.shell,e.invocation.context.executionCwd,n,t);if(o)return o}return zC(e.paths,e.invocation.route.kind==="grep"||e.invocation.route.kind==="glob"||Os(e.invocation.toolName),e.invocation.context.executionCwd,n,t)}function zC(e,t,n,r,o){if(t)return null;let i=e.find((s)=>Ci(s,n,r,o));return i?{target:i}:null}function NC(e,t,n,r){let o=Ns(e,t,r,{findSegmentTarget:(i,s)=>L$(i,s,n,r)?.target??null,isRedirectionTarget:(i,s)=>Ci(i,s.cwd,n,r),findMalformedTarget:(i)=>Z$(i,t,n,r)?.target??null,normalizeCwd:ve});return o?{target:o}:null}function L$(e,t,n,r){if(So(e))return null;let o=r.environment,i=Yt([...e],o),s=G(i[0]??"").toLowerCase(),a=i.slice(1);if(s==="rm"&&W$(a)){let c=F$(a).find((l)=>DC(De(l,t.variables),t.cwd,n,r));if(c)return{target:c}}if(s==="find"){if(Ks(i,1)||Lu(i,o)){let l=(qs(j(i))??j(["."])).find((u)=>{let d=De(u.text,t.variables);return Ci(d,t.cwd,n,r)||DC(d,t.cwd,n,r)})?.text;if(l)return{target:l}}}if(s==="mv"){let c=Ds(a).sources.find((l)=>U$(De(l,t.variables),t.cwd,n,r));if(c)return{target:c}}if(G$(e,o))return null;for(let c of[...e,...i])for(let l of LC(c))if(Ci(De(l,t.variables),t.cwd,n,r))return{target:l};return null}function W$(e){return e.some((t)=>t==="--recursive"||t.startsWith("-")&&!t.startsWith("--")&&/[rR]/.test(t.slice(1)))}function F$(e){let t=e.indexOf("--");if(t!==-1)return[...e.slice(0,t).filter((n)=>!n.startsWith("-")),...e.slice(t+1)];return e.filter((n)=>!n.startsWith("-"))}function G$(e,t){let n=Yt([...e],t);if(n.length===0)return!1;let r=G(n[0]??"").toLowerCase();if(!M$.has(r))return!1;if(r!=="sed")return!0;return!n.slice(1).some((o)=>o.startsWith("-i")||o==="--in-place"||o.startsWith("--in-place="))}function Z$(e,t,n,r){for(let o of e.split(/\s+/))for(let i of LC(o))if(Ci(i,t,n,r))return{target:i};return null}function LC(e){let t=e.trim().replace(/^['"]|['"]$/g,""),n=t.indexOf("=");return n===-1||n===t.length-1?[t]:[t,t.slice(n+1)]}function B$(e,t){let n=ve(vh(),e,t),r=Sh(n),o=new Set;for(let i=r;;i=Sh(i))if(o.add(Yr(i)),Sh(i)===i)break;return{file:Yr(n),directoryAndAncestors:o}}function Ci(e,t,n,r){let o=rv(e,t,r,(i)=>Yr(i)===$$(n.file));return o!==null&&Yr(o)===n.file}function DC(e,t,n,r){return n.directoryAndAncestors.has(Yr(ve(e,t,r)))}function U$(e,t,n,r){let o=Yr(ve(e,t,r));return o===n.file||n.directoryAndAncestors.has(o)}function Yr(e){return process.platform==="win32"?e.toLowerCase():e}import{homedir as _h}from"os";import{isAbsolute as gl,posix as j$,resolve as yl,win32 as H$}from"path";import{fileURLToPath as V$}from"url";var KC="Access to a sensitive path is not allowed.",YC=new Set(["echo","printf"]),q$=new Set(["find"]),K$=new Set(["-exec","-execdir"]),Y$=new Set([";","+"]),J$=new Set(["-delete","-exec","-execdir","-fls","-fprint","-fprint0","-fprintf","-ok","-okdir"]),X$=new Set(["-name","-iname","-path","-ipath","-wholename","-iwholename","-samefile"]),Q$=new Set(["python","python2","python3","node","deno","bun","ruby","perl","php","rscript","osascript","bash","sh","zsh","dash","ksh"]),e0=new Set(["node","bun"]),t0=new Set(["bun","child_process","deno","dotenv","fs","subprocess"]),n0=new Set(["append","awk","base64","cat","chmod","chown","connect","copy","cp","database","dd","eval","exec","fetch","file","function","grep","head","include","load","move","mv","open","popen","read","remove","rename","require","rg","rm","sed","shell","source","spawn","strings","system","tail","tar","truncate","unlink","write","xxd","zip"]),JC=new Set(["-c","-e","-r","-E","--eval","--exec"]),r0=new Set(["src/cli/cc-safety-net.ts","dist/bin/cc-safety-net.js"]),WC=new Set(["cc-safety-net","ccsn"]),o0=new Set(["bunx","npx","pnpx"]),i0=new Set(["bun","node"]),s0=new Map([["c",new Set(["bash","sh","zsh","dash","ksh","python"])],["e",new Set(["node","deno","bun","ruby","perl","rscript","osascript"])],["E",new Set(["perl"])],["r",new Set(["php"])]]),a0=new Set(["grep","rg"]),FC="f",GC="file",c0="files",l0=new Set(["e","f"]),u0=new Set(["regexp","file"]),d0=new Set(["e","f","A","B","C","m"]),m0=new Set(["regexp","file","after-context","before-context","context","max-count"]),f0=new Set(["|","|&"]),xh="__CC_SAFETY_NET_PIPE_INPUT__",XC=new Set(["bash","sh","zsh","dash","ksh"]),p0=new Map([["bash",new Set(["-O"])],["sh",new Set(["-O"])],["zsh",new Set(["-o"])],["dash",new Set(["-o"])],["ksh",new Set(["-o"])],["python",new Set(["-W","-X"])],["node",new Set(["-r","--require","--loader","--import","--input-type"])]]);function ZC(e,t,n,r,o){let i=eo();for(let s of e){if(tM(s,t,n?.denyPaths??[],r,i))return{target:s,ruleId:"secret.deny-path"};if(o&&!o.has(s))continue;let a=Q0(s,t,n,i);if(a){if(!a.startsWith("secret.cli.")&&nM(s,t,n?.allowPaths??[],r,i))continue;return{target:s,ruleId:a}}}return null}function QC(e,t,n={}){let r=BC(e),o=ZC(r,e.invocation.context.executionCwd,t,e.invocation.context.configCwd),i=o?.ruleId!=="secret.deny-path"&&n.strict===!1?BC(e,{refineJavaScriptInlineData:!0}):r,s=i.length===r.length?o:ZC(r,e.invocation.context.executionCwd,t,e.invocation.context.configCwd,new Set(i));if(s?.ruleId!=="secret.deny-path"&&n.strict===!1&&g0(e))return null;return s}function g0(e){if(e.invocation.route.kind!=="command")return!1;let t=Ne(e,"input-candidate")??Ne(e,"declared-command");if(!t)return!1;if(t.program.nodes.some((s)=>s.kind==="command"&&s.nested.length>0))return!1;let n=[];for(let s of t.shell.entries){if(s.kind==="operator"&&s.boundary)return!1;if(s.kind==="redirection")return!1;if(s.kind!=="operator")n.push(gt(s.text))}let r=Jr(n);if(r.length===0)return!1;let o=Un(r[0]??"").toLowerCase(),i=r.slice(1);if(o==="ls"||o==="stat")return!0;if(o==="test")return i.length===2&&(i[0]==="-e"||i[0]==="-f");if(o!=="find")return!1;return!i.some((s)=>J$.has(s))}function BC(e,t={}){if(e.invocation.route.kind==="command"){let r=Ne(e,"input-candidate");return r?Ei(r.shell,e.store,t):[]}if(e.invocation.route.kind!=="unknown")return[...e.paths];let n=Ne(e,"input-candidate");return[...n?Ei(n.shell,e.store,t):[],...e.paths]}function Ei(e,t,n){if(e.status==="structural-limit")throw new pt;if(e.status==="unclosed-quote")return[];if(e.status==="invalid")throw Error("Unable to parse command for secret protection");let r=[...e.assignmentFallbacks,...D0(gt(e.source),t,n)],o=[],i=null;for(let s of e.entries){if(s.kind==="operator"){if(!s.boundary)continue;if(o.length>0){if(r.push(...hl(o,t,n)),i!==null)r.push(...jC(i,o,t,n));i=f0.has(s.operator)?o:null,o=[]}else i=null;continue}if(s.kind==="redirection"){let a=s.target?gt(s.target):void 0;if(a&&s.targetOrder==="legacy-segment")o.push(a);else if(a)r.push(a);continue}o.push(gt(s.text))}if(o.length>0){if(r.push(...hl(o,t,n)),i!==null)r.push(...jC(i,o,t,n))}return r}function hl(e,t,n){let r=R0(e),o=Jr(e);if(o.length===0)return r;let i=o[0]??"",s=Un(i).toLowerCase(),a=o.slice(1),c=y0(i,s,a);if(c)return[...r,...c];if(YC.has(s))return r;if(a0.has(s))return[...r,...B0(a)];if(q$.has(s))return[...r,...E0(a,t,n)];if($e.has(s))return[...r,...a.flatMap((l)=>HC("awk",l)),...a.flatMap((l)=>k0(l,t,n)),...a.flatMap(A0)];if(nw(s)){if(XC.has(s)){let l=ev(s,a);if(l!==null&&t.getShellSyntax(l).status==="structural-limit")throw new pt}return[...r,...P0(s,a,n)]}return[...r,...a.flatMap((l)=>HC(s,l))]}function h0(e,t){if(WC.has(e))return t[0]==="explain"?0:null;if(o0.has(e)){let n=t[0]==="-y"||t[0]==="--yes"?1:0;return WC.has(t[n]??"")&&t[n+1]==="explain"?n+1:null}if(i0.has(e)){if(UC(t[0])&&t[1]==="explain")return 1;if(e==="bun"&&t[0]==="run"&&UC(t[1])&&t[2]==="explain")return 2}return null}function y0(e,t,n){let r=h0(t,n);if(r===null)return null;let o=[e,...n.slice(0,r)],i=n.slice(r+1);for(let s=0;s<i.length;s++){let a=i[s];if(a==="--json"||a==="--help"||a==="-h")continue;if(a==="--cwd"){let c=i[s+1];if(c&&!c.startsWith("--"))o.push(c);s++;continue}return o}return o}function UC(e){let t=e?.replaceAll("\\","/");return[...r0].some((n)=>t===n||t?.endsWith(`/${n}`))}function jC(e,t,n,r){if(_0(t,n,r))return b0(e);let o=C0(t);if(o===null)return[];return v0(e).flatMap((i)=>XC.has(o)?Ei(n.getShellSyntax(i),n,r):ow(i))}function b0(e){let t=Jr(e);if(t.length===0)return[];let n=Un(t[0]??"").toLowerCase();if(!YC.has(n))return[];return t.slice(1)}function v0(e){let t=Jr(e);if(t.length===0)return[];let n=Un(t[0]??"").toLowerCase(),r=t.slice(1);if(n==="echo"){let o=r.findIndex((i)=>!/^-[neE]+$/.test(i));return[(o===-1?[]:r.slice(o)).join(" ")]}if(n==="printf")return S0(r);return[]}function S0(e){let t=e[0];if(t===void 0)return[];let n=(t.match(/%%|%[bqs]/g)??[]).filter((o)=>o!=="%%").length;if(n===0||e.length===1)return[ew(t)];let r=e.slice(1);return Array.from({length:Math.ceil(r.length/n)},(o,i)=>x0(t,r.slice(i*n,(i+1)*n)))}function x0(e,t){let n=0;return ew(e.replace(/%%|%[bqs]/g,(r)=>{if(r==="%%")return"%";let o=t[n]??"";return n++,o}))}function ew(e){return e.replace(/\\n/g,`
 `).replace(/\\t/g,"\t").replace(/\\r/g,"\r")}function _0(e,t,n){let r=Jr(e);if(r.length===0||Un(r[0]??"").toLowerCase()!=="xargs")return!1;let o=kn(r),i=r.slice(o.childStart);if(i.length===0)return!1;if(o.replacementToken==="")return!1;let s=o.replacementToken,a=s===null?[...i,xh]:i.map((c)=>c.split(s).join(xh));return hl(a,t,n).some((c)=>c.includes(xh))}function C0(e){let t=Jr(e);if(t.length===0)return null;let n=Un(t[0]??"").toLowerCase();if(!nw(n))return null;return w0(n,t.slice(1))?n:null}function w0(e,t){let n=tw(e);for(let r=0;r<t.length;r++){let o=t[r];if(o===void 0)break;if(JC.has(o)||rw(e,o)||/^--(?:eval|exec)=/.test(o))return!1;if(o==="-")return!0;if(o.startsWith("-")){if(n==="python"&&o==="-m")return!1;if(p0.get(n)?.has(o))r++;continue}return!1}return!0}function tw(e){return/^python\d/.test(e)?"python":e}function R0(e){let t=[];for(let n of e){if(aw(n))continue;let r=/^[A-Za-z_][A-Za-z0-9_]*=(.*)$/.exec(n);if(r===null)break;if(r[1]!==void 0&&r[1]!=="")t.push(r[1])}return t}function HC(e,t){if(t==="--")return[];let n=[],r=t.indexOf("=");if(r>0&&r<t.length-1)n.push(t.slice(r+1));if(t.startsWith("-"))return n;if(e==="tar"&&/\.(?:tar|tgz|tar\.gz|zip)$/i.test(t))return n;if(e==="zip"&&/\.zip$/i.test(t))return n;return n.push(t),n}function E0(e,t,n){let r=e.findIndex((i)=>i.startsWith("-")||i==="("||i==="!"||i===";"),o=[...e.slice(0,r===-1?e.length:r)];for(let i=0;i<e.length;i++){if(!K$.has(e[i]??""))continue;let s=e.slice(i+1),a=s.findIndex((u)=>Y$.has(u)),c=a===-1?s:s.slice(0,a),l=hl(c,t,n);if(o.push(...l.filter((u)=>u!=="{}")),!l.includes("{}"))continue;o.push(...e.slice(0,i).flatMap((u,d,f)=>{if(!X$.has(u))return[];let m=f[d+1];return m===void 0?[]:[m,m.replace(/^\*+\//,"").replace(/\/\*+$/g,"").replace(/^\*+/,"").replace(/\*+$/g,"")]}))}return o}function nw(e){return Q$.has(e)||/^python\d/.test(e)}function P0(e,t,n){let r=[];for(let o=0;o<t.length;o++){let i=t[o];if(i===void 0)break;if(JC.has(i)||rw(e,i)){let a=t[o+1];if(a!==void 0)r.push(...VC(e,a,n)),o++;continue}let s=/^--(?:eval|exec)=(.*)$/.exec(i);if(s!==null&&s[1]!==void 0){r.push(...VC(e,s[1],n));continue}if(!i.startsWith("-"))r.push(i)}return r}function rw(e,t){if(!t.startsWith("-")||t.startsWith("--")||t.length<=2)return!1;return s0.get(t[t.length-1]??"")?.has(tw(e))??!1}function k0(e,t,n){if(!e.includes("system"))return[];return Nu(e)?.commands.flatMap((r)=>Ei(t.getShellSyntax(r),t,n))??[]}function A0(e){return Array.from(e.matchAll(/\bgetline(?:\s+[A-Za-z_][A-Za-z0-9_]*)?\s*<\s*"((?:\\.|[^"\\])*)"/g)).map((t)=>t[1]).filter((t)=>t!==void 0&&t!=="")}function ow(e){let t=Array.from(e.matchAll(/(['"`])((?:\\.|(?!\1).)*)\1/g)).map((r)=>r[2]).filter((r)=>r!==void 0&&r!==""),n=(e.match(/[\w./~@+-]*[./~][\w./~@+-]*/g)??[]).filter((r)=>r!=="process.versions.sqlite"||t.some((o)=>o.includes(r)));return[...t,...t.flatMap(iw),...n]}function VC(e,t,n){let r=ow(t);if(!n.refineJavaScriptInlineData||!e0.has(e)||r.length===0)return r;let o=T0(t);return o!==null&&!O0(o)?[]:r}function T0(e){let t=e.split("");for(let n=0;n<e.length;n++){let r=e[n];if(r!=="'"&&r!=='"'&&r!=="`")continue;if(r==="`"&&I0(e,n))return null;t[n]=" ";let o=!1;for(let i=n+1;i<e.length;i++){let s=e[i];if(t[i]=" ",s==="\\"){if(i++,i<e.length)t[i]=" ";continue}if(r==="`"&&s==="$"&&e[i+1]==="{")return null;if(r!=="`"&&(s===`
-`||s==="\r"))return null;if(s!==r)continue;n=i,o=!0;break}if(!o)return null}return t.join("")}function I0(e,t){for(let n=t-1;n>=0;n--){let r=e[n];if(!r||/\s/.test(r))continue;return/[\w$\])]/.test(r)}return!1}function O0(e){for(let t of e.matchAll(/[A-Za-z_$][A-Za-z0-9_$]*/g)){let n=t[0],r=t.index;if(t0.has(n.toLowerCase()))return!0;let o=n.replace(/([a-z0-9])([A-Z])/g,"$1 $2").split(/[_$\s]+/).map((i)=>i.toLowerCase());if(!o.some((i)=>n0.has(i)))continue;if(o.length>1)return!0;if(z0(e,r)===".")return!0;if(N0(e,r+n.length)==="(")return!0}return!1}function z0(e,t){for(let n=t-1;n>=0;n--)if(!/\s/.test(e[n]??""))return e[n];return}function N0(e,t){for(let n=t;n<e.length;n++)if(!/\s/.test(e[n]??""))return e[n];return}function D0(e,t,n){return F0(e).flatMap((r)=>{let o=t.getShellSyntax(r);if(o.status==="invalid")return[];return[...Ei(o,t,n),...$0(o)?M0(o):[]]})}function $0(e){let t=e.entries;for(let n=0;n<t.length;n++){let r=t[n];if(r?.kind!=="word"||Un(gt(r.text)).toLowerCase()!=="base64")continue;for(let o=n+1;o<t.length;o++){let i=t[o];if(i?.kind==="operator")break;if(i?.kind!=="word")continue;let s=gt(i.text);if(s==="--decode"||!s.startsWith("--")&&s.startsWith("-")&&/[dD]/.test(s))return!0}}return!1}function M0(e){return e.entries.flatMap((t)=>t.kind==="word"?[gt(t.text)]:t.kind==="redirection"&&t.target?[gt(t.target)]:[]).flatMap(iw)}function iw(e){let t=W0(e);if(t===null)return[];let n=Buffer.from(t,"base64").toString("utf8");if(n===""||L0(n))return[];return Buffer.from(n,"utf8").toString("base64").replace(/=+$/g,"")===t.replace(/=+$/g,"")?[n]:[]}function L0(e){return Array.from(e).some((t)=>{let n=t.charCodeAt(0);return n<32||n===127})}function W0(e){if(e.length<8||!/^[A-Za-z0-9+/_-]+={0,2}$/.test(e))return null;if(/=/.test(e.replace(/=+$/g,"")))return null;let t=e.replace(/=+$/g,"");if(t.length%4===1)return null;return`${t.replace(/-/g,"+").replace(/_/g,"/")}${"=".repeat((4-t.length%4)%4)}`}function F0(e){let t=[],n={inSingle:!1,inDouble:!1,escaped:!1};for(let r=0;r<e.length;r++){let o=e[r];if(!o)break;if(go(o,n))continue;if(sw(e,r,n)){let i=G0(e,r+1);if(i!==null)t.push(i.body),r=i.endIndex;continue}if(!n.inSingle&&o==="`"){let i=Z0(e,r);if(i!==null)t.push(i.body),r=i.endIndex}}return t}function G0(e,t){let n={inSingle:!1,inDouble:!1,escaped:!1},r=1;for(let o=t+1;o<e.length;o++){let i=e[o];if(!i)break;if(go(i,n))continue;if(sw(e,o,n)){r++,o++;continue}if(!n.inSingle&&!n.inDouble&&i===")"){if(r--,r===0)return{body:e.slice(t+1,o),endIndex:o}}}return null}function Z0(e,t){let n=!1;for(let r=t+1;r<e.length;r++){let o=e[r];if(!o)break;if(n){n=!1;continue}if(o==="\\"){n=!0;continue}if(o==="`")return{body:e.slice(t+1,r),endIndex:r}}return null}function sw(e,t,n){return!n.inSingle&&e[t]==="$"&&e[t+1]==="("&&e[t+2]!=="("}function B0(e){let t=[],n=[],r=!1,o=!1,i=!1;for(let c=0;c<e.length;c++){let l=e[c];if(l===void 0)break;if(!i&&l==="--"){i=!0;continue}if(i){n.push(l);continue}let u=/^--([^=]+)(?:=(.*))?$/.exec(l);if(u!==null){let d=u[1]??"",f=u[2];if(d===c0)o=!0;if(u0.has(d))r=!0;if(f!==void 0){if(d===GC)t.push(f);continue}if(m0.has(d)){let m=e[c+1];if(d===GC&&m!==void 0)t.push(m);c++}continue}if(l.startsWith("-")&&l.length>1){let d=l.slice(1),f="",m="";for(let p=0;p<d.length;p++){let h=d[p]??"";if(l0.has(h))r=!0;if(d0.has(h)){f=h,m=d.slice(p+1);break}}if(f!=="")if(m.length>0){if(f===FC)t.push(m)}else{let p=e[c+1];if(f===FC&&p!==void 0)t.push(p);c++}continue}n.push(l)}let a=!r&&!o?n.slice(1):n;return[...t,...a]}function Jr(e){let t=e.findIndex((n)=>!aw(n)&&!/^[A-Za-z_][A-Za-z0-9_]*=.*/.test(n));return t===-1?[]:[...e.slice(t)]}function aw(e){return e==="env"||e==="command"||e==="builtin"||e==="sudo"}var U0=new Set(["id_rsa.pub","id_ed25519.pub","id_ecdsa.pub"]),j0=".env.",H0=new Set([".env.example",".env.sample",".env.template",".env.defaults"]),V0=[".env.example.",".env.sample."];function q0(e){let t;try{t=new URL(e.trim())}catch{return!1}return t.protocol!=="file:"&&t.host!==""}function K0(e){return e.length>0&&!/\s/.test(e)}function Y0(e,t,n){try{let r=Pi(e,t,n);return r!==""&&Be.entryKind(r)!=="missing"}catch(r){if(r instanceof be)throw r;return!1}}var J0=new Set(["node_modules","__pycache__"]),X0=[["vendor","bundle"],["vendor","cache"]];function Q0(e,t,n,r){if(q0(e))return null;let o=Zt(e,t,r);if(!o)return null;let i=re(o.split("/").pop()??""),s=re(o),a=()=>K0(i)||Y0(e,t,r);if(H0.has(i)||V0.some((d)=>i.startsWith(d)))return null;let c=re(iM(e,t,r));for(let d of mh){let f=`~/${d.suffixParts.join("/")}`;if((qC(s,f)||qC(c,f))&&Gt(d.id,n))return d.id}let l=eM(o,t,n,r);if(l)return l;if(U0.has(i))return null;for(let d of dh)if(i===d.basename&&Gt(d.id,n))return d.id;if(i.startsWith(j0)&&Gt(dl.id,n)&&a())return dl.id;for(let d of fh)if(i.length>d.prefix.length&&i.startsWith(d.prefix)){let f=i.slice(d.prefix.length)[0];if((f==="-"||f==="_")&&Gt(d.id,n)&&a())return d.id}for(let d of ph)if(i.length>d.prefix.length&&i.startsWith(d.prefix)){if(i.slice(d.prefix.length)===d.suffix&&Gt(d.id,n))return d.id}if(rM(s))return null;if(!i.includes(".")&&xi.pattern.test(i)&&Gt(xi.id,n))return xi.id;let u=oM(i,n);if(u)return u;return null}function eM(e,t,n,r){return ml.find((o)=>{if(!Gt(o.id,n))return!1;switch(o.id){case"secret.cli.claude-code":return ne(e,ie(process.env.CLAUDE_CONFIG_DIR,"~/.claude",t,r),[".credentials.json"]);case"secret.cli.claude-code.config":{let i=re(e).split("/");return ne(e,ie(process.env.CLAUDE_CONFIG_DIR,"~/.claude",t,r),["settings.json","settings.local.json"])||Ri(e,"~/.claude.json",t,r)||i.at(-1)==="settings.local.json"&&i.at(-2)===".claude"||i.at(-1)===".mcp.json"}case"secret.cli.antigravity":return ne(e,Zt("~/.gemini/config",t,r),["hooks.json","mcp_config.json"]);case"secret.cli.codex":{let i=ie(process.env.CODEX_HOME,"~/.codex",t,r);return ne(e,i,["auth.json",".credentials.json"])||wi(e,i,["secrets",".sandbox-secrets"])}case"secret.cli.codex.config":{let i=ie(process.env.CODEX_HOME,"~/.codex",t,r),s=re(e).split("/").at(-1)??"";return ne(e,i,["config.toml"])||s.endsWith(".config.toml")&&ne(e,i,[s])}case"secret.cli.gemini":return ne(e,ye(ie(process.env.GEMINI_CLI_HOME,"~",t,r),".gemini"),["oauth_creds.json","mcp-oauth-tokens.json","a2a-oauth-tokens.json","gemini-credentials.json"]);case"secret.cli.gemini.config":{let i=re(e).split("/"),s=process.env.ProgramData?[ye(ie(process.env.ProgramData,"",t,r),"gemini-cli")]:[];return ne(e,ye(ie(process.env.GEMINI_CLI_HOME,"~",t,r),".gemini"),["settings.json","google_accounts.json"])||i.at(-1)==="settings.json"&&i.at(-2)===".gemini"||(process.env.GEMINI_CLI_SYSTEM_SETTINGS_PATH?.trim()?Ri(e,process.env.GEMINI_CLI_SYSTEM_SETTINGS_PATH,t,r):!1)||["/Library/Application Support/GeminiCli","/etc/gemini-cli",...s].some((a)=>ne(e,Zt(a,t,r),["settings.json"]))}case"secret.cli.copilot-cli":{let i=ie(process.env.COPILOT_HOME,"~/.copilot",t,r);return ne(e,i,["config.json"])||wi(e,i,["mcp-oauth-config","mcp-secrets"])}case"secret.cli.copilot-cli.config":return ne(e,ie(process.env.COPILOT_HOME,"~/.copilot",t,r),["mcp-config.json"]);case"secret.cli.kimi-code":{let i=ie(process.env.KIMI_CODE_HOME,"~/.kimi-code",t,r),s=ie(process.env.KIMI_SHARE_DIR,"~/.kimi",t,r);return ne(e,i,["server.token"])||wi(e,i,["credentials"])||wi(e,s,["credentials","mcp-oauth"])}case"secret.cli.kimi-code.config":{let i=["config.toml","mcp.json"],s=re(e).split("/");return s.at(-1)==="mcp.json"&&s.at(-2)===".kimi-code"||ne(e,ie(process.env.KIMI_CODE_HOME,"~/.kimi-code",t,r),i)||ne(e,ie(process.env.KIMI_SHARE_DIR,"~/.kimi",t,r),[...i,"config.json","config.json.bak"])}case"secret.cli.opencode":{let i=ye(ie(process.env.XDG_DATA_HOME,"~/.local/share",t,r),"opencode"),s=re(e).split("/").at(-1)??"",a=process.env.OPENCODE_DB?.trim(),c=a&&a!==":memory:"?[a,`${a}-wal`,`${a}-shm`]:[];return ne(e,i,["auth.json","mcp-auth.json"])||/^opencode(-.+)?\.db(-wal|-shm)?$/.test(s)&&ne(e,i,[s])||c.some((l)=>Ri(e,l,t,r))}case"secret.cli.opencode.config":{let i=process.env.OPENCODE_CONFIG_DIR?ie(process.env.OPENCODE_CONFIG_DIR,"~/.config/opencode",t,r):ye(ie(process.env.XDG_CONFIG_HOME,"~/.config",t,r),"opencode"),s=process.env.ProgramData?[ye(ie(process.env.ProgramData,"",t,r),"opencode")]:[],a=["opencode.json","opencode.jsonc"];return a.includes(re(e).split("/").at(-1)??"")||ne(e,i,a)||(process.env.OPENCODE_CONFIG?.trim()?Ri(e,process.env.OPENCODE_CONFIG,t,r):!1)||["/Library/Application Support/opencode","/etc/opencode",...s].some((c)=>ne(e,Zt(c,t,r),a))}case"secret.cli.pi":return ne(e,ie(process.env.PI_CODING_AGENT_DIR,"~/.pi/agent",t,r),["auth.json"]);case"secret.cli.pi.config":return ne(e,ie(process.env.PI_CODING_AGENT_DIR,"~/.pi/agent",t,r),["models.json"]);case"secret.cli.amp":{let i=Zt("~",t,r);return[ye(ie(process.env.XDG_DATA_HOME,"~/.local/share",t,r),"amp"),ye(i,".local","share","amp")].some((a)=>ne(e,a,["secrets.json"]))||wi(e,ye(i,".amp"),["oauth"])}case"secret.cli.amp.config":{let i=["settings.json","settings.jsonc"],s=[ye(ie(process.env.XDG_CONFIG_HOME,"~/.config",t,r),"amp"),ye(Zt("~",t,r),".config","amp")],a=re(e).split("/");return s.some((c)=>ne(e,c,i))||a.at(-2)===".amp"&&i.includes(a.at(-1)??"")||(process.env.AMP_SETTINGS_FILE?.trim()?Ri(e,process.env.AMP_SETTINGS_FILE,t,r):!1)}case"secret.cli.cursor":{let i=ye(ie(process.env.XDG_CONFIG_HOME,"~/.config",t,r),"cursor"),s=ye(ie(process.env.CURSOR_DATA_DIR,"~/.cursor",t,r),"projects");return ne(e,Zt("~/.cursor",t,r),["auth.json"])||ne(e,i,["auth.json"])||re(e).split("/").at(-1)==="mcp-auth.json"&&Bn(re(e),re(s))}case"secret.cli.cursor.config":{let i=re(e).split("/");return i.at(-1)==="mcp.json"&&i.at(-2)===".cursor"}default:return!1}})?.id??null}function ie(e,t,n,r){return Zt(e?.trim()?e:t,n,r)}function ne(e,t,n){return n.some((r)=>cw(e,ye(t,r)))}function wi(e,t,n){return n.some((r)=>Bn(re(e),re(ye(t,r))))}function Ri(e,t,n,r){return cw(e,Zt(t,n,r))}function cw(e,t){return re(e)===re(t)}function ye(e,...t){return ct([e,...t].filter(Boolean).join("/"))}function tM(e,t,n,r,o){if(n.length===0)return!1;let i=re(Pi(e,t,o));return n.some((s)=>Bn(i,re(Pi(s,r,o))))}function nM(e,t,n,r,o){if(n.length===0)return!1;let i=re(Pi(e,t,o));if(!i)return!1;let s=process.env.HOME??_h(),a=s?ct(Y(s,Be,o)):"",c=re(a),l=process.env.CC_SAFETY_NET_HOME,u=re(l?ct(Y(yl(l),Be,o)):a&&ct(Y(`${a}/.cc-safety-net`,Be,o)));if(u&&Bn(i,u))return!1;return n.some((d)=>{let f=re(Pi(d,r,o));if(!f)return!1;if(c&&(c===f||c.startsWith(f.endsWith("/")?f:`${f}/`)))return!1;return Bn(i,f)})}function rM(e){let t=e.split("/");return t.some((n)=>J0.has(n))||X0.some(([n,r])=>t.some((o,i)=>o===n&&t[i+1]===r))}function oM(e,t){let n=e.lastIndexOf("."),r=n>0&&n<e.length-1?e.slice(n+1):"";if(r==="")return null;for(let o of gh)if(r===o.extension&&Gt(o.id,t))return o.id;for(let o of hh)if(o.pattern.test(r)&&Gt(o.id,t))return o.id;return null}function re(e){return e.toLowerCase()}function Gt(e,t){return!t?.disabledRules?.includes(e)}function Zt(e,t,n){let{home:r,normalized:o}=Ch(e,n);if(!o)return"";if(!r)return o;let i=wh(o,r),s=gl(i)?i:ct(yl(t,i)),a=ct(Y(s,Be,n));if(!Bn(a,r)){if(gl(i))return a;return a===s?o:a}let c=a.slice(r.length);return c?`~${c}`:"~"}function qC(e,t){return e===t||e.startsWith(`${t}/`)}function iM(e,t,n){let{home:r,normalized:o}=Ch(e,n);if(!o||!r)return"";let i=wh(o,r),s=j$.normalize(gl(i)?i:ct(yl(t,i))),a=ct(process.env.HOME??_h()),c=(d)=>process.platform==="win32"?d.toLowerCase():d,l=[r,a].find((d)=>d!==""&&Bn(c(s),c(d)));if(l===void 0)return"";let u=s.slice(l.length);return u?`~${u}`:"~"}function Pi(e,t,n){let{home:r,normalized:o}=Ch(e,n);if(!o)return"";let i=r?wh(o,r):o;return ct(Y(gl(i)?i:yl(t,i),Be,n))}function Ch(e,t){let n=process.env.HOME??_h(),r=n?ct(Y(n,Be,t)):"",o=ct(sM(gt(e)));return{home:r,normalized:o}}function sM(e){if(!e.trim().toLowerCase().startsWith("file:"))return e;try{return V$(e)}catch{return e}}function wh(e,t){if(e==="~")return t;if(e.startsWith("~/"))return ye(t,e.slice(2));return e}function aM(e){if(process.platform==="win32")return!0;return H$.parse(e).root.length>1}function ct(e){let t=e.trim(),n=(aM(t)?t.replace(/\\/g,"/"):t).replace(/\/{2,}/g,"/").replace(/^\.\//,"");if(n==="/")return n;return n.replace(/\/+$/g,"")}function Bn(e,t){return e===t||e.startsWith(t.endsWith("/")?t:`${t}/`)}function Un(e){return e.split(/[\\/]/).pop()?.replace(/\.exe$/i,"")??e}import{dirname as bl}from"path";var lw="Rulebook exceeds CC Safety Net's safe validation limits.",uw="Additional rulebook validation errors were omitted.",lt=Object.freeze({maxAllowedCommands:1024,maxRules:1024,maxTests:2048,maxBlockArgsPerRule:1024,maxTotalBlockArgs:16384,maxStringCodeUnits:1048576,maxAggregateStringCodeUnits:4194304,maxFixtureCommandCodeUnits:131072,maxValidationErrors:64});function dw(e){if(Rh(e.allowed_commands,lt.maxAllowedCommands)||Rh(e.rules,lt.maxRules)||Rh(e.tests,lt.maxTests))return!1;let{maxAggregateStringCodeUnits:t,maxTotalBlockArgs:n}=lt,r=(o,i=!1)=>{if(typeof o!=="string")return!0;if(o.length>lt.maxStringCodeUnits||i&&o.length>lt.maxFixtureCommandCodeUnits||o.length>t)return!1;return t-=o.length,!0};if(!r(e.name)||!r(e.version)||!r(e.description)||!r(e.author)||!r(e.migrated_from))return!1;if(Array.isArray(e.allowed_commands)){for(let o of e.allowed_commands)if(!r(o))return!1}if(Array.isArray(e.rules))for(let o of e.rules){if(!o||typeof o!=="object")continue;let i=o;if(!r(i.name)||!r(i.command)||!r(i.subcommand)||!r(i.reason)||!r(i.intent))return!1;if(!Array.isArray(i.block_args))continue;if(i.block_args.length>lt.maxBlockArgsPerRule||i.block_args.length>n)return!1;n-=i.block_args.length;for(let s of i.block_args)if(!r(s))return!1}if(Array.isArray(e.tests))for(let o of e.tests){if(!o||typeof o!=="object")continue;let i=o;if(!r(i.command,!0)||!r(i.expect)||!r(i.rule))return!1}return!0}function Rh(e,t){return Array.isArray(e)&&e.length>t}function cM(e){if(!lM(e))return{errors:["Rulebook must be an object"],ruleNames:new Set};if(!dw(e))return{errors:[lw],ruleNames:new Set};let t=_C().safeParse(e),n=[...e.rulebook_version===1?[]:["rulebook_version must be 1"],...t.success?[]:Kr(t.error.issues,": ",": ")];return{errors:n.length>lt.maxValidationErrors?[...n.slice(0,lt.maxValidationErrors),uw]:n,ruleNames:new Set(yh(e).map((r)=>r.toLowerCase()))}}function Eh(e){let t=cM(e);if(t.errors.length>0)throw Error(t.errors.join("; "));return e}function lM(e){return!!e&&typeof e==="object"&&!Array.isArray(e)}function Ph(e){if($i(e.spec))return mM(e);return dM(e)}function dM(e){if(!ut.test(e.spec))return`Local rulebook sources must be bare names matching ${ut}: ${e.spec}`;if(e.kind!=="local-directory")return`lock entry for ${e.spec} must use local-directory kind`;if(e.path===e.spec&&e.name===e.spec)return null;return`lock entry for ${e.spec} does not match local source identity`}function mM(e){let t=Xr(e.spec);if(t)return t;let n=Di(e.spec);if(e.kind!=="github")return`lock entry for ${e.spec} must use github kind`;if(e.owner===n.owner&&e.repo===n.repo&&e.ref===n.ref&&e.path===n.path&&e.name===n.name)return null;return`lock entry for ${e.spec} does not match GitHub source identity`}function mw(e){let t=typeof e==="string"?e:e.path;try{let n=fn(typeof e==="string"?Ni(e):e);if(n===null)return{lock:null,errors:[]};let r=JSON.parse(n);if(!r||typeof r!=="object")return{lock:null,errors:[`malformed lockfile ${t}: must be an object`]};let o=r;if(o.version!==1||!Array.isArray(o.rulebooks))return{lock:null,errors:[`malformed lockfile ${t}`]};let i=CC().safeParse(o),s=o.rulebooks.flatMap((c,l)=>{let u=i.success?[]:i.error.issues.filter((f)=>f.path[1]===l);if(u.length>0)return Kr(u).map((f)=>`${t}: ${f}`);let d=Ph(c);return d?[`${t}: rulebooks[${l}]: ${d}`]:[]});if(!i.success||s.length>0)return{lock:null,errors:[`malformed lockfile ${t}`,...s]};return{lock:{version:1,rulebooks:i.data.rulebooks.map((c)=>{if(c.kind==="local-directory")return{spec:c.spec,kind:c.kind,path:c.path,name:c.name,version:c.version,digest:c.digest};let l={spec:c.spec,kind:c.kind,owner:c.owner,repo:c.repo,ref:c.ref,commit:c.commit,path:c.path,name:c.name,version:c.version,digest:c.digest};return typeof c.display_ref==="string"&&c.display_ref!==""?{...l,display_ref:c.display_ref}:l})},errors:[]}}catch(n){if(n instanceof ae)return{lock:null,errors:[n.message]};return{lock:null,errors:["malformed lockfile"]}}}import{createHash as fM}from"crypto";var Yj=Object.freeze({timeoutMs:15000,metadataBytes:524288,commitBytes:262144,treeBytes:16777216,rawBytes:4194304});function fw(e){return`sha256:${fM("sha256").update(e).digest("hex")}`}function bw(e={}){let t=jh(e),n=!1;try{n=Mh(t.userConfigTarget,t.projectConfigTarget)}catch(f){if(f instanceof ae)return yM(t,f.message);throw f}let r=bh(t.userConfigTarget),o=n?{config:null,errors:[]}:bh(t.projectConfigTarget),i=yw(t.userConfigPath,r.errors),s=yw(t.projectConfigPath,o.errors),a=new Set,c=r.config?pw(r.config,t.userLockPath,bl(t.userConfigPath),e,"user",t.userScope,a):ki(),l=o.config?pw(o.config,t.projectLockPath,bl(t.projectConfigPath),e,"project",t.projectScope,a):ki(),u=r.config?.overrides??{},d=o.config?.overrides??{};return{rules:[...gw(c.rules,u),...gw(l.rules,d)],transparent_wrappers:gM(r.config,o.config),rulebooks:[...c.rulebooks,...l.rulebooks],errors:[...i,...s,...c.errors,...l.errors],warnings:[...c.warnings,...l.warnings,...c.canValidateOverrides?hw(u,c.knownRuleIds,t.userConfigPath):[],...c.canValidateOverrides?hM(d,c.knownRuleIds,t.projectConfigPath):[],...l.canValidateOverrides?hw(d,l.knownRuleIds,t.projectConfigPath):[]],userConfig:r.config??void 0,projectConfig:o.config??void 0,...t}}function pw(e,t,n,r,o,i=Bt(bl(bl(n)),o==="user"?"user policy":"project policy"),s=new Set){let a;try{a=At(i,t)}catch(b){if(b instanceof ae)return{...ki(),errors:[b.message],canValidateOverrides:!1};throw b}let c=mw(a);if(c.errors.length>0)return{...ki(),errors:c.errors,canValidateOverrides:!1};let l=c.lock;if(!l&&e.rules.length>0)return{...ki(),errors:[`missing lockfile ${t}; run ${Ht}`],canValidateOverrides:!1};let u=l?.rulebooks??[],d=new Map(u.map((b)=>[b.spec,b])),f=[],m=[],p=e.rules.flatMap((b)=>{let y=d.get(b);if(!y)return f.push(`missing lock entry for ${b}; run ${Ht}`),[];let R=pM(y,n,r,i);if(R.errors.length>0||!R.rulebook)return f.push(...R.errors),[];let w=R.rulebook;if(s.has(w.name))return m.push(`duplicate active rulebook name "${w.name}" for ${b}; keeping the first and ignoring this one, so its rules are not active; rename one of them, then run ${Ht}`),[];return s.add(w.name),[{rules:w.rules.map((E)=>({...E,name:`${w.name}/${E.name}`})),rulebook:{source:o,spec:y.spec,name:w.name,version:w.version,rules:w.rules.map((E)=>`${w.name}/${E.name}`)}}]}),h=p.flatMap((b)=>b.rules);return{rules:h,rulebooks:p.map((b)=>b.rulebook),entries:u,knownRuleIds:new Set(h.map((b)=>b.name)),errors:f,warnings:m,canValidateOverrides:f.length===0}}function pM(e,t,n,r){let o=Pl(e,kl(t,n)),i;try{i=fn(At(r,o))}catch(a){if(a instanceof ae)return{rulebook:null,errors:[a.message]};throw a}if(i===null)return{rulebook:null,errors:[`missing cache entry for ${e.spec}; run ${Ht}`]};if(fw(i)!==e.digest)return{rulebook:null,errors:[`cache digest mismatch for ${e.spec}; run ${Ht}`]};let s;try{s=JSON.parse(i)}catch{return{rulebook:null,errors:[`invalid cached rulebook for ${e.spec}`]}}try{Eh(s)}catch(a){return{rulebook:null,errors:[`invalid cached rulebook for ${e.spec}: ${a instanceof Error?a.message:"invalid rulebook"}`]}}return{rulebook:s,errors:[]}}function gM(e,t){return[...new Set([...e?.transparent_wrappers??[],...t?.transparent_wrappers??[]])]}function gw(e,t){return e.flatMap((n)=>{let r=t[n.name];if(r==="off")return[];if(r&&typeof r==="object")return[{...n,intent:r.intent??n.intent,reason:r.reason}];return[n]})}function hw(e,t,n){return Object.keys(e).filter((r)=>!t.has(r)).map((r)=>`unknown override key "${r}" in ${n}; only that override is ignored and other overrides and rules keep their configured state; correct or remove it in that file`)}function hM(e,t,n){return Object.keys(e).filter((r)=>t.has(r)).map((r)=>`project override cannot target user-scoped rule "${r}" in ${n}; only that override is ignored and the rule keeps its user-configured state; remove it from that file`)}function yw(e,t){return t.map((n)=>n.startsWith("Unable to access ")?n:`${e}: ${n}`)}function yM(e,t){return{rules:[],transparent_wrappers:[],rulebooks:[],errors:[t],warnings:[],userConfigPath:e.userConfigPath,projectConfigPath:e.projectConfigPath,userLockPath:e.userLockPath,projectLockPath:e.projectLockPath}}function ki(){return{rules:[],rulebooks:[],entries:[],knownRuleIds:new Set,errors:[],warnings:[],canValidateOverrides:!0}}function vw(e={}){let t=bw(e),n=IC(e),r={rules:t.rules,transparentWrappers:t.transparent_wrappers,safety:n.safety,worktreeMode:n.worktreeMode,destructiveCommandProtectionEnabled:n.destructiveCommandProtectionEnabled,destructiveCommandRuleOverrides:n.destructiveCommandRuleOverrides,destructiveCommandAllowPaths:n.destructiveCommandAllowPaths,secretProtection:{enabled:n.secretProtection.enabled??!0,disabledRules:n.secretProtection.disabledRules??[],denyPaths:n.secretProtection.denyPaths,allowPaths:n.secretProtection.allowPaths??[]}},o={...t.userConfig?.overrides??{},...t.projectConfig?.overrides??{}},i=Object.freeze(Object.fromEntries(r.rules.map((s)=>{let a=t.rulebooks.find((l)=>l.rules.includes(s.name)),c=o[s.name];return[s.name,Object.freeze({id:s.name,...a?{rulebook:Object.freeze({name:a.name,version:a.version}),...xM(a.spec)?{source:a.spec}:{}}:{},...c&&typeof c==="object"?{override:Object.freeze({type:"reason",reason:c.reason})}:{}})]})));return _M(r,bM(t,n),i)}function bM(e,t){let n=SM(t);if(e.errors.length===0&&e.warnings.length===0&&!n)return;return{diagnostics:[...e.errors,...e.warnings,...t.errors],reason:CM(e.errors.length>0?vM(e.errors):void 0,e.warnings.length>0?kh(e.warnings.join("; ")):void 0,n)}}function vM(e){return`${kh(e.join("; "))} Those rule sources are not active; every other rule and all built-in protections still apply`}function SM(e){if(e.errors.length===0)return;let t=e.fallback==="salvaged"?"the salvaged policy with protective defaults":"built-in protective defaults";return`invalid policy config: ${e.errors.join("; ")}. Enforcing ${t}; the invalid values are not active. Fix the policy file manually`}function xM(e){return/^(?:[A-Za-z0-9_.-]+$|https:\/\/github\.com\/|github:|gh:|[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+(?:#|$))/.test(e)}function _M(e,t,n=Object.freeze({})){let r=Sw(structuredClone(e));if(!t)return Object.freeze({state:"ready",policy:r,diagnostics:Object.freeze([]),ruleMetadata:n});return Object.freeze({state:"degraded",policy:r,diagnostics:Object.freeze([...t.diagnostics]),reason:t.reason,ruleMetadata:n})}function Sw(e){if(typeof e!=="object"||e===null)return e;for(let t of Object.values(e))Sw(t);return Object.freeze(e)}function CM(...e){return kh(e.filter((t)=>!!t).join("; "))}function kh(e){return/[.!?]$/.test(e)?e:`${e}.`}class dn extends Error{stage;evaluation;name="GuardEvaluationError";constructor(e,t,n){super(`CC Safety Net ${e} dependency failed`,{cause:n});this.stage=e;this.evaluation=t}}var wM={findPolicyMutation:MC,findGitMetadataMutation:av,resolveGitMetadata:wu,loadPolicySnapshot:vw,findSensitiveTarget:QC,analyzeCommand:gx,getModes:wd};function xw(e,t={}){let n={...wM,...t.dependencies},r=PM(e),o=Ai(e)?e.command:r,i=jn("policy-protection",o,()=>zs(e,t.factParserDependencies)),s=Ne(i,"declared-command");if(Ai(e)&&e.command?.trim()&&s?.program.status==="limited")return{stage:"command-analysis",decision:{kind:"deny",reason:It,intent:"stop_and_explain",evidence:[{kind:"command",command:e.command,segment:e.command}]}};if(Ne(i,"input-candidate")?.program.status==="limited")return{stage:"command-validation",decision:{kind:"deny",reason:ay,intent:"stop_and_explain",evidence:[]}};let a=jn("policy-protection",o,()=>n.resolveGitMetadata([e.context.executionCwd,e.context.configCwd])),c=jn("policy-protection",o,()=>n.findPolicyMutation(i));if(c){let b=o??c.target;return{stage:"policy-protection",decision:{kind:"deny",reason:$C,intent:"hard_stop",evidence:[{kind:"command",command:b,segment:c.target}]}}}let l=jn("policy-protection",o,()=>n.findGitMetadataMutation(i,a));if(l){let b=o??l.target;return{stage:"policy-protection",decision:{kind:"deny",reason:He,intent:"hard_stop",evidence:[{kind:"command",command:b,segment:l.target}]}}}let u=jn("config-load",o,()=>n.loadPolicySnapshot({...t.policyOptions,cwd:e.context.configCwd})),d=u.policy,f=n.getModes(d),m={level:f.effectiveLevel,...RM(u)},p=d.secretProtection.enabled===!1?null:jn("secret-protection",o,()=>n.findSensitiveTarget(i,d.secretProtection,{strict:Ai(e)?f.strict:void 0}));if(p){let b=o??p.target;return{stage:"secret-protection",...m,decision:{kind:"deny",reason:KC,intent:"hard_stop",ruleId:p.ruleId,evidence:[{kind:"command",command:b,segment:p.target}]}}}if(!Ai(e))return{stage:"non-command",...m,decision:{kind:"allow"}};if(!e.command||e.command.trim()==="")return{...Ah("command-validation",o),...m};let h=jn("command-analysis",o,()=>n.analyzeCommand(e.command,{cwd:e.context.executionCwd,shell:e.route.shell,policySnapshot:u,environment:Ot(),protectedGitMetadata:a,effectiveCapabilities:f.capabilities,strict:f.strict,paranoidRm:f.paranoidRm,paranoidInterpreters:f.paranoidInterpreters,worktreeMode:f.worktreeMode},EM(i),i.store));if(h)return{stage:"command-analysis",...m,decision:h};return{stage:"command-analysis",...m,decision:{kind:"allow"}}}function RM(e){if(e.state==="ready")return{};return{configFallback:{reason:e.reason}}}function EM(e){return Ne(e,"declared-command")?.program}function PM(e){try{return vo(e.input)}catch(t){let n=Ai(e)?e.command:void 0;throw new dn("policy-protection",Ah("policy-protection",t instanceof Mt?void 0:n,t),t)}}function jn(e,t,n){try{return n()}catch(r){throw new dn(e,Ah(e,r instanceof Mt?void 0:t,r),r)}}function Ah(e,t,n){let r=n instanceof be||n instanceof pt;return{stage:e,decision:{kind:"deny",reason:r?cy:Wi,intent:"stop_and_explain",evidence:t?[{kind:"command",command:t,segment:t}]:[]}}}function Ai(e){return e.route.kind==="command"}function Cw(e,t){try{let n=xw(e,t.guard);return _w(e,n,t),n}catch(n){if(!(n instanceof dn))throw n;throw _w(e,n.evaluation,t,!(n.cause instanceof Mt),{stage:n.stage,errorCode:kM(n.cause)}),n}}function _w(e,t,n,r=!0,o){ny(ty(e,t,n.guard?.auditAllowed??!1,r,o),n.audit.getSessionId,{agent:n.audit.agent,shape:n.audit.shape,homeDir:n.audit.homeDir})}function kM(e){if(e instanceof be)return"path-canonicalization-limit";if(e instanceof Mt)return"tool-input-limit";if(e instanceof pt)return"structural-shell-syntax-limit";return"unexpected-error"}var Rw=TM();function TM(e={}){return(t,n)=>IM(t,n,e)}function IM(e,t,n){let r=OM(e,t),o=()=>DM(e);if("malformed"in r)return ry(r.denial,o,{agent:"amp",toolName:r.denial.toolName,cwd:r.cwd}),Ew(r.denial);try{let i=Cw(r,{guard:{auditAllowed:_d(),dependencies:n.guardDependencies},audit:{agent:"amp",getSessionId:o}});return ww(i,!0)}catch(i){if(!(i instanceof dn))throw i;if(rn(me.debug))console.error(`CC Safety Net debug: amp tool.call analysis failed: ${py(i.cause)}`);return ww(i.evaluation,r.route.kind==="command")}}function OM(e,t){if(!e||typeof e!=="object")return Hn(null);let n=e;if(typeof n.tool!=="string"||n.tool.trim()==="")return Hn(null);if(!n.input||typeof n.input!=="object")return Hn(null,n.tool);let r=zM(t);if(!r)return Hn(null,n.tool);let o=NM(t,e);if(!o.ok)return Hn(r,n.tool);if(!o.command)return Lo(n.tool,n.input,{kind:Su(n.tool)},{configCwd:r,executionCwd:r},null);if(typeof o.command.command!=="string"||o.command.command.trim()==="")return Hn(r,n.tool);let i=typeof o.command.dir==="string"?iy(o.command.dir,r):r;if(!i)return Hn(r,n.tool,o.command.command,o.command.dir);return Lo(n.tool,n.input,{kind:"command",shell:"posix"},{configCwd:r,executionCwd:i},o.command.command)}function zM(e){let t=e.system.workspaceRoot;if(!t)return;try{let n=e.helpers.filePathFromURI(t);if(typeof n!=="string"||n.trim()==="")return;return Dl(".",[n])}catch{return}}function NM(e,t){try{return{ok:!0,command:e.helpers.shellCommandFromToolCall(t)}}catch{return{ok:!1}}}function DM(e){if(!e||typeof e!=="object")return;let t=e.thread?.id;return typeof t==="string"&&t.trim()!==""?t:void 0}function Hn(e,t,n,r){return{malformed:!0,denial:my({command:n,segment:r,toolName:t}),cwd:e}}function ww(e,t){let n=dy(e,{includeEvidence:t});return n?Ew(n):{action:"allow"}}function Ew(e){return{action:"reject-and-continue",message:fy(e)}}function $M(e){e.on("tool.call",(t)=>Rw(t,e))}export{$M as default};
+`||s==="\r"))return null;if(s!==r)continue;n=i,o=!0;break}if(!o)return null}return t.join("")}function I0(e,t){for(let n=t-1;n>=0;n--){let r=e[n];if(!r||/\s/.test(r))continue;return/[\w$\])]/.test(r)}return!1}function O0(e){for(let t of e.matchAll(/[A-Za-z_$][A-Za-z0-9_$]*/g)){let n=t[0],r=t.index;if(t0.has(n.toLowerCase()))return!0;let o=n.replace(/([a-z0-9])([A-Z])/g,"$1 $2").split(/[_$\s]+/).map((i)=>i.toLowerCase());if(!o.some((i)=>n0.has(i)))continue;if(o.length>1)return!0;if(z0(e,r)===".")return!0;if(N0(e,r+n.length)==="(")return!0}return!1}function z0(e,t){for(let n=t-1;n>=0;n--)if(!/\s/.test(e[n]??""))return e[n];return}function N0(e,t){for(let n=t;n<e.length;n++)if(!/\s/.test(e[n]??""))return e[n];return}function D0(e,t,n){return F0(e).flatMap((r)=>{let o=t.getShellSyntax(r);if(o.status==="invalid")return[];return[...Ei(o,t,n),...$0(o)?M0(o):[]]})}function $0(e){let t=e.entries;for(let n=0;n<t.length;n++){let r=t[n];if(r?.kind!=="word"||Un(gt(r.text)).toLowerCase()!=="base64")continue;for(let o=n+1;o<t.length;o++){let i=t[o];if(i?.kind==="operator")break;if(i?.kind!=="word")continue;let s=gt(i.text);if(s==="--decode"||!s.startsWith("--")&&s.startsWith("-")&&/[dD]/.test(s))return!0}}return!1}function M0(e){return e.entries.flatMap((t)=>t.kind==="word"?[gt(t.text)]:t.kind==="redirection"&&t.target?[gt(t.target)]:[]).flatMap(iw)}function iw(e){let t=W0(e);if(t===null)return[];let n=Buffer.from(t,"base64").toString("utf8");if(n===""||L0(n))return[];return Buffer.from(n,"utf8").toString("base64").replace(/=+$/g,"")===t.replace(/=+$/g,"")?[n]:[]}function L0(e){return Array.from(e).some((t)=>{let n=t.charCodeAt(0);return n<32||n===127})}function W0(e){if(e.length<8||!/^[A-Za-z0-9+/_-]+={0,2}$/.test(e))return null;if(/=/.test(e.replace(/=+$/g,"")))return null;let t=e.replace(/=+$/g,"");if(t.length%4===1)return null;return`${t.replace(/-/g,"+").replace(/_/g,"/")}${"=".repeat((4-t.length%4)%4)}`}function F0(e){let t=[],n={inSingle:!1,inDouble:!1,escaped:!1};for(let r=0;r<e.length;r++){let o=e[r];if(!o)break;if(go(o,n))continue;if(sw(e,r,n)){let i=G0(e,r+1);if(i!==null)t.push(i.body),r=i.endIndex;continue}if(!n.inSingle&&o==="`"){let i=Z0(e,r);if(i!==null)t.push(i.body),r=i.endIndex}}return t}function G0(e,t){let n={inSingle:!1,inDouble:!1,escaped:!1},r=1;for(let o=t+1;o<e.length;o++){let i=e[o];if(!i)break;if(go(i,n))continue;if(sw(e,o,n)){r++,o++;continue}if(!n.inSingle&&!n.inDouble&&i===")"){if(r--,r===0)return{body:e.slice(t+1,o),endIndex:o}}}return null}function Z0(e,t){let n=!1;for(let r=t+1;r<e.length;r++){let o=e[r];if(!o)break;if(n){n=!1;continue}if(o==="\\"){n=!0;continue}if(o==="`")return{body:e.slice(t+1,r),endIndex:r}}return null}function sw(e,t,n){return!n.inSingle&&e[t]==="$"&&e[t+1]==="("&&e[t+2]!=="("}function B0(e){let t=[],n=[],r=!1,o=!1,i=!1;for(let c=0;c<e.length;c++){let l=e[c];if(l===void 0)break;if(!i&&l==="--"){i=!0;continue}if(i){n.push(l);continue}let u=/^--([^=]+)(?:=(.*))?$/.exec(l);if(u!==null){let d=u[1]??"",f=u[2];if(d===c0)o=!0;if(u0.has(d))r=!0;if(f!==void 0){if(d===GC)t.push(f);continue}if(m0.has(d)){let m=e[c+1];if(d===GC&&m!==void 0)t.push(m);c++}continue}if(l.startsWith("-")&&l.length>1){let d=l.slice(1),f="",m="";for(let p=0;p<d.length;p++){let h=d[p]??"";if(l0.has(h))r=!0;if(d0.has(h)){f=h,m=d.slice(p+1);break}}if(f!=="")if(m.length>0){if(f===FC)t.push(m)}else{let p=e[c+1];if(f===FC&&p!==void 0)t.push(p);c++}continue}n.push(l)}let a=!r&&!o?n.slice(1):n;return[...t,...a]}function Jr(e){let t=e.findIndex((n)=>!aw(n)&&!/^[A-Za-z_][A-Za-z0-9_]*=.*/.test(n));return t===-1?[]:[...e.slice(t)]}function aw(e){return e==="env"||e==="command"||e==="builtin"||e==="sudo"}var U0=new Set(["id_rsa.pub","id_ed25519.pub","id_ecdsa.pub"]),j0=".env.",H0=new Set([".env.example",".env.sample",".env.template",".env.defaults"]),V0=[".env.example.",".env.sample."];function q0(e){let t;try{t=new URL(e.trim())}catch{return!1}return t.protocol!=="file:"&&t.host!==""}function K0(e){return e.length>0&&!/\s/.test(e)}function Y0(e,t,n){try{let r=Pi(e,t,n);return r!==""&&Be.entryKind(r)!=="missing"}catch(r){if(r instanceof be)throw r;return!1}}var J0=new Set(["node_modules","__pycache__"]),X0=[["vendor","bundle"],["vendor","cache"]];function Q0(e,t,n,r){if(q0(e))return null;let o=Zt(e,t,r);if(!o)return null;let i=re(o.split("/").pop()??""),s=re(o),a=()=>K0(i)||Y0(e,t,r);if(H0.has(i)||V0.some((d)=>i.startsWith(d)))return null;let c=re(iM(e,t,r));for(let d of mh){let f=`~/${d.suffixParts.join("/")}`;if((qC(s,f)||qC(c,f))&&Gt(d.id,n))return d.id}let l=eM(o,t,n,r);if(l)return l;if(U0.has(i))return null;for(let d of dh)if(i===d.basename&&Gt(d.id,n))return d.id;if(i.startsWith(j0)&&Gt(dl.id,n)&&a())return dl.id;for(let d of fh)if(i.length>d.prefix.length&&i.startsWith(d.prefix)){let f=i.slice(d.prefix.length)[0];if((f==="-"||f==="_")&&Gt(d.id,n)&&a())return d.id}for(let d of ph)if(i.length>d.prefix.length&&i.startsWith(d.prefix)){if(i.slice(d.prefix.length)===d.suffix&&Gt(d.id,n))return d.id}if(rM(s))return null;if(!i.includes(".")&&xi.pattern.test(i)&&Gt(xi.id,n))return xi.id;let u=oM(i,n);if(u)return u;return null}function eM(e,t,n,r){return ml.find((o)=>{if(!Gt(o.id,n))return!1;switch(o.id){case"secret.cli.claude-code":return ne(e,ie(process.env.CLAUDE_CONFIG_DIR,"~/.claude",t,r),[".credentials.json"]);case"secret.cli.claude-code.config":{let i=re(e).split("/");return ne(e,ie(process.env.CLAUDE_CONFIG_DIR,"~/.claude",t,r),["settings.json","settings.local.json"])||Ri(e,"~/.claude.json",t,r)||i.at(-1)==="settings.local.json"&&i.at(-2)===".claude"||i.at(-1)===".mcp.json"}case"secret.cli.antigravity":return ne(e,Zt("~/.gemini/config",t,r),["hooks.json","mcp_config.json"]);case"secret.cli.codex":{let i=ie(process.env.CODEX_HOME,"~/.codex",t,r);return ne(e,i,["auth.json",".credentials.json"])||wi(e,i,["secrets",".sandbox-secrets"])}case"secret.cli.codex.config":{let i=ie(process.env.CODEX_HOME,"~/.codex",t,r),s=re(e).split("/").at(-1)??"";return ne(e,i,["config.toml"])||s.endsWith(".config.toml")&&ne(e,i,[s])}case"secret.cli.gemini":return ne(e,ye(ie(process.env.GEMINI_CLI_HOME,"~",t,r),".gemini"),["oauth_creds.json","mcp-oauth-tokens.json","a2a-oauth-tokens.json","gemini-credentials.json"]);case"secret.cli.gemini.config":{let i=re(e).split("/"),s=process.env.ProgramData?[ye(ie(process.env.ProgramData,"",t,r),"gemini-cli")]:[];return ne(e,ye(ie(process.env.GEMINI_CLI_HOME,"~",t,r),".gemini"),["settings.json","google_accounts.json"])||i.at(-1)==="settings.json"&&i.at(-2)===".gemini"||(process.env.GEMINI_CLI_SYSTEM_SETTINGS_PATH?.trim()?Ri(e,process.env.GEMINI_CLI_SYSTEM_SETTINGS_PATH,t,r):!1)||["/Library/Application Support/GeminiCli","/etc/gemini-cli",...s].some((a)=>ne(e,Zt(a,t,r),["settings.json"]))}case"secret.cli.copilot-cli":{let i=ie(process.env.COPILOT_HOME,"~/.copilot",t,r);return ne(e,i,["config.json"])||wi(e,i,["mcp-oauth-config","mcp-secrets"])}case"secret.cli.copilot-cli.config":return ne(e,ie(process.env.COPILOT_HOME,"~/.copilot",t,r),["mcp-config.json"]);case"secret.cli.kimi-code":{let i=ie(process.env.KIMI_CODE_HOME,"~/.kimi-code",t,r),s=ie(process.env.KIMI_SHARE_DIR,"~/.kimi",t,r);return ne(e,i,["server.token"])||wi(e,i,["credentials"])||wi(e,s,["credentials","mcp-oauth"])}case"secret.cli.kimi-code.config":{let i=["config.toml","mcp.json"],s=re(e).split("/");return s.at(-1)==="mcp.json"&&s.at(-2)===".kimi-code"||ne(e,ie(process.env.KIMI_CODE_HOME,"~/.kimi-code",t,r),i)||ne(e,ie(process.env.KIMI_SHARE_DIR,"~/.kimi",t,r),[...i,"config.json","config.json.bak"])}case"secret.cli.opencode":{let i=ye(ie(process.env.XDG_DATA_HOME,"~/.local/share",t,r),"opencode"),s=re(e).split("/").at(-1)??"",a=process.env.OPENCODE_DB?.trim(),c=a&&a!==":memory:"?[a,`${a}-wal`,`${a}-shm`]:[];return ne(e,i,["auth.json","mcp-auth.json"])||/^opencode(-.+)?\.db(-wal|-shm)?$/.test(s)&&ne(e,i,[s])||c.some((l)=>Ri(e,l,t,r))}case"secret.cli.opencode.config":{let i=process.env.OPENCODE_CONFIG_DIR?ie(process.env.OPENCODE_CONFIG_DIR,"~/.config/opencode",t,r):ye(ie(process.env.XDG_CONFIG_HOME,"~/.config",t,r),"opencode"),s=process.env.ProgramData?[ye(ie(process.env.ProgramData,"",t,r),"opencode")]:[],a=["opencode.json","opencode.jsonc"];return a.includes(re(e).split("/").at(-1)??"")||ne(e,i,a)||(process.env.OPENCODE_CONFIG?.trim()?Ri(e,process.env.OPENCODE_CONFIG,t,r):!1)||["/Library/Application Support/opencode","/etc/opencode",...s].some((c)=>ne(e,Zt(c,t,r),a))}case"secret.cli.pi":return ne(e,ie(process.env.PI_CODING_AGENT_DIR,"~/.pi/agent",t,r),["auth.json"]);case"secret.cli.pi.config":return ne(e,ie(process.env.PI_CODING_AGENT_DIR,"~/.pi/agent",t,r),["models.json"]);case"secret.cli.amp":{let i=Zt("~",t,r);return[ye(ie(process.env.XDG_DATA_HOME,"~/.local/share",t,r),"amp"),ye(i,".local","share","amp")].some((a)=>ne(e,a,["secrets.json"]))||wi(e,ye(i,".amp"),["oauth"])}case"secret.cli.amp.config":{let i=["settings.json","settings.jsonc"],s=[ye(ie(process.env.XDG_CONFIG_HOME,"~/.config",t,r),"amp"),ye(Zt("~",t,r),".config","amp")],a=re(e).split("/");return s.some((c)=>ne(e,c,i))||a.at(-2)===".amp"&&i.includes(a.at(-1)??"")||(process.env.AMP_SETTINGS_FILE?.trim()?Ri(e,process.env.AMP_SETTINGS_FILE,t,r):!1)}case"secret.cli.cursor":{let i=ye(ie(process.env.XDG_CONFIG_HOME,"~/.config",t,r),"cursor"),s=ye(ie(process.env.CURSOR_DATA_DIR,"~/.cursor",t,r),"projects");return ne(e,Zt("~/.cursor",t,r),["auth.json"])||ne(e,i,["auth.json"])||re(e).split("/").at(-1)==="mcp-auth.json"&&Bn(re(e),re(s))}case"secret.cli.cursor.config":{let i=re(e).split("/");return i.at(-1)==="mcp.json"&&i.at(-2)===".cursor"}default:return!1}})?.id??null}function ie(e,t,n,r){return Zt(e?.trim()?e:t,n,r)}function ne(e,t,n){return n.some((r)=>cw(e,ye(t,r)))}function wi(e,t,n){return n.some((r)=>Bn(re(e),re(ye(t,r))))}function Ri(e,t,n,r){return cw(e,Zt(t,n,r))}function cw(e,t){return re(e)===re(t)}function ye(e,...t){return ct([e,...t].filter(Boolean).join("/"))}function tM(e,t,n,r,o){if(n.length===0)return!1;let i=re(Pi(e,t,o));return n.some((s)=>Bn(i,re(Pi(s,r,o))))}function nM(e,t,n,r,o){if(n.length===0)return!1;let i=re(Pi(e,t,o));if(!i)return!1;let s=process.env.HOME??_h(),a=s?ct(Y(s,Be,o)):"",c=re(a),l=process.env.CC_SAFETY_NET_HOME,u=re(l?ct(Y(yl(l),Be,o)):a&&ct(Y(`${a}/.cc-safety-net`,Be,o)));if(u&&Bn(i,u))return!1;return n.some((d)=>{let f=re(Pi(d,r,o));if(!f)return!1;if(c&&(c===f||c.startsWith(f.endsWith("/")?f:`${f}/`)))return!1;return Bn(i,f)})}function rM(e){let t=e.split("/");return t.some((n)=>J0.has(n))||X0.some(([n,r])=>t.some((o,i)=>o===n&&t[i+1]===r))}function oM(e,t){let n=e.lastIndexOf("."),r=n>0&&n<e.length-1?e.slice(n+1):"";if(r==="")return null;for(let o of gh)if(r===o.extension&&Gt(o.id,t))return o.id;for(let o of hh)if(o.pattern.test(r)&&Gt(o.id,t))return o.id;return null}function re(e){return e.toLowerCase()}function Gt(e,t){return!t?.disabledRules?.includes(e)}function Zt(e,t,n){let{home:r,normalized:o}=Ch(e,n);if(!o)return"";if(!r)return o;let i=wh(o,r),s=gl(i)?i:ct(yl(t,i)),a=ct(Y(s,Be,n));if(!Bn(a,r)){if(gl(i))return a;return a===s?o:a}let c=a.slice(r.length);return c?`~${c}`:"~"}function qC(e,t){return e===t||e.startsWith(`${t}/`)}function iM(e,t,n){let{home:r,normalized:o}=Ch(e,n);if(!o||!r)return"";let i=wh(o,r),s=j$.normalize(gl(i)?i:ct(yl(t,i))),a=ct(process.env.HOME??_h()),c=(d)=>process.platform==="win32"?d.toLowerCase():d,l=[r,a].find((d)=>d!==""&&Bn(c(s),c(d)));if(l===void 0)return"";let u=s.slice(l.length);return u?`~${u}`:"~"}function Pi(e,t,n){let{home:r,normalized:o}=Ch(e,n);if(!o)return"";let i=r?wh(o,r):o;return ct(Y(gl(i)?i:yl(t,i),Be,n))}function Ch(e,t){let n=process.env.HOME??_h(),r=n?ct(Y(n,Be,t)):"",o=ct(sM(gt(e)));return{home:r,normalized:o}}function sM(e){if(!e.trim().toLowerCase().startsWith("file:"))return e;try{return V$(e)}catch{return e}}function wh(e,t){if(e==="~")return t;if(e.startsWith("~/"))return ye(t,e.slice(2));return e}function aM(e){if(process.platform==="win32")return!0;return H$.parse(e).root.length>1}function ct(e){let t=e.trim(),n=(aM(t)?t.replace(/\\/g,"/"):t).replace(/\/{2,}/g,"/").replace(/^\.\//,"");if(n==="/")return n;return n.replace(/\/+$/g,"")}function Bn(e,t){return e===t||e.startsWith(t.endsWith("/")?t:`${t}/`)}function Un(e){return e.split(/[\\/]/).pop()?.replace(/\.exe$/i,"")??e}import{dirname as bl}from"path";var lw="Rulebook exceeds CC Safety Net's safe validation limits.",uw="Additional rulebook validation errors were omitted.",lt=Object.freeze({maxAllowedCommands:1024,maxRules:1024,maxTests:2048,maxBlockArgsPerRule:1024,maxTotalBlockArgs:16384,maxStringCodeUnits:1048576,maxAggregateStringCodeUnits:4194304,maxFixtureCommandCodeUnits:131072,maxValidationErrors:64});function dw(e){if(Rh(e.allowed_commands,lt.maxAllowedCommands)||Rh(e.rules,lt.maxRules)||Rh(e.tests,lt.maxTests))return!1;let{maxAggregateStringCodeUnits:t,maxTotalBlockArgs:n}=lt,r=(o,i=!1)=>{if(typeof o!=="string")return!0;if(o.length>lt.maxStringCodeUnits||i&&o.length>lt.maxFixtureCommandCodeUnits||o.length>t)return!1;return t-=o.length,!0};if(!r(e.name)||!r(e.version)||!r(e.description)||!r(e.author)||!r(e.migrated_from))return!1;if(Array.isArray(e.allowed_commands)){for(let o of e.allowed_commands)if(!r(o))return!1}if(Array.isArray(e.rules))for(let o of e.rules){if(!o||typeof o!=="object")continue;let i=o;if(!r(i.name)||!r(i.command)||!r(i.subcommand)||!r(i.reason)||!r(i.intent))return!1;if(!Array.isArray(i.block_args))continue;if(i.block_args.length>lt.maxBlockArgsPerRule||i.block_args.length>n)return!1;n-=i.block_args.length;for(let s of i.block_args)if(!r(s))return!1}if(Array.isArray(e.tests))for(let o of e.tests){if(!o||typeof o!=="object")continue;let i=o;if(!r(i.command,!0)||!r(i.expect)||!r(i.rule))return!1}return!0}function Rh(e,t){return Array.isArray(e)&&e.length>t}function cM(e){if(!lM(e))return{errors:["Rulebook must be an object"],ruleNames:new Set};if(!dw(e))return{errors:[lw],ruleNames:new Set};let t=_C().safeParse(e),n=[...e.rulebook_version===1?[]:["rulebook_version must be 1"],...t.success?[]:Kr(t.error.issues,": ",": ")];return{errors:n.length>lt.maxValidationErrors?[...n.slice(0,lt.maxValidationErrors),uw]:n,ruleNames:new Set(yh(e).map((r)=>r.toLowerCase()))}}function Eh(e){let t=cM(e);if(t.errors.length>0)throw Error(t.errors.join("; "));return e}function lM(e){return!!e&&typeof e==="object"&&!Array.isArray(e)}function Ph(e){if($i(e.spec))return mM(e);return dM(e)}function dM(e){if(!ut.test(e.spec))return`Local rulebook sources must be bare names matching ${ut}: ${e.spec}`;if(e.kind!=="local-directory")return`lock entry for ${e.spec} must use local-directory kind`;if(e.path===e.spec&&e.name===e.spec)return null;return`lock entry for ${e.spec} does not match local source identity`}function mM(e){let t=Xr(e.spec);if(t)return t;let n=Di(e.spec);if(e.kind!=="github")return`lock entry for ${e.spec} must use github kind`;if(e.owner===n.owner&&e.repo===n.repo&&e.ref===n.ref&&e.path===n.path&&e.name===n.name)return null;return`lock entry for ${e.spec} does not match GitHub source identity`}function mw(e){let t=typeof e==="string"?e:e.path;try{let n=fn(typeof e==="string"?Ni(e):e);if(n===null)return{lock:null,errors:[]};let r=JSON.parse(n);if(!r||typeof r!=="object")return{lock:null,errors:[`malformed lockfile ${t}: must be an object`]};let o=r;if(o.version!==1||!Array.isArray(o.rulebooks))return{lock:null,errors:[`malformed lockfile ${t}`]};let i=CC().safeParse(o),s=o.rulebooks.flatMap((c,l)=>{let u=i.success?[]:i.error.issues.filter((f)=>f.path[1]===l);if(u.length>0)return Kr(u).map((f)=>`${t}: ${f}`);let d=Ph(c);return d?[`${t}: rulebooks[${l}]: ${d}`]:[]});if(!i.success||s.length>0)return{lock:null,errors:[`malformed lockfile ${t}`,...s]};return{lock:{version:1,rulebooks:i.data.rulebooks.map((c)=>{if(c.kind==="local-directory")return{spec:c.spec,kind:c.kind,path:c.path,name:c.name,version:c.version,digest:c.digest};let l={spec:c.spec,kind:c.kind,owner:c.owner,repo:c.repo,ref:c.ref,commit:c.commit,path:c.path,name:c.name,version:c.version,digest:c.digest};return typeof c.display_ref==="string"&&c.display_ref!==""?{...l,display_ref:c.display_ref}:l})},errors:[]}}catch(n){if(n instanceof ae)return{lock:null,errors:[n.message]};return{lock:null,errors:["malformed lockfile"]}}}import{createHash as fM}from"crypto";var Xj=Object.freeze({timeoutMs:15000,metadataBytes:524288,commitBytes:262144,treeBytes:16777216,rawBytes:4194304});function fw(e){return`sha256:${fM("sha256").update(e).digest("hex")}`}function bw(e={}){let t=jh(e),n=!1;try{n=Mh(t.userConfigTarget,t.projectConfigTarget)}catch(f){if(f instanceof ae)return yM(t,f.message);throw f}let r=bh(t.userConfigTarget),o=n?{config:null,errors:[]}:bh(t.projectConfigTarget),i=yw(t.userConfigPath,r.errors),s=yw(t.projectConfigPath,o.errors),a=new Set,c=r.config?pw(r.config,t.userLockPath,bl(t.userConfigPath),e,"user",t.userScope,a):ki(),l=o.config?pw(o.config,t.projectLockPath,bl(t.projectConfigPath),e,"project",t.projectScope,a):ki(),u=r.config?.overrides??{},d=o.config?.overrides??{};return{rules:[...gw(c.rules,u),...gw(l.rules,d)],transparent_wrappers:gM(r.config,o.config),rulebooks:[...c.rulebooks,...l.rulebooks],errors:[...i,...s,...c.errors,...l.errors],warnings:[...c.warnings,...l.warnings,...c.canValidateOverrides?hw(u,c.knownRuleIds,t.userConfigPath):[],...c.canValidateOverrides?hM(d,c.knownRuleIds,t.projectConfigPath):[],...l.canValidateOverrides?hw(d,l.knownRuleIds,t.projectConfigPath):[]],userConfig:r.config??void 0,projectConfig:o.config??void 0,...t}}function pw(e,t,n,r,o,i=Bt(bl(bl(n)),o==="user"?"user policy":"project policy"),s=new Set){let a;try{a=At(i,t)}catch(b){if(b instanceof ae)return{...ki(),errors:[b.message],canValidateOverrides:!1};throw b}let c=mw(a);if(c.errors.length>0)return{...ki(),errors:c.errors,canValidateOverrides:!1};let l=c.lock;if(!l&&e.rules.length>0)return{...ki(),errors:[`missing lockfile ${t}; run ${Ht}`],canValidateOverrides:!1};let u=l?.rulebooks??[],d=new Map(u.map((b)=>[b.spec,b])),f=[],m=[],p=e.rules.flatMap((b)=>{let y=d.get(b);if(!y)return f.push(`missing lock entry for ${b}; run ${Ht}`),[];let R=pM(y,n,r,i);if(R.errors.length>0||!R.rulebook)return f.push(...R.errors),[];let w=R.rulebook;if(s.has(w.name))return m.push(`duplicate active rulebook name "${w.name}" for ${b}; keeping the first and ignoring this one, so its rules are not active; rename one of them, then run ${Ht}`),[];return s.add(w.name),[{rules:w.rules.map((E)=>({...E,name:`${w.name}/${E.name}`})),rulebook:{source:o,spec:y.spec,name:w.name,version:w.version,rules:w.rules.map((E)=>`${w.name}/${E.name}`)}}]}),h=p.flatMap((b)=>b.rules);return{rules:h,rulebooks:p.map((b)=>b.rulebook),entries:u,knownRuleIds:new Set(h.map((b)=>b.name)),errors:f,warnings:m,canValidateOverrides:f.length===0}}function pM(e,t,n,r){let o=Pl(e,kl(t,n)),i;try{i=fn(At(r,o))}catch(a){if(a instanceof ae)return{rulebook:null,errors:[a.message]};throw a}if(i===null)return{rulebook:null,errors:[`missing cache entry for ${e.spec}; run ${Ht}`]};if(fw(i)!==e.digest)return{rulebook:null,errors:[`cache digest mismatch for ${e.spec}; run ${Ht}`]};let s;try{s=JSON.parse(i)}catch{return{rulebook:null,errors:[`invalid cached rulebook for ${e.spec}`]}}try{Eh(s)}catch(a){return{rulebook:null,errors:[`invalid cached rulebook for ${e.spec}: ${a instanceof Error?a.message:"invalid rulebook"}`]}}return{rulebook:s,errors:[]}}function gM(e,t){return[...new Set([...e?.transparent_wrappers??[],...t?.transparent_wrappers??[]])]}function gw(e,t){return e.flatMap((n)=>{let r=t[n.name];if(r==="off")return[];if(r&&typeof r==="object")return[{...n,intent:r.intent??n.intent,reason:r.reason}];return[n]})}function hw(e,t,n){return Object.keys(e).filter((r)=>!t.has(r)).map((r)=>`unknown override key "${r}" in ${n}; only that override is ignored and other overrides and rules keep their configured state; correct or remove it in that file`)}function hM(e,t,n){return Object.keys(e).filter((r)=>t.has(r)).map((r)=>`project override cannot target user-scoped rule "${r}" in ${n}; only that override is ignored and the rule keeps its user-configured state; remove it from that file`)}function yw(e,t){return t.map((n)=>n.startsWith("Unable to access ")?n:`${e}: ${n}`)}function yM(e,t){return{rules:[],transparent_wrappers:[],rulebooks:[],errors:[t],warnings:[],userConfigPath:e.userConfigPath,projectConfigPath:e.projectConfigPath,userLockPath:e.userLockPath,projectLockPath:e.projectLockPath}}function ki(){return{rules:[],rulebooks:[],entries:[],knownRuleIds:new Set,errors:[],warnings:[],canValidateOverrides:!0}}function vw(e={}){let t=bw(e),n=IC(e),r={rules:t.rules,transparentWrappers:t.transparent_wrappers,safety:n.safety,worktreeMode:n.worktreeMode,destructiveCommandProtectionEnabled:n.destructiveCommandProtectionEnabled,destructiveCommandRuleOverrides:n.destructiveCommandRuleOverrides,destructiveCommandAllowPaths:n.destructiveCommandAllowPaths,secretProtection:{enabled:n.secretProtection.enabled??!0,disabledRules:n.secretProtection.disabledRules??[],denyPaths:n.secretProtection.denyPaths,allowPaths:n.secretProtection.allowPaths??[]}},o={...t.userConfig?.overrides??{},...t.projectConfig?.overrides??{}},i=Object.freeze(Object.fromEntries(r.rules.map((s)=>{let a=t.rulebooks.find((l)=>l.rules.includes(s.name)),c=o[s.name];return[s.name,Object.freeze({id:s.name,...a?{rulebook:Object.freeze({name:a.name,version:a.version}),...xM(a.spec)?{source:a.spec}:{}}:{},...c&&typeof c==="object"?{override:Object.freeze({type:"reason",reason:c.reason})}:{}})]})));return _M(r,bM(t,n),i)}function bM(e,t){let n=SM(t);if(e.errors.length===0&&e.warnings.length===0&&!n)return;return{diagnostics:[...e.errors,...e.warnings,...t.errors],reason:CM(e.errors.length>0?vM(e.errors):void 0,e.warnings.length>0?kh(e.warnings.join("; ")):void 0,n)}}function vM(e){return`${kh(e.join("; "))} Those rule sources are not active; every other rule and all built-in protections still apply`}function SM(e){if(e.errors.length===0)return;let t=e.fallback==="salvaged"?"the salvaged policy with protective defaults":"built-in protective defaults";return`invalid policy config: ${e.errors.join("; ")}. Enforcing ${t}; the invalid values are not active. Fix the policy file manually`}function xM(e){return/^(?:[A-Za-z0-9_.-]+$|https:\/\/github\.com\/|github:|gh:|[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+(?:#|$))/.test(e)}function _M(e,t,n=Object.freeze({})){let r=Sw(structuredClone(e));if(!t)return Object.freeze({state:"ready",policy:r,diagnostics:Object.freeze([]),ruleMetadata:n});return Object.freeze({state:"degraded",policy:r,diagnostics:Object.freeze([...t.diagnostics]),reason:t.reason,ruleMetadata:n})}function Sw(e){if(typeof e!=="object"||e===null)return e;for(let t of Object.values(e))Sw(t);return Object.freeze(e)}function CM(...e){return kh(e.filter((t)=>!!t).join("; "))}function kh(e){return/[.!?]$/.test(e)?e:`${e}.`}class dn extends Error{stage;evaluation;name="GuardEvaluationError";constructor(e,t,n){super(`CC Safety Net ${e} dependency failed`,{cause:n});this.stage=e;this.evaluation=t}}var wM={findPolicyMutation:MC,findGitMetadataMutation:av,resolveGitMetadata:wu,loadPolicySnapshot:vw,findSensitiveTarget:QC,analyzeCommand:gx,getModes:wd};function xw(e,t={}){let n={...wM,...t.dependencies},r=PM(e),o=Ai(e)?e.command:r,i=jn("policy-protection",o,()=>zs(e,t.factParserDependencies)),s=Ne(i,"declared-command");if(Ai(e)&&e.command?.trim()&&s?.program.status==="limited")return{stage:"command-analysis",decision:{kind:"deny",reason:It,intent:"stop_and_explain",evidence:[{kind:"command",command:e.command,segment:e.command}]}};if(Ne(i,"input-candidate")?.program.status==="limited")return{stage:"command-validation",decision:{kind:"deny",reason:ay,intent:"stop_and_explain",evidence:[]}};let a=jn("policy-protection",o,()=>n.resolveGitMetadata([e.context.executionCwd,e.context.configCwd])),c=jn("policy-protection",o,()=>n.findPolicyMutation(i));if(c){let b=o??c.target;return{stage:"policy-protection",decision:{kind:"deny",reason:$C,intent:"hard_stop",evidence:[{kind:"command",command:b,segment:c.target}]}}}let l=jn("policy-protection",o,()=>n.findGitMetadataMutation(i,a));if(l){let b=o??l.target;return{stage:"policy-protection",decision:{kind:"deny",reason:He,intent:"hard_stop",evidence:[{kind:"command",command:b,segment:l.target}]}}}let u=jn("config-load",o,()=>n.loadPolicySnapshot({...t.policyOptions,cwd:e.context.configCwd})),d=u.policy,f=n.getModes(d),m={level:f.effectiveLevel,...RM(u)},p=d.secretProtection.enabled===!1?null:jn("secret-protection",o,()=>n.findSensitiveTarget(i,d.secretProtection,{strict:Ai(e)?f.strict:void 0}));if(p){let b=o??p.target;return{stage:"secret-protection",...m,decision:{kind:"deny",reason:KC,intent:"hard_stop",ruleId:p.ruleId,evidence:[{kind:"command",command:b,segment:p.target}]}}}if(!Ai(e))return{stage:"non-command",...m,decision:{kind:"allow"}};if(!e.command||e.command.trim()==="")return{...Ah("command-validation",o),...m};let h=jn("command-analysis",o,()=>n.analyzeCommand(e.command,{cwd:e.context.executionCwd,shell:e.route.shell,policySnapshot:u,environment:Ot(),protectedGitMetadata:a,effectiveCapabilities:f.capabilities,strict:f.strict,paranoidRm:f.paranoidRm,paranoidInterpreters:f.paranoidInterpreters,worktreeMode:f.worktreeMode},EM(i),i.store));if(h)return{stage:"command-analysis",...m,decision:h};return{stage:"command-analysis",...m,decision:{kind:"allow"}}}function RM(e){if(e.state==="ready")return{};return{configFallback:{reason:e.reason}}}function EM(e){return Ne(e,"declared-command")?.program}function PM(e){try{return vo(e.input)}catch(t){let n=Ai(e)?e.command:void 0;throw new dn("policy-protection",Ah("policy-protection",t instanceof Mt?void 0:n,t),t)}}function jn(e,t,n){try{return n()}catch(r){throw new dn(e,Ah(e,r instanceof Mt?void 0:t,r),r)}}function Ah(e,t,n){let r=n instanceof be||n instanceof pt;return{stage:e,decision:{kind:"deny",reason:r?cy:Wi,intent:"stop_and_explain",evidence:t?[{kind:"command",command:t,segment:t}]:[]}}}function Ai(e){return e.route.kind==="command"}function Cw(e,t){try{let n=xw(e,t.guard);return _w(e,n,t),n}catch(n){if(!(n instanceof dn))throw n;throw _w(e,n.evaluation,t,!(n.cause instanceof Mt),{stage:n.stage,errorCode:kM(n.cause)}),n}}function _w(e,t,n,r=!0,o){ny(ty(e,t,n.guard?.auditAllowed??!1,r,o),n.audit.getSessionId,{agent:n.audit.agent,shape:n.audit.shape,homeDir:n.audit.homeDir})}function kM(e){if(e instanceof be)return"path-canonicalization-limit";if(e instanceof Mt)return"tool-input-limit";if(e instanceof pt)return"structural-shell-syntax-limit";return"unexpected-error"}var Rw=TM();function TM(e={}){return(t,n)=>IM(t,n,e)}function IM(e,t,n){let r=OM(e,t),o=()=>DM(e);if("malformed"in r)return ry(r.denial,o,{agent:"amp",toolName:r.denial.toolName,cwd:r.cwd}),Ew(r.denial);try{let i=Cw(r,{guard:{auditAllowed:_d(),dependencies:n.guardDependencies},audit:{agent:"amp",getSessionId:o}});return ww(i,!0)}catch(i){if(!(i instanceof dn))throw i;if(rn(me.debug))console.error(`CC Safety Net debug: amp tool.call analysis failed: ${py(i.cause)}`);return ww(i.evaluation,r.route.kind==="command")}}function OM(e,t){if(!e||typeof e!=="object")return Hn(null);let n=e;if(typeof n.tool!=="string"||n.tool.trim()==="")return Hn(null);if(!n.input||typeof n.input!=="object")return Hn(null,n.tool);let r=zM(t);if(!r)return Hn(null,n.tool);let o=NM(t,e);if(!o.ok)return Hn(r,n.tool);if(!o.command)return Lo(n.tool,n.input,{kind:Su(n.tool)},{configCwd:r,executionCwd:r},null);if(typeof o.command.command!=="string"||o.command.command.trim()==="")return Hn(r,n.tool);let i=typeof o.command.dir==="string"?iy(o.command.dir,r):r;if(!i)return Hn(r,n.tool,o.command.command,o.command.dir);return Lo(n.tool,n.input,{kind:"command",shell:"posix"},{configCwd:r,executionCwd:i},o.command.command)}function zM(e){let t=e.system.workspaceRoot;if(!t)return;try{let n=e.helpers.filePathFromURI(t);if(typeof n!=="string"||n.trim()==="")return;return Dl(".",[n])}catch{return}}function NM(e,t){try{return{ok:!0,command:e.helpers.shellCommandFromToolCall(t)}}catch{return{ok:!1}}}function DM(e){if(!e||typeof e!=="object")return;let t=e.thread?.id;return typeof t==="string"&&t.trim()!==""?t:void 0}function Hn(e,t,n,r){return{malformed:!0,denial:my({command:n,segment:r,toolName:t}),cwd:e}}function ww(e,t){let n=dy(e,{includeEvidence:t});return n?Ew(n):{action:"allow"}}function Ew(e){return{action:"reject-and-continue",message:fy(e)}}function $M(e){e.on("tool.call",(t)=>Rw(t,e))}export{$M as default};