contextos-mcp 0.4.0

package/dist/sandbox/execution.js

@@ -0,0 +1,497 @@
+/**
+ * ContextOS — Real Execution Sandbox & OCI Container Profile Engine
+ *
+ * Implements Section 19 of CONTEXTOS_IMPLEMENTATION_PLAN.md & Milestones W5.3 and W5.4:
+ *   - Execution modes: oci-required, oci-preferred, host-unsafe
+ *   - Fail-closed fallback: zero silent fallbacks from OCI to host
+ *   - Auto-merge governance: auto-merge permanently blocked by default in host-unsafe mode
+ *   - Repository config is prohibited from enabling unsafe auto-merge override
+ *   - Hardened container profile (read-only root, cap-drop ALL, no-new-privileges, non-root user 1000:1000)
+ *   - Network isolation: default network=none
+ *   - Ephemeral isolated TMPFS mounts (no real HOME mounted)
+ *   - Direct OCI engine execution (Docker/Podman/mock) without shell
+ *   - Engine/image digest verification and runner evidence recording
+ *   - Adversarial attack validation (traversal, git hooks, secret staging, config tampering)
+ */
+import { execFileSync, spawn } from "node:child_process";
+import * as crypto from "node:crypto";
+import * as path from "node:path";
+import { getSanitizedEnv, killProcessTree, redactSensitiveOutput } from "../utils/process-security.js";
+export class ExecutionSandbox {
+    mode;
+    containerEngine;
+    image;
+    expectedImageDigest;
+    network;
+    limits;
+    mockExecutor;
+    constructor(options = {}) {
+        this.mode = options.mode || "oci-preferred";
+        this.containerEngine = options.containerEngine || null;
+        this.image = options.image || "node:20-alpine";
+        this.expectedImageDigest = options.expectedImageDigest;
+        this.network = options.network || "deny";
+        this.mockExecutor = options.mockExecutor;
+        this.limits = {
+            cpus: options.limits?.cpus || "2.0",
+            memoryMb: Math.max(256, options.limits?.memoryMb || 2048),
+            pidsLimit: Math.max(32, options.limits?.pidsLimit || 128),
+            timeoutMs: Math.max(1000, options.limits?.timeoutMs || 30000),
+            maxOutputBytes: options.limits?.maxOutputBytes || 512 * 1024,
+        };
+    }
+    /**
+     * Evaluates if auto-merge is permitted based on execution outcome and mode.
+     * Section 19.1 & W5.4:
+     *   - oci-required: permitted after gates pass
+     *   - oci-preferred: permitted only if OCI container was actually used
+     *   - host-unsafe: blocked by default; requires explicit user-local safety override
+     *   - Repository config is strictly forbidden from enabling unsafe override
+     */
+    canAutoMerge(executionRecord = {}) {
+        const { runnerMode = "host-unsafe", userOverride = false, isFromRepoConfig = false } = executionRecord;
+        if (runnerMode === "oci") {
+            return {
+                allowed: true,
+                reasonCode: "OCI_SANDBOX_VERIFIED",
+                reason: "Execution was verified inside isolated OCI container sandbox.",
+            };
+        }
+        if (userOverride) {
+            if (isFromRepoConfig) {
+                return {
+                    allowed: false,
+                    reasonCode: "REPO_CONFIG_OVERRIDE_PROHIBITED",
+                    reason: "Repository configuration cannot enable host-unsafe auto-merge override. Only user-local safety override is permitted.",
+                };
+            }
+            return {
+                allowed: true,
+                reasonCode: "HOST_UNSAFE_EXPLICIT_OVERRIDE",
+                reason: "Auto-merge permitted via explicit user-local safety override for host-unsafe execution.",
+            };
+        }
+        return {
+            allowed: false,
+            reasonCode: "HOST_UNSAFE_BLOCKED",
+            reason: "Auto-merge is blocked for host-unsafe execution. Requires isolated OCI container or explicit manual confirmation.",
+        };
+    }
+    /**
+     * Generates hardened OCI container CLI arguments adhering strictly to Section 19.2.
+     */
+    buildContainerArgs(workspacePath, commandArgs, overrides = {}) {
+        const resolvedWorkspace = path.resolve(workspacePath);
+        const network = overrides.network || this.network;
+        const limits = { ...this.limits, ...overrides.limits };
+        const args = [
+            "run",
+            "--rm",
+            "--read-only",
+            "--cap-drop=ALL",
+            "--security-opt=no-new-privileges",
+            "--user=1000:1000",
+            `--cpus=${limits.cpus}`,
+            `--memory=${limits.memoryMb}m`,
+            `--pids-limit=${limits.pidsLimit}`,
+            "--tmpfs=/tmp:rw,noexec,nosuid,size=64m",
+            "--tmpfs=/home/sandbox:rw,noexec,nosuid,size=64m",
+            "-e",
+            "HOME=/home/sandbox",
+            "-e",
+            "TMPDIR=/tmp",
+            "-e",
+            "NODE_ENV=test",
+        ];
+        if (network === "deny") {
+            args.push("--network=none");
+        }
+        const mountPath = process.platform === "win32" ? resolvedWorkspace.replace(/\\/g, "/") : resolvedWorkspace;
+        // Mount workspace directory read-write
+        args.push("-v", `${mountPath}:/workspace:rw`);
+        args.push("-w", "/workspace");
+        args.push(this.image);
+        args.push(...commandArgs);
+        return args;
+    }
+    /**
+     * Scans a proposed action or file write for adversarial attacks (Section 19.6).
+     */
+    validateAdversarialAttempt(action = {}) {
+        const { targetPath, commandArgs } = action;
+        // 1. Path traversal escape checks
+        if (targetPath) {
+            const normalized = targetPath.replace(/\\/g, "/");
+            if (normalized.startsWith("../") ||
+                normalized.includes("/../") ||
+                normalized.endsWith("/..") ||
+                normalized === "..") {
+                return {
+                    safe: false,
+                    rule: "SEC-SANDBOX-001",
+                    violation: `Path traversal detected: "${targetPath}" attempts to escape workspace root.`,
+                };
+            }
+            // 2. Git internal tampering checks
+            if (normalized === ".git" ||
+                normalized.startsWith(".git/") ||
+                normalized.includes("/.git/") ||
+                normalized.includes("core.hookspath") ||
+                normalized.includes("hooks/")) {
+                return {
+                    safe: false,
+                    rule: "SEC-SANDBOX-002",
+                    violation: `Tampering with Git internals or hooks detected: "${targetPath}".`,
+                };
+            }
+            // 3. Staged secret file check
+            const base = path.basename(normalized).toLowerCase();
+            if (base === ".env" ||
+                base.startsWith(".env.") ||
+                base.endsWith(".pem") ||
+                base.endsWith(".key") ||
+                base === "id_rsa" ||
+                base === "id_ed25519") {
+                return {
+                    safe: false,
+                    rule: "SEC-SANDBOX-003",
+                    violation: `Writing blocked secret/credential file detected: "${targetPath}".`,
+                };
+            }
+        }
+        // 4. Command arguments inspection
+        if (Array.isArray(commandArgs)) {
+            const fullCmd = commandArgs.join(" ");
+            if (/core\.hooksPath/i.test(fullCmd)) {
+                return {
+                    safe: false,
+                    rule: "SEC-SANDBOX-004",
+                    violation: "Command attempts to alter Git core.hooksPath configuration.",
+                };
+            }
+            if (/git\s+config\s+--global/i.test(fullCmd) || /git\s+config\s+--system/i.test(fullCmd)) {
+                return {
+                    safe: false,
+                    rule: "SEC-SANDBOX-005",
+                    violation: "Command attempts to modify global or system git configuration.",
+                };
+            }
+        }
+        return { safe: true };
+    }
+    /**
+     * Plans execution runner and validates against fail-closed policy.
+     */
+    planExecution(isEngineAvailable) {
+        if (this.mode === "oci-required") {
+            if (!isEngineAvailable) {
+                const err = new Error('OCI sandbox is required by policy (mode="oci-required"), but no container engine (docker/podman) is available. Silent fallback is prohibited.');
+                err.code = "CTX_SANDBOX_OCI_UNAVAILABLE";
+                throw err;
+            }
+            return { runner: "oci", autoMergeBlocked: false };
+        }
+        if (this.mode === "oci-preferred") {
+            if (isEngineAvailable) {
+                return { runner: "oci", autoMergeBlocked: false };
+            }
+            return {
+                runner: "host-unsafe",
+                autoMergeBlocked: true,
+                warning: "Container engine not detected. Falling back to host-unsafe execution. Auto-merge is blocked until manually verified.",
+            };
+        }
+        return {
+            runner: "host-unsafe",
+            autoMergeBlocked: true,
+            warning: "Running in host-unsafe mode. Auto-merge is blocked by default.",
+        };
+    }
+    /**
+     * Detects whether a functional container engine (docker/podman/mock) is available.
+     */
+    detectContainerEngine() {
+        if (this.containerEngine === "mock") {
+            return "mock";
+        }
+        if (this.containerEngine === "docker" || this.containerEngine === "podman") {
+            try {
+                execFileSync(this.containerEngine, ["--version"], { stdio: "ignore" });
+                return this.containerEngine;
+            }
+            catch {
+                return null;
+            }
+        }
+        // Probe docker first, then podman
+        try {
+            execFileSync("docker", ["--version"], { stdio: "ignore" });
+            return "docker";
+        }
+        catch {
+            // probe podman
+            try {
+                execFileSync("podman", ["--version"], { stdio: "ignore" });
+                return "podman";
+            }
+            catch {
+                return null;
+            }
+        }
+    }
+    /**
+     * Resolves image digest for evidence and pin verification.
+     */
+    getImageDigest(engine, image) {
+        if (engine === "mock") {
+            return `sha256:${crypto.createHash("sha256").update(image).digest("hex")}`;
+        }
+        try {
+            const out = execFileSync(engine, ["image", "inspect", "--format", "{{range .RepoDigests}}{{.}}{{end}}", image], {
+                encoding: "utf8",
+                stdio: ["ignore", "pipe", "ignore"],
+                timeout: 5000,
+            }).trim();
+            if (out?.includes("@sha256:")) {
+                const digestPart = out.split("@")[1];
+                return digestPart || null;
+            }
+            return out || null;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Executes a command inside the hardened sandbox or host fallback according to policy.
+     */
+    async execute(workspacePath, commandArgs, options = {}) {
+        // 1. Validate adversarial attempts
+        const advCheck = this.validateAdversarialAttempt({
+            targetPath: workspacePath,
+            commandArgs,
+        });
+        if (!advCheck.safe) {
+            const secErr = new Error(`Sandbox security violation: ${advCheck.violation}`);
+            secErr.code = advCheck.rule || "CTX_SECURITY_VIOLATION";
+            throw secErr;
+        }
+        const engine = this.detectContainerEngine();
+        const plan = this.planExecution(Boolean(engine));
+        const startTime = Date.now();
+        if (plan.runner === "oci" && engine) {
+            return this.executeInContainer(engine, workspacePath, commandArgs, options, startTime);
+        }
+        return this.executeInHost(workspacePath, commandArgs, options, startTime, plan.warning);
+    }
+    /**
+     * Executes the command directly inside an isolated OCI container without shell.
+     */
+    async executeInContainer(engine, workspacePath, commandArgs, options, startTime) {
+        const digest = this.getImageDigest(engine, this.image);
+        if (this.expectedImageDigest && digest) {
+            const normalizedExpected = this.expectedImageDigest.replace(/^sha256:/, "");
+            const normalizedActual = digest.replace(/^sha256:/, "");
+            if (normalizedExpected !== normalizedActual) {
+                const err = new Error(`Image digest mismatch for image "${this.image}": expected "${this.expectedImageDigest}", got "${digest}". Execution aborted fail-closed.`);
+                err.code = "CTX_SANDBOX_DIGEST_MISMATCH";
+                throw err;
+            }
+        }
+        const containerArgs = this.buildContainerArgs(workspacePath, commandArgs, {
+            network: options.network || this.network,
+        });
+        const timeoutMs = options.timeoutMs || this.limits.timeoutMs;
+        let stdout = "";
+        let stderr = "";
+        let exitCode = null;
+        let signal = null;
+        if (engine === "mock" && this.mockExecutor) {
+            const mockRes = await this.mockExecutor("mock", containerArgs, {
+                cwd: workspacePath,
+                timeoutMs,
+                signal: options.signal,
+            });
+            stdout = mockRes.stdout;
+            stderr = mockRes.stderr;
+            exitCode = mockRes.exitCode;
+        }
+        else if (engine === "mock") {
+            stdout = `[mock-oci-container: ${this.image}] executed: ${commandArgs.join(" ")}\n`;
+            exitCode = 0;
+        }
+        else {
+            // Real container execution (Docker or Podman) without shell
+            const child = spawn(engine, containerArgs, {
+                cwd: workspacePath,
+                shell: false,
+                windowsHide: true,
+            });
+            let timedOut = false;
+            const timer = setTimeout(() => {
+                timedOut = true;
+                killProcessTree(child.pid);
+            }, timeoutMs);
+            const abortHandler = () => {
+                killProcessTree(child.pid);
+            };
+            if (options.signal) {
+                options.signal.addEventListener("abort", abortHandler, { once: true });
+            }
+            const maxBytes = this.limits.maxOutputBytes;
+            child.stdout.on("data", (chunk) => {
+                if (stdout.length < maxBytes) {
+                    stdout += chunk.toString("utf8");
+                }
+            });
+            child.stderr.on("data", (chunk) => {
+                if (stderr.length < maxBytes) {
+                    stderr += chunk.toString("utf8");
+                }
+            });
+            const [code, sig] = await new Promise((resolve) => {
+                child.on("close", (c, s) => {
+                    clearTimeout(timer);
+                    if (options.signal) {
+                        options.signal.removeEventListener("abort", abortHandler);
+                    }
+                    resolve([c, s]);
+                });
+                child.on("error", (_err) => {
+                    clearTimeout(timer);
+                    if (options.signal) {
+                        options.signal.removeEventListener("abort", abortHandler);
+                    }
+                    resolve([1, null]);
+                });
+            });
+            exitCode = code;
+            signal = sig;
+            if (timedOut) {
+                signal = "SIGKILL";
+                exitCode = 124;
+            }
+        }
+        const durationMs = Date.now() - startTime;
+        const rawCombined = stdout + (stderr ? `\n${stderr}` : "");
+        const outputSha256 = crypto.createHash("sha256").update(rawCombined).digest("hex");
+        const redactedOutput = redactSensitiveOutput(rawCombined);
+        const evidence = {
+            engine,
+            image: this.image,
+            imageDigest: digest || undefined,
+            exitCode,
+            durationMs,
+            outputSha256,
+            runnerMode: "oci",
+            network: options.network || this.network,
+            timestamp: Date.now(),
+        };
+        return {
+            success: exitCode === 0,
+            exitCode,
+            signal,
+            durationMs,
+            stdout,
+            stderr,
+            outputSha256,
+            redactedOutput,
+            runnerMode: "oci",
+            containerEngine: engine,
+            image: this.image,
+            imageDigest: digest || undefined,
+            autoMergeBlocked: false,
+            evidence,
+        };
+    }
+    /**
+     * Executes on host in host-unsafe fallback mode with full process isolation and secret redaction.
+     */
+    async executeInHost(workspacePath, commandArgs, options, startTime, warning) {
+        const timeoutMs = options.timeoutMs || this.limits.timeoutMs;
+        const env = getSanitizedEnv();
+        let stdout = "";
+        let stderr = "";
+        const child = spawn(commandArgs[0], commandArgs.slice(1), {
+            cwd: workspacePath,
+            env,
+            shell: false,
+            windowsHide: true,
+        });
+        let timedOut = false;
+        const timer = setTimeout(() => {
+            timedOut = true;
+            killProcessTree(child.pid);
+        }, timeoutMs);
+        const abortHandler = () => {
+            killProcessTree(child.pid);
+        };
+        if (options.signal) {
+            options.signal.addEventListener("abort", abortHandler, { once: true });
+        }
+        const maxBytes = this.limits.maxOutputBytes;
+        child.stdout.on("data", (chunk) => {
+            if (stdout.length < maxBytes) {
+                stdout += chunk.toString("utf8");
+            }
+        });
+        child.stderr.on("data", (chunk) => {
+            if (stderr.length < maxBytes) {
+                stderr += chunk.toString("utf8");
+            }
+        });
+        const [exitCode, sig] = await new Promise((resolve) => {
+            child.on("close", (code, signalStr) => {
+                clearTimeout(timer);
+                if (options.signal) {
+                    options.signal.removeEventListener("abort", abortHandler);
+                }
+                resolve([code, signalStr]);
+            });
+            child.on("error", (err) => {
+                clearTimeout(timer);
+                if (options.signal) {
+                    options.signal.removeEventListener("abort", abortHandler);
+                }
+                stderr += `\nFailed to start process: ${err.message}`;
+                resolve([1, null]);
+            });
+        });
+        const durationMs = Date.now() - startTime;
+        const rawCombined = stdout + (stderr ? `\n${stderr}` : "");
+        const outputSha256 = crypto.createHash("sha256").update(rawCombined).digest("hex");
+        const redactedOutput = redactSensitiveOutput(rawCombined);
+        const decision = this.canAutoMerge({
+            runnerMode: "host-unsafe",
+            userOverride: options.userOverride,
+            isFromRepoConfig: options.isFromRepoConfig,
+        });
+        const evidence = {
+            engine: "none",
+            image: "host",
+            exitCode: timedOut ? 124 : exitCode,
+            durationMs,
+            outputSha256,
+            runnerMode: "host-unsafe",
+            network: "allow",
+            timestamp: Date.now(),
+        };
+        return {
+            success: exitCode === 0 && !timedOut,
+            exitCode: timedOut ? 124 : exitCode,
+            signal: timedOut ? "SIGKILL" : sig,
+            durationMs,
+            stdout,
+            stderr,
+            outputSha256,
+            redactedOutput,
+            runnerMode: "host-unsafe",
+            containerEngine: "none",
+            image: "host",
+            autoMergeBlocked: !decision.allowed,
+            evidence,
+            warning,
+        };
+    }
+}
+//# sourceMappingURL=execution.js.map

package/dist/sandbox/execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../src/sandbox/execution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAoFvG,MAAM,OAAO,gBAAgB;IACrB,IAAI,CAAc;IAClB,eAAe,CAAyB;IACxC,KAAK,CAAS;IACd,mBAAmB,CAAU;IAC7B,OAAO,CAAc;IACrB,MAAM,CAMX;IACK,YAAY,CAIgD;IAEnE,YAAY,UAA0B,EAAE;QACvC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,eAAe,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;QACvD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,gBAAgB,CAAC;QAC/C,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC;QACzC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG;YACb,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,KAAK;YACnC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,IAAI,IAAI,CAAC;YACzD,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,GAAG,CAAC;YACzD,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,KAAK,CAAC;YAC7D,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,IAAI,GAAG,GAAG,IAAI;SAC5D,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,YAAY,CACX,kBAA+F,EAAE;QAEjG,MAAM,EAAE,UAAU,GAAG,aAAa,EAAE,YAAY,GAAG,KAAK,EAAE,gBAAgB,GAAG,KAAK,EAAE,GAAG,eAAe,CAAC;QAEvG,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YAC1B,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,sBAAsB;gBAClC,MAAM,EAAE,+DAA+D;aACvE,CAAC;QACH,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YAClB,IAAI,gBAAgB,EAAE,CAAC;gBACtB,OAAO;oBACN,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,iCAAiC;oBAC7C,MAAM,EACL,uHAAuH;iBACxH,CAAC;YACH,CAAC;YACD,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,+BAA+B;gBAC3C,MAAM,EAAE,yFAAyF;aACjG,CAAC;QACH,CAAC;QAED,OAAO;YACN,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,qBAAqB;YACjC,MAAM,EACL,mHAAmH;SACpH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,aAAqB,EAAE,WAAqB,EAAE,YAAqC,EAAE;QACvG,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC;QAClD,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;QAEvD,MAAM,IAAI,GAAG;YACZ,KAAK;YACL,MAAM;YACN,aAAa;YACb,gBAAgB;YAChB,kCAAkC;YAClC,kBAAkB;YAClB,UAAU,MAAM,CAAC,IAAI,EAAE;YACvB,YAAY,MAAM,CAAC,QAAQ,GAAG;YAC9B,gBAAgB,MAAM,CAAC,SAAS,EAAE;YAClC,wCAAwC;YACxC,iDAAiD;YACjD,IAAI;YACJ,oBAAoB;YACpB,IAAI;YACJ,aAAa;YACb,IAAI;YACJ,eAAe;SACf,CAAC;QAEF,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC3G,uCAAuC;QACvC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,SAAS,gBAAgB,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAE9B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;QAE1B,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;OAEG;IACH,0BAA0B,CACzB,SAA4E,EAAE;QAE9E,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;QAE3C,kCAAkC;QAClC,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAClD,IACC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;gBAC5B,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC3B,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC1B,UAAU,KAAK,IAAI,EAClB,CAAC;gBACF,OAAO;oBACN,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,iBAAiB;oBACvB,SAAS,EAAE,6BAA6B,UAAU,sCAAsC;iBACxF,CAAC;YACH,CAAC;YAED,mCAAmC;YACnC,IACC,UAAU,KAAK,MAAM;gBACrB,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC9B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC7B,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBACrC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC5B,CAAC;gBACF,OAAO;oBACN,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,iBAAiB;oBACvB,SAAS,EAAE,oDAAoD,UAAU,IAAI;iBAC7E,CAAC;YACH,CAAC;YAED,8BAA8B;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;YACrD,IACC,IAAI,KAAK,MAAM;gBACf,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACrB,IAAI,KAAK,QAAQ;gBACjB,IAAI,KAAK,YAAY,EACpB,CAAC;gBACF,OAAO;oBACN,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,iBAAiB;oBACvB,SAAS,EAAE,qDAAqD,UAAU,IAAI;iBAC9E,CAAC;YACH,CAAC;QACF,CAAC;QAED,kCAAkC;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,OAAO;oBACN,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,iBAAiB;oBACvB,SAAS,EAAE,6DAA6D;iBACxE,CAAC;YACH,CAAC;YACD,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1F,OAAO;oBACN,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,iBAAiB;oBACvB,SAAS,EAAE,gEAAgE;iBAC3E,CAAC;YACH,CAAC;QACF,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,iBAA0B;QACvC,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,IAAI,KAAK,CACpB,+IAA+I,CAC/I,CAAC;gBACD,GAAW,CAAC,IAAI,GAAG,6BAA6B,CAAC;gBAClD,MAAM,GAAG,CAAC;YACX,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,IAAI,iBAAiB,EAAE,CAAC;gBACvB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;YACnD,CAAC;YACD,OAAO;gBACN,MAAM,EAAE,aAAa;gBACrB,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EACN,sHAAsH;aACvH,CAAC;QACH,CAAC;QAED,OAAO;YACN,MAAM,EAAE,aAAa;YACrB,gBAAgB,EAAE,IAAI;YACtB,OAAO,EAAE,gEAAgE;SACzE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,qBAAqB;QACpB,IAAI,IAAI,CAAC,eAAe,KAAK,MAAM,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC;QACf,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,KAAK,QAAQ,IAAI,IAAI,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;YAC5E,IAAI,CAAC;gBACJ,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACvE,OAAO,IAAI,CAAC,eAAe,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC;YACJ,YAAY,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3D,OAAO,QAAQ,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACR,eAAe;YACf,IAAI,CAAC;gBACJ,YAAY,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC3D,OAAO,QAAQ,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;IACF,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAuB,EAAE,KAAa;QACpD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,oCAAoC,EAAE,KAAK,CAAC,EAAE;gBAC/G,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;gBACnC,OAAO,EAAE,IAAI;aACb,CAAC,CAAC,IAAI,EAAE,CAAC;YAEV,IAAI,GAAG,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,OAAO,UAAU,IAAI,IAAI,CAAC;YAC3B,CAAC;YACD,OAAO,GAAG,IAAI,IAAI,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACZ,aAAqB,EACrB,WAAqB,EACrB,UAAiC,EAAE;QAEnC,mCAAmC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAAC;YAChD,UAAU,EAAE,aAAa;YACzB,WAAW;SACX,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;YAC7E,MAAc,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,wBAAwB,CAAC;YACjE,MAAM,MAAM,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACxF,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACzF,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAC/B,MAAuB,EACvB,aAAqB,EACrB,WAAqB,EACrB,OAA8B,EAC9B,SAAiB;QAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAEvD,IAAI,IAAI,CAAC,mBAAmB,IAAI,MAAM,EAAE,CAAC;YACxC,MAAM,kBAAkB,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC5E,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACxD,IAAI,kBAAkB,KAAK,gBAAgB,EAAE,CAAC;gBAC7C,MAAM,GAAG,GAAG,IAAI,KAAK,CACpB,oCAAoC,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,mBAAmB,WAAW,MAAM,mCAAmC,CAC1I,CAAC;gBACD,GAAW,CAAC,IAAI,GAAG,6BAA6B,CAAC;gBAClD,MAAM,GAAG,CAAC;YACX,CAAC;QACF,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,WAAW,EAAE;YACzE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;SACxC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAC7D,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,MAAM,GAAkB,IAAI,CAAC;QAEjC,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE;gBAC9D,GAAG,EAAE,aAAa;gBAClB,SAAS;gBACT,MAAM,EAAE,OAAO,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC7B,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,GAAG,wBAAwB,IAAI,CAAC,KAAK,eAAe,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YACpF,QAAQ,GAAG,CAAC,CAAC;QACd,CAAC;aAAM,CAAC;YACP,4DAA4D;YAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE;gBAC1C,GAAG,EAAE,aAAa;gBAClB,KAAK,EAAE,KAAK;gBACZ,WAAW,EAAE,IAAI;aACjB,CAAC,CAAC;YAEH,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,QAAQ,GAAG,IAAI,CAAC;gBAChB,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,MAAM,YAAY,GAAG,GAAG,EAAE;gBACzB,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC,CAAC;YAEF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAE5C,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAClC,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAClC,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,MAAM,IAAI,OAAO,CAAiC,CAAC,OAAO,EAAE,EAAE;gBACjF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oBAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;wBACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;oBAC3D,CAAC;oBACD,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACjB,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;wBACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;oBAC3D,CAAC;oBACD,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBACpB,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,GAAG,GAAG,CAAC;YAEb,IAAI,QAAQ,EAAE,CAAC;gBACd,MAAM,GAAG,SAAS,CAAC;gBACnB,QAAQ,GAAG,GAAG,CAAC;YAChB,CAAC;QACF,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnF,MAAM,cAAc,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAE1D,MAAM,QAAQ,GAA6B;YAC1C,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,MAAM,IAAI,SAAS;YAChC,QAAQ;YACR,UAAU;YACV,YAAY;YACZ,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YACxC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC;QAEF,OAAO;YACN,OAAO,EAAE,QAAQ,KAAK,CAAC;YACvB,QAAQ;YACR,MAAM;YACN,UAAU;YACV,MAAM;YACN,MAAM;YACN,YAAY;YACZ,cAAc;YACd,UAAU,EAAE,KAAK;YACjB,eAAe,EAAE,MAAM;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,MAAM,IAAI,SAAS;YAChC,gBAAgB,EAAE,KAAK;YACvB,QAAQ;SACR,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAC1B,aAAqB,EACrB,WAAqB,EACrB,OAA8B,EAC9B,SAAiB,EACjB,OAAgB;QAEhB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAC7D,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;QAC9B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACzD,GAAG,EAAE,aAAa;YAClB,GAAG;YACH,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,QAAQ,GAAG,IAAI,CAAC;YAChB,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,YAAY,GAAG,GAAG,EAAE;YACzB,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC;QAEF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QAE5C,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,MAAM,IAAI,OAAO,CAAiC,CAAC,OAAO,EAAE,EAAE;YACrF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;gBACrC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM,IAAI,8BAA8B,GAAG,CAAC,OAAO,EAAE,CAAC;gBACtD,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnF,MAAM,cAAc,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAE1D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;YAClC,UAAU,EAAE,aAAa;YACzB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;SAC1C,CAAC,CAAC;QAEH,MAAM,QAAQ,GAA6B;YAC1C,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ;YACnC,UAAU;YACV,YAAY;YACZ,UAAU,EAAE,aAAa;YACzB,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC;QAEF,OAAO;YACN,OAAO,EAAE,QAAQ,KAAK,CAAC,IAAI,CAAC,QAAQ;YACpC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ;YACnC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG;YAClC,UAAU;YACV,MAAM;YACN,MAAM;YACN,YAAY;YACZ,cAAc;YACd,UAAU,EAAE,aAAa;YACzB,eAAe,EAAE,MAAM;YACvB,KAAK,EAAE,MAAM;YACb,gBAAgB,EAAE,CAAC,QAAQ,CAAC,OAAO;YACnC,QAAQ;YACR,OAAO;SACP,CAAC;IACH,CAAC;CACD"}

package/dist/security/file-policy.d.ts

@@ -0,0 +1,22 @@
+/**
+ * File Policy — restricts agent file access to the worktree boundary.
+ *
+ * Prevents agents from reading/writing files outside their designated
+ * worktree directory. Also blocks access to .git/ internals.
+ */
+/**
+ * Validate that a file path is within the allowed worktree boundary.
+ *
+ * @param filePath - The path to validate (absolute or relative)
+ * @param worktreeRoot - The worktree root directory (absolute)
+ * @returns true if access is ALLOWED
+ */
+export declare function isPathAllowed(filePath: string, worktreeRoot: string): boolean;
+/**
+ * Sanitize a list of file paths, removing any that violate the file policy.
+ *
+ * @param filePaths - List of file paths to filter
+ * @param worktreeRoot - The worktree root directory
+ * @returns Filtered list containing only allowed paths
+ */
+export declare function filterAllowedPaths(filePaths: string[], worktreeRoot: string): string[];

package/dist/security/file-policy.js

@@ -0,0 +1,53 @@
+/**
+ * File Policy — restricts agent file access to the worktree boundary.
+ *
+ * Prevents agents from reading/writing files outside their designated
+ * worktree directory. Also blocks access to .git/ internals.
+ */
+import * as path from "node:path";
+/** Directories that agents must NEVER access, even within a worktree. */
+const FORBIDDEN_DIRS = [
+    ".git",
+    "node_modules", // Too large, not useful for agents
+];
+/**
+ * Validate that a file path is within the allowed worktree boundary.
+ *
+ * @param filePath - The path to validate (absolute or relative)
+ * @param worktreeRoot - The worktree root directory (absolute)
+ * @returns true if access is ALLOWED
+ */
+export function isPathAllowed(filePath, worktreeRoot) {
+    const normalizedRoot = path.resolve(worktreeRoot);
+    const absPath = path.isAbsolute(filePath) ? path.resolve(filePath) : path.resolve(normalizedRoot, filePath);
+    // Must be strictly within worktree root (using path.relative to prevent sibling prefix bypass)
+    const relativePath = path.relative(normalizedRoot, absPath);
+    if (relativePath.startsWith("..") || path.isAbsolute(relativePath)) {
+        return false;
+    }
+    // Check for forbidden directories in the relative path
+    const segments = relativePath.split(path.sep);
+    for (const segment of segments) {
+        if (FORBIDDEN_DIRS.includes(segment)) {
+            return false;
+        }
+    }
+    return true;
+}
+/**
+ * Sanitize a list of file paths, removing any that violate the file policy.
+ *
+ * @param filePaths - List of file paths to filter
+ * @param worktreeRoot - The worktree root directory
+ * @returns Filtered list containing only allowed paths
+ */
+export function filterAllowedPaths(filePaths, worktreeRoot) {
+    return filePaths.filter((fp) => {
+        const allowed = isPathAllowed(fp, worktreeRoot);
+        if (!allowed) {
+            process.stderr.write(`[file-policy] Blocked path: ${fp}\n`);
+        }
+        return allowed;
+    });
+}
+//# sourceMappingURL=file-policy.js.map

package/dist/security/file-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-policy.js","sourceRoot":"","sources":["../../src/security/file-policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,yEAAyE;AACzE,MAAM,cAAc,GAAa;IAChC,MAAM;IACN,cAAc,EAAE,mCAAmC;CACnD,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,YAAoB;IACnE,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAE5G,+FAA+F;IAC/F,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACd,CAAC;IAED,uDAAuD;IACvD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAmB,EAAE,YAAoB;IAC3E,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/security/repository-boundary.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Repository boundary enforcement with nearest-parent realpath resolution.
+ *
+ * Prevents arbitrary file reads/writes, path traversals (../),
+ * sibling-prefix escapes (e.g. /repo-sibling attempting to match /repo),
+ * UNC paths, null bytes, and symlink/junction escapes.
+ */
+export declare class SecurityBoundaryException extends Error {
+    constructor(message: string);
+}
+/**
+ * Checks whether targetPath is contained within repoRoot.
+ */
+export declare function isWithinRepository(targetPath: string, repoRoot: string): boolean;
+/**
+ * Asserts that targetPath is strictly within repoRoot.
+ *
+ * If valid, returns the canonical resolved path.
+ * If targetPath or repoRoot escapes boundaries, throws SecurityBoundaryException.
+ */
+export declare function assertWithinRepository(targetPath: string, repoRoot: string): string;