patchwork-os 1.2.0-beta.2.canary.781 → 1.2.0-beta.2.canary.783

package/dist/governance/profile.js

@@ -0,0 +1,181 @@
+/**
+ * Governance profile — the ONE concept that turns Patchwork's opt-in controls
+ * into a coherent posture.
+ *
+ * Phase 0 finding: every headline control (approval gate, automated-trigger
+ * gating, worker authority, policy matrix, agent sandbox, plugin loading, the
+ * kill-switch failure mode) was independently opt-in and independently
+ * fail-open, so a fresh install enforced nothing while looking governed on the
+ * dashboard. This module resolves a single `profile` setting into the existing
+ * primitives — it adds no new decision function of its own.
+ *
+ * Two modes, deliberately only two:
+ *
+ *   - `compat`   — byte-identical to pre-profile behaviour. This is what an
+ *                  install with no `profile` key resolves to, so an existing
+ *                  installation never changes behaviour by upgrading.
+ *   - `governed` — conservative defaults suitable for real business data.
+ *                  `patchwork init` writes this for NEW installs;
+ *                  `patchwork profile governed` opts an existing one in.
+ *
+ * The resolved profile is a plain value. Runtime enforcement, `patchwork
+ * policy explain` and `patchwork doctor` all read the SAME resolved value, so
+ * the explanation cannot describe a posture the runtime is not applying.
+ *
+ * Every field below maps to something that already exists; the comment on
+ * each names the primitive it feeds. Nothing here is a new flag.
+ */
+export const PROFILE_MODES = ["governed", "compat"];
+/**
+ * Pure: config → profile. Unknown or absent `profile` ⇒ compat (never a
+ * guess). An explicit but unrecognised value is reported by `doctor`, not
+ * silently promoted to governed.
+ */
+export function resolveProfile(cfg) {
+    const raw = cfg?.profile;
+    const declared = raw === "governed" || raw === "compat";
+    const mode = raw === "governed" ? "governed" : "compat";
+    const configuredGate = cfg?.approvalGate === "high" ||
+        cfg?.approvalGate === "all" ||
+        cfg?.approvalGate === "off"
+        ? cfg.approvalGate
+        : "off";
+    if (mode === "compat") {
+        return {
+            mode,
+            declared,
+            approvalGate: configuredGate,
+            gateAutomatedRuns: false,
+            workerAuthority: false,
+            policyEnforce: false,
+            agentContainment: "opt-in",
+            pluginPolicy: "open",
+            killSwitchFailClosed: false,
+            unknownWriteTools: "allow",
+            unregisteredTools: "skip",
+            untrustedEnvelope: false,
+            recipeOptOutHonoured: true,
+        };
+    }
+    return {
+        mode,
+        declared,
+        approvalGate: configuredGate === "all" ? "all" : "high",
+        gateAutomatedRuns: true,
+        workerAuthority: true,
+        policyEnforce: true,
+        agentContainment: "enforced",
+        pluginPolicy: "allowlist",
+        killSwitchFailClosed: true,
+        unknownWriteTools: "gate",
+        unregisteredTools: "refuse",
+        untrustedEnvelope: true,
+        recipeOptOutHonoured: false,
+    };
+}
+export const COMPAT_PROFILE = Object.freeze(resolveProfile(undefined));
+export const GOVERNED_PROFILE = Object.freeze(resolveProfile({ profile: "governed" }));
+export function isGoverned(p) {
+    return p?.mode === "governed";
+}
+// ---------------------------------------------------------------------------
+// Process-wide active profile.
+//
+// Set ONCE by the bridge at startup from the loaded config (and by the CLI
+// verbs that need it). Everything that enforces reads this rather than
+// re-deriving from config, so a mid-session config edit cannot leave two
+// components disagreeing about the posture. Defaults to compat, which is the
+// no-behaviour-change value.
+// ---------------------------------------------------------------------------
+let ACTIVE = COMPAT_PROFILE;
+export function setActiveProfile(p) {
+    ACTIVE = p;
+}
+export function activeProfile() {
+    return ACTIVE;
+}
+/** Test seam. */
+export function _resetActiveProfileForTesting() {
+    ACTIVE = COMPAT_PROFILE;
+}
+// ---------------------------------------------------------------------------
+// Agent containment — what a spawned CLI agent may touch under a profile.
+// ---------------------------------------------------------------------------
+/**
+ * Tools a contained agent step may use. Read-only by construction: nothing
+ * here writes a file, runs a command, or reaches the network. Names are the
+ * Claude Code built-in tool names; other drivers map them to their own
+ * equivalents (Gemini/Codex have coarser knobs — see each driver).
+ */
+export const CONTAINED_AGENT_ALLOWED_TOOLS = Object.freeze([
+    "Read",
+    "Glob",
+    "Grep",
+    "LS",
+]);
+/**
+ * Tools that are DENIED in every mode when the profile is governed, even when
+ * a recipe widens `allowedTools`. Network egress and shell are the two
+ * capabilities that turn a prompt injection into exfiltration; a recipe that
+ * genuinely needs them must say so with `sandbox: { network: true }` /
+ * `sandbox: { shell: true }`, which `policy explain` reports as a widening.
+ */
+export const CONTAINED_AGENT_DENIED_TOOLS = Object.freeze([
+    "WebFetch",
+    "WebSearch",
+    "Bash",
+]);
+/**
+ * Pure: (profile, step request) → containment the driver must apply.
+ *
+ * Under `compat` this reproduces today's behaviour exactly: containment only
+ * when the step opted in via `sandbox: true`. Under `governed` the default is
+ * contained, and each widening is recorded so the explanation can show it.
+ */
+export function resolveAgentContainment(profile, req) {
+    const widenings = [];
+    if (profile.agentContainment !== "enforced") {
+        const enforced = req?.sandbox === true;
+        return {
+            enforced,
+            allowedTools: enforced ? [...(req?.allowedTools ?? [])] : [],
+            deniedTools: [...(req?.disallowedTools ?? [])],
+            envAllowlist: false,
+            mcpAccess: req?.mcpAccess === true,
+            widenings,
+        };
+    }
+    const allowed = new Set(CONTAINED_AGENT_ALLOWED_TOOLS);
+    for (const t of req?.allowedTools ?? []) {
+        if (!allowed.has(t))
+            widenings.push(`allowedTools+${t}`);
+        allowed.add(t);
+    }
+    const denied = new Set(CONTAINED_AGENT_DENIED_TOOLS);
+    for (const t of req?.disallowedTools ?? [])
+        denied.add(t);
+    if (req?.network === true) {
+        denied.delete("WebFetch");
+        denied.delete("WebSearch");
+        widenings.push("network");
+    }
+    if (req?.shell === true) {
+        denied.delete("Bash");
+        widenings.push("shell");
+    }
+    // A deny always beats an allow — a recipe cannot re-allow what it is denied.
+    for (const t of denied)
+        allowed.delete(t);
+    const mcpAccess = req?.mcpAccess === true;
+    if (mcpAccess)
+        widenings.push("mcpAccess");
+    return {
+        enforced: true,
+        allowedTools: [...allowed],
+        deniedTools: [...denied],
+        envAllowlist: true,
+        mcpAccess,
+        widenings,
+    };
+}
+//# sourceMappingURL=profile.js.map

package/dist/governance/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/governance/profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAU,CAAC;AAuE7D;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAmC;IAEnC,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,CAAC;IACzB,MAAM,QAAQ,GAAG,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,QAAQ,CAAC;IACxD,MAAM,IAAI,GAAgB,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrE,MAAM,cAAc,GAClB,GAAG,EAAE,YAAY,KAAK,MAAM;QAC5B,GAAG,EAAE,YAAY,KAAK,KAAK;QAC3B,GAAG,EAAE,YAAY,KAAK,KAAK;QACzB,CAAC,CAAC,GAAG,CAAC,YAAY;QAClB,CAAC,CAAC,KAAK,CAAC;IACZ,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO;YACL,IAAI;YACJ,QAAQ;YACR,YAAY,EAAE,cAAc;YAC5B,iBAAiB,EAAE,KAAK;YACxB,eAAe,EAAE,KAAK;YACtB,aAAa,EAAE,KAAK;YACpB,gBAAgB,EAAE,QAAQ;YAC1B,YAAY,EAAE,MAAM;YACpB,oBAAoB,EAAE,KAAK;YAC3B,iBAAiB,EAAE,OAAO;YAC1B,iBAAiB,EAAE,MAAM;YACzB,iBAAiB,EAAE,KAAK;YACxB,oBAAoB,EAAE,IAAI;SAC3B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,YAAY,EAAE,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;QACvD,iBAAiB,EAAE,IAAI;QACvB,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,IAAI;QACnB,gBAAgB,EAAE,UAAU;QAC5B,YAAY,EAAE,WAAW;QACzB,oBAAoB,EAAE,IAAI;QAC1B,iBAAiB,EAAE,MAAM;QACzB,iBAAiB,EAAE,QAAQ;QAC3B,iBAAiB,EAAE,IAAI;QACvB,oBAAoB,EAAE,KAAK;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAsB,MAAM,CAAC,MAAM,CAC5D,cAAc,CAAC,SAAS,CAAC,CAC1B,CAAC;AACF,MAAM,CAAC,MAAM,gBAAgB,GAAsB,MAAM,CAAC,MAAM,CAC9D,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CACxC,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,CAAgC;IACzD,OAAO,CAAC,EAAE,IAAI,KAAK,UAAU,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,EAAE;AACF,2EAA2E;AAC3E,uEAAuE;AACvE,yEAAyE;AACzE,6EAA6E;AAC7E,6BAA6B;AAC7B,8EAA8E;AAE9E,IAAI,MAAM,GAAsB,cAAc,CAAC;AAE/C,MAAM,UAAU,gBAAgB,CAAC,CAAoB;IACnD,MAAM,GAAG,CAAC,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,6BAA6B;IAC3C,MAAM,GAAG,cAAc,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC5E,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;CACL,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC3E,UAAU;IACV,WAAW;IACX,MAAM;CACP,CAAC,CAAC;AA0BH;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAA0B,EAC1B,GAAmC;IAEnC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;QACvC,OAAO;YACL,QAAQ;YACR,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YAC5D,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC;YAC9C,YAAY,EAAE,KAAK;YACnB,SAAS,EAAE,GAAG,EAAE,SAAS,KAAK,IAAI;YAClC,SAAS;SACV,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,6BAA6B,CAAC,CAAC;IAC/D,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,4BAA4B,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,eAAe,IAAI,EAAE;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,GAAG,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3B,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,GAAG,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IACD,6EAA6E;IAC7E,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,KAAK,IAAI,CAAC;IAC1C,IAAI,SAAS;QAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3C,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC;QAC1B,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC;QACxB,YAAY,EAAE,IAAI;QAClB,SAAS;QACT,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/governance/secretValues.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Secret-value registry — VALUE-based redaction, composed after key-based.
+ *
+ * `redactSensitive` in `src/recipes/stepObservation.ts` walks object KEYS:
+ * `authorization`, `api_key`, `token` … A secret that has been interpolated
+ * into a string — `body: '{"key":"{{env.API_KEY}}"}'`, a URL query, a nested
+ * JSON string, a model prompt, an error message quoting the request — has no
+ * sensitive key left to match and lands in `runs.jsonl`, the approval
+ * payload, the activity log and the orchestrator's task file in clear text.
+ *
+ * This module holds the VALUES the process has been handed as secrets and
+ * substitutes them wherever they reappear, whatever the surrounding key.
+ *
+ * Constraints, all deliberate:
+ *
+ *   - The registry is process-local and memory-only. It is never persisted,
+ *     never logged, and `JSON.stringify` / `util.inspect` of it reveal
+ *     nothing — a registry that leaks is the largest secret index on the box.
+ *   - Values shorter than `MIN_SECRET_LENGTH` are ignored. Redacting `abc`
+ *     would rewrite ordinary prose, and a 7-character credential is not a
+ *     credential this layer can protect without making every log unreadable.
+ *   - Longest match first, so a value that is a prefix of another never
+ *     leaves the tail of the longer one exposed.
+ *   - Common encodings of each value are matched too: URL-encoded, base64,
+ *     base64url and JSON-escaped. Cheap to compute once at registration;
+ *     impossible to reconstruct at the sink.
+ *   - The replacement names the SOURCE (`env`, `connector:gmail`), never the
+ *     key and never any part of the value.
+ */
+export declare const MIN_SECRET_LENGTH = 8;
+/**
+ * Key-name patterns shared with `redactSensitive`. Normalised: lowercase with
+ * `-`, `_`, `.` and whitespace stripped, so `api_key`, `api-key`, `apiKey`
+ * and `API_KEY` all reduce to `apikey`.
+ */
+export declare const SENSITIVE_KEY_PATTERNS: readonly string[];
+export declare function isSensitiveKeyName(key: string): boolean;
+/**
+ * Register one secret value. `source` is a short label — `env`,
+ * `connector:gmail`, `config:apiKeys` — used verbatim in the replacement
+ * marker, so it must never carry the key name or any part of the value.
+ */
+export declare function registerSecretValue(value: string, source: string): void;
+/**
+ * Walk an object and register every string value found under a key that
+ * matches `SENSITIVE_KEY_PATTERNS`. Nested objects and arrays are walked;
+ * cycles are tolerated. The key name itself is NOT recorded anywhere.
+ */
+export declare function registerSecretValues(obj: unknown, source: string, opts?: {
+    allKeys?: boolean;
+}): void;
+/**
+ * Register the values of a recipe's declared `type: env` block. Every value
+ * in that block is a secret by declaration — the recipe asked for it from the
+ * environment — regardless of its key name.
+ *
+ * To be called by the runners (`declaredRecipeEnv` callers) — see the report
+ * accompanying this module for the exact lines.
+ */
+export declare function registerEnvBlock(env: Record<string, string | undefined>): void;
+/**
+ * Register a recipe's `vars:` — only values under sensitive key names, since
+ * ordinary vars (`repo`, `channel`) are not secrets and redacting them would
+ * hollow out the run log.
+ */
+export declare function registerSensitiveVars(vars: Record<string, unknown>): void;
+/** The bridge's own bearer token. `bridge.ts` should call this at startup. */
+export declare function registerBridgeToken(token: string): void;
+export declare function secretValueCount(): number;
+export declare function _resetSecretValuesForTesting(): void;
+/**
+ * Replace every registered secret (and its cheap encodings) in `text`.
+ * Returns the input reference unchanged when nothing is registered or
+ * nothing matches, so the hot path allocates nothing.
+ */
+export declare function redactKnownSecrets(text: string): string;
+/**
+ * Walk any value and redact registered secrets inside every string, including
+ * object keys and strings that are themselves JSON. Structure is preserved;
+ * non-string leaves pass through; cycles become `"[circular]"`.
+ *
+ * A string that parses as JSON is parsed, redacted structurally and
+ * re-stringified — this catches a secret that sits inside a nested JSON
+ * document under a JSON-escaped form the flat pass might otherwise handle
+ * only partially. Anything that fails to parse falls back to the plain
+ * substring pass, which is sufficient on its own; the parse is belt and
+ * braces, never a requirement.
+ */
+export declare function redactKnownSecretsDeep(value: unknown): unknown;

package/dist/governance/secretValues.js

@@ -0,0 +1,286 @@
+/**
+ * Secret-value registry — VALUE-based redaction, composed after key-based.
+ *
+ * `redactSensitive` in `src/recipes/stepObservation.ts` walks object KEYS:
+ * `authorization`, `api_key`, `token` … A secret that has been interpolated
+ * into a string — `body: '{"key":"{{env.API_KEY}}"}'`, a URL query, a nested
+ * JSON string, a model prompt, an error message quoting the request — has no
+ * sensitive key left to match and lands in `runs.jsonl`, the approval
+ * payload, the activity log and the orchestrator's task file in clear text.
+ *
+ * This module holds the VALUES the process has been handed as secrets and
+ * substitutes them wherever they reappear, whatever the surrounding key.
+ *
+ * Constraints, all deliberate:
+ *
+ *   - The registry is process-local and memory-only. It is never persisted,
+ *     never logged, and `JSON.stringify` / `util.inspect` of it reveal
+ *     nothing — a registry that leaks is the largest secret index on the box.
+ *   - Values shorter than `MIN_SECRET_LENGTH` are ignored. Redacting `abc`
+ *     would rewrite ordinary prose, and a 7-character credential is not a
+ *     credential this layer can protect without making every log unreadable.
+ *   - Longest match first, so a value that is a prefix of another never
+ *     leaves the tail of the longer one exposed.
+ *   - Common encodings of each value are matched too: URL-encoded, base64,
+ *     base64url and JSON-escaped. Cheap to compute once at registration;
+ *     impossible to reconstruct at the sink.
+ *   - The replacement names the SOURCE (`env`, `connector:gmail`), never the
+ *     key and never any part of the value.
+ */
+import { inspect } from "node:util";
+export const MIN_SECRET_LENGTH = 8;
+const MAX_SECRET_LENGTH = 16 * 1024;
+/**
+ * Key-name patterns shared with `redactSensitive`. Normalised: lowercase with
+ * `-`, `_`, `.` and whitespace stripped, so `api_key`, `api-key`, `apiKey`
+ * and `API_KEY` all reduce to `apikey`.
+ */
+export const SENSITIVE_KEY_PATTERNS = [
+    "authorization",
+    "xapikey",
+    "apikey",
+    "password",
+    "passwd",
+    "secret",
+    "token",
+    "cookie",
+    "session",
+    "privatekey",
+    "clientsecret",
+    "refreshtoken",
+    "accesstoken",
+];
+export function isSensitiveKeyName(key) {
+    const normalised = key.toLowerCase().replace(/[-_\s.]/g, "");
+    for (const pattern of SENSITIVE_KEY_PATTERNS) {
+        if (normalised.includes(pattern))
+            return true;
+    }
+    return false;
+}
+class SecretRegistry {
+    /** value → source label. A value registered twice keeps its first label. */
+    values = new Map();
+    /** Derived needles (raw + encodings), longest first. Rebuilt lazily. */
+    needles = null;
+    add(value, source) {
+        if (typeof value !== "string")
+            return;
+        if (value.length < MIN_SECRET_LENGTH || value.length > MAX_SECRET_LENGTH)
+            return;
+        if (value.trim().length < MIN_SECRET_LENGTH)
+            return;
+        if (this.values.has(value))
+            return;
+        this.values.set(value, sanitiseSource(source));
+        this.needles = null;
+    }
+    count() {
+        return this.values.size;
+    }
+    clear() {
+        this.values.clear();
+        this.needles = null;
+    }
+    getNeedles() {
+        if (this.needles)
+            return this.needles;
+        const seen = new Map();
+        for (const [value, source] of this.values) {
+            for (const enc of encodings(value)) {
+                if (enc.length < MIN_SECRET_LENGTH)
+                    continue;
+                if (!seen.has(enc))
+                    seen.set(enc, source);
+            }
+        }
+        const out = [];
+        for (const [text, source] of seen)
+            out.push({ text, source });
+        out.sort((a, b) => b.text.length - a.text.length);
+        this.needles = out;
+        return out;
+    }
+    // ── Never reveal contents ──────────────────────────────────────────────
+    toJSON() {
+        return { secretValues: this.values.size };
+    }
+    toString() {
+        return `[SecretRegistry ${this.values.size} value(s)]`;
+    }
+    [inspect.custom]() {
+        return this.toString();
+    }
+}
+function sanitiseSource(source) {
+    const s = String(source ?? "").trim();
+    if (!s)
+        return "secret";
+    // Keep labels short and free of characters that would break the marker.
+    return s.replace(/[[\]\r\n]/g, "").slice(0, 48);
+}
+/** Every cheap encoding under which a value might reappear in text. */
+function encodings(value) {
+    const out = new Set([value]);
+    try {
+        out.add(encodeURIComponent(value));
+    }
+    catch {
+        /* lone surrogates — skip */
+    }
+    const b64 = Buffer.from(value, "utf8").toString("base64");
+    out.add(b64);
+    out.add(b64.replace(/=+$/, ""));
+    out.add(Buffer.from(value, "utf8").toString("base64url"));
+    // JSON-escaped form (what `JSON.stringify` embeds inside a string), minus
+    // the surrounding quotes. Differs from the raw value only when the value
+    // contains characters JSON escapes.
+    out.add(JSON.stringify(value).slice(1, -1));
+    return [...out];
+}
+const registry = new SecretRegistry();
+/**
+ * Register one secret value. `source` is a short label — `env`,
+ * `connector:gmail`, `config:apiKeys` — used verbatim in the replacement
+ * marker, so it must never carry the key name or any part of the value.
+ */
+export function registerSecretValue(value, source) {
+    registry.add(value, source);
+}
+/**
+ * Walk an object and register every string value found under a key that
+ * matches `SENSITIVE_KEY_PATTERNS`. Nested objects and arrays are walked;
+ * cycles are tolerated. The key name itself is NOT recorded anywhere.
+ */
+export function registerSecretValues(obj, source, opts = {}) {
+    const seen = new WeakSet();
+    const walk = (v, keyIsSensitive) => {
+        if (typeof v === "string") {
+            if (keyIsSensitive)
+                registry.add(v, source);
+            return;
+        }
+        if (v === null || typeof v !== "object")
+            return;
+        if (seen.has(v))
+            return;
+        seen.add(v);
+        if (Array.isArray(v)) {
+            for (const item of v)
+                walk(item, keyIsSensitive);
+            return;
+        }
+        for (const [k, item] of Object.entries(v)) {
+            walk(item, opts.allKeys === true || keyIsSensitive || isSensitiveKeyName(k));
+        }
+    };
+    walk(obj, opts.allKeys === true);
+}
+/**
+ * Register the values of a recipe's declared `type: env` block. Every value
+ * in that block is a secret by declaration — the recipe asked for it from the
+ * environment — regardless of its key name.
+ *
+ * To be called by the runners (`declaredRecipeEnv` callers) — see the report
+ * accompanying this module for the exact lines.
+ */
+export function registerEnvBlock(env) {
+    for (const v of Object.values(env)) {
+        if (typeof v === "string")
+            registry.add(v, "env");
+    }
+}
+/**
+ * Register a recipe's `vars:` — only values under sensitive key names, since
+ * ordinary vars (`repo`, `channel`) are not secrets and redacting them would
+ * hollow out the run log.
+ */
+export function registerSensitiveVars(vars) {
+    registerSecretValues(vars, "vars");
+}
+/** The bridge's own bearer token. `bridge.ts` should call this at startup. */
+export function registerBridgeToken(token) {
+    registry.add(token, "bridge-token");
+}
+export function secretValueCount() {
+    return registry.count();
+}
+export function _resetSecretValuesForTesting() {
+    registry.clear();
+}
+function marker(source) {
+    return `[REDACTED:${source}]`;
+}
+/**
+ * Replace every registered secret (and its cheap encodings) in `text`.
+ * Returns the input reference unchanged when nothing is registered or
+ * nothing matches, so the hot path allocates nothing.
+ */
+export function redactKnownSecrets(text) {
+    if (typeof text !== "string" || text.length < MIN_SECRET_LENGTH)
+        return text;
+    const needles = registry.getNeedles();
+    if (needles.length === 0)
+        return text;
+    let out = text;
+    for (const n of needles) {
+        if (out.includes(n.text))
+            out = out.split(n.text).join(marker(n.source));
+    }
+    return out;
+}
+/**
+ * Walk any value and redact registered secrets inside every string, including
+ * object keys and strings that are themselves JSON. Structure is preserved;
+ * non-string leaves pass through; cycles become `"[circular]"`.
+ *
+ * A string that parses as JSON is parsed, redacted structurally and
+ * re-stringified — this catches a secret that sits inside a nested JSON
+ * document under a JSON-escaped form the flat pass might otherwise handle
+ * only partially. Anything that fails to parse falls back to the plain
+ * substring pass, which is sufficient on its own; the parse is belt and
+ * braces, never a requirement.
+ */
+export function redactKnownSecretsDeep(value) {
+    if (registry.count() === 0)
+        return value;
+    return deep(value, new WeakSet());
+}
+function deep(value, seen) {
+    if (typeof value === "string")
+        return redactString(value);
+    if (value === null || typeof value !== "object")
+        return value;
+    if (seen.has(value))
+        return "[circular]";
+    seen.add(value);
+    if (Array.isArray(value))
+        return value.map((v) => deep(v, seen));
+    if (value instanceof Date || Buffer.isBuffer(value))
+        return value;
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+        out[redactKnownSecrets(k)] = deep(v, seen);
+    }
+    return out;
+}
+function redactString(s) {
+    const flat = redactKnownSecrets(s);
+    // Only attempt the structural pass on something that looks like JSON and
+    // is not already clean — keeps the common case a single `includes` scan.
+    if (flat === s)
+        return s;
+    const t = s.trim();
+    if (!(t.startsWith("{") || t.startsWith("[")))
+        return flat;
+    try {
+        const parsed = JSON.parse(s);
+        if (parsed === null || typeof parsed !== "object")
+            return flat;
+        return JSON.stringify(deep(parsed, new WeakSet()));
+    }
+    catch {
+        return flat;
+    }
+}
+//# sourceMappingURL=secretValues.js.map

package/dist/governance/secretValues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretValues.js","sourceRoot":"","sources":["../../src/governance/secretValues.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,eAAe;IACf,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,cAAc;IACd,cAAc;IACd,aAAa;CACd,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD,MAAM,cAAc;IAClB,4EAA4E;IAC3D,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,wEAAwE;IAChE,OAAO,GAAoB,IAAI,CAAC;IAExC,GAAG,CAAC,KAAa,EAAE,MAAc;QAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO;QACtC,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB;YACtE,OAAO;QACT,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,iBAAiB;YAAE,OAAO;QACpD,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,UAAU;QACR,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;QACvC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1C,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,IAAI,GAAG,CAAC,MAAM,GAAG,iBAAiB;oBAAE,SAAS;gBAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;QACnB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,0EAA0E;IAC1E,MAAM;QACJ,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,QAAQ;QACN,OAAO,mBAAmB,IAAI,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC;IACzD,CAAC;IACD,CAAC,OAAO,CAAC,MAAM,CAAC;QACd,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;CACF;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxB,wEAAwE;IACxE,OAAO,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,uEAAuE;AACvE,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1D,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACb,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1D,0EAA0E;IAC1E,yEAAyE;IACzE,oCAAoC;IACpC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,MAAc;IAC/D,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAY,EACZ,MAAc,EACd,OAA8B,EAAE;IAEhC,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,cAAuB,EAAQ,EAAE;QACzD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,cAAc;gBAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO;QAChD,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO;QACxB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,KAAK,MAAM,IAAI,IAAI,CAAC;gBAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,EAAE,CAAC;YACrE,IAAI,CACF,IAAI,EACJ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,cAAc,IAAI,kBAAkB,CAAC,CAAC,CAAC,CACjE,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAuC;IAEvC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA6B;IACjE,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,aAAa,MAAM,GAAG,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,OAAO,EAAU,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,IAAqB;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IACzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACjE,IAAI,KAAK,YAAY,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACnC,yEAAyE;IACzE,yEAAyE;IACzE,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,OAAO,EAAU,CAAC,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/governance/toolFacts.d.ts

@@ -0,0 +1,11 @@
+/**
+ * ToolFacts from the live recipe tool registry — the single place that turns
+ * a tool id into the facts `computeEffectivePolicy` needs. Used by the
+ * runners at the consult point AND by `patchwork policy explain`, so both
+ * describe the same tool the same way.
+ */
+import type { ToolFacts } from "./effectivePolicy.js";
+import type { AgentContainment } from "./profile.js";
+export declare function toolFactsFor(toolId: string, agent?: {
+    containment: AgentContainment;
+} | undefined): ToolFacts;

package/dist/governance/toolFacts.js

@@ -0,0 +1,46 @@
+/**
+ * ToolFacts from the live recipe tool registry — the single place that turns
+ * a tool id into the facts `computeEffectivePolicy` needs. Used by the
+ * runners at the consult point AND by `patchwork policy explain`, so both
+ * describe the same tool the same way.
+ */
+import { getTool } from "../recipes/toolRegistry.js";
+import { classifyTool } from "../riskTier.js";
+import { classifyActionClass } from "../workers/actionClass.js";
+export function toolFactsFor(toolId, agent) {
+    if (toolId === "agent") {
+        return {
+            id: "agent",
+            tier: classifyTool("agent"),
+            tierDeclared: false,
+            registered: true,
+            isAgentStep: true,
+            ...(agent && {
+                agentContained: agent.containment.enforced,
+                agentWidenings: agent.containment.widenings,
+            }),
+        };
+    }
+    const reg = getTool(toolId);
+    if (!reg) {
+        return {
+            id: toolId,
+            tier: classifyTool(toolId),
+            tierDeclared: false,
+            registered: false,
+        };
+    }
+    return {
+        id: toolId,
+        tier: classifyTool(toolId),
+        // The registry resolver supplies riskDefault to classifyTool, so a
+        // registered tool's tier is declared by construction. Plugin tools are
+        // registered through `registerPluginTools` with a capped default and are
+        // flagged there (see toolRegistry.ts) — they carry `pluginTier: true`.
+        tierDeclared: !reg.fromPlugin,
+        isWrite: reg.isWrite,
+        registered: true,
+        reversibility: classifyActionClass(toolId, {}).reversibility,
+    };
+}
+//# sourceMappingURL=toolFacts.js.map

package/dist/governance/toolFacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolFacts.js","sourceRoot":"","sources":["../../src/governance/toolFacts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAIhE,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,KAAqD;IAErD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,OAAO;YACX,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC;YAC3B,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,IAAI;YACjB,GAAG,CAAC,KAAK,IAAI;gBACX,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ;gBAC1C,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS;aAC5C,CAAC;SACH,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC;YAC1B,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC;QAC1B,mEAAmE;QACnE,uEAAuE;QACvE,yEAAyE;QACzE,uEAAuE;QACvE,YAAY,EAAE,CAAE,GAAgC,CAAC,UAAU;QAC3D,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,mBAAmB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,aAAa;KAC7D,CAAC;AACJ,CAAC"}