pi-codex-auto-review 0.1.3 → 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/NOTICE +4 -2
- package/README.ko.md +85 -0
- package/README.md +51 -52
- package/dist/approval-commands.d.ts +3 -3
- package/dist/approval-commands.js +161 -34
- package/dist/approval-commands.js.map +1 -1
- package/dist/approval-settings.d.ts +1 -1
- package/dist/approval-settings.js +17 -10
- package/dist/approval-settings.js.map +1 -1
- package/dist/approvals.d.ts +10 -9
- package/dist/approvals.js +196 -75
- package/dist/approvals.js.map +1 -1
- package/dist/audit.d.ts +1 -1
- package/dist/audit.js +37 -13
- package/dist/audit.js.map +1 -1
- package/dist/cli.js +63 -34
- package/dist/cli.js.map +1 -1
- package/dist/context-files.d.ts +2 -2
- package/dist/context-files.js +40 -19
- package/dist/context-files.js.map +1 -1
- package/dist/contracts.d.ts +39 -39
- package/dist/contracts.js +117 -51
- package/dist/contracts.js.map +1 -1
- package/dist/index.d.ts +9 -9
- package/dist/index.js +147 -43
- package/dist/index.js.map +1 -1
- package/dist/pi-host.js +3 -3
- package/dist/pi-host.js.map +1 -1
- package/dist/policy/domains.js +17 -7
- package/dist/policy/domains.js.map +1 -1
- package/dist/policy/index.d.ts +7 -7
- package/dist/policy/index.js +382 -139
- package/dist/policy/index.js.map +1 -1
- package/dist/policy/paths.js +31 -18
- package/dist/policy/paths.js.map +1 -1
- package/dist/policy/rule-engine.d.ts +2 -0
- package/dist/policy/rule-engine.js +283 -0
- package/dist/policy/rule-engine.js.map +1 -0
- package/dist/policy/rule-types.d.ts +30 -0
- package/dist/policy/rule-types.js +2 -0
- package/dist/policy/rule-types.js.map +1 -0
- package/dist/policy/rules-sync.d.ts +1 -0
- package/dist/policy/rules-sync.js +14 -0
- package/dist/policy/rules-sync.js.map +1 -0
- package/dist/policy/rules-worker.d.ts +1 -0
- package/dist/policy/rules-worker.js +14 -0
- package/dist/policy/rules-worker.js.map +1 -0
- package/dist/policy/rules.d.ts +4 -31
- package/dist/policy/rules.js +126 -38
- package/dist/policy/rules.js.map +1 -1
- package/dist/policy/shell.js +70 -41
- package/dist/policy/shell.js.map +1 -1
- package/dist/policy/starlark/builtins.d.ts +6 -0
- package/dist/policy/starlark/builtins.js +764 -0
- package/dist/policy/starlark/builtins.js.map +1 -0
- package/dist/policy/starlark/evaluator.d.ts +18 -0
- package/dist/policy/starlark/evaluator.js +518 -0
- package/dist/policy/starlark/evaluator.js.map +1 -0
- package/dist/policy/starlark/lexer.d.ts +14 -0
- package/dist/policy/starlark/lexer.js +189 -0
- package/dist/policy/starlark/lexer.js.map +1 -0
- package/dist/policy/starlark/parser.d.ts +140 -0
- package/dist/policy/starlark/parser.js +508 -0
- package/dist/policy/starlark/parser.js.map +1 -0
- package/dist/policy/starlark/validation.d.ts +4 -0
- package/dist/policy/starlark/validation.js +183 -0
- package/dist/policy/starlark/validation.js.map +1 -0
- package/dist/policy/starlark/values.d.ts +46 -0
- package/dist/policy/starlark/values.js +363 -0
- package/dist/policy/starlark/values.js.map +1 -0
- package/dist/reports.d.ts +1 -1
- package/dist/reports.js +66 -30
- package/dist/reports.js.map +1 -1
- package/dist/review/context.d.ts +16 -3
- package/dist/review/context.js +254 -48
- package/dist/review/context.js.map +1 -1
- package/dist/review/investigation.d.ts +2 -2
- package/dist/review/investigation.js +57 -16
- package/dist/review/investigation.js.map +1 -1
- package/dist/review/lifecycle.d.ts +1 -1
- package/dist/review/lifecycle.js +72 -29
- package/dist/review/lifecycle.js.map +1 -1
- package/dist/review/policy.js +27 -5
- package/dist/review/policy.js.map +1 -1
- package/dist/review/upstream-policy.js +1 -1
- package/dist/review/upstream-policy.js.map +1 -1
- package/dist/review/user-input.d.ts +5 -0
- package/dist/review/user-input.js +54 -0
- package/dist/review/user-input.js.map +1 -0
- package/dist/reviewer.d.ts +16 -6
- package/dist/reviewer.js +258 -70
- package/dist/reviewer.js.map +1 -1
- package/dist/signals.js +24 -9
- package/dist/signals.js.map +1 -1
- package/dist/startup.d.ts +4 -4
- package/dist/startup.js +139 -41
- package/dist/startup.js.map +1 -1
- package/dist/tools/controller.d.ts +19 -13
- package/dist/tools/controller.js +460 -118
- package/dist/tools/controller.js.map +1 -1
- package/dist/tools/environment.d.ts +1 -0
- package/dist/tools/environment.js +5 -0
- package/dist/tools/environment.js.map +1 -1
- package/dist/tools/executor.d.ts +1 -1
- package/dist/tools/executor.js +45 -28
- package/dist/tools/executor.js.map +1 -1
- package/dist/tools/external.d.ts +9 -8
- package/dist/tools/external.js +22 -11
- package/dist/tools/external.js.map +1 -1
- package/dist/tools/mcp.d.ts +6 -6
- package/dist/tools/mcp.js +208 -79
- package/dist/tools/mcp.js.map +1 -1
- package/dist/tools/mutation-queue.js.map +1 -1
- package/docs/publishing.ko.md +114 -0
- package/docs/publishing.md +49 -47
- package/docs/security/dependencies.ko.md +54 -0
- package/docs/security/dependencies.md +27 -26
- package/docs/testing/auto-review-protection.ko.md +158 -0
- package/docs/testing/auto-review-protection.md +105 -97
- package/docs/usage.ko.md +242 -0
- package/docs/usage.md +127 -111
- package/package.json +106 -95
- package/dist/native/darwin-arm64/artifact.json +0 -5
- package/dist/native/darwin-arm64/pi-guard-execpolicy +0 -0
- package/dist/native/linux-x64/artifact.json +0 -5
- package/dist/native/linux-x64/pi-guard-execpolicy +0 -0
- package/native/execpolicy/LICENSE +0 -201
- package/native/execpolicy/NOTICE +0 -6
package/NOTICE
CHANGED
|
@@ -1,5 +1,7 @@
|
|
|
1
|
-
pi-codex-auto-review includes
|
|
2
|
-
from OpenAI Codex, revision
|
|
1
|
+
pi-codex-auto-review includes a TypeScript port of the execution policy
|
|
2
|
+
contracts and the guardian policy from OpenAI Codex, revision
|
|
3
|
+
a956835d020762cb2b570053af06f643a11c0ecc. The rule interpreter and evaluator
|
|
4
|
+
run as JavaScript; the upstream Rust library and binaries are not bundled.
|
|
3
5
|
The upstream attribution notice is reproduced below.
|
|
4
6
|
|
|
5
7
|
OpenAI Codex
|
package/README.ko.md
ADDED
|
@@ -0,0 +1,85 @@
|
|
|
1
|
+
# pi-codex-auto-review
|
|
2
|
+
|
|
3
|
+
[English](README.md) | **한국어**
|
|
4
|
+
|
|
5
|
+
Codex의 ‘Approve for me’에서 영감을 받은 Pi 자동 실행 승인 검토 확장입니다. 승인 요청을 규칙과 보조 모델로 검토하거나 사용자가 직접 승인하도록 설정합니다. 승인된 도구는 Pi의 원래 실행기로 실행합니다. OS 샌드박스나 파일·네트워크 격리를 구성하지 않습니다. Codex 공개 소스 [`rust-v0.160.0`](https://github.com/openai/codex/tree/a956835d020762cb2b570053af06f643a11c0ecc)의 공개 승인 정책을 참고했습니다.
|
|
6
|
+
|
|
7
|
+
## 설치
|
|
8
|
+
|
|
9
|
+
`0.2.0`은 네이티브 규칙 실행 파일을 TypeScript 엔진으로 교체해 JavaScript로 배포하고, `vendor`의 재포장 Pi SDK를 제거합니다. 이 확장에는 Rust 컴파일러나 플랫폼별 규칙 바이너리가 필요하지 않습니다. Node.js와 Pi 호스트는 계속 필요하며, Pi 자체의 네이티브 모듈은 별개입니다.
|
|
10
|
+
|
|
11
|
+
```sh
|
|
12
|
+
pi install npm:pi-codex-auto-review@0.2.0
|
|
13
|
+
pi list
|
|
14
|
+
```
|
|
15
|
+
|
|
16
|
+
확장 로딩 실패를 Pi가 무시할 수 있으므로 보호 시작이 필수인 실행은 [사용법](docs/usage.ko.md)의 CLI·SDK 진입점을 사용합니다.
|
|
17
|
+
|
|
18
|
+
## 동작 흐름
|
|
19
|
+
|
|
20
|
+
1. **정책 판단** — 절대 차단 경로와 `commandRules`를 먼저 평가합니다. 차단 경로는 모델 검토나 저장 승인으로 해제하지 않습니다.
|
|
21
|
+
2. **자동 검토** — 남은 작업은 검토 모델이 위험 등급과 결과를 판정합니다.
|
|
22
|
+
3. **승인** — 남은 범위는 사용자가 확정합니다.
|
|
23
|
+
4. **Pi 실행** — 승인된 작업을 원래 SDK 도구로 실행하며 취소 신호와 호출자 옵션을 전달합니다.
|
|
24
|
+
|
|
25
|
+
## 승인 설정
|
|
26
|
+
|
|
27
|
+
- `/approve`: **Approve for me**(보조 모델 검토) 또는 **Ask for approval**(사용자 승인)을 선택합니다.
|
|
28
|
+
- `/approve-model`: Pi의 현재 `/scoped-models` 범위에서 등록된 모델을 검색해 보조 검토 모델을 선택합니다. **Use current Pi model**로 현재 주 모델을 사용하도록 되돌릴 수 있습니다.
|
|
29
|
+
|
|
30
|
+
선택은 `<agentDir>/guard/settings.json`에 저장되고 다음 실행에도 적용됩니다. 주 대화 모델은 바뀌지 않습니다. 취소하면 기존 설정을 유지합니다.
|
|
31
|
+
|
|
32
|
+
## 요구 사항
|
|
33
|
+
|
|
34
|
+
| 항목 | 요구 |
|
|
35
|
+
| --- | --- |
|
|
36
|
+
| Node.js | 22.19 이상 |
|
|
37
|
+
| Pi | 0.99.1 또는 1.0.0 |
|
|
38
|
+
| 현재 소스 빌드 | TypeScript 사용. Rust 컴파일러와 플랫폼별 규칙 실행 파일 불필요 |
|
|
39
|
+
| 규칙 실행 | 비동기 평가는 Node.js 작업 스레드, 동기 API는 Node.js 자식 프로세스 |
|
|
40
|
+
|
|
41
|
+
## 보호 경계
|
|
42
|
+
|
|
43
|
+
- 모드는 `workspace-write`(작업 공간과 기본 임시 경로 쓰기 허용)와 `read-only`입니다.
|
|
44
|
+
- 제어·인증 경로와 프로젝트의 `.pi` 설정·확장 코드, 신뢰한 확장의 코드 디렉터리는 모델 쓰기를 절대 차단합니다.
|
|
45
|
+
- 일반 범위를 넘는 파일 접근, 검토 규칙, 해석하지 못하는 명령은 실행 전에 검토합니다. 읽기와 기존 범위 안의 일반 작업은 정책에 따라 실행합니다.
|
|
46
|
+
- 승인은 한 번, 세션, 규칙 저장 중 선택하며, 저장 승인은 정확한 도구·입력·정책에 묶입니다.
|
|
47
|
+
- 자동 검토는 기본적으로 현재 모델로 수행하고, 반복 거부되면 실제 작업을 중단합니다. 검토 오류는 승인으로 바뀌지 않습니다.
|
|
48
|
+
- MCP 도구 승인과 프로젝트 지침 탐색도 같은 신뢰·검토 경계 안에 둡니다.
|
|
49
|
+
|
|
50
|
+
각 결합 조건과 설정은 [사용법](docs/usage.ko.md) 문서에 있습니다.
|
|
51
|
+
|
|
52
|
+
## 한계와 비보장
|
|
53
|
+
|
|
54
|
+
- 승인된 셸과 인터프리터는 호스트 권한으로 실행합니다. 검토에 표시한 파일·도메인 범위는 OS가 강제하는 접근 제한이 아닙니다.
|
|
55
|
+
- 재귀 디렉터리 탐색·하드링크 전수 검사·네트워크 프록시를 구성하지 않습니다. 간접 파일 접근과 실행 중 목적지 변경을 격리하지 않습니다.
|
|
56
|
+
- Pi, 신뢰한 확장 코드와 외부 MCP 서버의 내부 실행은 신뢰 경계에 포함됩니다.
|
|
57
|
+
- 이미 MCP 서버에 전달한 요청의 취소 효과는 외부 공급자의 구현에 달려 있습니다.
|
|
58
|
+
- 공개 정책·흐름의 호환성 검증은 독점 Codex 모델과 모든 판단이 같다는 뜻이 아닙니다.
|
|
59
|
+
- 별도로 설치한 Pi 호스트의 의존성을 자동으로 교체하지 않습니다. 이 저장소의 조치 근거는 [의존성 보안](docs/security/dependencies.ko.md) 문서에 있습니다.
|
|
60
|
+
|
|
61
|
+
## 검증
|
|
62
|
+
|
|
63
|
+
```sh
|
|
64
|
+
npm run verify:guard
|
|
65
|
+
```
|
|
66
|
+
|
|
67
|
+
`verify:guard`는 빌드와 현재 운영체제의 전체 로컬 검증을 실행합니다. 다른 운영체제와 실모델의 결과는 별도 실행 근거로 기록하며 로컬 통과로 대신하지 않습니다.
|
|
68
|
+
|
|
69
|
+
- `npm run test:*` 단일 검증은 실제 자격 증명이나 유료 모델을 사용하지 않습니다. 환경 제한·의존성 부재는 통과로 처리하지 않습니다.
|
|
70
|
+
- `npm run verify:platform`은 현재 운영체제의 전체 검증을 실행합니다.
|
|
71
|
+
- GitHub Actions의 `자동 검토 운영체제 검증`은 실제 Linux x64 검사와 Docker 이미지·결과 반출을 수행합니다. workflow에는 Ollama 키를 전달하지 않습니다.
|
|
72
|
+
- Windows의 `verify:windows`는 규칙 엔진·승인 정책·파일 실행과 취소를 검증합니다. 전체 셸 실행 지원을 검증하는 명령은 아닙니다.
|
|
73
|
+
- Docker 컨테이너 검증 활용은 [사용법의 Docker 절](docs/usage.ko.md#docker에서-ollama-cloud-검증)에 있습니다.
|
|
74
|
+
- 각 실행은 `.reports/pi-guard/runs/<실행 ID>/<플랫폼>/`에 저장되고, 보호·허용·차단 사례는 [보호 경계 검증표](docs/testing/auto-review-protection.ko.md)에 있습니다.
|
|
75
|
+
|
|
76
|
+
## 문서
|
|
77
|
+
|
|
78
|
+
- [사용법](docs/usage.ko.md) · [English](docs/usage.md) — 설치, 소스 빌드, CLI·SDK, 정책, Docker 검증
|
|
79
|
+
- [배포 안내](docs/publishing.ko.md) · [English](docs/publishing.md) — `pnpm release`, npm Trusted Publishing, GitHub Actions
|
|
80
|
+
- [의존성 보안](docs/security/dependencies.ko.md) · [English](docs/security/dependencies.md) — 감사 항목, 수정 근거와 적용 범위
|
|
81
|
+
- [보호 경계 검증](docs/testing/auto-review-protection.ko.md) · [English](docs/testing/auto-review-protection.md) — 허용·차단 사례, 실패, 취소와 미검증 범위
|
|
82
|
+
|
|
83
|
+
## 라이선스
|
|
84
|
+
|
|
85
|
+
[Apache-2.0](LICENSE). Codex 규칙 계약의 TypeScript 이식과 포함된 정책의 출처 표시는 [NOTICE](NOTICE)에 유지합니다.
|
package/README.md
CHANGED
|
@@ -1,86 +1,85 @@
|
|
|
1
1
|
# pi-codex-auto-review
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
**English** | [한국어](README.ko.md)
|
|
4
4
|
|
|
5
|
-
|
|
5
|
+
A Pi extension for automatic execution approval review, inspired by Codex's “Approve for me”. Review approval requests with rules and a secondary model, or ask the user to approve them. Approved tools run through Pi's original executor. The extension does not configure an OS sandbox or file and network isolation. It draws on the public approval policies in Codex [`rust-v0.160.0`](https://github.com/openai/codex/tree/a956835d020762cb2b570053af06f643a11c0ecc).
|
|
6
6
|
|
|
7
|
-
##
|
|
7
|
+
## Installation
|
|
8
8
|
|
|
9
|
-
|
|
9
|
+
Version `0.2.0` replaces the native rule executables with a TypeScript engine distributed as JavaScript and removes the repackaged Pi SDK under `vendor`. The extension requires no Rust compiler or platform-specific rule binary. Node.js and the Pi host are still required; Pi's own native modules are separate.
|
|
10
10
|
|
|
11
11
|
```sh
|
|
12
|
-
pi install npm:pi-codex-auto-review@0.
|
|
12
|
+
pi install npm:pi-codex-auto-review@0.2.0
|
|
13
13
|
pi list
|
|
14
14
|
```
|
|
15
15
|
|
|
16
|
-
|
|
16
|
+
Pi can ignore extension loading failures. If approval protection must be ready before execution starts, use the CLI or SDK entry points in the [usage guide](docs/usage.md).
|
|
17
17
|
|
|
18
|
-
##
|
|
18
|
+
## How it works
|
|
19
19
|
|
|
20
|
-
1.
|
|
21
|
-
2.
|
|
22
|
-
3.
|
|
23
|
-
4. **Pi
|
|
20
|
+
1. **Policy evaluation** — Evaluate protected paths and `commandRules` first. Model review and saved approvals cannot override protected paths.
|
|
21
|
+
2. **Automatic review** — The review model assesses the risk and outcome of remaining operations.
|
|
22
|
+
3. **Approval** — The user confirms operations that still require approval.
|
|
23
|
+
4. **Pi execution** — Run approved operations through the original SDK tools, preserving cancellation signals and caller options.
|
|
24
24
|
|
|
25
|
-
##
|
|
25
|
+
## Approval settings
|
|
26
26
|
|
|
27
|
-
- `/approve`: **Approve for me**(
|
|
28
|
-
- `/approve-model`:
|
|
27
|
+
- `/approve`: Choose **Approve for me** (secondary model review) or **Ask for approval** (user approval).
|
|
28
|
+
- `/approve-model`: Search registered models and choose a secondary review model within Pi's current `/scoped-models` scope. Choose **Use current Pi model** to return to the main model.
|
|
29
29
|
|
|
30
|
-
|
|
30
|
+
Selections are saved to `<agentDir>/guard/settings.json` and persist across runs. The main conversation model stays unchanged. Cancelling preserves the existing settings.
|
|
31
31
|
|
|
32
|
-
##
|
|
32
|
+
## Requirements
|
|
33
33
|
|
|
34
|
-
|
|
|
34
|
+
| Component | Requirement |
|
|
35
35
|
| --- | --- |
|
|
36
|
-
| Node.js | 22.19
|
|
37
|
-
| Pi | 0.99.1
|
|
38
|
-
|
|
|
39
|
-
|
|
|
36
|
+
| Node.js | 22.19 or later |
|
|
37
|
+
| Pi | 0.99.1 or 1.0.0 |
|
|
38
|
+
| Current source build | TypeScript; no Rust compiler or platform-specific rule executable |
|
|
39
|
+
| Rule runtime | Node.js worker for asynchronous evaluation; Node.js child process for the synchronous API |
|
|
40
40
|
|
|
41
|
-
##
|
|
41
|
+
## Protection boundaries
|
|
42
42
|
|
|
43
|
-
-
|
|
44
|
-
-
|
|
45
|
-
-
|
|
46
|
-
-
|
|
47
|
-
-
|
|
48
|
-
- MCP
|
|
43
|
+
- Modes are `workspace-write` (writes to the workspace and default temporary paths) and `read-only`.
|
|
44
|
+
- Model writes to control and authentication paths, project `.pi` settings and extension code, and trusted extension code directories are always blocked.
|
|
45
|
+
- File access outside the normal scope, review rules, and commands that cannot be interpreted are reviewed before execution. Reads and ordinary operations within scope follow the policy.
|
|
46
|
+
- Approvals can apply once, for the session, or as a saved rule. Saved approvals are bound to the exact tool, input, and policy.
|
|
47
|
+
- Automatic review uses the current model by default and stops the actual task after repeated denials. Review errors never become approvals.
|
|
48
|
+
- MCP tool approvals and project instruction discovery follow the same trust and review boundaries.
|
|
49
49
|
|
|
50
|
-
|
|
50
|
+
See the [usage guide](docs/usage.md) for configuration and the exact conditions that bind approvals.
|
|
51
51
|
|
|
52
|
-
##
|
|
52
|
+
## Limitations
|
|
53
53
|
|
|
54
|
-
-
|
|
55
|
-
-
|
|
56
|
-
- Pi,
|
|
57
|
-
-
|
|
58
|
-
-
|
|
59
|
-
-
|
|
54
|
+
- Approved shells and interpreters run with host permissions. The file and domain scope shown during review is not an OS-enforced access restriction.
|
|
55
|
+
- The extension does not configure recursive directory scans, exhaustive hard-link checks, or network proxies. It does not isolate indirect file access or destination changes during execution.
|
|
56
|
+
- Pi, trusted extension code, and execution inside external MCP servers are part of the trust boundary.
|
|
57
|
+
- Cancellation of requests already sent to an MCP server depends on the external provider's implementation.
|
|
58
|
+
- Compatibility checks for public policies and flows do not establish identical decisions to the proprietary Codex model.
|
|
59
|
+
- The extension does not automatically replace dependencies in a separately installed Pi host. See [dependency security](docs/security/dependencies.md) for this repository's remediation evidence.
|
|
60
60
|
|
|
61
|
-
##
|
|
61
|
+
## Verification
|
|
62
62
|
|
|
63
63
|
```sh
|
|
64
64
|
npm run verify:guard
|
|
65
65
|
```
|
|
66
66
|
|
|
67
|
-
`verify:guard
|
|
67
|
+
`verify:guard` builds the project and runs all local checks for the current operating system. Results for other operating systems and live models require separate execution evidence.
|
|
68
68
|
|
|
69
|
-
- `npm run test:*`
|
|
70
|
-
- `npm run verify:platform
|
|
71
|
-
- GitHub Actions
|
|
72
|
-
- Windows
|
|
73
|
-
-
|
|
74
|
-
-
|
|
69
|
+
- Individual `npm run test:*` checks do not use real credentials or paid models. Environment restrictions and missing dependencies are not treated as passes.
|
|
70
|
+
- `npm run verify:platform` runs the full checks for the current operating system.
|
|
71
|
+
- The GitHub Actions workflow `자동 검토 운영체제 검증` runs on Linux x64 and exports the Docker image and results. It receives no Ollama key.
|
|
72
|
+
- Windows `verify:windows` checks the rule engine, approval policy, file execution, and cancellation. It does not verify full shell execution support.
|
|
73
|
+
- See the [Docker section](docs/usage.md#ollama-cloud-verification-in-docker) for container verification.
|
|
74
|
+
- Each run is stored under `.reports/pi-guard/runs/<run ID>/<platform>/`. See the [protection verification matrix](docs/testing/auto-review-protection.md) for allowed, blocked, and failure cases.
|
|
75
75
|
|
|
76
|
-
##
|
|
76
|
+
## Documentation
|
|
77
77
|
|
|
78
|
-
- [
|
|
79
|
-
- [
|
|
80
|
-
- [
|
|
81
|
-
- [
|
|
82
|
-
- [인계 자료](https://github.com/buYoung/pi-codex-auto-review/tree/HEAD/docs/handoffs/auto-review) — 이전 플랫폼·실모델 검증의 실행 근거와 소스 해시. 과거 결과와 현재 소스를 구분합니다.
|
|
78
|
+
- [Usage](docs/usage.md) · [한국어](docs/usage.ko.md) — Installation, source builds, CLI, SDK, policies, and Docker verification.
|
|
79
|
+
- [Publishing](docs/publishing.md) · [한국어](docs/publishing.ko.md) — `pnpm release`, npm Trusted Publishing, and GitHub Actions.
|
|
80
|
+
- [Dependency security](docs/security/dependencies.md) · [한국어](docs/security/dependencies.ko.md) — Audit findings, fixes, and their scope.
|
|
81
|
+
- [Protection verification](docs/testing/auto-review-protection.md) · [한국어](docs/testing/auto-review-protection.ko.md) — Allowed and blocked cases, failures, cancellation, and unverified boundaries.
|
|
83
82
|
|
|
84
|
-
##
|
|
83
|
+
## License
|
|
85
84
|
|
|
86
|
-
[Apache-2.0](LICENSE).
|
|
85
|
+
[Apache-2.0](LICENSE). Attribution for the TypeScript port of Codex rule contracts and the included policies is preserved in [NOTICE](NOTICE).
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import { type ExtensionAPI } from
|
|
2
|
-
import type {
|
|
3
|
-
import type {
|
|
1
|
+
import { type ExtensionAPI } from "@earendil-works/pi-coding-agent";
|
|
2
|
+
import type { ApprovalSettingsStore } from "./approval-settings.js";
|
|
3
|
+
import type { GuardController } from "./tools/controller.js";
|
|
4
4
|
export declare function registerApprovalCommands(pi: ExtensionAPI, guard: GuardController, store: ApprovalSettingsStore): void;
|
|
@@ -1,9 +1,64 @@
|
|
|
1
|
-
import { getSelectListTheme } from
|
|
2
|
-
import { Container, Input,
|
|
3
|
-
import {
|
|
4
|
-
import {
|
|
5
|
-
|
|
6
|
-
const
|
|
1
|
+
import { getSelectListTheme, } from "@earendil-works/pi-coding-agent";
|
|
2
|
+
import { Container, fuzzyFilter, Input, Key, matchesKey, SelectList, Spacer, Text, } from "@earendil-works/pi-tui";
|
|
3
|
+
import { redact } from "./audit.js";
|
|
4
|
+
import { canonicalJson, GuardError } from "./contracts.js";
|
|
5
|
+
import { validateSettings } from "./policy/index.js";
|
|
6
|
+
const CURRENT_MODEL = "current";
|
|
7
|
+
const modeNames = {
|
|
8
|
+
auto_review: "Approve for me",
|
|
9
|
+
user: "Ask for approval",
|
|
10
|
+
};
|
|
11
|
+
// Match the public Codex permission picker: https://learn.chatgpt.com/docs/security-administration
|
|
12
|
+
const approvalModes = [
|
|
13
|
+
{
|
|
14
|
+
value: "auto_review",
|
|
15
|
+
label: modeNames.auto_review,
|
|
16
|
+
description: "Only ask for actions detected as potentially unsafe",
|
|
17
|
+
},
|
|
18
|
+
{
|
|
19
|
+
value: "user",
|
|
20
|
+
label: modeNames.user,
|
|
21
|
+
description: "Always ask to edit external files and use the internet",
|
|
22
|
+
},
|
|
23
|
+
];
|
|
24
|
+
class ApprovalModePicker extends Container {
|
|
25
|
+
list;
|
|
26
|
+
constructor(current, finish) {
|
|
27
|
+
super();
|
|
28
|
+
this.addChild(new Text(`Approval mode — Current: ${modeNames[current]}`, 0, 0));
|
|
29
|
+
this.addChild(new Spacer(1));
|
|
30
|
+
this.list = new SelectList(approvalModes, approvalModes.length, getSelectListTheme(), { maxPrimaryColumnWidth: 22 });
|
|
31
|
+
this.list.setSelectedIndex(approvalModes.findIndex((item) => item.value === current));
|
|
32
|
+
this.list.onSelect = (item) => finish(item.value);
|
|
33
|
+
this.list.onCancel = () => finish(undefined);
|
|
34
|
+
this.addChild(this.list);
|
|
35
|
+
this.addChild(new Spacer(1));
|
|
36
|
+
const description = new Text(this.list.getSelectedItem()?.description ?? "", 0, 0);
|
|
37
|
+
this.list.onSelectionChange = (item) => description.setText(item.description ?? "");
|
|
38
|
+
this.addChild(description);
|
|
39
|
+
this.addChild(new Spacer(1));
|
|
40
|
+
this.addChild(new Text("↑↓ Select · Enter Apply · Esc Cancel", 0, 0));
|
|
41
|
+
}
|
|
42
|
+
handleInput(data) {
|
|
43
|
+
this.list.handleInput(data);
|
|
44
|
+
}
|
|
45
|
+
}
|
|
46
|
+
function availableReviewModels(context) {
|
|
47
|
+
const available = context.modelRegistry.getAvailable();
|
|
48
|
+
const scoped = context.scopedModels ?? [];
|
|
49
|
+
if (!scoped.length)
|
|
50
|
+
return available;
|
|
51
|
+
const key = (model) => canonicalJson({ provider: model.provider, id: model.id });
|
|
52
|
+
const byIdentity = new Map(available.map((model) => [key(model), model]));
|
|
53
|
+
const seen = new Set();
|
|
54
|
+
return scoped.flatMap(({ model }) => {
|
|
55
|
+
const identity = key(model), registered = byIdentity.get(identity);
|
|
56
|
+
if (!registered || seen.has(identity))
|
|
57
|
+
return [];
|
|
58
|
+
seen.add(identity);
|
|
59
|
+
return [registered];
|
|
60
|
+
});
|
|
61
|
+
}
|
|
7
62
|
class ApprovalModelPicker extends Container {
|
|
8
63
|
items;
|
|
9
64
|
finish;
|
|
@@ -11,37 +66,47 @@ class ApprovalModelPicker extends Container {
|
|
|
11
66
|
list;
|
|
12
67
|
results = new Container();
|
|
13
68
|
filtered;
|
|
14
|
-
get focused() {
|
|
15
|
-
|
|
69
|
+
get focused() {
|
|
70
|
+
return this.input.focused;
|
|
71
|
+
}
|
|
72
|
+
set focused(value) {
|
|
73
|
+
this.input.focused = value;
|
|
74
|
+
}
|
|
16
75
|
constructor(items, selected, finish, search) {
|
|
17
76
|
super();
|
|
18
77
|
this.items = items;
|
|
19
78
|
this.finish = finish;
|
|
20
|
-
this.addChild(new Text(
|
|
79
|
+
this.addChild(new Text("Approval review model", 0, 0));
|
|
21
80
|
this.addChild(new Spacer(1));
|
|
22
81
|
this.addChild(this.input);
|
|
23
82
|
this.addChild(new Spacer(1));
|
|
24
83
|
this.addChild(this.results);
|
|
25
|
-
this.addChild(new Text(
|
|
84
|
+
this.addChild(new Text("Search · ↑↓ Select · Enter Apply · Esc Cancel", 0, 0));
|
|
26
85
|
this.filtered = items;
|
|
27
86
|
this.input.setValue(search);
|
|
28
87
|
this.filter(search);
|
|
29
|
-
const index = this.filtered.findIndex(item => item.value === selected);
|
|
88
|
+
const index = this.filtered.findIndex((item) => item.value === selected);
|
|
30
89
|
if (index >= 0)
|
|
31
90
|
this.list.setSelectedIndex(index);
|
|
32
91
|
}
|
|
33
92
|
filter(query) {
|
|
34
|
-
this.filtered = query
|
|
93
|
+
this.filtered = query
|
|
94
|
+
? fuzzyFilter(this.items, query, (item) => `${item.label} ${item.description ?? ""}`)
|
|
95
|
+
: this.items;
|
|
35
96
|
this.list = new SelectList(this.filtered, 12, getSelectListTheme());
|
|
36
|
-
this.list.onSelect = item => this.finish(item.value);
|
|
97
|
+
this.list.onSelect = (item) => this.finish(item.value);
|
|
37
98
|
this.list.onCancel = () => this.finish(undefined);
|
|
38
99
|
this.results.clear();
|
|
39
|
-
this.results.addChild(this.filtered.length
|
|
100
|
+
this.results.addChild(this.filtered.length
|
|
101
|
+
? this.list
|
|
102
|
+
: new Text("No matching models.", 0, 0));
|
|
40
103
|
}
|
|
41
104
|
handleInput(data) {
|
|
42
105
|
if (matchesKey(data, Key.escape))
|
|
43
106
|
this.finish(undefined);
|
|
44
|
-
else if (matchesKey(data, Key.enter) ||
|
|
107
|
+
else if (matchesKey(data, Key.enter) ||
|
|
108
|
+
matchesKey(data, Key.up) ||
|
|
109
|
+
matchesKey(data, Key.down))
|
|
45
110
|
this.list.handleInput(data);
|
|
46
111
|
else {
|
|
47
112
|
const before = this.input.getValue();
|
|
@@ -52,52 +117,114 @@ class ApprovalModelPicker extends Container {
|
|
|
52
117
|
}
|
|
53
118
|
}
|
|
54
119
|
async function chooseReviewModel(context, current, search) {
|
|
55
|
-
const models = context
|
|
120
|
+
const models = availableReviewModels(context);
|
|
56
121
|
const items = [
|
|
57
|
-
{
|
|
58
|
-
|
|
122
|
+
{
|
|
123
|
+
value: CURRENT_MODEL,
|
|
124
|
+
label: "Use current Pi model",
|
|
125
|
+
description: "Follow the model selected for the main task.",
|
|
126
|
+
},
|
|
127
|
+
...models.map((model) => ({
|
|
128
|
+
value: canonicalJson({ provider: model.provider, id: model.id }),
|
|
129
|
+
label: model.name || model.id,
|
|
130
|
+
description: `${model.provider}/${model.id}`,
|
|
131
|
+
})),
|
|
59
132
|
];
|
|
60
133
|
const selected = current ? canonicalJson(current) : CURRENT_MODEL;
|
|
61
|
-
const result = context.mode ===
|
|
62
|
-
? await context.ui
|
|
134
|
+
const result = context.mode === "rpc"
|
|
135
|
+
? await context.ui
|
|
136
|
+
.select("Approval review model", items.map((item) => `${item.label} — ${item.description}`))
|
|
137
|
+
.then((value) => value === undefined
|
|
138
|
+
? undefined
|
|
139
|
+
: items[items.findIndex((item) => `${item.label} — ${item.description}` ===
|
|
140
|
+
value)]?.value)
|
|
63
141
|
: await context.ui.custom((_tui, _theme, _keys, done) => new ApprovalModelPicker(items, selected, done, search));
|
|
64
142
|
if (result === undefined)
|
|
65
143
|
return undefined;
|
|
66
|
-
return result === CURRENT_MODEL
|
|
144
|
+
return result === CURRENT_MODEL
|
|
145
|
+
? null
|
|
146
|
+
: JSON.parse(result);
|
|
147
|
+
}
|
|
148
|
+
async function retryDeniedAction(pi, guard, context) {
|
|
149
|
+
const denials = [...guard.approvals.lifecycle.recentDenials].reverse();
|
|
150
|
+
if (!denials.length) {
|
|
151
|
+
context.ui.notify("No recent denied actions to review again.", "info");
|
|
152
|
+
return;
|
|
153
|
+
}
|
|
154
|
+
const choices = denials.map((item) => `${item.action.tool} | ${redact(canonicalJson(item.action.args))} | ${item.assessment.rationale} | ${item.id}`);
|
|
155
|
+
const selected = await context.ui.select("Choose a denied action to review again once", choices);
|
|
156
|
+
const index = choices.indexOf(selected ?? "");
|
|
157
|
+
const denial = denials[index];
|
|
158
|
+
if (!denial)
|
|
159
|
+
return;
|
|
160
|
+
const retry = await guard.authorizeRetry(denial.id, context);
|
|
161
|
+
if (retry.denial.action.source === "user-bash") {
|
|
162
|
+
await guard.retryUserBash(retry.denial.action, context);
|
|
163
|
+
context.ui.notify("The selected command was reviewed again and executed.", "info");
|
|
164
|
+
return;
|
|
165
|
+
}
|
|
166
|
+
const instruction = retry.denial.action.source === "nested"
|
|
167
|
+
? "Invoke only this exact tool through codemode to preserve the original nested source."
|
|
168
|
+
: "Retry only this exact tool action.";
|
|
169
|
+
pi.sendUserMessage(`${instruction}\nTool: ${retry.denial.action.tool}\nArguments: ${canonicalJson(retry.args)}\nThe user selected denial ${retry.denial.id} for one retry. The controller holds a one-use exact-action marker; automatic review and policy still apply. Do not repeat unrelated earlier side effects.`, { expandPromptTemplates: false });
|
|
67
170
|
}
|
|
68
171
|
export function registerApprovalCommands(pi, guard, store) {
|
|
69
172
|
const requireUI = (context) => {
|
|
70
173
|
if (!context.hasUI)
|
|
71
|
-
throw new GuardError(
|
|
174
|
+
throw new GuardError("APPROVAL_UI_UNAVAILABLE", "Approval settings require an interactive Pi session");
|
|
72
175
|
};
|
|
73
176
|
const apply = async (patch, context) => {
|
|
74
|
-
await guard.updateSettings(current => validateSettings({ ...current, ...patch }), context.cwd, settings => store.save(settings));
|
|
75
|
-
context.ui.setStatus(
|
|
177
|
+
await guard.updateSettings((current) => validateSettings({ ...current, ...patch }), context.cwd, (settings) => store.save(settings));
|
|
178
|
+
context.ui.setStatus("auto-review", undefined);
|
|
76
179
|
};
|
|
77
|
-
pi.registerCommand(
|
|
180
|
+
pi.registerCommand("approve", {
|
|
181
|
+
description: "Choose an approval mode, or use /approve retry to review a denied action again once.",
|
|
182
|
+
handler: async (args, context) => {
|
|
78
183
|
requireUI(context);
|
|
79
184
|
await context.waitForIdle();
|
|
185
|
+
if (args.trim() === "retry") {
|
|
186
|
+
await retryDeniedAction(pi, guard, context);
|
|
187
|
+
return;
|
|
188
|
+
}
|
|
189
|
+
if (args.trim())
|
|
190
|
+
throw new GuardError("INVALID_APPROVAL_COMMAND", "Use /approve to choose a mode or /approve retry to review a denied action again.");
|
|
80
191
|
const current = guard.options.settings;
|
|
81
|
-
const
|
|
192
|
+
const choices = approvalModes.map((item) => `${item.label} — ${item.description}`);
|
|
193
|
+
const choice = context.mode === "rpc"
|
|
194
|
+
? await context.ui
|
|
195
|
+
.select(`Approval mode — Current: ${modeNames[current.approvalsReviewer]}`, choices)
|
|
196
|
+
.then((selected) => approvalModes[choices.indexOf(selected ?? "")]
|
|
197
|
+
?.value)
|
|
198
|
+
: await context.ui.custom((_tui, _theme, _keys, done) => new ApprovalModePicker(current.approvalsReviewer, done));
|
|
82
199
|
if (choice === undefined)
|
|
83
200
|
return;
|
|
84
|
-
const reviewer = choice ===
|
|
201
|
+
const reviewer = choice === "auto_review"
|
|
202
|
+
? "auto_review"
|
|
203
|
+
: choice === "user"
|
|
204
|
+
? "user"
|
|
205
|
+
: undefined;
|
|
85
206
|
if (!reviewer)
|
|
86
207
|
return;
|
|
87
208
|
await apply({ approvalsReviewer: reviewer }, context);
|
|
88
|
-
context.ui.notify(
|
|
89
|
-
}
|
|
90
|
-
|
|
209
|
+
context.ui.notify(`Approval mode: ${modeNames[reviewer]}`, "info");
|
|
210
|
+
},
|
|
211
|
+
});
|
|
212
|
+
pi.registerCommand("approve-model", {
|
|
213
|
+
description: "Choose an approval review model from /scoped-models.",
|
|
214
|
+
handler: async (args, context) => {
|
|
91
215
|
requireUI(context);
|
|
92
216
|
await context.waitForIdle();
|
|
93
217
|
const current = guard.options.settings;
|
|
94
218
|
const model = await chooseReviewModel(context, current.reviewModel, args.trim());
|
|
95
219
|
if (model === undefined)
|
|
96
220
|
return;
|
|
97
|
-
if (model &&
|
|
98
|
-
|
|
221
|
+
if (model &&
|
|
222
|
+
!availableReviewModels(context).some((candidate) => candidate.provider === model.provider &&
|
|
223
|
+
candidate.id === model.id))
|
|
224
|
+
throw new GuardError("MODEL_UNAVAILABLE", "Selected review model is no longer available in the current model scope");
|
|
99
225
|
await apply({ reviewModel: model }, context);
|
|
100
|
-
context.ui.notify(
|
|
101
|
-
}
|
|
226
|
+
context.ui.notify(`Approval review model: ${model ? `${model.provider}/${model.id}` : "Use current Pi model"}`, "info");
|
|
227
|
+
},
|
|
228
|
+
});
|
|
102
229
|
}
|
|
103
230
|
//# sourceMappingURL=approval-commands.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"approval-commands.js","sourceRoot":"","sources":["../src/approval-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAmD,MAAM,iCAAiC,CAAC;AACtH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAmC,MAAM,wBAAwB,CAAC;AACnJ,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAsB,MAAM,mBAAmB,CAAC;AAKzE,MAAM,aAAa,GAAG,SAAS,CAAC;AAChC,MAAM,SAAS,GAAG,EAAC,WAAW,EAAC,gBAAgB,EAAC,IAAI,EAAC,kBAAkB,EAAU,CAAC;AAElF,MAAM,mBAAoB,SAAQ,SAAS;IAOZ;IAAwD;IANpE,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAc;IACT,OAAO,GAAG,IAAI,SAAS,EAAE,CAAC;IACnC,QAAQ,CAAe;IAC/B,IAAI,OAAO,KAAc,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,KAAc,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC;IAC3D,YAA6B,KAAmB,EAAE,QAAgB,EAAmB,MAA2C,EAAE,MAAc;QAC9I,KAAK,EAAE,CAAC;QADmB,UAAK,GAAL,KAAK,CAAc;QAAqC,WAAM,GAAN,MAAM,CAAqC;QAE9H,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,aAAa,EAAC,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,gCAAgC,EAAC,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;QACvE,IAAI,KAAK,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IACO,MAAM,CAAC,KAAa;QAC1B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAC,KAAK,EAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACrH,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAC,EAAE,EAAC,kBAAkB,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAC,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,WAAW,CAAC,IAAY;QACtB,IAAI,UAAU,CAAC,IAAI,EAAC,GAAG,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aACnD,IAAI,UAAU,CAAC,IAAI,EAAC,GAAG,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,EAAC,GAAG,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,IAAI,EAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;aACpH,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,iBAAiB,CAAC,OAAgC,EAAE,OAAoB,EAAE,MAAc;IACrG,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;IACpD,MAAM,KAAK,GAAiB;QAC1B,EAAC,KAAK,EAAC,aAAa,EAAC,KAAK,EAAC,aAAa,EAAC,WAAW,EAAC,oBAAoB,EAAC;QAC1E,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAC,KAAK,EAAC,aAAa,CAAC,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,EAAE,EAAC,KAAK,CAAC,EAAE,EAAC,CAAC,EAAC,KAAK,EAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,EAAC,WAAW,EAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,EAAE,EAAC,CAAC,CAAC;KAChK,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,KAAK,KAAK;QACnC,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,EAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;QACzO,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CAAqB,CAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,IAAI,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,KAAK,EAAC,QAAQ,EAAC,IAAI,EAAC,MAAM,CAAC,CAAC,CAAC;IACjI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAgB,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,EAAgB,EAAE,KAAsB,EAAE,KAA4B;IAC7G,MAAM,SAAS,GAAG,CAAC,OAAgC,EAAE,EAAE;QACrD,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,EAAC,qDAAqD,CAAC,CAAC;IAC5H,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,EAAE,KAAqE,EAAE,OAAgC,EAAE,EAAE;QAC9H,MAAM,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAC,GAAG,OAAO,EAAC,GAAG,KAAK,EAAC,CAAC,EAAC,OAAO,CAAC,GAAG,EAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5H,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAC,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC;IACF,EAAE,CAAC,eAAe,CAAC,SAAS,EAAC,EAAC,WAAW,EAAC,kDAAkD,EAAC,OAAO,EAAC,KAAK,EAAC,KAAK,EAAC,OAAO,EAAE,EAAE;YAC1H,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,EAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACzH,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO;YACjC,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACnH,IAAI,CAAC,QAAQ;gBAAE,OAAO;YACtB,MAAM,KAAK,CAAC,EAAC,iBAAiB,EAAC,QAAQ,EAAC,EAAC,OAAO,CAAC,CAAC;YAClD,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC;QAC5D,CAAC,EAAC,CAAC,CAAC;IACJ,EAAE,CAAC,eAAe,CAAC,eAAe,EAAC,EAAC,WAAW,EAAC,yBAAyB,EAAC,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,OAAO,EAAE,EAAE;YACtG,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAC,OAAO,CAAC,WAAW,EAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/E,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAChC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAC,+CAA+C,CAAC,CAAC;YAC7J,MAAM,KAAK,CAAC,EAAC,WAAW,EAAC,KAAK,EAAC,EAAC,OAAO,CAAC,CAAC;YACzC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,EAAC,MAAM,CAAC,CAAC;QACnG,CAAC,EAAC,CAAC,CAAC;AACN,CAAC"}
|
|
1
|
+
{"version":3,"file":"approval-commands.js","sourceRoot":"","sources":["../src/approval-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,kBAAkB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACH,SAAS,EAET,WAAW,EACX,KAAK,EACL,GAAG,EACH,UAAU,EAEV,UAAU,EACV,MAAM,EACN,IAAI,GACP,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAsB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAIzE,MAAM,aAAa,GAAG,SAAS,CAAC;AAChC,MAAM,SAAS,GAAG;IACd,WAAW,EAAE,gBAAgB;IAC7B,IAAI,EAAE,kBAAkB;CAClB,CAAC;AACX,mGAAmG;AACnG,MAAM,aAAa,GAAiB;IAChC;QACI,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,SAAS,CAAC,WAAW;QAC5B,WAAW,EAAE,qDAAqD;KACrE;IACD;QACI,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,SAAS,CAAC,IAAI;QACrB,WAAW,EAAE,wDAAwD;KACxE;CACJ,CAAC;AAEF,MAAM,kBAAmB,SAAQ,SAAS;IACrB,IAAI,CAAa;IAClC,YACI,OAA2C,EAC3C,MAA2C;QAE3C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,CACT,IAAI,IAAI,CAAC,4BAA4B,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CACnE,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CACtB,aAAa,EACb,aAAa,CAAC,MAAM,EACpB,kBAAkB,EAAE,EACpB,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAChC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,gBAAgB,CACtB,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,OAAO,CAAC,CAC5D,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,IAAI,EAAE,EAC9C,CAAC,EACD,CAAC,CACJ,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,IAAI,EAAE,EAAE,CACnC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,sCAAsC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,WAAW,CAAC,IAAY;QACpB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;CACJ;AAED,SAAS,qBAAqB,CAAC,OAAgC;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,KAAuC,EAAE,EAAE,CACpD,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,EACvB,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,OAAO,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,mBAAoB,SAAQ,SAAS;IAYlB;IAEA;IAbJ,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAc;IACT,OAAO,GAAG,IAAI,SAAS,EAAE,CAAC;IACnC,QAAQ,CAAe;IAC/B,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;IAC9B,CAAC;IACD,IAAI,OAAO,CAAC,KAAc;QACtB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;IAC/B,CAAC;IACD,YACqB,KAAmB,EACpC,QAAgB,EACC,MAA2C,EAC5D,MAAc;QAEd,KAAK,EAAE,CAAC;QALS,UAAK,GAAL,KAAK,CAAc;QAEnB,WAAM,GAAN,MAAM,CAAqC;QAI5D,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,CACT,IAAI,IAAI,CAAC,+CAA+C,EAAE,CAAC,EAAE,CAAC,CAAC,CAClE,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CACjC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CACpC,CAAC;QACF,IAAI,KAAK,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IACO,MAAM,CAAC,KAAa;QACxB,IAAI,CAAC,QAAQ,GAAG,KAAK;YACjB,CAAC,CAAC,WAAW,CACP,IAAI,CAAC,KAAK,EACV,KAAK,EACL,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CACtD;YACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,QAAQ,CACjB,IAAI,CAAC,QAAQ,CAAC,MAAM;YAChB,CAAC,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC,EAAE,CAAC,CAAC,CAC9C,CAAC;IACN,CAAC;IACD,WAAW,CAAC,IAAY;QACpB,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aACpD,IACD,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC;YAC3B,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;YAE1B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;aAC3B,CAAC;YACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,MAAM;gBAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3C,CAAC;IACL,CAAC;CACJ;AAED,KAAK,UAAU,iBAAiB,CAC5B,OAAgC,EAChC,OAAoB,EACpB,MAAc;IAEd,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAiB;QACxB;YACI,KAAK,EAAE,aAAa;YACpB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,8CAA8C;SAC9D;QACD,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtB,KAAK,EAAE,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YAChE,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE;YAC7B,WAAW,EAAE,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,EAAE;SAC/C,CAAC,CAAC;KACN,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAClE,MAAM,MAAM,GACR,OAAO,CAAC,IAAI,KAAK,KAAK;QAClB,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE;aACX,MAAM,CACH,uBAAuB,EACvB,KAAK,CAAC,GAAG,CACL,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,WAAW,EAAE,CAClD,CACJ;aACA,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACZ,KAAK,KAAK,SAAS;YACf,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK,CACD,KAAK,CAAC,SAAS,CACX,CAAC,IAAI,EAAE,EAAE,CACL,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,WAAW,EAAE;gBACrC,KAAK,CACZ,CACJ,EAAE,KAAK,CACjB;QACP,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CACnB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAC1B,IAAI,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAC7D,CAAC;IACZ,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,MAAM,KAAK,aAAa;QAC3B,CAAC,CAAC,IAAI;QACN,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAiB,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC5B,EAAgB,EAChB,KAAsB,EACtB,OAAgC;IAEhC,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC;IACvE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,2CAA2C,EAAE,MAAM,CAAC,CAAC;QACvE,OAAO;IACX,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CACvB,CAAC,IAAI,EAAE,EAAE,CACL,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,MAAM,IAAI,CAAC,EAAE,EAAE,CACrH,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CACpC,6CAA6C,EAC7C,OAAO,CACV,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC7C,MAAM,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO,CAAC,EAAE,CAAC,MAAM,CACb,uDAAuD,EACvD,MAAM,CACT,CAAC;QACF,OAAO;IACX,CAAC;IACD,MAAM,WAAW,GACb,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;QACnC,CAAC,CAAC,sFAAsF;QACxF,CAAC,CAAC,oCAAoC,CAAC;IAC/C,EAAE,CAAC,eAAe,CACd,GAAG,WAAW,WAAW,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,gBAAgB,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,8BAA8B,KAAK,CAAC,MAAM,CAAC,EAAE,4JAA4J,EACnS,EAAE,qBAAqB,EAAE,KAAK,EAAE,CACnC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,wBAAwB,CACpC,EAAgB,EAChB,KAAsB,EACtB,KAA4B;IAE5B,MAAM,SAAS,GAAG,CAAC,OAAgC,EAAE,EAAE;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK;YACd,MAAM,IAAI,UAAU,CAChB,yBAAyB,EACzB,qDAAqD,CACxD,CAAC;IACV,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,EACf,KAEC,EACD,OAAgC,EAClC,EAAE;QACA,MAAM,KAAK,CAAC,cAAc,CACtB,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,EACvD,OAAO,CAAC,GAAG,EACX,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CACrC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE;QAC1B,WAAW,EACP,sFAAsF;QAC1F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YAC7B,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;gBAC1B,MAAM,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC5C,OAAO;YACX,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,EAAE;gBACX,MAAM,IAAI,UAAU,CAChB,0BAA0B,EAC1B,kFAAkF,CACrF,CAAC;YACN,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAC7B,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,WAAW,EAAE,CAClD,CAAC;YACF,MAAM,MAAM,GACR,OAAO,CAAC,IAAI,KAAK,KAAK;gBAClB,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE;qBACX,MAAM,CACH,4BAA4B,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,EAClE,OAAO,CACV;qBACA,IAAI,CACD,CAAC,QAAQ,EAAE,EAAE,CACT,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;oBAC1C,EAAE,KAAK,CAClB;gBACP,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CACnB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAC1B,IAAI,kBAAkB,CAClB,OAAO,CAAC,iBAAiB,EACzB,IAAI,CACP,CACR,CAAC;YACZ,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO;YACjC,MAAM,QAAQ,GACV,MAAM,KAAK,aAAa;gBACpB,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,MAAM,KAAK,MAAM;oBACjB,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,SAAS,CAAC;YACtB,IAAI,CAAC,QAAQ;gBAAE,OAAO;YACtB,MAAM,KAAK,CAAC,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;KACJ,CAAC,CAAC;IACH,EAAE,CAAC,eAAe,CAAC,eAAe,EAAE;QAChC,WAAW,EAAE,sDAAsD;QACnE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YAC7B,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CACjC,OAAO,EACP,OAAO,CAAC,WAAW,EACnB,IAAI,CAAC,IAAI,EAAE,CACd,CAAC;YACF,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAChC,IACI,KAAK;gBACL,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,IAAI,CAChC,CAAC,SAAS,EAAE,EAAE,CACV,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;oBACrC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAChC;gBAED,MAAM,IAAI,UAAU,CAChB,mBAAmB,EACnB,yEAAyE,CAC5E,CAAC;YACN,MAAM,KAAK,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,EAAE,CAAC,MAAM,CACb,0BAA0B,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,sBAAsB,EAAE,EAC5F,MAAM,CACT,CAAC;QACN,CAAC;KACJ,CAAC,CAAC;AACP,CAAC"}
|