pi-harness-runtime 1.1.0 → 1.1.2

package/packages/runtime/dist/local-runtime-agent.js

@@ -1,356 +0,0 @@
-/**
- * Local Runtime Agent — RFC-0024
- *
- * Server-side coordinator for local browser agent (RFC-0023).
- * Runs on the server, communicates with browser agent on user's machine.
- *
- * Architecture:
- *   Server Runtime -> HTTP/RPC request -> Local Browser Agent on iMac
- *       -> Playwright persistent profile -> Human login if needed
- *       -> scrape usage/reset time -> return safe quota summary
- *
- * Security Rules:
- * - Never return raw cookies
- * - Never return localStorage
- * - Bind to localhost by default
- * - If remote access needed, require VPN/Tailscale and token
- * - Log only safe summaries
- */
-import { EventEmitter } from "node:events";
-import { createServer } from "node:http";
-const DEFAULT_CONFIG = {
-    port: 3847,
-    host: "localhost",
-    browserAgentUrl: "http://localhost:3848",
-    requestTimeoutMs: 30000,
-};
-export class LocalRuntimeAgent extends EventEmitter {
-    config;
-    server = null;
-    authSessions = new Map();
-    isRunning = false;
-    constructor(config = {}) {
-        super();
-        this.config = {
-            port: DEFAULT_CONFIG.port,
-            host: DEFAULT_CONFIG.host,
-            browserAgentUrl: DEFAULT_CONFIG.browserAgentUrl,
-            requestTimeoutMs: DEFAULT_CONFIG.requestTimeoutMs,
-            ...config,
-        };
-    }
-    /**
-     * Start the Local Runtime Agent server
-     */
-    async start() {
-        if (this.isRunning) {
-            throw new Error("Local Runtime Agent is already running");
-        }
-        return new Promise((resolve, reject) => {
-            this.server = createServer(async (req, res) => {
-                try {
-                    await this.handleRequest(req, res);
-                }
-                catch (error) {
-                    this.emitError(error);
-                    this.sendJson(res, 500, { error: "Internal server error" });
-                }
-            });
-            this.server.on("error", (error) => {
-                this.emitError(error);
-                reject(error);
-            });
-            this.server.listen(this.config.port, this.config.host, () => {
-                this.isRunning = true;
-                console.log(`[LocalRuntimeAgent] Listening on ${this.config.host}:${this.config.port}`);
-                resolve();
-            });
-        });
-    }
-    /**
-     * Stop the Local Runtime Agent server
-     */
-    async stop() {
-        return new Promise((resolve) => {
-            if (!this.server) {
-                resolve();
-                return;
-            }
-            this.server.close(() => {
-                this.isRunning = false;
-                this.server = null;
-                console.log("[LocalRuntimeAgent] Stopped");
-                resolve();
-            });
-        });
-    }
-    /**
-     * Check if the agent is running
-     */
-    isListening() {
-        return this.isRunning;
-    }
-    /**
-     * Get quota summary for a provider via local browser agent
-     */
-    async getQuota(provider) {
-        const url = `${this.config.browserAgentUrl}/quota/${provider}`;
-        const response = await this.fetchWithTimeout(url);
-        if (!response.ok) {
-            throw new Error(`Failed to get quota: ${response.status} ${response.statusText}`);
-        }
-        const data = (await response.json());
-        // Ensure safe response (redact any sensitive data)
-        const safeData = this.redactQuotaResponse(data);
-        // Track session
-        this.trackQuotaCheck(provider, safeData);
-        return safeData;
-    }
-    /**
-     * Start authentication flow for a provider
-     */
-    async startAuth(provider) {
-        const session = {
-            provider,
-            startedAt: new Date().toISOString(),
-            lastCheckedAt: new Date().toISOString(),
-            authenticated: false,
-        };
-        this.authSessions.set(provider, session);
-        this.emit("authStarted", provider);
-        const url = `${this.config.browserAgentUrl}/auth/${provider}/start`;
-        const response = await this.fetchWithTimeout(url);
-        if (!response.ok) {
-            return {
-                started: false,
-                message: `Failed to start auth: ${response.statusText}`,
-            };
-        }
-        return {
-            started: true,
-            message: `Auth flow started for ${provider}. Please complete login on your local browser.`,
-        };
-    }
-    /**
-     * Check authentication status for a provider
-     */
-    async checkAuth(provider) {
-        const session = this.authSessions.get(provider);
-        const url = `${this.config.browserAgentUrl}/auth/${provider}/status`;
-        try {
-            const response = await this.fetchWithTimeout(url);
-            if (response.ok) {
-                const data = (await response.json());
-                return {
-                    authenticated: data.authenticated,
-                    since: session?.startedAt,
-                };
-            }
-        }
-        catch {
-            // Browser agent not reachable
-        }
-        return {
-            authenticated: session?.authenticated ?? false,
-            since: session?.startedAt,
-        };
-    }
-    /**
-     * Get all active auth sessions
-     */
-    getAuthSessions() {
-        return Array.from(this.authSessions.values());
-    }
-    // --- Private Methods ------------------------------------------------
-    async handleRequest(req, res) {
-        const url = new URL(req.url ?? "/", `http://${req.headers.host}`);
-        const path = url.pathname;
-        const method = req.method ?? "GET";
-        // Authenticate request
-        if (!this.authenticateRequest(req, res)) {
-            return;
-        }
-        // Route requests
-        switch (path) {
-            case "/health":
-                this.handleHealth(res);
-                break;
-            case `/quota/${url.pathname.split("/")[2]}`:
-                if (method === "GET") {
-                    await this.handleQuota(res, url.pathname.split("/")[2]);
-                }
-                else {
-                    this.sendJson(res, 405, { error: "Method not allowed" });
-                }
-                break;
-            case `/auth/${url.pathname.split("/")[2]}/start`:
-                if (method === "POST") {
-                    await this.handleAuthStart(res, url.pathname.split("/")[2]);
-                }
-                else {
-                    this.sendJson(res, 405, { error: "Method not allowed" });
-                }
-                break;
-            case `/auth/${url.pathname.split("/")[2]}/reset`:
-                if (method === "POST") {
-                    await this.handleAuthReset(res, url.pathname.split("/")[2]);
-                }
-                else {
-                    this.sendJson(res, 405, { error: "Method not allowed" });
-                }
-                break;
-            case "/sessions":
-                this.handleSessions(res);
-                break;
-            default:
-                this.sendJson(res, 404, { error: "Not found" });
-        }
-    }
-    authenticateRequest(req, res) {
-        // No auth token configured - allow all
-        if (!this.config.authToken) {
-            return true;
-        }
-        const authHeader = req.headers.authorization;
-        if (!authHeader) {
-            this.sendJson(res, 401, { error: "Authorization required" });
-            return false;
-        }
-        const token = authHeader.replace(/^Bearer\s+/i, "");
-        if (token !== this.config.authToken) {
-            this.sendJson(res, 403, { error: "Invalid token" });
-            return false;
-        }
-        return true;
-    }
-    async handleHealth(res) {
-        const healthy = this.isRunning;
-        // Check if browser agent is reachable
-        let browserAgentHealthy = false;
-        try {
-            const response = await this.fetchWithTimeout(`${this.config.browserAgentUrl}/health`);
-            browserAgentHealthy = response.ok;
-        }
-        catch {
-            // Browser agent not reachable
-        }
-        this.sendJson(res, healthy ? 200 : 503, {
-            status: healthy ? "healthy" : "unhealthy",
-            localRuntimeAgent: healthy,
-            browserAgent: browserAgentHealthy ? "reachable" : "unreachable",
-            timestamp: new Date().toISOString(),
-        });
-    }
-    async handleQuota(res, provider) {
-        try {
-            const summary = await this.getQuota(provider);
-            this.sendJson(res, 200, summary);
-        }
-        catch (error) {
-            this.sendJson(res, 500, {
-                error: error instanceof Error ? error.message : "Failed to get quota",
-            });
-        }
-    }
-    async handleAuthStart(res, provider) {
-        const result = await this.startAuth(provider);
-        this.sendJson(res, result.started ? 200 : 500, result);
-    }
-    async handleAuthReset(res, provider) {
-        try {
-            const url = `${this.config.browserAgentUrl}/auth/${provider}/reset`;
-            const response = await this.fetchWithTimeout(url, { method: "POST" });
-            if (response.ok) {
-                this.authSessions.delete(provider);
-                this.sendJson(res, 200, { message: "Auth session reset" });
-            }
-            else {
-                this.sendJson(res, response.status, { error: "Failed to reset auth" });
-            }
-        }
-        catch (error) {
-            this.sendJson(res, 500, {
-                error: error instanceof Error ? error.message : "Failed to reset auth",
-            });
-        }
-    }
-    handleSessions(res) {
-        this.sendJson(res, 200, {
-            sessions: this.getAuthSessions(),
-        });
-    }
-    async fetchWithTimeout(url, options = {}) {
-        const controller = new AbortController();
-        const timeout = setTimeout(() => controller.abort(), this.config.requestTimeoutMs);
-        try {
-            const response = await fetch(url, {
-                ...options,
-                signal: controller.signal,
-            });
-            return response;
-        }
-        finally {
-            clearTimeout(timeout);
-        }
-    }
-    redactQuotaResponse(data) {
-        // Ensure no raw cookies, tokens, or sensitive data are included
-        const safe = {
-            provider: data.provider,
-            authenticated: data.authenticated,
-            checkedAt: data.checkedAt,
-        };
-        // Only include safe fields
-        if (data.usageTextSample) {
-            // Truncate and redact any potential sensitive patterns
-            safe.usageTextSample = this.redactText(data.usageTextSample);
-        }
-        if (data.resetAt) {
-            safe.resetAt = data.resetAt;
-        }
-        if (data.quotaUsedPct !== undefined) {
-            safe.quotaUsedPct = data.quotaUsedPct;
-        }
-        if (data.quotaResetIn) {
-            safe.quotaResetIn = data.quotaResetIn;
-        }
-        return safe;
-    }
-    redactText(text) {
-        // Redact potential tokens, cookies, session IDs
-        return text
-            .replace(/[A-Za-z0-9+/]{32,}={0,2}/g, "[REDACTED]") // Long base64 strings
-            .replace(/session[_-]?id["\s:=]+[^\s&"]+/gi, "session_id=[REDACTED]")
-            .replace(/token["\s:=]+[^\s&"]+/gi, "token=[REDACTED]")
-            .replace(/cookie["\s:=]+[^\s&"]+/gi, "cookie=[REDACTED]");
-    }
-    trackQuotaCheck(provider, summary) {
-        const existing = this.authSessions.get(provider);
-        if (existing) {
-            existing.lastCheckedAt = new Date().toISOString();
-            existing.authenticated = summary.authenticated;
-        }
-        this.emit("quotaChecked", summary);
-    }
-    emitError(error) {
-        const err = error instanceof Error ? error : new Error(String(error));
-        this.emit("error", err);
-        console.error("[LocalRuntimeAgent] Error:", err.message);
-    }
-    sendJson(res, status, data) {
-        res.writeHead(status, { "Content-Type": "application/json" });
-        res.end(JSON.stringify(data));
-    }
-}
-/**
- * Create a LocalRuntimeAgent with default config for harness runtime
- */
-export function createHarnessRuntimeAgent() {
-    return new LocalRuntimeAgent({
-        port: 3847,
-        host: "localhost",
-        browserAgentUrl: "http://localhost:3848",
-        requestTimeoutMs: 30000,
-    });
-}
-//# sourceMappingURL=local-runtime-agent.js.map

package/packages/runtime/dist/local-runtime-agent.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"local-runtime-agent.js","sourceRoot":"","sources":["../src/local-runtime-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AAuCtD,MAAM,cAAc,GAAyD;IAC5E,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,WAAW;IACjB,eAAe,EAAE,uBAAuB;IACxC,gBAAgB,EAAE,KAAK;CACvB,CAAC;AAEF,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACjC,MAAM,CAAiF;IAChG,MAAM,GAAkB,IAAI,CAAC;IAC7B,YAAY,GAA6B,IAAI,GAAG,EAAE,CAAC;IACnD,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,MAAM,GAA4B,EAAE;QAC/C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG;YACb,IAAI,EAAE,cAAc,CAAC,IAAI;YACzB,IAAI,EAAE,cAAc,CAAC,IAAI;YACzB,eAAe,EAAE,cAAc,CAAC,eAAe;YAC/C,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;YACjD,GAAG,MAAM;SACT,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACV,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC7C,IAAI,CAAC;oBACJ,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACpC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACtB,MAAM,CAAC,KAAK,CAAC,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBAC3D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,OAAO,CAAC,GAAG,CACV,oCAAoC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAC1E,CAAC;gBACF,OAAO,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,EAAE,CAAC;gBACV,OAAO;YACR,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBACtB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;gBAC3C,OAAO,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC9B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,UAAU,QAAQ,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAElD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACd,wBAAwB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAChE,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiB,CAAC;QAErD,mDAAmD;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEhD,gBAAgB;QAChB,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAEzC,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACd,QAAgB;QAEhB,MAAM,OAAO,GAAgB;YAC5B,QAAQ;YACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACvC,aAAa,EAAE,KAAK;SACpB,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAEnC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,SAAS,QAAQ,QAAQ,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAElD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,yBAAyB,QAAQ,CAAC,UAAU,EAAE;aACvD,CAAC;QACH,CAAC;QAED,OAAO;YACN,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,yBAAyB,QAAQ,gDAAgD;SAC1F,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACd,QAAgB;QAEhB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,SAAS,QAAQ,SAAS,CAAC;QAErE,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+B,CAAC;gBACnE,OAAO;oBACN,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,KAAK,EAAE,OAAO,EAAE,SAAS;iBACzB,CAAC;YACH,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;QAED,OAAO;YACN,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,KAAK;YAC9C,KAAK,EAAE,OAAO,EAAE,SAAS;SACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe;QACd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,uEAAuE;IAE/D,KAAK,CAAC,aAAa,CAC1B,GAAwC,EACxC,GAAuC;QAEvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QAEnC,uBAAuB;QACvB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO;QACR,CAAC;QAED,iBAAiB;QACjB,QAAQ,IAAI,EAAE,CAAC;YACd,KAAK,SAAS;gBACb,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBACvB,MAAM;YAEP,KAAK,UAAU,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC1C,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;oBACtB,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzD,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBACD,MAAM;YAEP,KAAK,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ;gBAC/C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACvB,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7D,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBACD,MAAM;YAEP,KAAK,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ;gBAC/C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACvB,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7D,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBACD,MAAM;YAEP,KAAK,WAAW;gBACf,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;gBACzB,MAAM;YAEP;gBACC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;IACF,CAAC;IAEO,mBAAmB,CAC1B,GAAwC,EACxC,GAAuC;QAEvC,uCAAuC;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YACpD,OAAO,KAAK,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,YAAY,CACzB,GAAuC;QAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAE/B,sCAAsC;QACtC,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC3C,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,SAAS,CACvC,CAAC;YACF,mBAAmB,GAAG,QAAQ,CAAC,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;YACvC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;YACzC,iBAAiB,EAAE,OAAO;YAC1B,YAAY,EAAE,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa;YAC/D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACnC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CACxB,GAAuC,EACvC,QAAgB;QAEhB,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACvB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;aACrE,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,eAAe,CAC5B,GAAuC,EACvC,QAAgB;QAEhB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,eAAe,CAC5B,GAAuC,EACvC,QAAgB;QAEhB,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,SAAS,QAAQ,QAAQ,CAAC;YACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAEtE,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAC5D,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACxE,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACvB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;aACtE,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,cAAc,CAAC,GAAuC;QAC7D,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACvB,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE;SAChC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC7B,GAAW,EACX,OAAO,GAAgB,EAAE;QAEzB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CACzB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAC5B,CAAC;QAEF,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBACjC,GAAG,OAAO;gBACV,MAAM,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QACjB,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACF,CAAC;IAEO,mBAAmB,CAAC,IAAkB;QAC7C,gEAAgE;QAChE,MAAM,IAAI,GAAiB;YAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;SACzB,CAAC;QAEF,2BAA2B;QAC3B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,uDAAuD;YACvD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACvC,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACvC,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,UAAU,CAAC,IAAY;QAC9B,gDAAgD;QAChD,OAAO,IAAI;aACT,OAAO,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC,sBAAsB;aACzE,OAAO,CAAC,kCAAkC,EAAE,uBAAuB,CAAC;aACpE,OAAO,CAAC,yBAAyB,EAAE,kBAAkB,CAAC;aACtD,OAAO,CAAC,0BAA0B,EAAE,mBAAmB,CAAC,CAAC;IAC5D,CAAC;IAEO,eAAe,CAAC,QAAgB,EAAE,OAAqB;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClD,QAAQ,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAEO,SAAS,CAAC,KAAc;QAC/B,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IAEO,QAAQ,CACf,GAAuC,EACvC,MAAc,EACd,IAAa;QAEb,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/B,CAAC;CACD;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACxC,OAAO,IAAI,iBAAiB,CAAC;QAC5B,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,WAAW;QACjB,eAAe,EAAE,uBAAuB;QACxC,gBAAgB,EAAE,KAAK;KACvB,CAAC,CAAC;AACJ,CAAC"}

package/packages/runtime/dist/policy-engine.d.ts

@@ -1,203 +0,0 @@
-/**
- * Policy Engine — RFC-0028
- *
- * Policy enforcement for command execution, network access, and file operations.
- *
- * Features:
- * - Command allowlist/denylist
- * - Network access control
- * - File operation restrictions
- * - Rate limiting
- * - Audit logging
- * - Policy inheritance and composition
- */
-import { EventEmitter } from "node:events";
-export type PolicyEffect = "allow" | "deny" | "ask";
-export interface PolicyResult {
-    effect: PolicyEffect;
-    reason?: string;
-    policy?: string;
-    score?: number;
-}
-export interface PolicyContext {
-    /** Who/what is requesting access */
-    subject: {
-        user?: string;
-        role?: string;
-        agent?: string;
-        ip?: string;
-    };
-    /** What resource is being accessed */
-    resource: {
-        type: "command" | "file" | "network" | "api" | "system";
-        path?: string;
-        url?: string;
-        method?: string;
-        operation?: string;
-    };
-    /** Environment context */
-    environment?: {
-        jobId?: string;
-        taskId?: string;
-        worktree?: string;
-        workspace?: string;
-    };
-}
-export interface Policy {
-    id: string;
-    name: string;
-    description?: string;
-    priority: number;
-    effect: PolicyEffect;
-    condition: PolicyCondition;
-    action?: string;
-    reason?: string;
-    audit?: boolean;
-}
-export interface PolicyCondition {
-    /** Match subject */
-    subject?: {
-        user?: string | string[];
-        role?: string | string[];
-        agent?: string | string[];
-        ip?: string | string[];
-    };
-    /** Match resource */
-    resource?: {
-        type?: "command" | "file" | "network" | "api" | "system" | string;
-        path?: string | string[];
-        pathPattern?: string;
-        url?: string | string[];
-        urlPattern?: string;
-        method?: string | string[];
-        operation?: string | string[];
-    };
-    /** Match environment */
-    environment?: {
-        jobId?: string | string[];
-        taskId?: string | string[];
-        worktree?: string | string[];
-        workspace?: string | string[];
-    };
-    /** Time-based conditions */
-    time?: {
-        startHour?: number;
-        endHour?: number;
-        days?: number[];
-    };
-    /** Custom condition function */
-    custom?: (context: PolicyContext) => boolean;
-}
-export interface PolicyRule {
-    pattern: RegExp;
-    effect: PolicyEffect;
-    reason?: string;
-}
-export interface RateLimit {
-    maxRequests: number;
-    windowMs: number;
-}
-export interface AuditEntry {
-    timestamp: string;
-    policy: string;
-    effect: PolicyEffect;
-    context: PolicyContext;
-    reason?: string;
-}
-export declare class PolicyEngine extends EventEmitter {
-    private policies;
-    private commandRules;
-    private fileRules;
-    private networkRules;
-    private rateLimits;
-    private requestCounts;
-    private auditLog;
-    private maxAuditEntries;
-    constructor();
-    /**
-     * Initialize default security policies
-     */
-    private initializeDefaultPolicies;
-    /**
-     * Add a policy
-     */
-    addPolicy(policy: Policy): void;
-    /**
-     * Remove a policy
-     */
-    removePolicy(id: string): boolean;
-    /**
-     * Get all policies
-     */
-    getPolicies(): Policy[];
-    /**
-     * Check if a request is allowed
-     */
-    evaluate(context: PolicyContext): PolicyResult;
-    /**
-     * Check if a command is allowed
-     */
-    canExecuteCommand(command: string, context?: Partial<PolicyContext>): PolicyResult;
-    /**
-     * Check if a file operation is allowed
-     */
-    canAccessFile(path: string, operation: "read" | "write" | "delete" | "execute", context?: Partial<PolicyContext>): PolicyResult;
-    /**
-     * Check if a network request is allowed
-     */
-    canMakeNetworkRequest(url: string, method?: string, context?: Partial<PolicyContext>): PolicyResult;
-    /**
-     * Add a command rule
-     */
-    addCommandRule(pattern: RegExp, effect: PolicyEffect, reason?: string): void;
-    /**
-     * Add a file rule
-     */
-    addFileRule(pattern: RegExp, effect: PolicyEffect, reason?: string): void;
-    /**
-     * Add a network rule
-     */
-    addNetworkRule(pattern: RegExp, effect: PolicyEffect, reason?: string): void;
-    /**
-     * Set rate limit for a resource
-     */
-    setRateLimit(resource: string, limit: RateLimit): void;
-    /**
-     * Get rate limit for a resource
-     */
-    getRateLimit(resource: string): RateLimit | undefined;
-    /**
-     * Get audit log
-     */
-    getAuditLog(filter?: {
-        policy?: string;
-        effect?: PolicyEffect;
-        since?: Date;
-    }): AuditEntry[];
-    /**
-     * Clear audit log
-     */
-    clearAuditLog(): void;
-    /**
-     * Export policies as JSON
-     */
-    exportPolicies(): string;
-    /**
-     * Import policies from JSON
-     */
-    importPolicies(json: string): boolean;
-    private matchesPolicy;
-    private matchesSubject;
-    private matchesResource;
-    private matchesEnvironment;
-    private matchesTime;
-    private matchesValue;
-    private checkRateLimit;
-    private getRateLimitKey;
-    private logAudit;
-}
-/**
- * Create a PolicyEngine with default harness policies
- */
-export declare function createHarnessPolicyEngine(): PolicyEngine;
-//# sourceMappingURL=policy-engine.d.ts.map

package/packages/runtime/dist/policy-engine.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy-engine.d.ts","sourceRoot":"","sources":["../src/policy-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAEpD,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC7B,oCAAoC;IACpC,OAAO,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,EAAE,CAAC,EAAE,MAAM,CAAC;KACZ,CAAC;IACF,sCAAsC;IACtC,QAAQ,EAAE;QACT,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;QACxD,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,0BAA0B;IAC1B,WAAW,CAAC,EAAE;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACF;AAED,MAAM,WAAW,MAAM;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC/B,oBAAoB;IACpB,OAAO,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC1B,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;KACvB,CAAC;IACF,qBAAqB;IACrB,QAAQ,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QAClE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;KAC9B,CAAC;IACF,wBAAwB;IACxB,WAAW,CAAC,EAAE;QACb,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;KAC9B,CAAC;IACF,4BAA4B;IAC5B,IAAI,CAAC,EAAE;QACN,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KAChB,CAAC;IACF,gCAAgC;IAChC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC;CAC7C;AAED,MAAM,WAAW,UAAU;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAOD,qBAAa,YAAa,SAAQ,YAAY;IAC7C,OAAO,CAAC,QAAQ,CAAgB;IAChC,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,SAAS,CAAoB;IACrC,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,UAAU,CAAqC;IACvD,OAAO,CAAC,aAAa,CAAkE;IACvF,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,eAAe,CAAS;IAEhC,cAGC;IAED;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAgGjC;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAG9B;IAED;;OAEG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAOhC;IAED;;OAEG;IACH,WAAW,IAAI,MAAM,EAAE,CAEtB;IAED;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,aAAa,GAAG,YAAY,CA4B7C;IAED;;OAEG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,YAAY,CA0BjF;IAED;;OAEG;IACH,aAAa,CACZ,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,EAClD,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC9B,YAAY,CA2Bd;IAED;;OAEG;IACH,qBAAqB,CACpB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC9B,YAAY,CA2Bd;IAED;;OAEG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAE3E;IAED;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAExE;IAED;;OAEG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAE3E;IAED;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,IAAI,CAErD;IAED;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAEpD;IAED;;OAEG;IACH,WAAW,CAAC,MAAM,CAAC,EAAE;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,YAAY,CAAC;QACtB,KAAK,CAAC,EAAE,IAAI,CAAC;KACb,GAAG,UAAU,EAAE,CAkBf;IAED;;OAEG;IACH,aAAa,IAAI,IAAI,CAEpB;IAED;;OAEG;IACH,cAAc,IAAI,MAAM,CAwBvB;IAED;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CA8CpC;IAID,OAAO,CAAC,aAAa;IA+BrB,OAAO,CAAC,cAAc;IAyBtB,OAAO,CAAC,eAAe;IAmCvB,OAAO,CAAC,kBAAkB;IAyB1B,OAAO,CAAC,WAAW;IAqBnB,OAAO,CAAC,YAAY;IAyBpB,OAAO,CAAC,cAAc;IA2BtB,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,QAAQ;CAkBhB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,YAAY,CAwCxD"}