pi-harness-runtime 1.1.6 → 1.1.7

package/packages/runtime/dist/local-runtime-agent.js

@@ -0,0 +1,356 @@
+/**
+ * Local Runtime Agent — RFC-0024
+ *
+ * Server-side coordinator for local browser agent (RFC-0023).
+ * Runs on the server, communicates with browser agent on user's machine.
+ *
+ * Architecture:
+ *   Server Runtime -> HTTP/RPC request -> Local Browser Agent on iMac
+ *       -> Playwright persistent profile -> Human login if needed
+ *       -> scrape usage/reset time -> return safe quota summary
+ *
+ * Security Rules:
+ * - Never return raw cookies
+ * - Never return localStorage
+ * - Bind to localhost by default
+ * - If remote access needed, require VPN/Tailscale and token
+ * - Log only safe summaries
+ */
+import { EventEmitter } from "node:events";
+import { createServer } from "node:http";
+const DEFAULT_CONFIG = {
+    port: 3847,
+    host: "localhost",
+    browserAgentUrl: "http://localhost:3848",
+    requestTimeoutMs: 30000,
+};
+export class LocalRuntimeAgent extends EventEmitter {
+    config;
+    server = null;
+    authSessions = new Map();
+    isRunning = false;
+    constructor(config = {}) {
+        super();
+        this.config = {
+            port: DEFAULT_CONFIG.port,
+            host: DEFAULT_CONFIG.host,
+            browserAgentUrl: DEFAULT_CONFIG.browserAgentUrl,
+            requestTimeoutMs: DEFAULT_CONFIG.requestTimeoutMs,
+            ...config,
+        };
+    }
+    /**
+     * Start the Local Runtime Agent server
+     */
+    async start() {
+        if (this.isRunning) {
+            throw new Error("Local Runtime Agent is already running");
+        }
+        return new Promise((resolve, reject) => {
+            this.server = createServer(async (req, res) => {
+                try {
+                    await this.handleRequest(req, res);
+                }
+                catch (error) {
+                    this.emitError(error);
+                    this.sendJson(res, 500, { error: "Internal server error" });
+                }
+            });
+            this.server.on("error", (error) => {
+                this.emitError(error);
+                reject(error);
+            });
+            this.server.listen(this.config.port, this.config.host, () => {
+                this.isRunning = true;
+                console.log(`[LocalRuntimeAgent] Listening on ${this.config.host}:${this.config.port}`);
+                resolve();
+            });
+        });
+    }
+    /**
+     * Stop the Local Runtime Agent server
+     */
+    async stop() {
+        return new Promise((resolve) => {
+            if (!this.server) {
+                resolve();
+                return;
+            }
+            this.server.close(() => {
+                this.isRunning = false;
+                this.server = null;
+                console.log("[LocalRuntimeAgent] Stopped");
+                resolve();
+            });
+        });
+    }
+    /**
+     * Check if the agent is running
+     */
+    isListening() {
+        return this.isRunning;
+    }
+    /**
+     * Get quota summary for a provider via local browser agent
+     */
+    async getQuota(provider) {
+        const url = `${this.config.browserAgentUrl}/quota/${provider}`;
+        const response = await this.fetchWithTimeout(url);
+        if (!response.ok) {
+            throw new Error(`Failed to get quota: ${response.status} ${response.statusText}`);
+        }
+        const data = (await response.json());
+        // Ensure safe response (redact any sensitive data)
+        const safeData = this.redactQuotaResponse(data);
+        // Track session
+        this.trackQuotaCheck(provider, safeData);
+        return safeData;
+    }
+    /**
+     * Start authentication flow for a provider
+     */
+    async startAuth(provider) {
+        const session = {
+            provider,
+            startedAt: new Date().toISOString(),
+            lastCheckedAt: new Date().toISOString(),
+            authenticated: false,
+        };
+        this.authSessions.set(provider, session);
+        this.emit("authStarted", provider);
+        const url = `${this.config.browserAgentUrl}/auth/${provider}/start`;
+        const response = await this.fetchWithTimeout(url);
+        if (!response.ok) {
+            return {
+                started: false,
+                message: `Failed to start auth: ${response.statusText}`,
+            };
+        }
+        return {
+            started: true,
+            message: `Auth flow started for ${provider}. Please complete login on your local browser.`,
+        };
+    }
+    /**
+     * Check authentication status for a provider
+     */
+    async checkAuth(provider) {
+        const session = this.authSessions.get(provider);
+        const url = `${this.config.browserAgentUrl}/auth/${provider}/status`;
+        try {
+            const response = await this.fetchWithTimeout(url);
+            if (response.ok) {
+                const data = (await response.json());
+                return {
+                    authenticated: data.authenticated,
+                    since: session?.startedAt,
+                };
+            }
+        }
+        catch {
+            // Browser agent not reachable
+        }
+        return {
+            authenticated: session?.authenticated ?? false,
+            since: session?.startedAt,
+        };
+    }
+    /**
+     * Get all active auth sessions
+     */
+    getAuthSessions() {
+        return Array.from(this.authSessions.values());
+    }
+    // --- Private Methods ------------------------------------------------
+    async handleRequest(req, res) {
+        const url = new URL(req.url ?? "/", `http://${req.headers.host}`);
+        const path = url.pathname;
+        const method = req.method ?? "GET";
+        // Authenticate request
+        if (!this.authenticateRequest(req, res)) {
+            return;
+        }
+        // Route requests
+        switch (path) {
+            case "/health":
+                this.handleHealth(res);
+                break;
+            case `/quota/${url.pathname.split("/")[2]}`:
+                if (method === "GET") {
+                    await this.handleQuota(res, url.pathname.split("/")[2]);
+                }
+                else {
+                    this.sendJson(res, 405, { error: "Method not allowed" });
+                }
+                break;
+            case `/auth/${url.pathname.split("/")[2]}/start`:
+                if (method === "POST") {
+                    await this.handleAuthStart(res, url.pathname.split("/")[2]);
+                }
+                else {
+                    this.sendJson(res, 405, { error: "Method not allowed" });
+                }
+                break;
+            case `/auth/${url.pathname.split("/")[2]}/reset`:
+                if (method === "POST") {
+                    await this.handleAuthReset(res, url.pathname.split("/")[2]);
+                }
+                else {
+                    this.sendJson(res, 405, { error: "Method not allowed" });
+                }
+                break;
+            case "/sessions":
+                this.handleSessions(res);
+                break;
+            default:
+                this.sendJson(res, 404, { error: "Not found" });
+        }
+    }
+    authenticateRequest(req, res) {
+        // No auth token configured - allow all
+        if (!this.config.authToken) {
+            return true;
+        }
+        const authHeader = req.headers.authorization;
+        if (!authHeader) {
+            this.sendJson(res, 401, { error: "Authorization required" });
+            return false;
+        }
+        const token = authHeader.replace(/^Bearer\s+/i, "");
+        if (token !== this.config.authToken) {
+            this.sendJson(res, 403, { error: "Invalid token" });
+            return false;
+        }
+        return true;
+    }
+    async handleHealth(res) {
+        const healthy = this.isRunning;
+        // Check if browser agent is reachable
+        let browserAgentHealthy = false;
+        try {
+            const response = await this.fetchWithTimeout(`${this.config.browserAgentUrl}/health`);
+            browserAgentHealthy = response.ok;
+        }
+        catch {
+            // Browser agent not reachable
+        }
+        this.sendJson(res, healthy ? 200 : 503, {
+            status: healthy ? "healthy" : "unhealthy",
+            localRuntimeAgent: healthy,
+            browserAgent: browserAgentHealthy ? "reachable" : "unreachable",
+            timestamp: new Date().toISOString(),
+        });
+    }
+    async handleQuota(res, provider) {
+        try {
+            const summary = await this.getQuota(provider);
+            this.sendJson(res, 200, summary);
+        }
+        catch (error) {
+            this.sendJson(res, 500, {
+                error: error instanceof Error ? error.message : "Failed to get quota",
+            });
+        }
+    }
+    async handleAuthStart(res, provider) {
+        const result = await this.startAuth(provider);
+        this.sendJson(res, result.started ? 200 : 500, result);
+    }
+    async handleAuthReset(res, provider) {
+        try {
+            const url = `${this.config.browserAgentUrl}/auth/${provider}/reset`;
+            const response = await this.fetchWithTimeout(url, { method: "POST" });
+            if (response.ok) {
+                this.authSessions.delete(provider);
+                this.sendJson(res, 200, { message: "Auth session reset" });
+            }
+            else {
+                this.sendJson(res, response.status, { error: "Failed to reset auth" });
+            }
+        }
+        catch (error) {
+            this.sendJson(res, 500, {
+                error: error instanceof Error ? error.message : "Failed to reset auth",
+            });
+        }
+    }
+    handleSessions(res) {
+        this.sendJson(res, 200, {
+            sessions: this.getAuthSessions(),
+        });
+    }
+    async fetchWithTimeout(url, options = {}) {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), this.config.requestTimeoutMs);
+        try {
+            const response = await fetch(url, {
+                ...options,
+                signal: controller.signal,
+            });
+            return response;
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+    redactQuotaResponse(data) {
+        // Ensure no raw cookies, tokens, or sensitive data are included
+        const safe = {
+            provider: data.provider,
+            authenticated: data.authenticated,
+            checkedAt: data.checkedAt,
+        };
+        // Only include safe fields
+        if (data.usageTextSample) {
+            // Truncate and redact any potential sensitive patterns
+            safe.usageTextSample = this.redactText(data.usageTextSample);
+        }
+        if (data.resetAt) {
+            safe.resetAt = data.resetAt;
+        }
+        if (data.quotaUsedPct !== undefined) {
+            safe.quotaUsedPct = data.quotaUsedPct;
+        }
+        if (data.quotaResetIn) {
+            safe.quotaResetIn = data.quotaResetIn;
+        }
+        return safe;
+    }
+    redactText(text) {
+        // Redact potential tokens, cookies, session IDs
+        return text
+            .replace(/[A-Za-z0-9+/]{32,}={0,2}/g, "[REDACTED]") // Long base64 strings
+            .replace(/session[_-]?id["\s:=]+[^\s&"]+/gi, "session_id=[REDACTED]")
+            .replace(/token["\s:=]+[^\s&"]+/gi, "token=[REDACTED]")
+            .replace(/cookie["\s:=]+[^\s&"]+/gi, "cookie=[REDACTED]");
+    }
+    trackQuotaCheck(provider, summary) {
+        const existing = this.authSessions.get(provider);
+        if (existing) {
+            existing.lastCheckedAt = new Date().toISOString();
+            existing.authenticated = summary.authenticated;
+        }
+        this.emit("quotaChecked", summary);
+    }
+    emitError(error) {
+        const err = error instanceof Error ? error : new Error(String(error));
+        this.emit("error", err);
+        console.error("[LocalRuntimeAgent] Error:", err.message);
+    }
+    sendJson(res, status, data) {
+        res.writeHead(status, { "Content-Type": "application/json" });
+        res.end(JSON.stringify(data));
+    }
+}
+/**
+ * Create a LocalRuntimeAgent with default config for harness runtime
+ */
+export function createHarnessRuntimeAgent() {
+    return new LocalRuntimeAgent({
+        port: 3847,
+        host: "localhost",
+        browserAgentUrl: "http://localhost:3848",
+        requestTimeoutMs: 30000,
+    });
+}
+//# sourceMappingURL=local-runtime-agent.js.map

package/packages/runtime/dist/local-runtime-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-runtime-agent.js","sourceRoot":"","sources":["../src/local-runtime-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AAuCtD,MAAM,cAAc,GAAyD;IAC5E,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,WAAW;IACjB,eAAe,EAAE,uBAAuB;IACxC,gBAAgB,EAAE,KAAK;CACvB,CAAC;AAEF,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACjC,MAAM,CAAiF;IAChG,MAAM,GAAkB,IAAI,CAAC;IAC7B,YAAY,GAA6B,IAAI,GAAG,EAAE,CAAC;IACnD,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,MAAM,GAA4B,EAAE;QAC/C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG;YACb,IAAI,EAAE,cAAc,CAAC,IAAI;YACzB,IAAI,EAAE,cAAc,CAAC,IAAI;YACzB,eAAe,EAAE,cAAc,CAAC,eAAe;YAC/C,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;YACjD,GAAG,MAAM;SACT,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACV,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC7C,IAAI,CAAC;oBACJ,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACpC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACtB,MAAM,CAAC,KAAK,CAAC,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBAC3D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,OAAO,CAAC,GAAG,CACV,oCAAoC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAC1E,CAAC;gBACF,OAAO,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,EAAE,CAAC;gBACV,OAAO;YACR,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBACtB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;gBAC3C,OAAO,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC9B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,UAAU,QAAQ,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAElD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACd,wBAAwB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAChE,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiB,CAAC;QAErD,mDAAmD;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEhD,gBAAgB;QAChB,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAEzC,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACd,QAAgB;QAEhB,MAAM,OAAO,GAAgB;YAC5B,QAAQ;YACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACvC,aAAa,EAAE,KAAK;SACpB,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAEnC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,SAAS,QAAQ,QAAQ,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAElD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,yBAAyB,QAAQ,CAAC,UAAU,EAAE;aACvD,CAAC;QACH,CAAC;QAED,OAAO;YACN,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,yBAAyB,QAAQ,gDAAgD;SAC1F,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACd,QAAgB;QAEhB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,SAAS,QAAQ,SAAS,CAAC;QAErE,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+B,CAAC;gBACnE,OAAO;oBACN,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,KAAK,EAAE,OAAO,EAAE,SAAS;iBACzB,CAAC;YACH,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;QAED,OAAO;YACN,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,KAAK;YAC9C,KAAK,EAAE,OAAO,EAAE,SAAS;SACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe;QACd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,uEAAuE;IAE/D,KAAK,CAAC,aAAa,CAC1B,GAAwC,EACxC,GAAuC;QAEvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QAEnC,uBAAuB;QACvB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO;QACR,CAAC;QAED,iBAAiB;QACjB,QAAQ,IAAI,EAAE,CAAC;YACd,KAAK,SAAS;gBACb,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBACvB,MAAM;YAEP,KAAK,UAAU,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC1C,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;oBACtB,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzD,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBACD,MAAM;YAEP,KAAK,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ;gBAC/C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACvB,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7D,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBACD,MAAM;YAEP,KAAK,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ;gBAC/C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACvB,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7D,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBACD,MAAM;YAEP,KAAK,WAAW;gBACf,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;gBACzB,MAAM;YAEP;gBACC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;IACF,CAAC;IAEO,mBAAmB,CAC1B,GAAwC,EACxC,GAAuC;QAEvC,uCAAuC;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YACpD,OAAO,KAAK,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,YAAY,CACzB,GAAuC;QAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAE/B,sCAAsC;QACtC,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC3C,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,SAAS,CACvC,CAAC;YACF,mBAAmB,GAAG,QAAQ,CAAC,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;YACvC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;YACzC,iBAAiB,EAAE,OAAO;YAC1B,YAAY,EAAE,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa;YAC/D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACnC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CACxB,GAAuC,EACvC,QAAgB;QAEhB,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACvB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;aACrE,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,eAAe,CAC5B,GAAuC,EACvC,QAAgB;QAEhB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,eAAe,CAC5B,GAAuC,EACvC,QAAgB;QAEhB,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,SAAS,QAAQ,QAAQ,CAAC;YACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAEtE,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAC5D,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACxE,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACvB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;aACtE,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,cAAc,CAAC,GAAuC;QAC7D,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACvB,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE;SAChC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC7B,GAAW,EACX,OAAO,GAAgB,EAAE;QAEzB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CACzB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAC5B,CAAC;QAEF,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBACjC,GAAG,OAAO;gBACV,MAAM,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QACjB,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACF,CAAC;IAEO,mBAAmB,CAAC,IAAkB;QAC7C,gEAAgE;QAChE,MAAM,IAAI,GAAiB;YAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;SACzB,CAAC;QAEF,2BAA2B;QAC3B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,uDAAuD;YACvD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACvC,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACvC,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,UAAU,CAAC,IAAY;QAC9B,gDAAgD;QAChD,OAAO,IAAI;aACT,OAAO,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC,sBAAsB;aACzE,OAAO,CAAC,kCAAkC,EAAE,uBAAuB,CAAC;aACpE,OAAO,CAAC,yBAAyB,EAAE,kBAAkB,CAAC;aACtD,OAAO,CAAC,0BAA0B,EAAE,mBAAmB,CAAC,CAAC;IAC5D,CAAC;IAEO,eAAe,CAAC,QAAgB,EAAE,OAAqB;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClD,QAAQ,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAEO,SAAS,CAAC,KAAc;QAC/B,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IAEO,QAAQ,CACf,GAAuC,EACvC,MAAc,EACd,IAAa;QAEb,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/B,CAAC;CACD;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACxC,OAAO,IAAI,iBAAiB,CAAC;QAC5B,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,WAAW;QACjB,eAAe,EAAE,uBAAuB;QACxC,gBAAgB,EAAE,KAAK;KACvB,CAAC,CAAC;AACJ,CAAC"}

package/packages/runtime/dist/policy-engine.d.ts

@@ -0,0 +1,203 @@
+/**
+ * Policy Engine — RFC-0028
+ *
+ * Policy enforcement for command execution, network access, and file operations.
+ *
+ * Features:
+ * - Command allowlist/denylist
+ * - Network access control
+ * - File operation restrictions
+ * - Rate limiting
+ * - Audit logging
+ * - Policy inheritance and composition
+ */
+import { EventEmitter } from "node:events";
+export type PolicyEffect = "allow" | "deny" | "ask";
+export interface PolicyResult {
+    effect: PolicyEffect;
+    reason?: string;
+    policy?: string;
+    score?: number;
+}
+export interface PolicyContext {
+    /** Who/what is requesting access */
+    subject: {
+        user?: string;
+        role?: string;
+        agent?: string;
+        ip?: string;
+    };
+    /** What resource is being accessed */
+    resource: {
+        type: "command" | "file" | "network" | "api" | "system";
+        path?: string;
+        url?: string;
+        method?: string;
+        operation?: string;
+    };
+    /** Environment context */
+    environment?: {
+        jobId?: string;
+        taskId?: string;
+        worktree?: string;
+        workspace?: string;
+    };
+}
+export interface Policy {
+    id: string;
+    name: string;
+    description?: string;
+    priority: number;
+    effect: PolicyEffect;
+    condition: PolicyCondition;
+    action?: string;
+    reason?: string;
+    audit?: boolean;
+}
+export interface PolicyCondition {
+    /** Match subject */
+    subject?: {
+        user?: string | string[];
+        role?: string | string[];
+        agent?: string | string[];
+        ip?: string | string[];
+    };
+    /** Match resource */
+    resource?: {
+        type?: "command" | "file" | "network" | "api" | "system" | string;
+        path?: string | string[];
+        pathPattern?: string;
+        url?: string | string[];
+        urlPattern?: string;
+        method?: string | string[];
+        operation?: string | string[];
+    };
+    /** Match environment */
+    environment?: {
+        jobId?: string | string[];
+        taskId?: string | string[];
+        worktree?: string | string[];
+        workspace?: string | string[];
+    };
+    /** Time-based conditions */
+    time?: {
+        startHour?: number;
+        endHour?: number;
+        days?: number[];
+    };
+    /** Custom condition function */
+    custom?: (context: PolicyContext) => boolean;
+}
+export interface PolicyRule {
+    pattern: RegExp;
+    effect: PolicyEffect;
+    reason?: string;
+}
+export interface RateLimit {
+    maxRequests: number;
+    windowMs: number;
+}
+export interface AuditEntry {
+    timestamp: string;
+    policy: string;
+    effect: PolicyEffect;
+    context: PolicyContext;
+    reason?: string;
+}
+export declare class PolicyEngine extends EventEmitter {
+    private policies;
+    private commandRules;
+    private fileRules;
+    private networkRules;
+    private rateLimits;
+    private requestCounts;
+    private auditLog;
+    private maxAuditEntries;
+    constructor();
+    /**
+     * Initialize default security policies
+     */
+    private initializeDefaultPolicies;
+    /**
+     * Add a policy
+     */
+    addPolicy(policy: Policy): void;
+    /**
+     * Remove a policy
+     */
+    removePolicy(id: string): boolean;
+    /**
+     * Get all policies
+     */
+    getPolicies(): Policy[];
+    /**
+     * Check if a request is allowed
+     */
+    evaluate(context: PolicyContext): PolicyResult;
+    /**
+     * Check if a command is allowed
+     */
+    canExecuteCommand(command: string, context?: Partial<PolicyContext>): PolicyResult;
+    /**
+     * Check if a file operation is allowed
+     */
+    canAccessFile(path: string, operation: "read" | "write" | "delete" | "execute", context?: Partial<PolicyContext>): PolicyResult;
+    /**
+     * Check if a network request is allowed
+     */
+    canMakeNetworkRequest(url: string, method?: string, context?: Partial<PolicyContext>): PolicyResult;
+    /**
+     * Add a command rule
+     */
+    addCommandRule(pattern: RegExp, effect: PolicyEffect, reason?: string): void;
+    /**
+     * Add a file rule
+     */
+    addFileRule(pattern: RegExp, effect: PolicyEffect, reason?: string): void;
+    /**
+     * Add a network rule
+     */
+    addNetworkRule(pattern: RegExp, effect: PolicyEffect, reason?: string): void;
+    /**
+     * Set rate limit for a resource
+     */
+    setRateLimit(resource: string, limit: RateLimit): void;
+    /**
+     * Get rate limit for a resource
+     */
+    getRateLimit(resource: string): RateLimit | undefined;
+    /**
+     * Get audit log
+     */
+    getAuditLog(filter?: {
+        policy?: string;
+        effect?: PolicyEffect;
+        since?: Date;
+    }): AuditEntry[];
+    /**
+     * Clear audit log
+     */
+    clearAuditLog(): void;
+    /**
+     * Export policies as JSON
+     */
+    exportPolicies(): string;
+    /**
+     * Import policies from JSON
+     */
+    importPolicies(json: string): boolean;
+    private matchesPolicy;
+    private matchesSubject;
+    private matchesResource;
+    private matchesEnvironment;
+    private matchesTime;
+    private matchesValue;
+    private checkRateLimit;
+    private getRateLimitKey;
+    private logAudit;
+}
+/**
+ * Create a PolicyEngine with default harness policies
+ */
+export declare function createHarnessPolicyEngine(): PolicyEngine;
+//# sourceMappingURL=policy-engine.d.ts.map

package/packages/runtime/dist/policy-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.d.ts","sourceRoot":"","sources":["../src/policy-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAEpD,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC7B,oCAAoC;IACpC,OAAO,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,EAAE,CAAC,EAAE,MAAM,CAAC;KACZ,CAAC;IACF,sCAAsC;IACtC,QAAQ,EAAE;QACT,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;QACxD,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,0BAA0B;IAC1B,WAAW,CAAC,EAAE;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACF;AAED,MAAM,WAAW,MAAM;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC/B,oBAAoB;IACpB,OAAO,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC1B,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;KACvB,CAAC;IACF,qBAAqB;IACrB,QAAQ,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QAClE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;KAC9B,CAAC;IACF,wBAAwB;IACxB,WAAW,CAAC,EAAE;QACb,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;KAC9B,CAAC;IACF,4BAA4B;IAC5B,IAAI,CAAC,EAAE;QACN,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KAChB,CAAC;IACF,gCAAgC;IAChC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC;CAC7C;AAED,MAAM,WAAW,UAAU;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAOD,qBAAa,YAAa,SAAQ,YAAY;IAC7C,OAAO,CAAC,QAAQ,CAAgB;IAChC,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,SAAS,CAAoB;IACrC,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,UAAU,CAAqC;IACvD,OAAO,CAAC,aAAa,CAAkE;IACvF,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,eAAe,CAAS;IAEhC,cAGC;IAED;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAgGjC;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAG9B;IAED;;OAEG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAOhC;IAED;;OAEG;IACH,WAAW,IAAI,MAAM,EAAE,CAEtB;IAED;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,aAAa,GAAG,YAAY,CA4B7C;IAED;;OAEG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,YAAY,CA0BjF;IAED;;OAEG;IACH,aAAa,CACZ,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,EAClD,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC9B,YAAY,CA2Bd;IAED;;OAEG;IACH,qBAAqB,CACpB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC9B,YAAY,CA2Bd;IAED;;OAEG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAE3E;IAED;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAExE;IAED;;OAEG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAE3E;IAED;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,IAAI,CAErD;IAED;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAEpD;IAED;;OAEG;IACH,WAAW,CAAC,MAAM,CAAC,EAAE;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,YAAY,CAAC;QACtB,KAAK,CAAC,EAAE,IAAI,CAAC;KACb,GAAG,UAAU,EAAE,CAkBf;IAED;;OAEG;IACH,aAAa,IAAI,IAAI,CAEpB;IAED;;OAEG;IACH,cAAc,IAAI,MAAM,CAwBvB;IAED;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CA8CpC;IAID,OAAO,CAAC,aAAa;IA+BrB,OAAO,CAAC,cAAc;IAyBtB,OAAO,CAAC,eAAe;IAmCvB,OAAO,CAAC,kBAAkB;IAyB1B,OAAO,CAAC,WAAW;IAqBnB,OAAO,CAAC,YAAY;IAyBpB,OAAO,CAAC,cAAc;IA2BtB,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,QAAQ;CAkBhB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,YAAY,CAwCxD"}