pulseed 0.6.5 → 0.6.6

package/dist/tools/permission-grant-evaluator.js

@@ -0,0 +1,289 @@
+import * as path from "node:path";
+import { isPermissionGrantCurrentlyActive, isPermissionGrantExpired, isPermissionGrantStale, } from "../runtime/store/permission-grant-store.js";
+import { assessShellCommand } from "./system/ShellTool/command-policy.js";
+import { resolveWorkspaceCwd } from "./workspace-scope.js";
+export async function evaluatePermissionGrantForToolCall(request) {
+    const facts = classifyPermissionGrantRequest(request.tool, request.input, request.context);
+    if (request.hostDecision.status !== "needs_permission") {
+        return {
+            status: "hard_boundary",
+            allowed: false,
+            reason: `Host policy decision is ${request.hostDecision.status}; grants only apply to needs_permission.`,
+            ...facts,
+            consideredGrantIds: [],
+        };
+    }
+    if (facts.excludedCapabilities.length > 0) {
+        return {
+            status: facts.excludedCapabilities.includes("unknown_capability") ? "unknown_capability" : "excluded_capability",
+            allowed: false,
+            reason: `Permission grants cannot cover excluded capabilities: ${facts.excludedCapabilities.join(", ")}`,
+            ...facts,
+            consideredGrantIds: [],
+        };
+    }
+    if (facts.requiredCapabilities.length === 0) {
+        return {
+            status: "fresh_approval_required",
+            allowed: false,
+            reason: "Tool request did not classify into a grantable capability.",
+            ...facts,
+            consideredGrantIds: [],
+        };
+    }
+    const store = request.context.permissionGrantStore;
+    if (!store) {
+        return {
+            status: "missing_grant",
+            allowed: false,
+            reason: "No PermissionGrant store is attached to this tool context.",
+            ...facts,
+            consideredGrantIds: [],
+        };
+    }
+    const grants = await store.list();
+    const consideredGrantIds = [];
+    let lifecycleBlocker = null;
+    for (const grant of grants) {
+        consideredGrantIds.push(grant.grant_id);
+        if (!grantScopeMatchesContext(grant, request.context))
+            continue;
+        if (!grantOriginMatchesContext(grant, request.context))
+            continue;
+        const lifecycleDecision = inactiveGrantDecision(grant, request.now, facts, consideredGrantIds);
+        if (lifecycleDecision) {
+            lifecycleBlocker ??= lifecycleDecision;
+            continue;
+        }
+        const coversAllCapabilities = facts.requiredCapabilities.every((capability) => grant.capabilities.includes(capability));
+        if (!coversAllCapabilities)
+            continue;
+        const recorded = await store.recordUse(grant.grant_id, {
+            audit_ref: request.context.callId ? `tool-call:${request.context.callId}` : `tool:${request.tool.metadata.name}`,
+        });
+        if (!recorded) {
+            return {
+                status: "fresh_approval_required",
+                allowed: false,
+                reason: `Grant ${grant.grant_id} matched but could not be recorded as used.`,
+                ...facts,
+                matchedGrantId: grant.grant_id,
+                consideredGrantIds,
+            };
+        }
+        return {
+            status: "matched",
+            allowed: true,
+            reason: `PermissionGrant ${grant.grant_id} covers ${facts.requiredCapabilities.join(", ")}.`,
+            ...facts,
+            matchedGrantId: grant.grant_id,
+            consideredGrantIds,
+        };
+    }
+    return lifecycleBlocker ?? {
+        status: "missing_grant",
+        allowed: false,
+        reason: `No active PermissionGrant covers ${facts.requiredCapabilities.join(", ")} in the current scope.`,
+        ...facts,
+        consideredGrantIds,
+    };
+}
+function inactiveGrantDecision(grant, now, facts, consideredGrantIds) {
+    if (grant.state === "revoked") {
+        return {
+            status: "revoked_grant",
+            allowed: false,
+            reason: `Grant ${grant.grant_id} is revoked.`,
+            ...facts,
+            matchedGrantId: grant.grant_id,
+            consideredGrantIds: [...consideredGrantIds],
+        };
+    }
+    if (grant.state === "superseded") {
+        return {
+            status: "superseded_grant",
+            allowed: false,
+            reason: `Grant ${grant.grant_id} is superseded.`,
+            ...facts,
+            matchedGrantId: grant.grant_id,
+            consideredGrantIds: [...consideredGrantIds],
+        };
+    }
+    if (isPermissionGrantExpired(grant, now)) {
+        return {
+            status: "expired_grant",
+            allowed: false,
+            reason: `Grant ${grant.grant_id} is expired.`,
+            ...facts,
+            matchedGrantId: grant.grant_id,
+            consideredGrantIds: [...consideredGrantIds],
+        };
+    }
+    if (isPermissionGrantStale(grant) || !isPermissionGrantCurrentlyActive(grant, now)) {
+        return {
+            status: "stale_grant",
+            allowed: false,
+            reason: `Grant ${grant.grant_id} is stale or no longer active.`,
+            ...facts,
+            matchedGrantId: grant.grant_id,
+            consideredGrantIds: [...consideredGrantIds],
+        };
+    }
+    return null;
+}
+function classifyPermissionGrantRequest(tool, input, context) {
+    if (tool.metadata.name === "shell" || tool.metadata.name === "shell_command") {
+        return classifyShellPermissionGrantRequest(input, context);
+    }
+    const requiredCapabilities = new Set();
+    const excludedCapabilities = new Set();
+    if (tool.metadata.isDestructive)
+        excludedCapabilities.add("destructive_action");
+    if (tool.metadata.permissionLevel === "write_remote")
+        excludedCapabilities.add("write_remote");
+    if (tool.metadata.requiresNetwork || tool.metadata.tags.includes("network")) {
+        excludedCapabilities.add("network_send");
+        excludedCapabilities.add("external_send");
+    }
+    if (tool.metadata.tags.includes("memory"))
+        requiredCapabilities.add("update_memory");
+    if (tool.metadata.tags.includes("surface"))
+        requiredCapabilities.add("update_surface");
+    if (tool.metadata.activityCategory === "test")
+        requiredCapabilities.add("run_tests");
+    if (tool.metadata.activityCategory === "file_create" || tool.metadata.activityCategory === "file_modify") {
+        requiredCapabilities.add("write_workspace");
+    }
+    if (requiredCapabilities.size === 0) {
+        switch (tool.metadata.permissionLevel) {
+            case "read_only":
+                requiredCapabilities.add("read_workspace");
+                break;
+            case "read_metrics":
+                requiredCapabilities.add("inspect_runtime");
+                break;
+            case "write_local":
+                requiredCapabilities.add("write_workspace");
+                break;
+            case "execute":
+                excludedCapabilities.add("unknown_capability");
+                break;
+            case "write_remote":
+                break;
+        }
+    }
+    return {
+        requiredCapabilities: [...requiredCapabilities],
+        excludedCapabilities: [...excludedCapabilities],
+    };
+}
+function classifyShellPermissionGrantRequest(input, context) {
+    const requiredCapabilities = new Set();
+    const excludedCapabilities = new Set();
+    if (typeof input !== "object" || input === null) {
+        excludedCapabilities.add("unknown_capability");
+        return {
+            requiredCapabilities: [],
+            excludedCapabilities: [...excludedCapabilities],
+        };
+    }
+    const command = input.command;
+    if (typeof command !== "string") {
+        excludedCapabilities.add("unknown_capability");
+        return {
+            requiredCapabilities: [],
+            excludedCapabilities: [...excludedCapabilities],
+        };
+    }
+    const cwdValidation = resolveWorkspaceCwd(input.cwd, context);
+    const assessment = assessShellCommand(command, context.executionPolicy, context.trusted === true, cwdValidation.valid ? cwdValidation.resolved : context.cwd);
+    if (assessment.capabilities.destructive)
+        excludedCapabilities.add("destructive_action");
+    if (assessment.capabilities.protectedTarget)
+        excludedCapabilities.add("protected_path_mutation");
+    if (assessment.capabilities.network) {
+        excludedCapabilities.add("network_send");
+        excludedCapabilities.add("external_send");
+    }
+    if (!assessment.capabilities.readOnly
+        && !assessment.capabilities.localWrite
+        && !assessment.capabilities.network
+        && !assessment.capabilities.destructive) {
+        excludedCapabilities.add("unknown_capability");
+    }
+    if (assessment.capabilities.localWrite)
+        requiredCapabilities.add("run_safe_local_commands");
+    if (assessment.capabilities.readOnly && requiredCapabilities.size === 0)
+        requiredCapabilities.add("inspect_runtime");
+    return {
+        requiredCapabilities: [...requiredCapabilities],
+        excludedCapabilities: [...excludedCapabilities],
+    };
+}
+function grantScopeMatchesContext(grant, context) {
+    switch (grant.scope.kind) {
+        case "turn":
+            return Boolean(context.turnId && context.turnId === grant.scope.turn_id);
+        case "run":
+            return Boolean(context.runId && context.runId === grant.scope.run_id);
+        case "goal":
+            return context.goalId === grant.scope.goal_id;
+        case "session":
+            return contextSessionIds(context).includes(grant.scope.session_id ?? "");
+        case "workspace": {
+            const grantWorkspaceRoot = normalizePath(grant.scope.workspace_root);
+            return Boolean(grantWorkspaceRoot && contextWorkspaceRoots(context).includes(grantWorkspaceRoot));
+        }
+        case "project":
+            return Boolean(context.projectId && context.projectId === grant.scope.project_id);
+        case "global":
+            return true;
+    }
+}
+function grantOriginMatchesContext(grant, context) {
+    const sessionIds = contextSessionIds(context);
+    const standingGrant = grant.duration.kind === "standing";
+    if (grant.origin.session_id && !standingGrant && !sessionIds.includes(grant.origin.session_id))
+        return false;
+    if (grant.origin.conversation_id) {
+        const conversationIds = contextConversationIds(context);
+        if (!conversationIds.includes(grant.origin.conversation_id))
+            return false;
+    }
+    if (grant.origin.user_id) {
+        const userIds = contextUserIds(context);
+        if (userIds.length > 0 && !userIds.includes(grant.origin.user_id))
+            return false;
+    }
+    return true;
+}
+function contextSessionIds(context) {
+    return [context.sessionId, context.conversationSessionId].filter((value) => Boolean(value));
+}
+function contextConversationIds(context) {
+    return [
+        context.conversationSessionId,
+        stringField(context.runtimeReplyTarget, "conversation_id"),
+        stringField(context.runtimeControlActor, "conversation_id"),
+    ].filter((value) => Boolean(value));
+}
+function contextUserIds(context) {
+    return [
+        stringField(context.runtimeReplyTarget, "user_id"),
+        stringField(context.runtimeControlActor, "user_id"),
+    ].filter((value) => Boolean(value));
+}
+function contextWorkspaceRoots(context) {
+    return [
+        normalizePath(context.executionPolicy?.workspaceRoot),
+        normalizePath(context.cwd),
+    ].filter((value) => Boolean(value));
+}
+function stringField(value, field) {
+    const fieldValue = value?.[field];
+    return typeof fieldValue === "string" && fieldValue.trim() ? fieldValue : undefined;
+}
+function normalizePath(value) {
+    return value ? path.resolve(value) : undefined;
+}
+//# sourceMappingURL=permission-grant-evaluator.js.map

package/dist/tools/permission-grant-evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-grant-evaluator.js","sourceRoot":"","sources":["../../src/tools/permission-grant-evaluator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAMlC,OAAO,EACL,gCAAgC,EAChC,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAE1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAqC3D,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,OAAyC;IAEzC,MAAM,KAAK,GAAG,8BAA8B,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QACvD,OAAO;YACL,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,2BAA2B,OAAO,CAAC,YAAY,CAAC,MAAM,0CAA0C;YACxG,GAAG,KAAK;YACR,kBAAkB,EAAE,EAAE;SACvB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB;YAChH,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,yDAAyD,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACxG,GAAG,KAAK;YACR,kBAAkB,EAAE,EAAE;SACvB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO;YACL,MAAM,EAAE,yBAAyB;YACjC,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,4DAA4D;YACpE,GAAG,KAAK;YACR,kBAAkB,EAAE,EAAE;SACvB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACnD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,4DAA4D;YACpE,GAAG,KAAK;YACR,kBAAkB,EAAE,EAAE;SACvB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,IAAI,gBAAgB,GAAqC,IAAI,CAAC;IAE9D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QAChE,IAAI,CAAC,yBAAyB,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QAEjE,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAC/F,IAAI,iBAAiB,EAAE,CAAC;YACtB,gBAAgB,KAAK,iBAAiB,CAAC;YACvC,SAAS;QACX,CAAC;QAED,MAAM,qBAAqB,GAAG,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAC5E,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CACxC,CAAC;QACF,IAAI,CAAC,qBAAqB;YAAE,SAAS;QAErC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;YACrD,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;SACjH,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,MAAM,EAAE,yBAAyB;gBACjC,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,SAAS,KAAK,CAAC,QAAQ,6CAA6C;gBAC5E,GAAG,KAAK;gBACR,cAAc,EAAE,KAAK,CAAC,QAAQ;gBAC9B,kBAAkB;aACnB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,mBAAmB,KAAK,CAAC,QAAQ,WAAW,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAC5F,GAAG,KAAK;YACR,cAAc,EAAE,KAAK,CAAC,QAAQ;YAC9B,kBAAkB;SACnB,CAAC;IACJ,CAAC;IAED,OAAO,gBAAgB,IAAI;QACzB,MAAM,EAAE,eAAe;QACvB,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,oCAAoC,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB;QACzG,GAAG,KAAK;QACR,kBAAkB;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAA4B,EAC5B,GAAuB,EACvB,KAAkC,EAClC,kBAA4B;IAE5B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO;YACL,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS,KAAK,CAAC,QAAQ,cAAc;YAC7C,GAAG,KAAK;YACR,cAAc,EAAE,KAAK,CAAC,QAAQ;YAC9B,kBAAkB,EAAE,CAAC,GAAG,kBAAkB,CAAC;SAC5C,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS,KAAK,CAAC,QAAQ,iBAAiB;YAChD,GAAG,KAAK;YACR,cAAc,EAAE,KAAK,CAAC,QAAQ;YAC9B,kBAAkB,EAAE,CAAC,GAAG,kBAAkB,CAAC;SAC5C,CAAC;IACJ,CAAC;IACD,IAAI,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS,KAAK,CAAC,QAAQ,cAAc;YAC7C,GAAG,KAAK;YACR,cAAc,EAAE,KAAK,CAAC,QAAQ;YAC9B,kBAAkB,EAAE,CAAC,GAAG,kBAAkB,CAAC;SAC5C,CAAC;IACJ,CAAC;IACD,IAAI,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACnF,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS,KAAK,CAAC,QAAQ,gCAAgC;YAC/D,GAAG,KAAK;YACR,cAAc,EAAE,KAAK,CAAC,QAAQ;YAC9B,kBAAkB,EAAE,CAAC,GAAG,kBAAkB,CAAC;SAC5C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,8BAA8B,CACrC,IAAW,EACX,KAAc,EACd,OAAwB;IAExB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7E,OAAO,mCAAmC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAA6B,CAAC;IAClE,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAqC,CAAC;IAE1E,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa;QAAE,oBAAoB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,KAAK,cAAc;QAAE,oBAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,oBAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACzC,oBAAoB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,oBAAoB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACrF,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,oBAAoB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACvF,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,KAAK,MAAM;QAAE,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrF,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,KAAK,aAAa,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,KAAK,aAAa,EAAE,CAAC;QACzG,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,oBAAoB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpC,QAAQ,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YACtC,KAAK,WAAW;gBACd,oBAAoB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAC3C,MAAM;YACR,KAAK,cAAc;gBACjB,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAC5C,MAAM;YACR,KAAK,aAAa;gBAChB,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAC5C,MAAM;YACR,KAAK,SAAS;gBACZ,oBAAoB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAC/C,MAAM;YACR,KAAK,cAAc;gBACjB,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO;QACL,oBAAoB,EAAE,CAAC,GAAG,oBAAoB,CAAC;QAC/C,oBAAoB,EAAE,CAAC,GAAG,oBAAoB,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC,CAC1C,KAAc,EACd,OAAwB;IAExB,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAA6B,CAAC;IAClE,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,oBAAoB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC/C,OAAO;YACL,oBAAoB,EAAE,EAAE;YACxB,oBAAoB,EAAE,CAAC,GAAG,oBAAoB,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAI,KAA+B,CAAC,OAAO,CAAC;IACzD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,oBAAoB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC/C,OAAO;YACL,oBAAoB,EAAE,EAAE;YACxB,oBAAoB,EAAE,CAAC,GAAG,oBAAoB,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,mBAAmB,CAAE,KAA2B,CAAC,GAAyB,EAAE,OAAO,CAAC,CAAC;IAC3G,MAAM,UAAU,GAAG,kBAAkB,CACnC,OAAO,EACP,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,OAAO,KAAK,IAAI,EACxB,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAC3D,CAAC;IAEF,IAAI,UAAU,CAAC,YAAY,CAAC,WAAW;QAAE,oBAAoB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACxF,IAAI,UAAU,CAAC,YAAY,CAAC,eAAe;QAAE,oBAAoB,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACjG,IAAI,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QACpC,oBAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACzC,oBAAoB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;IACD,IACE,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ;WAC9B,CAAC,UAAU,CAAC,YAAY,CAAC,UAAU;WACnC,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO;WAChC,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,EACvC,CAAC;QACD,oBAAoB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,UAAU,CAAC,YAAY,CAAC,UAAU;QAAE,oBAAoB,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC5F,IAAI,UAAU,CAAC,YAAY,CAAC,QAAQ,IAAI,oBAAoB,CAAC,IAAI,KAAK,CAAC;QAAE,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAErH,OAAO;QACL,oBAAoB,EAAE,CAAC,GAAG,oBAAoB,CAAC;QAC/C,oBAAoB,EAAE,CAAC,GAAG,oBAAoB,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAA4B,EAAE,OAAwB;IACtF,QAAQ,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACzB,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3E,KAAK,KAAK;YACR,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxE,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QAChD,KAAK,SAAS;YACZ,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAC3E,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,kBAAkB,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACrE,OAAO,OAAO,CAAC,kBAAkB,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACpG,CAAC;QACD,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpF,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,KAA4B,EAAE,OAAwB;IACvF,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7G,IAAI,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QACjC,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC;YAAE,OAAO,KAAK,CAAC;IAC5E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;IAClF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAwB;IACjD,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/G,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAwB;IACtD,OAAO;QACL,OAAO,CAAC,qBAAqB;QAC7B,WAAW,CAAC,OAAO,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;QAC1D,WAAW,CAAC,OAAO,CAAC,mBAAmB,EAAE,iBAAiB,CAAC;KAC5D,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,cAAc,CAAC,OAAwB;IAC9C,OAAO;QACL,WAAW,CAAC,OAAO,CAAC,kBAAkB,EAAE,SAAS,CAAC;QAClD,WAAW,CAAC,OAAO,CAAC,mBAAmB,EAAE,SAAS,CAAC;KACpD,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAwB;IACrD,OAAO;QACL,aAAa,CAAC,OAAO,CAAC,eAAe,EAAE,aAAa,CAAC;QACrD,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC;KAC3B,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAiD,EAAE,KAAa;IACnF,MAAM,UAAU,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACtF,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC"}

package/dist/tools/permission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../../src/tools/permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAMpB;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAsB;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAwB;gBAE1C,IAAI,EAAE,qBAAqB;IAOjC,KAAK,CACT,IAAI,EAAE,KAAK,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,qBAAqB,CAAC;IAmEjC,WAAW,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAIvC,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAMxC,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,WAAW;CAapB;AAKD,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpI;AAED,MAAM,WAAW,qBAAqB;CAErC;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB"}
+{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../../src/tools/permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAOpB;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAsB;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAwB;gBAE1C,IAAI,EAAE,qBAAqB;IAOjC,KAAK,CACT,IAAI,EAAE,KAAK,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,qBAAqB,CAAC;IAuFjC,WAAW,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAIvC,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAMxC,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,WAAW;CAapB;AAKD,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpI;AAED,MAAM,WAAW,qBAAqB;CAErC;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB"}

package/dist/tools/permission.js

@@ -1,4 +1,5 @@
 import { decideHostToolExecution, permissionResultFromHostDecision, } from "./execution-orchestrator.js";
+import { evaluatePermissionGrantForToolCall } from "./permission-grant-evaluator.js";
 /**
  * 3-layer permission model for tool invocations.
  *
@@ -28,8 +29,27 @@ export class ToolPermissionManager {
                 return { status: "denied", reason: rule.reason };
             }
         }
-        if (hostPolicyResult.status !== "allowed")
+        if (hostPolicyResult.status !== "allowed") {
+            if (hostDecision.status === "needs_permission") {
+                const grantDecision = await evaluatePermissionGrantForToolCall({
+                    tool,
+                    input,
+                    context,
+                    hostDecision,
+                });
+                if (grantDecision.allowed) {
+                    return {
+                        status: "allowed",
+                        permissionGrantDecision: grantDecision,
+                    };
+                }
+                return {
+                    ...hostPolicyResult,
+                    permissionGrantDecision: grantDecision,
+                };
+            }
             return hostPolicyResult;
+        }
         if (context.executionPolicy)
             return hostPolicyResult;
         // Read-only tools are always allowed after deny-list check

package/dist/tools/permission.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission.js","sourceRoot":"","sources":["../../src/tools/permission.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,uBAAuB,EACvB,gCAAgC,GACjC,MAAM,6BAA6B,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACf,QAAQ,GAAqB,EAAE,CAAC;IAChC,SAAS,GAAqB,EAAE,CAAC;IACjC,UAAU,CAAuB;IACjC,YAAY,CAAyB;IAEtD,YAAY,IAA2B;QACrC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAW,EACX,KAAc,EACd,OAAwB;QAExB,MAAM,YAAY,GAAG,uBAAuB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACvE,MAAM,gBAAgB,GAAG,gCAAgC,CAAC,YAAY,CAAC,CAAC;QACxE,IAAI,YAAY,CAAC,MAAM,KAAK,aAAa;YAAE,OAAO,gBAAgB,CAAC;QAEnE,sCAAsC;QACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACjD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACnD,CAAC;QACH,CAAC;QAED,IAAI,gBAAgB,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,gBAAgB,CAAC;QACnE,IAAI,OAAO,CAAC,eAAe;YAAE,OAAO,gBAAgB,CAAC;QAErD,2DAA2D;QAC3D,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,CAAC;QAED,4CAA4C;QAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC3E,IAAI,YAAY,GAAG,aAAa,EAAE,CAAC;YACjC,OAAO;gBACL,MAAM,EAAE,gBAAgB;gBACxB,MAAM,EAAE,kBAAkB,YAAY,sBAAsB,aAAa,SAAS,IAAI,CAAC,QAAQ,CAAC,eAAe,aAAa;aAC7H,CAAC;QACJ,CAAC;QAED,gFAAgF;QAChF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,KAAK,WAAW,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzG,MAAM,WAAW,GAAG,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACtG,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBACtF,IAAI,YAAY,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACtC,OAAO;wBACL,MAAM,EAAE,QAAQ;wBAChB,MAAM,EAAE,wBAAwB,YAAY,CAAC,MAAM,EAAE;qBACtD,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,MAAM,EAAE,gBAAgB;oBACxB,MAAM,EAAE,wDAAwD;iBACjE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACjD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,+DAA+D;QAC/D,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,KAAK,cAAc,EAAE,CAAC;YACrD,OAAO;gBACL,MAAM,EAAE,gBAAgB;gBACxB,MAAM,EAAE,oCAAoC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aAClF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,WAAW,CAAC,IAAoB;QAC9B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,YAAY,CAAC,IAAoB;QAC/B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,kBAAkB;IAEV,gBAAgB,CAAC,KAA0B;QACjD,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,WAAW,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;YAC9B,KAAK,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,KAAK,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,KAAK,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,KAAK,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAEO,WAAW,CACjB,IAAoB,EACpB,IAAW,EACX,KAAc,EACd,OAAwB;QAExB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,QAAQ,CAAC,eAAe;YAAE,OAAO,KAAK,CAAC;QACjG,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACjE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;CAEF"}
+{"version":3,"file":"permission.js","sourceRoot":"","sources":["../../src/tools/permission.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,uBAAuB,EACvB,gCAAgC,GACjC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACf,QAAQ,GAAqB,EAAE,CAAC;IAChC,SAAS,GAAqB,EAAE,CAAC;IACjC,UAAU,CAAuB;IACjC,YAAY,CAAyB;IAEtD,YAAY,IAA2B;QACrC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAW,EACX,KAAc,EACd,OAAwB;QAExB,MAAM,YAAY,GAAG,uBAAuB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACvE,MAAM,gBAAgB,GAAG,gCAAgC,CAAC,YAAY,CAAC,CAAC;QACxE,IAAI,YAAY,CAAC,MAAM,KAAK,aAAa;YAAE,OAAO,gBAAgB,CAAC;QAEnE,sCAAsC;QACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACjD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACnD,CAAC;QACH,CAAC;QAED,IAAI,gBAAgB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1C,IAAI,YAAY,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;gBAC/C,MAAM,aAAa,GAAG,MAAM,kCAAkC,CAAC;oBAC7D,IAAI;oBACJ,KAAK;oBACL,OAAO;oBACP,YAAY;iBACb,CAAC,CAAC;gBACH,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;oBAC1B,OAAO;wBACL,MAAM,EAAE,SAAS;wBACjB,uBAAuB,EAAE,aAAa;qBACvC,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,GAAG,gBAAgB;oBACnB,uBAAuB,EAAE,aAAa;iBACvC,CAAC;YACJ,CAAC;YACD,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO,CAAC,eAAe;YAAE,OAAO,gBAAgB,CAAC;QAErD,2DAA2D;QAC3D,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,CAAC;QAED,4CAA4C;QAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC3E,IAAI,YAAY,GAAG,aAAa,EAAE,CAAC;YACjC,OAAO;gBACL,MAAM,EAAE,gBAAgB;gBACxB,MAAM,EAAE,kBAAkB,YAAY,sBAAsB,aAAa,SAAS,IAAI,CAAC,QAAQ,CAAC,eAAe,aAAa;aAC7H,CAAC;QACJ,CAAC;QAED,gFAAgF;QAChF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,KAAK,WAAW,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzG,MAAM,WAAW,GAAG,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACtG,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBACtF,IAAI,YAAY,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACtC,OAAO;wBACL,MAAM,EAAE,QAAQ;wBAChB,MAAM,EAAE,wBAAwB,YAAY,CAAC,MAAM,EAAE;qBACtD,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,MAAM,EAAE,gBAAgB;oBACxB,MAAM,EAAE,wDAAwD;iBACjE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACjD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,+DAA+D;QAC/D,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,KAAK,cAAc,EAAE,CAAC;YACrD,OAAO;gBACL,MAAM,EAAE,gBAAgB;gBACxB,MAAM,EAAE,oCAAoC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aAClF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,WAAW,CAAC,IAAoB;QAC9B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,YAAY,CAAC,IAAoB;QAC/B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,kBAAkB;IAEV,gBAAgB,CAAC,KAA0B;QACjD,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,WAAW,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;YAC9B,KAAK,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,KAAK,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,KAAK,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,KAAK,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAEO,WAAW,CACjB,IAAoB,EACpB,IAAW,EACX,KAAc,EACd,OAAwB;QAExB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,QAAQ,CAAC,eAAe;YAAE,OAAO,KAAK,CAAC;QACjG,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACjE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;CAEF"}

package/dist/tools/query/ArchitectureTool/ArchitectureTool.d.ts

@@ -2,7 +2,7 @@ import { z } from "zod";
 import type { ITool, ToolResult, ToolCallContext, PermissionCheckResult, ToolMetadata, ToolDescriptionContext } from "../../types.js";
 export declare const ArchitectureToolInputSchema: z.ZodObject<{
     module: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
+}, "strict", z.ZodTypeAny, {
     module?: string | undefined;
 }, {
     module?: string | undefined;
@@ -12,7 +12,7 @@ export declare class ArchitectureTool implements ITool<ArchitectureToolInput, un
     readonly metadata: ToolMetadata;
     readonly inputSchema: z.ZodObject<{
         module: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
+    }, "strict", z.ZodTypeAny, {
         module?: string | undefined;
     }, {
         module?: string | undefined;

package/dist/tools/query/ArchitectureTool/ArchitectureTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ArchitectureTool.d.ts","sourceRoot":"","sources":["../../../../src/tools/query/ArchitectureTool/ArchitectureTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,qBAAqB,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAItI,eAAO,MAAM,2BAA2B;;;;;;EAEtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAqChF,qBAAa,gBAAiB,YAAW,KAAK,CAAC,qBAAqB,EAAE,OAAO,CAAC;IAC5E,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAW7B;IACF,QAAQ,CAAC,WAAW;;;;;;OAA+B;IAEnD,WAAW,CAAC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,MAAM;IAIhD,IAAI,CAAC,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAwClF,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,EAAE,QAAQ,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAIjH,iBAAiB,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,OAAO;CAG3D"}
+{"version":3,"file":"ArchitectureTool.d.ts","sourceRoot":"","sources":["../../../../src/tools/query/ArchitectureTool/ArchitectureTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,qBAAqB,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAItI,eAAO,MAAM,2BAA2B;;;;;;EAE7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAqChF,qBAAa,gBAAiB,YAAW,KAAK,CAAC,qBAAqB,EAAE,OAAO,CAAC;IAC5E,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAW7B;IACF,QAAQ,CAAC,WAAW;;;;;;OAA+B;IAEnD,WAAW,CAAC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,MAAM;IAIhD,IAAI,CAAC,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAwClF,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,EAAE,QAAQ,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAIjH,iBAAiB,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,OAAO;CAG3D"}

package/dist/tools/query/ArchitectureTool/ArchitectureTool.js

@@ -3,7 +3,7 @@ import { DESCRIPTION } from "./prompt.js";
 import { TAGS, PERMISSION_LEVEL, MAX_OUTPUT_CHARS } from "./constants.js";
 export const ArchitectureToolInputSchema = z.object({
     module: z.string().optional(),
-});
+}).strict();
 const LAYERS = {
     "Layer 0": "StateManager, AdapterLayer (no dependencies)",
     "Layer 1": "GapCalculator, DriveSystem, TrustManager",

package/dist/tools/query/ArchitectureTool/ArchitectureTool.js.map

@@ -1 +1 @@
-{"version":3,"file":"ArchitectureTool.js","sourceRoot":"","sources":["../../../../src/tools/query/ArchitectureTool/ArchitectureTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE1E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAGH,MAAM,MAAM,GAA2B;IACrC,SAAS,EAAE,8CAA8C;IACzD,SAAS,EAAE,0CAA0C;IACrD,SAAS,EAAE,iEAAiE;IAC5E,SAAS,EAAE,iDAAiD;IAC5D,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,8BAA8B;IACzC,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,8CAA8C;IACzD,SAAS,EAAE,kCAAkC;IAC7C,SAAS,EAAE,kBAAkB;IAC7B,UAAU,EAAE,+FAA+F;IAC3G,UAAU,EAAE,yCAAyC;IACrD,UAAU,EAAE,mEAAmE;IAC/E,UAAU,EAAE,uCAAuC;IACnD,UAAU,EAAE,2IAA2I;IACvJ,UAAU,EAAE,iEAAiE;CAC9E,CAAC;AAEF,MAAM,mBAAmB,GAA2B;IAClD,YAAY,EAAE,gEAAgE;IAC9E,aAAa,EAAE,6FAA6F;IAC5G,WAAW,EAAE,oEAAoE;IACjF,YAAY,EAAE,2EAA2E;IACzF,iBAAiB,EAAE,oDAAoD;IACvE,gBAAgB,EAAE,+CAA+C;IACjE,aAAa,EAAE,sDAAsD;IACrE,cAAc,EAAE,iCAAiC;IACjD,aAAa,EAAE,oDAAoD;IACnE,WAAW,EAAE,4FAA4F;IACzG,UAAU,EAAE,yDAAyD;IACrE,gBAAgB,EAAE,gEAAgE;IAClF,gBAAgB,EAAE,wEAAwE;CAC3F,CAAC;AAEF,MAAM,OAAO,gBAAgB;IAClB,QAAQ,GAAiB;QAChC,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,CAAC,cAAc,EAAE,qBAAqB,CAAC;QAChD,eAAe,EAAE,gBAAgB;QACjC,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,KAAK;QACjB,cAAc,EAAE,CAAC;QACjB,cAAc,EAAE,gBAAgB;QAChC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;KAChB,CAAC;IACO,WAAW,GAAG,2BAA2B,CAAC;IAEnD,WAAW,CAAC,QAAiC;QAC3C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAA4B,EAAE,QAAyB;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,qBAAqB,KAAK,CAAC,MAAM,EAAE;oBAC5C,KAAK,EAAE,qBAAqB,KAAK,CAAC,MAAM,oBAAoB,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACzG,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACnC,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE;gBACjD,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE;gBACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG;YACX,YAAY,EAAE;gBACZ,KAAK,EAAE,qGAAqG;gBAC5G,YAAY,EAAE,mEAAmE;gBACjF,kBAAkB,EAAE,uIAAuI;aAC5J;YACD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,mBAAmB;SAC7B,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI;YACJ,OAAO,EAAE,yBAAyB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,YAAY,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,UAAU;YACzH,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAA6B,EAAE,QAA0B;QAC9E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,iBAAiB,CAAC,MAA8B;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
+{"version":3,"file":"ArchitectureTool.js","sourceRoot":"","sources":["../../../../src/tools/query/ArchitectureTool/ArchitectureTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE1E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,MAAM,GAA2B;IACrC,SAAS,EAAE,8CAA8C;IACzD,SAAS,EAAE,0CAA0C;IACrD,SAAS,EAAE,iEAAiE;IAC5E,SAAS,EAAE,iDAAiD;IAC5D,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,8BAA8B;IACzC,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,8CAA8C;IACzD,SAAS,EAAE,kCAAkC;IAC7C,SAAS,EAAE,kBAAkB;IAC7B,UAAU,EAAE,+FAA+F;IAC3G,UAAU,EAAE,yCAAyC;IACrD,UAAU,EAAE,mEAAmE;IAC/E,UAAU,EAAE,uCAAuC;IACnD,UAAU,EAAE,2IAA2I;IACvJ,UAAU,EAAE,iEAAiE;CAC9E,CAAC;AAEF,MAAM,mBAAmB,GAA2B;IAClD,YAAY,EAAE,gEAAgE;IAC9E,aAAa,EAAE,6FAA6F;IAC5G,WAAW,EAAE,oEAAoE;IACjF,YAAY,EAAE,2EAA2E;IACzF,iBAAiB,EAAE,oDAAoD;IACvE,gBAAgB,EAAE,+CAA+C;IACjE,aAAa,EAAE,sDAAsD;IACrE,cAAc,EAAE,iCAAiC;IACjD,aAAa,EAAE,oDAAoD;IACnE,WAAW,EAAE,4FAA4F;IACzG,UAAU,EAAE,yDAAyD;IACrE,gBAAgB,EAAE,gEAAgE;IAClF,gBAAgB,EAAE,wEAAwE;CAC3F,CAAC;AAEF,MAAM,OAAO,gBAAgB;IAClB,QAAQ,GAAiB;QAChC,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,CAAC,cAAc,EAAE,qBAAqB,CAAC;QAChD,eAAe,EAAE,gBAAgB;QACjC,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,KAAK;QACjB,cAAc,EAAE,CAAC;QACjB,cAAc,EAAE,gBAAgB;QAChC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;KAChB,CAAC;IACO,WAAW,GAAG,2BAA2B,CAAC;IAEnD,WAAW,CAAC,QAAiC;QAC3C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAA4B,EAAE,QAAyB;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,qBAAqB,KAAK,CAAC,MAAM,EAAE;oBAC5C,KAAK,EAAE,qBAAqB,KAAK,CAAC,MAAM,oBAAoB,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACzG,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACnC,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE;gBACjD,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE;gBACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG;YACX,YAAY,EAAE;gBACZ,KAAK,EAAE,qGAAqG;gBAC5G,YAAY,EAAE,mEAAmE;gBACjF,kBAAkB,EAAE,uIAAuI;aAC5J;YACD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,mBAAmB;SAC7B,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI;YACJ,OAAO,EAAE,yBAAyB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,YAAY,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,UAAU;YACzH,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAA6B,EAAE,QAA0B;QAC9E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,iBAAiB,CAAC,MAA8B;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}