safehands-pharos 1.4.0 → 2.6.0

package/dist/lib/policy/actionPolicyEngine.js.map

@@ -1 +1 @@
-{"version":3,"file":"actionPolicyEngine.js","sourceRoot":"","sources":["../../../src/lib/policy/actionPolicyEngine.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,uEAAuE;AACvE,sDAAsD;AACtD,0EAA0E;AAE1E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC7C,OAAO,EACL,QAAQ,EACR,kBAAkB,EAClB,UAAU,EACV,wBAAwB,EACxB,kBAAkB,EAClB,qBAAqB,EAErB,YAAY,EACZ,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAqEzB,SAAS,OAAO,CAAC,KAAyB;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAChB,MAAqB,EACrB,IAAY,EACZ,MAA6B,EAC7B,OAAe,EACf,OAAkB,EAClB,eAA0B,EAC1B,MAAe,EACf,MAAe;IAEf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,eAAe,IAAI,MAAM;QAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAyB;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAA0B;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAChE,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;QACrE,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvF,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACvE,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1D,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAqB;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACrE,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7B,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,SAA0B,EAAE,MAAqB;IACxE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5D,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,sBAAsB,CAAC;IAC1D,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,sBAAsB,CAAC;IAC3D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAwB;IAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC;IAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,UAAU,CAAC;IAChD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,IAAI,SAAS,EAAE,CAAC;QACd,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,2CAA2C,EAAE,OAAO,EAAE,eAAe,EAAE,oCAAoC,EAAE,oCAAoC,CAAC,CAAC;IAChM,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,kCAAkC,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,QAAQ,cAAc,OAAO,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,+CAA+C,CAAC,CAAC;IAChM,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,wCAAwC,QAAQ,IAAI,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;QACvC,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,kBAAkB,cAAc,WAAW,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,kDAAkD,CAAC,CAAC;IAChM,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,kBAAkB,GAAG,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QACnD,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,uDAAuD,EAAE,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,kGAAkG,CAAC,CAAC;IACrP,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC3D,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,MAAM,uBAAuB,kBAAkB,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,wCAAwC,EAAE,uEAAuE,CAAC,CAAC;QAC9P,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,kBAAkB,cAAc,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,SAAS,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,+BAA+B,EAAE,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,8BAA8B,CAAC,CAAC;QAC1K,CAAC;aAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,0BAA0B,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,wCAAwC,CAAC,CAAC;QAC/J,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,IAAI,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxI,IAAI,SAAS,IAAI,KAAK,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;YACvD,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,2CAA2C,EAAE,OAAO,EAAE,eAAe,EAAE,+BAA+B,EAAE,gCAAgC,CAAC,CAAC;QACzL,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9E,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,GAAG,MAAM,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBACjF,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,cAAc,kBAAkB,wBAAwB,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,oCAAoC,EAAE,+EAA+E,CAAC,CAAC;YACxQ,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,sBAAsB,wBAAwB,yBAAyB,CAAC,CAAC;YACvH,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,6BAA6B,EAAE,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,kCAAkC,CAAC,CAAC;QACxK,CAAC;aAAM,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;YAC3C,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,2CAA2C,CAAC,CAAC;QAC9J,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YAC7G,SAAS,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,MAAM,uBAAuB,kBAAkB,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,qCAAqC,EAAE,uEAAuE,CAAC,CAAC;QAC5P,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAC9C,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,wCAAwC,EAAE,OAAO,EAAE,eAAe,EAAE,kCAAkC,EAAE,sFAAsF,CAAC,CAAC;QACxO,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,qCAAqC,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACjD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAChE,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,gBAAgB,OAAO,uBAAuB,qBAAqB,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,wCAAwC,EAAE,kFAAkF,CAAC,CAAC;QACvR,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,0BAA0B,qBAAqB,cAAc,CAAC,CAAC;QACjH,CAAC;QAED,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,mBAAmB,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;YACxG,MAAM,MAAM,GAAG,KAAK,CAAC,mBAAmB,CAAC,WAAW,EAAE,KAAK,iBAAiB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7G,SAAS,CACP,MAAM,EACN,oBAAoB,EACpB,MAAM,EACN,iBAAiB,KAAK,CAAC,mBAAmB,iCAAiC,YAAY,GAAG,EAC1F,OAAO,EACP,eAAe,EACf,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,SAAS,EAC3E,iFAAiF,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAC9C,IAAI,WAAW,KAAK,qBAAqB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACvE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,4BAA4B,WAAW,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,yCAAyC,CAAC,CAAC;IAC1K,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,KAAK,aAAa,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC3F,SAAS,CAAC,MAAM,EAAE,yBAAyB,EAAE,MAAM,EAAE,oDAAoD,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,yCAAyC,CAAC,CAAC;IAC7L,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAElD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,QAAQ,GAAG,iBAAiB,CAAC;IACxG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;QAAE,QAAQ,GAAG,sBAAsB,CAAC;IAE9G,OAAO;QACL,QAAQ;QACR,SAAS;QACT,aAAa,EAAE,QAAQ,KAAK,OAAO;QACnC,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM;QACN,WAAW;QACX,OAAO;QACP,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA0B;IAC5D,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,uIAAuI,CAAC;IACjJ,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,qDAAqD,CAAC;IAChI,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzH,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1G,OAAO,mBAAmB,IAAI,YAAY,UAAU,GAAG,UAAU,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,QAAQ,GAAG,CAAC;IAClE,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"actionPolicyEngine.js","sourceRoot":"","sources":["../../../src/lib/policy/actionPolicyEngine.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,uEAAuE;AACvE,iFAAiF;AACjF,0EAA0E;AAE1E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EACL,QAAQ,EACR,kBAAkB,EAClB,+BAA+B,EAC/B,oBAAoB,EACpB,+BAA+B,EAC/B,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAoB,MAAM,kBAAkB,CAAC;AAiD7F,mJAAmJ;AACnJ,MAAM,UAAU,0BAA0B,CAAC,CAAiB;IAC1D,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,SAAS;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,gBAAgB,EAAE,CAAC,CAAC,SAAS,CAAC,gBAAgB;QAC9C,yBAAyB,EAAE,CAAC,CAAC,yBAAyB;KACvD,CAAC;AACJ,CAAC;AA4DD,SAAS,OAAO,CAAC,KAAyB;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAChB,MAAqB,EACrB,IAAY,EACZ,MAA6B,EAC7B,OAAe,EACf,OAAkB,EAClB,eAA0B,EAC1B,MAAe,EACf,MAAe;IAEf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,eAAe,IAAI,MAAM;QAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAyB;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAA0B;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhE,6EAA6E;IAC7E,gFAAgF;IAChF,+DAA+D;IAC/D,MAAM,UAAU,GACd,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QACnD,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAC/C,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,CAAC;IACrC,MAAM,cAAc,GAClB,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM;QAC7C,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC;IAC9D,IAAI,UAAU;QAAE,OAAO,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAErD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/F,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,MAAqB;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACrE,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7B,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,SAA0B,EAAE,MAAqB;IACxE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5D,IAAI,SAAS,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC;IACxC,6EAA6E;IAC7E,8EAA8E;IAC9E,wCAAwC;IACxC,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAwB;IAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC;IAC1C,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,OAAO,EAAE,SAAS,IAAI,KAAK,CAAC;IACjE,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAEvD,yEAAyE;IACzE,6EAA6E;IAC7E,oDAAoD;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,OAAO,qCAAqC,EAAE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,iEAAiE,CAAC,CAAC;IACrN,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC;IACtF,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,8DAA8D;IAC9D,IAAI,SAAS,EAAE,CAAC;QACd,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,iGAAiG,CAAC,CAAC;IAC7L,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,kCAAkC,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;QACvC,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,kBAAkB,cAAc,WAAW,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,kDAAkD,CAAC,CAAC;IAChM,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,kBAAkB,GAAG,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;QAC5D,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,uDAAuD,EAAE,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,kGAAkG,CAAC,CAAC;IACrP,CAAC;SAAM,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACvE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,0EAA0E,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,0EAA0E,CAAC,CAAC;IAC3O,CAAC;IAEC,IAAI,KAAK,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,eAAe,CAAC,cAAc,CAAC;QACpD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG,YAAY,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,MAAM,uBAAuB,YAAY,kBAAkB,MAAM,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,wCAAwC,EAAE,uCAAuC,CAAC,CAAC;QACpP,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,YAAY,wBAAwB,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QAC1H,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACxC,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;gBACrB,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,mCAAmC,OAAO,UAAU,MAAM,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,mCAAmC,CAAC,CAAC;YAC3M,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,sCAAsC,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,SAAS,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,+BAA+B,EAAE,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,8BAA8B,CAAC,CAAC;QAC1K,CAAC;aAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,4DAA4D,EAAE,OAAO,EAAE,eAAe,EAAE,kCAAkC,EAAE,0EAA0E,CAAC,CAAC;QAC1P,CAAC;aAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,0BAA0B,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,wCAAwC,CAAC,CAAC;QAC/J,CAAC;aAAM,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpE,2EAA2E;YAC3E,6EAA6E;YAC7E,kEAAkE;YAClE,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,2FAA2F,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,4EAA4E,CAAC,CAAC;QACvQ,CAAC;aAAM,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;YAC/D,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,iHAAiH,CAAC,CAAC;QACvK,CAAC;IACH,CAAC;IAEH,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,IAAI,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxI,IAAI,SAAS,IAAI,KAAK,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;YACvD,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,2CAA2C,EAAE,OAAO,EAAE,eAAe,EAAE,+BAA+B,EAAE,gCAAgC,CAAC,CAAC;QACzL,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9E,MAAM,aAAa,GAAG,eAAe,CAAC,eAAe,CAAC;YACtD,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,GAAG,aAAa,EAAE,CAAC;gBAC9D,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,cAAc,kBAAkB,aAAa,aAAa,MAAM,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,oCAAoC,EAAE,yCAAyC,CAAC,CAAC;YACnP,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,sBAAsB,aAAa,mCAAmC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACxI,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,6BAA6B,EAAE,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,kCAAkC,CAAC,CAAC;QACxK,CAAC;aAAM,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;YAC3C,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,2CAA2C,CAAC,CAAC;QAC9J,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAChE,kFAAkF;YAClF,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,uFAAuF,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,+EAA+E,CAAC,CAAC;QACpQ,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAC3D,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,+GAA+G,CAAC,CAAC;QACnK,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,eAAe,CAAC,WAAW,CAAC;QAC9C,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YAC5F,SAAS,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,MAAM,uBAAuB,SAAS,kBAAkB,MAAM,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,qCAAqC,EAAE,uCAAuC,CAAC,CAAC;QAC/O,CAAC;QAED,gEAAgE;QAChE,gFAAgF;QAChF,yEAAyE;QACzE,IAAI,KAAK,CAAC,OAAO,IAAI,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YACnE,SAAS,CAAC,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,oBAAoB,KAAK,CAAC,OAAO,wHAAwH,EAAE,OAAO,EAAE,eAAe,EAAE,kDAAkD,EAAE,wGAAwG,CAAC,CAAC;QAC5Y,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YAC1F,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;gBACrB,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,mCAAmC,OAAO,UAAU,MAAM,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,mCAAmC,CAAC,CAAC;YAC3M,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,mCAAmC,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,sBAAsB,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACxE,IAAI,yBAAyB,CAAC,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,EAAE,CAAC;YAC/D,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,YAAY,KAAK,CAAC,cAAc,6DAA6D,CAAC,CAAC;QACjJ,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,YAAY,KAAK,CAAC,cAAc,wDAAwD,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,8DAA8D,CAAC,CAAC;QAC/O,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAC9C,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,wCAAwC,EAAE,OAAO,EAAE,eAAe,EAAE,kCAAkC,EAAE,sFAAsF,CAAC,CAAC;QACxO,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,qCAAqC,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,eAAe,CAAC,kBAAkB,CAAC;QACrD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,GAAG,SAAS,EAAE,CAAC;YAC5C,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,gBAAgB,OAAO,uBAAuB,SAAS,kBAAkB,MAAM,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,wCAAwC,EAAE,+CAA+C,CAAC,CAAC;QACpQ,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,0BAA0B,SAAS,wBAAwB,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACjI,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,oBAAoB,CAAC,WAAW,EAAE,EAAE,CAAC;YACnI,IAAI,OAAO,GAAG,OAAO,EAAE,CAAC;gBACtB,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,oDAAoD,OAAO,UAAU,OAAO,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,4BAA4B,CAAC,CAAC;YAC3N,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,2CAA2C,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;QAED,MAAM,iBAAiB,GAAG,+BAA+B,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACxF,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACtG,MAAM,UAAU,GAAG,mDAAmD,oBAAoB,uBAAuB,qBAAqB,GAAG,CAAC;YAC1I,MAAM,UAAU,GAAG,2CAA2C,YAAY,eAAe,aAAa,GAAG,CAAC;YAC1G,SAAS,CACP,MAAM,EACN,oBAAoB,EACpB,MAAM,EACN,iBAAiB,KAAK,CAAC,mBAAmB,2CAA2C,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,EAC3H,OAAO,EACP,eAAe,EACf,uDAAuD,EACvD,SAAS,CAAC,CAAC,CAAC,sDAAsD,CAAC,CAAC,CAAC,+DAA+D,CACrI,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;YACrC,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,iBAAiB,KAAK,CAAC,mBAAmB,6BAA6B,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,2BAA2B,GAAG,CAAC,CAAC;QAChM,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAC9C,IAAI,WAAW,KAAK,qBAAqB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACvE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,4BAA4B,WAAW,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,yCAAyC,CAAC,CAAC;IAC1K,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,KAAK,aAAa,EAAE,CAAC;QAChD,uEAAuE;QACvE,kFAAkF;QAClF,0EAA0E;QAC1E,SAAS,CAAC,MAAM,EAAE,8BAA8B,EAAE,SAAS,EAAE,gHAAgH,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,0GAA0G,CAAC,CAAC;IAClU,CAAC;SAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACnD,SAAS,CAAC,MAAM,EAAE,yBAAyB,EAAE,SAAS,EAAE,oDAAoD,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,yCAAyC,CAAC,CAAC;IAChM,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,6EAA6E;IAC7E,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,IAAI,IAAI,CAAC,KAAK,GAAG,oBAAoB,EAAE,CAAC;YACtC,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,uBAAuB,IAAI,CAAC,KAAK,qCAAqC,oBAAoB,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,IAAI,CAAC,KAAK,qCAAqC,oBAAoB,IAAI,EAAE,8FAA8F,CAAC,CAAC;QAC3V,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,uBAAuB,IAAI,CAAC,KAAK,uCAAuC,oBAAoB,IAAI,CAAC,CAAC;QAC5I,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,IAAI,+BAA+B,EAAE,CAAC;YAC1G,SAAS,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,qBAAqB,IAAI,CAAC,gBAAgB,uBAAuB,+BAA+B,oDAAoD,EAAE,OAAO,EAAE,eAAe,EAAE,iEAAiE,EAAE,iDAAiD,CAAC,CAAC;QACvV,CAAC;aAAM,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;YACrD,SAAS,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,qBAAqB,IAAI,CAAC,gBAAgB,yCAAyC,+BAA+B,IAAI,CAAC,CAAC;QACzK,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,gDAAgD,CAAC;YACxG,IAAI,IAAI,CAAC,yBAAyB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,CAAC;gBACxF,MAAM,IAAI,yJAAyJ,CAAC;YACtK,CAAC;YACD,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,gCAAgC,MAAM,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,mFAAmF,CAAC,CAAC;YAClN,2EAA2E;YAC3E,4EAA4E;YAC5E,wDAAwD;YACxD,OAAO,CAAC,IAAI,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,wDAAwD,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAElD,+EAA+E;IAC/E,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACpG,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC/F,IAAI,QAAQ,KAAK,OAAO,IAAI,gBAAgB,EAAE,CAAC;QAC7C,QAAQ,GAAG,iBAAiB,CAAC;IAC/B,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,IAAI,eAAe,EAAE,CAAC;QACnD,QAAQ,GAAG,sBAAsB,CAAC;IACpC,CAAC;IAED,OAAO;QACL,QAAQ;QACR,SAAS;QACT,aAAa,EAAE,QAAQ,KAAK,OAAO;QACnC,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM;QACN,WAAW;QACX,OAAO;QACP,SAAS;KACV,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,aAAa,CAAC,SAAkB;IACvC,IAAI,OAAO,SAAS,KAAK,SAAS;QAAE,OAAO,oBAAoB,CAAC;IAChE,OAAO,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA0B;IAC5D,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,8CAA8C,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,qEAAqE,CAAC;IAC5J,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,qDAAqD,CAAC;IAChI,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzH,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1G,OAAO,mBAAmB,IAAI,YAAY,UAAU,GAAG,UAAU,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,QAAQ,GAAG,CAAC;IAClE,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/policy/agentPolicy.d.ts

@@ -0,0 +1,29 @@
+export type PolicyProfile = "conservative" | "balanced" | "advanced" | "custom";
+export interface AgentPolicyLimits {
+    maxPaymentPROS: string;
+    maxSwapPROS: string;
+    maxDailySpendPROS: string;
+    maxX402PaymentUSDC: string;
+    maxApprovalUSDC: string;
+}
+export interface AgentPolicyFlags {
+    allowUnknownTokens: boolean;
+    allowCustomContractCalls: boolean;
+    requireConfirmationAboveRisk: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL";
+}
+export interface AgentPolicy {
+    profile: PolicyProfile;
+    limits: AgentPolicyLimits;
+    flags: AgentPolicyFlags;
+}
+export declare const POLICY_PROFILES: Record<Exclude<PolicyProfile, "custom">, AgentPolicy>;
+export declare function isSafeAgentId(agentId: string): boolean;
+export declare function loadAgentPolicy(agentId?: string): AgentPolicy;
+export declare function saveAgentPolicy(agentId: string, policy: AgentPolicy): void;
+export declare function resolveEffectiveLimits(policy: AgentPolicy): {
+    maxPaymentPROS: number;
+    maxSwapPROS: number;
+    maxX402PaymentUSDC: number;
+    maxApprovalUSDC: number;
+};
+//# sourceMappingURL=agentPolicy.d.ts.map

package/dist/lib/policy/agentPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentPolicy.d.ts","sourceRoot":"","sources":["../../../src/lib/policy/agentPolicy.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEhF,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wBAAwB,EAAE,OAAO,CAAC;IAClC,4BAA4B,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CACtE;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,gBAAgB,CAAC;CACzB;AAED,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,WAAW,CA8CjF,CAAC;AAUF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEtD;AAqDD,wBAAgB,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW,CAsB7D;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,IAAI,CAI1E;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,WAAW,GAClB;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAOtG"}

package/dist/lib/policy/agentPolicy.js

@@ -0,0 +1,154 @@
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+export const POLICY_PROFILES = {
+    conservative: {
+        profile: "conservative",
+        limits: {
+            maxPaymentPROS: "0.1",
+            maxSwapPROS: "1",
+            maxDailySpendPROS: "5",
+            maxX402PaymentUSDC: "0.01",
+            maxApprovalUSDC: "10",
+        },
+        flags: {
+            allowUnknownTokens: false,
+            allowCustomContractCalls: false,
+            requireConfirmationAboveRisk: "LOW",
+        },
+    },
+    balanced: {
+        profile: "balanced",
+        limits: {
+            maxPaymentPROS: "1",
+            maxSwapPROS: "10",
+            maxDailySpendPROS: "25",
+            maxX402PaymentUSDC: "0.1",
+            maxApprovalUSDC: "50",
+        },
+        flags: {
+            allowUnknownTokens: false,
+            allowCustomContractCalls: false,
+            requireConfirmationAboveRisk: "MEDIUM",
+        },
+    },
+    advanced: {
+        profile: "advanced",
+        limits: {
+            maxPaymentPROS: "100",
+            maxSwapPROS: "1000",
+            maxDailySpendPROS: "5000",
+            maxX402PaymentUSDC: "1",
+            maxApprovalUSDC: "500",
+        },
+        flags: {
+            allowUnknownTokens: true,
+            allowCustomContractCalls: true,
+            requireConfirmationAboveRisk: "HIGH",
+        },
+    },
+};
+function getPoliciesDir() {
+    const __dirname = dirname(fileURLToPath(import.meta.url));
+    return join(__dirname, "..", "..", "..", ".agents", "policies");
+}
+// agentId becomes a filename — it must NEVER be able to traverse out of the
+// policies directory. Reject path separators and `..` before it touches the FS.
+const SAFE_AGENT_ID = /^[A-Za-z0-9_.:-]+$/;
+export function isSafeAgentId(agentId) {
+    return SAFE_AGENT_ID.test(agentId) && !agentId.includes("..");
+}
+function policyPath(agentId) {
+    if (!isSafeAgentId(agentId)) {
+        throw new Error(`Invalid agentId '${agentId}': only letters, digits and _ . : - are allowed (no path separators or '..').`);
+    }
+    return join(getPoliciesDir(), `${agentId}.json`);
+}
+function validatePolicy(raw) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const obj = raw;
+    const profile = obj.profile;
+    if (typeof profile !== "string")
+        return null;
+    if (!["conservative", "balanced", "advanced", "custom"].includes(profile))
+        return null;
+    const limits = obj.limits;
+    if (!limits || typeof limits !== "object")
+        return null;
+    const l = limits;
+    for (const key of ["maxPaymentPROS", "maxSwapPROS", "maxDailySpendPROS", "maxX402PaymentUSDC", "maxApprovalUSDC"]) {
+        if (typeof l[key] !== "string")
+            return null;
+        const n = Number(l[key]);
+        if (!Number.isFinite(n) || n < 0)
+            return null;
+    }
+    const flags = obj.flags;
+    if (!flags || typeof flags !== "object")
+        return null;
+    const f = flags;
+    if (typeof f.allowUnknownTokens !== "boolean")
+        return null;
+    if (typeof f.allowCustomContractCalls !== "boolean")
+        return null;
+    if (typeof f.requireConfirmationAboveRisk !== "string")
+        return null;
+    if (!["LOW", "MEDIUM", "HIGH", "CRITICAL"].includes(f.requireConfirmationAboveRisk))
+        return null;
+    return {
+        profile: profile,
+        limits: l,
+        flags: f,
+    };
+}
+/**
+ * Fail-closed fallback: a policy file that EXISTS but is malformed or
+ * invalid must never silently degrade to the more permissive `balanced`
+ * profile (a typo in a conservative custom policy would otherwise 10× the
+ * per-tx limits). Warn the operator and pin the most restrictive profile.
+ */
+function invalidPolicyFallback(label, path) {
+    console.warn(`[SafeHands policy] ${label} policy file exists but is malformed or invalid; falling back to the 'conservative' profile (fail-closed). Fix ${path} to restore the intended limits.`);
+    return POLICY_PROFILES.conservative;
+}
+export function loadAgentPolicy(agentId) {
+    if (agentId && isSafeAgentId(agentId)) {
+        const specific = policyPath(agentId);
+        if (existsSync(specific)) {
+            try {
+                const parsed = validatePolicy(JSON.parse(readFileSync(specific, "utf-8")));
+                if (parsed)
+                    return parsed;
+            }
+            catch { /* malformed JSON — fail closed below */ }
+            return invalidPolicyFallback(`Agent '${agentId}'`, specific);
+        }
+    }
+    const defaultPath = policyPath("default");
+    if (existsSync(defaultPath)) {
+        try {
+            const parsed = validatePolicy(JSON.parse(readFileSync(defaultPath, "utf-8")));
+            if (parsed)
+                return parsed;
+        }
+        catch { /* malformed JSON — fail closed below */ }
+        return invalidPolicyFallback("Default", defaultPath);
+    }
+    return POLICY_PROFILES.balanced;
+}
+export function saveAgentPolicy(agentId, policy) {
+    const dir = getPoliciesDir();
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    writeFileSync(policyPath(agentId), JSON.stringify(policy, null, 2), "utf-8");
+}
+export function resolveEffectiveLimits(policy) {
+    return {
+        maxPaymentPROS: Number(policy.limits.maxPaymentPROS),
+        maxSwapPROS: Number(policy.limits.maxSwapPROS),
+        maxX402PaymentUSDC: Number(policy.limits.maxX402PaymentUSDC),
+        maxApprovalUSDC: Number(policy.limits.maxApprovalUSDC),
+    };
+}
+//# sourceMappingURL=agentPolicy.js.map

package/dist/lib/policy/agentPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentPolicy.js","sourceRoot":"","sources":["../../../src/lib/policy/agentPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAwBpC,MAAM,CAAC,MAAM,eAAe,GAA0D;IACpF,YAAY,EAAE;QACZ,OAAO,EAAE,cAAc;QACvB,MAAM,EAAE;YACN,cAAc,EAAE,KAAK;YACrB,WAAW,EAAE,GAAG;YAChB,iBAAiB,EAAE,GAAG;YACtB,kBAAkB,EAAE,MAAM;YAC1B,eAAe,EAAE,IAAI;SACtB;QACD,KAAK,EAAE;YACL,kBAAkB,EAAE,KAAK;YACzB,wBAAwB,EAAE,KAAK;YAC/B,4BAA4B,EAAE,KAAK;SACpC;KACF;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,UAAU;QACnB,MAAM,EAAE;YACN,cAAc,EAAE,GAAG;YACnB,WAAW,EAAE,IAAI;YACjB,iBAAiB,EAAE,IAAI;YACvB,kBAAkB,EAAE,KAAK;YACzB,eAAe,EAAE,IAAI;SACtB;QACD,KAAK,EAAE;YACL,kBAAkB,EAAE,KAAK;YACzB,wBAAwB,EAAE,KAAK;YAC/B,4BAA4B,EAAE,QAAQ;SACvC;KACF;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,UAAU;QACnB,MAAM,EAAE;YACN,cAAc,EAAE,KAAK;YACrB,WAAW,EAAE,MAAM;YACnB,iBAAiB,EAAE,MAAM;YACzB,kBAAkB,EAAE,GAAG;YACvB,eAAe,EAAE,KAAK;SACvB;QACD,KAAK,EAAE;YACL,kBAAkB,EAAE,IAAI;YACxB,wBAAwB,EAAE,IAAI;YAC9B,4BAA4B,EAAE,MAAM;SACrC;KACF;CACF,CAAC;AAEF,SAAS,cAAc;IACrB,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAClE,CAAC;AAED,4EAA4E;AAC5E,gFAAgF;AAChF,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,+EAA+E,CAAC,CAAC;IAC9H,CAAC;IACD,OAAO,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,aAAa,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAClH,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAChD,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,OAAO,CAAC,CAAC,kBAAkB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,OAAO,CAAC,CAAC,wBAAwB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,OAAO,CAAC,CAAC,4BAA4B,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,4BAAsC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3G,OAAO;QACL,OAAO,EAAE,OAAwB;QACjC,MAAM,EAAE,CAAiC;QACzC,KAAK,EAAE,CAAgC;KACxC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,KAAa,EAAE,IAAY;IACxD,OAAO,CAAC,IAAI,CACV,sBAAsB,KAAK,kHAAkH,IAAI,kCAAkC,CACpL,CAAC;IACF,OAAO,eAAe,CAAC,YAAY,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,IAAI,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC3E,IAAI,MAAM;oBAAE,OAAO,MAAM,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;YACpD,OAAO,qBAAqB,CAAC,UAAU,OAAO,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9E,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;QACpD,OAAO,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,eAAe,CAAC,QAAQ,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,MAAmB;IAClE,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAmB;IAEnB,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;QACpD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QAC9C,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAC5D,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;KACvD,CAAC;AACJ,CAAC"}

package/dist/lib/policy/policyPresets.d.ts

@@ -0,0 +1,30 @@
+import { type GuardianPolicy } from "../../agent/agentPolicyResolver.js";
+export type PolicyPreset = "standard" | "strict" | "agent" | "x402-preflight";
+export declare const PRESET_NAMES: readonly PolicyPreset[];
+/** Bump when preset semantics change. Surfaced (never secret) in responses/metrics. */
+export declare const POLICY_VERSION = "p8c-2026.06";
+export declare const PRESETS: Readonly<Record<PolicyPreset, GuardianPolicy>>;
+export declare function isPreset(value: unknown): value is PolicyPreset;
+export declare function presetPolicy(name: PolicyPreset): GuardianPolicy;
+/**
+ * True iff `candidate` is equal-or-stricter than `baseline`: every numeric limit
+ * is ≤ baseline, the safety booleans are not weaker, and it adds no extra trusted
+ * entries. Used both at load (presets vs `standard`) and at request resolution.
+ */
+export declare function assertNotWeaker(candidate: GuardianPolicy, baseline: GuardianPolicy): boolean;
+/**
+ * Resolve the effective preset NAME (tighten-only). Precedence:
+ *   serverDefault = env (SAFEHANDS_POLICY_PRESET) → endpointDefault → "standard".
+ * A request preset is honored only if it is a valid preset that is equal-or-stricter
+ * than the server default; otherwise the server default wins (a request can never
+ * loosen policy).
+ */
+export declare function resolvePresetName(requestPreset: unknown, endpointDefault?: PolicyPreset, envPreset?: string): PolicyPreset;
+/**
+ * Sanitize request-supplied policy overrides onto a server policy: TIGHTEN-ONLY.
+ * Numeric limits may only be lowered; safety booleans may only be set toward safer
+ * (true); request-supplied trusted lists are IGNORED (server-config only) so public
+ * callers can never add an approval/transfer bypass.
+ */
+export declare function sanitizeRequestPolicy(serverPolicy: GuardianPolicy, overrides: unknown): GuardianPolicy;
+//# sourceMappingURL=policyPresets.d.ts.map

package/dist/lib/policy/policyPresets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyPresets.d.ts","sourceRoot":"","sources":["../../../src/lib/policy/policyPresets.ts"],"names":[],"mappings":"AAaA,OAAO,EAA0B,KAAK,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEjG,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,gBAAgB,CAAC;AAE9E,eAAO,MAAM,YAAY,EAAE,SAAS,YAAY,EAAsD,CAAC;AAEvG,uFAAuF;AACvF,eAAO,MAAM,cAAc,gBAAgB,CAAC;AAS5C,eAAO,MAAM,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CA+BlE,CAAC;AAEF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAE9D;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,cAAc,CAG/D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAS5F;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,OAAO,EACtB,eAAe,GAAE,YAAyB,EAC1C,SAAS,CAAC,EAAE,MAAM,GACjB,YAAY,CAMd;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,GAAG,cAAc,CAkBtG"}

package/dist/lib/policy/policyPresets.js

@@ -0,0 +1,124 @@
+// ─── SafeHands Policy Presets ─────────────────────────────────────
+// Named presets are `GuardianPolicy` configs fed to the EXISTING escalate-only
+// `applyPolicy` (agentPolicyResolver) — so no preset or request can ever weaken
+// the analyzer's decision (a BLOCK stays a BLOCK by construction). On top of that
+// structural guarantee:
+//   • every preset is equal-or-stricter than `standard` (assertNotWeaker, tested),
+//   • preset resolution is TIGHTEN-ONLY (a request may only pick an equal/stricter
+//     preset than the server default),
+//   • `sanitizeRequestPolicy` clamps request overrides to tighten-only and drops
+//     request-supplied trusted lists (public callers can never add a bypass).
+// Pure + offline. No signing/wallet/write primitives.
+// ────────────────────────────────────────────────────────────────────────
+import { DEFAULT_BACKEND_POLICY } from "../../agent/agentPolicyResolver.js";
+export const PRESET_NAMES = ["standard", "strict", "agent", "x402-preflight"];
+/** Bump when preset semantics change. Surfaced (never secret) in responses/metrics. */
+export const POLICY_VERSION = "p8c-2026.06";
+const NUMERIC_KEYS = [
+    "maxNativeTransferWei",
+    "maxApprovalAmount",
+    "maxX402PaymentUsdc",
+    "maxDailyAgentSpendUsdc",
+];
+export const PRESETS = {
+    // standard = the current public default (no change in behavior).
+    standard: { ...DEFAULT_BACKEND_POLICY },
+    // strict = much lower limits; always confirm/block the risky cases.
+    strict: {
+        maxNativeTransferWei: "1000000000000000000", // 1 native
+        maxApprovalAmount: "1000000000", // 1e9 raw units
+        maxX402PaymentUsdc: "0.1",
+        maxDailyAgentSpendUsdc: "10",
+        trustedRecipients: [],
+        trustedSpenders: [],
+        blockUnlimitedApproval: true,
+        requireConfirmationForUnknownContract: true,
+    },
+    // agent = the A2A/agent runtime baseline — equal-or-stricter than standard.
+    agent: {
+        ...DEFAULT_BACKEND_POLICY,
+        maxX402PaymentUsdc: "0.5",
+        maxDailyAgentSpendUsdc: "50",
+        trustedRecipients: [],
+        trustedSpenders: [],
+        blockUnlimitedApproval: true,
+        requireConfirmationForUnknownContract: true,
+    },
+    // x402-preflight = payment-intent focused tightening; still read-only.
+    "x402-preflight": {
+        ...DEFAULT_BACKEND_POLICY,
+        maxX402PaymentUsdc: "0.1",
+        blockUnlimitedApproval: true,
+        requireConfirmationForUnknownContract: true,
+    },
+};
+export function isPreset(value) {
+    return typeof value === "string" && PRESET_NAMES.includes(value);
+}
+export function presetPolicy(name) {
+    const p = PRESETS[name];
+    return { ...p, trustedRecipients: [...p.trustedRecipients], trustedSpenders: [...p.trustedSpenders] };
+}
+/**
+ * True iff `candidate` is equal-or-stricter than `baseline`: every numeric limit
+ * is ≤ baseline, the safety booleans are not weaker, and it adds no extra trusted
+ * entries. Used both at load (presets vs `standard`) and at request resolution.
+ */
+export function assertNotWeaker(candidate, baseline) {
+    for (const k of NUMERIC_KEYS) {
+        if (Number(candidate[k]) > Number(baseline[k]))
+            return false;
+    }
+    if (baseline.blockUnlimitedApproval && !candidate.blockUnlimitedApproval)
+        return false;
+    if (baseline.requireConfirmationForUnknownContract && !candidate.requireConfirmationForUnknownContract)
+        return false;
+    if (candidate.trustedRecipients.length > baseline.trustedRecipients.length)
+        return false;
+    if (candidate.trustedSpenders.length > baseline.trustedSpenders.length)
+        return false;
+    return true;
+}
+/**
+ * Resolve the effective preset NAME (tighten-only). Precedence:
+ *   serverDefault = env (SAFEHANDS_POLICY_PRESET) → endpointDefault → "standard".
+ * A request preset is honored only if it is a valid preset that is equal-or-stricter
+ * than the server default; otherwise the server default wins (a request can never
+ * loosen policy).
+ */
+export function resolvePresetName(requestPreset, endpointDefault = "standard", envPreset) {
+    const serverDefault = isPreset(envPreset) ? envPreset : endpointDefault;
+    if (isPreset(requestPreset) && assertNotWeaker(PRESETS[requestPreset], PRESETS[serverDefault])) {
+        return requestPreset;
+    }
+    return serverDefault;
+}
+/**
+ * Sanitize request-supplied policy overrides onto a server policy: TIGHTEN-ONLY.
+ * Numeric limits may only be lowered; safety booleans may only be set toward safer
+ * (true); request-supplied trusted lists are IGNORED (server-config only) so public
+ * callers can never add an approval/transfer bypass.
+ */
+export function sanitizeRequestPolicy(serverPolicy, overrides) {
+    const out = {
+        ...serverPolicy,
+        trustedRecipients: [...serverPolicy.trustedRecipients],
+        trustedSpenders: [...serverPolicy.trustedSpenders],
+    };
+    if (!overrides || typeof overrides !== "object")
+        return out;
+    const o = overrides;
+    for (const k of NUMERIC_KEYS) {
+        const raw = o[k];
+        const n = Number(raw);
+        if (Number.isFinite(n) && n >= 0 && n < Number(out[k])) {
+            out[k] = typeof raw === "string" ? raw : String(n);
+        }
+    }
+    if (o.blockUnlimitedApproval === true)
+        out.blockUnlimitedApproval = true;
+    if (o.requireConfirmationForUnknownContract === true)
+        out.requireConfirmationForUnknownContract = true;
+    return out;
+}
+//# sourceMappingURL=policyPresets.js.map

package/dist/lib/policy/policyPresets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyPresets.js","sourceRoot":"","sources":["../../../src/lib/policy/policyPresets.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,+EAA+E;AAC/E,gFAAgF;AAChF,kFAAkF;AAClF,wBAAwB;AACxB,mFAAmF;AACnF,mFAAmF;AACnF,uCAAuC;AACvC,iFAAiF;AACjF,8EAA8E;AAC9E,sDAAsD;AACtD,2EAA2E;AAE3E,OAAO,EAAE,sBAAsB,EAAuB,MAAM,oCAAoC,CAAC;AAIjG,MAAM,CAAC,MAAM,YAAY,GAA4B,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAEvG,uFAAuF;AACvF,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;AAE5C,MAAM,YAAY,GAAG;IACnB,sBAAsB;IACtB,mBAAmB;IACnB,oBAAoB;IACpB,wBAAwB;CAChB,CAAC;AAEX,MAAM,CAAC,MAAM,OAAO,GAAmD;IACrE,iEAAiE;IACjE,QAAQ,EAAE,EAAE,GAAG,sBAAsB,EAAE;IACvC,oEAAoE;IACpE,MAAM,EAAE;QACN,oBAAoB,EAAE,qBAAqB,EAAE,WAAW;QACxD,iBAAiB,EAAE,YAAY,EAAE,gBAAgB;QACjD,kBAAkB,EAAE,KAAK;QACzB,sBAAsB,EAAE,IAAI;QAC5B,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,EAAE;QACnB,sBAAsB,EAAE,IAAI;QAC5B,qCAAqC,EAAE,IAAI;KAC5C;IACD,4EAA4E;IAC5E,KAAK,EAAE;QACL,GAAG,sBAAsB;QACzB,kBAAkB,EAAE,KAAK;QACzB,sBAAsB,EAAE,IAAI;QAC5B,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,EAAE;QACnB,sBAAsB,EAAE,IAAI;QAC5B,qCAAqC,EAAE,IAAI;KAC5C;IACD,uEAAuE;IACvE,gBAAgB,EAAE;QAChB,GAAG,sBAAsB;QACzB,kBAAkB,EAAE,KAAK;QACzB,sBAAsB,EAAE,IAAI;QAC5B,qCAAqC,EAAE,IAAI;KAC5C;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,YAAkC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAkB;IAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,EAAE,GAAG,CAAC,EAAE,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC;AACxG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,SAAyB,EAAE,QAAwB;IACjF,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,sBAAsB;QAAE,OAAO,KAAK,CAAC;IACvF,IAAI,QAAQ,CAAC,qCAAqC,IAAI,CAAC,SAAS,CAAC,qCAAqC;QAAE,OAAO,KAAK,CAAC;IACrH,IAAI,SAAS,CAAC,iBAAiB,CAAC,MAAM,GAAG,QAAQ,CAAC,iBAAiB,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACzF,IAAI,SAAS,CAAC,eAAe,CAAC,MAAM,GAAG,QAAQ,CAAC,eAAe,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACrF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,aAAsB,EACtB,kBAAgC,UAAU,EAC1C,SAAkB;IAElB,MAAM,aAAa,GAAiB,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC;IACtF,IAAI,QAAQ,CAAC,aAAa,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC/F,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,YAA4B,EAAE,SAAkB;IACpF,MAAM,GAAG,GAAmB;QAC1B,GAAG,YAAY;QACf,iBAAiB,EAAE,CAAC,GAAG,YAAY,CAAC,iBAAiB,CAAC;QACtD,eAAe,EAAE,CAAC,GAAG,YAAY,CAAC,eAAe,CAAC;KACnD,CAAC;IACF,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAC5D,MAAM,CAAC,GAAG,SAAoC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,sBAAsB,KAAK,IAAI;QAAE,GAAG,CAAC,sBAAsB,GAAG,IAAI,CAAC;IACzE,IAAI,CAAC,CAAC,qCAAqC,KAAK,IAAI;QAAE,GAAG,CAAC,qCAAqC,GAAG,IAAI,CAAC;IACvG,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/lib/policy/writeExecutionGate.d.ts

@@ -0,0 +1,23 @@
+import { type ToolFailure } from "../toolResponse.js";
+import type { ActionPolicyResult } from "./actionPolicyEngine.js";
+export interface EnforceWriteDecisionOptions {
+    /** True when the caller explicitly acknowledged/confirmed this action (e.g. input.confirm === true). */
+    confirmed: boolean;
+    /** Tool name for the error envelope + telemetry. */
+    toolName: string;
+    /**
+     * Set by write tools whose policy input MUST include risk-engine evidence
+     * (execute_swap / send_payment). When true and the evaluated policy carries
+     * no `risk_*` check, the gate fails closed — a wiring mistake (assessRisk
+     * result not passed to evaluateActionPolicy) blocks loudly instead of
+     * silently losing the risk gates.
+     */
+    requireRiskEvidence?: boolean;
+}
+/**
+ * Returns a ToolFailure to short-circuit execution, or `null` to proceed.
+ * `policy.decision` is the internal 6-value decision from evaluateActionPolicy
+ * (NOT the mapped public 4-value), so all six cases are handled here.
+ */
+export declare function enforceWriteDecision(policy: ActionPolicyResult, opts: EnforceWriteDecisionOptions): ToolFailure | null;
+//# sourceMappingURL=writeExecutionGate.d.ts.map

package/dist/lib/policy/writeExecutionGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeExecutionGate.d.ts","sourceRoot":"","sources":["../../../src/lib/policy/writeExecutionGate.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAQ,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,MAAM,WAAW,2BAA2B;IAC1C,wGAAwG;IACxG,SAAS,EAAE,OAAO,CAAC;IACnB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,2BAA2B,GAChC,WAAW,GAAG,IAAI,CA4DpB"}

package/dist/lib/policy/writeExecutionGate.js

@@ -0,0 +1,65 @@
+// ─── SafeHands Write-Execution Gate ────────────────────────────────────
+// Enforces the FULL deterministic decision at the direct write-tool boundary.
+//
+// Historically the raw write tools (execute_swap / send_payment / approve_token /
+// x402_pay_and_fetch) only halted on `BLOCK` and silently signed on every other
+// non-ALLOW decision — so a REQUIRE_CONFIRMATION / REQUIRE_TOKEN_REVIEW action
+// (unverified recipient, unknown/flagged token) was auto-executed. That defeated
+// the core SafeHands promise ("one of four decisions before every action").
+//
+// This gate makes the raw tools honor the whole decision:
+//   • ALLOW                 → proceed.
+//   • BLOCK                 → hard stop (never confirmable).
+//   • REQUIRE_FUNDING       → hard stop (fund first; not a confirmable risk).
+//   • REQUIRE_CONFIRMATION  → proceed ONLY if the caller passed an explicit
+//     REQUIRE_TOKEN_REVIEW /   confirmation (`confirmed`); otherwise return a
+//     WARN                     non-executing CONFIRMATION_REQUIRED with the
+//                              reasons, so the confirmation is explicit + audited
+//                              instead of silent.
+// Honeypot/malicious tokens are turned into a hard BLOCK upstream (in the tool,
+// before this gate) while GoPlus token intel is available. When intel is MISSING
+// (provider outage / token not indexed / unresolvable address), the policy emits
+// the `token_security_intel_missing` check and this gate fails closed:
+// a caller confirmation cannot substitute for intel that never existed, so the
+// action stops with TOKEN_INTEL_UNAVAILABLE even with confirm=true. Only tokens
+// GoPlus actually reviewed-and-flagged remain confirmable after review.
+// ────────────────────────────────────────────────────────────────────────
+import { fail } from "../toolResponse.js";
+/**
+ * Returns a ToolFailure to short-circuit execution, or `null` to proceed.
+ * `policy.decision` is the internal 6-value decision from evaluateActionPolicy
+ * (NOT the mapped public 4-value), so all six cases are handled here.
+ */
+export function enforceWriteDecision(policy, opts) {
+    const reasons = policy.reasons.join(" ").trim();
+    const actions = policy.requiredActions.join(" ").trim();
+    if (opts.requireRiskEvidence && !policy.checks.some((c) => c.name.startsWith("risk_"))) {
+        return fail("POLICY_EVIDENCE_MISSING", `${opts.toolName} is blocked fail-closed: the policy decision was evaluated WITHOUT risk-engine evidence (no risk_* check present). This indicates a wiring defect: the assessRisk result must be passed to evaluateActionPolicy via riskEvidenceFromAssessment(). Not confirmable.`, false, opts.toolName);
+    }
+    switch (policy.decision) {
+        case "ALLOW":
+            return null;
+        case "BLOCK":
+            return fail("POLICY_BLOCKED", reasons || `${opts.toolName} was blocked by SafeHands policy.`, false, opts.toolName);
+        case "REQUIRE_FUNDING":
+            return fail("REQUIRE_FUNDING", `${opts.toolName} requires funding before execution. ${reasons} ${actions}`.replace(/\s+/g, " ").trim(), false, opts.toolName);
+        case "REQUIRE_CONFIRMATION":
+        case "REQUIRE_TOKEN_REVIEW":
+        case "WARN":
+        default:
+            // Fail-closed: when token-security intel is MISSING (not merely flagged),
+            // nothing was reviewed — a caller confirmation cannot attest to a review that
+            // never happened. Hard stop, never confirmable on the direct write path.
+            if (policy.checks.some((c) => c.name === "token_security_intel_missing" && c.status === "unknown")) {
+                return fail("TOKEN_INTEL_UNAVAILABLE", `${opts.toolName} is blocked fail-closed: token-security intelligence is unavailable for this token (provider outage or token not yet indexed), so nothing was actually reviewed. Retry when the provider is reachable, or verify the token independently. ${reasons}`
+                    .replace(/\s+/g, " ")
+                    .trim(), true, opts.toolName);
+            }
+            if (opts.confirmed)
+                return null;
+            return fail("CONFIRMATION_REQUIRED", `${opts.toolName} needs explicit confirmation before signing (decision: ${policy.decision}). ${reasons} ${actions} Re-invoke with confirm=true only after reviewing and approving this action.`
+                .replace(/\s+/g, " ")
+                .trim(), false, opts.toolName);
+    }
+}
+//# sourceMappingURL=writeExecutionGate.js.map

package/dist/lib/policy/writeExecutionGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeExecutionGate.js","sourceRoot":"","sources":["../../../src/lib/policy/writeExecutionGate.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8EAA8E;AAC9E,EAAE;AACF,kFAAkF;AAClF,gFAAgF;AAChF,+EAA+E;AAC/E,iFAAiF;AACjF,4EAA4E;AAC5E,EAAE;AACF,0DAA0D;AAC1D,uCAAuC;AACvC,6DAA6D;AAC7D,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,4EAA4E;AAC5E,kFAAkF;AAClF,kDAAkD;AAClD,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,uEAAuE;AACvE,+EAA+E;AAC/E,gFAAgF;AAChF,wEAAwE;AACxE,2EAA2E;AAE3E,OAAO,EAAE,IAAI,EAAoB,MAAM,oBAAoB,CAAC;AAkB5D;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA0B,EAC1B,IAAiC;IAEjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAExD,IAAI,IAAI,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO,IAAI,CACT,yBAAyB,EACzB,GAAG,IAAI,CAAC,QAAQ,oQAAoQ,EACpR,KAAK,EACL,IAAI,CAAC,QAAQ,CACd,CAAC;IACJ,CAAC;IAED,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,OAAO;YACV,OAAO,IAAI,CAAC;QAEd,KAAK,OAAO;YACV,OAAO,IAAI,CACT,gBAAgB,EAChB,OAAO,IAAI,GAAG,IAAI,CAAC,QAAQ,mCAAmC,EAC9D,KAAK,EACL,IAAI,CAAC,QAAQ,CACd,CAAC;QAEJ,KAAK,iBAAiB;YACpB,OAAO,IAAI,CACT,iBAAiB,EACjB,GAAG,IAAI,CAAC,QAAQ,uCAAuC,OAAO,IAAI,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EACvG,KAAK,EACL,IAAI,CAAC,QAAQ,CACd,CAAC;QAEJ,KAAK,sBAAsB,CAAC;QAC5B,KAAK,sBAAsB,CAAC;QAC5B,KAAK,MAAM,CAAC;QACZ;YACE,0EAA0E;YAC1E,8EAA8E;YAC9E,yEAAyE;YACzE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,8BAA8B,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;gBACnG,OAAO,IAAI,CACT,yBAAyB,EACzB,GAAG,IAAI,CAAC,QAAQ,6OAA6O,OAAO,EAAE;qBACnQ,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;qBACpB,IAAI,EAAE,EACT,IAAI,EACJ,IAAI,CAAC,QAAQ,CACd,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YAChC,OAAO,IAAI,CACT,uBAAuB,EACvB,GAAG,IAAI,CAAC,QAAQ,0DAA0D,MAAM,CAAC,QAAQ,MAAM,OAAO,IAAI,OAAO,8EAA8E;iBAC5L,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;iBACpB,IAAI,EAAE,EACT,KAAK,EACL,IAAI,CAAC,QAAQ,CACd,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/lib/preparedTxStore.d.ts

@@ -0,0 +1,21 @@
+export interface PreparedTransactionRecord {
+    id: string;
+    hash: string;
+    from: string;
+    to: string;
+    dataHash: string;
+    value: string;
+    chainId: number;
+    decision: string;
+    policyVersion: string | null;
+    policyPreset: string | null;
+    expiresAt: number;
+    usedAt: number | null;
+    createdAt?: number;
+    updatedAt?: number;
+}
+export declare function generatePreparedTransactionHash(from: string, to: string, data: string, value: string, chainId: number, decision: string): string;
+export declare function savePreparedTx(from: string, to: string, data: string, value: string, chainId: number, decision: string, policyVersion: string | null, policyPreset: string | null): PreparedTransactionRecord;
+export declare function getPreparedTx(id: string): PreparedTransactionRecord | null;
+export declare function markPreparedTxUsed(id: string): void;
+//# sourceMappingURL=preparedTxStore.d.ts.map

package/dist/lib/preparedTxStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preparedTxStore.d.ts","sourceRoot":"","sources":["../../src/lib/preparedTxStore.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAgDD,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,MAAM,CAGR;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,GAC1B,yBAAyB,CA2B3B;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,yBAAyB,GAAG,IAAI,CAM1E;AAED,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CASnD"}