yenop 0.0.0 → 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE.md +105 -0
- package/README.md +243 -3
- package/dist/adapters/claude-code/hook.d.ts +43 -0
- package/dist/adapters/claude-code/hook.js +101 -0
- package/dist/adapters/claude-code/hook.js.map +1 -0
- package/dist/adapters/claude-code/install.d.ts +23 -0
- package/dist/adapters/claude-code/install.js +86 -0
- package/dist/adapters/claude-code/install.js.map +1 -0
- package/dist/adapters/codex/hook.d.ts +7 -0
- package/dist/adapters/codex/hook.js +134 -0
- package/dist/adapters/codex/hook.js.map +1 -0
- package/dist/adapters/codex/install.d.ts +18 -0
- package/dist/adapters/codex/install.js +66 -0
- package/dist/adapters/codex/install.js.map +1 -0
- package/dist/adapters/cursor/hook.d.ts +25 -0
- package/dist/adapters/cursor/hook.js +228 -0
- package/dist/adapters/cursor/hook.js.map +1 -0
- package/dist/adapters/cursor/install.d.ts +10 -0
- package/dist/adapters/cursor/install.js +57 -0
- package/dist/adapters/cursor/install.js.map +1 -0
- package/dist/adapters/gemini/hook.d.ts +20 -0
- package/dist/adapters/gemini/hook.js +232 -0
- package/dist/adapters/gemini/hook.js.map +1 -0
- package/dist/adapters/gemini/install.d.ts +21 -0
- package/dist/adapters/gemini/install.js +101 -0
- package/dist/adapters/gemini/install.js.map +1 -0
- package/dist/adapters/hooks/pipeline.d.ts +69 -0
- package/dist/adapters/hooks/pipeline.js +131 -0
- package/dist/adapters/hooks/pipeline.js.map +1 -0
- package/dist/adapters/hooks/registry.d.ts +8 -0
- package/dist/adapters/hooks/registry.js +14 -0
- package/dist/adapters/hooks/registry.js.map +1 -0
- package/dist/adapters/mcp/gateway.d.ts +64 -0
- package/dist/adapters/mcp/gateway.js +205 -0
- package/dist/adapters/mcp/gateway.js.map +1 -0
- package/dist/adapters/mcp/run.d.ts +12 -0
- package/dist/adapters/mcp/run.js +86 -0
- package/dist/adapters/mcp/run.js.map +1 -0
- package/dist/adapters/openai-agents/index.d.ts +74 -0
- package/dist/adapters/openai-agents/index.js +139 -0
- package/dist/adapters/openai-agents/index.js.map +1 -0
- package/dist/cli/demo.d.ts +5 -0
- package/dist/cli/demo.js +130 -0
- package/dist/cli/demo.js.map +1 -0
- package/dist/cli/main.d.ts +2 -0
- package/dist/cli/main.js +746 -0
- package/dist/cli/main.js.map +1 -0
- package/dist/core/config.d.ts +50 -0
- package/dist/core/config.js +93 -0
- package/dist/core/config.js.map +1 -0
- package/dist/core/engine.d.ts +31 -0
- package/dist/core/engine.js +301 -0
- package/dist/core/engine.js.map +1 -0
- package/dist/core/ids.d.ts +5 -0
- package/dist/core/ids.js +36 -0
- package/dist/core/ids.js.map +1 -0
- package/dist/core/index.d.ts +40 -0
- package/dist/core/index.js +73 -0
- package/dist/core/index.js.map +1 -0
- package/dist/core/policy.d.ts +41 -0
- package/dist/core/policy.js +205 -0
- package/dist/core/policy.js.map +1 -0
- package/dist/core/receipts.d.ts +47 -0
- package/dist/core/receipts.js +137 -0
- package/dist/core/receipts.js.map +1 -0
- package/dist/core/report.d.ts +51 -0
- package/dist/core/report.js +125 -0
- package/dist/core/report.js.map +1 -0
- package/dist/core/shell.d.ts +105 -0
- package/dist/core/shell.js +921 -0
- package/dist/core/shell.js.map +1 -0
- package/dist/core/state.d.ts +52 -0
- package/dist/core/state.js +269 -0
- package/dist/core/state.js.map +1 -0
- package/dist/core/telemetry.d.ts +52 -0
- package/dist/core/telemetry.js +150 -0
- package/dist/core/telemetry.js.map +1 -0
- package/dist/core/tools.d.ts +5 -0
- package/dist/core/tools.js +59 -0
- package/dist/core/tools.js.map +1 -0
- package/dist/core/types.d.ts +213 -0
- package/dist/core/types.js +3 -0
- package/dist/core/types.js.map +1 -0
- package/dist/daemon/client.d.ts +34 -0
- package/dist/daemon/client.js +138 -0
- package/dist/daemon/client.js.map +1 -0
- package/dist/daemon/fast.d.ts +9 -0
- package/dist/daemon/fast.js +43 -0
- package/dist/daemon/fast.js.map +1 -0
- package/dist/daemon/server.d.ts +38 -0
- package/dist/daemon/server.js +321 -0
- package/dist/daemon/server.js.map +1 -0
- package/dist/daemon/service.d.ts +26 -0
- package/dist/daemon/service.js +171 -0
- package/dist/daemon/service.js.map +1 -0
- package/dist/viewer/server.d.ts +52 -0
- package/dist/viewer/server.js +184 -0
- package/dist/viewer/server.js.map +1 -0
- package/package.json +59 -7
- package/policies/README.md +58 -0
- package/policies/approve/default.cedar +72 -0
- package/policies/permit/default.cedar +48 -0
- package/policies/schema.cedarschema +104 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCb,CAAC;AAEF,SAAS,IAAI;IACX,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED,4EAA4E;AAC5E,MAAM,WAAW,GAAW,CAAC,GAAG,EAAE;IAChC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACjF,OAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAA0B,CAAC,OAAO,IAAI,OAAO,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,WAAW,IAAI,CAAC,CAAC;YAC/C,OAAO,CAAC,CAAC;QACX,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;YACvF,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,yBAAyB,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,YAAY,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzG,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;YACjF,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,CAAC,EAAE,MAAM,SAAS,EAAE,CAAC,CAAC;gBAClD,IAAI,CAAC,CAAC,MAAM;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;gBACpD,IAAI,CAAC,CAAC,MAAM;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;gBACpD,OAAO,CAAC,CAAC,QAAQ,CAAC;YACpB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,oGAAoG;gBACpG,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,SAAS;oBAAE,OAAO,CAAC,CAAC;gBACtD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAE,CAAW,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC;gBAC5E,IAAI,CAAC,CAAC,MAAM;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;gBACpD,IAAI,CAAC,CAAC,MAAM;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;gBACpD,OAAO,CAAC,CAAC,QAAQ,CAAC;YACpB,CAAC;QACH,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YAC/E,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YACzB,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,KAAK,SAAS;YACZ,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACvD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;YACtE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,SAAS,EAAE,CAA+C,CAAC;YACxF,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBACpE,OAAO,CAAC,CAAC;YACX,CAAC;oBAAS,CAAC;gBACT,CAAC,CAAC,KAAK,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC;YAC9B,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACpD,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACzK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;gBAClE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjF,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/E,OAAO,CAAC,CAAC;YACX,CAAC;oBAAS,CAAC;gBACT,CAAC,CAAC,KAAK,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACpF,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC;gBACH,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;oBAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,WAAW,sEAAsE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,EAAE,mCAAmC,CAAC,CAAC;oBACrO,OAAO,CAAC,CAAC;gBACX,CAAC;gBACD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBAC5F,aAAa,CAAC,MAAM,CAAC,CAAC;gBACtB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,OAAO,eAAe,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBAChI,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBACxF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;gBAChG,OAAO,CAAC,CAAC;YACX,CAAC;oBAAS,CAAC;gBACT,CAAC,CAAC,KAAK,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACnN,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC/G,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;oBAChD,IAAI,CAAC,CAAC,EAAE;wBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,iCAAiC,CAAC,CAAC,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC;;wBAClJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC,QAAQ,OAAO,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC;oBACjJ,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtB,CAAC;wBAAS,CAAC;oBACT,CAAC,CAAC,KAAK,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC1D,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;gBACvC,IAAI,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAyC,CAAC;gBAC3F,0GAA0G;gBAC1G,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC7B,IAAI,CAAC,MAAM,CAAC,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC9H,IAAI,MAAM,CAAC,GAAG;oBAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,MAAM,CAAC,YAAY,qCAAqC,CAAC,CAAC;oBAC/H,OAAO,CAAC,CAAC;gBACX,CAAC;gBACD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACtC,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;oBAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACjC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC5H,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;gBAC9J,CAAC;gBACD,OAAO,CAAC,CAAC;YACX,CAAC;oBAAS,CAAC;gBACT,CAAC,CAAC,KAAK,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACvD,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC9F,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBACvG,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;gBACrI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;gBACvE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC1I,IAAI,CAAC,CAAC,gBAAgB,CAAC,MAAM;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;gBACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;gBACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,cAAc,WAAW,CAAC,CAAC,OAAO,CAAC,eAAe,mBAAmB,CAAC,CAAC;gBACpH,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACpC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvD,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sFAAsF,CAAC,CAAC;;oBACzH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,iBAAiB,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,kBAAkB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wCAAwC,IAAI,CAAC,CAAC;gBACzN,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBAC9D,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;gBAC3B,IAAI,GAAG,CAAC,KAAK,KAAK,eAAe;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;gBACrF,uGAAuG;gBACvG,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,MAAc,EAAW,EAAE;oBACvD,IAAI,CAAC;wBACH,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACzE,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,KAAK,CAAC;oBACf,CAAC;gBACH,CAAC,CAAC;gBACF,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,IAAY,EAAE,MAAc,EAAU,EAAE,CACtE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC7E,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,qBAAqB,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,kBAAkB,CAAC,CAAC;gBAC7I,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,aAAa,CAAC,CAAC;gBAC5H,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACxP,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChH,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,aAAa,CAAC,CAAC;gBAClI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,MAAM,YAAY,MAAM,WAAW,KAAK,YAAY,MAAM,iEAAiE,CAAC,CAAC;gBAC5K,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,2GAA2G;oBAC3G,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;oBAC5G,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,WAAW;wBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uKAAuK,CAAC,CAAC;oBACpP,IAAI,CAAC;wBACH,MAAM,GAAG,GAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAsE,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;wBAC5R,IAAI,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,KAAK,WAAW;4BAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qHAAqH,CAAC,CAAC;oBAC9M,CAAC;oBAAC,MAAM,CAAC;wBACP,uEAAuE;oBACzE,CAAC;gBACH,CAAC;gBACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,mFAAmF;oBACnF,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;oBACxE,MAAM,GAAG,GAAG,cAAc,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;oBACpD,IAAI,GAAG,KAAK,UAAU;wBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gIAAgI,CAAC,CAAC;yBAC1K,IAAI,GAAG,KAAK,WAAW;wBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sJAAsJ,CAAC,CAAC;gBAC7M,CAAC;gBACD,OAAO,CAAC,CAAC;YACX,CAAC;oBAAS,CAAC;gBACT,CAAC,CAAC,KAAK,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC5E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+fAA+f,CAAC,CAAC;YACthB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACzK,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACvD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC5D,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAqC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YACpE,IAAI,MAAM,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,mDAAmD,CAAC,CAAC;YAClL,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;gBAC5G,IAAI,CAAC;oBACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;oBACrD,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;gBACtE,CAAC;gBAAC,MAAM,CAAC;oBACP,kDAAkD;gBACpD,CAAC;YACH,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACpF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC5B,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACxL,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAClF,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;gBAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC7C,IAAI,MAAM,CAAC,KAAK;oBAAE,OAAO,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACvD,OAAO,CAAC,CAAC;YACX,CAAC;oBAAS,CAAC;gBACT,CAAC,CAAC,KAAK,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,WAAW;YACd,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,GAAG,GAAG,+CAA+C,CAAC;YAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,GAAG,kJAAkJ,CAAC,CAAC;YACvM,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAwB,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACpD,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAChD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;YACpE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;YAC9E,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACzE,MAAM,eAAe,CAAC,GAAG,EAAE,cAAc,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YAC1G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,GAAG,mBAAmB,CAAC,CAAC;YACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;YAC3F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;YAC5F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;YAC9F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;YACtG,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX;YACE,OAAO,IAAI,CAAC,oBAAoB,GAAG,OAAO,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAuB;IACnD,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC7G,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;YACvC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,iCAAiC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,gDAAgD,IAAI,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;YAC7J,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;YAClG,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,WAAW;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,gBAAgB,EAAE,CAAC,OAAO,IAAI,CAAC,CAAC;YACxD,OAAO,CAAC,CAAC;QACX,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,iCAAiC,CAAC,CAAC;YACpF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;YAC7D,OAAO,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;QACD;YACE,OAAO,IAAI,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAuB;IAClD,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IACjB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,4CAA4C;YAC5C,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC5D,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC,IAAI,CAAC,IAAI,SAAS,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;YAClG,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC7D,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC,+BAA+B,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;YAC/E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,GAAG,iBAAiB,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;YACpF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC9E,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBAC7C,OAAO,CAAC,CAAC;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;gBAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC9F,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBAC9C,OAAO,CAAC,CAAC;YACX,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,GAAG,iBAAiB,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,SAAS,eAAe,EAAE,CAAC,SAAS,iBAAiB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,GAAG,IAAI,CAAC,aAAa,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;YAC1N,OAAO,CAAC,CAAC;QACX,CAAC;QACD;YACE,OAAO,IAAI,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACP,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YACzC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAC9C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;YAC5C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;YAC5C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC3B;KACF,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC7G,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACvG,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC7F,MAAM,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;IAChI,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAE7D,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IACjB,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACrC,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,aAAa,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,QAAQ,sBAAsB,CAAC,CAAC;IAExH,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,aAAa,CACX,GAAG,EACH,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACzN,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;QAChD,wGAAwG;QACxG,wGAAwG;QACxG,6BAA6B;QAC7B,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;YACxH,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC7F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,MAAM,CAAC,IAAI,4BAA4B,UAAU,IAAI,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,gCAAgC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,8DAA8D,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAE1K,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;QACvI,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,mEAAmE,CAAC,CAAC;YAC9F,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC9D,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;YAC3B,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yKAAyK,CAAC,CAAC;YAClM,CAAC;YACD,MAAM,CAAC,GAAG,yBAAyB,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,6BAA6B,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAChH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,qBAAqB,CAAC,YAAY,EAAE,cAAc,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,wBAAwB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAC3G,CAAC;QACD,yGAAyG;QACzG,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzG,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QAC9G,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,kBAAkB,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YAClI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,oBAAoB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QAC1G,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,GAAG,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/H,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,mBAAmB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YACpG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8KAA8K,CAAC,CAAC;QACvM,CAAC;QACD,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QACjH,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YACrI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,wBAAwB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YACzG,IAAI,CAAC,MAAM,CAAC,IAAI;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8KAA8K,CAAC,CAAC;QACzN,CAAC;QACD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC;IACD,4FAA4F;IAC5F,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;IACnC,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,8GAA8G;QAChH,CAAC,CAAC,uHAAuH,CAC5H,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qPAAqP,CAAC,CAAC;IAC5Q,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IAC5G,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QAC9C,IAAI,CAAC;YACH,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,CAAS,EAAE,CAAoC;IACxE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACnI,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+JAA+J,CAAC,CAAC;QACtL,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACxF,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,QAAQ,IAAI,0BAA0B,EAAE,OAAO,CAAC,CAAC;IAClF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,+EAA+E,CAAC,CAAC,CAAC,4JAA4J,CAAC,CAAC;IAC1Q,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,+FAA+F;AAE/F,KAAK,UAAU,gBAAgB,CAAC,GAAuB,EAAE,OAAiB,EAAE;IAC1E,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC/L,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IACjB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,qGAAqG;YACrG,yDAAyD;YACzD,IAAI,QAA4B,CAAC;YACjC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACb,QAAQ,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvB,IAAI,CAAkB,CAAC;gBACvB,IAAI,CAAC;oBAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;gBACpF,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;gBAC3G,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC,kEAAkE,QAAQ,IAAI,WAAW,EAAE,CAAC,CAAC;YACzL,CAAC;YACD,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,gXAAgX,CAAC,CAAC;YAC9d,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,SAAS;YACZ,gBAAgB,CAAC,CAAC,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAChE,OAAO,CAAC,CAAC;QACX,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB,IAAI,CAAC,CAAC;YAC5G,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,cAAc,0BAA0B,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC/P,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,SAAS,IAAI,2BAA2B,EAAE,WAAW,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACxJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC7G,CAAC;oBAAS,CAAC;gBACT,CAAC,CAAC,KAAK,EAAE,CAAC;YACZ,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD;YACE,OAAO,IAAI,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG;IACrB,MAAM,EAAE;;;;;;CAMT;IACC,OAAO,EAAE;;;;;CAKV;CACA,CAAC;AAEF,+FAA+F;AAC/F,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe,EAAE,WAAyB;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;IAC9E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;QACnB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QACrE,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAG,GAAG,CAAC,QAAQ,CAAwB,IAAI,OAAO,EAAE,CAAC;QAC9F,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,sBAAsB,OAAO,iCAAiC,CAAC,CAAC;IACvG,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACzG,CAAC;AAED,wHAAwH;AACxH,SAAS,qBAAqB,CAAC,WAAmB,EAAE,WAAmB;IACrE,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;QAC1D,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAChH,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,IAAI,8EAA8E,CAAC,CAAC;QAChI,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,mGAAmG,CAAC,CAAC;QACzI,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,WAAmB,EAAE,aAAqB,EAAE,QAAgB;IACtG,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,OAAe,EAAE,EAAE;QACzC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzB,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,CAAC,CAAC,WAAW,EAAE,gIAAgI,CAAC,CAAC;IACjJ,oGAAoG;IACpG,yCAAyC;IACzC,IAAI,MAAM,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAgD,CAAC;YACtG,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE;gBAAE,MAAM,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC;QAC/F,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;IACD,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvG,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,4CAA4C,EAAE,KAAK,EAAE,8CAA8C,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACjN,CAAC,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IAC9B,CAAC,CAAC,eAAe,EAAE,+FAA+F,CAAC,CAAC;IACpH,CAAC,CAAC,MAAM,EAAE,sGAAsG,CAAC,CAAC;IAClH,CAAC,CAAC,YAAY,EAAE,6CAA6C,CAAC,CAAC;IAC/D,CAAC,CAAC,2BAA2B,EAAE,4TAA4T,CAAC,CAAC;IAC7V,yHAAyH;IACzH,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;IACrF,qBAAqB,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,qBAAqB,CAAC,EAAE,WAAW,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS;IAC/B,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AACD,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC9G,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,OAAO,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,EAAE;IACP,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;IAC7I,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,EACD,CAAC,GAAY,EAAE,EAAE;IACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAW,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CACF,CAAC"}
|
|
@@ -0,0 +1,50 @@
|
|
|
1
|
+
import type { BudgetLimits, TenantRef } from "./types.js";
|
|
2
|
+
/** Config file format version. Files without `v` are treated as version 1. */
|
|
3
|
+
export declare const CONFIG_VERSION = 1;
|
|
4
|
+
export type Mode = "enforce" | "observe";
|
|
5
|
+
export interface PolicyLayer {
|
|
6
|
+
/** baseline (shipped with Yenop), home (this machine or tenant), project (this repo). */
|
|
7
|
+
name: "baseline" | "home" | "project";
|
|
8
|
+
dir: string;
|
|
9
|
+
}
|
|
10
|
+
export interface YenopConfig {
|
|
11
|
+
home: string;
|
|
12
|
+
tenant: TenantRef;
|
|
13
|
+
/** Secret-file patterns: the defaults plus anything added in config.json. */
|
|
14
|
+
secretPatterns: string[];
|
|
15
|
+
/** File patterns whose contents count as sensitive data for run-level rules (not blocked, but remembered). */
|
|
16
|
+
sensitivePatterns: string[];
|
|
17
|
+
/** MCP servers whose reads are trusted content. Everything else read over MCP counts as untrusted input. */
|
|
18
|
+
trustedServers: string[];
|
|
19
|
+
/** MCP servers whose reads count as sensitive data. */
|
|
20
|
+
sensitiveServers: string[];
|
|
21
|
+
/** enforce: decisions are returned to the runtime. observe: decisions are only recorded. */
|
|
22
|
+
mode: Mode;
|
|
23
|
+
budgets: BudgetLimits;
|
|
24
|
+
/** A run idle longer than this many ms starts fresh; default in state.ts. Set in config as runIdleMs. */
|
|
25
|
+
runIdleMs?: number;
|
|
26
|
+
/**
|
|
27
|
+
* Policy layers, evaluated together. The baseline is always present and comes from the package;
|
|
28
|
+
* home and project layers add to it. Cedar semantics: any forbid wins, permits add up.
|
|
29
|
+
*/
|
|
30
|
+
policyLayers: PolicyLayer[];
|
|
31
|
+
/** Baseline (or any) policy ids switched off in config.json, so customers never edit shipped files. */
|
|
32
|
+
disabledPolicies: string[];
|
|
33
|
+
receiptsPath: string;
|
|
34
|
+
statePath: string;
|
|
35
|
+
}
|
|
36
|
+
export declare const DEFAULT_BUDGETS: BudgetLimits;
|
|
37
|
+
/** Resolve configuration from YENOP_HOME (default ~/.yenop) and an optional project dir. */
|
|
38
|
+
export declare function loadConfig(opts: {
|
|
39
|
+
cwd?: string;
|
|
40
|
+
home?: string;
|
|
41
|
+
builtinPoliciesDir: string;
|
|
42
|
+
}): YenopConfig;
|
|
43
|
+
/**
|
|
44
|
+
* A tenant always has a stable id. Configs written by `init` carry one; older or hand-written
|
|
45
|
+
* configs that only name the tenant get a deterministic id from this machine and user,
|
|
46
|
+
* so receipts from the same place always agree.
|
|
47
|
+
*/
|
|
48
|
+
export declare function resolveTenant(raw: string | Partial<TenantRef> | undefined): TenantRef;
|
|
49
|
+
export declare function localTenantId(): string;
|
|
50
|
+
export declare function ensureHome(home: string): void;
|
|
@@ -0,0 +1,93 @@
|
|
|
1
|
+
import { existsSync, mkdirSync, readFileSync } from "node:fs";
|
|
2
|
+
import { homedir } from "node:os";
|
|
3
|
+
import { join } from "node:path";
|
|
4
|
+
import { createHash } from "node:crypto";
|
|
5
|
+
import { hostname, userInfo } from "node:os";
|
|
6
|
+
import { DEFAULT_SECRET_PATTERNS } from "./shell.js";
|
|
7
|
+
/** Config file format version. Files without `v` are treated as version 1. */
|
|
8
|
+
export const CONFIG_VERSION = 1;
|
|
9
|
+
export const DEFAULT_BUDGETS = {
|
|
10
|
+
maxStepsPerRun: 1000,
|
|
11
|
+
maxDeniesPerRun: 20,
|
|
12
|
+
};
|
|
13
|
+
/** Resolve configuration from YENOP_HOME (default ~/.yenop) and an optional project dir. */
|
|
14
|
+
export function loadConfig(opts) {
|
|
15
|
+
const home = opts.home ?? process.env["YENOP_HOME"] ?? join(homedir(), ".yenop");
|
|
16
|
+
const readCfg = (path) => {
|
|
17
|
+
if (!existsSync(path))
|
|
18
|
+
return {};
|
|
19
|
+
let cfg;
|
|
20
|
+
try {
|
|
21
|
+
cfg = JSON.parse(readFileSync(path, "utf8"));
|
|
22
|
+
}
|
|
23
|
+
catch (e) {
|
|
24
|
+
throw new Error(`yenop: cannot parse ${path}: ${e.message}`);
|
|
25
|
+
}
|
|
26
|
+
if (cfg.v !== undefined && cfg.v > CONFIG_VERSION) {
|
|
27
|
+
throw new Error(`yenop: ${path} is config version ${cfg.v}; this Yenop understands up to ${CONFIG_VERSION}. Upgrade Yenop.`);
|
|
28
|
+
}
|
|
29
|
+
return cfg;
|
|
30
|
+
};
|
|
31
|
+
// precedence: YENOP_MODE env > <project>/.yenop/config.json > ~/.yenop/config.json > defaults
|
|
32
|
+
const homeCfg = readCfg(join(home, "config.json"));
|
|
33
|
+
const projectCfg = opts.cwd ? readCfg(join(opts.cwd, ".yenop", "config.json")) : {};
|
|
34
|
+
const fileCfg = { ...homeCfg, ...projectCfg, budgets: { ...(homeCfg.budgets ?? {}), ...(projectCfg.budgets ?? {}) } };
|
|
35
|
+
const envMode = process.env["YENOP_MODE"];
|
|
36
|
+
const mode = envMode === "observe" || envMode === "enforce" ? envMode : (fileCfg.mode ?? "enforce");
|
|
37
|
+
const policyLayers = [{ name: "baseline", dir: opts.builtinPoliciesDir }];
|
|
38
|
+
const homePolicies = join(home, "policies");
|
|
39
|
+
if (existsSync(homePolicies))
|
|
40
|
+
policyLayers.push({ name: "home", dir: homePolicies });
|
|
41
|
+
if (opts.cwd) {
|
|
42
|
+
const projectPolicies = join(opts.cwd, ".yenop", "policies");
|
|
43
|
+
if (existsSync(projectPolicies))
|
|
44
|
+
policyLayers.push({ name: "project", dir: projectPolicies });
|
|
45
|
+
}
|
|
46
|
+
const disabledPolicies = [...new Set([...(homeCfg.disabledPolicies ?? []), ...(projectCfg.disabledPolicies ?? [])])];
|
|
47
|
+
const secretPatterns = [...DEFAULT_SECRET_PATTERNS, ...(homeCfg.secretPatterns ?? []), ...(projectCfg.secretPatterns ?? [])];
|
|
48
|
+
const tenant = resolveTenant(fileCfg.tenant);
|
|
49
|
+
const both = (k) => [...new Set([...(homeCfg[k] ?? []), ...(projectCfg[k] ?? [])])];
|
|
50
|
+
return {
|
|
51
|
+
home,
|
|
52
|
+
tenant,
|
|
53
|
+
secretPatterns,
|
|
54
|
+
sensitivePatterns: both("sensitivePatterns"),
|
|
55
|
+
trustedServers: both("trustedServers"),
|
|
56
|
+
sensitiveServers: both("sensitiveServers"),
|
|
57
|
+
mode,
|
|
58
|
+
budgets: { ...DEFAULT_BUDGETS, ...(fileCfg.budgets ?? {}) },
|
|
59
|
+
...(typeof fileCfg.runIdleMs === "number" ? { runIdleMs: fileCfg.runIdleMs } : {}),
|
|
60
|
+
policyLayers,
|
|
61
|
+
disabledPolicies,
|
|
62
|
+
receiptsPath: join(home, "receipts.jsonl"),
|
|
63
|
+
statePath: join(home, "state.db"),
|
|
64
|
+
};
|
|
65
|
+
}
|
|
66
|
+
/**
|
|
67
|
+
* A tenant always has a stable id. Configs written by `init` carry one; older or hand-written
|
|
68
|
+
* configs that only name the tenant get a deterministic id from this machine and user,
|
|
69
|
+
* so receipts from the same place always agree.
|
|
70
|
+
*/
|
|
71
|
+
export function resolveTenant(raw) {
|
|
72
|
+
const name = typeof raw === "string" ? raw : (raw?.name ?? "local");
|
|
73
|
+
const id = typeof raw === "object" && raw?.id ? raw.id : localTenantId();
|
|
74
|
+
if (!/^tn_[a-z0-9]{26}$/.test(id))
|
|
75
|
+
throw new Error(`yenop: tenant id "${id}" must look like tn_ followed by 26 lowercase letters or digits`);
|
|
76
|
+
return { id, name };
|
|
77
|
+
}
|
|
78
|
+
export function localTenantId() {
|
|
79
|
+
let user = "";
|
|
80
|
+
try {
|
|
81
|
+
user = userInfo().username;
|
|
82
|
+
}
|
|
83
|
+
catch {
|
|
84
|
+
user = "";
|
|
85
|
+
}
|
|
86
|
+
const h = createHash("sha256").update(`${hostname()}\u0000${user}`).digest();
|
|
87
|
+
return "tn_" + BigInt("0x" + h.subarray(0, 16).toString("hex")).toString(32).padStart(26, "0").slice(0, 26);
|
|
88
|
+
}
|
|
89
|
+
export function ensureHome(home) {
|
|
90
|
+
if (!existsSync(home))
|
|
91
|
+
mkdirSync(home, { recursive: true });
|
|
92
|
+
}
|
|
93
|
+
//# sourceMappingURL=config.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAErD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAqChC,MAAM,CAAC,MAAM,eAAe,GAAiB;IAC3C,cAAc,EAAE,IAAI;IACpB,eAAe,EAAE,EAAE;CACpB,CAAC;AAEF,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,IAAiE;IAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IAajF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE;QACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QAC1D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,CAAC,GAAG,cAAc,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,sBAAsB,GAAG,CAAC,CAAC,kCAAkC,cAAc,kBAAkB,CAAC,CAAC;QAC/H,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,8FAA8F;IAC9F,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,OAAO,GAAY,EAAE,GAAG,OAAO,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;IAC/H,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAS,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC;IAC1G,MAAM,YAAY,GAAkB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACzF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,YAAY,CAAC;QAAE,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IACrF,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,eAAe,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrH,MAAM,cAAc,GAAG,CAAC,GAAG,uBAAuB,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7H,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,CAA8D,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjJ,OAAO;QACL,IAAI;QACJ,MAAM;QACN,cAAc;QACd,iBAAiB,EAAE,IAAI,CAAC,mBAAmB,CAAC;QAC5C,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC;QACtC,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,CAAC;QAC1C,IAAI;QACJ,OAAO,EAAE,EAAE,GAAG,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;QAC3D,GAAG,CAAC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,YAAY;QACZ,gBAAgB;QAChB,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAC1C,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;KAClC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAA4C;IACxE,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,OAAO,CAAC,CAAC;IACpE,MAAM,EAAE,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACzE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,EAAE,iEAAiE,CAAC,CAAC;IAC7I,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,EAAE,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7E,OAAO,KAAK,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9G,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC"}
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
import type { BudgetLimits, Decision, DecisionRequest, Outcome, OutcomeReceipt, PolicyBundle, ReceiptSink, RunStateStore } from "./types.js";
|
|
2
|
+
export interface EngineDeps {
|
|
3
|
+
tenant: import("./types.js").TenantRef;
|
|
4
|
+
mode: "enforce" | "observe";
|
|
5
|
+
/** Policies failed to load. Every decision is a deny until a person fixes them. */
|
|
6
|
+
policyError?: string;
|
|
7
|
+
secretPatterns: string[];
|
|
8
|
+
sensitivePatterns?: string[];
|
|
9
|
+
trustedServers?: string[];
|
|
10
|
+
sensitiveServers?: string[];
|
|
11
|
+
policies: PolicyBundle;
|
|
12
|
+
budgets: BudgetLimits;
|
|
13
|
+
state: RunStateStore;
|
|
14
|
+
receipts: ReceiptSink;
|
|
15
|
+
/** A run idle longer than this (ms) starts fresh on its next call. */
|
|
16
|
+
idleMs: number;
|
|
17
|
+
now?: () => Date;
|
|
18
|
+
}
|
|
19
|
+
/**
|
|
20
|
+
* Record what the runtime reports about a call after the fact. Only asks are tracked: the question an auditor
|
|
21
|
+
* has is "what did the person answer", and an allowed call that ran answers nothing.
|
|
22
|
+
*/
|
|
23
|
+
export declare function recordOutcome(deps: EngineDeps, runId: string, callId: string, tool: string, outcome: Outcome, detail?: string): OutcomeReceipt | undefined;
|
|
24
|
+
/**
|
|
25
|
+
* The decision path, in order:
|
|
26
|
+
* 1. budget breakers (cheapest, stops runaway loops)
|
|
27
|
+
* 2. permit policies: may this happen at all? (Cedar default deny; errors fail closed)
|
|
28
|
+
* 3. approval policies: must a person see it first? (a permit here means ask)
|
|
29
|
+
* 4. receipt, always
|
|
30
|
+
*/
|
|
31
|
+
export declare function decide(deps: EngineDeps, req: DecisionRequest): Decision;
|
|
@@ -0,0 +1,301 @@
|
|
|
1
|
+
import { uuidv7 } from "./ids.js";
|
|
2
|
+
import { resolve } from "node:path";
|
|
3
|
+
import { evaluate } from "./policy.js";
|
|
4
|
+
import { summarizeCall, trimForReceipt } from "./receipts.js";
|
|
5
|
+
import { analyzeShell, isControlPlanePath, isInternalHost, matchesSecretPattern, normalizePath, FS_IGNORES_CASE } from "./shell.js";
|
|
6
|
+
import { RECEIPT_VERSION } from "./types.js";
|
|
7
|
+
/** Facts derived from the request so policies can stay declarative. */
|
|
8
|
+
function derive(req, secretPatterns) {
|
|
9
|
+
const out = {};
|
|
10
|
+
const primary = req.args["file_path"] ?? req.args["path"] ?? req.args["notebook_path"];
|
|
11
|
+
// A tool that touches several files at once (apply_patch, MultiEdit) lists them in args.paths. Every one is
|
|
12
|
+
// judged, and the strictest answer wins: one secret or control-plane file among ten taints the call.
|
|
13
|
+
const extra = Array.isArray(req.args["paths"]) ? req.args["paths"].filter((x) => typeof x === "string") : [];
|
|
14
|
+
const all = [...(typeof primary === "string" ? [primary] : []), ...extra];
|
|
15
|
+
if (all.length === 0)
|
|
16
|
+
return out;
|
|
17
|
+
const base = req.cwd ?? process.cwd();
|
|
18
|
+
// resolve() both sides: it adds the drive on Windows for a rooted path, and collapses ".." so a path cannot
|
|
19
|
+
// walk out of the project while looking like it is inside
|
|
20
|
+
const rootN = req.cwd ? normalizePath(resolve(req.cwd), { foldCase: FS_IGNORES_CASE }) : undefined;
|
|
21
|
+
let inside = true;
|
|
22
|
+
let secret = false;
|
|
23
|
+
let control = false;
|
|
24
|
+
for (const p of all) {
|
|
25
|
+
const abs = resolve(base, p);
|
|
26
|
+
if (rootN !== undefined) {
|
|
27
|
+
const absN = normalizePath(abs, { foldCase: FS_IGNORES_CASE });
|
|
28
|
+
if (!(absN === rootN || absN.startsWith(rootN + "/")))
|
|
29
|
+
inside = false;
|
|
30
|
+
}
|
|
31
|
+
if (matchesSecretPattern(abs, secretPatterns))
|
|
32
|
+
secret = true;
|
|
33
|
+
if (isControlPlanePath(abs))
|
|
34
|
+
control = true;
|
|
35
|
+
}
|
|
36
|
+
if (rootN !== undefined)
|
|
37
|
+
out["insideProject"] = inside;
|
|
38
|
+
out["absolutePath"] = resolve(base, all[0]);
|
|
39
|
+
out["secretPath"] = secret;
|
|
40
|
+
out["controlPlanePath"] = control;
|
|
41
|
+
return out;
|
|
42
|
+
}
|
|
43
|
+
/**
|
|
44
|
+
* What this call does, in terms that do not depend on the tool: does it take in outside content,
|
|
45
|
+
* read data that should not travel, reach beyond this machine, send data out, change state.
|
|
46
|
+
* Run-level rules are written against these, so a plan split across harmless-looking calls still adds up.
|
|
47
|
+
*/
|
|
48
|
+
function flowOf(deps, req, derived, shell) {
|
|
49
|
+
const f = { ingestsUntrusted: false, readsSensitive: false, usesNetwork: false, externalNetwork: false, sendsOut: false, changesState: false };
|
|
50
|
+
const path = typeof derived["absolutePath"] === "string" ? derived["absolutePath"] : undefined;
|
|
51
|
+
const sensitiveFile = path !== undefined && (derived["secretPath"] === true || matchesSecretPattern(path, deps.sensitivePatterns ?? []));
|
|
52
|
+
switch (req.tool.kind) {
|
|
53
|
+
case "shell":
|
|
54
|
+
if (shell) {
|
|
55
|
+
f.ingestsUntrusted = shell.download;
|
|
56
|
+
f.readsSensitive = shell.sensitiveRead || shell.paths.some((p) => matchesSecretPattern(p, deps.sensitivePatterns ?? []));
|
|
57
|
+
f.usesNetwork = shell.network;
|
|
58
|
+
f.externalNetwork = shell.externalNetwork;
|
|
59
|
+
f.sendsOut = shell.outbound;
|
|
60
|
+
f.changesState = shell.destructive;
|
|
61
|
+
}
|
|
62
|
+
break;
|
|
63
|
+
case "web": {
|
|
64
|
+
f.usesNetwork = true;
|
|
65
|
+
const url = typeof req.args["url"] === "string" ? req.args["url"] : undefined;
|
|
66
|
+
let host;
|
|
67
|
+
try {
|
|
68
|
+
host = url ? new URL(url).hostname : undefined;
|
|
69
|
+
}
|
|
70
|
+
catch {
|
|
71
|
+
host = undefined;
|
|
72
|
+
}
|
|
73
|
+
f.externalNetwork = host === undefined || !isInternalHost(host);
|
|
74
|
+
if (req.tool.readOnly)
|
|
75
|
+
f.ingestsUntrusted = f.externalNetwork;
|
|
76
|
+
else
|
|
77
|
+
f.sendsOut = true;
|
|
78
|
+
break;
|
|
79
|
+
}
|
|
80
|
+
case "mcp": {
|
|
81
|
+
const server = req.tool.server ?? "";
|
|
82
|
+
const trusted = (deps.trustedServers ?? []).includes(server);
|
|
83
|
+
f.usesNetwork = true;
|
|
84
|
+
// A server the customer vouches for is neither an untrusted source nor a way out.
|
|
85
|
+
f.externalNetwork = !trusted;
|
|
86
|
+
if (req.tool.readOnly) {
|
|
87
|
+
f.ingestsUntrusted = !trusted;
|
|
88
|
+
f.readsSensitive = (deps.sensitiveServers ?? []).includes(server);
|
|
89
|
+
}
|
|
90
|
+
else {
|
|
91
|
+
f.sendsOut = true;
|
|
92
|
+
f.changesState = true;
|
|
93
|
+
}
|
|
94
|
+
break;
|
|
95
|
+
}
|
|
96
|
+
case "read":
|
|
97
|
+
f.readsSensitive = sensitiveFile;
|
|
98
|
+
break;
|
|
99
|
+
case "write":
|
|
100
|
+
f.changesState = true;
|
|
101
|
+
break;
|
|
102
|
+
case "unknown":
|
|
103
|
+
break;
|
|
104
|
+
}
|
|
105
|
+
return f;
|
|
106
|
+
}
|
|
107
|
+
/**
|
|
108
|
+
* The person deciding cannot see the model's reasoning, so an ask carries the run's history instead:
|
|
109
|
+
* which earlier steps made the run untrusted or sensitive, and what it did just before this call.
|
|
110
|
+
*/
|
|
111
|
+
function explainAsk(deps, runId, before) {
|
|
112
|
+
// Claude Code shows this as plain text in a small box. Keep it to a glance: short summaries, nothing said twice.
|
|
113
|
+
const clip = (t, n) => (t.length > n ? t.slice(0, n - 1) + "…" : t);
|
|
114
|
+
const parts = [];
|
|
115
|
+
const cited = new Set();
|
|
116
|
+
const src = deps.state.markSources(deps.tenant.id, runId);
|
|
117
|
+
const at = (s) => {
|
|
118
|
+
cited.add(s.step);
|
|
119
|
+
return `step ${s.step} (${s.tool}: ${clip(s.summary, 40)})`;
|
|
120
|
+
};
|
|
121
|
+
if (before.untrusted && src.untrusted)
|
|
122
|
+
parts.push(`took in outside content at ${at(src.untrusted)}`);
|
|
123
|
+
if (before.sensitive && src.sensitive)
|
|
124
|
+
parts.push(`touched sensitive data at ${at(src.sensitive)}`);
|
|
125
|
+
const recent = deps.state.recentSteps(deps.tenant.id, runId, 3).filter((s) => !cited.has(s.step));
|
|
126
|
+
let text = "";
|
|
127
|
+
if (parts.length)
|
|
128
|
+
text += ` Earlier in this run the agent ${parts.join(" and ")}.`;
|
|
129
|
+
if (recent.length)
|
|
130
|
+
text += ` Just before: ${recent.map((s) => `${s.step} ${s.tool} ${clip(s.summary, 32)}`).join("; ")}.`;
|
|
131
|
+
return text;
|
|
132
|
+
}
|
|
133
|
+
/**
|
|
134
|
+
* Record what the runtime reports about a call after the fact. Only asks are tracked: the question an auditor
|
|
135
|
+
* has is "what did the person answer", and an allowed call that ran answers nothing.
|
|
136
|
+
*/
|
|
137
|
+
export function recordOutcome(deps, runId, callId, tool, outcome, detail) {
|
|
138
|
+
const step = deps.state.setOutcome(deps.tenant.id, runId, callId, outcome);
|
|
139
|
+
if (!step || step.effect !== "ask")
|
|
140
|
+
return undefined;
|
|
141
|
+
const r = {
|
|
142
|
+
v: RECEIPT_VERSION,
|
|
143
|
+
kind: "outcome",
|
|
144
|
+
id: uuidv7(),
|
|
145
|
+
ts: (deps.now ?? (() => new Date()))().toISOString(),
|
|
146
|
+
tenant: deps.tenant,
|
|
147
|
+
runId,
|
|
148
|
+
callId,
|
|
149
|
+
tool,
|
|
150
|
+
outcome,
|
|
151
|
+
decisionId: step.receiptId,
|
|
152
|
+
};
|
|
153
|
+
if (detail)
|
|
154
|
+
r.detail = detail.slice(0, 300);
|
|
155
|
+
deps.receipts.append(r);
|
|
156
|
+
return r;
|
|
157
|
+
}
|
|
158
|
+
/**
|
|
159
|
+
* The decision path, in order:
|
|
160
|
+
* 1. budget breakers (cheapest, stops runaway loops)
|
|
161
|
+
* 2. permit policies: may this happen at all? (Cedar default deny; errors fail closed)
|
|
162
|
+
* 3. approval policies: must a person see it first? (a permit here means ask)
|
|
163
|
+
* 4. receipt, always
|
|
164
|
+
*/
|
|
165
|
+
export function decide(deps, req) {
|
|
166
|
+
const t0 = process.hrtime.bigint();
|
|
167
|
+
// A run idle past the window is treated as ended, so a crashed session's facts never taint a fresh one.
|
|
168
|
+
deps.state.expireIfIdle(deps.tenant.id, req.runId, deps.idleMs);
|
|
169
|
+
if (req.callId !== undefined) {
|
|
170
|
+
const seen = deps.state.recallCall(deps.tenant.id, req.runId, req.callId);
|
|
171
|
+
if (seen)
|
|
172
|
+
return { ...seen, replayed: true };
|
|
173
|
+
}
|
|
174
|
+
const before = deps.state.peek(deps.tenant.id, req.runId);
|
|
175
|
+
const steps = before.steps + 1;
|
|
176
|
+
const reasons = [];
|
|
177
|
+
const errors = [];
|
|
178
|
+
let effect;
|
|
179
|
+
let message;
|
|
180
|
+
const derived = derive(req, deps.secretPatterns);
|
|
181
|
+
const cmd = req.args["command"];
|
|
182
|
+
const shell = req.tool.kind === "shell" && typeof cmd === "string" ? analyzeShell(cmd, { secretPatterns: deps.secretPatterns }) : undefined;
|
|
183
|
+
const flow = flowOf(deps, req, derived, shell);
|
|
184
|
+
if (deps.policyError !== undefined) {
|
|
185
|
+
effect = "deny";
|
|
186
|
+
reasons.push("breaker:policies-invalid");
|
|
187
|
+
errors.push(deps.policyError);
|
|
188
|
+
message = `Yenop cannot load its policies, so every action is refused until a person fixes them. Run "yenop check". ${deps.policyError.split("\n").slice(0, 2).join(" ")}`;
|
|
189
|
+
}
|
|
190
|
+
else if (steps > deps.budgets.maxStepsPerRun) {
|
|
191
|
+
effect = "deny";
|
|
192
|
+
reasons.push("breaker:max-steps");
|
|
193
|
+
message = `Run exceeded ${deps.budgets.maxStepsPerRun} tool calls; Yenop stopped it.`;
|
|
194
|
+
}
|
|
195
|
+
else if (before.denies >= deps.budgets.maxDeniesPerRun) {
|
|
196
|
+
effect = "deny";
|
|
197
|
+
reasons.push("breaker:max-denies");
|
|
198
|
+
message = `Run hit ${deps.budgets.maxDeniesPerRun} denied calls; Yenop halted further actions.`;
|
|
199
|
+
}
|
|
200
|
+
else {
|
|
201
|
+
const input = { req, run: { ...before, steps }, flow, derived };
|
|
202
|
+
if (shell)
|
|
203
|
+
input.shell = shell;
|
|
204
|
+
const permit = evaluate(input, deps.policies.permit);
|
|
205
|
+
errors.push(...permit.errors);
|
|
206
|
+
if (permit.decision === "deny" || permit.errors.length > 0) {
|
|
207
|
+
effect = "deny";
|
|
208
|
+
reasons.push(...permit.reasons);
|
|
209
|
+
message =
|
|
210
|
+
permit.errors.length > 0
|
|
211
|
+
? `Policy evaluation error; Yenop fails closed (${permit.errors[0]}).`
|
|
212
|
+
: permit.reasons.length > 0
|
|
213
|
+
? `Blocked by policy ${permit.reasons.join(", ")}.`
|
|
214
|
+
: `No policy permits ${req.tool.name}.`;
|
|
215
|
+
}
|
|
216
|
+
else {
|
|
217
|
+
reasons.push(...permit.reasons);
|
|
218
|
+
const approve = evaluate(input, deps.policies.approve);
|
|
219
|
+
errors.push(...approve.errors);
|
|
220
|
+
if (approve.errors.length > 0) {
|
|
221
|
+
effect = "deny";
|
|
222
|
+
message = `Approval policy evaluation error; Yenop fails closed (${approve.errors[0]}).`;
|
|
223
|
+
}
|
|
224
|
+
else if (approve.decision === "allow") {
|
|
225
|
+
effect = "ask";
|
|
226
|
+
reasons.push(...approve.reasons.map((r) => `approve:${r}`));
|
|
227
|
+
message = `Needs a person: ${approve.reasons.join(", ")}.`;
|
|
228
|
+
}
|
|
229
|
+
else {
|
|
230
|
+
effect = "allow";
|
|
231
|
+
message = `Permitted by ${permit.reasons.join(", ")}.`;
|
|
232
|
+
}
|
|
233
|
+
}
|
|
234
|
+
}
|
|
235
|
+
const after = deps.state.bump(deps.tenant.id, req.runId, effect, flow);
|
|
236
|
+
const latencyMs = Number(process.hrtime.bigint() - t0) / 1e6;
|
|
237
|
+
const receipt = {
|
|
238
|
+
v: RECEIPT_VERSION,
|
|
239
|
+
kind: "decision",
|
|
240
|
+
id: uuidv7(),
|
|
241
|
+
ts: (deps.now ?? (() => new Date()))().toISOString(),
|
|
242
|
+
tenant: deps.tenant,
|
|
243
|
+
runId: req.runId,
|
|
244
|
+
runtime: req.principal.runtime,
|
|
245
|
+
agent: req.principal.agent,
|
|
246
|
+
user: req.principal.user,
|
|
247
|
+
tool: req.tool.name,
|
|
248
|
+
toolKind: req.tool.kind,
|
|
249
|
+
args: trimForReceipt(req.args),
|
|
250
|
+
mode: deps.mode,
|
|
251
|
+
enforced: deps.mode === "enforce" && req.permissionMode !== "bypassPermissions",
|
|
252
|
+
effect,
|
|
253
|
+
reasons,
|
|
254
|
+
errors,
|
|
255
|
+
steps: after.steps,
|
|
256
|
+
flow,
|
|
257
|
+
runBefore: { untrusted: before.untrusted, sensitive: before.sensitive, outbound: before.outbound, destructive: before.destructive },
|
|
258
|
+
latencyMs: Math.round(latencyMs * 100) / 100,
|
|
259
|
+
};
|
|
260
|
+
if (req.callId !== undefined)
|
|
261
|
+
receipt.callId = req.callId;
|
|
262
|
+
if (req.cwd !== undefined)
|
|
263
|
+
receipt.cwd = req.cwd;
|
|
264
|
+
if (req.permissionMode !== undefined)
|
|
265
|
+
receipt.permissionMode = req.permissionMode;
|
|
266
|
+
deps.receipts.append(receipt);
|
|
267
|
+
if (effect === "ask")
|
|
268
|
+
message += explainAsk(deps, req.runId, before);
|
|
269
|
+
const stepRecord = {
|
|
270
|
+
step: after.steps,
|
|
271
|
+
tool: req.tool.name,
|
|
272
|
+
summary: summarizeCall(req.args),
|
|
273
|
+
effect,
|
|
274
|
+
ingestsUntrusted: flow.ingestsUntrusted,
|
|
275
|
+
readsSensitive: flow.readsSensitive,
|
|
276
|
+
receiptId: receipt.id,
|
|
277
|
+
};
|
|
278
|
+
if (req.callId !== undefined)
|
|
279
|
+
stepRecord.callId = req.callId;
|
|
280
|
+
deps.state.recordStep(deps.tenant.id, req.runId, stepRecord);
|
|
281
|
+
const decision = {
|
|
282
|
+
effect,
|
|
283
|
+
reasons,
|
|
284
|
+
message,
|
|
285
|
+
errors,
|
|
286
|
+
budget: {
|
|
287
|
+
steps: after.steps,
|
|
288
|
+
denies: after.denies,
|
|
289
|
+
asks: after.asks,
|
|
290
|
+
maxSteps: deps.budgets.maxStepsPerRun,
|
|
291
|
+
maxDenies: deps.budgets.maxDeniesPerRun,
|
|
292
|
+
},
|
|
293
|
+
receiptId: receipt.id,
|
|
294
|
+
latencyMs: receipt.latencyMs,
|
|
295
|
+
mode: deps.mode,
|
|
296
|
+
};
|
|
297
|
+
if (req.callId !== undefined)
|
|
298
|
+
deps.state.rememberCall(deps.tenant.id, req.runId, req.callId, decision);
|
|
299
|
+
return decision;
|
|
300
|
+
}
|
|
301
|
+
//# sourceMappingURL=engine.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/core/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,QAAQ,EAAkB,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,oBAAoB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACpI,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAoB7C,uEAAuE;AACvE,SAAS,MAAM,CAAC,GAAoB,EAAE,cAAwB;IAC5D,MAAM,GAAG,GAA8C,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACvF,4GAA4G;IAC5G,qGAAqG;IACrG,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzI,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACjC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,4GAA4G;IAC5G,0DAA0D;IAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;gBAAE,MAAM,GAAG,KAAK,CAAC;QACxE,CAAC;QACD,IAAI,oBAAoB,CAAC,GAAG,EAAE,cAAc,CAAC;YAAE,MAAM,GAAG,IAAI,CAAC;QAC7D,IAAI,kBAAkB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC;IACvD,GAAG,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC;IAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC;IAC3B,GAAG,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC;IAClC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CAAC,IAAgB,EAAE,GAAoB,EAAE,OAAkD,EAAE,KAA6B;IACvI,MAAM,CAAC,GAAc,EAAE,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAC1J,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,OAAO,CAAC,cAAc,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3G,MAAM,aAAa,GAAG,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,IAAI,IAAI,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC;IACzI,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,OAAO;YACV,IAAI,KAAK,EAAE,CAAC;gBACV,CAAC,CAAC,gBAAgB,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACpC,CAAC,CAAC,cAAc,GAAG,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC;gBACzH,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC9B,CAAC,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;gBAC1C,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;gBAC5B,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC;YACrC,CAAC;YACD,MAAM;QACR,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;YACrB,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,IAAI,IAAwB,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,SAAS,CAAC;YACnB,CAAC;YACD,CAAC,CAAC,eAAe,GAAG,IAAI,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAChE,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ;gBAAE,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,eAAe,CAAC;;gBACzD,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC;YACvB,MAAM;QACR,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7D,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;YACrB,kFAAkF;YAClF,CAAC,CAAC,eAAe,GAAG,CAAC,OAAO,CAAC;YAC7B,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACtB,CAAC,CAAC,gBAAgB,GAAG,CAAC,OAAO,CAAC;gBAC9B,CAAC,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC;YACxB,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,MAAM;YACT,CAAC,CAAC,cAAc,GAAG,aAAa,CAAC;YACjC,MAAM;QACR,KAAK,OAAO;YACV,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC;YACtB,MAAM;QACR,KAAK,SAAS;YACZ,MAAM;IACV,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAgB,EAAE,KAAa,EAAE,MAAkD;IACrG,iHAAiH;IACjH,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,CAAC,CAAa,EAAE,EAAE;QAC3B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC;IAC9D,CAAC,CAAC;IACF,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrG,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClG,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,CAAC,MAAM;QAAE,IAAI,IAAI,kCAAkC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IACnF,IAAI,MAAM,CAAC,MAAM;QAAE,IAAI,IAAI,iBAAiB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC1H,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAgB,EAAE,KAAa,EAAE,MAAc,EAAE,IAAY,EAAE,OAAgB,EAAE,MAAe;IAC5H,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,CAAC,GAAmB;QACxB,CAAC,EAAE,eAAe;QAClB,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,MAAM,EAAE;QACZ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE;QACpD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK;QACL,MAAM;QACN,IAAI;QACJ,OAAO;QACP,UAAU,EAAE,IAAI,CAAC,SAAS;KAC3B,CAAC;IACF,IAAI,MAAM;QAAE,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,IAAgB,EAAE,GAAoB;IAC3D,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACnC,wGAAwG;IACxG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,IAAI;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAc,CAAC;IACnB,IAAI,OAAe,CAAC;IACpB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5I,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAE/C,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,GAAG,MAAM,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9B,OAAO,GAAG,4GAA4G,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7K,CAAC;SAAM,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,GAAG,MAAM,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAClC,OAAO,GAAG,gBAAgB,IAAI,CAAC,OAAO,CAAC,cAAc,gCAAgC,CAAC;IACxF,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QACzD,MAAM,GAAG,MAAM,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACnC,OAAO,GAAG,WAAW,IAAI,CAAC,OAAO,CAAC,eAAe,8CAA8C,CAAC;IAClG,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAc,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3E,IAAI,KAAK;YAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;QAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,MAAM,GAAG,MAAM,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,OAAO;gBACL,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;oBACtB,CAAC,CAAC,gDAAgD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;oBACtE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;wBACzB,CAAC,CAAC,qBAAqB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;wBACnD,CAAC,CAAC,qBAAqB,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,GAAG,MAAM,CAAC;gBAChB,OAAO,GAAG,yDAAyD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3F,CAAC;iBAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACxC,MAAM,GAAG,KAAK,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC5D,OAAO,GAAG,mBAAmB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7D,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,OAAO,CAAC;gBACjB,OAAO,GAAG,gBAAgB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC;IAC7D,MAAM,OAAO,GAAY;QACvB,CAAC,EAAE,eAAe;QAClB,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,MAAM,EAAE;QACZ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE;QACpD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO;QAC9B,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK;QAC1B,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI;QACxB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;QACnB,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;QACvB,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,cAAc,KAAK,mBAAmB;QAC/E,MAAM;QACN,OAAO;QACP,MAAM;QACN,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI;QACJ,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE;QACnI,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,GAAG;KAC7C,CAAC;IACF,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1D,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACjD,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;IAClF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE9B,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,UAAU,GAAe;QAC7B,IAAI,EAAE,KAAK,CAAC,KAAK;QACjB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;QACnB,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAChC,MAAM;QACN,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,SAAS,EAAE,OAAO,CAAC,EAAE;KACtB,CAAC;IACF,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAE7D,MAAM,QAAQ,GAAa;QACzB,MAAM;QACN,OAAO;QACP,OAAO;QACP,MAAM;QACN,MAAM,EAAE;YACN,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;YACrC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;SACxC;QACD,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;IACF,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvG,OAAO,QAAQ,CAAC;AAClB,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
export declare function uuidv7(now?: number): string;
|
|
2
|
+
/** Stable tenant identifier: "tn_" + 26 lowercase base32 chars derived from a v7 UUID (time-ordered, globally unique). */
|
|
3
|
+
export declare function newTenantId(now?: number): string;
|
|
4
|
+
/** Millisecond timestamp encoded in a v7 id. */
|
|
5
|
+
export declare function uuidv7Time(id: string): number;
|
package/dist/core/ids.js
ADDED
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import { randomBytes } from "node:crypto";
|
|
2
|
+
/**
|
|
3
|
+
* UUID version 7: 48-bit Unix millisecond timestamp, then random bits.
|
|
4
|
+
* Globally unique with no coordination, and sorts by creation time as plain text.
|
|
5
|
+
* Within one process, ids minted in the same millisecond are kept in order by a small counter.
|
|
6
|
+
*/
|
|
7
|
+
let lastMs = 0;
|
|
8
|
+
let seq = 0;
|
|
9
|
+
export function uuidv7(now = Date.now()) {
|
|
10
|
+
if (now === lastMs) {
|
|
11
|
+
seq = (seq + 1) & 0xfff;
|
|
12
|
+
}
|
|
13
|
+
else {
|
|
14
|
+
lastMs = now;
|
|
15
|
+
seq = randomBytes(2).readUInt16BE(0) & 0x7ff; // start low so a burst never overflows the 12 bits
|
|
16
|
+
}
|
|
17
|
+
const b = Buffer.alloc(16);
|
|
18
|
+
b.writeUIntBE(now, 0, 6);
|
|
19
|
+
const rnd = randomBytes(10);
|
|
20
|
+
rnd.copy(b, 6);
|
|
21
|
+
b[6] = 0x70 | (seq >> 8); // version 7 in the top nibble, then the high 4 bits of the sequence
|
|
22
|
+
b[7] = seq & 0xff;
|
|
23
|
+
b[8] = (b[8] & 0x3f) | 0x80; // RFC 9562 variant
|
|
24
|
+
const h = b.toString("hex");
|
|
25
|
+
return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
|
|
26
|
+
}
|
|
27
|
+
/** Stable tenant identifier: "tn_" + 26 lowercase base32 chars derived from a v7 UUID (time-ordered, globally unique). */
|
|
28
|
+
export function newTenantId(now = Date.now()) {
|
|
29
|
+
const hex = uuidv7(now).replace(/-/g, "");
|
|
30
|
+
return "tn_" + BigInt("0x" + hex).toString(32).padStart(26, "0").slice(0, 26);
|
|
31
|
+
}
|
|
32
|
+
/** Millisecond timestamp encoded in a v7 id. */
|
|
33
|
+
export function uuidv7Time(id) {
|
|
34
|
+
return parseInt(id.replace(/-/g, "").slice(0, 12), 16);
|
|
35
|
+
}
|
|
36
|
+
//# sourceMappingURL=ids.js.map
|