zelari-code 2.55.0 → 2.57.0

package/dist/cli/safety/decisionEmit.js

@@ -0,0 +1,43 @@
+import { decisionPayloadError } from '@zelari/core/session';
+/** Actor used by the decision seams: the harness itself, never the model. */
+export const DECISION_ACTOR = { type: 'system' };
+function seqFrom(result) {
+    const raw = result !== null && typeof result === 'object' && 'seq' in result
+        ? result.seq
+        : undefined;
+    const seq = typeof raw === 'number' ? raw : Number(raw);
+    return Number.isFinite(seq) && seq > 0 ? seq : undefined;
+}
+/**
+ * Validate → append, best-effort. Returns what actually happened; never throws.
+ */
+export async function emitDecisionEvent(sink, kind, data, actor = DECISION_ACTOR) {
+    const contractError = decisionPayloadError(kind, data);
+    if (contractError !== null)
+        return { recorded: false, error: contractError };
+    if (!sink)
+        return { recorded: false };
+    try {
+        const result = await sink({ kind, actor, data });
+        const seq = seqFrom(result);
+        return seq !== undefined ? { recorded: true, seq } : { recorded: true };
+    }
+    catch {
+        return { recorded: false };
+    }
+}
+/**
+ * `jail.blocked` — the OS jail refused a spawn (`ZELARI_OS_JAIL=required` with
+ * no honest backend ⇒ typed `[jail]` deny, never a silent unjailed run). The
+ * payload is the deny's OWN facts: which backend failed, under which mode, why,
+ * and which exec tool owned the spawn.
+ */
+export async function emitJailBlocked(sink, payload) {
+    return emitDecisionEvent(sink, 'jail.blocked', {
+        ...(payload.tool !== undefined ? { tool: payload.tool } : {}),
+        backend: payload.backend,
+        mode: payload.mode,
+        reason: payload.reason,
+    });
+}
+//# sourceMappingURL=decisionEmit.js.map

package/dist/cli/safety/decisionEmit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionEmit.js","sourceRoot":"","sources":["../../../src/cli/safety/decisionEmit.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,oBAAoB,EAA0B,MAAM,sBAAsB,CAAC;AAcpF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAE/D,SAAS,OAAO,CAAC,MAAe;IAC9B,MAAM,GAAG,GACP,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,IAAI,MAAM;QAC9D,CAAC,CAAE,MAA2B,CAAC,GAAG;QAClC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAmC,EACnC,IAAuB,EACvB,IAA6B,EAC7B,QAAsB,cAAc;IAEpC,MAAM,aAAa,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAC7E,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAmC,EACnC,OAA2E;IAE3E,OAAO,iBAAiB,CAAC,IAAI,EAAE,cAAc,EAAE;QAC7C,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/safety/permissionGate.js

@@ -0,0 +1,239 @@
+// WS5 (t137): the OBSERVER hook surface (PermissionRequest / Notification
+// subscribers). Type + one pure formatter only — the gate never gates on it.
+import { summarizeHookArgs, } from '@zelari/core/harness';
+import { claimMatchValues, resourceClaimsFor } from './resourceClaims.js';
+import { emitDecisionEvent } from './decisionEmit.js';
+import { activePermissionRules } from './permissionRules.js';
+import { evaluatePermissionPolicy, formatPermissionDenial, } from './permissionPolicy.js';
+/** Spine event kind emitted on a rule denial (WS1 vocabulary addition). */
+export const PERMISSION_DENIED_KIND = 'permission.denied';
+/** Spine event kind emitted when a dispatch resolves to a PROMPT (WS7 slice 4). */
+export const PERMISSION_ASKED_KIND = 'permission.asked';
+/** Spine event kind emitted when a dispatch is allowed with NO prompt (WS7 slice 4). */
+export const AUTO_APPROVE_GRANTED_KIND = 'auto_approve.granted';
+/**
+ * Derive what the engine looks at from ONE tool call: the declared categories
+ * plus the concrete resources the invocation can touch (paths, host). Reuses
+ * the resource-claims table so a path deny can never be dodged by a second
+ * argument (apply_diff headers, observe_batch operations, …).
+ */
+export function buildPermissionRequest(input) {
+    const paths = [];
+    let host;
+    for (const claim of resourceClaimsFor(input.toolName, input.args)) {
+        if (claim.kind === 'path') {
+            for (const candidate of claimMatchValues(claim, input.root)) {
+                if (!paths.includes(candidate))
+                    paths.push(candidate);
+            }
+        }
+        else if (claim.kind === 'network' && host === undefined) {
+            host = claim.host;
+        }
+    }
+    return {
+        toolName: input.toolName,
+        categories: input.required,
+        ...(paths.length > 0 ? { paths } : {}),
+        ...(host !== undefined ? { host } : {}),
+    };
+}
+/**
+ * The gate's verdict for one dispatch, or null when there is NOTHING to say:
+ * no rule configured (zero-rule fast path → the category decision stands) or
+ * no rule matched (the engine's "> category default" step). A malformed
+ * project config is never silent: it comes back as a fail-closed 'ask'.
+ */
+export function evaluateToolDispatch(input) {
+    const { rules, error } = activePermissionRules(input.root);
+    if (error !== undefined) {
+        return {
+            decision: 'ask',
+            source: 'fail-closed',
+            reason: `[permissions] ${error}`,
+        };
+    }
+    if (rules.length === 0)
+        return null;
+    let request;
+    try {
+        request = buildPermissionRequest(input);
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        return {
+            decision: 'ask',
+            source: 'fail-closed',
+            reason: `[permissions] could not derive the resources of "${input.toolName}" (${detail}) — failing closed`,
+        };
+    }
+    const verdict = evaluatePermissionPolicy(rules, request);
+    // No rule matched ⇒ no opinion ⇒ the 5-category decision stands.
+    return verdict.source === 'fail-closed' ? null : verdict;
+}
+/**
+ * Promote an 'ask' to 'allow' only when the CATEGORY decided the ask. A
+ * category deny (env `ZELARI_PERMISSION_*`) and every other layer's ask/deny
+ * (agent rules, claims, contract) are left untouched: an allow rule can skip
+ * a prompt, never a restriction.
+ */
+export function applyAllowRule(categoryAction) {
+    return categoryAction === 'ask' ? 'allow' : categoryAction;
+}
+const MAX_RECENT_DENIALS = 20;
+let denialLedger = [];
+/** Record a denial for `/permissions`. Never throws, never blocks a dispatch. */
+export function recordPermissionDenial(record) {
+    denialLedger = [record, ...denialLedger].slice(0, MAX_RECENT_DENIALS);
+}
+/** Most recent denials, newest first. */
+export function listRecentPermissionDenials(limit = 10) {
+    return denialLedger.slice(0, Math.max(0, limit));
+}
+export function clearPermissionDenials() {
+    denialLedger = [];
+}
+/** The denial line the user sees ("denied "write_file" — [permissions:project] rule '…'"). */
+export function permissionDenialMessage(toolName, verdict) {
+    return formatPermissionDenial(toolName, verdict);
+}
+function seqFrom(result) {
+    const raw = result !== null && typeof result === 'object' && 'seq' in result
+        ? result.seq
+        : undefined;
+    const seq = typeof raw === 'number' ? raw : Number(raw);
+    return Number.isFinite(seq) && seq > 0 ? seq : undefined;
+}
+/** Pure: one dispatch decision → the `PermissionRequest` hook payload. */
+export function buildPermissionRequestHookPayload(input) {
+    const verdict = input.verdict ?? null;
+    const argsSummary = summarizeHookArgs(input.args);
+    const reason = verdict?.reason?.trim();
+    return {
+        tool: input.tool,
+        categories: [...input.categories],
+        effect: input.effect,
+        ...(verdict?.matchedRuleId ? { matchedRuleId: verdict.matchedRuleId } : {}),
+        ...(verdict?.source ? { source: verdict.source } : {}),
+        ...(reason ? { reason } : {}),
+        ...(argsSummary ? { argsSummary } : {}),
+    };
+}
+/** Fire `PermissionRequest` (+ `Notification` on deny). Never throws. */
+export async function emitPermissionObserverHooks(hooks, input, ctx = {}) {
+    if (!hooks)
+        return;
+    const payload = buildPermissionRequestHookPayload(input);
+    try {
+        await hooks.runPermissionRequest(payload, ctx);
+    }
+    catch {
+        /* an observer never propagates into the gate */
+    }
+    if (payload.effect !== 'deny')
+        return;
+    try {
+        await hooks.runNotification({
+            source: 'needs-input',
+            kind: PERMISSION_DENIED_KIND,
+            summary: `tool "${payload.tool}" was denied by ${payload.matchedRuleId || 'a permission rule'}`,
+            tool: payload.tool,
+        }, ctx);
+    }
+    catch {
+        /* an observer never propagates into the gate */
+    }
+}
+export async function emitPermissionDenied(sink, payload) {
+    const { tool, verdict } = payload;
+    const ts = payload.ts ?? Date.now();
+    recordPermissionDenial({
+        ts,
+        tool,
+        matchedRuleId: verdict.matchedRuleId ?? '',
+        source: verdict.source,
+        reason: verdict.reason,
+        ...(payload.sessionId !== undefined ? { sessionId: payload.sessionId } : {}),
+    });
+    if (!sink)
+        return { recorded: false };
+    try {
+        const result = await sink({
+            kind: PERMISSION_DENIED_KIND,
+            actor: { type: 'system', role: 'permissions' },
+            data: {
+                tool,
+                matchedRuleId: verdict.matchedRuleId ?? '',
+                source: verdict.source,
+                reason: verdict.reason,
+            },
+        });
+        const seq = seqFrom(result);
+        return seq !== undefined ? { recorded: true, seq } : { recorded: true };
+    }
+    catch {
+        return { recorded: false };
+    }
+}
+/**
+ * SELECTION RULE for `auto_approve.granted` — which allows the spine records.
+ * The deny side (WS1) records only RULE denials; an allow is recorded only when
+ * the harness actually DECIDED something:
+ *
+ *   (a) an ALLOW RULE matched (project/session rule) — the rule made the call;
+ *   (b) `--permissions yolo` promoted an ask to allow — an explicit opt-in;
+ *   (c) an `execute` / `network` CATEGORY default — privileged side effects.
+ *
+ * Every other category default (`read`, `write`, `ui`) is deliberately NOT
+ * recorded: those are the bulk of all dispatches and recording them would
+ * flood the spine with events that carry no decision. Returns null ⇒ nothing
+ * to say (same contract as `evaluateToolDispatch`).
+ */
+export function autoApproveOrigin(input) {
+    if (input.effect !== 'allow')
+        return null;
+    if (input.yoloPromoted === true) {
+        return { source: 'preset', reason: 'yolo (--permissions yolo) promoted an ask to allow' };
+    }
+    const verdict = input.verdict ?? null;
+    if (verdict?.decision === 'allow') {
+        return {
+            source: verdict.source,
+            ...(verdict.matchedRuleId ? { matchedRuleId: verdict.matchedRuleId } : {}),
+            ...(verdict.reason ? { reason: verdict.reason } : {}),
+        };
+    }
+    const privileged = input.categories.filter((c) => c === 'execute' || c === 'network');
+    if (privileged.length > 0) {
+        return { source: 'default', reason: `${privileged.join('+')} category default` };
+    }
+    return null;
+}
+/**
+ * `permission.asked` — the gate resolved this dispatch to a PROMPT. Emitted for
+ * EVERY ask, including the fail-closed one (no interactive approver attached):
+ * the DECISION was "ask", whichever way it then resolved. Payload reuses the
+ * WS5 hook formatter (`buildPermissionRequestHookPayload`: tool, categories,
+ * effect `ask`, rule origin, bounded argsSummary) — the same fields the
+ * `permission.asked` contract in decisionEvents.ts mirrors.
+ */
+export async function emitPermissionAsked(sink, input) {
+    const base = buildPermissionRequestHookPayload({ ...input, effect: 'ask' });
+    const reason = input.reason?.trim();
+    return emitDecisionEvent(sink, PERMISSION_ASKED_KIND, { ...base, ...(reason ? { reason } : {}) }, { type: 'system', role: 'permissions' });
+}
+/**
+ * `auto_approve.granted` — the same decision block resolved to ALLOW without a
+ * prompt. The caller passes the origin `autoApproveOrigin()` selected.
+ */
+export async function emitAutoApproveGranted(sink, payload) {
+    const { origin } = payload;
+    return emitDecisionEvent(sink, AUTO_APPROVE_GRANTED_KIND, {
+        tool: payload.tool,
+        categories: [...payload.categories],
+        source: origin.source,
+        ...(origin.matchedRuleId ? { matchedRuleId: origin.matchedRuleId } : {}),
+        ...(origin.reason ? { reason: origin.reason } : {}),
+    }, { type: 'system', role: 'permissions' });
+}
+//# sourceMappingURL=permissionGate.js.map

package/dist/cli/safety/permissionGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionGate.js","sourceRoot":"","sources":["../../../src/cli/safety/permissionGate.ts"],"names":[],"mappings":"AA0BA,0EAA0E;AAC1E,6EAA6E;AAC7E,OAAO,EACL,iBAAiB,GAIlB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAA0B,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GAIvB,MAAM,uBAAuB,CAAC;AAS/B,2EAA2E;AAC3E,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAA4B,CAAC;AAEnE,mFAAmF;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAA2B,CAAC;AAEjE,wFAAwF;AACxF,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAA+B,CAAC;AAUzE;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAA8B;IACnE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAwB,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,KAAK,MAAM,SAAS,IAAI,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC1D,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,QAAQ;QAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAA8B;IACjE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,iBAAiB,KAAK,EAAE;SACjC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,OAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,oDAAoD,KAAK,CAAC,QAAQ,MAAM,MAAM,oBAAoB;SAC3G,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzD,iEAAiE;IACjE,OAAO,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,cAAgC;IAC7D,OAAO,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;AAC7D,CAAC;AAYD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,IAAI,YAAY,GAA6B,EAAE,CAAC;AAEhD,iFAAiF;AACjF,MAAM,UAAU,sBAAsB,CAAC,MAA8B;IACnE,YAAY,GAAG,CAAC,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;AACxE,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,2BAA2B,CAAC,KAAK,GAAG,EAAE;IACpD,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,YAAY,GAAG,EAAE,CAAC;AACpB,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,OAA0B;IAClF,OAAO,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAOD,SAAS,OAAO,CAAC,MAAe;IAC9B,MAAM,GAAG,GACP,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,IAAI,MAAM;QAC9D,CAAC,CAAE,MAA2B,CAAC,GAAG;QAClC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AA6BD,0EAA0E;AAC1E,MAAM,UAAU,iCAAiC,CAAC,KAA0B;IAC1E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC;IACtC,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvC,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;QACjC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAA6C,EAC7C,KAA0B,EAC1B,MAAmB,EAAE;IAErB,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO;IACtC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,eAAe,CACzB;YACE,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,SAAS,OAAO,CAAC,IAAI,mBAAmB,OAAO,CAAC,aAAa,IAAI,mBAAmB,EAAE;YAC/F,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,EACD,GAAG,CACJ,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAqC,EACrC,OAAsF;IAEtF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAClC,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,sBAAsB,CAAC;QACrB,EAAE;QACF,IAAI;QACJ,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,EAAE;QAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC,CAAC;IACH,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;YACxB,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE;YAC9C,IAAI,EAAE;gBACJ,IAAI;gBACJ,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,EAAE;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB;SACF,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAuBD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAA6B;IAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;IAC5F,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC;IACtC,IAAI,OAAO,EAAE,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;IACtF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAOD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAqC,EACrC,KAA+B;IAE/B,MAAM,IAAI,GAAG,iCAAiC,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACpC,OAAO,iBAAiB,CACtB,IAAI,EACJ,qBAAqB,EACrB,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC1C,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,CACxC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAqC,EACrC,OAAmF;IAEnF,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,OAAO,iBAAiB,CACtB,IAAI,EACJ,yBAAyB,EACzB;QACE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,EACD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,CACxC,CAAC;AACJ,CAAC"}

package/dist/cli/safety/permissionPolicy.js

@@ -0,0 +1,279 @@
+/**
+ * WS1 / t133 — permission policy engine (allow | ask | deny) for tool dispatch.
+ *
+ * A local, declarative rule layer evaluated BEFORE every CLI tool dispatch:
+ *
+ *   .zelari/permissions.json  (source 'project') ─┐
+ *   /permissions add …        (source 'session') ─┼→ evaluate → deny > ask > allow
+ *   the 5 category defaults   (source 'default') ─┘
+ *
+ * Precedence is deterministic (plan §WS1):
+ *
+ *   1. deny > ask > allow — the most restrictive EFFECT wins;
+ *   2. within the same effect the MOST SPECIFIC rule wins (a rule is more
+ *      specific the more of its matchers it had to satisfy: tool / category /
+ *      pathPrefix / host);
+ *   3. remaining ties keep declaration order — session rules are listed before
+ *      project ones, so runtime intent wins an equal-specificity tie.
+ *
+ * With ZERO rules the engine is a no-op: the caller keeps the historical
+ * 5-category semantics of toolPermissions.ts, byte-identical. This module
+ * never widens a category on its own.
+ *
+ * Fail-closed: a malformed/unknown rule or config never silently allows.
+ * `parsePermissionRuleFile` returns the error IN PLACE of the rules (naming
+ * the offending file) and `evaluatePermissionPolicy` answers 'ask' — never
+ * 'allow' — when nothing matched and no fallback was supplied.
+ *
+ * Pure: no I/O, no process state, no clock. Rule SOURCES live in
+ * permissionRules.ts; the dispatch gate in permissionGate.ts.
+ *
+ * @since v2.56.0 (WS1 / t133)
+ */
+import { z } from 'zod';
+import { EFFECT_RANK } from './policyEngine.js';
+/** The three effects a rule can carry (same vocabulary as the category policy). */
+export const PERMISSION_EFFECTS = ['allow', 'ask', 'deny'];
+/** The 5 category semantics of toolPermissions.ts — the DEFAULT source. */
+export const PERMISSION_RULE_CATEGORIES = ['read', 'write', 'execute', 'network', 'ui'];
+/**
+ * `$comment` — the ONE non-policy key both schemas tolerate: a documentation
+ * slot the WS1 template writes at the top level of `.zelari/permissions.json`
+ * (a rule may carry its own for the same purpose).
+ *
+ * It is ACCEPTED AND STRIPPED: the content is never validated and never reaches
+ * the engine, so documentation can never change a decision. Without this the
+ * `.strict()` schemas rejected the shipped 0-rule template as malformed, and
+ * since a malformed config fails closed (every call 'ask') the effect was the
+ * exact OPPOSITE of a rule-less file: nothing at all was allowed in a
+ * non-interactive context. Every OTHER unknown key is still a MALFORMED config
+ * (a typo'd `efect:` keeps failing closed, naming its path).
+ */
+const commentSchema = z.string().optional();
+/** Shallow copy of a validated object without its documentation slot. */
+function stripComment(value) {
+    const { $comment: _comment, ...rest } = value;
+    return rest;
+}
+/**
+ * One rule of `.zelari/permissions.json` (zod-validated, `.strict()`: an
+ * unknown key — `$comment` aside — is a MALFORMED config and fails closed
+ * instead of being silently ignored).
+ *
+ * A rule with no matcher is a catch-all (specificity 0) — the only way to say
+ * "deny everything" — and loses every same-effect tie against a rule that
+ * actually matched on something.
+ */
+export const PermissionRuleSchema = z
+    .object({
+    $comment: commentSchema,
+    id: z.string().min(1),
+    effect: z.enum(PERMISSION_EFFECTS),
+    /** Tool name or '*' glob pattern (e.g. `bash`, `mcp__*`). */
+    tool: z.string().min(1).optional(),
+    category: z.enum(PERMISSION_RULE_CATEGORIES).optional(),
+    /** Path prefix, root-relative or absolute (separator-insensitive). */
+    pathPrefix: z.string().min(1).optional(),
+    /** Host or domain suffix (`example.com`, `*.example.com`). */
+    host: z.string().min(1).optional(),
+    note: z.string().min(1).optional(),
+})
+    .strict()
+    .transform(stripComment);
+/** Project config location, relative to the workspace root. */
+export const PERMISSION_RULE_FILE = '.zelari/permissions.json';
+/** Envelope schema version of that file (additive changes keep it). */
+export const PERMISSION_RULE_FILE_VERSION = 1;
+/**
+ * Envelope of `.zelari/permissions.json`: the version and the rules, plus the
+ * `$comment` documentation slot (stripped, see above) — nothing else.
+ */
+export const PermissionRuleFileSchema = z
+    .object({
+    $comment: commentSchema,
+    version: z.literal(PERMISSION_RULE_FILE_VERSION).optional(),
+    rules: z.array(PermissionRuleSchema),
+})
+    .strict()
+    .transform(stripComment);
+function normalizeValue(v) {
+    return v.trim().replace(/\\/g, '/').replace(/\/{2,}/g, '/').toLowerCase();
+}
+function escapeRegExp(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/** Tool name match: exact, or a `*` glob (`*`, `mcp__*`, `write_*`). */
+function toolHits(pattern, toolName) {
+    const p = pattern.trim();
+    if (!p.includes('*'))
+        return p === toolName;
+    const body = p
+        .split('*')
+        .map((part) => escapeRegExp(part))
+        .join('.*');
+    return new RegExp(`^${body}$`).test(toolName);
+}
+/**
+ * Path prefix match against a whole-SEGMENT run: `docs` matches `docs/a.md`
+ * and `/repo/docs/a.md`, but never `docs-private/a.md`. Separator- and
+ * (Windows hosts, user-authored config): the DENY direction must never slip,
+ * so being forgiving here fails safe.
+ */
+function pathPrefixHits(prefix, paths) {
+    const head = `/${normalizeValue(prefix).replace(/^\/+|\/+$/g, '')}`;
+    if (head === '/')
+        return false;
+    return paths.some((p) => {
+        const value = `/${normalizeValue(p).replace(/^\/+|\/+$/g, '')}`;
+        return value === head || value.startsWith(`${head}/`) || value.includes(`${head}/`);
+    });
+}
+/** Host match: exact, or a domain suffix (`example.com` also matches `api.example.com`). */
+function hostHits(pattern, host) {
+    const p = normalizeValue(pattern).replace(/^\*\.?/, '');
+    if (!p)
+        return true;
+    const h = normalizeValue(host).replace(/\/+$/, '');
+    return h === p || h.endsWith(`.${p}`);
+}
+/**
+ * Match ONE rule against ONE request. Every matcher the rule DECLARES must
+ * hit; the count of declared matchers is its specificity. Null = no match.
+ */
+export function matchPermissionRule(entry, request) {
+    const { rule } = entry;
+    let specificity = 0;
+    if (rule.tool !== undefined) {
+        if (!toolHits(rule.tool, request.toolName))
+            return null;
+        specificity += 1;
+    }
+    if (rule.category !== undefined) {
+        if (!(request.categories ?? []).includes(rule.category))
+            return null;
+        specificity += 1;
+    }
+    if (rule.pathPrefix !== undefined) {
+        if (!pathPrefixHits(rule.pathPrefix, request.paths ?? []))
+            return null;
+        specificity += 1;
+    }
+    if (rule.host !== undefined) {
+        if (typeof request.host !== 'string' || !hostHits(rule.host, request.host))
+            return null;
+        specificity += 1;
+    }
+    return { rule, source: entry.source, specificity };
+}
+/**
+ * The winning rule (deny > ask > allow, then most specific, then first
+ * declared), or null when nothing matched — in which case the caller keeps
+ * the category decision ("... > category default").
+ */
+export function matchPermissionRules(rules, request) {
+    let best = null;
+    for (const entry of rules) {
+        const hit = matchPermissionRule(entry, request);
+        if (!hit)
+            continue;
+        if (best === null) {
+            best = hit;
+            continue;
+        }
+        const rank = EFFECT_RANK[hit.rule.effect] - EFFECT_RANK[best.rule.effect];
+        if (rank > 0 || (rank === 0 && hit.specificity > best.specificity))
+            best = hit;
+    }
+    return best;
+}
+/** `[permissions:session] rule 'no-push' — never push from this repo` */
+export function describePermissionRule(source, rule) {
+    return `[permissions:${source}] rule '${rule.id}'${rule.note ? ` — ${rule.note}` : ''}`;
+}
+/**
+ * Stable, greppable deny line. The matched rule id is ALWAYS present (WS1
+ * contract: "structured denial that NAMES the matched rule id"); the
+ * fail-closed branch says so explicitly.
+ */
+export function formatPermissionDenial(toolName, verdict) {
+    const head = describePermissionRule(verdict.source, {
+        id: verdict.matchedRuleId ?? 'unknown (no rule matched)',
+    });
+    // A matched rule's `reason` IS `describePermissionRule(source, rule)` — the
+    // very same head PLUS the rule note (see evaluatePermissionPolicy). Keep it
+    // whenever it extends the head, or the note the user needs to understand WHY
+    // would be dropped; a reason about something else (fail-closed) is appended
+    // after the denial, as before.
+    const extendsHead = verdict.reason !== '' && verdict.reason.startsWith(head);
+    const named = extendsHead ? verdict.reason : head;
+    const extra = verdict.reason !== '' && !extendsHead ? ` ${verdict.reason}` : '';
+    return `${named} — denied "${toolName}".${extra}`;
+}
+/**
+ * Evaluate the request against `rules`.
+ *
+ * `opts.fallback` is the decision to use when NO rule matched — the dispatch
+ * gate passes the category decision so a rule-less setup stays a no-op. With
+ * no fallback the engine FAILS CLOSED ('ask', never 'allow').
+ */
+export function evaluatePermissionPolicy(rules, request, opts = {}) {
+    const hit = matchPermissionRules(rules, request);
+    if (hit) {
+        return {
+            decision: hit.rule.effect,
+            matchedRuleId: hit.rule.id,
+            source: hit.source,
+            specificity: hit.specificity,
+            reason: describePermissionRule(hit.source, hit.rule),
+        };
+    }
+    if (opts.fallback !== undefined) {
+        return {
+            decision: opts.fallback,
+            source: 'default',
+            specificity: 0,
+            reason: opts.fallbackReason ?? '',
+        };
+    }
+    return {
+        decision: 'ask',
+        source: 'fail-closed',
+        specificity: 0,
+        reason: '[permissions] no rule matched and no category default was supplied — failing closed',
+    };
+}
+/**
+ * Parse `.zelari/permissions.json` (already read as text). Any problem —
+ * invalid JSON, schema violation, unknown key (`$comment` aside, which is
+ * stripped as documentation), duplicate rule id — returns an
+ * `error` that NAMES the file and the offending field, and NO rules: the
+ * engine then answers 'ask' (fail-closed), never a silent allow.
+ */
+export function parsePermissionRuleFile(raw, filePath) {
+    let json;
+    try {
+        json = JSON.parse(raw);
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        return { rules: [], error: `${filePath}: invalid JSON (${detail}) — failing closed` };
+    }
+    const parsed = PermissionRuleFileSchema.safeParse(json);
+    if (!parsed.success) {
+        const issue = parsed.error.issues[0];
+        const at = issue && issue.path.length > 0 ? issue.path.join('.') : 'file';
+        return {
+            rules: [],
+            error: `${filePath}: invalid permissions config at '${at}': ${issue?.message ?? 'schema validation failed'} — failing closed`,
+        };
+    }
+    const seen = new Set();
+    for (const rule of parsed.data.rules) {
+        if (seen.has(rule.id)) {
+            return { rules: [], error: `${filePath}: duplicate rule id '${rule.id}' — failing closed` };
+        }
+        seen.add(rule.id);
+    }
+    return { rules: parsed.data.rules.map((rule) => ({ rule, source: 'project' })) };
+}
+//# sourceMappingURL=permissionPolicy.js.map

package/dist/cli/safety/permissionPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionPolicy.js","sourceRoot":"","sources":["../../../src/cli/safety/permissionPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,mFAAmF;AACnF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AAEpE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAU,CAAC;AAEjG;;;;;;;;;;;;GAYG;AACH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAE5C,yEAAyE;AACzE,SAAS,YAAY,CAAmB,KAAgC;IACtE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,QAAQ,EAAE,aAAa;IACvB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;IAClC,6DAA6D;IAC7D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;IACvD,sEAAsE;IACtE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,8DAA8D;IAC9D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE;KACR,SAAS,CAAC,YAAY,CAAC,CAAC;AAI3B,+DAA+D;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAC/D,uEAAuE;AACvE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAE9C;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,QAAQ,EAAE,aAAa;IACvB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE;IAC3D,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;CACrC,CAAC;KACD,MAAM,EAAE;KACR,SAAS,CAAC,YAAY,CAAC,CAAC;AAwC3B,SAAS,cAAc,CAAC,CAAS;IAC/B,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,wEAAwE;AACxE,SAAS,QAAQ,CAAC,OAAe,EAAE,QAAgB;IACjD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,KAAK,QAAQ,CAAC;IAC5C,MAAM,IAAI,GAAG,CAAC;SACX,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;SACjC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,MAAc,EAAE,KAAwB;IAC9D,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC;IACpE,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4FAA4F;AAC5F,SAAS,QAAQ,CAAC,OAAe,EAAE,IAAY;IAC7C,MAAM,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAA2B,EAC3B,OAA0B;IAE1B,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACxD,WAAW,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACrE,WAAW,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACvE,WAAW,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACxF,WAAW,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAsC,EACtC,OAA0B;IAE1B,IAAI,IAAI,GAA+B,IAAI,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,GAAG,GAAG,CAAC;YACX,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YAAE,IAAI,GAAG,GAAG,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CACpC,MAA4B,EAC5B,IAAyC;IAEzC,OAAO,gBAAgB,MAAM,WAAW,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC1F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,OAA0B;IACjF,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE;QAClD,EAAE,EAAE,OAAO,CAAC,aAAa,IAAI,2BAA2B;KACzD,CAAC,CAAC;IACH,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,+BAA+B;IAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,OAAO,GAAG,KAAK,cAAc,QAAQ,KAAK,KAAK,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAsC,EACtC,OAA0B,EAC1B,OAAiE,EAAE;IAEnE,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,GAAG,EAAE,CAAC;QACR,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;YACzB,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC;SACrD,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,CAAC;YACd,MAAM,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;SAClC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,CAAC;QACd,MAAM,EAAE,qFAAqF;KAC9F,CAAC;AACJ,CAAC;AAQD;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW,EAAE,QAAgB;IACnE,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,QAAQ,mBAAmB,MAAM,oBAAoB,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,EAAE,GAAG,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1E,OAAO;YACL,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,GAAG,QAAQ,oCAAoC,EAAE,MACtD,KAAK,EAAE,OAAO,IAAI,0BACpB,mBAAmB;SACpB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,QAAQ,wBAAwB,IAAI,CAAC,EAAE,oBAAoB,EAAE,CAAC;QAC9F,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC,CAAC,EAAE,CAAC;AAC5F,CAAC"}