@bjoernrochel/sevro 1.0.0 → 1.1.1

package/dist/src/hosts/skill-hooks.js

@@ -0,0 +1,423 @@
+import { existsSync } from "node:fs";
+import { mkdir, readFile, stat, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { shellQuote as quote } from "../shell.js";
+import { fileURLToPath } from "node:url";
+import { isRecord, isUnknownArray } from "../value-guards.js";
+import { skillHookCatalog } from "./skill-hook-catalog.js";
+const MAX_EVENTS_BYTES = 8 * 1024 * 1024;
+const MAX_RETAINED_CALLS = 128;
+/** Install the runner's silent observer separately from authorized plugin hooks. */
+export async function prepareSkillTracking(options) {
+    const root = join(options.privateRoot, "skill-tracking");
+    const receipts = join(root, "receipts");
+    await mkdir(receipts, { recursive: true, mode: 0o700 });
+    const configuration = {
+        host: options.host,
+        receipts,
+        ...(await skillHookCatalog(options.roots ?? [])),
+    };
+    const configurationPath = join(root, "configuration.json");
+    await writeFile(configurationPath, JSON.stringify(configuration), {
+        flag: "wx",
+        mode: 0o600,
+    });
+    const command = [
+        "/usr/bin/env",
+        "-i",
+        "PATH=/usr/bin:/bin",
+        process.execPath,
+        fileURLToPath(new URL(import.meta.filename.endsWith(".ts")
+            ? "./skill-hook-handler.ts"
+            : "./skill-hook-handler.js", import.meta.url)),
+        configurationPath,
+    ]
+        .map(quote)
+        .join(" ");
+    return { configuration, command, hooks: hookDefinitions(command) };
+}
+function hookDefinitions(command) {
+    return Object.fromEntries(["SessionStart", "PreToolUse", "PostToolUse", "Stop"].map((event) => {
+        return [event, [{ hooks: [{ type: "command", command, timeout: 5 }] }]];
+    }));
+}
+function isReceipt(value, skills) {
+    if (!isRecord(value))
+        return false;
+    return (receiptLabels(value) &&
+        stringList(value.invocations) &&
+        stringList(value.ambiguousInvocations) &&
+        receiptPageFields(value, skills));
+}
+function receiptPageFields(value, skills) {
+    return (typeof value.partial === "boolean" &&
+        validBodyRanges(value.bodyRanges, skills));
+}
+function validOffset(value) {
+    return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+}
+function validRange(value, length) {
+    if (!isOffsetRange(value))
+        return false;
+    const [start, end] = value;
+    return start < end && end <= length;
+}
+function isOffsetRange(value) {
+    return (isUnknownArray(value) && value.length === 2 && value.every(validOffset));
+}
+function validPage(value, skills) {
+    if (!isRecord(value) || !Array.isArray(value.ranges))
+        return false;
+    const skill = skills.find((item) => item.invocation === value.invocation && item.sha256 === value.sha256);
+    if (!skill)
+        return false;
+    return value.ranges.every((range) => validRange(range, skill.body.length));
+}
+function validBodyRanges(value, skills) {
+    if (value === undefined)
+        return true;
+    return (Array.isArray(value) &&
+        value.every((page) => validPage(page, skills)));
+}
+function stringList(value) {
+    return (Array.isArray(value) &&
+        value.every((item) => typeof item === "string"));
+}
+function receiptLabels(value) {
+    if (!["SessionStart", "PreToolUse", "PostToolUse", "Stop"].includes(String(value.event)))
+        return false;
+    return [value.sessionId, value.turnId, value.toolUseId, value.toolName].every((field) => field === null || typeof field === "string");
+}
+async function receipts(tracking) {
+    const root = tracking.configuration.receipts;
+    const result = { events: [], reasons: [] };
+    if (existsSync(join(root, "partial")))
+        result.reasons.push("observer_failure");
+    try {
+        const path = join(root, "events.jsonl");
+        if ((await stat(path)).size > MAX_EVENTS_BYTES)
+            return { ...result, reasons: [...result.reasons, "receipt_limit"] };
+        parseReceipts(await readFile(path, "utf8"), tracking.configuration.skills, result.events);
+    }
+    catch (error) {
+        result.reasons.push(error instanceof SyntaxError
+            ? "invalid_receipts"
+            : "receipts_unavailable");
+    }
+    return result;
+}
+function parseReceipts(text, skills, events) {
+    for (const line of text.trimEnd().split("\n")) {
+        const event = JSON.parse(line);
+        if (!isReceipt(event, skills))
+            throw new SyntaxError("invalid skill hook receipt");
+        events.push(event);
+    }
+}
+function hookKey(event) {
+    return JSON.stringify([event.sessionId, event.toolUseId]);
+}
+function collectionSummary(events, sessionId) {
+    const ledger = {
+        pending: new Set(),
+        finished: new Set(),
+        diagnosticKeys: new Set(),
+        duplicateToolCallCount: 0,
+        unmatchedPostToolUseCount: 0,
+    };
+    for (const event of events)
+        updatePending(event, ledger);
+    return {
+        diagnosticKeys: new Set([...ledger.diagnosticKeys, ...ledger.pending]),
+        eventCount: events.length,
+        preToolUseCount: events.filter((event) => event.event === "PreToolUse")
+            .length,
+        postToolUseCount: events.filter((event) => event.event === "PostToolUse")
+            .length,
+        pendingToolCallCount: ledger.pending.size,
+        duplicateToolCallCount: ledger.duplicateToolCallCount,
+        unmatchedPostToolUseCount: ledger.unmatchedPostToolUseCount,
+        partialEventCount: events.filter((event) => event.partial).length,
+        ...lifecycleSummary(events, sessionId),
+    };
+}
+function lifecycleSummary(events, sessionId) {
+    const selected = events.filter((event) => event.sessionId === sessionId);
+    return {
+        sessionIdentified: sessionId !== null,
+        sessionStarted: selected.some((event) => event.event === "SessionStart"),
+        sessionStopped: selected.some((event) => event.event === "Stop"),
+    };
+}
+function updatePending(event, ledger) {
+    const key = hookKey(event);
+    if (event.event === "PreToolUse") {
+        if (duplicateCall(key, ledger)) {
+            ledger.duplicateToolCallCount++;
+            ledger.diagnosticKeys.add(key);
+        }
+        ledger.pending.add(key);
+    }
+    if (event.event === "PostToolUse") {
+        if (!ledger.pending.delete(key)) {
+            ledger.unmatchedPostToolUseCount++;
+            ledger.diagnosticKeys.add(key);
+        }
+        ledger.finished.add(key);
+    }
+}
+function duplicateCall(key, ledger) {
+    return ledger.pending.has(key) || ledger.finished.has(key);
+}
+function mergedRanges(ranges) {
+    const merged = [];
+    for (const [start, end] of ranges.sort((a, b) => a[0] - b[0])) {
+        const previous = merged.at(-1);
+        if (previous && start <= previous[1])
+            previous[1] = Math.max(previous[1], end);
+        else
+            merged.push([start, end]);
+    }
+    return merged;
+}
+function wholeBody(ranges, skill) {
+    const range = ranges[0];
+    return (ranges.length === 1 &&
+        range !== undefined &&
+        range[0] === 0 &&
+        range[1] === skill.body.length);
+}
+function completedPage(receipt, page, skills) {
+    const aliases = skills.filter((skill) => skill.sha256 === page.sha256);
+    if (aliases.some((skill) => skill.invocation !== page.invocation)) {
+        receipt.ambiguousInvocations = [
+            ...new Set([
+                ...receipt.ambiguousInvocations,
+                ...aliases.map((skill) => skill.invocation),
+            ]),
+        ];
+        receipt.partial = true;
+    }
+    else
+        receipt.invocations = [
+            ...new Set([...receipt.invocations, page.invocation]),
+        ];
+}
+function accumulatePage(receipt, page, skills, coverage) {
+    const skill = skills.find((item) => item.invocation === page.invocation && item.sha256 === page.sha256);
+    if (!skill) {
+        receipt.partial = true;
+        return;
+    }
+    const key = JSON.stringify([
+        receipt.sessionId,
+        receipt.turnId,
+        page.invocation,
+        page.sha256,
+    ]);
+    const ranges = mergedRanges([...(coverage.get(key) ?? []), ...page.ranges]);
+    coverage.set(key, ranges);
+    if (wholeBody(ranges, skill))
+        completedPage(receipt, page, skills);
+}
+function pagedEvents(events, skills) {
+    const coverage = new Map();
+    const settled = new Set();
+    return events.map((event) => {
+        const receipt = { ...event };
+        for (const page of event.bodyRanges ?? []) {
+            if (!settled.has(page.invocation))
+                accumulatePage(receipt, page, skills, coverage);
+        }
+        for (const invocation of receipt.invocations)
+            settled.add(invocation);
+        return receipt;
+    });
+}
+function publicReceipt(event) {
+    const receipt = { ...event };
+    delete receipt.bodyRanges;
+    return {
+        ...receipt,
+        fragmentSkills: [
+            ...new Set((event.bodyRanges ?? []).map((page) => page.invocation)),
+        ],
+    };
+}
+function incompleteSkills(events) {
+    const settled = new Set(events.flatMap((event) => [
+        ...event.invocations,
+        ...event.ambiguousInvocations,
+    ]));
+    const fragments = new Set(events.flatMap((event) => (event.bodyRanges ?? []).map((page) => page.invocation)));
+    return [...fragments].filter((invocation) => !settled.has(invocation));
+}
+function retainedCalls(events, diagnosticKeys) {
+    const calls = [];
+    let truncated = false;
+    for (const event of events.filter((event) => relevantCall(event, diagnosticKeys))) {
+        calls.push(publicReceipt(event));
+        if (calls.length > MAX_RETAINED_CALLS ||
+            Buffer.byteLength(JSON.stringify(calls)) > 24 * 1024) {
+            calls.pop();
+            truncated = true;
+            break;
+        }
+    }
+    return { calls, truncated };
+}
+function relevantCall(event, diagnosticKeys) {
+    return [
+        event.invocations.length > 0,
+        event.ambiguousInvocations.length > 0,
+        (event.bodyRanges ?? []).length > 0,
+        event.partial,
+        diagnosticKeys.has(hookKey(event)),
+    ].some(Boolean);
+}
+function primaryEvidence(events, reasons) {
+    const index = events.findIndex((event) => event.invocations.length > 0);
+    const first = events[index];
+    const complete = primarySelectionComplete(events, index, reasons);
+    if (!complete)
+        return { primarySkill: null, primarySkillCompleteness: "partial" };
+    return {
+        primarySkill: first?.invocations[0] ?? null,
+        primarySkillCompleteness: "complete",
+    };
+}
+function primarySelectionComplete(events, index, reasons) {
+    const matches = events[index]?.invocations.length ?? 0;
+    if (matches > 1)
+        return false;
+    if (reasons.length === 0)
+        return true;
+    return primaryBeforeGap(events, index, reasons);
+}
+function primaryBeforeGap(events, index, reasons) {
+    if (reasons.join(",") !== "pending_tool_calls")
+        return false;
+    if (events[index]?.invocations.length !== 1)
+        return false;
+    const prefix = collectionSummary(events.slice(0, index + 1), null);
+    return prefix.pendingToolCallCount === 0;
+}
+export function skillActivationClaims(observation) {
+    if (observation.completeness !== "partial")
+        return [];
+    if (observation.data.primarySkillCompleteness !== "complete")
+        return [];
+    return [
+        {
+            id: "sevro.host.skill-activation-claims",
+            completeness: "complete",
+            data: {
+                method: "tool_result_body_match",
+                scope: "primary_and_positive_presence",
+                collectionCompleteness: "partial",
+                primarySkill: observation.data.primarySkill,
+                presentSkills: observation.data.observedSkills,
+            },
+        },
+    ];
+}
+export function skillExposureClaims(observation) {
+    const skillExposures = observation.data.skillExposures.filter((exposure) => exposure.status === "full" || exposure.status === "partial");
+    if (skillExposures.length === 0)
+        return [];
+    return [
+        {
+            id: "sevro.host.skill-exposure-claims",
+            completeness: "complete",
+            data: {
+                method: "tool_result_body_match",
+                scope: "positive_exposure",
+                collectionStatus: observation.data.collectionStatus,
+                skillExposures,
+            },
+        },
+    ];
+}
+function exposureSummary(skills, events, collectionStatus) {
+    const exposure = {
+        full: new Set(events.flatMap((event) => event.invocations)),
+        partial: new Set(incompleteSkills(events)),
+        ambiguous: new Set(events.flatMap((event) => event.ambiguousInvocations)),
+    };
+    return skills.map(({ invocation: skill }) => ({
+        skill,
+        status: skillExposureStatus(skill, exposure, collectionStatus),
+    }));
+}
+function skillExposureStatus(skill, exposure, collectionStatus) {
+    if (exposure.full.has(skill))
+        return "full";
+    if (exposure.ambiguous.has(skill))
+        return "ambiguous";
+    if (exposure.partial.has(skill))
+        return "partial";
+    return collectionStatus === "complete"
+        ? "none"
+        : "unknown";
+}
+function exposureCollectionStatus(reasons, eventCount) {
+    if (eventCount === 0)
+        return "unavailable";
+    return reasons.some((reason) => !["partial_skill_bodies", "ambiguous_skill_bodies"].includes(reason))
+        ? "partial"
+        : "complete";
+}
+export async function skillTrackingObservation(tracking, sessionId, completed) {
+    const collected = await receipts(tracking);
+    const events = pagedEvents(collected.events, tracking.configuration.skills);
+    const partialSkills = incompleteSkills(events);
+    const { diagnosticKeys, ...collection } = collectionSummary(events, sessionId);
+    const { calls, truncated } = retainedCalls(events, diagnosticKeys);
+    const ambiguousSkills = [
+        ...new Set(events.flatMap((event) => event.ambiguousInvocations)),
+    ];
+    const conditions = [
+        ["host_incomplete", !completed],
+        ["catalog_incomplete", !tracking.configuration.catalogComplete],
+        ["session_identity_missing", !collection.sessionIdentified],
+        ["session_start_missing", !collection.sessionStarted],
+        ["session_stop_missing", !collection.sessionStopped],
+        ["pending_tool_calls", collection.pendingToolCallCount > 0],
+        ["unmatched_post_tool_use", collection.unmatchedPostToolUseCount > 0],
+        ["duplicate_tool_calls", collection.duplicateToolCallCount > 0],
+        [
+            "partial_hook_events",
+            events.some((event) => event.partial && event.ambiguousInvocations.length === 0),
+        ],
+        ["ambiguous_skill_bodies", ambiguousSkills.length > 0],
+        ["partial_skill_bodies", partialSkills.length > 0],
+        ["calls_truncated", truncated],
+    ];
+    const incompleteReasons = [
+        ...collected.reasons,
+        ...conditions.filter(([, applies]) => applies).map(([reason]) => reason),
+    ];
+    const complete = incompleteReasons.length === 0;
+    const collectionStatus = exposureCollectionStatus(incompleteReasons, events.length);
+    return {
+        id: "sevro.host.skill-activations",
+        completeness: complete ? "complete" : "partial",
+        data: {
+            method: "tool_result_body_match",
+            visibility: "tool_result",
+            scope: "prepared_skill_bodies",
+            catalogComplete: tracking.configuration.catalogComplete,
+            collectionStatus,
+            skillExposures: exposureSummary(tracking.configuration.skills, events, collectionStatus),
+            observedSkills: [...new Set(calls.flatMap((call) => call.invocations))],
+            ...primaryEvidence(events, incompleteReasons),
+            partialSkills,
+            ambiguousSkills,
+            calls,
+            truncated,
+            incompleteReasons,
+            collection,
+        },
+    };
+}
+//# sourceMappingURL=skill-hooks.js.map

package/dist/src/hosts/skill-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-hooks.js","sourceRoot":"","sources":["skill-hooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,yBAAyB;AACpE,OAAO,EAAE,IAAI,EAAE,kBAAkB;AACjC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,oBAAiB;AAC/C,OAAO,EAAE,aAAa,EAAE,iBAAiB;AACzC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,2BAAwB;AAC3D,OAAO,EAAE,gBAAgB,EAAyB,gCAA6B;AAQ/E,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAO/B,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAI1C;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,MAAM,aAAa,GAA2B;QAC5C,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ;QACR,GAAG,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;KACjD,CAAC;IACF,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAC3D,MAAM,SAAS,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE;QAChE,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,MAAM,OAAO,GAAG;QACd,cAAc;QACd,IAAI;QACJ,oBAAoB;QACpB,OAAO,CAAC,QAAQ;QAChB,aAAa,CACX,IAAI,GAAG,CACL,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;YAClC,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,yBAAyB,EAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,CAChB,CACF;QACD,iBAAiB;KAClB;SACE,GAAG,CAAC,KAAK,CAAC;SACV,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,MAAM,CAAC,WAAW,CACvB,CAAC,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAClE,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,KAAc,EACd,MAAmB;IAEnB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,aAAa,CAAC,KAAK,CAAC;QACpB,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;QAC7B,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC;QACtC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA8B,EAC9B,MAAmB;IAEnB,OAAO,CACL,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;QAClC,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,MAAc;IAChD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3B,OAAO,KAAK,GAAG,GAAG,IAAI,GAAG,IAAI,MAAM,CAAC;AACtC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,MAAmB;IACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CACvE,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAC3C,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,MAAmB;IAC1D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,KAAK,CAAC,CAAC,IAAa,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,KAAK,CAAC,CAAC,IAAa,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAA8B;IACnD,IACE,CAAC,CAAC,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,QAAQ,CAC7D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CACpB;QAED,OAAO,KAAK,CAAC;IACf,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAC3E,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CACvD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAuB;IAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC;IAC7C,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,EAAwB,EAAE,OAAO,EAAE,EAAc,EAAE,CAAC;IAC7E,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,gBAAgB;YAC5C,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,CAAC;QACtE,aAAa,CACX,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAC5B,QAAQ,CAAC,aAAa,CAAC,MAAM,EAC7B,MAAM,CAAC,MAAM,CACd,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,CAAC,IAAI,CACjB,KAAK,YAAY,WAAW;YAC1B,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,sBAAsB,CAC3B,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CACpB,IAAY,EACZ,MAAmB,EACnB,MAA0B;IAE1B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;YAC3B,MAAM,IAAI,WAAW,CAAC,4BAA4B,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAuB;IACtC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,iBAAiB,CACxB,MAA0B,EAC1B,SAAwB;IAExB,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,IAAI,GAAG,EAAU;QAC1B,QAAQ,EAAE,IAAI,GAAG,EAAU;QAC3B,cAAc,EAAE,IAAI,GAAG,EAAU;QACjC,sBAAsB,EAAE,CAAC;QACzB,yBAAyB,EAAE,CAAC;KAC7B,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzD,OAAO;QACL,cAAc,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,cAAc,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QACtE,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,YAAY,CAAC;aACpE,MAAM;QACT,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,aAAa,CAAC;aACtE,MAAM;QACT,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;QACzC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;QACrD,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM;QACjE,GAAG,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,MAA0B,EAC1B,SAAwB;IAExB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IACzE,OAAO;QACL,iBAAiB,EAAE,SAAS,KAAK,IAAI;QACrC,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC;QACxE,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,KAAuB,EACvB,MAMC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACjC,IAAI,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAChC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACnC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,GAAW,EACX,MAAuD;IAEvD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,YAAY,CAAC,MAA0B;IAC9C,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,QAAQ,IAAI,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC;YAClC,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;;YACtC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,MAA0B,EAAE,KAAgB;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,CACL,MAAM,CAAC,MAAM,KAAK,CAAC;QACnB,KAAK,KAAK,SAAS;QACnB,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QACd,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAyB,EACzB,IAAqB,EACrB,MAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,oBAAoB,GAAG;YAC7B,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,OAAO,CAAC,oBAAoB;gBAC/B,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;aAC5C,CAAC;SACH,CAAC;QACF,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IACzB,CAAC;;QACC,OAAO,CAAC,WAAW,GAAG;YACpB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;SACtD,CAAC;AACN,CAAC;AAED,SAAS,cAAc,CACrB,OAAyB,EACzB,IAAqB,EACrB,MAAmB,EACnB,QAAyC;IAEzC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CACrE,CAAC;IACF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACvB,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QACzB,OAAO,CAAC,SAAS;QACjB,OAAO,CAAC,MAAM;QACd,IAAI,CAAC,UAAU;QACf,IAAI,CAAC,MAAM;KACZ,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1B,IAAI,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,MAA0B,EAAE,MAAmB;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC/B,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtE,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAuB;IAC5C,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,UAAU,CAAC;IAC1B,OAAO;QACL,GAAG,OAAO;QACV,cAAc,EAAE;YACd,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACpE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA0B;IAClD,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACxB,GAAG,KAAK,CAAC,WAAW;QACpB,GAAG,KAAK,CAAC,oBAAoB;KAC9B,CAAC,CACH,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CACxD,CACF,CAAC;IACF,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CACpB,MAA0B,EAC1B,cAA2B;IAE3B,MAAM,KAAK,GAAuC,EAAE,CAAC;IACrD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,CACpC,EAAE,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QACjC,IACE,KAAK,CAAC,MAAM,GAAG,kBAAkB;YACjC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,EACpD,CAAC;YACD,KAAK,CAAC,GAAG,EAAE,CAAC;YACZ,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CACnB,KAAuB,EACvB,cAA2B;IAE3B,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAC5B,KAAK,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC;QACrC,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QACnC,KAAK,CAAC,OAAO;QACb,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;KACnC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,MAA0B,EAAE,OAAiB;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,QAAQ;QACX,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,wBAAwB,EAAE,SAAkB,EAAE,CAAC;IAC9E,OAAO;QACL,YAAY,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI;QAC3C,wBAAwB,EAAE,UAAmB;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAA0B,EAC1B,KAAa,EACb,OAAiB;IAEjB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC;IACvD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,gBAAgB,CACvB,MAA0B,EAC1B,KAAa,EACb,OAAiB;IAEjB,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,oBAAoB;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,oBAAoB,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,WAAiE;IAEjE,IAAI,WAAW,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACtD,IAAI,WAAW,CAAC,IAAI,CAAC,wBAAwB,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IACxE,OAAO;QACL;YACE,EAAE,EAAE,oCAAoC;YACxC,YAAY,EAAE,UAAmB;YACjC,IAAI,EAAE;gBACJ,MAAM,EAAE,wBAAwB;gBAChC,KAAK,EAAE,+BAA+B;gBACtC,sBAAsB,EAAE,SAAS;gBACjC,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC3C,aAAa,EAAE,WAAW,CAAC,IAAI,CAAC,cAAc;aAC/C;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,WAAiE;IAEjE,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAC3D,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAC1E,CAAC;IACF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3C,OAAO;QACL;YACE,EAAE,EAAE,kCAAkC;YACtC,YAAY,EAAE,UAAmB;YACjC,IAAI,EAAE;gBACJ,MAAM,EAAE,wBAAwB;gBAChC,KAAK,EAAE,mBAAmB;gBAC1B,gBAAgB,EAAE,WAAW,CAAC,IAAI,CAAC,gBAAgB;gBACnD,cAAc;aACf;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,MAAmB,EACnB,MAA0B,EAC1B,gBAAwB;IAExB,MAAM,QAAQ,GAAG;QACf,IAAI,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3D,OAAO,EAAE,IAAI,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC1C,SAAS,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;KAC1E,CAAC;IACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5C,KAAK;QACL,MAAM,EAAE,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC;KAC/D,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAa,EACb,QAA6E,EAC7E,gBAAwB;IAExB,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,MAAe,CAAC;IACrD,IAAI,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,WAAoB,CAAC;IAC/D,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,SAAkB,CAAC;IAC3D,OAAO,gBAAgB,KAAK,UAAU;QACpC,CAAC,CAAE,MAAgB;QACnB,CAAC,CAAE,SAAmB,CAAC;AAC3B,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAiB,EAAE,UAAkB;IACrE,IAAI,UAAU,KAAK,CAAC;QAAE,OAAO,aAAsB,CAAC;IACpD,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,MAAM,EAAE,EAAE,CACT,CAAC,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACvE;QACC,CAAC,CAAE,SAAmB;QACtB,CAAC,CAAE,UAAoB,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAuB,EACvB,SAAwB,EACxB,SAAkB;IAElB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,EAAE,GAAG,iBAAiB,CACzD,MAAM,EACN,SAAS,CACV,CAAC;IACF,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG;QACtB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;KAClE,CAAC;IACF,MAAM,UAAU,GAAwB;QACtC,CAAC,iBAAiB,EAAE,CAAC,SAAS,CAAC;QAC/B,CAAC,oBAAoB,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,eAAe,CAAC;QAC/D,CAAC,0BAA0B,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAC3D,CAAC,uBAAuB,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;QACrD,CAAC,sBAAsB,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;QACpD,CAAC,oBAAoB,EAAE,UAAU,CAAC,oBAAoB,GAAG,CAAC,CAAC;QAC3D,CAAC,yBAAyB,EAAE,UAAU,CAAC,yBAAyB,GAAG,CAAC,CAAC;QACrE,CAAC,sBAAsB,EAAE,UAAU,CAAC,sBAAsB,GAAG,CAAC,CAAC;QAC/D;YACE,qBAAqB;YACrB,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,CACpE;SACF;QACD,CAAC,wBAAwB,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;QACtD,CAAC,sBAAsB,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;QAClD,CAAC,iBAAiB,EAAE,SAAS,CAAC;KAC/B,CAAC;IACF,MAAM,iBAAiB,GAAG;QACxB,GAAG,SAAS,CAAC,OAAO;QACpB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC;KACzE,CAAC;IACF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,wBAAwB,CAC/C,iBAAiB,EACjB,MAAM,CAAC,MAAM,CACd,CAAC;IACF,OAAO;QACL,EAAE,EAAE,8BAA8B;QAClC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAE,UAAoB,CAAC,CAAC,CAAE,SAAmB;QACrE,IAAI,EAAE;YACJ,MAAM,EAAE,wBAAwB;YAChC,UAAU,EAAE,aAAa;YACzB,KAAK,EAAE,uBAAuB;YAC9B,eAAe,EAAE,QAAQ,CAAC,aAAa,CAAC,eAAe;YACvD,gBAAgB;YAChB,cAAc,EAAE,eAAe,CAC7B,QAAQ,CAAC,aAAa,CAAC,MAAM,EAC7B,MAAM,EACN,gBAAgB,CACjB;YACD,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YACvE,GAAG,eAAe,CAAC,MAAM,EAAE,iBAAiB,CAAC;YAC7C,aAAa;YACb,eAAe;YACf,KAAK;YACL,SAAS;YACT,iBAAiB;YACjB,UAAU;SACX;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { existsSync } from \"node:fs\";\nimport { mkdir, readFile, stat, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { shellQuote as quote } from \"../shell\";\nimport { fileURLToPath } from \"node:url\";\nimport { isRecord, isUnknownArray } from \"../value-guards\";\nimport { skillHookCatalog, type SkillCatalogRoot } from \"./skill-hook-catalog\";\nimport type {\n  HookSkill,\n  SkillBodyRanges,\n  SkillHookConfiguration,\n  SkillHookReceipt,\n} from \"./skill-hook-handler\";\n\nconst MAX_EVENTS_BYTES = 8 * 1024 * 1024;\nconst MAX_RETAINED_CALLS = 128;\nexport interface SkillTracking {\n  configuration: SkillHookConfiguration;\n  hooks: Record<string, unknown>;\n  command: string;\n}\n\n/** Install the runner's silent observer separately from authorized plugin hooks. */\nexport async function prepareSkillTracking(options: {\n  privateRoot: string;\n  host: \"codex\";\n  roots?: SkillCatalogRoot[];\n}): Promise<SkillTracking> {\n  const root = join(options.privateRoot, \"skill-tracking\");\n  const receipts = join(root, \"receipts\");\n  await mkdir(receipts, { recursive: true, mode: 0o700 });\n  const configuration: SkillHookConfiguration = {\n    host: options.host,\n    receipts,\n    ...(await skillHookCatalog(options.roots ?? [])),\n  };\n  const configurationPath = join(root, \"configuration.json\");\n  await writeFile(configurationPath, JSON.stringify(configuration), {\n    flag: \"wx\",\n    mode: 0o600,\n  });\n  const command = [\n    \"/usr/bin/env\",\n    \"-i\",\n    \"PATH=/usr/bin:/bin\",\n    process.execPath,\n    fileURLToPath(\n      new URL(\n        import.meta.filename.endsWith(\".ts\")\n          ? \"./skill-hook-handler.ts\"\n          : \"./skill-hook-handler.js\",\n        import.meta.url,\n      ),\n    ),\n    configurationPath,\n  ]\n    .map(quote)\n    .join(\" \");\n  return { configuration, command, hooks: hookDefinitions(command) };\n}\n\nfunction hookDefinitions(command: string) {\n  return Object.fromEntries(\n    [\"SessionStart\", \"PreToolUse\", \"PostToolUse\", \"Stop\"].map((event) => {\n      return [event, [{ hooks: [{ type: \"command\", command, timeout: 5 }] }]];\n    }),\n  );\n}\n\nfunction isReceipt(\n  value: unknown,\n  skills: HookSkill[],\n): value is SkillHookReceipt {\n  if (!isRecord(value)) return false;\n  return (\n    receiptLabels(value) &&\n    stringList(value.invocations) &&\n    stringList(value.ambiguousInvocations) &&\n    receiptPageFields(value, skills)\n  );\n}\n\nfunction receiptPageFields(\n  value: Record<string, unknown>,\n  skills: HookSkill[],\n) {\n  return (\n    typeof value.partial === \"boolean\" &&\n    validBodyRanges(value.bodyRanges, skills)\n  );\n}\n\nfunction validOffset(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\n\nfunction validRange(value: unknown, length: number): boolean {\n  if (!isOffsetRange(value)) return false;\n  const [start, end] = value;\n  return start < end && end <= length;\n}\n\nfunction isOffsetRange(value: unknown): value is [number, number] {\n  return (\n    isUnknownArray(value) && value.length === 2 && value.every(validOffset)\n  );\n}\n\nfunction validPage(value: unknown, skills: HookSkill[]): boolean {\n  if (!isRecord(value) || !Array.isArray(value.ranges)) return false;\n  const skill = skills.find(\n    (item) =>\n      item.invocation === value.invocation && item.sha256 === value.sha256,\n  );\n  if (!skill) return false;\n  return value.ranges.every((range: unknown) =>\n    validRange(range, skill.body.length),\n  );\n}\n\nfunction validBodyRanges(value: unknown, skills: HookSkill[]): boolean {\n  if (value === undefined) return true;\n  return (\n    Array.isArray(value) &&\n    value.every((page: unknown) => validPage(page, skills))\n  );\n}\n\nfunction stringList(value: unknown): value is string[] {\n  return (\n    Array.isArray(value) &&\n    value.every((item: unknown) => typeof item === \"string\")\n  );\n}\n\nfunction receiptLabels(value: Record<string, unknown>): boolean {\n  if (\n    ![\"SessionStart\", \"PreToolUse\", \"PostToolUse\", \"Stop\"].includes(\n      String(value.event),\n    )\n  )\n    return false;\n  return [value.sessionId, value.turnId, value.toolUseId, value.toolName].every(\n    (field) => field === null || typeof field === \"string\",\n  );\n}\n\nasync function receipts(tracking: SkillTracking) {\n  const root = tracking.configuration.receipts;\n  const result = { events: [] as SkillHookReceipt[], reasons: [] as string[] };\n  if (existsSync(join(root, \"partial\")))\n    result.reasons.push(\"observer_failure\");\n  try {\n    const path = join(root, \"events.jsonl\");\n    if ((await stat(path)).size > MAX_EVENTS_BYTES)\n      return { ...result, reasons: [...result.reasons, \"receipt_limit\"] };\n    parseReceipts(\n      await readFile(path, \"utf8\"),\n      tracking.configuration.skills,\n      result.events,\n    );\n  } catch (error) {\n    result.reasons.push(\n      error instanceof SyntaxError\n        ? \"invalid_receipts\"\n        : \"receipts_unavailable\",\n    );\n  }\n  return result;\n}\n\nfunction parseReceipts(\n  text: string,\n  skills: HookSkill[],\n  events: SkillHookReceipt[],\n) {\n  for (const line of text.trimEnd().split(\"\\n\")) {\n    const event: unknown = JSON.parse(line);\n    if (!isReceipt(event, skills))\n      throw new SyntaxError(\"invalid skill hook receipt\");\n    events.push(event);\n  }\n}\n\nfunction hookKey(event: SkillHookReceipt): string {\n  return JSON.stringify([event.sessionId, event.toolUseId]);\n}\n\nfunction collectionSummary(\n  events: SkillHookReceipt[],\n  sessionId: string | null,\n) {\n  const ledger = {\n    pending: new Set<string>(),\n    finished: new Set<string>(),\n    diagnosticKeys: new Set<string>(),\n    duplicateToolCallCount: 0,\n    unmatchedPostToolUseCount: 0,\n  };\n  for (const event of events) updatePending(event, ledger);\n  return {\n    diagnosticKeys: new Set([...ledger.diagnosticKeys, ...ledger.pending]),\n    eventCount: events.length,\n    preToolUseCount: events.filter((event) => event.event === \"PreToolUse\")\n      .length,\n    postToolUseCount: events.filter((event) => event.event === \"PostToolUse\")\n      .length,\n    pendingToolCallCount: ledger.pending.size,\n    duplicateToolCallCount: ledger.duplicateToolCallCount,\n    unmatchedPostToolUseCount: ledger.unmatchedPostToolUseCount,\n    partialEventCount: events.filter((event) => event.partial).length,\n    ...lifecycleSummary(events, sessionId),\n  };\n}\n\nfunction lifecycleSummary(\n  events: SkillHookReceipt[],\n  sessionId: string | null,\n) {\n  const selected = events.filter((event) => event.sessionId === sessionId);\n  return {\n    sessionIdentified: sessionId !== null,\n    sessionStarted: selected.some((event) => event.event === \"SessionStart\"),\n    sessionStopped: selected.some((event) => event.event === \"Stop\"),\n  };\n}\n\nfunction updatePending(\n  event: SkillHookReceipt,\n  ledger: {\n    pending: Set<string>;\n    finished: Set<string>;\n    diagnosticKeys: Set<string>;\n    duplicateToolCallCount: number;\n    unmatchedPostToolUseCount: number;\n  },\n) {\n  const key = hookKey(event);\n  if (event.event === \"PreToolUse\") {\n    if (duplicateCall(key, ledger)) {\n      ledger.duplicateToolCallCount++;\n      ledger.diagnosticKeys.add(key);\n    }\n    ledger.pending.add(key);\n  }\n  if (event.event === \"PostToolUse\") {\n    if (!ledger.pending.delete(key)) {\n      ledger.unmatchedPostToolUseCount++;\n      ledger.diagnosticKeys.add(key);\n    }\n    ledger.finished.add(key);\n  }\n}\n\nfunction duplicateCall(\n  key: string,\n  ledger: { pending: Set<string>; finished: Set<string> },\n): boolean {\n  return ledger.pending.has(key) || ledger.finished.has(key);\n}\n\nfunction mergedRanges(ranges: [number, number][]): [number, number][] {\n  const merged: [number, number][] = [];\n  for (const [start, end] of ranges.sort((a, b) => a[0] - b[0])) {\n    const previous = merged.at(-1);\n    if (previous && start <= previous[1])\n      previous[1] = Math.max(previous[1], end);\n    else merged.push([start, end]);\n  }\n  return merged;\n}\n\nfunction wholeBody(ranges: [number, number][], skill: HookSkill) {\n  const range = ranges[0];\n  return (\n    ranges.length === 1 &&\n    range !== undefined &&\n    range[0] === 0 &&\n    range[1] === skill.body.length\n  );\n}\n\nfunction completedPage(\n  receipt: SkillHookReceipt,\n  page: SkillBodyRanges,\n  skills: HookSkill[],\n) {\n  const aliases = skills.filter((skill) => skill.sha256 === page.sha256);\n  if (aliases.some((skill) => skill.invocation !== page.invocation)) {\n    receipt.ambiguousInvocations = [\n      ...new Set([\n        ...receipt.ambiguousInvocations,\n        ...aliases.map((skill) => skill.invocation),\n      ]),\n    ];\n    receipt.partial = true;\n  } else\n    receipt.invocations = [\n      ...new Set([...receipt.invocations, page.invocation]),\n    ];\n}\n\nfunction accumulatePage(\n  receipt: SkillHookReceipt,\n  page: SkillBodyRanges,\n  skills: HookSkill[],\n  coverage: Map<string, [number, number][]>,\n) {\n  const skill = skills.find(\n    (item) =>\n      item.invocation === page.invocation && item.sha256 === page.sha256,\n  );\n  if (!skill) {\n    receipt.partial = true;\n    return;\n  }\n  const key = JSON.stringify([\n    receipt.sessionId,\n    receipt.turnId,\n    page.invocation,\n    page.sha256,\n  ]);\n  const ranges = mergedRanges([...(coverage.get(key) ?? []), ...page.ranges]);\n  coverage.set(key, ranges);\n  if (wholeBody(ranges, skill)) completedPage(receipt, page, skills);\n}\n\nfunction pagedEvents(events: SkillHookReceipt[], skills: HookSkill[]) {\n  const coverage = new Map<string, [number, number][]>();\n  const settled = new Set<string>();\n  return events.map((event) => {\n    const receipt = { ...event };\n    for (const page of event.bodyRanges ?? []) {\n      if (!settled.has(page.invocation))\n        accumulatePage(receipt, page, skills, coverage);\n    }\n    for (const invocation of receipt.invocations) settled.add(invocation);\n    return receipt;\n  });\n}\n\nfunction publicReceipt(event: SkillHookReceipt) {\n  const receipt = { ...event };\n  delete receipt.bodyRanges;\n  return {\n    ...receipt,\n    fragmentSkills: [\n      ...new Set((event.bodyRanges ?? []).map((page) => page.invocation)),\n    ],\n  };\n}\n\nfunction incompleteSkills(events: SkillHookReceipt[]) {\n  const settled = new Set(\n    events.flatMap((event) => [\n      ...event.invocations,\n      ...event.ambiguousInvocations,\n    ]),\n  );\n  const fragments = new Set(\n    events.flatMap((event) =>\n      (event.bodyRanges ?? []).map((page) => page.invocation),\n    ),\n  );\n  return [...fragments].filter((invocation) => !settled.has(invocation));\n}\n\nfunction retainedCalls(\n  events: SkillHookReceipt[],\n  diagnosticKeys: Set<string>,\n) {\n  const calls: ReturnType<typeof publicReceipt>[] = [];\n  let truncated = false;\n  for (const event of events.filter((event) =>\n    relevantCall(event, diagnosticKeys),\n  )) {\n    calls.push(publicReceipt(event));\n    if (\n      calls.length > MAX_RETAINED_CALLS ||\n      Buffer.byteLength(JSON.stringify(calls)) > 24 * 1024\n    ) {\n      calls.pop();\n      truncated = true;\n      break;\n    }\n  }\n  return { calls, truncated };\n}\n\nfunction relevantCall(\n  event: SkillHookReceipt,\n  diagnosticKeys: Set<string>,\n): boolean {\n  return [\n    event.invocations.length > 0,\n    event.ambiguousInvocations.length > 0,\n    (event.bodyRanges ?? []).length > 0,\n    event.partial,\n    diagnosticKeys.has(hookKey(event)),\n  ].some(Boolean);\n}\n\nfunction primaryEvidence(events: SkillHookReceipt[], reasons: string[]) {\n  const index = events.findIndex((event) => event.invocations.length > 0);\n  const first = events[index];\n  const complete = primarySelectionComplete(events, index, reasons);\n  if (!complete)\n    return { primarySkill: null, primarySkillCompleteness: \"partial\" as const };\n  return {\n    primarySkill: first?.invocations[0] ?? null,\n    primarySkillCompleteness: \"complete\" as const,\n  };\n}\n\nfunction primarySelectionComplete(\n  events: SkillHookReceipt[],\n  index: number,\n  reasons: string[],\n) {\n  const matches = events[index]?.invocations.length ?? 0;\n  if (matches > 1) return false;\n  if (reasons.length === 0) return true;\n  return primaryBeforeGap(events, index, reasons);\n}\n\nfunction primaryBeforeGap(\n  events: SkillHookReceipt[],\n  index: number,\n  reasons: string[],\n) {\n  if (reasons.join(\",\") !== \"pending_tool_calls\") return false;\n  if (events[index]?.invocations.length !== 1) return false;\n  const prefix = collectionSummary(events.slice(0, index + 1), null);\n  return prefix.pendingToolCallCount === 0;\n}\n\nexport function skillActivationClaims(\n  observation: Awaited<ReturnType<typeof skillTrackingObservation>>,\n) {\n  if (observation.completeness !== \"partial\") return [];\n  if (observation.data.primarySkillCompleteness !== \"complete\") return [];\n  return [\n    {\n      id: \"sevro.host.skill-activation-claims\",\n      completeness: \"complete\" as const,\n      data: {\n        method: \"tool_result_body_match\",\n        scope: \"primary_and_positive_presence\",\n        collectionCompleteness: \"partial\",\n        primarySkill: observation.data.primarySkill,\n        presentSkills: observation.data.observedSkills,\n      },\n    },\n  ];\n}\n\nexport function skillExposureClaims(\n  observation: Awaited<ReturnType<typeof skillTrackingObservation>>,\n) {\n  const skillExposures = observation.data.skillExposures.filter(\n    (exposure) => exposure.status === \"full\" || exposure.status === \"partial\",\n  );\n  if (skillExposures.length === 0) return [];\n  return [\n    {\n      id: \"sevro.host.skill-exposure-claims\",\n      completeness: \"complete\" as const,\n      data: {\n        method: \"tool_result_body_match\",\n        scope: \"positive_exposure\",\n        collectionStatus: observation.data.collectionStatus,\n        skillExposures,\n      },\n    },\n  ];\n}\n\nfunction exposureSummary(\n  skills: HookSkill[],\n  events: SkillHookReceipt[],\n  collectionStatus: string,\n) {\n  const exposure = {\n    full: new Set(events.flatMap((event) => event.invocations)),\n    partial: new Set(incompleteSkills(events)),\n    ambiguous: new Set(events.flatMap((event) => event.ambiguousInvocations)),\n  };\n  return skills.map(({ invocation: skill }) => ({\n    skill,\n    status: skillExposureStatus(skill, exposure, collectionStatus),\n  }));\n}\n\nfunction skillExposureStatus(\n  skill: string,\n  exposure: { full: Set<string>; partial: Set<string>; ambiguous: Set<string> },\n  collectionStatus: string,\n) {\n  if (exposure.full.has(skill)) return \"full\" as const;\n  if (exposure.ambiguous.has(skill)) return \"ambiguous\" as const;\n  if (exposure.partial.has(skill)) return \"partial\" as const;\n  return collectionStatus === \"complete\"\n    ? (\"none\" as const)\n    : (\"unknown\" as const);\n}\n\nfunction exposureCollectionStatus(reasons: string[], eventCount: number) {\n  if (eventCount === 0) return \"unavailable\" as const;\n  return reasons.some(\n    (reason) =>\n      ![\"partial_skill_bodies\", \"ambiguous_skill_bodies\"].includes(reason),\n  )\n    ? (\"partial\" as const)\n    : (\"complete\" as const);\n}\n\nexport async function skillTrackingObservation(\n  tracking: SkillTracking,\n  sessionId: string | null,\n  completed: boolean,\n) {\n  const collected = await receipts(tracking);\n  const events = pagedEvents(collected.events, tracking.configuration.skills);\n  const partialSkills = incompleteSkills(events);\n  const { diagnosticKeys, ...collection } = collectionSummary(\n    events,\n    sessionId,\n  );\n  const { calls, truncated } = retainedCalls(events, diagnosticKeys);\n  const ambiguousSkills = [\n    ...new Set(events.flatMap((event) => event.ambiguousInvocations)),\n  ];\n  const conditions: [string, boolean][] = [\n    [\"host_incomplete\", !completed],\n    [\"catalog_incomplete\", !tracking.configuration.catalogComplete],\n    [\"session_identity_missing\", !collection.sessionIdentified],\n    [\"session_start_missing\", !collection.sessionStarted],\n    [\"session_stop_missing\", !collection.sessionStopped],\n    [\"pending_tool_calls\", collection.pendingToolCallCount > 0],\n    [\"unmatched_post_tool_use\", collection.unmatchedPostToolUseCount > 0],\n    [\"duplicate_tool_calls\", collection.duplicateToolCallCount > 0],\n    [\n      \"partial_hook_events\",\n      events.some(\n        (event) => event.partial && event.ambiguousInvocations.length === 0,\n      ),\n    ],\n    [\"ambiguous_skill_bodies\", ambiguousSkills.length > 0],\n    [\"partial_skill_bodies\", partialSkills.length > 0],\n    [\"calls_truncated\", truncated],\n  ];\n  const incompleteReasons = [\n    ...collected.reasons,\n    ...conditions.filter(([, applies]) => applies).map(([reason]) => reason),\n  ];\n  const complete = incompleteReasons.length === 0;\n  const collectionStatus = exposureCollectionStatus(\n    incompleteReasons,\n    events.length,\n  );\n  return {\n    id: \"sevro.host.skill-activations\",\n    completeness: complete ? (\"complete\" as const) : (\"partial\" as const),\n    data: {\n      method: \"tool_result_body_match\",\n      visibility: \"tool_result\",\n      scope: \"prepared_skill_bodies\",\n      catalogComplete: tracking.configuration.catalogComplete,\n      collectionStatus,\n      skillExposures: exposureSummary(\n        tracking.configuration.skills,\n        events,\n        collectionStatus,\n      ),\n      observedSkills: [...new Set(calls.flatMap((call) => call.invocations))],\n      ...primaryEvidence(events, incompleteReasons),\n      partialSkills,\n      ambiguousSkills,\n      calls,\n      truncated,\n      incompleteReasons,\n      collection,\n    },\n  };\n}\n"]}

package/dist/src/hosts/workspace-fingerprint.js

@@ -0,0 +1,72 @@
+import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { lstat, readdir, readlink } from "node:fs/promises";
+import { join, relative, sep } from "node:path";
+const MAX_ENTRIES = 10_000;
+const MAX_FILE_BYTES = 128 * 1024 * 1024;
+class WorkspaceFingerprint {
+    root;
+    identity = createHash("sha256");
+    entries = 0;
+    fileBytes = 0;
+    constructor(root) {
+        this.root = root;
+    }
+    async digest() {
+        for (const entry of (await readdir(this.root)).sort()) {
+            if (entry === ".git")
+                continue;
+            await this.visit(join(this.root, entry));
+        }
+        return this.identity.digest("hex");
+    }
+    async visit(path) {
+        this.entries++;
+        if (this.entries > MAX_ENTRIES)
+            throw new Error("workspace entry limit");
+        const name = relative(this.root, path).split(sep).join("/");
+        const info = await lstat(path);
+        if (info.isDirectory())
+            await this.directory(path, name);
+        else if (info.isSymbolicLink())
+            this.identity.update(`link\0${name}\0${await readlink(path)}\0`);
+        else
+            await this.file(path, name, info);
+    }
+    async directory(path, name) {
+        this.identity.update(`dir\0${name}\0`);
+        for (const child of (await readdir(path)).sort())
+            await this.visit(join(path, child));
+    }
+    async file(path, name, info) {
+        if (!info.isFile() || !Number.isSafeInteger(info.size))
+            throw new Error("unsupported workspace entry");
+        if (this.fileBytes + info.size > MAX_FILE_BYTES)
+            throw new Error("workspace byte limit");
+        const digest = await this.fileHash(path);
+        this.identity.update(`file\0${name}\0${info.mode & 0o111 ? "x" : "-"}\0${digest}\0`);
+    }
+    async fileHash(path) {
+        const content = createHash("sha256");
+        for await (const value of createReadStream(path)) {
+            const chunk = value;
+            if (!Buffer.isBuffer(chunk))
+                throw new Error("unsupported workspace entry");
+            this.fileBytes += chunk.byteLength;
+            if (this.fileBytes > MAX_FILE_BYTES)
+                throw new Error("workspace byte limit");
+            content.update(chunk);
+        }
+        return content.digest("hex");
+    }
+}
+/** Hash visible worktree contents without retaining paths or file data. */
+export async function workspaceFingerprint(root) {
+    try {
+        return await new WorkspaceFingerprint(root).digest();
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=workspace-fingerprint.js.map

package/dist/src/hosts/workspace-fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-fingerprint.js","sourceRoot":"","sources":["workspace-fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,oBAAoB;AACzC,OAAO,EAAE,gBAAgB,EAAc,gBAAgB;AACvD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB;AAC5D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,kBAAkB;AAEhD,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,MAAM,oBAAoB;IAIK;IAHZ,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC,CAAC;IACZ,SAAS,GAAG,CAAC,CAAC;IACtB,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,KAAK,CAAC,MAAM;QACV,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACtD,IAAI,KAAK,KAAK,MAAM;gBAAE,SAAS;YAC/B,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,IAAY;QAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,IAAI,CAAC,OAAO,GAAG,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;aACpD,IAAI,IAAI,CAAC,cAAc,EAAE;YAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,KAAK,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YAC9D,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAAY;QAChD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;YAC9C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,IAAY,EAAE,IAAW;QACxD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,GAAG,cAAc;YAC7C,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAClB,SAAS,IAAI,KAAK,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,IAAI,CAC/D,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,IAAY;QACjC,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,KAAK,GAAY,KAAK,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC;YACnC,IAAI,IAAI,CAAC,SAAS,GAAG,cAAc;gBACjC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY;IAEZ,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { createReadStream, type Stats } from \"node:fs\";\nimport { lstat, readdir, readlink } from \"node:fs/promises\";\nimport { join, relative, sep } from \"node:path\";\n\nconst MAX_ENTRIES = 10_000;\nconst MAX_FILE_BYTES = 128 * 1024 * 1024;\n\nclass WorkspaceFingerprint {\n  private readonly identity = createHash(\"sha256\");\n  private entries = 0;\n  private fileBytes = 0;\n  constructor(private readonly root: string) {}\n\n  async digest(): Promise<string> {\n    for (const entry of (await readdir(this.root)).sort()) {\n      if (entry === \".git\") continue;\n      await this.visit(join(this.root, entry));\n    }\n    return this.identity.digest(\"hex\");\n  }\n\n  private async visit(path: string): Promise<void> {\n    this.entries++;\n    if (this.entries > MAX_ENTRIES) throw new Error(\"workspace entry limit\");\n    const name = relative(this.root, path).split(sep).join(\"/\");\n    const info = await lstat(path);\n    if (info.isDirectory()) await this.directory(path, name);\n    else if (info.isSymbolicLink())\n      this.identity.update(`link\\0${name}\\0${await readlink(path)}\\0`);\n    else await this.file(path, name, info);\n  }\n\n  private async directory(path: string, name: string): Promise<void> {\n    this.identity.update(`dir\\0${name}\\0`);\n    for (const child of (await readdir(path)).sort())\n      await this.visit(join(path, child));\n  }\n\n  private async file(path: string, name: string, info: Stats): Promise<void> {\n    if (!info.isFile() || !Number.isSafeInteger(info.size))\n      throw new Error(\"unsupported workspace entry\");\n    if (this.fileBytes + info.size > MAX_FILE_BYTES)\n      throw new Error(\"workspace byte limit\");\n    const digest = await this.fileHash(path);\n    this.identity.update(\n      `file\\0${name}\\0${info.mode & 0o111 ? \"x\" : \"-\"}\\0${digest}\\0`,\n    );\n  }\n\n  private async fileHash(path: string): Promise<string> {\n    const content = createHash(\"sha256\");\n    for await (const value of createReadStream(path)) {\n      const chunk: unknown = value;\n      if (!Buffer.isBuffer(chunk))\n        throw new Error(\"unsupported workspace entry\");\n      this.fileBytes += chunk.byteLength;\n      if (this.fileBytes > MAX_FILE_BYTES)\n        throw new Error(\"workspace byte limit\");\n      content.update(chunk);\n    }\n    return content.digest(\"hex\");\n  }\n}\n\n/** Hash visible worktree contents without retaining paths or file data. */\nexport async function workspaceFingerprint(\n  root: string,\n): Promise<string | null> {\n  try {\n    return await new WorkspaceFingerprint(root).digest();\n  } catch {\n    return null;\n  }\n}\n"]}