@coderifts/agent-guard 8.4.0 → 9.0.0

package/dist/esm/auto-derive.js

@@ -0,0 +1,265 @@
+/**
+ * S1 auto-derive — wrap-layer before/after pair from the tool call + current-state readers.
+ *
+ * Default OFF. Frozen guardToolCall is unchanged. Host args.artifacts always win.
+ * BEFORE comes from a reader of the SAME target (fs path / api / db / registry).
+ * AFTER is the call's intended write content. Missing target → before:null
+ * (derivation_note before_unavailable); empty file → before:"".
+ *
+ * Reader throw/timeout → today's fragment path (binder lift); never block on derivation.
+ * Observation-only: derivation is not a fingerprint preimage field.
+ */
+import { promises as fsp } from 'node:fs';
+import { classifyByName } from './artifact-resolver.js';
+export const AUTO_DERIVE_SOURCE = 'guard_auto_derived';
+export const AUTO_DERIVE_READ_TIMEOUT_MS = 2000;
+function iso() {
+    return new Date().toISOString();
+}
+function emit(config, e) {
+    if (config.onEvent) {
+        try {
+            config.onEvent(e);
+        }
+        catch { /* onEvent never throws out */ }
+    }
+}
+/** Default fs reader: utf8 contents, ENOENT → null (absent ≠ empty). Other errors throw. */
+export async function defaultFsReader(filePath) {
+    try {
+        return await fsp.readFile(filePath, 'utf8');
+    }
+    catch (err) {
+        const code = err && typeof err === 'object' && 'code' in err
+            ? String(err.code)
+            : '';
+        if (code === 'ENOENT')
+            return null;
+        throw err;
+    }
+}
+function looksLikeResolveConfig(o) {
+    return 'ssotPrefer' in o
+        || 'generatedGlobs' in o
+        || 'pathTypeHints' in o
+        || 'openApiAssembly' in o
+        || 'maxRefDepth' in o;
+}
+function looksLikeReaders(o) {
+    const r = o;
+    return typeof r.fs === 'function'
+        || typeof r.api === 'function'
+        || typeof r.db === 'function'
+        || typeof r.registry === 'function';
+}
+export function normalizeAutoDerive(raw) {
+    if (raw === true)
+        return { readers: { fs: defaultFsReader } };
+    if (!raw || raw === false || typeof raw !== 'object')
+        return null;
+    const o = raw;
+    const cfg = {};
+    if (o.resolveConfig && typeof o.resolveConfig === 'object')
+        cfg.resolveConfig = o.resolveConfig;
+    if (o.readers && typeof o.readers === 'object') {
+        if (looksLikeReaders(o.readers)) {
+            cfg.readers = { ...o.readers };
+        }
+        else if (looksLikeResolveConfig(o.readers)) {
+            cfg.resolveConfig = o.readers;
+        }
+    }
+    if (!cfg.readers)
+        cfg.readers = {};
+    if (typeof cfg.readers.fs !== 'function')
+        cfg.readers.fs = defaultFsReader;
+    return cfg;
+}
+function rawRecord(args) {
+    if (!args || typeof args !== 'object' || Array.isArray(args))
+        return null;
+    return args;
+}
+function hostSuppliedArtifacts(args) {
+    const a = rawRecord(args);
+    return !!(a && Array.isArray(a.artifacts));
+}
+function targetFromArgs(a) {
+    if (typeof a.path === 'string' && a.path.length > 0)
+        return { kind: 'fs', key: a.path };
+    if (typeof a.url === 'string' && a.url.length > 0)
+        return { kind: 'api', key: a.url };
+    if (typeof a.endpoint === 'string' && a.endpoint.length > 0)
+        return { kind: 'api', key: a.endpoint };
+    if (typeof a.table === 'string' && a.table.length > 0) {
+        const id = a.id != null ? String(a.id) : '';
+        return { kind: 'db', key: id ? `${a.table}/${id}` : a.table };
+    }
+    if (typeof a.key === 'string' && a.key.length > 0)
+        return { kind: 'registry', key: a.key };
+    return null;
+}
+function intendedAfter(a, before) {
+    for (const k of ['contents', 'content', 'new_content', 'new_contents']) {
+        if (typeof a[k] === 'string')
+            return a[k];
+    }
+    const oldS = typeof a.old_string === 'string' ? a.old_string : null;
+    const newS = typeof a.new_string === 'string' ? a.new_string : null;
+    if (newS == null)
+        return null;
+    if (typeof before === 'string' && oldS && oldS.length > 0 && before.includes(oldS)) {
+        return before.replace(oldS, newS);
+    }
+    if (newS.length > 0)
+        return newS;
+    return null;
+}
+function typeForTarget(target, a, resolveConfig) {
+    if (typeof a.type === 'string' && a.type) {
+        const t = a.type;
+        if (t === 'openapi' || t === 'graphql' || t === 'grpc' || t === 'asyncapi' || t === 'mcp_manifest') {
+            return t;
+        }
+    }
+    if (target.kind === 'fs') {
+        const hinted = resolveConfig && resolveConfig.pathTypeHints
+            ? resolveConfig.pathTypeHints[target.key]
+            : undefined;
+        if (hinted)
+            return hinted;
+        return classifyByName(target.key);
+    }
+    return null;
+}
+async function withTimeout(p, ms) {
+    let timer;
+    try {
+        return await Promise.race([
+            p,
+            new Promise((_, reject) => {
+                timer = setTimeout(() => {
+                    const e = new Error(`autoDerive reader timed out after ${ms}ms`);
+                    e.name = 'TimeoutError';
+                    reject(e);
+                }, Math.max(1, ms));
+            }),
+        ]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+async function readCurrent(readers, target) {
+    const fn = readers[target.kind];
+    if (typeof fn !== 'function') {
+        const err = new Error(`autoDerive: no ${target.kind} reader`);
+        err.code = 'NO_READER';
+        throw err;
+    }
+    return withTimeout(Promise.resolve(fn(target.key)), AUTO_DERIVE_READ_TIMEOUT_MS);
+}
+/**
+ * Derive a before/after pair onto the call descriptor when the host did not supply artifacts.
+ * Never throws out — reader failures return the bound call with fragment_only + failed.cause.
+ */
+export async function runAutoDerive(args) {
+    const bound = args.bound;
+    if (hostSuppliedArtifacts(args.rawArgs)) {
+        return {
+            call: bound,
+            derivation: { mode: 'host_supplied', targets: [] },
+        };
+    }
+    const a = rawRecord(args.rawArgs) || rawRecord(bound.arguments);
+    if (!a) {
+        return { call: bound, derivation: { mode: 'fragment_only', targets: [] } };
+    }
+    const target = targetFromArgs(a);
+    if (!target) {
+        return { call: bound, derivation: { mode: 'fragment_only', targets: [] } };
+    }
+    const type = typeForTarget(target, a, args.cfg.resolveConfig);
+    if (!type) {
+        return {
+            call: bound,
+            derivation: {
+                mode: 'fragment_only',
+                targets: [target],
+                notes: [{ target: target.key, note: 'not_contract_path' }],
+            },
+        };
+    }
+    const readers = args.cfg.readers || { fs: defaultFsReader };
+    let before;
+    try {
+        before = await readCurrent(readers, target);
+    }
+    catch (err) {
+        const name = err && typeof err === 'object' && 'name' in err
+            ? String(err.name)
+            : '';
+        const cause = name === 'TimeoutError' ? 'reader_timeout' : 'reader_threw';
+        emit(args.config, { type: 'derive_failed', at: iso(), cause });
+        return {
+            call: bound,
+            derivation: {
+                mode: 'fragment_only',
+                targets: [target],
+                notes: [{
+                        target: target.key,
+                        note: cause === 'reader_timeout' ? 'reader_timeout' : 'reader_threw',
+                    }],
+            },
+            failed: { cause },
+        };
+    }
+    const after = intendedAfter(a, before);
+    if (after == null) {
+        return {
+            call: bound,
+            derivation: { mode: 'fragment_only', targets: [target] },
+        };
+    }
+    const notes = [];
+    if (before === null) {
+        notes.push({ target: target.key, note: 'before_unavailable' });
+        // Absence must not erase a binder-lifted fragment pair (old_string/new_string).
+        if (Array.isArray(bound.artifacts) && bound.artifacts.length > 0) {
+            return {
+                call: bound,
+                derivation: {
+                    mode: 'fragment_only',
+                    targets: [target],
+                    notes,
+                },
+            };
+        }
+    }
+    const derived = {
+        id: `${type}:${target.key}`,
+        type,
+        before,
+        after,
+        source: AUTO_DERIVE_SOURCE,
+    };
+    const call = {
+        ...bound,
+        artifacts: [derived],
+    };
+    return {
+        call,
+        derivation: {
+            mode: 'auto_derived',
+            targets: [target],
+            ...(notes.length ? { notes } : {}),
+        },
+    };
+}
+export function attachDerivation(outcome, derivation) {
+    if (!derivation)
+        return outcome;
+    return { ...outcome, derivation };
+}
+//# sourceMappingURL=auto-derive.js.map

package/dist/esm/auto-derive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-derive.js","sourceRoot":"","sources":["../../src/auto-derive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAIxD,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAA6B,CAAC;AAChE,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC;AAkDhD,SAAS,GAAG;IACV,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,IAAI,CAAC,MAAmB,EAAE,CAAa;IAC9C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB;IACpD,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG;YAC1D,CAAC,CAAC,MAAM,CAAE,GAAyB,CAAC,IAAI,CAAC;YACzC,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,CAAS;IACvC,OAAO,YAAY,IAAI,CAAC;WACnB,gBAAgB,IAAI,CAAC;WACrB,eAAe,IAAI,CAAC;WACpB,iBAAiB,IAAI,CAAC;WACtB,aAAa,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IACjC,MAAM,CAAC,GAAG,CAAsB,CAAC;IACjC,OAAO,OAAO,CAAC,CAAC,EAAE,KAAK,UAAU;WAC5B,OAAO,CAAC,CAAC,GAAG,KAAK,UAAU;WAC3B,OAAO,CAAC,CAAC,EAAE,KAAK,UAAU;WAC1B,OAAO,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC;IAC9D,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,KAAK,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClE,MAAM,CAAC,GAAG,GAA+C,CAAC;IAC1D,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,IAAI,CAAC,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;QAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;IAChG,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC/C,IAAI,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;QACjC,CAAC;aAAM,IAAI,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,OAAwB,CAAC;QACjD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC;IACnC,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,UAAU;QAAE,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,eAAe,CAAC;IAC3E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,IAAa;IAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAa;IAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,cAAc,CAAC,CAA0B;IAChD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxF,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IACtF,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrG,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAC3F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,CAA0B,EAAE,MAAqB;IACtE,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,CAAU,EAAE,CAAC;QAChF,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,CAAC,CAAW,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnF,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CACpB,MAAwB,EACxB,CAA0B,EAC1B,aAA6B;IAE7B,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAoB,CAAC;QACjC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,cAAc,EAAE,CAAC;YACnG,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,aAAa,IAAI,aAAa,CAAC,aAAa;YACzD,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;YACzC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,OAAO,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,CAAa,EAAE,EAAU;IACrD,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,CAAC;YACD,IAAI,OAAO,CAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC3B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,qCAAqC,EAAE,IAAI,CAAC,CAAC;oBAChE,CAAsB,CAAC,IAAI,GAAG,cAAc,CAAC;oBAC9C,MAAM,CAAC,CAAC,CAAC,CAAC;gBACZ,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACtB,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAA0B,EAC1B,MAAwB;IAExB,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,kBAAkB,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;QAC7D,GAAyB,CAAC,IAAI,GAAG,WAAW,CAAC;QAC9C,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC;AACnF,CAAC;AAQD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAKnC;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,KAAK;YACX,UAAU,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE;SACnD,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,IAAI,EAAE,KAAK;YACX,UAAU,EAAE;gBACV,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,CAAC,MAAM,CAAC;gBACjB,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;aAC3D;SACF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC;IAC5D,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG;YAC1D,CAAC,CAAC,MAAM,CAAE,GAAyB,CAAC,IAAI,CAAC;YACzC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,KAAK,GAAG,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC;QAC1E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO;YACL,IAAI,EAAE,KAAK;YACX,UAAU,EAAE;gBACV,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,CAAC,MAAM,CAAC;gBACjB,KAAK,EAAE,CAAC;wBACN,MAAM,EAAE,MAAM,CAAC,GAAG;wBAClB,IAAI,EAAE,KAAK,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc;qBACrE,CAAC;aACH;YACD,MAAM,EAAE,EAAE,KAAK,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,OAAO;YACL,IAAI,EAAE,KAAK;YACX,UAAU,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;SACzD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC/D,gFAAgF;QAChF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjE,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,UAAU,EAAE;oBACV,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,CAAC,MAAM,CAAC;oBACjB,KAAK;iBACN;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAoB;QAC/B,EAAE,EAAE,GAAG,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE;QAC3B,IAAI;QACJ,MAAM;QACN,KAAK;QACL,MAAM,EAAE,kBAAkB;KAC3B,CAAC;IAEF,MAAM,IAAI,GAAuB;QAC/B,GAAG,KAAK;QACR,SAAS,EAAE,CAAC,OAA8B,CAAC;KAC5C,CAAC;IACF,OAAO;QACL,IAAI;QACJ,UAAU,EAAE;YACV,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,CAAC,MAAM,CAAC;YACjB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAAU,EACV,UAA+E;IAE/E,IAAI,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC;IAChC,OAAO,EAAE,GAAI,OAAkB,EAAE,UAAU,EAAO,CAAC;AACrD,CAAC"}

package/dist/esm/auto-recheck.d.ts

@@ -0,0 +1,76 @@
+/**
+ * S6 auto-recheck loop — host-side orchestration AFTER a BLOCK with a remediation_transaction.
+ *
+ * Default OFF. The frozen guardToolCall is unchanged; this wraps it. The guard never writes
+ * artifacts: the host's applyFix applies the fix (honesty line). After applyFix true, artifacts
+ * are re-resolved FRESH (resolve() from artifact-resolver when resolveInput is supplied, else
+ * the host-updated call / rebind).
+ *
+ * recheck_scope is an OUTPUT on the BLOCK envelope (app remediation-transaction.js). The
+ * preflight request does not accept a scope hint (measured SDK / authorizeChangeSet) — so
+ * each attempt is a FULL re-preflight. Noted, not faked.
+ *
+ * Nothing here enters a fingerprint preimage (host orchestration only).
+ */
+import type { GuardConfig, GuardOutcome, ToolCallDescriptor, ExecuteFactory, GuardToolCallContext } from './types.js';
+import type { RemediationTransactionView } from './remediation-loop-attestation.js';
+import type { ResolveInput, ResolveConfig } from './artifact-resolver.js';
+/** Hard cap on RE-preflights per original call. */
+export declare const AUTO_RECHECK_MAX_CAP = 3;
+export type RecheckTrailEntry = {
+    attempt: number;
+    decision_id: string | null;
+    fingerprint: string | null;
+    execution_action: string | null;
+};
+export type RecheckStopReason = 'no_progress' | 'apply_fix_declined' | 'apply_fix_threw' | 'exhausted';
+export type RecheckObservation = {
+    recheck_trail?: ReadonlyArray<RecheckTrailEntry>;
+    /** 849 metric feed. Present only when the loop ran. value true iff a recheck landed allow-class. */
+    fixed_after_block?: {
+        value: true | null;
+        attempt_count: number | null;
+    };
+    recheck_stop_reason?: RecheckStopReason;
+};
+export type AutoRecheckApplyFixContext = {
+    call: ToolCallDescriptor;
+    attempt: number;
+    outcome: GuardOutcome<unknown>;
+};
+export type AutoRecheckConfig = {
+    /**
+     * Bound on RE-preflights per original call. Allowed 1–3; values above 3 clamp to 3.
+     * Values below 1 disable the loop.
+     */
+    maxAttempts: number;
+    /**
+     * HOST applies the fix. The guard never writes artifacts.
+     * false / throw → loop ends, original BLOCK stands.
+     */
+    applyFix: (remediation: RemediationTransactionView, context: AutoRecheckApplyFixContext) => boolean | Promise<boolean>;
+    /**
+     * Optional. After applyFix true, produce a fresh git snapshot for resolve() (CAP-202).
+     * When absent, the loop re-runs `rebind` / uses artifacts the host attached on context.call.
+     */
+    resolveInput?: () => ResolveInput | Promise<ResolveInput>;
+    resolveConfig?: ResolveConfig;
+};
+export declare function clampMaxAttempts(n: unknown): number;
+export declare function normalizeAutoRecheck(raw: unknown): AutoRecheckConfig | null;
+export type AutoRecheckLoopArgs<T> = {
+    call: ToolCallDescriptor;
+    factory: ExecuteFactory<T>;
+    config: GuardConfig;
+    callContext?: GuardToolCallContext;
+    rebind: () => ToolCallDescriptor | Promise<ToolCallDescriptor>;
+    /** Re-collect freshness VALUES from the FRESH call (full re-preflight). */
+    refreshContext?: (call: ToolCallDescriptor) => Promise<GuardToolCallContext | undefined>;
+};
+/**
+ * First call is always a normal guardToolCall. The loop runs only when autoRecheck is
+ * normalized (applyFix present, maxAttempts in 1–3) AND the outcome is BLOCK with a
+ * remediation_transaction.
+ */
+export declare function runAutoRecheckLoop<T>(args: AutoRecheckLoopArgs<T>): Promise<GuardOutcome<T>>;
+//# sourceMappingURL=auto-recheck.d.ts.map

package/dist/esm/auto-recheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-recheck.d.ts","sourceRoot":"","sources":["../../src/auto-recheck.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EACV,WAAW,EACX,YAAY,EAEZ,kBAAkB,EAClB,cAAc,EAEd,oBAAoB,EAGrB,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAEpF,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE1E,mDAAmD;AACnD,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GACzB,aAAa,GACb,oBAAoB,GACpB,iBAAiB,GACjB,WAAW,CAAC;AAEhB,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,CAAC,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IACjD,oGAAoG;IACpG,iBAAiB,CAAC,EAAE;QAAE,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC;QAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACzE,mBAAmB,CAAC,EAAE,iBAAiB,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,QAAQ,EAAE,CACR,WAAW,EAAE,0BAA0B,EACvC,OAAO,EAAE,0BAA0B,KAChC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1D,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B,CAAC;AAYF,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAMnD;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,iBAAiB,GAAG,IAAI,CAU3E;AAuHD,MAAM,MAAM,mBAAmB,CAAC,CAAC,IAAI;IACnC,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,MAAM,EAAE,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/D,2EAA2E;IAC3E,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;CAC1F,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CA4ElG"}

package/dist/esm/auto-recheck.js

@@ -0,0 +1,234 @@
+/**
+ * S6 auto-recheck loop — host-side orchestration AFTER a BLOCK with a remediation_transaction.
+ *
+ * Default OFF. The frozen guardToolCall is unchanged; this wraps it. The guard never writes
+ * artifacts: the host's applyFix applies the fix (honesty line). After applyFix true, artifacts
+ * are re-resolved FRESH (resolve() from artifact-resolver when resolveInput is supplied, else
+ * the host-updated call / rebind).
+ *
+ * recheck_scope is an OUTPUT on the BLOCK envelope (app remediation-transaction.js). The
+ * preflight request does not accept a scope hint (measured SDK / authorizeChangeSet) — so
+ * each attempt is a FULL re-preflight. Noted, not faked.
+ *
+ * Nothing here enters a fingerprint preimage (host orchestration only).
+ */
+import { guardToolCall } from './guard.js';
+import { readRemediationTransaction } from './remediation-loop-attestation.js';
+import { resolve as resolveArtifacts } from './artifact-resolver.js';
+/** Hard cap on RE-preflights per original call. */
+export const AUTO_RECHECK_MAX_CAP = 3;
+function iso() {
+    return new Date().toISOString();
+}
+function emit(config, e) {
+    if (config.onEvent) {
+        try {
+            config.onEvent(e);
+        }
+        catch { /* onEvent never throws out */ }
+    }
+}
+export function clampMaxAttempts(n) {
+    const v = typeof n === 'number' ? n : Number(n);
+    if (!Number.isFinite(v))
+        return 0;
+    const i = Math.floor(v);
+    if (i < 1)
+        return 0;
+    return i > AUTO_RECHECK_MAX_CAP ? AUTO_RECHECK_MAX_CAP : i;
+}
+export function normalizeAutoRecheck(raw) {
+    if (!raw || typeof raw !== 'object')
+        return null;
+    const o = raw;
+    if (typeof o.applyFix !== 'function')
+        return null;
+    const maxAttempts = clampMaxAttempts(o.maxAttempts);
+    if (maxAttempts < 1)
+        return null;
+    const cfg = { maxAttempts, applyFix: o.applyFix };
+    if (typeof o.resolveInput === 'function')
+        cfg.resolveInput = o.resolveInput;
+    if (o.resolveConfig && typeof o.resolveConfig === 'object')
+        cfg.resolveConfig = o.resolveConfig;
+    return cfg;
+}
+function envelopeOf(outcome) {
+    const v = outcome.verdict;
+    if (v && 'envelope' in v && v.envelope && typeof v.envelope === 'object') {
+        return v.envelope;
+    }
+    return null;
+}
+function fingerprintOf(outcome) {
+    const env = envelopeOf(outcome);
+    if (env && typeof env.fingerprint === 'string' && env.fingerprint)
+        return env.fingerprint;
+    const fp = outcome.proof && outcome.proof.binds_to && outcome.proof.binds_to.change_fp;
+    return typeof fp === 'string' && fp ? fp : null;
+}
+function decisionIdOf(outcome) {
+    const env = envelopeOf(outcome);
+    if (env && typeof env.decision_id === 'string' && env.decision_id)
+        return env.decision_id;
+    const id = outcome.proof && outcome.proof.decision_id;
+    return typeof id === 'string' && id ? id : null;
+}
+function executionActionOf(outcome) {
+    const v = outcome.verdict;
+    if (v && 'action' in v && typeof v.action === 'string')
+        return v.action;
+    return null;
+}
+function isAllowClass(outcome) {
+    const v = outcome.verdict;
+    if (!v || typeof v !== 'object')
+        return false;
+    // Kind only — UnavailableVerdict can carry action CONTINUE / CONTINUE_WITH_MONITORING
+    // on OPEN_PASSTHROUGH / LKG_SUBSTITUTION; that is not allow-class.
+    return v.kind === 'ALLOW' || v.kind === 'MONITOR';
+}
+function isBlockWithRemediation(outcome) {
+    const v = outcome.verdict;
+    if (!v || v.kind !== 'BLOCK')
+        return null;
+    return readRemediationTransaction(envelopeOf(outcome));
+}
+function trailEntry(outcome, attempt) {
+    return Object.freeze({
+        attempt,
+        decision_id: decisionIdOf(outcome),
+        fingerprint: fingerprintOf(outcome),
+        execution_action: executionActionOf(outcome),
+    });
+}
+function attachObservation(outcome, trail, extras) {
+    const frozenTrail = Object.freeze(trail.map((e) => Object.freeze({ ...e })));
+    const proof = Object.freeze({
+        ...outcome.proof,
+        recheck_trail: frozenTrail,
+    });
+    const obs = { recheck_trail: frozenTrail };
+    if (extras.stop)
+        obs.recheck_stop_reason = extras.stop;
+    const recheckCount = Math.max(0, trail.length - 1);
+    if (extras.fixed === true) {
+        obs.fixed_after_block = { value: true, attempt_count: recheckCount };
+    }
+    else if (trail.length > 0) {
+        obs.fixed_after_block = { value: null, attempt_count: recheckCount > 0 ? recheckCount : null };
+    }
+    return { ...outcome, proof, ...obs };
+}
+/**
+ * Keep T2's hashed artifacts and the factory's arguments.artifacts the same array.
+ * wrapWithGuard executes `redacted.arguments`; a descriptor that preflights ART_FIXED
+ * while arguments still hold the BLOCK-era payload would authorize one change set and
+ * apply another.
+ */
+function withFreshArtifacts(call, artifacts) {
+    const next = { ...call, artifacts };
+    const args = next.arguments;
+    if (args && typeof args === 'object' && !Array.isArray(args)) {
+        next.arguments = { ...args, artifacts };
+    }
+    return next;
+}
+async function freshCall(cfg, current, rebind, artifactsBeforeFix) {
+    // Host-updated call first so applyFix mutations of arguments / filesTouched / diff survive.
+    let next = { ...current };
+    if (typeof cfg.resolveInput === 'function') {
+        const input = await cfg.resolveInput();
+        const resolved = resolveArtifacts(input, cfg.resolveConfig);
+        if (resolved.artifacts && resolved.artifacts.length > 0) {
+            return withFreshArtifacts(next, resolved.artifacts);
+        }
+    }
+    const hostReplacedArtifacts = Array.isArray(current.artifacts)
+        && current.artifacts !== artifactsBeforeFix;
+    if (hostReplacedArtifacts) {
+        return withFreshArtifacts(next, current.artifacts);
+    }
+    const rebound = await Promise.resolve(rebind());
+    if (Array.isArray(rebound.artifacts) && rebound.artifacts.length > 0) {
+        return withFreshArtifacts(next, rebound.artifacts);
+    }
+    return next;
+}
+/**
+ * First call is always a normal guardToolCall. The loop runs only when autoRecheck is
+ * normalized (applyFix present, maxAttempts in 1–3) AND the outcome is BLOCK with a
+ * remediation_transaction.
+ */
+export async function runAutoRecheckLoop(args) {
+    const cfg = normalizeAutoRecheck(args.config.autoRecheck);
+    const first = await guardToolCall(args.call, args.factory, args.config, args.callContext);
+    if (!cfg)
+        return first;
+    const remediation0 = isBlockWithRemediation(first);
+    if (!remediation0)
+        return first;
+    const trail = [trailEntry(first, 0)];
+    let currentCall = args.call;
+    let previous = first;
+    let previousFp = fingerprintOf(first);
+    let remediation = remediation0;
+    for (let i = 1; i <= cfg.maxAttempts; i++) {
+        const artifactsBeforeFix = currentCall.artifacts;
+        const ctx = {
+            call: currentCall,
+            attempt: i,
+            outcome: previous,
+        };
+        let applied = false;
+        try {
+            applied = (await cfg.applyFix(remediation, ctx)) === true;
+        }
+        catch {
+            emit(args.config, {
+                type: 'recheck_attempt',
+                at: iso(),
+                attempt: i,
+                decisionId: decisionIdOf(previous) ?? undefined,
+                from_fp: previousFp,
+                to_fp: previousFp,
+                cause: 'apply_fix_threw',
+            });
+            return attachObservation(first, trail, { stop: 'apply_fix_threw' });
+        }
+        if (!applied) {
+            return attachObservation(first, trail, { stop: 'apply_fix_declined' });
+        }
+        currentCall = await freshCall(cfg, ctx.call, args.rebind, artifactsBeforeFix);
+        const nextCtx = args.refreshContext
+            ? await args.refreshContext(currentCall)
+            : args.callContext;
+        const next = await guardToolCall(currentCall, args.factory, args.config, nextCtx);
+        const toFp = fingerprintOf(next);
+        trail.push(trailEntry(next, i));
+        emit(args.config, {
+            type: 'recheck_attempt',
+            at: iso(),
+            attempt: i,
+            decisionId: decisionIdOf(next) ?? undefined,
+            from_fp: previousFp,
+            to_fp: toFp,
+        });
+        // Same fingerprint as the previous attempt → no progress. Stop; last decision stands.
+        if (previousFp != null && toFp != null && previousFp === toFp) {
+            return attachObservation(next, trail, { stop: 'no_progress' });
+        }
+        if (isAllowClass(next)) {
+            return attachObservation(next, trail, { fixed: true });
+        }
+        const remNext = isBlockWithRemediation(next);
+        if (!remNext) {
+            return attachObservation(next, trail, {});
+        }
+        previous = next;
+        previousFp = toFp;
+        remediation = remNext;
+    }
+    return attachObservation(previous, trail, { stop: 'exhausted' });
+}
+//# sourceMappingURL=auto-recheck.js.map

package/dist/esm/auto-recheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-recheck.js","sourceRoot":"","sources":["../../src/auto-recheck.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAY3C,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAE/E,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAGrE,mDAAmD;AACnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAkDtC,SAAS,GAAG;IACV,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,IAAI,CAAC,MAAmB,EAAE,CAAa;IAC9C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACpB,OAAO,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAAiC,CAAC;IAC5C,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,WAAW,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,GAAG,GAAsB,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrE,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,UAAU;QAAE,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5E,IAAI,CAAC,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;QAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;IAChG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,OAA8B;IAChD,MAAM,CAAC,GAAG,OAAO,CAAC,OAAuB,CAAC;IAC1C,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzE,OAAO,CAAC,CAAC,QAAQ,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,OAA8B;IACnD,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO,GAAG,CAAC,WAAW,CAAC;IAC1F,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;IACvF,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,OAA8B;IAClD,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO,GAAG,CAAC,WAAW,CAAC;IAC1F,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;IACtD,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA8B;IACvD,MAAM,CAAC,GAAG,OAAO,CAAC,OAAuB,CAAC;IAC1C,IAAI,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,OAA8B;IAClD,MAAM,CAAC,GAAG,OAAO,CAAC,OAAuB,CAAC;IAC1C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,sFAAsF;IACtF,mEAAmE;IACnE,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA8B;IAC5D,MAAM,CAAC,GAAG,OAAO,CAAC,OAAuB,CAAC;IAC1C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,0BAA0B,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,OAA8B,EAAE,OAAe;IACjE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO;QACP,WAAW,EAAE,YAAY,CAAC,OAAO,CAAC;QAClC,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC;QACnC,gBAAgB,EAAE,iBAAiB,CAAC,OAAO,CAAC;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAwB,EACxB,KAA0B,EAC1B,MAAqD;IAErD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1B,GAAG,OAAO,CAAC,KAAK;QAChB,aAAa,EAAE,WAAW;KAC3B,CAAC,CAAC;IACH,MAAM,GAAG,GAAuB,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;IAC/D,IAAI,MAAM,CAAC,IAAI;QAAE,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC;IACvD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1B,GAAG,CAAC,iBAAiB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;IACvE,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,GAAG,CAAC,iBAAiB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjG,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,EAAE,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,IAAwB,EAAE,SAAqB;IACzE,MAAM,IAAI,GAAuB,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;IAC5B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,EAAE,GAAI,IAAgC,EAAE,SAAS,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAsB,EACtB,OAA2B,EAC3B,MAA8D,EAC9D,kBAA0C;IAE1C,4FAA4F;IAC5F,IAAI,IAAI,GAAuB,EAAE,GAAG,OAAO,EAAE,CAAC;IAE9C,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QAC5D,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,OAAO,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAuB,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,MAAM,qBAAqB,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;WACzD,OAAO,CAAC,SAAS,KAAK,kBAAkB,CAAC;IAC9C,IAAI,qBAAqB,EAAE,CAAC;QAC1B,OAAO,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,SAAuB,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,OAAO,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAYD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAI,IAA4B;IACtE,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1F,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAEvB,MAAM,YAAY,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAEhC,MAAM,KAAK,GAAwB,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;IAC5B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,WAAW,GAAG,YAAY,CAAC;IAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,kBAAkB,GAAG,WAAW,CAAC,SAAS,CAAC;QACjD,MAAM,GAAG,GAA+B;YACtC,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,QAAiC;SAC3C,CAAC;QACF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAChB,IAAI,EAAE,iBAAiB;gBACvB,EAAE,EAAE,GAAG,EAAE;gBACT,OAAO,EAAE,CAAC;gBACV,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,IAAI,SAAS;gBAC/C,OAAO,EAAE,UAAU;gBACnB,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,iBAAiB;aACzB,CAAC,CAAC;YACH,OAAO,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,WAAW,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc;YACjC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;YACxC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAChB,IAAI,EAAE,iBAAiB;YACvB,EAAE,EAAE,GAAG,EAAE;YACT,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,SAAS;YAC3C,OAAO,EAAE,UAAU;YACnB,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QAEH,sFAAsF;QACtF,IAAI,UAAU,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YAC9D,OAAO,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,QAAQ,GAAG,IAAI,CAAC;QAChB,UAAU,GAAG,IAAI,CAAC;QAClB,WAAW,GAAG,OAAO,CAAC;IACxB,CAAC;IAED,OAAO,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AACnE,CAAC"}