@codyswann/lisa 4.45.7 → 4.45.8

package/all/copy-overwrite/scripts/lisa-enforcement-fallback.sh

@@ -483,6 +483,25 @@ notice_marker=""
 # non-sticky shared TMPDIR: another user could replace that parent between the
 # checks below. Root- or caller-owned parents are acceptable; any parent that
 # grants group or other write access must also carry the sticky bit.
+#
+# The two `stat` spellings must be asked for the SAME twelve bits, and getting
+# that wrong is invisible because each platform only ever runs its own branch.
+# BSD `%Lp` renders the low NINE bits and drops setuid/setgid/sticky entirely:
+#
+#   stat -f '%Lp' <a 1777 dir>  ->  777    <- sticky gone
+#   stat -f '%p'  <a 1777 dir>  ->  41777  <- sticky present, plus file type
+#   stat -c '%a'  <a 1777 dir>  ->  1777   <- sticky present (GNU includes it)
+#
+# So under `%Lp` the sticky test below is `777 & 1000`, which is zero for every
+# directory on the machine — the exemption was unreachable on macOS and the
+# whole `&& [ ... 8#1000 ] -eq 0` clause was dead code there. The same logical
+# root was therefore trusted on Linux and rejected on macOS, and since CI is
+# Linux the stricter platform was the one nobody specified and nobody tests on
+# (CodySwannGT/lisa#3691).
+#
+# `%p` restores the bit and adds the file type above it, so the mask normalizes
+# both spellings to one value and the arithmetic below has a single meaning:
+# `41777 & 7777` and `1777 & 7777` are both 1777.
 notice_directory_trusted() {
   local directory="$1"
   local directory_stat=""
@@ -490,7 +509,7 @@ notice_directory_trusted() {
   local directory_mode=""
   local directory_mode_value=0
 
-  directory_stat="$(stat -f '%u %Lp' "$directory" 2>/dev/null)" || \
+  directory_stat="$(stat -f '%u %p' "$directory" 2>/dev/null)" || \
     directory_stat="$(stat -c '%u %a' "$directory" 2>/dev/null)" || return 1
   directory_owner="${directory_stat%% *}"
   directory_mode="${directory_stat#* }"
@@ -498,7 +517,7 @@ notice_directory_trusted() {
     *[!0-9:]* | :* | *: ) return 1 ;;
   esac
   [ "$directory_owner" = "0" ] || [ "$directory_owner" = "$notice_uid" ] || return 1
-  directory_mode_value=$((8#$directory_mode))
+  directory_mode_value=$((8#$directory_mode & 8#7777))
   if [ $((directory_mode_value & 8#0022)) -ne 0 ] && \
     [ $((directory_mode_value & 8#1000)) -eq 0 ]; then
     return 1

package/all/copy-overwrite/scripts/lisa-hooks/worktree-binding-guard.mjs

@@ -550,6 +550,63 @@ function claimedRoot(toolInput, cwd) {
   return null;
 }
 
+/**
+ * Record where the session STARTED, so its first guarded call is checked
+ * against a baseline rather than establishing one.
+ *
+ * ## Why the first call could not be checked before
+ *
+ * It established the baseline instead of testing one, which is
+ * trust-on-first-use — and TOFU is only as safe as its first use. Here the
+ * first use is assigned by the harness, unasked (CodySwannGT/lisa#3864), so the
+ * one moment the guard trusted was the moment the session had least control
+ * over. A session already sitting in a foreign worktree when it first acted
+ * bound to that tree and was never refused, and every later call was then
+ * checked faithfully against the wrong baseline — defending the session INTO
+ * the wrong worktree rather than out of it (CodySwannGT/lisa#3955).
+ *
+ * ## Why an earlier observation separates what a cleverer check cannot
+ *
+ * At the first guarded call, "I was displaced before I acted" and "I
+ * legitimately started here" present identically: one session id, one observed
+ * root, no prior state. No comparison can tell them apart, because the
+ * information is not in the hook's inputs at that instant.
+ *
+ * At session start it is. The displacement mechanism actually observed is a
+ * PEER's `EnterWorktree` moving this session (CodySwannGT/lisa#3712), which
+ * happens during the session — after it has started. A baseline taken at start
+ * is therefore recorded BEFORE the event that moves it, and the first guarded
+ * call becomes an ordinary comparison against a baseline that already exists.
+ * It reaches the same refusal a later displacement produces, because by then it
+ * is one.
+ *
+ * ## What this does NOT achieve
+ *
+ * #3955 asks for a baseline from the ASSIGNER rather than from observation.
+ * That is not what this is and Lisa cannot build it: Lisa does not own
+ * `EnterWorktree`, and nothing the harness writes names a session's assigned
+ * worktree in a form a hook can read. This is still an observation, just an
+ * earlier one. It closes the window between session start and the first guarded
+ * call; it leaves open a session LAUNCHED already displaced, where start
+ * observes the foreign tree and trust-on-first-use still applies.
+ *
+ * Returns nothing on purpose, like its sibling below: SessionStart has no call
+ * to refuse, so every path through it allows.
+ * @param sessionId - The session this baseline belongs to
+ * @param observed - The worktree root the session started in
+ */
+function recordBaseline(sessionId, observed) {
+  // Never overwrite. A resumed session, a reconnect, or anything else that
+  // fires the event twice must not be able to launder a displaced binding into
+  // a fresh baseline — which is the whole failure this exists to close.
+  if (readState(sessionId)?.boundRoot) return;
+  writeState(sessionId, {
+    boundRoot: observed,
+    claimedRoot: null,
+    updatedAt: new Date().toISOString(),
+  });
+}
+
 /**
  * Record what `EnterWorktree` just claimed, for the next tool call to check.
  *
@@ -651,6 +708,10 @@ function evaluate(payload) {
   const observed = worktreeRoot(cwd);
   if (!observed) return 0;
 
+  if (payload.hook_event_name === "SessionStart") {
+    recordBaseline(sessionId, observed);
+    return 0;
+  }
   if (payload.tool_name === "EnterWorktree") {
     recordClaim(payload, observed);
     return 0;
@@ -662,6 +723,13 @@ function evaluate(payload) {
 
   const state = readState(sessionId);
   if (!state?.boundRoot) {
+    // No baseline means SessionStart did not run for this session — an older
+    // install, a runtime that fires no such event, a harness that skips it.
+    // Absence of a baseline is absence of evidence, not evidence of
+    // displacement, so this records one exactly as it always did rather than
+    // refusing. Treating it as a refusal would turn a floor into a wall on
+    // every surface where the event does not fire, and a wall gets switched
+    // off, which costs the whole guard.
     writeState(sessionId, {
       boundRoot: observed,
       claimedRoot: null,

package/all/merge/.claude/settings.json

@@ -67,6 +67,16 @@
           }
         ]
       }
+    ],
+    "SessionStart": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash \"$CLAUDE_PROJECT_DIR\"/scripts/lisa-hooks/worktree-binding-guard.sh"
+          }
+        ]
+      }
     ]
   }
 }

package/dist/configs/vitest/scratch-global-setup.d.ts

@@ -224,13 +224,19 @@ export declare const armRefusalSummary: (failure: string, write?: (text: string)
  */
 export declare const announceRefusal: (failure: string, writeNotice?: (text: string) => void) => void;
 /**
- * Reclaims residue from previous runs, then refuses to start into a namespace
- * that is accumulating.
+ * Refuses to start into an untrusted temp root or an accumulating namespace.
  *
  * A refusal speaks twice — a banner before collection and a summary line at
  * exit — and the two are not redundant. They are the top and the bottom of a
  * transcript nobody reads in full.
- * @throws {Error} When residue is present that the sweep cannot or did not reclaim.
+ *
+ * The TMPDIR trust check runs FIRST, and the order is load-bearing rather than
+ * arbitrary. An untrusted root is the more fundamental fault: it is a property
+ * of the environment the run was launched in, it is what every rung of the
+ * namespace audit is then inspected THROUGH, and it is the one whose absence
+ * of a message cost four separate investigations (CodySwannGT/lisa#3691).
+ * Reporting a namespace symptom first would name the second-order fact.
+ * @throws {Error} When the temp root is untrusted, or residue the sweep cannot or did not reclaim is present.
  */
 export declare const setup: () => void;
 /**

package/dist/configs/vitest/scratch-global-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scratch-global-setup.d.ts","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-global-setup.ts"],"names":[],"mappings":"AAmDA,OAAO,EAGL,+BAA+B,EAGhC,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC;;;;;;;;;;GAUG;AACH,MAAM,MAAM,kBAAkB;AAC5B,kDAAkD;AAChD,eAAe;AACjB,0EAA0E;GACxE,mBAAmB;AACrB,kEAAkE;GAChE,mBAAmB;AACrB,mDAAmD;GACjD,iBAAiB,CAAC;AAEtB,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC;AAED,iDAAiD;AACjD,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,+DAA+D;IAC/D,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,gEAAgE;IAChE,QAAQ,CAAC,kBAAkB,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC1D,4BAA4B;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AA+ED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB,GAC3B,MAAK,MAA8B,EACnC,QAAO,CAAC,GAAG,EAAE,MAAM,KAAK,OAAwB,EAChD,QAAO,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAmC,KACnE,gBAoBF,CAAC;AAwEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sBAAsB,GACjC,KAAK,MAAM,EACX,SAAS,gBAAgB,KACxB,MAAM,GAAG,SAuCX,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,GAC3B,QAAO,CAAC,GAAG,EAAE,MAAM,KAAK,OAAwB,EAChD,WAAU,OAAO,+BAAiE,KACjF,gBAQF,CAAC;AAgBF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,mBAAmB,GAAI,SAAS,MAAM,KAAG,MAcxC,CAAC;AAKf;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB,GAAI,SAAS,MAAM,KAAG,MAG/B,CAAC;AAEzB;;;;;GAKG;AACH,eAAO,MAAM,eAAe,mBAAmB,CAAC;AAQhD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,iBAAiB,GAC5B,SAAS,MAAM,EACf,QAAO,CAAC,IAAI,EAAE,MAAM,KAAK,IAExB,KACA,IAIF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,EACf,cAAa,CAAC,IAAI,EAAE,MAAM,KAAK,IAE9B,KACA,IAMF,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,KAAK,QAAO,IAexB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,QAAQ,QAAO,IAE3B,CAAC"}
+{"version":3,"file":"scratch-global-setup.d.ts","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-global-setup.ts"],"names":[],"mappings":"AAmDA,OAAO,EAGL,+BAA+B,EAGhC,MAAM,oBAAoB,CAAC;AAG5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC;;;;;;;;;;GAUG;AACH,MAAM,MAAM,kBAAkB;AAC5B,kDAAkD;AAChD,eAAe;AACjB,0EAA0E;GACxE,mBAAmB;AACrB,kEAAkE;GAChE,mBAAmB;AACrB,mDAAmD;GACjD,iBAAiB,CAAC;AAEtB,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC;AAED,iDAAiD;AACjD,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,+DAA+D;IAC/D,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,gEAAgE;IAChE,QAAQ,CAAC,kBAAkB,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC1D,4BAA4B;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AA+ED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB,GAC3B,MAAK,MAA8B,EACnC,QAAO,CAAC,GAAG,EAAE,MAAM,KAAK,OAAwB,EAChD,QAAO,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAmC,KACnE,gBAoBF,CAAC;AAwEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sBAAsB,GACjC,KAAK,MAAM,EACX,SAAS,gBAAgB,KACxB,MAAM,GAAG,SAuCX,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,GAC3B,QAAO,CAAC,GAAG,EAAE,MAAM,KAAK,OAAwB,EAChD,WAAU,OAAO,+BAAiE,KACjF,gBAQF,CAAC;AAgBF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,mBAAmB,GAAI,SAAS,MAAM,KAAG,MAcxC,CAAC;AAKf;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB,GAAI,SAAS,MAAM,KAAG,MAG/B,CAAC;AAEzB;;;;;GAKG;AACH,eAAO,MAAM,eAAe,mBAAmB,CAAC;AAQhD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,iBAAiB,GAC5B,SAAS,MAAM,EACf,QAAO,CAAC,IAAI,EAAE,MAAM,KAAK,IAExB,KACA,IAIF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,EACf,cAAa,CAAC,IAAI,EAAE,MAAM,KAAK,IAE9B,KACA,IAMF,CAAC;AAgBF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,KAAK,QAAO,IASxB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,QAAQ,QAAO,IAE3B,CAAC"}

package/dist/configs/vitest/scratch-global-setup.js

@@ -42,6 +42,7 @@ import * as path from "node:path";
 import { env } from "node:process";
 import { isProcessAlive, liveOwnerBirthProbe, readNamespaceEntries, scratchNamespaceDir, sweepScratchNamespace, } from "./scratch.js";
 import { classifyScratchOwner, processBirthFingerprint, processBirthFingerprintSnapshot, readScratchOwnerRecord, } from "./scratch-owner.js";
+import { describeTmpdirTrustFailure } from "./scratch-tmpdir-trust.js";
 /**
  * Upper bound on entries the namespace may hold that **nobody owns**.
  *
@@ -448,22 +449,34 @@ export const announceRefusal = (failure, writeNotice = text => {
     armRefusalSummary(failure);
 };
 /**
- * Reclaims residue from previous runs, then refuses to start into a namespace
- * that is accumulating.
- *
- * A refusal speaks twice — a banner before collection and a summary line at
- * exit — and the two are not redundant. They are the top and the bottom of a
- * transcript nobody reads in full.
- * @throws {Error} When residue is present that the sweep cannot or did not reclaim.
+ * Why the namespace must be refused, or `undefined` when it is usable.
+ * @returns Refusal text, or undefined
  */
-export const setup = () => {
+const describeNamespaceFailure = () => {
     // The namespace directory is not created here. `createRunRoot` makes it
     // recursively in whichever worker allocates first, and both the sweep and the
     // inspection treat an absent namespace as an empty one — so creating it would
     // be a side effect ahead of the audit that buys nothing.
     const dir = scratchNamespaceDir();
-    const residue = auditNamespace();
-    const failure = describeResidueFailure(dir, residue);
+    return describeResidueFailure(dir, auditNamespace());
+};
+/**
+ * Refuses to start into an untrusted temp root or an accumulating namespace.
+ *
+ * A refusal speaks twice — a banner before collection and a summary line at
+ * exit — and the two are not redundant. They are the top and the bottom of a
+ * transcript nobody reads in full.
+ *
+ * The TMPDIR trust check runs FIRST, and the order is load-bearing rather than
+ * arbitrary. An untrusted root is the more fundamental fault: it is a property
+ * of the environment the run was launched in, it is what every rung of the
+ * namespace audit is then inspected THROUGH, and it is the one whose absence
+ * of a message cost four separate investigations (CodySwannGT/lisa#3691).
+ * Reporting a namespace symptom first would name the second-order fact.
+ * @throws {Error} When the temp root is untrusted, or residue the sweep cannot or did not reclaim is present.
+ */
+export const setup = () => {
+    const failure = describeTmpdirTrustFailure() ?? describeNamespaceFailure();
     if (failure !== undefined) {
         // Both halves of the announcement happen before the throw, because the
         // throw is what ends this function.

package/dist/configs/vitest/scratch-global-setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"scratch-global-setup.js","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-global-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,+BAA+B,EAC/B,sBAAsB,GAEvB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAiDzC;;;;;;GAMG;AACH,SAAS,0BAA0B,CACjC,GAAW,EACX,IAAY,EACZ,KAA2B;IAE3B,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,CACL,CAAC,QAAQ,CAAC,cAAc,EAAE;QAC1B,QAAQ,CAAC,WAAW,EAAE;QACtB,KAAK,CAAC,SAAS,CAAC,aAAa,KAAK,YAAY,CAAC,GAAG,CAAC;QACnD,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,aAAa,CAAC,GAAG;QACzC,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,aAAa,CAAC,GAAG;QACzC,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,YAAY,CAAC,IAAI,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;QAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAChC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAC7B,GAAW,EACX,IAAY,EACZ,KAA+B,EAC/B,KAA0C;IAE1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1E,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC/D,CAAC;QACD,OAAO,oBAAoB,CAAC,KAAK,EAAE;YACjC,cAAc,EAAE,KAAK;YACrB,uBAAuB,EAAE,KAAK;SAC/B,CAAC,KAAK,UAAU;YACf,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;YAClB,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,uBAAuB;QACvB,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,MAAM,EACH,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAChD,CAAC,CAAC,eAAe;gBACjB,CAAC,CAAC,mBAAmB;SAC1B,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAc,mBAAmB,EAAE,EACnC,QAAkC,cAAc,EAChD,QAA6C,uBAAuB,EAClD,EAAE;IACpB,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI;QACJ,WAAW,EAAE,sBAAsB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC;KAC7D,CAAC,CAAC,CAAC;IACJ,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CACpD,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,cAAc;QACvC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC,CAAC,EAAE,CACP,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,UAAU;aACjB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU,CAAC;aACtD,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QAC3B,YAAY,EAAE,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QACzD,kBAAkB;QAClB,KAAK,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,GAAG,CAAC,KAAwB,EAAU,EAAE,CAClD,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEjE;;;;;;;GAOG;AACH,MAAM,yBAAyB,GAC7B;IACE,eAAe,EACb,sEAAsE;QACtE,yEAAyE;QACzE,uEAAuE;QACvE,0EAA0E;QAC1E,mEAAmE;IACrE,mBAAmB,EACjB,wEAAwE;QACxE,qEAAqE;QACrE,iDAAiD;IACnD,mBAAmB,EACjB,2EAA2E;QAC3E,8DAA8D;IAChE,iBAAiB,EACf,wEAAwE;QACxE,uEAAuE;CAC1E,CAAC;AAEJ;;;;GAIG;AACH,MAAM,2BAA2B,GAAG,CAClC,MAAoC,EAC5B,EAAE;IACV,MAAM,KAAK,GAAkC;QAC3C,eAAe;QACf,mBAAmB;QACnB,mBAAmB;QACnB,iBAAiB;KAClB,CAAC;IACF,OAAO,KAAK;SACT,OAAO,CAAC,MAAM,CAAC,EAAE;QAChB,MAAM,KAAK,GAAG,MAAM;aACjB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;aACxC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;YACvB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK;oBAC1D,GAAG,yBAAyB,CAAC,MAAM,CAAC,GAAG;aAC1C,CAAC;IACR,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,wBAAwB,GAC5B,4EAA4E;IAC5E,oEAAoE,CAAC;AAEvE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,GAAW,EACX,OAAyB,EACL,EAAE;IACtB,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CACL,0BAA0B,GAAG,gBAAgB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG;YAC/E,uEAAuE;YACvE,iBAAiB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B;YACrE,wDAAwD,wBAAwB,EAAE,CACnF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CACL,0BAA0B,GAAG,UAAU,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG;YAC7E,gDAAgD;YAChD,uEAAuE;YACvE,6DAA6D;YAC7D,GAAG,2BAA2B,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI;YAC9D,aAAa,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,oCAAoC;YACtE,mCAAmC,MAAM,CAAC,qBAAqB,CAAC,KAAK,wBAAwB,EAAE,CAChG,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;IAEtE,IAAI,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACpC,OAAO,CACL,0BAA0B,GAAG,UAAU,MAAM,CAAC,OAAO,CAAC,mBAAmB;YACzE,0CAA0C,MAAM,CAAC,qBAAqB,CAAC,GAAG;YAC1E,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,4CAA4C;YACrE,uEAAuE;YACvE,+CAA+C,wBAAwB,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,QAAkC,cAAc,EAChD,WAAmD,+BAA+B,EAChE,EAAE;IACpB,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACxD,qBAAqB,CAAC;QACpB,cAAc,EAAE,KAAK;QACrB,uBAAuB,EAAE,KAAK;KAC/B,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,cAAc,GAAG,GAAqB,EAAE;IAC5C,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAChE,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAe,EAAU,EAAE,CAC7D;IACE,EAAE;IACF,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACd,6DAA6D;IAC7D,EAAE;IACF,OAAO;IACP,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,2CAA2C;IAC3C,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACd,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,8DAA8D;AAC9D,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAU,EAAE,CAC9D,wEAAwE;IACxE,qEAAqE;IACrE,WAAW,OAAO,IAAI,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEhD;;;GAGG;AACH,MAAM,YAAY,GAAG,GAAY,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,SAAS,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAAe,EACf,QAAgC,IAAI,CAAC,EAAE;IACrC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC,EACK,EAAE;IACR,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACxB,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAe,EACf,cAAsC,IAAI,CAAC,EAAE;IAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC,EACK,EAAE;IACR,IAAI,YAAY,EAAE;QAAE,OAAO;IAC3B,2EAA2E;IAC3E,gEAAgE;IAChE,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,GAAS,EAAE;IAC9B,wEAAwE;IACxE,8EAA8E;IAC9E,8EAA8E;IAC9E,yDAAyD;IACzD,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAErD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,uEAAuE;QACvE,oCAAoC;QACpC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAS,EAAE;IACjC,qBAAqB,EAAE,CAAC;AAC1B,CAAC,CAAC"}
+{"version":3,"file":"scratch-global-setup.js","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-global-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,+BAA+B,EAC/B,sBAAsB,GAEvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAiDzC;;;;;;GAMG;AACH,SAAS,0BAA0B,CACjC,GAAW,EACX,IAAY,EACZ,KAA2B;IAE3B,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,CACL,CAAC,QAAQ,CAAC,cAAc,EAAE;QAC1B,QAAQ,CAAC,WAAW,EAAE;QACtB,KAAK,CAAC,SAAS,CAAC,aAAa,KAAK,YAAY,CAAC,GAAG,CAAC;QACnD,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,aAAa,CAAC,GAAG;QACzC,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,aAAa,CAAC,GAAG;QACzC,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,YAAY,CAAC,IAAI,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;QAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAChC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAC7B,GAAW,EACX,IAAY,EACZ,KAA+B,EAC/B,KAA0C;IAE1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1E,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC/D,CAAC;QACD,OAAO,oBAAoB,CAAC,KAAK,EAAE;YACjC,cAAc,EAAE,KAAK;YACrB,uBAAuB,EAAE,KAAK;SAC/B,CAAC,KAAK,UAAU;YACf,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;YAClB,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,uBAAuB;QACvB,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,MAAM,EACH,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAChD,CAAC,CAAC,eAAe;gBACjB,CAAC,CAAC,mBAAmB;SAC1B,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAc,mBAAmB,EAAE,EACnC,QAAkC,cAAc,EAChD,QAA6C,uBAAuB,EAClD,EAAE;IACpB,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI;QACJ,WAAW,EAAE,sBAAsB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC;KAC7D,CAAC,CAAC,CAAC;IACJ,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CACpD,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,cAAc;QACvC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QAC1D,CAAC,CAAC,EAAE,CACP,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,UAAU;aACjB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU,CAAC;aACtD,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QAC3B,YAAY,EAAE,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QACzD,kBAAkB;QAClB,KAAK,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,GAAG,CAAC,KAAwB,EAAU,EAAE,CAClD,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEjE;;;;;;;GAOG;AACH,MAAM,yBAAyB,GAC7B;IACE,eAAe,EACb,sEAAsE;QACtE,yEAAyE;QACzE,uEAAuE;QACvE,0EAA0E;QAC1E,mEAAmE;IACrE,mBAAmB,EACjB,wEAAwE;QACxE,qEAAqE;QACrE,iDAAiD;IACnD,mBAAmB,EACjB,2EAA2E;QAC3E,8DAA8D;IAChE,iBAAiB,EACf,wEAAwE;QACxE,uEAAuE;CAC1E,CAAC;AAEJ;;;;GAIG;AACH,MAAM,2BAA2B,GAAG,CAClC,MAAoC,EAC5B,EAAE;IACV,MAAM,KAAK,GAAkC;QAC3C,eAAe;QACf,mBAAmB;QACnB,mBAAmB;QACnB,iBAAiB;KAClB,CAAC;IACF,OAAO,KAAK;SACT,OAAO,CAAC,MAAM,CAAC,EAAE;QAChB,MAAM,KAAK,GAAG,MAAM;aACjB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;aACxC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;YACvB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK;oBAC1D,GAAG,yBAAyB,CAAC,MAAM,CAAC,GAAG;aAC1C,CAAC;IACR,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,wBAAwB,GAC5B,4EAA4E;IAC5E,oEAAoE,CAAC;AAEvE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,GAAW,EACX,OAAyB,EACL,EAAE;IACtB,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CACL,0BAA0B,GAAG,gBAAgB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG;YAC/E,uEAAuE;YACvE,iBAAiB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B;YACrE,wDAAwD,wBAAwB,EAAE,CACnF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CACL,0BAA0B,GAAG,UAAU,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG;YAC7E,gDAAgD;YAChD,uEAAuE;YACvE,6DAA6D;YAC7D,GAAG,2BAA2B,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI;YAC9D,aAAa,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,oCAAoC;YACtE,mCAAmC,MAAM,CAAC,qBAAqB,CAAC,KAAK,wBAAwB,EAAE,CAChG,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;IAEtE,IAAI,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACpC,OAAO,CACL,0BAA0B,GAAG,UAAU,MAAM,CAAC,OAAO,CAAC,mBAAmB;YACzE,0CAA0C,MAAM,CAAC,qBAAqB,CAAC,GAAG;YAC1E,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,4CAA4C;YACrE,uEAAuE;YACvE,+CAA+C,wBAAwB,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,QAAkC,cAAc,EAChD,WAAmD,+BAA+B,EAChE,EAAE;IACpB,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACxD,qBAAqB,CAAC;QACpB,cAAc,EAAE,KAAK;QACrB,uBAAuB,EAAE,KAAK;KAC/B,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,cAAc,GAAG,GAAqB,EAAE;IAC5C,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAChE,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAe,EAAU,EAAE,CAC7D;IACE,EAAE;IACF,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACd,6DAA6D;IAC7D,EAAE;IACF,OAAO;IACP,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,2CAA2C;IAC3C,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACd,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,8DAA8D;AAC9D,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAU,EAAE,CAC9D,wEAAwE;IACxE,qEAAqE;IACrE,WAAW,OAAO,IAAI,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEhD;;;GAGG;AACH,MAAM,YAAY,GAAG,GAAY,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,SAAS,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAAe,EACf,QAAgC,IAAI,CAAC,EAAE;IACrC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC,EACK,EAAE;IACR,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACxB,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAe,EACf,cAAsC,IAAI,CAAC,EAAE;IAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC,EACK,EAAE;IACR,IAAI,YAAY,EAAE;QAAE,OAAO;IAC3B,2EAA2E;IAC3E,gEAAgE;IAChE,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,wBAAwB,GAAG,GAAuB,EAAE;IACxD,wEAAwE;IACxE,8EAA8E;IAC9E,8EAA8E;IAC9E,yDAAyD;IACzD,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAElC,OAAO,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,GAAS,EAAE;IAC9B,MAAM,OAAO,GAAG,0BAA0B,EAAE,IAAI,wBAAwB,EAAE,CAAC;IAE3E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,uEAAuE;QACvE,oCAAoC;QACpC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAS,EAAE;IACjC,qBAAqB,EAAE,CAAC;AAC1B,CAAC,CAAC"}

package/dist/configs/vitest/scratch-tmpdir-trust.d.ts

@@ -0,0 +1,48 @@
+/** The rung of the chain that failed the trust test, and why it failed. */
+export interface UntrustedAncestor {
+    /** Absolute path of the rejected directory. */
+    readonly directory: string;
+    /** Owning uid, as reported by `stat`. */
+    readonly uid: number;
+    /** Permission, setuid/setgid and sticky bits. */
+    readonly mode: number;
+    /** Operator-readable statement of which property failed. */
+    readonly reason: string;
+}
+/**
+ * Render a mode the way `ls` and `chmod` spell it, so it can be compared.
+ * @param mode - Permission bits
+ * @returns Four-digit octal string
+ */
+export declare const octalMode: (mode: number) => string;
+/**
+ * Every ancestor of an absolute path, root first and the path itself last.
+ * @param target - Absolute, symlink-resolved path
+ * @returns The chain to walk, in the order the shell walks it
+ */
+export declare const ancestorChain: (target: string) => readonly string[];
+/**
+ * The first untrusted ancestor of a path, if any.
+ *
+ * Platforms without uid ownership have nothing to check and are never refused.
+ * @param target - Absolute, symlink-resolved path to walk
+ * @returns The first failing rung, or undefined
+ */
+export declare const findUntrustedAncestor: (target: string) => UntrustedAncestor | undefined;
+/**
+ * The refusal text: what was rejected, which rung rejected it, and the fix.
+ * @param resolved - The symlink-resolved TMPDIR that was walked
+ * @param ancestor - The rung that failed
+ * @returns Operator-readable failure text
+ */
+export declare const describeUntrustedTmpdir: (resolved: string, ancestor: UntrustedAncestor) => string;
+/**
+ * Why this run's TMPDIR must be refused, or `undefined` when it is trusted.
+ *
+ * Read through `realpathSync` because the shell resolves with `cd -P` before it
+ * walks: the chain that matters is the physical one, and a symlinked TMPDIR
+ * whose logical spelling looks fine can resolve onto a rung that is not.
+ * @returns Refusal text, or undefined when the chain is trusted
+ */
+export declare const describeTmpdirTrustFailure: () => string | undefined;
+//# sourceMappingURL=scratch-tmpdir-trust.d.ts.map

package/dist/configs/vitest/scratch-tmpdir-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-tmpdir-trust.d.ts","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-tmpdir-trust.ts"],"names":[],"mappings":"AA0DA,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yCAAyC;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,eAAO,MAAM,SAAS,GAAI,MAAM,MAAM,KAAG,MACN,CAAC;AAEpC;;;;GAIG;AACH,eAAO,MAAM,aAAa,GAAI,QAAQ,MAAM,KAAG,SAAS,MAAM,EAUzD,CAAC;AAuEN;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,GAChC,QAAQ,MAAM,KACb,iBAAiB,GAAG,SAItB,CAAC;AAqBF;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,GAClC,UAAU,MAAM,EAChB,UAAU,iBAAiB,KAC1B,MAuBW,CAAC;AAEf;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,QAAO,MAAM,GAAG,SAOtD,CAAC"}

package/dist/configs/vitest/scratch-tmpdir-trust.js

@@ -0,0 +1,194 @@
+/**
+ * Vitest Configuration - TMPDIR ancestor-chain trust (refusal)
+ *
+ * A test run under a `TMPDIR` whose ancestor chain is untrusted produces four
+ * failing assertions about enforcement rate-limiting and says nothing about the
+ * environment that caused them. Nobody's first hypothesis is "my temp
+ * directory's ancestor has the wrong mode bits", so the failure reads as a
+ * defect in the rate limiter — measured at four separate investigations, two of
+ * which escalated claiming `main` was red (CodySwannGT/lisa#3691).
+ *
+ * The mechanism is `scripts/lisa-enforcement-fallback.sh`, which walks every
+ * ancestor of the resolved `TMPDIR` before it writes its once-per-session
+ * marker. When a rung fails the walk the marker is never created, the rate
+ * limit stands down, and the notice speaks on every call. THAT STAND-DOWN IS
+ * CORRECT — the guard is designed to fail open rather than write into an
+ * untrusted state directory, and it should keep doing that. What was missing is
+ * anything telling the operator why, which is what this module supplies.
+ *
+ * The verdict is deliberately a REFUSAL rather than a warning, and it is wired
+ * into `globalSetup` rather than `setupFiles` for a measured reason: a throw
+ * from a `setupFiles` module fails collection, so the suite reports zero tests
+ * and the gate goes red having evaluated nothing — a result that looks like a
+ * verdict and is not one. Installing that failure to fix a failure that names
+ * nothing would reproduce the defect one level up. `scratch-global-setup`
+ * already refuses from `setup`, where vitest honours the throw and exits 1.
+ *
+ * The predicate below is a second expression of the shell's arithmetic, which
+ * is a real risk: two copies can drift, and the copy that decides behaviour is
+ * the shell's. That risk is priced by a case in
+ * `tests/unit/config/scratch-tmpdir-trust.test.ts` asserting the two agree on a
+ * table of representative roots, real directories rather than fabricated modes.
+ * Sharing the shell predicate directly was rejected: that script is the
+ * PreToolUse dispatcher that runs on EVERY tool call and consumes stdin, so a
+ * probe mode would put a test-serving branch on the hottest path in the repo.
+ * @see {@link module:configs/vitest/scratch-global-setup} for the refusal path
+ * @module configs/vitest/scratch-tmpdir-trust
+ */
+import { realpathSync, statSync } from "node:fs";
+import { tmpdir } from "node:os";
+import * as path from "node:path";
+import { getuid, platform } from "node:process";
+/** Permission, setuid/setgid and sticky bits of `st_mode`. */
+const PERMISSION_BITS = 0o7777;
+/** Write access granted to group or to other. */
+const SHARED_WRITE_BITS = 0o022;
+/**
+ * The sticky bit.
+ *
+ * It is what makes a shared, world-writable temp root safe to hold per-user
+ * state: another uid can still CREATE a name there, but cannot unlink or rename
+ * one that is not theirs. That is the whole basis on which `/tmp` is trusted.
+ */
+const STICKY_BIT = 0o1000;
+/**
+ * Render a mode the way `ls` and `chmod` spell it, so it can be compared.
+ * @param mode - Permission bits
+ * @returns Four-digit octal string
+ */
+export const octalMode = (mode) => mode.toString(8).padStart(4, "0");
+/**
+ * Every ancestor of an absolute path, root first and the path itself last.
+ * @param target - Absolute, symlink-resolved path
+ * @returns The chain to walk, in the order the shell walks it
+ */
+export const ancestorChain = (target) => target
+    .split(path.sep)
+    .filter(segment => segment !== "")
+    .reduce((chain, segment) => [
+    ...chain,
+    path.join(chain[chain.length - 1] ?? path.sep, segment),
+], [path.sep]);
+/**
+ * Why one directory is untrusted, or `undefined` when it is trusted.
+ *
+ * Ownership is checked as "root or me" rather than "mine". A valid chain is
+ * MOSTLY root-owned — on macOS four of the six rungs above the per-user temp
+ * root are uid 0 — so a check written as "is this mine?" would reject every
+ * valid root on the machine. The discriminating property is the MODE.
+ * @param uid - Owning uid of the directory
+ * @param mode - Its permission, setuid/setgid and sticky bits
+ * @param self - The current uid
+ * @returns The failing property, or undefined
+ */
+const untrustReason = (uid, mode, self) => {
+    if (uid !== 0 && uid !== self) {
+        return (`owned by uid ${String(uid)}, which is neither root nor you ` +
+            `(uid ${String(self)}), so its owner can replace it underneath you`);
+    }
+    if ((mode & SHARED_WRITE_BITS) !== 0 && (mode & STICKY_BIT) === 0) {
+        return (`mode ${octalMode(mode)} grants write access to group or other ` +
+            `WITHOUT the sticky bit, so any user can replace entries in it`);
+    }
+    return undefined;
+};
+/**
+ * The first rung of a chain that fails the trust test.
+ *
+ * A rung that cannot be inspected at all counts as untrusted, matching the
+ * shell, whose `stat` failure returns the same verdict as a bad mode.
+ * @param target - Absolute, symlink-resolved path to walk
+ * @param self - The current uid
+ * @returns The first failing rung, or undefined when every rung passes
+ */
+const firstUntrustedRung = (target, self) => ancestorChain(target).reduce((found, directory) => {
+    if (found !== undefined)
+        return found;
+    try {
+        const stat = statSync(directory);
+        const mode = stat.mode & PERMISSION_BITS;
+        const reason = untrustReason(stat.uid, mode, self);
+        return reason === undefined
+            ? undefined
+            : { directory, uid: stat.uid, mode, reason };
+    }
+    catch (error) {
+        return {
+            directory,
+            uid: -1,
+            mode: 0,
+            reason: `could not be inspected: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+}, undefined);
+/**
+ * The first untrusted ancestor of a path, if any.
+ *
+ * Platforms without uid ownership have nothing to check and are never refused.
+ * @param target - Absolute, symlink-resolved path to walk
+ * @returns The first failing rung, or undefined
+ */
+export const findUntrustedAncestor = (target) => {
+    const self = getuid?.();
+    return self === undefined ? undefined : firstUntrustedRung(target, self);
+};
+/**
+ * The remedy lines, spelled for the platform the operator is actually on.
+ *
+ * A remedy that cannot be followed is worse than none: it reads as the guard
+ * being wrong rather than the environment being wrong, and the available move
+ * then is to route around the guard.
+ * @returns Shell lines that produce a trusted TMPDIR
+ */
+const remedyLines = () => platform === "darwin"
+    ? [
+        '  root="$(getconf DARWIN_USER_TEMP_DIR)"',
+        '  mkdir -p "${root}lisa" && export TMPDIR="${root}lisa"',
+    ]
+    : [
+        '  root="${XDG_RUNTIME_DIR:-/tmp}/lisa-$(id -u)"',
+        '  mkdir -p "$root" && export TMPDIR="$root"',
+    ];
+/**
+ * The refusal text: what was rejected, which rung rejected it, and the fix.
+ * @param resolved - The symlink-resolved TMPDIR that was walked
+ * @param ancestor - The rung that failed
+ * @returns Operator-readable failure text
+ */
+export const describeUntrustedTmpdir = (resolved, ancestor) => [
+    "Lisa test scratch requires a TMPDIR whose ancestor chain is trusted.",
+    "",
+    `  TMPDIR resolves to  ${resolved}`,
+    `  rejected at         ${ancestor.directory}`,
+    `                      uid ${String(ancestor.uid)}, mode ${octalMode(ancestor.mode)}`,
+    `                      ${ancestor.reason}`,
+    "",
+    "A directory is trusted when it is owned by root or by you AND is not",
+    "group- or world-writable unless it carries the sticky bit.",
+    "",
+    "This is the same chain scripts/lisa-enforcement-fallback.sh walks before",
+    "it writes per-session state. A TMPDIR refused here would silently stand",
+    "that rate limit down instead, which surfaces as four assertion failures",
+    "in tests/unit/hooks/enforcement-fallback-notice-rate.test.ts that read as",
+    "defects in the rate limiter and say nothing about your environment. That",
+    "is the failure this refusal replaces (CodySwannGT/lisa#3691).",
+    "",
+    "Point TMPDIR at a directory of your own instead:",
+    ...remedyLines(),
+].join("\n");
+/**
+ * Why this run's TMPDIR must be refused, or `undefined` when it is trusted.
+ *
+ * Read through `realpathSync` because the shell resolves with `cd -P` before it
+ * walks: the chain that matters is the physical one, and a symlinked TMPDIR
+ * whose logical spelling looks fine can resolve onto a rung that is not.
+ * @returns Refusal text, or undefined when the chain is trusted
+ */
+export const describeTmpdirTrustFailure = () => {
+    const resolved = realpathSync(tmpdir());
+    const ancestor = findUntrustedAncestor(resolved);
+    return ancestor === undefined
+        ? undefined
+        : describeUntrustedTmpdir(resolved, ancestor);
+};
+//# sourceMappingURL=scratch-tmpdir-trust.js.map

package/dist/configs/vitest/scratch-tmpdir-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-tmpdir-trust.js","sourceRoot":"","sources":["../../../src/configs/vitest/scratch-tmpdir-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAEhD,8DAA8D;AAC9D,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,iDAAiD;AACjD,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,MAAM,CAAC;AAc1B;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CAChD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAqB,EAAE,CACjE,MAAM;KACH,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;KACf,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,EAAE,CAAC;KACjC,MAAM,CACL,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IAClB,GAAG,KAAK;IACR,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;CACxD,EACD,CAAC,IAAI,CAAC,GAAG,CAAC,CACX,CAAC;AAEN;;;;;;;;;;;GAWG;AACH,MAAM,aAAa,GAAG,CACpB,GAAW,EACX,IAAY,EACZ,IAAY,EACQ,EAAE;IACtB,IAAI,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO,CACL,gBAAgB,MAAM,CAAC,GAAG,CAAC,kCAAkC;YAC7D,QAAQ,MAAM,CAAC,IAAI,CAAC,+CAA+C,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,CACL,QAAQ,SAAS,CAAC,IAAI,CAAC,yCAAyC;YAChE,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,kBAAkB,GAAG,CACzB,MAAc,EACd,IAAY,EACmB,EAAE,CACjC,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,CAC1B,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;IACnB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QACzC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACnD,OAAO,MAAM,KAAK,SAAS;YACzB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,SAAS;YACT,GAAG,EAAE,CAAC,CAAC;YACP,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,2BACN,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;SACH,CAAC;IACJ,CAAC;AACH,CAAC,EACD,SAAS,CACV,CAAC;AAEJ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,MAAc,EACiB,EAAE;IACjC,MAAM,IAAI,GAAG,MAAM,EAAE,EAAE,CAAC;IAExB,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC3E,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,GAAsB,EAAE,CAC1C,QAAQ,KAAK,QAAQ;IACnB,CAAC,CAAC;QACE,0CAA0C;QAC1C,yDAAyD;KAC1D;IACH,CAAC,CAAC;QACE,iDAAiD;QACjD,6CAA6C;KAC9C,CAAC;AAER;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,QAAgB,EAChB,QAA2B,EACnB,EAAE,CACV;IACE,sEAAsE;IACtE,EAAE;IACF,yBAAyB,QAAQ,EAAE;IACnC,yBAAyB,QAAQ,CAAC,SAAS,EAAE;IAC7C,6BAA6B,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,SAAS,CAClE,QAAQ,CAAC,IAAI,CACd,EAAE;IACH,yBAAyB,QAAQ,CAAC,MAAM,EAAE;IAC1C,EAAE;IACF,sEAAsE;IACtE,4DAA4D;IAC5D,EAAE;IACF,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,+DAA+D;IAC/D,EAAE;IACF,kDAAkD;IAClD,GAAG,WAAW,EAAE;CACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAuB,EAAE;IACjE,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAEjD,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC,CAAC"}

package/dist/core/lisa-owned-hash-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lisa-owned-hash-ledger.d.ts","sourceRoot":"","sources":["../../src/core/lisa-owned-hash-ledger.ts"],"names":[],"mappings":"AACA,6EAA6E;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAqlCjC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,+BAA+B,EAAE,QAAQ,CACpD,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAw/BjC,CAAC"}
+{"version":3,"file":"lisa-owned-hash-ledger.d.ts","sourceRoot":"","sources":["../../src/core/lisa-owned-hash-ledger.ts"],"names":[],"mappings":"AACA,6EAA6E;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAwlCjC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,+BAA+B,EAAE,QAAQ,CACpD,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CA2/BjC,CAAC"}

package/dist/core/lisa-owned-hash-ledger.js

@@ -449,6 +449,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "7caa48fcba51e1e4bf21b909e51474be3b929907ffc35896b6de13aac6cb6782",
         "7d333dc10be8c810b9b5aca35ab7f6f60413134414d82bf0cdaedb4e6e3ca8da",
         "8dc942ac4edc2017d6b8277296c8f80542e7c024eef1bb65de609979d0ca9a0e",
+        "916b2b48a2b55c2090468c48c972b6c7c5fad39fb53956ceffebdd1ff0c69230",
         "9cab71562d01421d57c6719318a4d03a6249a45c1aea434db3ff26e3065eeb66",
         "9cfad1d691235fa70ccf97603eea2ef177bbded4a34d85aeedc41018c894b591",
         "aafd027c4b6092da15d0389f9e8dcedbd9105e9083057e2da39f78fd5f72e0df",
@@ -802,6 +803,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
         "6b0c13bf89dd62577baebb7e6e8ff7a0bbcb1e83b32c5a1b878a64c76d83d822",
         "822e4f9d2c3ad8fb184ff7fc880f6811004852fb731c7878b5a8a1a9532bceb8",
         "bc1118b05eaea3fc7b3409c96979d64e3dee0907118f3e84d735163f473f632a",
+        "cccc2f5ba33bc3abe03b850d3dd747c27553f985b9213d1b1a35297312fa1586",
         "e121219bbee1960a6bf88d1e2ba0b50587d63013e7872c56619c04182e8a7561",
         "efbf0d770c5547e9b7465eac4650c4ff01d427dee86fdb623a463a32023bcabf",
     ]),
@@ -813,6 +815,7 @@ export const LISA_OWNED_HASH_LEDGER = Object.freeze({
     ]),
     "scripts/lisa-mutation.mjs": Object.freeze([
         "03dda43b5813b5b6a083c1e0302ce3e9fec13818864ed38dce180cbdaa4e2de2",
+        "08855e056f353392e8072e8f868335f7fe4bde4f83a5affed4765ff53eea1129",
         "0cd013a51a81d8eeebced9f2646bdb3fe0a9247fcd74b57c03e95cc2db3fe7de",
         "0f5d9027e95d47745827adcd979e3c2355271066b6b84d661215dc6e895b3ac2",
         "0fe73e162ece6c4a8270b0d5d675d6927a62962e0ae9275239c6acfacd0ef6c8",
@@ -1551,6 +1554,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "7caa48fcba51e1e4bf21b909e51474be3b929907ffc35896b6de13aac6cb6782",
         "7d333dc10be8c810b9b5aca35ab7f6f60413134414d82bf0cdaedb4e6e3ca8da",
         "8dc942ac4edc2017d6b8277296c8f80542e7c024eef1bb65de609979d0ca9a0e",
+        "916b2b48a2b55c2090468c48c972b6c7c5fad39fb53956ceffebdd1ff0c69230",
         "9cab71562d01421d57c6719318a4d03a6249a45c1aea434db3ff26e3065eeb66",
         "9cfad1d691235fa70ccf97603eea2ef177bbded4a34d85aeedc41018c894b591",
         "aafd027c4b6092da15d0389f9e8dcedbd9105e9083057e2da39f78fd5f72e0df",
@@ -1858,6 +1862,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "6b0c13bf89dd62577baebb7e6e8ff7a0bbcb1e83b32c5a1b878a64c76d83d822",
         "822e4f9d2c3ad8fb184ff7fc880f6811004852fb731c7878b5a8a1a9532bceb8",
         "bc1118b05eaea3fc7b3409c96979d64e3dee0907118f3e84d735163f473f632a",
+        "cccc2f5ba33bc3abe03b850d3dd747c27553f985b9213d1b1a35297312fa1586",
         "e121219bbee1960a6bf88d1e2ba0b50587d63013e7872c56619c04182e8a7561",
         "efbf0d770c5547e9b7465eac4650c4ff01d427dee86fdb623a463a32023bcabf",
     ]),
@@ -1868,6 +1873,7 @@ export const LISA_OWNED_HASH_HISTORY_DERIVED = Object.freeze({
         "ce4bc224a102e3ac2bc29d8f2038eefd619129d4639c25954c93f05011f7f977",
     ]),
     "scripts/lisa-mutation.mjs": Object.freeze([
+        "08855e056f353392e8072e8f868335f7fe4bde4f83a5affed4765ff53eea1129",
         "0cd013a51a81d8eeebced9f2646bdb3fe0a9247fcd74b57c03e95cc2db3fe7de",
         "0f5d9027e95d47745827adcd979e3c2355271066b6b84d661215dc6e895b3ac2",
         "0fe73e162ece6c4a8270b0d5d675d6927a62962e0ae9275239c6acfacd0ef6c8",