@de-otio/repo-aegis-core 0.2.0

package/dist/trust-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-boundary.js","sourceRoot":"","sources":["../src/trust-boundary.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,qDAAqD;AACrD,EAAE;AACF,kEAAkE;AAClE,EAAE;AACF,oEAAoE;AACpE,uDAAuD;AACvD,EAAE;AACF,+DAA+D;AAC/D,mBAAmB;AACnB,mDAAmD;AACnD,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,oEAAoE;AACpE,yEAAyE;AAEzE,OAAO,EAAE,cAAc,EAAkB,MAAM,WAAW,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAiBjD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAmB,EACnB,QAAkB;IAElB,MAAM,IAAI,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,2BAA2B;IAC3B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,kEAAkE;IAClE,gBAAgB;IAChB,IAAI,IAAI,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpB,kBAAkB,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI;QACJ,kBAAkB;QAClB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,CAAgB,EAAE,CAAgB;IACvE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI;QAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IACvD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/trust-boundary.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=trust-boundary.test.d.ts.map

package/dist/trust-boundary.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-boundary.test.d.ts","sourceRoot":"","sources":["../src/trust-boundary.test.ts"],"names":[],"mappings":""}

package/dist/trust-boundary.test.js

@@ -0,0 +1,170 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright (C) 2026 Richard Myers and contributors.
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { execFileSync } from "node:child_process";
+import { mkdtempSync, mkdirSync, rmSync, realpathSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { computeTrustBoundary, trustBoundariesOverlap, } from "./trust-boundary.js";
+let tmp;
+before(() => {
+    tmp = realpathSync(mkdtempSync(join(tmpdir(), "repo-aegis-tb-")));
+});
+after(() => {
+    rmSync(tmp, { recursive: true, force: true });
+});
+function makeRepo(name, opts = {}) {
+    const dir = join(tmp, name);
+    mkdirSync(dir);
+    execFileSync("git", ["init", "-q", "--initial-branch=main", dir], { stdio: "ignore" });
+    if (opts.remote) {
+        execFileSync("git", ["-C", dir, "config", "remote.origin.url", opts.remote], {
+            stdio: "ignore",
+        });
+    }
+    if (opts.class) {
+        execFileSync("git", ["-C", dir, "config", "repo-aegis.class", opts.class], {
+            stdio: "ignore",
+        });
+    }
+    for (const eng of opts.engagements ?? []) {
+        execFileSync("git", ["-C", dir, "config", "--add", "repo-aegis.engagement", eng], {
+            stdio: "ignore",
+        });
+    }
+    return dir;
+}
+function makeRegistry(engagements, personalOrgs = []) {
+    return {
+        engagements,
+        alwaysBlock: [],
+        personalOrgs,
+        schemaVersion: 2,
+    };
+}
+const E_ALPHA = {
+    id: "alpha",
+    name: "Alpha",
+    markers: [],
+    githubOrgs: ["alpha-org", "alpha-mirror"],
+};
+const E_BETA = {
+    id: "beta",
+    name: "Beta",
+    markers: [],
+    githubOrgs: ["beta-org"],
+};
+describe("computeTrustBoundary", () => {
+    it("derives orgs from a single allow'd engagement", () => {
+        const repo = makeRepo("ct-cust", {
+            remote: "git@github.com:alpha-org/foo.git",
+            class: "customer-coupled",
+            engagements: ["alpha"],
+        });
+        const reg = makeRegistry([E_ALPHA, E_BETA]);
+        const tb = computeTrustBoundary(repo, reg);
+        assert.deepEqual([...tb.orgs].sort(), ["alpha-mirror", "alpha-org"]);
+        assert.equal(tb.fromRemoteFallback, false);
+        assert.equal(tb.class, "customer-coupled");
+    });
+    it("union'd orgs across multiple allow'd engagements", () => {
+        const repo = makeRepo("ct-multi", {
+            remote: "git@github.com:alpha-org/x.git",
+            class: "customer-coupled",
+            engagements: ["alpha", "beta"],
+        });
+        const reg = makeRegistry([E_ALPHA, E_BETA]);
+        const tb = computeTrustBoundary(repo, reg);
+        assert.deepEqual([...tb.orgs].sort(), ["alpha-mirror", "alpha-org", "beta-org"]);
+    });
+    it("public-eligible picks up personalOrgs", () => {
+        const repo = makeRepo("ct-pub", {
+            remote: "git@github.com:de-otio/foo.git",
+            class: "public-eligible",
+        });
+        const reg = makeRegistry([E_ALPHA], ["de-otio", "personal2"]);
+        const tb = computeTrustBoundary(repo, reg);
+        assert.deepEqual([...tb.orgs].sort(), ["de-otio", "personal2"]);
+        assert.equal(tb.fromRemoteFallback, false);
+    });
+    it("falls back to the remote when classification is empty", () => {
+        const repo = makeRepo("ct-fallback", {
+            remote: "git@github.com:de-otio/foo.git",
+            // No class, no engagements: defaults to private-strict.
+        });
+        const reg = makeRegistry([E_ALPHA]);
+        const tb = computeTrustBoundary(repo, reg);
+        assert.deepEqual([...tb.orgs], ["de-otio"]);
+        assert.equal(tb.fromRemoteFallback, true);
+        assert.equal(tb.class, "private-strict");
+        assert.equal(tb.classExplicit, false);
+    });
+    it("returns an empty set when there's no remote and no classification", () => {
+        const repo = makeRepo("ct-bare");
+        const reg = makeRegistry([E_ALPHA]);
+        const tb = computeTrustBoundary(repo, reg);
+        assert.equal(tb.orgs.size, 0);
+        assert.equal(tb.fromRemoteFallback, false);
+    });
+    it("classification beats remote (forks)", () => {
+        // Repo's remote is the customer org but it's allow'd into the
+        // personal world (e.g. an internal mirror of an upstream).
+        const repo = makeRepo("ct-fork", {
+            remote: "git@github.com:alpha-org/x.git",
+            class: "public-eligible",
+        });
+        const reg = makeRegistry([E_ALPHA], ["de-otio"]);
+        const tb = computeTrustBoundary(repo, reg);
+        assert.deepEqual([...tb.orgs], ["de-otio"]);
+        assert.equal(tb.fromRemoteFallback, false);
+    });
+});
+describe("trustBoundariesOverlap", () => {
+    const reg = makeRegistry([E_ALPHA, E_BETA], ["de-otio"]);
+    it("returns true when both repos sit in the same engagement orgs", () => {
+        const a = makeRepo("ov-a", { class: "customer-coupled", engagements: ["alpha"] });
+        const b = makeRepo("ov-b", { class: "customer-coupled", engagements: ["alpha"] });
+        assert.ok(trustBoundariesOverlap(computeTrustBoundary(a, reg), computeTrustBoundary(b, reg)));
+    });
+    it("returns true when repos share at least one githubOrg via different engagements", () => {
+        // Engagement γ shares one org with α
+        const E_GAMMA = {
+            id: "gamma",
+            name: "Gamma",
+            markers: [],
+            githubOrgs: ["alpha-mirror", "gamma-org"],
+        };
+        const reg2 = makeRegistry([E_ALPHA, E_GAMMA]);
+        const a = makeRepo("ov-shared-a", { class: "customer-coupled", engagements: ["alpha"] });
+        const b = makeRepo("ov-shared-b", { class: "customer-coupled", engagements: ["gamma"] });
+        assert.ok(trustBoundariesOverlap(computeTrustBoundary(a, reg2), computeTrustBoundary(b, reg2)));
+    });
+    it("returns false when engagements have disjoint orgs", () => {
+        const a = makeRepo("ov-x", { class: "customer-coupled", engagements: ["alpha"] });
+        const b = makeRepo("ov-y", { class: "customer-coupled", engagements: ["beta"] });
+        assert.ok(!trustBoundariesOverlap(computeTrustBoundary(a, reg), computeTrustBoundary(b, reg)));
+    });
+    it("returns false when one side is personal and the other customer-coupled", () => {
+        const a = makeRepo("ov-pers", {
+            remote: "git@github.com:de-otio/x.git",
+            class: "public-eligible",
+        });
+        const b = makeRepo("ov-cust", {
+            class: "customer-coupled",
+            engagements: ["alpha"],
+        });
+        assert.ok(!trustBoundariesOverlap(computeTrustBoundary(a, reg), computeTrustBoundary(b, reg)));
+    });
+    it("returns false when both sides have empty boundaries", () => {
+        const a = makeRepo("ov-empty-a");
+        const b = makeRepo("ov-empty-b");
+        assert.ok(!trustBoundariesOverlap(computeTrustBoundary(a, reg), computeTrustBoundary(b, reg)));
+    });
+    it("matches via remote fallback when neither repo is classified but they share an org", () => {
+        const a = makeRepo("ov-r-a", { remote: "git@github.com:de-otio/x.git" });
+        const b = makeRepo("ov-r-b", { remote: "git@github.com:de-otio/y.git" });
+        assert.ok(trustBoundariesOverlap(computeTrustBoundary(a, reg), computeTrustBoundary(b, reg)));
+    });
+});
+//# sourceMappingURL=trust-boundary.test.js.map

package/dist/trust-boundary.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-boundary.test.js","sourceRoot":"","sources":["../src/trust-boundary.test.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,qDAAqD;AACrD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAG7B,IAAI,GAAW,CAAC;AAEhB,MAAM,CAAC,GAAG,EAAE;IACV,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,KAAK,CAAC,GAAG,EAAE;IACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,SAAS,QAAQ,CACf,IAAY,EACZ,OAAoE,EAAE;IAEtE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5B,SAAS,CAAC,GAAG,CAAC,CAAC;IACf,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YAC3E,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YACzE,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACzC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,CAAC,EAAE;YAChF,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CACnB,WAAyB,EACzB,eAAyB,EAAE;IAE3B,OAAO;QACL,WAAW;QACX,WAAW,EAAE,EAAE;QACf,YAAY;QACZ,aAAa,EAAE,CAAC;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAe;IAC1B,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC;CAC1C,CAAC;AACF,MAAM,MAAM,GAAe;IACzB,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,CAAC,UAAU,CAAC;CACzB,CAAC;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,EAAE;YAC/B,MAAM,EAAE,kCAAkC;YAC1C,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,CAAC,OAAO,CAAC;SACvB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE;YAChC,MAAM,EAAE,gCAAgC;YACxC,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;SAC/B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE;YAC9B,MAAM,EAAE,gCAAgC;YACxC,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE;YACnC,MAAM,EAAE,gCAAgC;YACxC,wDAAwD;SACzD,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,8DAA8D;QAC9D,2DAA2D;QAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,EAAE;YAC/B,MAAM,EAAE,gCAAgC;YACxC,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEzD,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,oBAAoB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,qCAAqC;QACrC,MAAM,OAAO,GAAe;YAC1B,EAAE,EAAE,OAAO;YACX,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;SAC1C,CAAC;QACF,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,EAAE,CAAC,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,oBAAoB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,EAAE;YAC5B,MAAM,EAAE,8BAA8B;YACtC,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,EAAE;YAC5B,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,CAAC,OAAO,CAAC;SACvB,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,oBAAoB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,CAAC,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,oBAAoB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,oBAAoB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,47 @@
+export type { Engagement, Registry, ResolveResult } from "./registry.js";
+export type { RepoClass, RepoConfig } from "./repo.js";
+export type { DenySet, DenySetFile, DenySetOptions } from "./deny-set.js";
+export type { ScanHit, SkippedFile, ScanOptions } from "./scan.js";
+export type { RenderOptions, RenderedFile, RenderResult } from "./render.js";
+export type { PatternValidationResult } from "./regex-safety.js";
+export type { RedactionMode } from "./redaction.js";
+/**
+ * Canonical JSON shape for a repo across every CLI subcommand's output.
+ * Consumers of repo-aegis (other tools, AI agents) parse this once and
+ * reuse across allow/deny/status/check.
+ *
+ * `engagements` is **deliberately a list of bare ids** (`string[]`), not
+ * a list of {@link EngagementJson}. RepoJson describes the per-repo
+ * configured membership recorded by `git config --get-all
+ * repo-aegis.engagement` — it is the *reference set*, not a hydrated view
+ * of registry state. Resolving an id to its registry entry (name, active
+ * flag) is the consumer's responsibility, and the canonical hydrated
+ * shape is {@link EngagementJson}, which appears as a sibling field on
+ * commands that perform that resolution (allow, deny, status). The two
+ * are intentionally distinct and must not be conflated.
+ */
+export interface RepoJson {
+    cwd: string;
+    isGitRepo: boolean;
+    class: import("./repo.js").RepoClass;
+    classExplicit: boolean;
+    engagements: string[];
+}
+/**
+ * Canonical JSON shape for an engagement reference in CLI output.
+ * Includes only the fields needed to identify and act on the engagement;
+ * full {@link Engagement} bodies (with markers) are never emitted to JSON
+ * outputs that flow through hook context.
+ *
+ * Relationship to {@link RepoJson}: `RepoJson.engagements` is `string[]`
+ * (the per-repo membership of bare ids); commands that hydrate those ids
+ * against the registry (e.g. `allow`, `deny`, `status`) emit a separate
+ * sibling field of type `EngagementJson` (or `EngagementJson[]`) with the
+ * resolved name + active flag. The shapes are not interchangeable.
+ */
+export interface EngagementJson {
+    id: string;
+    name: string;
+    active: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAOA,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACzE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvD,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC1E,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACnE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7E,YAAY,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,WAAW,EAAE,SAAS,CAAC;IACrC,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;CACjB"}

package/dist/types.js

@@ -0,0 +1,8 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright (C) 2026 Richard Myers and contributors.
+// Central type re-export. Every module in core defines its own types, but
+// downstream consumers (cli, scan) should import from `@de-otio/repo-aegis-core`
+// (which re-exports everything via index.ts). This file just makes sure the
+// canonical TypeScript types are aggregated in one place for ease of review.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,qDAAqD;AACrD,0EAA0E;AAC1E,iFAAiF;AACjF,4EAA4E;AAC5E,6EAA6E"}

package/dist/working-tree.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Walk up from `startPath` until a directory containing `.git` (file or
+ * dir) is found. Returns the working tree root (the directory holding
+ * the `.git` entry), or `null` if none found within
+ * {@link MAX_ANCESTOR_HOPS} hops.
+ *
+ * Both git-worktree files (`.git` is a file containing `gitdir: ...`)
+ * and submodule `.git` files are recognised — the working tree is the
+ * directory containing the file in either case. The actual gitdir is
+ * resolved separately via {@link resolveGitDir}.
+ *
+ * `startPath` is realpath'd first to defeat symlink-tricks: a symlink
+ * inside repo A pointing to a file in repo B resolves to repo B, and
+ * the hook applies repo B's rules — not repo A's.
+ */
+export declare function findEnclosingWorkingTree(startPath: string): string | null;
+/**
+ * Given a working-tree root (from {@link findEnclosingWorkingTree}),
+ * return the absolute path of the actual git directory.
+ *
+ * - Regular repo: `<wt>/.git` is a directory; return that.
+ * - Worktree / submodule: `<wt>/.git` is a file with `gitdir: <path>`;
+ *   resolve `<path>` relative to `<wt>` and return the absolute form.
+ * - Anything else (`.git` missing, malformed `gitdir:` line): `null`.
+ *
+ * Used to find the right `config` file to read remotes from.
+ */
+export declare function resolveGitDir(workingTree: string): string | null;
+/**
+ * Read `remote.origin.url` from the working tree's git config and
+ * return the GitHub org (lowercased), or `null` if no remote, the
+ * remote isn't GitHub, or anything fails.
+ *
+ * Total: never throws. Used by the hook to decide whether a
+ * cross-tree write stays inside one trust boundary.
+ */
+export declare function getRemoteOrg(workingTree: string): string | null;
+//# sourceMappingURL=working-tree.d.ts.map

package/dist/working-tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"working-tree.d.ts","sourceRoot":"","sources":["../src/working-tree.ts"],"names":[],"mappings":"AAqBA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqBzE;AAcD;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAmBhE;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAkB/D"}

package/dist/working-tree.js

@@ -0,0 +1,133 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright (C) 2026 Richard Myers and contributors.
+//
+// Working-tree resolution for the path-aware PostToolUse hook.
+//
+// Given an arbitrary file path the agent just wrote, find the git
+// working tree it lives in (regular repo, worktree, or submodule), so
+// the hook can apply *that* repo's classification + deny set rather
+// than the launcher's cwd.
+//
+// Pure-ish: stat/realpath the path's ancestors; for org resolution,
+// shells out to `git config --file <wt>/.git/config` (or the worktree's
+// resolved gitdir/config). Total — never throws.
+import { execFileSync } from "node:child_process";
+import { existsSync, readFileSync, realpathSync, statSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { parseRemoteUrl } from "./remote-url.js";
+const MAX_ANCESTOR_HOPS = 64;
+/**
+ * Walk up from `startPath` until a directory containing `.git` (file or
+ * dir) is found. Returns the working tree root (the directory holding
+ * the `.git` entry), or `null` if none found within
+ * {@link MAX_ANCESTOR_HOPS} hops.
+ *
+ * Both git-worktree files (`.git` is a file containing `gitdir: ...`)
+ * and submodule `.git` files are recognised — the working tree is the
+ * directory containing the file in either case. The actual gitdir is
+ * resolved separately via {@link resolveGitDir}.
+ *
+ * `startPath` is realpath'd first to defeat symlink-tricks: a symlink
+ * inside repo A pointing to a file in repo B resolves to repo B, and
+ * the hook applies repo B's rules — not repo A's.
+ */
+export function findEnclosingWorkingTree(startPath) {
+    let real;
+    try {
+        // Resolve as much of the path as exists. If the file itself doesn't
+        // exist (rare in PostToolUse — the write just happened — but
+        // possible if the file was concurrently removed), walk up to the
+        // first existing ancestor and realpath that.
+        real = realpathExisting(startPath);
+    }
+    catch {
+        return null;
+    }
+    let cur = statSync(real).isDirectory() ? real : dirname(real);
+    for (let i = 0; i < MAX_ANCESTOR_HOPS; i++) {
+        const dotGit = join(cur, ".git");
+        if (existsSync(dotGit))
+            return cur;
+        const parent = dirname(cur);
+        if (parent === cur)
+            return null;
+        cur = parent;
+    }
+    return null;
+}
+function realpathExisting(p) {
+    let cur = resolve(p);
+    // Walk up until we find a path that exists (or hit /).
+    for (let i = 0; i < MAX_ANCESTOR_HOPS; i++) {
+        if (existsSync(cur))
+            return realpathSync(cur);
+        const parent = dirname(cur);
+        if (parent === cur)
+            throw new Error("path has no existing ancestor");
+        cur = parent;
+    }
+    throw new Error("path has no existing ancestor within hop budget");
+}
+/**
+ * Given a working-tree root (from {@link findEnclosingWorkingTree}),
+ * return the absolute path of the actual git directory.
+ *
+ * - Regular repo: `<wt>/.git` is a directory; return that.
+ * - Worktree / submodule: `<wt>/.git` is a file with `gitdir: <path>`;
+ *   resolve `<path>` relative to `<wt>` and return the absolute form.
+ * - Anything else (`.git` missing, malformed `gitdir:` line): `null`.
+ *
+ * Used to find the right `config` file to read remotes from.
+ */
+export function resolveGitDir(workingTree) {
+    const dotGit = join(workingTree, ".git");
+    if (!existsSync(dotGit))
+        return null;
+    const st = statSync(dotGit);
+    if (st.isDirectory())
+        return dotGit;
+    if (!st.isFile())
+        return null;
+    let body;
+    try {
+        body = readFileSync(dotGit, "utf8");
+    }
+    catch {
+        return null;
+    }
+    // Format: `gitdir: <path>\n`. The path may be relative to the .git
+    // file's directory.
+    const m = /^gitdir:\s*(.+?)\s*$/m.exec(body);
+    if (!m || !m[1])
+        return null;
+    const target = m[1];
+    return resolve(workingTree, target);
+}
+/**
+ * Read `remote.origin.url` from the working tree's git config and
+ * return the GitHub org (lowercased), or `null` if no remote, the
+ * remote isn't GitHub, or anything fails.
+ *
+ * Total: never throws. Used by the hook to decide whether a
+ * cross-tree write stays inside one trust boundary.
+ */
+export function getRemoteOrg(workingTree) {
+    const gitDir = resolveGitDir(workingTree);
+    if (gitDir === null)
+        return null;
+    const configPath = join(gitDir, "config");
+    if (!existsSync(configPath))
+        return null;
+    let url;
+    try {
+        url = execFileSync("git", ["config", "--file", configPath, "--get", "remote.origin.url"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+    }
+    catch {
+        return null;
+    }
+    if (url.length === 0)
+        return null;
+    const parsed = parseRemoteUrl(url);
+    return parsed?.org ?? null;
+}
+//# sourceMappingURL=working-tree.js.map

package/dist/working-tree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"working-tree.js","sourceRoot":"","sources":["../src/working-tree.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,qDAAqD;AACrD,EAAE;AACF,+DAA+D;AAC/D,EAAE;AACF,kEAAkE;AAClE,sEAAsE;AACtE,oEAAoE;AACpE,2BAA2B;AAC3B,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,iDAAiD;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAiB;IACxD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,oEAAoE;QACpE,6DAA6D;QAC7D,iEAAiE;QACjE,6CAA6C;QAC7C,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,GAAG,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IACjC,IAAI,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACrB,uDAAuD;IACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrE,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,WAAW,EAAE;QAAE,OAAO,MAAM,CAAC;IACpC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAC;IAE9B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,mEAAmE;IACnE,oBAAoB;IACpB,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,WAAmB;IAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAChB,KAAK,EACL,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAC9D,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAC1D,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC;AAC7B,CAAC"}

package/dist/working-tree.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=working-tree.test.d.ts.map

package/dist/working-tree.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"working-tree.test.d.ts","sourceRoot":"","sources":["../src/working-tree.test.ts"],"names":[],"mappings":""}

package/dist/working-tree.test.js

@@ -0,0 +1,162 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright (C) 2026 Richard Myers and contributors.
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { execFileSync } from "node:child_process";
+import { mkdtempSync, mkdirSync, writeFileSync, symlinkSync, rmSync, realpathSync, } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { findEnclosingWorkingTree, resolveGitDir, getRemoteOrg, } from "./working-tree.js";
+let tmp;
+before(() => {
+    tmp = realpathSync(mkdtempSync(join(tmpdir(), "repo-aegis-wt-")));
+});
+after(() => {
+    rmSync(tmp, { recursive: true, force: true });
+});
+function gitInit(dir) {
+    execFileSync("git", ["init", "-q", "--initial-branch=main", dir], { stdio: "ignore" });
+}
+function gitConfig(dir, key, value) {
+    execFileSync("git", ["-C", dir, "config", key, value], { stdio: "ignore" });
+}
+function commitNothing(dir) {
+    // Need at least one commit before `git worktree add`.
+    gitConfig(dir, "user.email", "test@example.com");
+    gitConfig(dir, "user.name", "Test");
+    writeFileSync(join(dir, "README.md"), "x");
+    execFileSync("git", ["-C", dir, "add", "README.md"], { stdio: "ignore" });
+    execFileSync("git", ["-C", dir, "commit", "-q", "-m", "initial"], { stdio: "ignore" });
+}
+describe("findEnclosingWorkingTree", () => {
+    it("finds the enclosing working tree of a file in a regular repo", () => {
+        const repo = join(tmp, "regular");
+        mkdirSync(repo);
+        gitInit(repo);
+        const file = join(repo, "src", "foo.ts");
+        mkdirSync(join(repo, "src"));
+        writeFileSync(file, "x");
+        assert.equal(findEnclosingWorkingTree(file), repo);
+    });
+    it("finds the working tree from a nested subdirectory", () => {
+        const repo = join(tmp, "nested");
+        mkdirSync(repo);
+        gitInit(repo);
+        const deep = join(repo, "a", "b", "c");
+        mkdirSync(deep, { recursive: true });
+        const file = join(deep, "deep.ts");
+        writeFileSync(file, "x");
+        assert.equal(findEnclosingWorkingTree(file), repo);
+    });
+    it("returns the worktree (not the parent repo) for a git worktree", () => {
+        const main = join(tmp, "main-repo");
+        mkdirSync(main);
+        gitInit(main);
+        commitNothing(main);
+        const wt = join(tmp, "wt-feature");
+        execFileSync("git", ["-C", main, "worktree", "add", "-q", "-b", "feat", wt], {
+            stdio: "ignore",
+        });
+        const file = join(wt, "newfile.ts");
+        writeFileSync(file, "x");
+        assert.equal(findEnclosingWorkingTree(file), wt);
+    });
+    it("returns null for a path outside any git repo", () => {
+        const outside = join(tmp, "no-git");
+        mkdirSync(outside);
+        writeFileSync(join(outside, "loose.txt"), "x");
+        assert.equal(findEnclosingWorkingTree(join(outside, "loose.txt")), null);
+    });
+    it("follows symlinks (resolves to the destination's working tree)", () => {
+        const repo = join(tmp, "sym-target");
+        mkdirSync(repo);
+        gitInit(repo);
+        const target = join(repo, "real.ts");
+        writeFileSync(target, "x");
+        const linkDir = join(tmp, "sym-link");
+        mkdirSync(linkDir);
+        const link = join(linkDir, "alias.ts");
+        symlinkSync(target, link);
+        // Even though `link` lives outside `repo`, realpath resolves to
+        // inside `repo`, and that's what we apply rules to.
+        assert.equal(findEnclosingWorkingTree(link), repo);
+    });
+    it("works when the file does not yet exist (walks up to first existing ancestor)", () => {
+        const repo = join(tmp, "no-file");
+        mkdirSync(repo);
+        gitInit(repo);
+        const ghost = join(repo, "src", "not-yet.ts");
+        // Don't create the file or its dir.
+        assert.equal(findEnclosingWorkingTree(ghost), repo);
+    });
+});
+describe("resolveGitDir", () => {
+    it("returns <wt>/.git for a regular repo", () => {
+        const repo = join(tmp, "rgd-regular");
+        mkdirSync(repo);
+        gitInit(repo);
+        const gitDir = resolveGitDir(repo);
+        assert.equal(gitDir, join(repo, ".git"));
+    });
+    it("resolves the linked gitdir for a worktree", () => {
+        const main = join(tmp, "rgd-main");
+        mkdirSync(main);
+        gitInit(main);
+        commitNothing(main);
+        const wt = join(tmp, "rgd-wt");
+        execFileSync("git", ["-C", main, "worktree", "add", "-q", "-b", "feat", wt], {
+            stdio: "ignore",
+        });
+        const gitDir = resolveGitDir(wt);
+        assert.ok(gitDir !== null);
+        // Should point to <main>/.git/worktrees/<name>
+        assert.match(gitDir, /worktrees/);
+    });
+    it("returns null when .git is missing", () => {
+        const dir = join(tmp, "rgd-bare");
+        mkdirSync(dir);
+        assert.equal(resolveGitDir(dir), null);
+    });
+});
+describe("getRemoteOrg", () => {
+    it("parses GitHub HTTPS URLs", () => {
+        const repo = join(tmp, "remote-https");
+        mkdirSync(repo);
+        gitInit(repo);
+        gitConfig(repo, "remote.origin.url", "https://github.com/Foo-Org/Bar.git");
+        assert.equal(getRemoteOrg(repo), "foo-org");
+    });
+    it("parses GitHub SSH URLs", () => {
+        const repo = join(tmp, "remote-ssh");
+        mkdirSync(repo);
+        gitInit(repo);
+        gitConfig(repo, "remote.origin.url", "git@github.com:de-otio/repo-aegis.git");
+        assert.equal(getRemoteOrg(repo), "de-otio");
+    });
+    it("parses ssh-config-alias URLs (`github.com-personal`)", () => {
+        const repo = join(tmp, "remote-alias");
+        mkdirSync(repo);
+        gitInit(repo);
+        gitConfig(repo, "remote.origin.url", "git@github.com-personal:de-otio/foo.git");
+        assert.equal(getRemoteOrg(repo), "de-otio");
+    });
+    it("returns null when there is no origin remote", () => {
+        const repo = join(tmp, "remote-none");
+        mkdirSync(repo);
+        gitInit(repo);
+        assert.equal(getRemoteOrg(repo), null);
+    });
+    it("returns null for a non-GitHub remote", () => {
+        const repo = join(tmp, "remote-non-gh");
+        mkdirSync(repo);
+        gitInit(repo);
+        gitConfig(repo, "remote.origin.url", "https://gitlab.com/x/y.git");
+        assert.equal(getRemoteOrg(repo), null);
+    });
+    it("returns null when the directory is not a working tree", () => {
+        const dir = join(tmp, "remote-bare");
+        mkdirSync(dir);
+        assert.equal(getRemoteOrg(dir), null);
+    });
+});
+//# sourceMappingURL=working-tree.test.js.map

package/dist/working-tree.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"working-tree.test.js","sourceRoot":"","sources":["../src/working-tree.test.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,qDAAqD;AACrD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,WAAW,EACX,SAAS,EACT,aAAa,EACb,WAAW,EACX,MAAM,EACN,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,aAAa,EACb,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,IAAI,GAAW,CAAC;AAEhB,MAAM,CAAC,GAAG,EAAE;IACV,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,KAAK,CAAC,GAAG,EAAE;IACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,GAAW;IAC1B,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,GAAW,EAAE,KAAa;IACxD,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,sDAAsD;IACtD,SAAS,CAAC,GAAG,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC;IACjD,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACzC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7B,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACjC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACvC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACnC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACpC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACnC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE;YAC3E,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QACpC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACpC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACrC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACtC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACvC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1B,gEAAgE;QAChE,oDAAoD;QACpD,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QAC9C,oCAAoC;QACpC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACtC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACnC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/B,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE;YAC3E,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;QAC3B,+CAA+C;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAO,EAAE,WAAW,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAClC,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACvC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,SAAS,CAAC,IAAI,EAAE,mBAAmB,EAAE,oCAAoC,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,SAAS,CAAC,IAAI,EAAE,mBAAmB,EAAE,uCAAuC,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACvC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,SAAS,CAAC,IAAI,EAAE,mBAAmB,EAAE,yCAAyC,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACtC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACxC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,SAAS,CAAC,IAAI,EAAE,mBAAmB,EAAE,4BAA4B,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACrC,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}