@descryy/core 0.3.0 → 0.5.0

package/dist/sources/git/diff.js

@@ -1,79 +1,25 @@
 /**
- * `gitDiff` — a live textual diff between two refs. §18's `get_git_diff`.
- *
- * `changedFiles` (`history.ts`) already answers "which files changed" — a
- * bare path list. This answers "what changed in them" — per-file status and
- * line counts always, plus the actual unified-diff patch text when it is
- * cheap enough to hand to a model. §4's own worry ("the client's context
- * window is not yours to spend") is the reason a patch is never returned
- * unconditionally: a single large file rewrite can be tens of thousands of
- * tokens, and a caller that wanted only "did this file change and how much"
- * pays that cost with no way to decline it. `patchOmittedReason` names why,
- * rather than silently shrinking the reply — the empty-denominator rule
- * applies to a dropped patch exactly as it does to a dropped finding.
- *
- * Two size caps here, because one of them bounds nothing on its own:
- * `maxPatchBytes` per file, and `maxTotalPatchBytes` across every patch in the
- * reply. The second exists because a real 48-file branch diff, with 44 patches
- * each *under* the per-file cap, summed to 229KB and hard-failed the call —
- * the reply never reached the caller at all, which is the one failure mode a
- * disclosure cannot repair after the fact.
- *
- * And a third above this file, for the same reason one level out: the same
- * diff re-run with `maxTotalPatchBytes` correctly enforced still failed, at
- * 84,516 characters, because these two caps bound patch text and a reply is
- * not only patch text. `MAX_REPLY_BYTES` and `ToolAnswer.fitToBudget` in the
- * MCP layer bound the serialized reply itself. Nothing here needs to know
- * about that; it is noted because "the aggregate cap is enforced" was once
- * mistaken for "the call now succeeds," and they are different claims.
- *
- * One `git diff` invocation for every file at once, not one per file — a
- * PR touching fifty files would otherwise spawn fifty processes. The output
- * is a concatenation of per-file blocks, each beginning with a line
- * `diff --git a/<path> b/<path>`; parsing splits on that boundary and reads
- * the more specific `rename from`/`rename to`/`new file mode`/
- * `deleted file mode`/`Binary files … differ`/`---`/`+++` lines within each
- * block, which are unambiguous where the `diff --git` header line alone is
- * not (a path containing the literal substring `" b/"` defeats that header's
- * own regex — an accepted, narrow gap, not a silent one, since every other
- * line used here does not share it).
+ * §18's `get_git_diff`: live diff, patch text only when cheap — `patchOmittedReason` names why otherwise.
+ * Two caps here (`maxPatchBytes` per file, `maxTotalPatchBytes` total) plus a third in the MCP layer
+ * (`MAX_REPLY_BYTES`) — measured real failures at 229KB and 84,516 chars before these existed.
  */
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { applySerializedSizeBudget } from "../../budget/index.js";
-import { cleanGitEnv } from "./env.js";
+import { cleanGitEnv, HARDENED_GIT_CONFIG_ARGS } from "./env.js";
 const execFileAsync = promisify(execFile);
-// Always strips GIT_DIR/GIT_WORK_TREE/GIT_INDEX_FILE/GIT_COMMON_DIR — see env.ts.
+// Strips GIT_DIR/GIT_WORK_TREE/GIT_INDEX_FILE/GIT_COMMON_DIR, applies HARDENED_GIT_CONFIG_ARGS (env.ts, B-11).
 function run(command, args, options) {
-    return execFileAsync(command, args, {
+    return execFileAsync(command, [...HARDENED_GIT_CONFIG_ARGS, ...args], {
         ...options,
         encoding: "utf8",
         env: cleanGitEnv(),
     });
 }
 const DEFAULT_MAX_PATCH_BYTES = 20_000;
-/**
- * The cap on the sum of every returned patch. A per-file cap bounds no total:
- * 44 files each under the 20,000-byte per-file cap summed to 229KB and
- * hard-failed an ordinary 48-file branch diff before the reply was ever
- * returned.
- *
- * Was 80,000, lowered after the same diff was re-run against that value and
- * the call *still* failed, at 84,516 characters: 80,000 bytes of patch text
- * leaves nothing for the 48 per-file rows, the disclosures and the envelope
- * that surround them, so a budget that large is one the reply can never
- * actually afford to spend. 40,000 leaves the reply's own size ceiling
- * (`MAX_REPLY_BYTES`, in the MCP layer) room to be a backstop rather than the
- * thing that fires on every ordinary wide diff — which matters because this
- * budget's reason names an action the caller can take and that ceiling's does
- * not. A starting value, as before, not a measurement.
- */
+/** Cap on the sum of every returned patch — a per-file cap alone let 44 files summed to 229KB hard-fail a real diff. Was 80,000, lowered after 84,516 chars still failed. Starting value. */
 const DEFAULT_MAX_TOTAL_PATCH_BYTES = 40_000;
-/**
- * The stable prefix of `patchOmittedReason` when the *total* budget, not the
- * per-file cap, is what withheld a patch. Exported so a caller can tell the
- * two apart without matching on prose it does not own.
- */
+/** Stable prefix of `patchOmittedReason` when the total budget, not the per-file cap, withheld a patch. */
 export const TOTAL_PATCH_BUDGET_REASON_PREFIX = "the reply's total patch budget";
 function stripPrefix(path, prefix) {
     return path.startsWith(prefix) ? path.slice(prefix.length) : path;
@@ -138,7 +84,9 @@ function parseDiffBlock(block) {
 async function runGitDiff(cwd, revisionArgs, options) {
     const maxPatchBytes = options.maxPatchBytes ?? DEFAULT_MAX_PATCH_BYTES;
     const maxTotalPatchBytes = options.maxTotalPatchBytes ?? DEFAULT_MAX_TOTAL_PATCH_BYTES;
-    const args = ["diff", "-M", ...revisionArgs];
+    // --no-ext-diff (B-11): renders real patch text, so a repo-local
+    // `diff.external` would actually run here otherwise.
+    const args = ["diff", "--no-ext-diff", "-M", ...revisionArgs];
     if (options.files !== undefined && options.files.length > 0)
         args.push("--", ...options.files);
     const { stdout } = await run("git", args, { cwd, maxBuffer: 256 * 1024 * 1024 });
@@ -170,19 +118,13 @@ async function runGitDiff(cwd, revisionArgs, options) {
                     : null,
         });
     }
-    // The aggregate cap, applied after every per-file decision: a file whose
-    // patch was already withheld (binary, or over its own cap) costs nothing
-    // here and keeps the reason it already has.
+    // Aggregate cap, applied after per-file decisions — a file already withheld
+    // (binary or over its own cap) costs nothing here.
     return applySerializedSizeBudget(files, {
         maxTotalBytes: maxTotalPatchBytes,
         sizeOf: (f) => (f.patch === null ? 0 : Buffer.byteLength(f.patch, "utf8")),
-        // Short on purpose. This reason lands on *every* file past the boundary —
-        // 187 of 200 on a wide diff — so the advice tail it used to carry ("narrow
-        // files, or raise maxTotalPatchBytes") was paid for once per file to say
-        // the same thing each time, and measured at ~30KB on that diff: more than
-        // the patches it was explaining the absence of. The caller is told what to
-        // do once, in the reply's own note, which is where advice that is identical
-        // for every file belongs.
+        // Short on purpose: this reason repeats per file (187 of 200 on one wide
+        // diff), so a longer advice tail measured ~30KB — bigger than the patches it explained.
         withhold: (f, spentBytes) => ({
             ...f,
             patch: null,
@@ -191,24 +133,135 @@ async function runGitDiff(cwd, revisionArgs, options) {
         }),
     }).items;
 }
-/**
- * `base...head` (three dots), matching `changedFiles`'s own reasoning: two
- * dots would include everything changed on `base` since the branch point,
- * misattributing someone else's history to this diff.
- */
+/** `base...head` (three dots) — two dots would include everything changed on `base` since the branch point. */
 export async function gitDiff(cwd, base, head = "HEAD", options = {}) {
     return runGitDiff(cwd, [`${base}...${head}`], options);
 }
 /**
- * The working-tree counterpart to {@link gitDiff}: a live diff against
- * uncommitted state, which no two-revision form of `git diff` can express
- * (`HEAD...HEAD` is empty by construction). Reuses the exact same block
- * parser, rename detection and patch cap `gitDiff` does — see
- * `DEC-NEXT-working-tree-diff-in-core` for why a second parser was rejected.
+ * Working-tree counterpart to {@link gitDiff}: a live diff against uncommitted state, which no
+ * two-revision `git diff` form can express. Reuses the same parser (`DEC-NEXT-working-tree-diff-in-core`).
  */
 export async function gitWorkingTreeDiff(cwd, options = {}) {
     const scope = options.scope ?? "unstaged";
     const revisionArgs = scope === "staged" ? ["--cached"] : scope === "all" ? ["HEAD"] : [];
     return runGitDiff(cwd, revisionArgs, options);
 }
+/** Untracked files past this many are counted and not diffed. */
+const DEFAULT_MAX_UNTRACKED = 200;
+/**
+ * The working tree as a change set, including files git has never seen.
+ *
+ * ## Why untracked needs its own mechanism
+ *
+ * No form of `git diff` reports an untracked file. `git diff HEAD` compares
+ * against what the index and `HEAD` hold, and a file git has never seen is in
+ * neither — so a working-tree mode built on the scopes above alone still misses
+ * the most common shape of work in progress: a new file, written, not yet
+ * added. That is exactly the case this was built for.
+ *
+ * ## `--no-index` rather than `add -N`
+ *
+ * The usual trick is `git add -N` to give the file an intent-to-add entry, then
+ * diff normally. **It writes to the index**, and a read tool that mutates the
+ * caller's repository to answer a question is not a read tool — it would also
+ * race any real `git add` the developer runs while it works.
+ *
+ * `git diff --no-index -- /dev/null <path>` needs no index and emits exactly the
+ * `new file mode` block the shared parser already handles, with the real path.
+ * It exits non-zero when the files differ, which for this call is always, so a
+ * non-zero exit here is the success case and is read for its stdout.
+ *
+ * ## `--exclude-standard` is load-bearing
+ *
+ * Without it the first answer on any real repository is a dependency directory
+ * reported as the developer's uncommitted work.
+ */
+export async function gitWorkingTreeChange(cwd, options = {}) {
+    const all = await gitWorkingTreeDiff(cwd, options);
+    const tracked = all.filter((file) => !isExcluded(file.path, options.exclude));
+    if (options.includeUntracked !== true) {
+        return { files: tracked, untrackedTotal: 0, untrackedTruncated: false };
+    }
+    const maxUntracked = options.maxUntracked ?? DEFAULT_MAX_UNTRACKED;
+    const listArgs = ["ls-files", "--others", "--exclude-standard"];
+    if (options.files !== undefined && options.files.length > 0) {
+        listArgs.push("--", ...options.files);
+    }
+    const { stdout } = await run("git", listArgs, { cwd, maxBuffer: 64 * 1024 * 1024 });
+    const untracked = stdout
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line !== "" && !isExcluded(line, options.exclude))
+        .sort();
+    const diffed = untracked.slice(0, maxUntracked);
+    const added = [];
+    for (const path of diffed) {
+        let text;
+        try {
+            const result = await run("git", ["diff", "--no-index", "--", "/dev/null", path], {
+                cwd,
+                maxBuffer: 256 * 1024 * 1024,
+            });
+            text = result.stdout;
+        }
+        catch (error) {
+            // Non-zero exit is the ordinary outcome here: `--no-index` reports a
+            // difference the way `diff(1)` does. The patch is on the error.
+            const stdout = error.stdout;
+            if (typeof stdout !== "string" || stdout.trim() === "")
+                continue;
+            text = stdout;
+        }
+        const parsed = parseUntrackedBlock(text, path, options);
+        if (parsed !== null)
+            added.push(parsed);
+    }
+    return {
+        files: [...tracked, ...added].sort((a, b) => a.path.localeCompare(b.path)),
+        untrackedTotal: untracked.length,
+        untrackedTruncated: untracked.length > diffed.length,
+    };
+}
+/**
+ * Is this path inside an excluded directory?
+ *
+ * A segment-boundary prefix match rather than `startsWith`: `.descry` must
+ * exclude `.descry/graph.db` and leave `src/.descryfile.ts` alone.
+ */
+function isExcluded(path, exclude) {
+    if (exclude === undefined)
+        return false;
+    return exclude.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));
+}
+/** One `--no-index` block, through the same cap rules every other patch gets. */
+function parseUntrackedBlock(text, path, options) {
+    const block = text.split(/\n(?=diff --git )/).find((b) => b.startsWith("diff --git "));
+    if (block === undefined)
+        return null;
+    const parsed = parseDiffBlock(block);
+    if (parsed === null)
+        return null;
+    const maxPatchBytes = options.maxPatchBytes ?? DEFAULT_MAX_PATCH_BYTES;
+    const bytes = Buffer.byteLength(block, "utf8");
+    const overCap = !parsed.binary && bytes > maxPatchBytes;
+    return {
+        // `--no-index` was given a path relative to `cwd` and echoes it back, but
+        // the finding is reported under the path the caller asked about.
+        path,
+        fromPath: null,
+        // A file git has never seen is an addition, whatever the block header says
+        // about `/dev/null` on the left.
+        status: "A",
+        binary: parsed.binary,
+        additions: parsed.binary ? null : parsed.additions,
+        deletions: parsed.binary ? null : 0,
+        patch: parsed.binary || overCap ? null : block,
+        patchOmittedReason: parsed.binary
+            ? "binary file — no textual patch"
+            : overCap
+                ? `diff for this file is ${bytes} bytes, over the ${maxPatchBytes}-byte cap — narrow ` +
+                    '"files" to fetch it on its own, or raise "maxPatchBytes"'
+                : null,
+    };
+}
 //# sourceMappingURL=diff.js.map

package/dist/sources/git/diff.js.map

@@ -1 +1 @@
-{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../../src/sources/git/diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,kFAAkF;AAClF,SAAS,GAAG,CACV,OAAe,EACf,IAAuB,EACvB,OAA4C;IAE5C,OAAO,aAAa,CAAC,OAAO,EAAE,IAAgB,EAAE;QAC9C,GAAG,OAAO;QACV,QAAQ,EAAE,MAAe;QACzB,GAAG,EAAE,WAAW,EAAE;KACnB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAE7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,gCAAgC,CAAC;AAuCjF,SAAS,WAAW,CAAC,IAAY,EAAE,MAAc;IAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAEnE,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,KAAK,GAAG,IAAI,CAAC;aAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,SAAS,GAAG,IAAI,CAAC;aAC3D,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACzC,QAAQ,GAAG,IAAI,CAAC;YAChB,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACzC,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAC5C,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,QAAQ;gBAAE,QAAQ,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACtE,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,WAAW;gBAAE,MAAM,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;IAC/D,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAErD,MAAM,MAAM,GAA0B,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAE3F,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;QAC1C,MAAM;QACN,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACjC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;KAClC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAW,EACX,YAA+B,EAC/B,OAAuB;IAEvB,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACvE,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,6BAA6B,CAAC;IACvF,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAE/F,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACjD,MAAM,KAAK,GAAkB,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,SAAS;QAC/C,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAE9B,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,GAAG,aAAa,CAAC;QAExD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;YAClD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;YAClD,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;YAC9C,kBAAkB,EAAE,MAAM,CAAC,MAAM;gBAC/B,CAAC,CAAC,gCAAgC;gBAClC,CAAC,CAAC,OAAO;oBACP,CAAC,CAAC,yBAAyB,KAAK,oBAAoB,aAAa,qBAAqB;wBACpF,0DAA0D;oBAC5D,CAAC,CAAC,IAAI;SACX,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,4CAA4C;IAC5C,OAAO,yBAAyB,CAAC,KAAK,EAAE;QACtC,aAAa,EAAE,kBAAkB;QACjC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,0BAA0B;QAC1B,QAAQ,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YAC5B,GAAG,CAAC;YACJ,KAAK,EAAE,IAAI;YACX,kBAAkB,EAChB,GAAG,gCAAgC,OAAO,kBAAkB,2BAA2B;gBACvF,IAAI,UAAU,0BAA0B;SAC3C,CAAC;KACH,CAAC,CAAC,KAAK,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAW,EACX,IAAY,EACZ,IAAI,GAAG,MAAM,EACb,UAA0B,EAAE;IAE5B,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,MAAM,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC;AAcD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,UAAqC,EAAE;IAEvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC;IAC1C,MAAM,YAAY,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,OAAO,UAAU,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC"}
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../../src/sources/git/diff.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AAEjE,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,+GAA+G;AAC/G,SAAS,GAAG,CACV,OAAe,EACf,IAAuB,EACvB,OAA4C;IAE5C,OAAO,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,wBAAwB,EAAE,GAAG,IAAI,CAAa,EAAE;QAChF,GAAG,OAAO;QACV,QAAQ,EAAE,MAAe;QACzB,GAAG,EAAE,WAAW,EAAE;KACnB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC,6LAA6L;AAC7L,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAE7C,2GAA2G;AAC3G,MAAM,CAAC,MAAM,gCAAgC,GAAG,gCAAgC,CAAC;AAoCjF,SAAS,WAAW,CAAC,IAAY,EAAE,MAAc;IAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAEnE,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,KAAK,GAAG,IAAI,CAAC;aAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,SAAS,GAAG,IAAI,CAAC;aAC3D,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACzC,QAAQ,GAAG,IAAI,CAAC;YAChB,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACzC,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAC5C,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,QAAQ;gBAAE,QAAQ,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACtE,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,WAAW;gBAAE,MAAM,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;IAC/D,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAErD,MAAM,MAAM,GAA0B,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAE3F,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;QAC1C,MAAM;QACN,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACjC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;KAClC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAW,EACX,YAA+B,EAC/B,OAAuB;IAEvB,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACvE,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,6BAA6B,CAAC;IACvF,iEAAiE;IACjE,qDAAqD;IACrD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAE/F,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACjD,MAAM,KAAK,GAAkB,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,SAAS;QAC/C,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAE9B,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,GAAG,aAAa,CAAC;QAExD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;YAClD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;YAClD,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;YAC9C,kBAAkB,EAAE,MAAM,CAAC,MAAM;gBAC/B,CAAC,CAAC,gCAAgC;gBAClC,CAAC,CAAC,OAAO;oBACP,CAAC,CAAC,yBAAyB,KAAK,oBAAoB,aAAa,qBAAqB;wBACpF,0DAA0D;oBAC5D,CAAC,CAAC,IAAI;SACX,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,mDAAmD;IACnD,OAAO,yBAAyB,CAAC,KAAK,EAAE;QACtC,aAAa,EAAE,kBAAkB;QACjC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1E,yEAAyE;QACzE,wFAAwF;QACxF,QAAQ,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YAC5B,GAAG,CAAC;YACJ,KAAK,EAAE,IAAI;YACX,kBAAkB,EAChB,GAAG,gCAAgC,OAAO,kBAAkB,2BAA2B;gBACvF,IAAI,UAAU,0BAA0B;SAC3C,CAAC;KACH,CAAC,CAAC,KAAK,CAAC;AACX,CAAC;AAED,+GAA+G;AAC/G,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAW,EACX,IAAY,EACZ,IAAI,GAAG,MAAM,EACb,UAA0B,EAAE;IAE5B,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,MAAM,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,UAAqC,EAAE;IAEvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC;IAC1C,MAAM,YAAY,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,OAAO,UAAU,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,iEAAiE;AACjE,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAqClC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAW,EACX,UAAuC,EAAE;IAEzC,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;IACnE,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,MAAM;SACrB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;SACnE,IAAI,EAAE,CAAC;IAEV,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAChD,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE;gBAC/E,GAAG;gBACH,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;aAC7B,CAAC,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,gEAAgE;YAChE,MAAM,MAAM,GAAI,KAA6B,CAAC,MAAM,CAAC;YACrD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,SAAS;YACjE,IAAI,GAAG,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1E,cAAc,EAAE,SAAS,CAAC,MAAM;QAChC,kBAAkB,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;KACrD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,IAAY,EAAE,OAAsC;IACtE,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,iFAAiF;AACjF,SAAS,mBAAmB,CAC1B,IAAY,EACZ,IAAY,EACZ,OAAuB;IAEvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;IACvF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEjC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,GAAG,aAAa,CAAC;IACxD,OAAO;QACL,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI;QACJ,QAAQ,EAAE,IAAI;QACd,2EAA2E;QAC3E,iCAAiC;QACjC,MAAM,EAAE,GAAG;QACX,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;QAClD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;QAC9C,kBAAkB,EAAE,MAAM,CAAC,MAAM;YAC/B,CAAC,CAAC,gCAAgC;YAClC,CAAC,CAAC,OAAO;gBACP,CAAC,CAAC,yBAAyB,KAAK,oBAAoB,aAAa,qBAAqB;oBACpF,0DAA0D;gBAC5D,CAAC,CAAC,IAAI;KACX,CAAC;AACJ,CAAC"}

package/dist/sources/git/env.d.ts

@@ -1,2 +1,9 @@
+/** B-11: `cwd` may be an untrusted repo (e.g. an extracted archive with an
+ *  attacker-authored `.git/config`). `GIT_CONFIG_NOSYSTEM` closes only the
+ *  system-config layer, not repo-local config — see `HARDENED_GIT_CONFIG_ARGS`. */
 export declare function cleanGitEnv(base?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/** `-c` overrides ahead of every git subcommand against a caller-supplied repo (B-11): neutralises `core.fsmonitor`/`core.pager` (external-command hooks; `GIT_CONFIG_NOSYSTEM` can't reach repo-local config), zero behavioural cost since output here never hits a tty.
+ *  `diff.external` handled separately via `--no-ext-diff` at its two call sites (`diff.ts`, `multipr/fingerprint.ts`).
+ *  `filter.*.clean` is NOT addressed — driver name is dynamic per-repo; unreachable through any call here today, disclosed as a residual gap. */
+export declare const HARDENED_GIT_CONFIG_ARGS: readonly string[];
 //# sourceMappingURL=env.d.ts.map

package/dist/sources/git/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/sources/git/env.ts"],"names":[],"mappings":"AAeA,wBAAgB,WAAW,CAAC,IAAI,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAIpF"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/sources/git/env.ts"],"names":[],"mappings":"AAMA;;mFAEmF;AACnF,wBAAgB,WAAW,CAAC,IAAI,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAKpF;AAED;;iJAEiJ;AACjJ,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAA2D,CAAC"}

package/dist/sources/git/env.js

@@ -1,21 +1,20 @@
 /**
- * The variables git exports into every hook and injects into every
- * subprocess it spawns. Left in place, an inherited `GIT_DIR` (or
- * `GIT_WORK_TREE`/`GIT_INDEX_FILE`/`GIT_COMMON_DIR`) overrides repository
- * discovery even when a git subprocess is given an explicit `cwd` — confirmed
- * directly: `GIT_DIR=<other>/.git` with `cwd` pointed elsewhere still
- * initialises `<other>/.git`, not a repository at `cwd`.
- *
- * Anything here that shells out to git against a caller-supplied path must
- * not inherit these, or a caller running inside a git hook (which always has
- * `GIT_DIR` set) silently operates on the hook's own repository instead of
- * the one it was given.
+ * Git env vars that override repo discovery even with an explicit `cwd` (confirmed: `GIT_DIR` elsewhere still wins). Must be stripped before shelling out against a
+ * caller-supplied path, or a caller inside a git hook silently operates on the hook's own repo.
  */
 const LEAKY_GIT_VARS = ["GIT_DIR", "GIT_WORK_TREE", "GIT_INDEX_FILE", "GIT_COMMON_DIR"];
+/** B-11: `cwd` may be an untrusted repo (e.g. an extracted archive with an
+ *  attacker-authored `.git/config`). `GIT_CONFIG_NOSYSTEM` closes only the
+ *  system-config layer, not repo-local config — see `HARDENED_GIT_CONFIG_ARGS`. */
 export function cleanGitEnv(base = process.env) {
     const env = { ...base };
     for (const key of LEAKY_GIT_VARS)
         delete env[key];
+    env["GIT_CONFIG_NOSYSTEM"] = "1";
     return env;
 }
+/** `-c` overrides ahead of every git subcommand against a caller-supplied repo (B-11): neutralises `core.fsmonitor`/`core.pager` (external-command hooks; `GIT_CONFIG_NOSYSTEM` can't reach repo-local config), zero behavioural cost since output here never hits a tty.
+ *  `diff.external` handled separately via `--no-ext-diff` at its two call sites (`diff.ts`, `multipr/fingerprint.ts`).
+ *  `filter.*.clean` is NOT addressed — driver name is dynamic per-repo; unreachable through any call here today, disclosed as a residual gap. */
+export const HARDENED_GIT_CONFIG_ARGS = ["-c", "core.fsmonitor=false", "-c", "core.pager=cat"];
 //# sourceMappingURL=env.js.map

package/dist/sources/git/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/sources/git/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,CAAU,CAAC;AAEjG,MAAM,UAAU,WAAW,CAAC,OAA0B,OAAO,CAAC,GAAG;IAC/D,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,cAAc;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/sources/git/env.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,CAAU,CAAC;AAEjG;;mFAEmF;AACnF,MAAM,UAAU,WAAW,CAAC,OAA0B,OAAO,CAAC,GAAG;IAC/D,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,cAAc;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClD,GAAG,CAAC,qBAAqB,CAAC,GAAG,GAAG,CAAC;IACjC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;iJAEiJ;AACjJ,MAAM,CAAC,MAAM,wBAAwB,GAAsB,CAAC,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC"}

package/dist/sources/git/history.d.ts

@@ -1,24 +1,6 @@
 /**
- * Reading git history.
- *
- * No dependency: `git` is invoked directly. A library would buy parsing help and
- * cost a dependency in a package that has none by design, and the format below
- * is chosen so parsing is unambiguous rather than clever.
- *
- * ## Renames are resolved, not ignored
- *
- * `CHANGES_WITH` is file-to-file, and `FILE` identity is DEC-004's documented
- * path fallback — a file's only stable name *is* its path. So a rename silently
- * splits a file's history in two: the co-change weight built up over two years
- * resets to zero, and nothing in the output reveals it happened. That is the
- * exact failure DEC-004 exists to prevent, arriving through the one node type
- * that cannot avoid it.
- *
- * The fix is `-M` plus a canonicalisation pass: history is walked newest-first,
- * and every historical path is mapped forward to the name the file has today. It
- * makes DEC-004's guarantee total for files that git can *follow*; where git's
- * rename detection fails (a rewrite with no similarity), the guarantee stays
- * partial and that is now a bounded, stated gap rather than an unbounded one.
+ * Reading git history. No dependency: git invoked directly, no parsing library. Renames are resolved, not ignored: FILE identity is path-based (DEC-004), so an unresolved rename would silently reset co-change weight to zero.
+ * `-M` plus a newest-first canonicalisation pass maps every historical path forward to today's name — total where git can follow the rename, a disclosed partial gap where it can't (a rewrite with no similarity match).
  */
 export interface CommitChange {
     /** Path as it is known **today**, after following renames forward. */
@@ -42,15 +24,20 @@ export interface HistoryOptions {
     readonly maxFilesPerCommit?: number;
 }
 export declare function gitHead(cwd: string): Promise<string>;
+/** Thrown when the git process itself could not be run (missing binary,
+ *  bad cwd) — distinct from git running and answering "not a repository".
+ *  Collapsing the two (as this used to) teaches a false fact with no way to detect it; every caller must let this propagate rather than treat it as "not a repository". */
+export declare class GitUnavailableError extends Error {
+    constructor(cwd: string, cause: unknown);
+}
 export declare function isGitRepository(cwd: string): Promise<boolean>;
-/**
- * Read history newest-first, with renames followed forward to today's paths.
- *
- * `--no-merges` is deliberate: a merge commit's file list is the union of both
- * branches, so counting it as co-change would report every file in a large merge
- * as coupled to every other. That is the single largest source of false
- * `CHANGES_WITH` edges, and it is free to exclude.
- */
+/** Whether `absolutePath` is tracked by git in `cwd`. A-F1: a bare module
+ *  specifier resolves against the scanned repo's own node_modules — a real
+ *  `npm install` leaves it untracked, but a hostile repo can COMMIT a payload there for a victim who only clones and never runs install; tracked-in-git is the discriminator. Returns null (not false) when `cwd` isn't a git repo at all — "cannot determine" must never collapse into "untracked, therefore safe". Outside `cwd` entirely returns false. */
+export declare function isPathTrackedByGit(cwd: string, absolutePath: string): Promise<boolean | null>;
+/** Read history newest-first, renames followed forward. `--no-merges` is
+ *  deliberate: a merge's file list is the union of both branches — the
+ *  single largest source of false CHANGES_WITH edges, and free to exclude. */
 export declare function readHistory(cwd: string, options?: HistoryOptions): Promise<Commit[]>;
 export interface PathLogOptions {
     /** Cap on commits returned. Default 20 — this is a live, on-demand read, not a bulk ingestion. */
@@ -70,71 +57,64 @@ export interface PathLogCommit {
 }
 export interface PathLogResult {
     readonly commits: readonly PathLogCommit[];
-    /**
-     * How many commits touch this path in total, independent of `maxCommits`.
-     * A second, cheap `git log --format=%H` count — not `commits.length`,
-     * which stops at the cap — so a caller can tell "here are the 20 most
-     * recent" from "here are all 3 there are" without guessing from the cap.
-     */
+    /** Total commits touching this path, independent of `maxCommits` — a
+     *  second cheap count, not `commits.length`, which stops at the cap. */
     readonly totalTouching: number;
 }
-/**
- * Live commit history for one file, right now — distinct from `history.ts`'s
- * `changesWith`, which only reads the graph's stored `CHANGES_WITH` ledger
- * built once at `analyze` time. `--follow` tracks the file across renames;
- * unlike `readHistory`'s whole-repo walk, each commit here reports its own
- * historical name rather than today's — the rename itself is part of what a
- * caller asking "what happened to this file" wants to see.
- */
+/** Live commit history for one file — distinct from the graph's stored
+ *  CHANGES_WITH ledger. `--follow` tracks renames; each commit reports its
+ *  own historical name, not today's — the rename is part of what's asked. */
 export declare function logForPath(cwd: string, path: string, options?: PathLogOptions): Promise<PathLogResult>;
+/** Resolve one commit by sha, bypassing readHistory's HEAD-reachability and
+ *  --no-merges filters — a revert can name a merge or an unreachable, not-yet-GC'd
+ *  commit that readHistory's index can't see. Returns null only if the object is truly gone; caller must disclose, never drop silently (rule 7). Paths aren't forward-canonicalised (disclosed gap). */
+export declare function resolveCommitBySha(cwd: string, sha: string, maxFilesPerCommit?: number): Promise<Commit | null>;
+/** Files changed between two refs, for PR analysis. `base...head` (three
+ *  dots, not two) diffs against the merge base — two dots would include every
+ *  file changed on base since the branch point, someone else's change. Deletions included: what called the removed thing is the useful question. */
+export declare function changedFiles(cwd: string, base: string, head?: string): Promise<string[]>;
+/** `git show --name-only` for one commit, with today's paths where known. */
+export declare function filesInCommit(cwd: string, sha: string): Promise<string[]>;
 /**
- * Resolve one commit directly by sha, bypassing both `readHistory`'s
- * reachability filter and its `--no-merges` exclusion.
+ * Which of these paths git reports as uncommitted — modified, staged or untracked.
  *
- * `readHistory` walks history from `HEAD` only — co-change must stay scoped to
- * mainline, or work in progress on other branches would pollute
- * `CHANGES_WITH` — and drops merge commits, because a merge's file list is
- * the union of both branches (see the module doc). Both are correct for
- * co-change. Neither is correct for resolving what a revert commit names:
- * `git revert`'s `This reverts commit <sha>` line can point at a commit that
- * **is** a merge ("Revert Merge pull request #N"), or at a commit that is
- * real and still in the object database but not an ancestor of `HEAD` — an
- * abandoned branch, or one deleted after a squash/rebase merge whose objects
- * have not yet been garbage-collected. Neither case means the commit does
- * not exist; `readHistory`'s index just cannot see it.
+ * One `git status --porcelain` over the named paths rather than a call per
+ * file. `--porcelain` is the stable machine format, guaranteed across versions,
+ * and its two status columns cover every state that matters here at once: a
+ * file the index has and `HEAD` does not, one the working tree has and the
+ * index does not, and one git has never seen.
  *
- * `git cat-file` and `git diff-tree` operate on the object database directly
- * and enforce neither constraint, so this is the fallback `createGitSource`
- * uses once `readHistory`'s own index has already missed a revert target.
- *
- * Returns `null` only when the object genuinely does not exist — the
- * squash-merge case, where the original commit was never an ancestor of
- * anything that survived and its object is gone from the store. That is the
- * one case nothing can resolve; the caller must disclose it rather than
- * drop it silently (CLAUDE.md rule 7 — every fallback is labelled).
- *
- * File paths returned here are **not** forward-canonicalised through
- * `readHistory`'s rename map — this commit was never visited by that walk.
- * A file renamed on mainline *after* this commit landed will show under its
- * name at the time, not today's name. That is a narrower, disclosed version
- * of the same rename gap the module doc already states for the primary walk.
+ * The distinction this exists to make is not cosmetic. A path absent from a
+ * ref-to-ref diff might be uncommitted work, or it might be a file the caller
+ * named that this branch simply did not touch. Both make a coverage section
+ * describe something else; only the first is a fact about timing that the
+ * developer can act on in the next thirty seconds.
  */
-export declare function resolveCommitBySha(cwd: string, sha: string, maxFilesPerCommit?: number): Promise<Commit | null>;
+export declare function uncommittedAmong(cwd: string, paths: readonly string[]): Promise<readonly string[]>;
+export interface WorkingTreeFilesOptions {
+    /** Which tracked-file comparison to make. Default `"all"` — everything uncommitted. */
+    readonly scope?: "unstaged" | "staged" | "all";
+    /** Include files git has never seen. Default true — see below. */
+    readonly includeUntracked?: boolean;
+    /**
+     * Directory prefixes whose contents are not the change under review — a
+     * tool's own state, where a `.gitignore` does not happen to cover it.
+     * Matched at a segment boundary, so `.descry` leaves `src/.descryfile.ts`.
+     */
+    readonly exclude?: readonly string[];
+}
 /**
- * Files changed between two refs — the input to PR analysis.
+ * The paths a working tree changes, as {@link changedFiles} does for a range.
  *
- * `base...head` (three dots) rather than `base..head`, and the difference is the
- * whole point: two dots diffs the two tips, so every file changed on `base`
- * since the branch point appears in the result as though the PR had touched it.
- * On a branch a week behind `main` that is most of the diff, and the blast
- * radius it produces belongs to somebody else's change. Three dots diffs against
- * the merge base, which is what a reviewer is actually looking at.
+ * Name-only, so it is the cheap counterpart to `gitWorkingTreeChange`: a caller
+ * that only needs to know *which* files changed should not pay for every patch.
  *
- * Deletions are included. A deleted file's nodes may still be in the graph, and
- * *what called the thing you just removed* is the most useful question a diff
- * can be asked.
+ * **Untracked is on by default here**, unlike the diff-producing function. That
+ * one is a library primitive whose existing callers must not change behaviour
+ * by upgrading. This one exists to answer "what is the change about to be
+ * committed", and a new file written and not yet added is part of that change —
+ * defaulting it off would mean the function misses, by default, the case it was
+ * written for.
  */
-export declare function changedFiles(cwd: string, base: string, head?: string): Promise<string[]>;
-/** `git show --name-only` for one commit, with today's paths where known. */
-export declare function filesInCommit(cwd: string, sha: string): Promise<string[]>;
+export declare function workingTreeChangedFiles(cwd: string, options?: WorkingTreeFilesOptions): Promise<string[]>;
 //# sourceMappingURL=history.d.ts.map

package/dist/sources/git/history.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../../../src/sources/git/history.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA0BH,MAAM,WAAW,YAAY;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC7C,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,wBAAsB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG1D;AAED,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOnE;AA0BD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA4D9F;AAED,MAAM,WAAW,cAAc;IAC7B,kGAAkG;IAClG,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,+GAA+G;AAC/G,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC7C,uGAAuG;IACvG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAuDxB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,iBAAiB,SAAK,GACrB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAoExB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,SAAS,GACZ,OAAO,CAAC,MAAM,EAAE,CAAC,CASnB;AAED,6EAA6E;AAC7E,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAU/E"}
+{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../../../src/sources/git/history.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA4BH,MAAM,WAAW,YAAY;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC7C,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,wBAAsB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG1D;AAED;;2KAE2K;AAC3K,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;CAUxC;AAcD,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQnE;AAED;;8VAE8V;AAC9V,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAcnG;AAqBD;;8EAE8E;AAC9E,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAyD9F;AAED,MAAM,WAAW,cAAc;IAC7B,kGAAkG;IAClG,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,+GAA+G;AAC/G,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC7C,uGAAuG;IACvG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAC3C;4EACwE;IACxE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;6EAE6E;AAC7E,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAsDxB;AAED;;wMAEwM;AACxM,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,iBAAiB,SAAK,GACrB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiExB;AAED;;oJAEoJ;AACpJ,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,SAAS,GACZ,OAAO,CAAC,MAAM,EAAE,CAAC,CASnB;AAED,6EAA6E;AAC7E,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAU/E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAmB5B;AAED,MAAM,WAAW,uBAAuB;IACtC,uFAAuF;IACvF,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,KAAK,CAAC;IAC/C,kEAAkE;IAClE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,EAAE,CAAC,CAqBnB"}