@dzhechkov/harness-core 0.4.5 → 0.5.1

package/dist/codex-hooks.js

@@ -0,0 +1,541 @@
+/**
+ * The Codex hook registry model (`crossrt-2-codex-hooks`, ADR-001).
+ *
+ * Pure: paths, the managed entry set, sha-based attribution, the manifest, drift, and the TOML text
+ * of a trust block. Every filesystem and process action lives in `operations.ts`.
+ *
+ * ## Measured facts this module encodes (M0 spike, codex-cli 0.147.0 — see
+ * `features/crossrt-2-codex-hooks/07_code_changes/probe-results/spike-arming.md`)
+ *
+ * - `$CODEX_HOME/hooks.json` is the user registry and **`CODEX_HOME` relocates discovery**, which is
+ *   what makes every automated probe hermetic (G-H). `$CODEX_HOME/hooks/hooks.json` is the PLUGIN
+ *   bundle layout and does not fire.
+ * - Entries are trust-gated. An untrusted entry is silently not run. Trust is persisted per entry in
+ *   `$CODEX_HOME/config.toml` as `[hooks.state."<key>"] trusted_hash = "<currentHash>"`, and both
+ *   `key` and `currentHash` come from the runtime's own `hooks/list` RPC — they are **read, never
+ *   computed**, because `currentHash`'s preimage is internal to codex.
+ * - `timeout` is in SECONDS and IS honored (600 → 5, MEASURED). `timeoutSec` in an entry is
+ *   **silently ignored** and leaves the 600 s default in place — which is why this module emits
+ *   `timeout` and a test pins the key set (AM-15, now probe-proven by spike S2).
+ * - The hook runner spawns via `$SHELL -lc`, so the emitted command is a SHELL string: the
+ *   interpreter is an absolute `process.execPath` and both paths are single-quoted (AM-32/AM-35d).
+ *
+ * @packageDocumentation
+ */
+import { createHash } from 'node:crypto';
+import { join } from 'node:path';
+import { mergeManagedHookEntries } from './managed-hooks.js';
+/**
+ * Bump when a helper BODY changes: a changed body changes codex's `currentHash` ⇒ re-trust.
+ *
+ * 2 — the independent-QE fix round: the veto note stopped persisting the raw command line and the
+ * notes log/dir modes are now enforced on every write (finding 8).
+ * 3 — fix round 2: the note's `commandSynopsis` is a binary NAME or `(redacted)` — an
+ * env-assignment first token (`SECRET=xyz ssh …`) carried the credential the redaction removed
+ * everywhere else (R2-8).
+ */
+export const DZ_HOOK_HELPER_VERSION = 3;
+/** Seconds. Probe-proven (spike S2): `timeout` is honored, the unset default is 600 s. */
+export const DZ_HOOK_TIMEOUT_SECONDS = 5;
+/** The wide matcher (AM-8). Narrowing needs a recorded live probe; the guard keys on the payload. */
+export const DZ_VETO_MATCHER = 'Bash|shell|local_shell';
+/** Every path this leg touches, all `CODEX_HOME`-relative (AM-13). */
+export function codexHooksPaths(codexHome) {
+    const helperDir = join(codexHome, 'dz-hooks');
+    return {
+        codexHome,
+        registry: join(codexHome, 'hooks.json'),
+        configToml: join(codexHome, 'config.toml'),
+        helperDir,
+        vetoHelper: join(helperDir, 'dz-codex-veto.cjs'),
+        recallHelper: join(helperDir, 'dz-codex-recall.cjs'),
+        manifest: join(helperDir, 'manifest.json'),
+        errorLog: join(helperDir, 'helper-errors.jsonl'),
+    };
+}
+/** The EMITTER's write-set (AM-12). The RUNTIME's is stated separately — see {@link runtimeWriteSet}. */
+export function emitterWriteSet(paths) {
+    return [paths.registry, paths.vetoHelper, paths.recallHelper, paths.manifest];
+}
+/**
+ * The RUNTIME's write-set (AM-33). Exactly one path beyond the emitter's, and it is
+ * `CODEX_HOME`-local: a helper must never create a `.dz/` inside a repository the user merely ran
+ * `codex` in. (Recall rows are the one exception and they are opt-in-gated: they land in an
+ * ALREADY-EXISTING opted-in project's `.dz/`, so nothing is ever created.)
+ */
+export function runtimeWriteSet(paths) {
+    return [paths.errorLog];
+}
+/* -------------------------------------------------------------------------- */
+/* Quoting                                                                     */
+/* -------------------------------------------------------------------------- */
+/** A single quote inside a single-quoted shell word cannot be escaped — such a path is REFUSED. */
+export function isSafeForSingleQuote(path) {
+    return typeof path === 'string' && path !== '' && !path.includes("'") && !path.includes('\n');
+}
+export function singleQuote(path) {
+    return `'${path}'`;
+}
+/**
+ * The shell string codex runs. Absolute interpreter + single-quoted paths (AM-32/AM-35d).
+ * @throws when either path cannot be safely quoted — never emit a broken entry that READS installed.
+ */
+export function buildHookCommand(nodePath, scriptPath) {
+    if (!isSafeForSingleQuote(nodePath) || !isSafeForSingleQuote(scriptPath)) {
+        throw new Error(`refusing to emit a hook command containing an unquotable path (single quote or newline): ${nodePath} ${scriptPath}`);
+    }
+    return `${singleQuote(nodePath)} ${singleQuote(scriptPath)}`;
+}
+/** The two entries this leg ships, and nothing else. */
+export const CODEX_MANAGED_HOOKS = [
+    { id: 'codex-veto', event: 'PreToolUse', matcher: DZ_VETO_MATCHER, script: 'veto' },
+    { id: 'codex-recall', event: 'UserPromptSubmit', script: 'recall' },
+];
+/**
+ * Build the managed entries.
+ *
+ * Key set is EXACTLY `{matcher?, hooks:[{type, command, timeout}]}` (AM-15). `timeout` is included
+ * because spike S2 recorded a probe proving the registry loads with it AND honors it; every other
+ * key stays out until it has its own probe.
+ */
+export function buildManagedEntries(opts) {
+    return CODEX_MANAGED_HOOKS.map((spec) => {
+        const script = spec.script === 'veto' ? opts.paths.vetoHelper : opts.paths.recallHelper;
+        const command = buildHookCommand(opts.nodePath, script);
+        const entry = {
+            ...(spec.matcher !== undefined ? { matcher: spec.matcher } : {}),
+            hooks: [{ type: 'command', command, timeout: DZ_HOOK_TIMEOUT_SECONDS }],
+        };
+        return { id: spec.id, event: spec.event, command, entry };
+    });
+}
+/** `managed` in the shape {@link mergeManagedHookEntries} takes. */
+export function managedByEvent(entries) {
+    const out = {};
+    for (const e of entries) {
+        (out[e.event] ??= []).push(e.entry);
+    }
+    return out;
+}
+/* -------------------------------------------------------------------------- */
+/* Manifest + attribution                                                      */
+/* -------------------------------------------------------------------------- */
+export function codexHookSha256(text) {
+    return createHash('sha256').update(text, 'utf8').digest('hex');
+}
+export function buildCodexHookManifest(opts) {
+    return {
+        version: 1,
+        writtenAt: opts.writtenAt,
+        codexVersion: opts.codexVersion,
+        registryPath: opts.paths.registry,
+        helperVersion: DZ_HOOK_HELPER_VERSION,
+        nodePath: opts.nodePath,
+        entries: opts.entries.map((e) => {
+            const spec = CODEX_MANAGED_HOOKS.find((s) => s.id === e.id);
+            const trustKey = opts.trustKeys?.[e.id];
+            return {
+                id: e.id,
+                event: e.event,
+                ...(spec?.matcher !== undefined ? { matcher: spec.matcher } : {}),
+                commandSha256: codexHookSha256(e.command),
+                ...(trustKey !== undefined ? { trustKey } : {}),
+            };
+        }),
+        ...(opts.lastVerify !== undefined ? { lastVerify: opts.lastVerify } : {}),
+    };
+}
+export function parseCodexHookManifest(text) {
+    try {
+        const parsed = JSON.parse(text);
+        if (parsed === null || typeof parsed !== 'object')
+            return undefined;
+        const m = parsed;
+        if (m.version !== 1 || !Array.isArray(m.entries))
+            return undefined;
+        return m;
+    }
+    catch {
+        return undefined;
+    }
+}
+function entryCommands(entry) {
+    const e = entry;
+    if (Array.isArray(e?.hooks))
+        return e.hooks.map((h) => String(h?.command ?? ''));
+    return [String(e?.command ?? '')];
+}
+/**
+ * Attribution is `codexHookSha256(command) ∈ manifest` — never a substring guess.
+ *
+ * ADR-001 §3: dz deletes only what it can PROVE it wrote. An entry that merely looks like ours (it
+ * mentions our helper filename) but whose command hash is absent from the manifest is KEPT, counted
+ * in `unattributable`, and warned about. A hand-edited managed command therefore survives.
+ */
+export function isDzManagedEntry(entry, manifest) {
+    if (manifest === undefined)
+        return false;
+    const known = new Set(manifest.entries.map((e) => e.commandSha256));
+    return entryCommands(entry).some((cmd) => cmd !== '' && known.has(codexHookSha256(cmd)));
+}
+/**
+ * Rebuild an OWNED entry from only the handlers that are NOT ours — per-HANDLER attribution.
+ *
+ * ADR-001 §5 promises that dz deletes only what it can prove it wrote. Attribution was applied to a
+ * whole MATCHER GROUP: a group holding one dz handler and one of the user's was removed (or
+ * replaced) wholesale, so a foreign handler was deleted by a rule written to protect it
+ * (independent review, finding 6). One dz handler in the group must cost exactly that handler.
+ *
+ * Returns `null` when every handler in the entry was ours (the entry itself is then dropped), and
+ * a rebuilt entry — same keys, same order, minus our handlers — when something foreign survives.
+ * A legacy FLAT entry (`{type, command}`) is one handler and has nothing to salvage.
+ */
+export function retainForeignHandlers(entry, manifest) {
+    if (manifest === undefined)
+        return entry;
+    const known = new Set(manifest.entries.map((e) => e.commandSha256));
+    const isOurs = (cmd) => typeof cmd === 'string' && cmd !== '' && known.has(codexHookSha256(cmd));
+    const e = entry;
+    if (!Array.isArray(e?.hooks))
+        return null; // flat shape: the entry IS the handler
+    const kept = e.hooks.filter((h) => !isOurs(h?.command));
+    if (kept.length === 0)
+        return null;
+    return { ...entry, hooks: kept };
+}
+/** Cheap resemblance test — drives the `unattributable` COUNT only, never a deletion. */
+export function looksLikeDzEntry(entry) {
+    return entryCommands(entry).some((cmd) => cmd.includes('dz-codex-veto.cjs') || cmd.includes('dz-codex-recall.cjs'));
+}
+/**
+ * Parse an existing registry. An unparseable file is an ERROR, never an empty registry: silently
+ * treating it as `{}` would overwrite entries we promised to preserve (I1).
+ */
+export function parseCodexRegistry(text) {
+    if (text === undefined || text.trim() === '') {
+        return { ok: true, registry: { rest: {}, hooks: {} } };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch (err) {
+        return { ok: false, error: `hooks.json is not valid JSON: ${err.message}` };
+    }
+    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        return { ok: false, error: 'hooks.json must be a JSON object' };
+    }
+    const obj = parsed;
+    const rawHooks = obj['hooks'];
+    if (rawHooks !== undefined && (rawHooks === null || typeof rawHooks !== 'object' || Array.isArray(rawHooks))) {
+        return { ok: false, error: 'hooks.json "hooks" must be an object keyed by event name' };
+    }
+    const hooks = {};
+    for (const [event, value] of Object.entries((rawHooks ?? {}))) {
+        // REFUSE, never coerce. `Array.isArray(value) ? [...value] : []` silently turned a foreign
+        // event whose value dz does not understand into an EMPTY list, and the next write persisted
+        // that emptiness — configuration loss dressed as a merge (independent review, finding 5). An
+        // unparseable shape is the same class of fact as unparseable JSON: refuse before planning.
+        if (!Array.isArray(value)) {
+            return {
+                ok: false,
+                error: `hooks.json event ${JSON.stringify(event)} must be an array of entries (found ${value === null ? 'null' : typeof value}) — dz refuses to rewrite a registry it cannot read without losing it`,
+            };
+        }
+        hooks[event] = [...value];
+    }
+    const rest = {};
+    for (const [k, v] of Object.entries(obj))
+        if (k !== 'hooks')
+            rest[k] = v;
+    return { ok: true, registry: { rest, hooks } };
+}
+export function serializeCodexRegistry(registry) {
+    return `${JSON.stringify({ ...registry.rest, hooks: registry.hooks }, null, 2)}\n`;
+}
+/**
+ * Compute the merged registry.
+ *
+ * The merge itself is `mergeManagedHookEntries` — the SAME implementation the Claude path uses
+ * (AM-3 / G-E). Only the attribution predicate differs.
+ */
+export function planCodexHooks(input) {
+    const parsed = parseCodexRegistry(input.currentText);
+    if (!parsed.ok)
+        return { ok: false, error: parsed.error };
+    // The union of the manifest's hashes and the ones we are about to write: on a re-run the manifest
+    // is current, on a helper-version bump it is not, and BOTH vintages of our own entry must be
+    // replaced rather than duplicated.
+    const selfManifest = {
+        version: 1,
+        writtenAt: '',
+        codexVersion: '',
+        registryPath: '',
+        helperVersion: DZ_HOOK_HELPER_VERSION,
+        nodePath: '',
+        entries: [
+            ...(input.manifest?.entries ?? []),
+            ...input.entries.map((e) => ({ id: e.id, event: e.event, commandSha256: codexHookSha256(e.command) })),
+        ],
+    };
+    const plan = mergeManagedHookEntries(parsed.registry.hooks, managedByEvent(input.entries), {
+        isManaged: (entry) => isDzManagedEntry(entry, selfManifest),
+        looksLikeOurs: (entry) => looksLikeDzEntry(entry) && !isDzManagedEntry(entry, selfManifest),
+        // Per-HANDLER salvage (finding 6): an owned entry that also carries the user's own handler is
+        // rebuilt without ours, never dropped whole. The Claude path passes no salvage and is
+        // byte-identical to before (AM-3).
+        retainForeign: (entry) => retainForeignHandlers(entry, selfManifest),
+        reportLabel: 'codex',
+    });
+    const registry = { rest: parsed.registry.rest, hooks: plan.hooks };
+    return {
+        ok: true,
+        plan: {
+            registry,
+            text: serializeCodexRegistry(registry),
+            changed: plan.changed,
+            foreignPreserved: plan.foreignPreserved,
+            unattributable: plan.unattributable,
+        },
+    };
+}
+/**
+ * `--remove`: delete ONLY manifest-attributed entries.
+ *
+ * With the manifest deleted this removes **zero** entries and reports them all as `unattributable`.
+ * That is the intended, conservative behaviour: dz never deletes what it cannot prove it wrote.
+ */
+export function removeCodexHooks(currentText, manifest) {
+    const parsed = parseCodexRegistry(currentText);
+    if (!parsed.ok)
+        return { ok: false, error: parsed.error };
+    const hooks = {};
+    let removed = 0;
+    let unattributable = 0;
+    for (const [event, entries] of Object.entries(parsed.registry.hooks)) {
+        const kept = [];
+        for (const entry of entries) {
+            if (isDzManagedEntry(entry, manifest)) {
+                removed += 1;
+                // Per-HANDLER removal (finding 6): a mixed matcher group keeps every handler that is not
+                // ours. Removing dz's guard must never remove the user's alongside it.
+                const salvaged = retainForeignHandlers(entry, manifest);
+                if (salvaged !== null)
+                    kept.push(salvaged);
+                continue;
+            }
+            if (looksLikeDzEntry(entry))
+                unattributable += 1;
+            kept.push(entry);
+        }
+        hooks[event] = kept;
+    }
+    const registry = { rest: parsed.registry.rest, hooks };
+    return {
+        ok: true,
+        result: { registry, text: serializeCodexRegistry(registry), removed, changed: removed > 0, unattributable },
+    };
+}
+/** `--check` recomputes from the FILE; it never trusts the manifest's claim on its own. */
+export function diffCodexHooks(currentText, entries, manifest) {
+    const parsed = parseCodexRegistry(currentText);
+    const hooks = parsed.ok ? parsed.registry.hooks : {};
+    const present = [];
+    const drifted = [];
+    let foreignPreserved = 0;
+    let unattributable = 0;
+    const wantByEvent = new Map(entries.map((e) => [e.event, e]));
+    for (const [event, list] of Object.entries(hooks)) {
+        for (const entry of list) {
+            const want = wantByEvent.get(event);
+            const cmds = entryCommands(entry);
+            if (want !== undefined && cmds.includes(want.command)) {
+                present.push(want.id);
+                continue;
+            }
+            if (isDzManagedEntry(entry, manifest)) {
+                // Ours by manifest, but not the command we would write now: an old helper version.
+                const id = manifest?.entries.find((m) => cmds.some((c) => codexHookSha256(c) === m.commandSha256))?.id;
+                if (id !== undefined)
+                    drifted.push(id);
+                continue;
+            }
+            foreignPreserved += 1;
+            if (looksLikeDzEntry(entry))
+                unattributable += 1;
+        }
+    }
+    const missing = entries.map((e) => e.id).filter((id) => !present.includes(id));
+    return {
+        installed: missing.length === 0,
+        presentIds: present,
+        missingIds: missing,
+        foreignPreserved,
+        unattributable,
+        drifted,
+    };
+}
+/* -------------------------------------------------------------------------- */
+/* Trust (the M0 arming route)                                                 */
+/* -------------------------------------------------------------------------- */
+/** codex's snake_case event spelling inside a trust key (MEASURED from `hooks/list`). */
+export function trustEventName(event) {
+    return event === 'PreToolUse' ? 'pre_tool_use' : 'user_prompt_submit';
+}
+/**
+ * Compare two event spellings the way the runtime actually spells them.
+ *
+ * MEASURED, both on this machine, on the SAME response shape:
+ * - the trust KEY embeds `pre_tool_use` / `user_prompt_submit` (snake_case);
+ * - `hooks/list`'s `eventName` FIELD is `preToolUse` / `userPromptSubmit` on **codex-cli 0.148.0**
+ *   (reproducer: `listCodexHooks(<temp home>)` after an install — the rows are printed verbatim in
+ *   `07_code_changes/probe-results/fixround/trust-diagnosis.txt`).
+ *
+ * Pinning either spelling alone silently drops every row: the fix round's first cut compared the
+ * field against the KEY spelling, `hooks/list` matched 0 of 2 entries, trust was never written, and
+ * the live probe's ARMED leg stopped blocking. Case and separators are therefore normalised away —
+ * the spelling is the runtime's cosmetic choice, the EVENT is the fact.
+ */
+export function sameHookEvent(a, b) {
+    const norm = (v) => v.toLowerCase().replace(/[-_\s]/g, '');
+    return norm(a) === norm(b);
+}
+/**
+ * The trust key codex uses: `<sourcePath>:<snake_event>:<groupIndex>:<hookIndex>`.
+ *
+ * This is the EXPECTED spelling, used only to cross-check what `hooks/list` reports. The install
+ * path uses the reported key verbatim — a computed key that drifts from the runtime's would arm
+ * nothing while reading like success.
+ */
+export function expectedTrustKey(registryPath, event, groupIndex, hookIndex) {
+    return `${registryPath}:${trustEventName(event)}:${groupIndex}:${hookIndex}`;
+}
+/**
+ * Split a `hooks/list` trust key into its parts, or `null` when it is not one.
+ *
+ * MEASURED shape: `<sourcePath>:<snake_event>:<groupIndex>:<hookIndex>`. The path may itself carry
+ * a colon, so the split is anchored at the END — the last two fields are the indices and the third
+ * from the end is the event.
+ *
+ * The INDICES are deliberately not predicted: they are positions inside the user's registry, and a
+ * foreign entry shifts them. What IS ours to require is the rest — this key names OUR registry and
+ * OUR event (fix round 2, R2-7: a row carrying an arbitrary key was selected on path+event+command
+ * alone, and the key is what dz then writes trust against).
+ */
+export function parseTrustKey(key) {
+    const m = /^(.*):([A-Za-z_][A-Za-z_]*):(\d+):(\d+)$/.exec(key);
+    if (m === null)
+        return null;
+    return { sourcePath: m[1] ?? '', event: m[2] ?? '', groupIndex: Number(m[3]), hookIndex: Number(m[4]) };
+}
+/** TOML-escape a bare-string key (the key is an absolute path plus `:` separators). */
+function tomlQuote(value) {
+    return `"${value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
+}
+export const DZ_TRUST_BEGIN = '# --- dz codex hooks trust (managed block, dz-rewritten) ---';
+export const DZ_TRUST_END = '# --- end dz codex hooks trust ---';
+/**
+ * Render dz's trust rows as a MANAGED BLOCK in `config.toml`.
+ *
+ * A managed block, not a whole-file rewrite: `~/.codex/config.toml` already carries a
+ * `ruvnet-brain` managed block and seven `[projects."…"]` trust rows on this machine (MEASURED),
+ * and dz is not the only writer. The block is delimited so a re-run replaces exactly dz's rows and
+ * nothing else.
+ */
+export function renderTrustBlock(rows) {
+    if (rows.length === 0)
+        return '';
+    const body = rows
+        .map((r) => `[hooks.state.${tomlQuote(r.key)}]\ntrusted_hash = ${tomlQuote(r.trustedHash)}`)
+        .join('\n');
+    return `${DZ_TRUST_BEGIN}\n${body}\n${DZ_TRUST_END}\n`;
+}
+function countOccurrences(haystack, needle) {
+    let n = 0;
+    let i = haystack.indexOf(needle);
+    while (i >= 0) {
+        n += 1;
+        i = haystack.indexOf(needle, i + needle.length);
+    }
+    return n;
+}
+/**
+ * Replace (or append) dz's managed trust block, leaving every other byte of config.toml alone.
+ *
+ * The fence must be **exactly one well-ordered pair**, or dz refuses (independent review, finding
+ * 9). The old `indexOf`-pair logic was satisfiable by a damaged file in three ways, and each one
+ * eats the user's TOML on the NEXT sync: a lone BEGIN made the rewrite append a second block, so
+ * the following run's `begin…end` window spanned everything between the orphan marker and the new
+ * block's END; a reversed pair did the same; duplicate pairs left an orphan block behind. Refusing
+ * costs one manual edit — the alternative silently deletes `[projects."…"]` trust rows.
+ */
+export function upsertTrustBlock(configToml, rows) {
+    const block = renderTrustBlock(rows);
+    const begins = countOccurrences(configToml, DZ_TRUST_BEGIN);
+    const ends = countOccurrences(configToml, DZ_TRUST_END);
+    const heal = `heal by hand: leave exactly one ${JSON.stringify(DZ_TRUST_BEGIN)} … ${JSON.stringify(DZ_TRUST_END)} pair (or delete both markers) and re-run`;
+    if (begins > 1 || ends > 1) {
+        return { ok: false, error: `config.toml carries ${begins} dz trust BEGIN and ${ends} END markers — dz refuses to guess which block is its own. ${heal}` };
+    }
+    if (begins !== ends) {
+        return { ok: false, error: `config.toml carries an UNPAIRED dz trust marker (${begins} BEGIN, ${ends} END) — rewriting it would consume unrelated TOML. ${heal}` };
+    }
+    if (begins === 1) {
+        const begin = configToml.indexOf(DZ_TRUST_BEGIN);
+        const end = configToml.indexOf(DZ_TRUST_END);
+        if (end < begin) {
+            return { ok: false, error: `config.toml carries the dz trust END marker BEFORE its BEGIN — the fence is inverted and the span between them is not dz's. ${heal}` };
+        }
+        const before = configToml.slice(0, begin);
+        const after = configToml.slice(end + DZ_TRUST_END.length).replace(/^\n/, '');
+        return { ok: true, text: `${before}${block}${after}` };
+    }
+    const base = configToml === '' || configToml.endsWith('\n') ? configToml : `${configToml}\n`;
+    return { ok: true, text: `${base}${base === '' ? '' : '\n'}${block}` };
+}
+/**
+ * Pick, from a `hooks/list` response, the metadata of the entries WE wrote.
+ *
+ * The match is on THREE facts, not one (independent review, finding 7): the row's `sourcePath` is
+ * the registry dz wrote, its `eventName` is the event dz registered the entry under, and the
+ * command string is byte-equal. Command alone was not enough — a project-scoped
+ * `<repo>/.codex/hooks.json` DOES load on codex 0.148 (MEASURED, see ADR-004's addendum), so a
+ * shadow copy of dz's own command line could supply the `trusted` row that armed the user-global
+ * entry nobody had approved.
+ *
+ * AMBIGUITY IS REFUSED, not resolved: two rows claiming the same entry drop BOTH, because the one
+ * dz would arm is then a coin flip and the trust write is keyed by the row it picked.
+ */
+export function selectOwnHookMetadata(hooks, entries, options) {
+    const byCommand = new Map(entries.map((e) => [e.command, e]));
+    const claims = new Map();
+    for (const meta of hooks) {
+        if (typeof meta.command !== 'string')
+            continue;
+        const entry = byCommand.get(meta.command);
+        if (entry === undefined)
+            continue;
+        if (meta.sourcePath !== options.registryPath)
+            continue;
+        if (!sameHookEvent(meta.eventName, trustEventName(entry.event)))
+            continue;
+        // The KEY is the thing dz writes trust against, so it — not just the row's other fields — has
+        // to be the key our entry would own (R2-7). An arbitrary or foreign key is ambiguous by
+        // construction: arming it would persist trust for something we cannot identify.
+        const parsedKey = typeof meta.key === 'string' ? parseTrustKey(meta.key) : null;
+        if (parsedKey === null)
+            continue;
+        if (parsedKey.sourcePath !== options.registryPath)
+            continue;
+        if (!sameHookEvent(parsedKey.event, trustEventName(entry.event)))
+            continue;
+        (claims.get(entry.id) ?? claims.set(entry.id, []).get(entry.id)).push({ id: entry.id, meta });
+    }
+    const out = [];
+    for (const rows of claims.values()) {
+        if (rows.length === 1)
+            out.push(rows[0]);
+    }
+    return out;
+}
+//# sourceMappingURL=codex-hooks.js.map

package/dist/codex-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-hooks.js","sourceRoot":"","sources":["../src/codex-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC,0FAA0F;AAC1F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,qGAAqG;AACrG,MAAM,CAAC,MAAM,eAAe,GAAG,wBAAwB,CAAC;AAaxD,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC9C,OAAO;QACL,SAAS;QACT,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;QACvC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;QAC1C,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC;QAChD,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC;QACpD,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC;QAC1C,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AAC1B,CAAC;AAED,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAEhF,mGAAmG;AACnG,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,IAAI,IAAI,GAAG,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,UAAkB;IACnE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,4FAA4F,QAAQ,IAAI,UAAU,EAAE,CACrH,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;AAC/D,CAAC;AAgBD,wDAAwD;AACxD,MAAM,CAAC,MAAM,mBAAmB,GAA6B;IAC3D,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE;IACnF,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE;CACpE,CAAC;AAcF;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAgC;IAClE,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QACxF,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,KAAK,GAA4B;YACrC,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;SACxE,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,OAAgC;IAC7D,MAAM,GAAG,GAA8B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAEhF,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAwCD,MAAM,UAAU,sBAAsB,CAAC,IAA0B;IAC/D,OAAO;QACL,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;QACjC,aAAa,EAAE,sBAAsB;QACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,GAAG,CAAC,IAAI,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;gBACzC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC;QACJ,CAAC,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACpE,MAAM,CAAC,GAAG,MAA2B,CAAC;QACtC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACnE,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,CAAC,GAAG,KAA+D,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,QAAuC;IACtF,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACpE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,QAAuC;IAC3F,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,CAAC,GAAY,EAAW,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACnH,MAAM,CAAC,GAAG,KAA4B,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,uCAAuC;IAClF,MAAM,IAAI,GAAI,CAAC,CAAC,KAAiC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACrF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,EAAE,GAAI,KAAiC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAC9B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAClF,CAAC;AACJ,CAAC;AAgBD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAwB;IACzD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAkC,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC7G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0DAA0D,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC,EAAE,CAAC;QACzF,2FAA2F;QAC3F,4FAA4F;QAC5F,6FAA6F;QAC7F,2FAA2F;QAC3F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,uCAAuC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,uEAAuE;aACrM,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,KAAK,OAAO;YAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAuB;IAC5D,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AACrF,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,KAA0B;IAE1B,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC1D,kGAAkG;IAClG,6FAA6F;IAC7F,mCAAmC;IACnC,MAAM,YAAY,GAAsB;QACtC,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,EAAE;QACb,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,EAAE;QAChB,aAAa,EAAE,sBAAsB;QACrC,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE;YACP,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;YAClC,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;SACvG;KACF,CAAC;IACF,MAAM,IAAI,GAAG,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;QACzF,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC;QAC3D,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC;QAC3F,8FAA8F;QAC9F,sFAAsF;QACtF,mCAAmC;QACnC,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,YAAY,CAAC;QACpE,WAAW,EAAE,OAAO;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAkB,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAClF,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,QAAQ;YACR,IAAI,EAAE,sBAAsB,CAAC,QAAQ,CAAC;YACtC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC;KACF,CAAC;AACJ,CAAC;AAUD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAA+B,EAC/B,QAAuC;IAEvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC1D,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC,CAAC;gBACb,yFAAyF;gBACzF,uEAAuE;gBACvE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBACxD,IAAI,QAAQ,KAAK,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YACD,IAAI,gBAAgB,CAAC,KAAK,CAAC;gBAAE,cAAc,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IACtB,CAAC;IACD,MAAM,QAAQ,GAAkB,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IACtE,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,EAAE,cAAc,EAAE;KAC5G,CAAC;AACJ,CAAC;AAaD,2FAA2F;AAC3F,MAAM,UAAU,cAAc,CAC5B,WAA+B,EAC/B,OAAgC,EAChC,QAAuC;IAEvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;IAEvE,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,KAAuB,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,IAAI,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACtC,mFAAmF;gBACnF,MAAM,EAAE,GAAG,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC;gBACvG,IAAI,EAAE,KAAK,SAAS;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACvC,SAAS;YACX,CAAC;YACD,gBAAgB,IAAI,CAAC,CAAC;YACtB,IAAI,gBAAgB,CAAC,KAAK,CAAC;gBAAE,cAAc,IAAI,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;QAC/B,UAAU,EAAE,OAAO;QACnB,UAAU,EAAE,OAAO;QACnB,gBAAgB;QAChB,cAAc;QACd,OAAO;KACR,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAEhF,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,KAAqB;IAClD,OAAO,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,oBAAoB,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IAChD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,YAAoB,EACpB,KAAqB,EACrB,UAAkB,EAClB,SAAiB;IAEjB,OAAO,GAAG,YAAY,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;AAC/E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAW;IAEX,MAAM,CAAC,GAAG,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1G,CAAC;AAOD,uFAAuF;AACvF,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,8DAA8D,CAAC;AAC7F,MAAM,CAAC,MAAM,YAAY,GAAG,oCAAoC,CAAC;AAEjE;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA6B;IAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;SAC3F,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,GAAG,cAAc,KAAK,IAAI,KAAK,YAAY,IAAI,CAAC;AACzD,CAAC;AAID,SAAS,gBAAgB,CAAC,QAAgB,EAAE,MAAc;IACxD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACd,CAAC,IAAI,CAAC,CAAC;QACP,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,IAA6B;IAChF,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,mCAAmC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,2CAA2C,CAAC;IAC5J,IAAI,MAAM,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,MAAM,uBAAuB,IAAI,8DAA8D,IAAI,EAAE,EAAE,CAAC;IAC5J,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oDAAoD,MAAM,WAAW,IAAI,sDAAsD,IAAI,EAAE,EAAE,CAAC;IACrK,CAAC;IACD,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+HAA+H,IAAI,EAAE,EAAE,CAAC;QACrK,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,EAAE,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,KAAK,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,CAAC;IAC7F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;AACzE,CAAC;AAmBD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAuC,EACvC,OAAgC,EAChC,OAA6B;IAE7B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmE,CAAC;IAC1F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,SAAS;QAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,CAAC,YAAY;YAAE,SAAS;QACvD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,SAAS;QAC1E,8FAA8F;QAC9F,wFAAwF;QACxF,gFAAgF;QAChF,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,IAAI,SAAS,KAAK,IAAI;YAAE,SAAS;QACjC,IAAI,SAAS,CAAC,UAAU,KAAK,OAAO,CAAC,YAAY;YAAE,SAAS;QAC5D,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,SAAS;QAC3E,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,GAAG,GAAuD,EAAE,CAAC;IACnE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}