@groundnuty/macf-core 0.2.44 → 0.2.45

package/dist/prompt-responses.js

@@ -0,0 +1,274 @@
+/**
+ * Interactive-prompt auto-responder — config schema, the Inv-2 ceremony-only
+ * classifier, and the pure Inv-1/Inv-3 frame matcher (DR-033, groundnuty/macf#645).
+ *
+ * SAFETY-CRITICAL. This module holds the *pure* logic behind the auto-responder:
+ * the config the operator curates in `.claude/.macf/prompt-responses.json`, the
+ * rules for what may go on the allowlist, and the frame-matching that decides
+ * whether a captured tmux pane is a KNOWN ceremony prompt we may answer. The
+ * shell watcher (`scripts/macf-prompt-watcher.sh`) reimplements the SAME
+ * algorithm in bash+jq for runtime; this module is the tested reference spec +
+ * the validator the CLI runs at `macf init/update/rules refresh`. The two MUST
+ * stay in lockstep — a change here is a change there.
+ *
+ * The three constitutional invariants (DR-033 §Decision):
+ *
+ *   Inv 1 — allowlist-only. Only auto-answer a prompt matching a vetted entry.
+ *     An unrecognized prompt-like frame → the caller ALERTs and does NOT answer.
+ *     `matchPromptFrame` returns `unknown-prompt` for that case; the watcher
+ *     turns it into a loud forensic-log + stderr alert. Silence-on-unknown beats
+ *     a wrong answer.
+ *
+ *   Inv 2 — ceremony-acks ONLY. The config loader HARD-REFUSES (drops) any entry
+ *     whose signature material contains an authorization/destructive substring
+ *     (`delete` / `overwrite` / `trust`) and LOUD-WARNS (keeps, operator-owned
+ *     risk) on `(y/n)` / `allow` / `permission` / `grant`. This constrains what
+ *     may go ON the allowlist — the stronger sibling of Inv 1.
+ *
+ *   Inv 3 — the signature GUARANTEES the `send` still means the intended option.
+ *     A structured signature (`frame_contains` + `option_text` at the `send`
+ *     ordinal's rendered position) — NOT a fragile substring. A menu reorder /
+ *     reword / insert breaks the match → falls through to Inv 1 (alert, don't
+ *     answer) rather than firing a now-wrong ordinal. The signature is not "what
+ *     prompt is this"; it is "is the world still exactly as the `send` assumes".
+ */
+import { z } from 'zod';
+import { MacfError } from './errors.js';
+/** Config schema version. Bump on a breaking shape change. */
+export const PROMPT_RESPONSES_SCHEMA_VERSION = '1';
+/**
+ * Inv 2 — HARD-REFUSE substrings. An entry whose signature material contains any
+ * of these (case-insensitive) is DROPPED at load: the auto-responder must never
+ * answer a destructive-confirmation or a folder/tool-trust prompt, even if an
+ * operator tries to allowlist it (DR-033 OQ1 lean: hard-refuse the most
+ * dangerous). Kept in lockstep with `PROMPT_REFUSE_SUBSTRINGS` in the watcher.
+ * `revoke`/`remove` are the security/destructive siblings of `delete`/`trust`
+ * ("revoke token?" / "remove collaborator?") — same never-even-if-allowlisted
+ * class (science review of macf#645).
+ */
+export const PROMPT_REFUSE_SUBSTRINGS = ['delete', 'overwrite', 'trust', 'revoke', 'remove'];
+/**
+ * Inv 2 — LOUD-WARN substrings. An entry whose signature material contains any
+ * of these is KEPT (operator-owned risk) but flagged loudly at load: these lean
+ * authorization-shaped, so the operator should confirm they meant a ceremony ack
+ * and not a permission grant. Kept in lockstep with the watcher.
+ */
+export const PROMPT_WARN_SUBSTRINGS = ['(y/n)', 'allow', 'permission', 'grant'];
+/** Thrown when the prompt-responses config fails schema validation. */
+export class PromptResponderError extends MacfError {
+    constructor(message) {
+        super('PROMPT_RESPONDER_ERROR', message);
+        this.name = 'PromptResponderError';
+    }
+}
+/**
+ * A single allowlist entry — the STRUCTURED signature that resolves DR-033 OQ2
+ * (Inv 3). `frame_contains` identifies WHICH prompt (all substrings must be
+ * present); `option_text` is the EXACT rendered text at the `send` ordinal's
+ * line, so `send`↔option binding is machine-checkable, not a fragile substring.
+ *
+ *   - `frame_contains` — substrings that MUST ALL be present in the captured
+ *     frame (Inv 1 identity). Requiring all present also doubles as the
+ *     "wait for the full frame rendered" gate.
+ *   - `option_text` — the exact rendered option text at the `send` position
+ *     (Inv 3 binding). Must appear on a menu line numbered `send`.
+ *   - `send` — the keystroke(s) to send, typically a menu ordinal ("1" / "2").
+ *   - `verify_contains` — OPTIONAL expected substring of the POST-answer
+ *     next-screen (Inv-A "verify the RIGHT outcome"). When set, the watcher
+ *     asserts it appears after sending; when unset the watcher verifies
+ *     signature-clearance only + logs that the outcome check was weaker.
+ *   - `max_fires` — per-prompt fire cap (default 1). An auto-responder that
+ *     fires repeatedly on a recurring pattern is itself a hazard.
+ *
+ * `.strict()` so an operator typo in a field name (e.g. `frame_contain`) is a
+ * loud validation error, not a silently-ignored field.
+ */
+export const PromptResponseEntrySchema = z
+    .object({
+    name: z.string().min(1),
+    frame_contains: z.array(z.string().min(1)).min(1),
+    option_text: z.string().min(1),
+    send: z.string().min(1),
+    verify_contains: z.string().min(1).optional(),
+    max_fires: z.number().int().positive().default(1),
+})
+    .strict();
+/**
+ * The whole config. Top-level is deliberately NON-strict (unknown keys stripped,
+ * not rejected) so the shipped seed can carry a `_comment` operator-note field
+ * without failing validation. Entries stay strict.
+ */
+export const PromptResponsesConfigSchema = z.object({
+    schema_version: z.literal(PROMPT_RESPONSES_SCHEMA_VERSION),
+    entries: z.array(PromptResponseEntrySchema).default([]),
+});
+/**
+ * The signature material Inv-2 classification scans: the entry's identifying
+ * fields, lowercased + joined. Deliberately includes `name` + every
+ * `frame_contains` needle + `option_text` — an authorization-shaped substring
+ * anywhere in what the entry MATCHES ON is enough to refuse/warn.
+ */
+function signatureText(entry) {
+    return [entry.name, ...entry.frame_contains, entry.option_text].join('\n').toLowerCase();
+}
+/** First refuse/warn substring present in the entry, or undefined. */
+function firstSubstring(entry, list) {
+    const hay = signatureText(entry);
+    return list.find((s) => hay.includes(s));
+}
+/**
+ * Classify an entry against the Inv-2 substring lists. `refuse` wins over `warn`
+ * (the destructive/trust list is checked first). Substring match is intentional
+ * and over-refuse-safe: better to reject a benignly-worded entry than to admit a
+ * dangerous one.
+ */
+export function classifyPromptSignature(entry) {
+    if (firstSubstring(entry, PROMPT_REFUSE_SUBSTRINGS) !== undefined)
+        return 'refuse';
+    if (firstSubstring(entry, PROMPT_WARN_SUBSTRINGS) !== undefined)
+        return 'warn';
+    return 'ok';
+}
+/**
+ * Validate + Inv-2-filter a parsed config object. Throws `PromptResponderError`
+ * on a schema-invalid shape (loud — never silently proceed on a malformed
+ * config). Refuse-classified entries are dropped from `accepted`; warn-classified
+ * entries stay in `accepted` (operator-owned risk) but are also listed in
+ * `warned`.
+ */
+export function loadPromptResponses(raw) {
+    const parsed = PromptResponsesConfigSchema.safeParse(raw);
+    if (!parsed.success) {
+        throw new PromptResponderError(`prompt-responses config is invalid: ${parsed.error.issues
+            .map((i) => `${i.path.join('.') || '<root>'}: ${i.message}`)
+            .join('; ')}`);
+    }
+    const accepted = [];
+    const refused = [];
+    const warned = [];
+    for (const entry of parsed.data.entries) {
+        const cls = classifyPromptSignature(entry);
+        if (cls === 'refuse') {
+            refused.push({ entry, matched: firstSubstring(entry, PROMPT_REFUSE_SUBSTRINGS) ?? '' });
+            continue; // Inv 2 hard-refuse: DROP — never expose to the matcher.
+        }
+        if (cls === 'warn') {
+            warned.push({ entry, matched: firstSubstring(entry, PROMPT_WARN_SUBSTRINGS) ?? '' });
+        }
+        accepted.push(entry);
+    }
+    return { accepted, refused, warned };
+}
+/**
+ * Prompt-like frame detector (Inv 1). A frame that matches no allowlist entry
+ * but LOOKS like an interactive prompt (a `❯` selector or a `(y/n)`-style
+ * confirmation) is the dangerous case: an unknown prompt we must NOT answer.
+ * Broad on purpose — false-positive (alert on a non-prompt) is cheap; a
+ * false-negative (miss a real unknown prompt) is the hazard.
+ */
+export function looksPromptLike(frame) {
+    if (frame.includes('❯'))
+        return true;
+    return /\((?:y\/n|y\/N|Y\/n)\)|\[(?:y\/N|Y\/n|y\/n)\]/.test(frame);
+}
+/**
+ * Inv 3 binding: does `optionText` render on a menu line numbered `send`?
+ *
+ * For a numeric `send` (the common menu-ordinal case), the line containing
+ * `optionText` must, after stripping any leading selector glyph / whitespace
+ * (`❯ 1. …`), START with the `send` ordinal followed by a boundary — so a menu
+ * reorder that moves `optionText` to a differently-numbered line breaks the
+ * match. For a non-numeric `send` there is no ordinal to bind to, so presence of
+ * `optionText` is the binding (weaker; the seeds + realistic launch menus are
+ * numbered).
+ */
+export function optionOnSendLine(frame, optionText, send) {
+    const numeric = /^[0-9]+$/.test(send);
+    for (const line of frame.split(/\r?\n/)) {
+        if (!line.includes(optionText))
+            continue;
+        if (!numeric)
+            return true;
+        // Strip the leading run of non-alphanumeric chars (whitespace + any
+        // selector glyph, incl. multibyte `❯`), then require the line to START with
+        // `send` followed by a non-alphanumeric boundary (or end-of-line), so `1`
+        // matches `1.` / `1)` / `1 ` but NOT `10`. Kept identical to the watcher's
+        // awk `_option_on_send_line`.
+        const stripped = line.replace(/^[^0-9A-Za-z]+/, '');
+        if (!stripped.startsWith(send))
+            continue;
+        const rest = stripped.charAt(send.length); // '' when send is the whole token
+        if (rest === '' || !/[0-9A-Za-z]/.test(rest))
+            return true;
+    }
+    return false;
+}
+/**
+ * Does the frame match this specific allowlist entry? All `frame_contains`
+ * present (Inv 1 identity + full-render gate) AND `option_text` present AND
+ * `option_text` on a line numbered `send` (Inv 3 binding).
+ */
+export function entryMatchesFrame(frame, entry) {
+    for (const needle of entry.frame_contains) {
+        if (!frame.includes(needle))
+            return false;
+    }
+    if (!frame.includes(entry.option_text))
+        return false;
+    return optionOnSendLine(frame, entry.option_text, entry.send);
+}
+/**
+ * Match a captured tmux frame against the accepted allowlist (Inv 1 + Inv 3).
+ * Returns the first matching entry; else `unknown-prompt` when the frame looks
+ * prompt-like (→ caller alerts, never answers); else `none` (no prompt / the
+ * agent's own output).
+ */
+export function matchPromptFrame(frame, entries) {
+    for (const entry of entries) {
+        if (entryMatchesFrame(frame, entry))
+            return { kind: 'match', entry };
+    }
+    return looksPromptLike(frame) ? { kind: 'unknown-prompt' } : { kind: 'none' };
+}
+/** Per-prompt fire cap (Inv operational guard): may this entry fire again? */
+export function canFire(entry, firedCount) {
+    return firedCount < entry.max_fires;
+}
+export function verifyOutcome(afterFrame, entry) {
+    if (entryMatchesFrame(afterFrame, entry))
+        return 'not-cleared';
+    if (entry.verify_contains !== undefined) {
+        return afterFrame.includes(entry.verify_contains) ? 'ok' : 'wrong-outcome';
+    }
+    return 'weak-ok';
+}
+/**
+ * The canonical seed config `macf init` writes when no `prompt-responses.json`
+ * exists yet. Two ceremony-ack entries vetted to Inv 2 (neither signature
+ * contains a refuse/warn substring). The exact rendered text of a launch prompt
+ * can only be confirmed by an OPERATOR live-verify (the prompts don't render in
+ * `-p` mode), so a seed that doesn't exactly match a real prompt fails SAFE —
+ * the frame falls through to Inv 1 (unknown-prompt alert), never a wrong answer.
+ * Operators tune the exact `frame_contains` / `option_text` against the real
+ * pane, then the ceremony auto-clears.
+ */
+export const PROMPT_RESPONSES_SEED = {
+    schema_version: PROMPT_RESPONSES_SCHEMA_VERSION,
+    entries: [
+        {
+            name: 'dev-channels',
+            frame_contains: ['I am using this for local development'],
+            option_text: 'I am using this for local development',
+            send: '1',
+            max_fires: 1,
+        },
+        {
+            name: 'resume-summary',
+            frame_contains: ['Resume full session as-is'],
+            option_text: 'Resume full session as-is',
+            send: '2',
+            max_fires: 1,
+        },
+    ],
+};
+//# sourceMappingURL=prompt-responses.js.map

package/dist/prompt-responses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-responses.js","sourceRoot":"","sources":["../src/prompt-responses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,8DAA8D;AAC9D,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAY,CAAC;AAE5D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAEtG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAU,CAAC;AAEzF,uEAAuE;AACvE,MAAM,OAAO,oBAAqB,SAAQ,SAAS;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CAClD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC;IAC1D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC;AAMH;;;;;GAKG;AACH,SAAS,aAAa,CAAC,KAA0B;IAC/C,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3F,CAAC;AAED,sEAAsE;AACtE,SAAS,cAAc,CAAC,KAA0B,EAAE,IAAuB;IACzE,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAA0B;IAChE,IAAI,cAAc,CAAC,KAAK,EAAE,wBAAwB,CAAC,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACnF,IAAI,cAAc,CAAC,KAAK,EAAE,sBAAsB,CAAC,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAmBD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,oBAAoB,CAC5B,uCAAuC,MAAM,CAAC,KAAK,CAAC,MAAM;aACvD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,EAAE,wBAAwB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxF,SAAS,CAAC,yDAAyD;QACrE,CAAC;QACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,UAAkB,EAAE,IAAY;IAC9E,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,SAAS;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,oEAAoE;QACpE,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,kCAAkC;QAC7E,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,KAA0B;IACzE,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAa,EACb,OAAuC;IAEvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAChF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,OAAO,CAAC,KAA0B,EAAE,UAAkB;IACpE,OAAO,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;AACtC,CAAC;AAcD,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,KAA0B;IAC1E,IAAI,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IAC/D,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;IAC7E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA0B;IAC1D,cAAc,EAAE,+BAA+B;IAC/C,OAAO,EAAE;QACP;YACE,IAAI,EAAE,cAAc;YACpB,cAAc,EAAE,CAAC,uCAAuC,CAAC;YACzD,WAAW,EAAE,uCAAuC;YACpD,IAAI,EAAE,GAAG;YACT,SAAS,EAAE,CAAC;SACb;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,cAAc,EAAE,CAAC,2BAA2B,CAAC;YAC7C,WAAW,EAAE,2BAA2B;YACxC,IAAI,EAAE,GAAG;YACT,SAAS,EAAE,CAAC;SACb;KACF;CACF,CAAC"}

package/dist/stall-signatures.d.ts

@@ -0,0 +1,139 @@
+/**
+ * Stall-signature allowlist — config schema, the pure pane-matcher, and the
+ * per-action fire-cap logic behind `macf fleet resume` (DR-037 / groundnuty/macf#686,
+ * porting `groundnuty/macf-devops-toolkit:fleet/resume.sh` + `stall-signatures.json`).
+ *
+ * SAFETY-CRITICAL. `macf fleet resume` acts on an IDLE agent — an idle agent is one
+ * of three things and only the pane tells them apart (operator, 2026-06-28):
+ *
+ *   - idle-CLEAN (no signature matched)      → legitimately idle/done → DO NOTHING.
+ *   - idle-STALLED (rate-limit / turn-abort) → `action: nudge` — resume the SAME
+ *     session (a nudge preserves in-progress work; a restart loses it + re-hits a
+ *     rate-limit). The gentlest recovery.
+ *   - idle-BLOCKED (permission / trust /     → `action: report` — a DURABLE operator
+ *     skill / memory prompt)                   alert, NEVER auto-answered (an
+ *                                              authorization decision needs a human;
+ *                                              DR-033 ceremony-not-authorization).
+ *
+ * The safety contract is the sibling of DR-033's: **allowlist-only, never a blind
+ * nudge.** We act ONLY on an idle agent whose recent pane matches a KNOWN, vetted
+ * signature. An unmatched idle pane is legitimately idle/done → never touched (no
+ * spam). An unknown-but-blocking prompt falls through to no-match → skip; the
+ * operator adds a `report` signature as the TUI evolves (the allowlist is DATA).
+ *
+ * This module holds the PURE logic — the config the operator curates in
+ * `.claude/.macf/stall-signatures.json`, the schema/validator the CLI runs at
+ * `macf init/update/rules refresh`, and the frame-matcher the `fleet resume`
+ * decision layer drives off. The tested reference is the devops `resume.sh` bash
+ * (which reimplements the same match-then-dispatch in bash + jq); the two MUST
+ * stay in lockstep.
+ */
+import { z } from 'zod';
+import { MacfError } from './errors.js';
+/** A matched stall's dispatched action: nudge a stalled agent, or report a blocked one. */
+export declare const STALL_ACTIONS: readonly ["nudge", "report"];
+export type StallAction = (typeof STALL_ACTIONS)[number];
+/**
+ * Per-action default fire cap when an entry omits `max_fires` — a nudge is a
+ * gentle repeatable resume (retry a few times, then escalate), a report is a
+ * one-shot durable alert per episode (re-alerting spams the operator). Mirrors
+ * the devops `resume.sh` defaults (`nudge`=3, `report`=1).
+ */
+export declare const DEFAULT_NUDGE_MAX_FIRES = 3;
+export declare const DEFAULT_REPORT_MAX_FIRES = 1;
+/** Thrown when the stall-signatures config fails schema / regex validation. */
+export declare class StallSignaturesError extends MacfError {
+    constructor(message: string);
+}
+/**
+ * A single stall-signature allowlist entry.
+ *
+ *   - `name` — the signature's stable identifier (rendered in the plan / the
+ *     alert title, so a fire-cap counter can key off it).
+ *   - `signature` — a regular-expression source matched CASE-INSENSITIVELY against
+ *     the captured idle pane (the ERE the devops bash greps with `grep -qiE`; the
+ *     seeds' alternation/`\?`/`\.` forms are JS-RegExp-compatible). Validated for
+ *     compilability at load — a malformed pattern is a LOUD config error, never a
+ *     silent non-match.
+ *   - `action` — `nudge` (resume a stalled agent) or `report` (durable alert for a
+ *     blocked agent; NEVER auto-answered). Defaults to `nudge`.
+ *   - `nudge` — the text sent into the TUI for `action: nudge` (default: a generic
+ *     "please continue").
+ *   - `report` — the operator-facing summary for `action: report` (default: a
+ *     generic "blocked on an operator-input prompt").
+ *   - `max_fires` — per-episode fire cap; omitted → the per-action default.
+ *   - `comment` — operator documentation (why this signature; caveats). Ignored by
+ *     the matcher; kept in the schema so the seed's `comment` fields validate.
+ *
+ * `.strict()` so an operator typo in a field name (e.g. `signatures`) is a loud
+ * validation error, not a silently-ignored field.
+ */
+export declare const StallSignatureEntrySchema: z.ZodObject<{
+    name: z.ZodString;
+    signature: z.ZodString;
+    action: z.ZodDefault<z.ZodEnum<{
+        nudge: "nudge";
+        report: "report";
+    }>>;
+    nudge: z.ZodOptional<z.ZodString>;
+    report: z.ZodOptional<z.ZodString>;
+    max_fires: z.ZodOptional<z.ZodNumber>;
+    comment: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type StallSignatureEntry = z.infer<typeof StallSignatureEntrySchema>;
+/**
+ * The whole config: a bare array of entries — the exact shape of the devops
+ * `fleet/stall-signatures.json` reference (so the two files are interchangeable).
+ */
+export declare const StallSignaturesConfigSchema: z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    signature: z.ZodString;
+    action: z.ZodDefault<z.ZodEnum<{
+        nudge: "nudge";
+        report: "report";
+    }>>;
+    nudge: z.ZodOptional<z.ZodString>;
+    report: z.ZodOptional<z.ZodString>;
+    max_fires: z.ZodOptional<z.ZodNumber>;
+    comment: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>>;
+export type StallSignaturesConfig = z.infer<typeof StallSignaturesConfigSchema>;
+/**
+ * Validate + regex-check a parsed config. Throws `StallSignaturesError` on a
+ * schema-invalid shape OR an uncompilable `signature` (loud — a malformed
+ * allowlist must never silently degrade to "matches nothing"). Returns the
+ * accepted entries.
+ */
+export declare function loadStallSignatures(raw: unknown): readonly StallSignatureEntry[];
+/**
+ * The per-episode fire cap for an entry — its explicit `max_fires`, else the
+ * per-action default (nudge 3 / report 1).
+ */
+export declare function resolveMaxFires(entry: StallSignatureEntry): number;
+/** Fire-cap guard: may this stall-signature fire again given its prior fire count? */
+export declare function canFireStall(entry: StallSignatureEntry, firedCount: number): boolean;
+/**
+ * First allowlist entry whose `signature` regex matches the captured pane
+ * (case-insensitive), or `null` when the pane matches nothing — the idle-CLEAN
+ * case the caller treats as "legitimately idle/done, never touched". Pure.
+ *
+ * A signature that fails to compile is skipped (defensively) rather than
+ * throwing here — `loadStallSignatures` is the fail-loud gate; the matcher stays
+ * total so a single bad entry never breaks a whole sweep.
+ */
+export declare function matchStallSignature(pane: string, entries: readonly StallSignatureEntry[]): StallSignatureEntry | null;
+/**
+ * The canonical seed `macf init` writes when no `stall-signatures.json` exists.
+ * Ported verbatim from `groundnuty/macf-devops-toolkit:fleet/stall-signatures.json`
+ * (the tested reference). Two `nudge` signatures (transient rate-limit / turn-abort
+ * — resume the same session) and three `report` signatures (permission / trust /
+ * skill-or-memory prompts — authorization decisions that must NEVER be
+ * auto-answered, only surfaced as a durable operator alert).
+ *
+ * Signature strings are best-effort across Claude Code versions — the allowlist is
+ * DATA; an operator tunes it against the real pane as the TUI evolves. An imperfect
+ * signature fails SAFE (falls through to no-match → the agent is left untouched,
+ * never a wrong action).
+ */
+export declare const STALL_SIGNATURES_SEED: StallSignaturesConfig;
+//# sourceMappingURL=stall-signatures.d.ts.map

package/dist/stall-signatures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stall-signatures.d.ts","sourceRoot":"","sources":["../src/stall-signatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,2FAA2F;AAC3F,eAAO,MAAM,aAAa,8BAA+B,CAAC;AAC1D,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,+EAA+E;AAC/E,qBAAa,oBAAqB,SAAQ,SAAS;gBACrC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;kBAU3B,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;mBAAqC,CAAC;AAC9E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,mBAAmB,EAAE,CAsBhF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAGlE;AAED,sFAAsF;AACtF,wBAAgB,YAAY,CAAC,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAEpF;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,SAAS,mBAAmB,EAAE,GACtC,mBAAmB,GAAG,IAAI,CAW5B;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,qBAAqB,EAAE,qBA8DnC,CAAC"}

package/dist/stall-signatures.js

@@ -0,0 +1,219 @@
+/**
+ * Stall-signature allowlist — config schema, the pure pane-matcher, and the
+ * per-action fire-cap logic behind `macf fleet resume` (DR-037 / groundnuty/macf#686,
+ * porting `groundnuty/macf-devops-toolkit:fleet/resume.sh` + `stall-signatures.json`).
+ *
+ * SAFETY-CRITICAL. `macf fleet resume` acts on an IDLE agent — an idle agent is one
+ * of three things and only the pane tells them apart (operator, 2026-06-28):
+ *
+ *   - idle-CLEAN (no signature matched)      → legitimately idle/done → DO NOTHING.
+ *   - idle-STALLED (rate-limit / turn-abort) → `action: nudge` — resume the SAME
+ *     session (a nudge preserves in-progress work; a restart loses it + re-hits a
+ *     rate-limit). The gentlest recovery.
+ *   - idle-BLOCKED (permission / trust /     → `action: report` — a DURABLE operator
+ *     skill / memory prompt)                   alert, NEVER auto-answered (an
+ *                                              authorization decision needs a human;
+ *                                              DR-033 ceremony-not-authorization).
+ *
+ * The safety contract is the sibling of DR-033's: **allowlist-only, never a blind
+ * nudge.** We act ONLY on an idle agent whose recent pane matches a KNOWN, vetted
+ * signature. An unmatched idle pane is legitimately idle/done → never touched (no
+ * spam). An unknown-but-blocking prompt falls through to no-match → skip; the
+ * operator adds a `report` signature as the TUI evolves (the allowlist is DATA).
+ *
+ * This module holds the PURE logic — the config the operator curates in
+ * `.claude/.macf/stall-signatures.json`, the schema/validator the CLI runs at
+ * `macf init/update/rules refresh`, and the frame-matcher the `fleet resume`
+ * decision layer drives off. The tested reference is the devops `resume.sh` bash
+ * (which reimplements the same match-then-dispatch in bash + jq); the two MUST
+ * stay in lockstep.
+ */
+import { z } from 'zod';
+import { MacfError } from './errors.js';
+/** A matched stall's dispatched action: nudge a stalled agent, or report a blocked one. */
+export const STALL_ACTIONS = ['nudge', 'report'];
+/**
+ * Per-action default fire cap when an entry omits `max_fires` — a nudge is a
+ * gentle repeatable resume (retry a few times, then escalate), a report is a
+ * one-shot durable alert per episode (re-alerting spams the operator). Mirrors
+ * the devops `resume.sh` defaults (`nudge`=3, `report`=1).
+ */
+export const DEFAULT_NUDGE_MAX_FIRES = 3;
+export const DEFAULT_REPORT_MAX_FIRES = 1;
+/** Thrown when the stall-signatures config fails schema / regex validation. */
+export class StallSignaturesError extends MacfError {
+    constructor(message) {
+        super('STALL_SIGNATURES_ERROR', message);
+        this.name = 'StallSignaturesError';
+    }
+}
+/**
+ * A single stall-signature allowlist entry.
+ *
+ *   - `name` — the signature's stable identifier (rendered in the plan / the
+ *     alert title, so a fire-cap counter can key off it).
+ *   - `signature` — a regular-expression source matched CASE-INSENSITIVELY against
+ *     the captured idle pane (the ERE the devops bash greps with `grep -qiE`; the
+ *     seeds' alternation/`\?`/`\.` forms are JS-RegExp-compatible). Validated for
+ *     compilability at load — a malformed pattern is a LOUD config error, never a
+ *     silent non-match.
+ *   - `action` — `nudge` (resume a stalled agent) or `report` (durable alert for a
+ *     blocked agent; NEVER auto-answered). Defaults to `nudge`.
+ *   - `nudge` — the text sent into the TUI for `action: nudge` (default: a generic
+ *     "please continue").
+ *   - `report` — the operator-facing summary for `action: report` (default: a
+ *     generic "blocked on an operator-input prompt").
+ *   - `max_fires` — per-episode fire cap; omitted → the per-action default.
+ *   - `comment` — operator documentation (why this signature; caveats). Ignored by
+ *     the matcher; kept in the schema so the seed's `comment` fields validate.
+ *
+ * `.strict()` so an operator typo in a field name (e.g. `signatures`) is a loud
+ * validation error, not a silently-ignored field.
+ */
+export const StallSignatureEntrySchema = z
+    .object({
+    name: z.string().min(1),
+    signature: z.string().min(1),
+    action: z.enum(STALL_ACTIONS).default('nudge'),
+    nudge: z.string().min(1).optional(),
+    report: z.string().min(1).optional(),
+    max_fires: z.number().int().positive().optional(),
+    comment: z.string().optional(),
+})
+    .strict();
+/**
+ * The whole config: a bare array of entries — the exact shape of the devops
+ * `fleet/stall-signatures.json` reference (so the two files are interchangeable).
+ */
+export const StallSignaturesConfigSchema = z.array(StallSignatureEntrySchema);
+/**
+ * Validate + regex-check a parsed config. Throws `StallSignaturesError` on a
+ * schema-invalid shape OR an uncompilable `signature` (loud — a malformed
+ * allowlist must never silently degrade to "matches nothing"). Returns the
+ * accepted entries.
+ */
+export function loadStallSignatures(raw) {
+    const parsed = StallSignaturesConfigSchema.safeParse(raw);
+    if (!parsed.success) {
+        throw new StallSignaturesError(`stall-signatures config is invalid: ${parsed.error.issues
+            .map((i) => `${i.path.join('.') || '<root>'}: ${i.message}`)
+            .join('; ')}`);
+    }
+    for (const entry of parsed.data) {
+        try {
+            // Validate compilability up front (fail-loud). Case-insensitive to mirror
+            // the devops `grep -iE`.
+            new RegExp(entry.signature, 'i');
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            throw new StallSignaturesError(`stall-signatures entry "${entry.name}" has an invalid regex signature: ${msg}`);
+        }
+    }
+    return parsed.data;
+}
+/**
+ * The per-episode fire cap for an entry — its explicit `max_fires`, else the
+ * per-action default (nudge 3 / report 1).
+ */
+export function resolveMaxFires(entry) {
+    if (entry.max_fires !== undefined)
+        return entry.max_fires;
+    return entry.action === 'report' ? DEFAULT_REPORT_MAX_FIRES : DEFAULT_NUDGE_MAX_FIRES;
+}
+/** Fire-cap guard: may this stall-signature fire again given its prior fire count? */
+export function canFireStall(entry, firedCount) {
+    return firedCount < resolveMaxFires(entry);
+}
+/**
+ * First allowlist entry whose `signature` regex matches the captured pane
+ * (case-insensitive), or `null` when the pane matches nothing — the idle-CLEAN
+ * case the caller treats as "legitimately idle/done, never touched". Pure.
+ *
+ * A signature that fails to compile is skipped (defensively) rather than
+ * throwing here — `loadStallSignatures` is the fail-loud gate; the matcher stays
+ * total so a single bad entry never breaks a whole sweep.
+ */
+export function matchStallSignature(pane, entries) {
+    for (const entry of entries) {
+        let re;
+        try {
+            re = new RegExp(entry.signature, 'i');
+        }
+        catch {
+            continue;
+        }
+        if (re.test(pane))
+            return entry;
+    }
+    return null;
+}
+/**
+ * The canonical seed `macf init` writes when no `stall-signatures.json` exists.
+ * Ported verbatim from `groundnuty/macf-devops-toolkit:fleet/stall-signatures.json`
+ * (the tested reference). Two `nudge` signatures (transient rate-limit / turn-abort
+ * — resume the same session) and three `report` signatures (permission / trust /
+ * skill-or-memory prompts — authorization decisions that must NEVER be
+ * auto-answered, only surfaced as a durable operator alert).
+ *
+ * Signature strings are best-effort across Claude Code versions — the allowlist is
+ * DATA; an operator tunes it against the real pane as the TUI evolves. An imperfect
+ * signature fails SAFE (falls through to no-match → the agent is left untouched,
+ * never a wrong action).
+ */
+export const STALL_SIGNATURES_SEED = [
+    {
+        name: 'rate-limit',
+        signature: '(temporarily limiting requests|Rate limited|API Error.*limiting)',
+        action: 'nudge',
+        nudge: 'You appear to have stalled on a transient API rate-limit (server-side, not ' +
+            'your usage quota). The limit should have cleared — please continue your work ' +
+            'where you left off.',
+        max_fires: 4,
+        comment: 'Anthropic server-side capacity throttle (NOT the account quota). Leaves the ' +
+            'agent idle mid-flow. Nudge resumes the SAME session (preserves work); restart ' +
+            'would lose it + re-hit the limit. verify-resumed self-corrects a nudge into a ' +
+            'still-active throttle (back off + retry).',
+    },
+    {
+        name: 'turn-aborted',
+        signature: '(Request was aborted|aborted by user|API Error: Connection error)',
+        action: 'nudge',
+        nudge: 'Your last turn aborted before completing. Please continue your work where you left off.',
+        max_fires: 3,
+        comment: 'A turn that died on a transient connection/abort error, leaving the agent ' +
+            'idle. Same resume-not-restart logic.',
+    },
+    {
+        name: 'permission-prompt',
+        signature: '(Do you want to proceed\\?|Do you want to make this edit\\?|Do you want to create|Yes, and don.t ask again)',
+        action: 'report',
+        report: 'blocked on a tool-permission prompt ("Do you want to proceed?") — needs the ' +
+            'operator to approve/deny. Cannot be auto-answered (an authorization decision, ' +
+            'per DR-033 ceremony-not-authorization).',
+        max_fires: 1,
+        comment: 'Claude Code tool-permission dialog. action=report (NOT nudge/answer): ' +
+            'authorization prompts require human judgment, so the correct automation is to ' +
+            'make the silent block LOUD, never to answer it. macf-devops-toolkit#132.',
+    },
+    {
+        name: 'trust-folder-prompt',
+        signature: '(Do you trust the files in this folder\\?|trust the files in this)',
+        action: 'report',
+        report: 'blocked on a folder-trust prompt — needs the operator to confirm trust. ' +
+            'Authorization decision; cannot be auto-answered.',
+        max_fires: 1,
+        comment: "Claude Code 'trust this folder' dialog on a new/changed workspace. action=report. #132.",
+    },
+    {
+        name: 'skill-or-memory-prompt',
+        signature: '(Allow .* to run\\?|Save this to memory\\?|Add this to memory\\?|Allow this skill)',
+        action: 'report',
+        report: 'blocked on a skill-approval or memory-accept prompt — needs the operator\'s ' +
+            'decision. Cannot be auto-answered.',
+        max_fires: 1,
+        comment: 'Skill-approval / memory-accept dialogs. action=report. Signature strings are ' +
+            'best-effort across CC versions — the allowlist is DATA, tune as the TUI evolves. #132.',
+    },
+];
+//# sourceMappingURL=stall-signatures.js.map

package/dist/stall-signatures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stall-signatures.js","sourceRoot":"","sources":["../src/stall-signatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,2FAA2F;AAC3F,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAG1D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AACzC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,+EAA+E;AAC/E,MAAM,OAAO,oBAAqB,SAAQ,SAAS;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAG9E;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,oBAAoB,CAC5B,uCAAuC,MAAM,CAAC,KAAK,CAAC,MAAM;aACvD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,0EAA0E;YAC1E,yBAAyB;YACzB,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,IAAI,oBAAoB,CAC5B,2BAA2B,KAAK,CAAC,IAAI,qCAAqC,GAAG,EAAE,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAA0B;IACxD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC;IAC1D,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,uBAAuB,CAAC;AACxF,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,KAA0B,EAAE,UAAkB;IACzE,OAAO,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,OAAuC;IAEvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA0B;IAC1D;QACE,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,kEAAkE;QAC7E,MAAM,EAAE,OAAO;QACf,KAAK,EACH,6EAA6E;YAC7E,+EAA+E;YAC/E,qBAAqB;QACvB,SAAS,EAAE,CAAC;QACZ,OAAO,EACL,8EAA8E;YAC9E,gFAAgF;YAChF,gFAAgF;YAChF,2CAA2C;KAC9C;IACD;QACE,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,mEAAmE;QAC9E,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,yFAAyF;QAChG,SAAS,EAAE,CAAC;QACZ,OAAO,EACL,4EAA4E;YAC5E,sCAAsC;KACzC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,SAAS,EAAE,6GAA6G;QACxH,MAAM,EAAE,QAAQ;QAChB,MAAM,EACJ,8EAA8E;YAC9E,gFAAgF;YAChF,yCAAyC;QAC3C,SAAS,EAAE,CAAC;QACZ,OAAO,EACL,wEAAwE;YACxE,gFAAgF;YAChF,0EAA0E;KAC7E;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE,oEAAoE;QAC/E,MAAM,EAAE,QAAQ;QAChB,MAAM,EACJ,0EAA0E;YAC1E,kDAAkD;QACpD,SAAS,EAAE,CAAC;QACZ,OAAO,EAAE,yFAAyF;KACnG;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,SAAS,EAAE,oFAAoF;QAC/F,MAAM,EAAE,QAAQ;QAChB,MAAM,EACJ,8EAA8E;YAC9E,oCAAoC;QACtC,SAAS,EAAE,CAAC;QACZ,OAAO,EACL,+EAA+E;YAC/E,wFAAwF;KAC3F;CACF,CAAC"}