@intutic/gate 2.9.0 → 3.0.0

package/dist/scopeMatch.d.ts

@@ -0,0 +1,156 @@
+/**
+ * Scope and plan semantics, ported from the proxy so every surface answers
+ * "is this change inside the scope?" and "is this run on its plan?" the same
+ * way.
+ *
+ * | Function | Port of |
+ * |---|---|
+ * | {@link isWithinScope} | `is_within_scope`, `plugins/anomaly/detectors.rs` |
+ * | {@link collectScopePaths} | `collect_scope_paths`, `sops.rs`, the org ceiling included |
+ * | {@link planOffSteps} | `PlanAdherenceDetector`, `detectors.rs`, with {@link PLAN_DEVIATION_TOLERANCE} |
+ * | {@link changeTargets} | `manifest_from_invocations`, `manifest.rs`: the mutation entries of one call |
+ * | {@link diffChangedPaths} | (new) the paths a unified or git diff changes |
+ *
+ * Beside them, what only the gates need: {@link scopeRelativePath} makes a
+ * gate's target relative to its workspace root (a path outside the root is
+ * out of scope), {@link isPlanExemptTool} names the calls `plan_approval:`
+ * never refuses, and {@link isFileWriteCall} says whether a call changed files,
+ * which makes an earlier passing test run stale (Q1).
+ *
+ * Self-contained but for `./phrases.ts`, so `@intutic/gate` keeps a
+ * byte-identical copy and the JavaScript hook gates embed
+ * {@link SCOPE_MATCH_JS_SOURCE} beside the phrase matcher's source. The
+ * Python port is `intutic_clawde/gate/scope_match.py`; the proxy's Rust runs
+ * the same `fixtures/scope-plan-vectors.json`. `manifestParity.test.ts`
+ * holds the tool and key lists to `manifest.rs` and `actions.rs`.
+ *
+ * @module
+ */
+/** The share of off-plan steps a plan forgives under `plan_steps_mode: advise` (`PLAN_DEVIATION_TOLERANCE` in detectors.rs). */
+export declare const PLAN_DEVIATION_TOLERANCE = 0.4;
+/** What an org ceiling disjoint from the workspace list leaves (`NARROWED_TO_NOTHING`, sops.rs): no path is inside it. */
+export declare const NARROWED_TO_NOTHING = "<none: workspace list disjoint from org ceiling>";
+/** `WRITE_TOOLS`, manifest.rs. */
+export declare const SCOPE_WRITE_TOOLS: readonly string[];
+/** `EDIT_TOOLS`, manifest.rs. */
+export declare const SCOPE_EDIT_TOOLS: readonly string[];
+/** `DELETE_TOOLS`, manifest.rs. */
+export declare const SCOPE_DELETE_TOOLS: readonly string[];
+/** `MOVE_TOOLS`, manifest.rs. */
+export declare const SCOPE_MOVE_TOOLS: readonly string[];
+/** `EDITOR_TOOLS`, actions.rs: the text editor, whose `command` decides whether it writes. */
+export declare const SCOPE_EDITOR_TOOLS: readonly string[];
+/** `PATH_KEYS`, manifest.rs. */
+export declare const SCOPE_PATH_KEYS: readonly string[];
+/** `COMMAND_KEYS`, manifest.rs. */
+export declare const SCOPE_COMMAND_KEYS: readonly string[];
+/** `SHELL_TOOLS`, actions.rs. */
+export declare const SCOPE_SHELL_TOOLS: readonly string[];
+/** `READ_TOOLS`, actions.rs. */
+export declare const SCOPE_READ_TOOLS: readonly string[];
+/** A move's source and destination keys, manifest.rs. */
+export declare const SCOPE_MOVE_FROM_KEYS: readonly string[];
+export declare const SCOPE_MOVE_TO_KEYS: readonly string[];
+/** A target is cut to this many bytes, and marked with `…` when it was (`TARGET_MAX`, manifest.rs). */
+export declare const SCOPE_TARGET_MAX_BYTES = 512;
+/**
+ * Tools `plan_approval:` never refuses: the read tools and the search and
+ * listing tools an agent needs to write a plan in the first place.
+ */
+export declare const PLAN_EXEMPT_TOOLS: readonly string[];
+/**
+ * Shell phrases that change files in the working tree. With the mutation
+ * tools ({@link changeTargets}), a call matching one makes an earlier passing
+ * test run stale ({@link isFileWriteCall}).
+ */
+export declare const FILE_WRITE_SHELL_PHRASES: readonly string[];
+/** A mutation one call makes: what it does and the path it names. */
+export interface ChangeTarget {
+    op: 'write' | 'edit' | 'delete' | 'move';
+    target: string;
+}
+/**
+ * Is `target` inside any of `scopes`? Segment-prefix match: `packages/proxy`
+ * covers `packages/proxy/src/main.rs`, not `packages/proxy-extras/x.rs`.
+ * Leading `./` and `/` and trailing `/` are dropped, and the comparison
+ * ignores ASCII case. An empty scope covers everything.
+ */
+export declare function isWithinScope(target: string, scopes: readonly string[]): boolean;
+/** A SOP as {@link collectScopePaths} reads it. `roles` are lower case, as the parser keeps them. */
+export interface ScopeSop {
+    scope: 'workspace' | 'org';
+    roles: readonly string[];
+    scopePaths: readonly string[];
+}
+/** `applies_to`, sops.rs: an unscoped SOP applies to everyone; a scoped one only to its roles, and never to a caller with no role. */
+export declare function sopAppliesToRole(roles: readonly string[], role: string): boolean;
+/**
+ * The path scope in force for `role` (`collect_scope_paths`): the workspace
+ * SOPs' scopes, narrowed by the org SOPs' (a workspace scope survives when it
+ * is inside an org one; none surviving is {@link NARROWED_TO_NOTHING}; no
+ * workspace scope takes the org's), sorted and deduplicated. Empty means
+ * unrestricted.
+ */
+export declare function collectScopePaths(sops: readonly ScopeSop[], role: string): string[];
+/** A SOP as {@link collectPlanSteps} reads it. */
+export interface PlanSop {
+    scope: 'workspace' | 'org';
+    roles: readonly string[];
+    planSteps: readonly string[];
+}
+/**
+ * The plan in force for `role` (`collect_plan_steps`, sops.rs): the
+ * workspace SOPs' steps in order, not deduplicated (a plan is a sequence),
+ * narrowed by the org SOPs' steps by membership ignoring ASCII case (none
+ * surviving is {@link NARROWED_TO_NOTHING}; no workspace plan takes the
+ * org's). Empty means no plan.
+ */
+export declare function collectPlanSteps(sops: readonly PlanSop[], role: string): string[];
+/**
+ * The off-plan steps of `sequence` against `planSteps` (`PlanAdherenceDetector`):
+ * empty when there is no plan or no sequence, or when the off-plan share is
+ * at most `tolerance`; otherwise the off-plan names, sorted and deduplicated,
+ * with the share. Names compare ignoring ASCII case.
+ */
+export declare function planOffSteps(sequence: readonly string[], planSteps: readonly string[], tolerance: number): {
+    offPlan: string[];
+    ratio: number;
+};
+/**
+ * The mutations one tool call makes, as the proxy's change manifest records
+ * them: a move's source and destination; a text-editor call unless it is a
+ * `view`; a write, edit or delete tool's path. Only path targets that are not
+ * empty, each clipped as the manifest clips it. A shell command is never a
+ * path, so a shell call has none.
+ */
+export declare function changeTargets(tool: string, input: unknown): ChangeTarget[];
+/**
+ * The paths a diff changes, in the order first seen, each once: from
+ * `diff --git a/X b/Y` (both, when it splits unambiguously), `--- a/X`,
+ * `+++ b/Y`, `rename from X` and `rename to Y`. `/dev/null` is not a path.
+ */
+export declare function diffChangedPaths(diff: string): string[];
+/**
+ * `target` relative to the workspace `root` (both resolved against `cwd`
+ * when relative), or null when it is outside the root, names a home
+ * directory (`~`), or either path is not absolute after resolving. A gate
+ * checks the result with {@link isWithinScope}; null is out of scope.
+ */
+export declare function scopeRelativePath(target: string, cwd: string, root: string): string | null;
+/** Whether `plan_approval:` lets `tool` run before the plan is approved: one of {@link PLAN_EXEMPT_TOOLS}, ignoring case, bare or as an MCP tool (`mcp__<server>__grep`). */
+export declare function isPlanExemptTool(tool: string): boolean;
+/**
+ * Whether the call changed files: a mutation ({@link changeTargets}) or a
+ * shell command with one of {@link FILE_WRITE_SHELL_PHRASES} (`sed -i`,
+ * `git checkout`, …). An earlier passing test run is stale after one.
+ */
+export declare function isFileWriteCall(tool: string, input: unknown): boolean;
+/**
+ * The functions above as JavaScript source, for the hook gates to embed
+ * after the phrase matcher's source (`PHRASES_JS_SOURCE`), which
+ * {@link isFileWriteCall} calls. The lists the functions read are written
+ * into them, so the source needs nothing else; `scopeMatch.test.ts` holds
+ * those copies to the exported lists.
+ */
+export declare const SCOPE_MATCH_JS_SOURCE: string;
+//# sourceMappingURL=scopeMatch.d.ts.map

package/dist/scopeMatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopeMatch.d.ts","sourceRoot":"","sources":["../src/scopeMatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,gIAAgI;AAChI,eAAO,MAAM,wBAAwB,MAAM,CAAA;AAE3C,0HAA0H;AAC1H,eAAO,MAAM,mBAAmB,qDAAqD,CAAA;AAErF,kCAAkC;AAClC,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAAsE,CAAA;AACrH,iCAAiC;AACjC,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAAiG,CAAA;AAC/I,mCAAmC;AACnC,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAA4D,CAAA;AAC5G,iCAAiC;AACjC,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAAuD,CAAA;AACrG,8FAA8F;AAC9F,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAAuF,CAAA;AACvI,gCAAgC;AAChC,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAAkF,CAAA;AAC/H,mCAAmC;AACnC,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAAiC,CAAA;AACjF,iCAAiC;AACjC,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAA0H,CAAA;AACzK,gCAAgC;AAChC,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAAqD,CAAA;AACnG,yDAAyD;AACzD,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAAkD,CAAA;AACpG,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAA0D,CAAA;AAC1G,uGAAuG;AACvG,eAAO,MAAM,sBAAsB,MAAM,CAAA;AAEzC;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAA8G,CAAA;AAE7J;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAkBrD,CAAA;AAED,qEAAqE;AACrE,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAA;IACxC,MAAM,EAAE,MAAM,CAAA;CACf;AAiDD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAiBhF;AAED,qGAAqG;AACrG,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,WAAW,GAAG,KAAK,CAAA;IAC1B,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACxB,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAC9B;AAED,sIAAsI;AACtI,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAIhF;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAenF;AAED,kDAAkD;AAClD,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,WAAW,GAAG,KAAK,CAAA;IAC1B,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACxB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAYjF;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAQ/I;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,YAAY,EAAE,CAwB1E;AAoBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CA2BvD;AAaD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAO1F;AAED,6KAA6K;AAC7K,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMtD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAUrE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,QA0ByC,CAAA"}

package/dist/scopeMatch.js

@@ -0,0 +1,438 @@
+/**
+ * Scope and plan semantics, ported from the proxy so every surface answers
+ * "is this change inside the scope?" and "is this run on its plan?" the same
+ * way.
+ *
+ * | Function | Port of |
+ * |---|---|
+ * | {@link isWithinScope} | `is_within_scope`, `plugins/anomaly/detectors.rs` |
+ * | {@link collectScopePaths} | `collect_scope_paths`, `sops.rs`, the org ceiling included |
+ * | {@link planOffSteps} | `PlanAdherenceDetector`, `detectors.rs`, with {@link PLAN_DEVIATION_TOLERANCE} |
+ * | {@link changeTargets} | `manifest_from_invocations`, `manifest.rs`: the mutation entries of one call |
+ * | {@link diffChangedPaths} | (new) the paths a unified or git diff changes |
+ *
+ * Beside them, what only the gates need: {@link scopeRelativePath} makes a
+ * gate's target relative to its workspace root (a path outside the root is
+ * out of scope), {@link isPlanExemptTool} names the calls `plan_approval:`
+ * never refuses, and {@link isFileWriteCall} says whether a call changed files,
+ * which makes an earlier passing test run stale (Q1).
+ *
+ * Self-contained but for `./phrases.ts`, so `@intutic/gate` keeps a
+ * byte-identical copy and the JavaScript hook gates embed
+ * {@link SCOPE_MATCH_JS_SOURCE} beside the phrase matcher's source. The
+ * Python port is `intutic_clawde/gate/scope_match.py`; the proxy's Rust runs
+ * the same `fixtures/scope-plan-vectors.json`. `manifestParity.test.ts`
+ * holds the tool and key lists to `manifest.rs` and `actions.rs`.
+ *
+ * @module
+ */
+import { hasPhrase, phraseText } from './phrases.js';
+/** The share of off-plan steps a plan forgives under `plan_steps_mode: advise` (`PLAN_DEVIATION_TOLERANCE` in detectors.rs). */
+export const PLAN_DEVIATION_TOLERANCE = 0.4;
+/** What an org ceiling disjoint from the workspace list leaves (`NARROWED_TO_NOTHING`, sops.rs): no path is inside it. */
+export const NARROWED_TO_NOTHING = '<none: workspace list disjoint from org ceiling>';
+/** `WRITE_TOOLS`, manifest.rs. */
+export const SCOPE_WRITE_TOOLS = ['write', 'write_file', 'writefile', 'create_file', 'createfile'];
+/** `EDIT_TOOLS`, manifest.rs. */
+export const SCOPE_EDIT_TOOLS = ['edit', 'edit_file', 'editfile', 'multiedit', 'apply_patch', 'str_replace', 'notebookedit'];
+/** `DELETE_TOOLS`, manifest.rs. */
+export const SCOPE_DELETE_TOOLS = ['delete_file', 'deletefile', 'remove_file', 'rm_file'];
+/** `MOVE_TOOLS`, manifest.rs. */
+export const SCOPE_MOVE_TOOLS = ['move_file', 'movefile', 'rename_file', 'rename'];
+/** `EDITOR_TOOLS`, actions.rs: the text editor, whose `command` decides whether it writes. */
+export const SCOPE_EDITOR_TOOLS = ['str_replace_editor', 'text_editor', 'texteditor', 'str_replace_based_edit_tool'];
+/** `PATH_KEYS`, manifest.rs. */
+export const SCOPE_PATH_KEYS = ['file_path', 'filepath', 'path', 'filename', 'target_file', 'notebook_path'];
+/** `COMMAND_KEYS`, manifest.rs. */
+export const SCOPE_COMMAND_KEYS = ['command', 'cmd', 'script'];
+/** `SHELL_TOOLS`, actions.rs. */
+export const SCOPE_SHELL_TOOLS = ['bash', 'shell', 'run_command', 'runcommand', 'execute_command', 'run_shell_command', 'terminal', 'execute', 'exec'];
+/** `READ_TOOLS`, actions.rs. */
+export const SCOPE_READ_TOOLS = ['read', 'readfile', 'view', 'cat', 'open_file'];
+/** A move's source and destination keys, manifest.rs. */
+export const SCOPE_MOVE_FROM_KEYS = ['source', 'source_path', 'from', 'old_path'];
+export const SCOPE_MOVE_TO_KEYS = ['destination', 'destination_path', 'to', 'new_path'];
+/** A target is cut to this many bytes, and marked with `…` when it was (`TARGET_MAX`, manifest.rs). */
+export const SCOPE_TARGET_MAX_BYTES = 512;
+/**
+ * Tools `plan_approval:` never refuses: the read tools and the search and
+ * listing tools an agent needs to write a plan in the first place.
+ */
+export const PLAN_EXEMPT_TOOLS = ['read', 'readfile', 'view', 'cat', 'open_file', 'glob', 'grep', 'ls', 'list_dir', 'search', 'todowrite'];
+/**
+ * Shell phrases that change files in the working tree. With the mutation
+ * tools ({@link changeTargets}), a call matching one makes an earlier passing
+ * test run stale ({@link isFileWriteCall}).
+ */
+export const FILE_WRITE_SHELL_PHRASES = [
+    'sed -i',
+    'perl -i',
+    'perl -pi',
+    'git apply',
+    'git am',
+    'git checkout',
+    'git switch',
+    'git restore',
+    'git reset',
+    'git merge',
+    'git pull',
+    'git rebase',
+    'git cherry-pick',
+    'git revert',
+    'git stash pop',
+    'git stash apply',
+    'patch -p',
+];
+/** ASCII lower case, as Rust's `to_ascii_lowercase`. */
+function scopeAsciiLower(s) {
+    return s.replace(/[A-Z]+/g, (m) => m.toLowerCase());
+}
+/** `tool_is`, actions.rs: the name, lower-cased, is one of `group` or ends with one. */
+function scopeToolIs(name, group) {
+    const lower = name.toLowerCase();
+    for (const t of group)
+        if (lower === t || lower.slice(-t.length) === t)
+            return true;
+    return false;
+}
+/** The first of `keys` whose value in `input` is a non-empty string. */
+function scopeKeyed(input, keys) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input))
+        return null;
+    const o = input;
+    for (const k of keys) {
+        const v = o[k];
+        if (typeof v === 'string' && v !== '')
+            return v;
+    }
+    return null;
+}
+/** `clip`, manifest.rs: the first {@link SCOPE_TARGET_MAX_BYTES} bytes, and `…` when cut. */
+function scopeClip(s) {
+    let bytes = 0;
+    let i = 0;
+    while (i < s.length) {
+        const c = s.charCodeAt(i);
+        let n = 3;
+        let w = 1;
+        if (c < 0x80)
+            n = 1;
+        else if (c < 0x800)
+            n = 2;
+        else if (c >= 0xd800 && c <= 0xdbff && i + 1 < s.length) {
+            const l = s.charCodeAt(i + 1);
+            if (l >= 0xdc00 && l <= 0xdfff) {
+                n = 4;
+                w = 2;
+            }
+        }
+        if (bytes + n > 512)
+            return s.slice(0, i) + '…';
+        bytes += n;
+        i += w;
+    }
+    return s;
+}
+/**
+ * Is `target` inside any of `scopes`? Segment-prefix match: `packages/proxy`
+ * covers `packages/proxy/src/main.rs`, not `packages/proxy-extras/x.rs`.
+ * Leading `./` and `/` and trailing `/` are dropped, and the comparison
+ * ignores ASCII case. An empty scope covers everything.
+ */
+export function isWithinScope(target, scopes) {
+    const norm = (s) => {
+        let t = s;
+        while (t.slice(0, 2) === './')
+            t = t.slice(2);
+        let a = 0;
+        while (a < t.length && t.charAt(a) === '/')
+            a++;
+        t = t.slice(a);
+        let b = t.length;
+        while (b > 0 && t.charAt(b - 1) === '/')
+            b--;
+        return scopeAsciiLower(t.slice(0, b));
+    };
+    const t = norm(target);
+    for (const raw of scopes) {
+        const s = norm(raw);
+        if (s === '' || t === s || t.slice(0, s.length + 1) === s + '/')
+            return true;
+    }
+    return false;
+}
+/** `applies_to`, sops.rs: an unscoped SOP applies to everyone; a scoped one only to its roles, and never to a caller with no role. */
+export function sopAppliesToRole(roles, role) {
+    if (roles.length === 0)
+        return true;
+    if (role === '')
+        return false;
+    return roles.indexOf(scopeAsciiLower(role)) !== -1;
+}
+/**
+ * The path scope in force for `role` (`collect_scope_paths`): the workspace
+ * SOPs' scopes, narrowed by the org SOPs' (a workspace scope survives when it
+ * is inside an org one; none surviving is {@link NARROWED_TO_NOTHING}; no
+ * workspace scope takes the org's), sorted and deduplicated. Empty means
+ * unrestricted.
+ */
+export function collectScopePaths(sops, role) {
+    const workspace = [];
+    const org = [];
+    for (const s of sops) {
+        if (!sopAppliesToRole(s.roles, role))
+            continue;
+        for (const p of s.scopePaths)
+            (s.scope === 'org' ? org : workspace).push(p);
+    }
+    let out;
+    if (org.length === 0)
+        out = workspace;
+    else if (workspace.length === 0)
+        out = org;
+    else {
+        out = workspace.filter((w) => isWithinScope(w, org));
+        if (out.length === 0)
+            out = [NARROWED_TO_NOTHING];
+    }
+    return out.slice().sort().filter((p, i, all) => i === 0 || all[i - 1] !== p);
+}
+/**
+ * The plan in force for `role` (`collect_plan_steps`, sops.rs): the
+ * workspace SOPs' steps in order, not deduplicated (a plan is a sequence),
+ * narrowed by the org SOPs' steps by membership ignoring ASCII case (none
+ * surviving is {@link NARROWED_TO_NOTHING}; no workspace plan takes the
+ * org's). Empty means no plan.
+ */
+export function collectPlanSteps(sops, role) {
+    const workspace = [];
+    const org = [];
+    for (const s of sops) {
+        if (!sopAppliesToRole(s.roles, role))
+            continue;
+        for (const p of s.planSteps)
+            (s.scope === 'org' ? org : workspace).push(p);
+    }
+    if (org.length === 0)
+        return workspace;
+    if (workspace.length === 0)
+        return org;
+    const allowed = org.map(scopeAsciiLower);
+    const out = workspace.filter((w) => allowed.indexOf(scopeAsciiLower(w)) !== -1);
+    return out.length > 0 ? out : [NARROWED_TO_NOTHING];
+}
+/**
+ * The off-plan steps of `sequence` against `planSteps` (`PlanAdherenceDetector`):
+ * empty when there is no plan or no sequence, or when the off-plan share is
+ * at most `tolerance`; otherwise the off-plan names, sorted and deduplicated,
+ * with the share. Names compare ignoring ASCII case.
+ */
+export function planOffSteps(sequence, planSteps, tolerance) {
+    if (planSteps.length === 0 || sequence.length === 0)
+        return { offPlan: [], ratio: 0 };
+    const plan = planSteps.map(scopeAsciiLower);
+    const off = sequence.filter((t) => plan.indexOf(scopeAsciiLower(t)) === -1);
+    if (off.length === 0)
+        return { offPlan: [], ratio: 0 };
+    const ratio = off.length / sequence.length;
+    if (ratio <= tolerance)
+        return { offPlan: [], ratio };
+    return { offPlan: off.slice().sort().filter((p, i, all) => i === 0 || all[i - 1] !== p), ratio: Math.min(1, ratio) };
+}
+/**
+ * The mutations one tool call makes, as the proxy's change manifest records
+ * them: a move's source and destination; a text-editor call unless it is a
+ * `view`; a write, edit or delete tool's path. Only path targets that are not
+ * empty, each clipped as the manifest clips it. A shell command is never a
+ * path, so a shell call has none.
+ */
+export function changeTargets(tool, input) {
+    if (scopeToolIs(tool, ['move_file', 'movefile', 'rename_file', 'rename'])) {
+        const from = scopeKeyed(input, ['source', 'source_path', 'from', 'old_path']);
+        const to = scopeKeyed(input, ['destination', 'destination_path', 'to', 'new_path']);
+        if (from !== null || to !== null) {
+            const out = [];
+            if (from !== null)
+                out.push({ op: 'move', target: scopeClip(from) });
+            if (to !== null)
+                out.push({ op: 'move', target: scopeClip(to) });
+            return out;
+        }
+    }
+    const keys = ['file_path', 'filepath', 'path', 'filename', 'target_file', 'notebook_path'];
+    let op = null;
+    if (scopeToolIs(tool, ['str_replace_editor', 'text_editor', 'texteditor', 'str_replace_based_edit_tool'])) {
+        const o = input !== null && typeof input === 'object' && !Array.isArray(input) ? input : {};
+        const command = typeof o.command === 'string' ? scopeAsciiLower(o.command) : '';
+        op = command === 'view' ? null : command === 'create' ? 'write' : 'edit';
+        if (op === null)
+            return [];
+    }
+    else if (scopeToolIs(tool, ['write', 'write_file', 'writefile', 'create_file', 'createfile']))
+        op = 'write';
+    else if (scopeToolIs(tool, ['edit', 'edit_file', 'editfile', 'multiedit', 'apply_patch', 'str_replace', 'notebookedit']))
+        op = 'edit';
+    else if (scopeToolIs(tool, ['delete_file', 'deletefile', 'remove_file', 'rm_file']))
+        op = 'delete';
+    if (op === null)
+        return [];
+    const target = scopeKeyed(input, keys);
+    return target === null ? [] : [{ op, target: scopeClip(target) }];
+}
+/** One path from a diff header, or null: quotes dropped, a `a/` or `b/` prefix dropped, `/dev/null` and empty refused, anything after a tab cut. */
+function scopeDiffPath(raw, prefix) {
+    let p = raw;
+    const tab = p.indexOf('\t');
+    if (tab !== -1)
+        p = p.slice(0, tab);
+    // Spaces only (not tabs), trimmed by index: a `/[ ]+$/` backtracks
+    // quadratically on a long run of spaces that is not at the end.
+    let start = 0;
+    let end = p.length;
+    while (start < end && p.charCodeAt(start) === 32)
+        start++;
+    while (end > start && p.charCodeAt(end - 1) === 32)
+        end--;
+    p = p.slice(start, end);
+    if (p.length >= 2 && p.charAt(0) === '"' && p.charAt(p.length - 1) === '"')
+        p = p.slice(1, -1);
+    if (p === '/dev/null' || p === '')
+        return null;
+    if (prefix !== '' && p.slice(0, prefix.length) === prefix)
+        p = p.slice(prefix.length);
+    return p === '' ? null : p;
+}
+/**
+ * The paths a diff changes, in the order first seen, each once: from
+ * `diff --git a/X b/Y` (both, when it splits unambiguously), `--- a/X`,
+ * `+++ b/Y`, `rename from X` and `rename to Y`. `/dev/null` is not a path.
+ */
+export function diffChangedPaths(diff) {
+    const out = [];
+    const add = (p) => {
+        if (p !== null && out.indexOf(p) === -1)
+            out.push(p);
+    };
+    for (const raw of diff.split('\n')) {
+        const line = raw.replace(/\r$/, '');
+        if (line.slice(0, 11) === 'diff --git ') {
+            const rest = line.slice(11);
+            if (rest.slice(0, 2) !== 'a/')
+                continue;
+            const first = rest.indexOf(' b/');
+            if (first === -1)
+                continue;
+            if (rest.indexOf(' b/', first + 1) === -1) {
+                add(scopeDiffPath(rest.slice(0, first), 'a/'));
+                add(scopeDiffPath(rest.slice(first + 1), 'b/'));
+            }
+            else if ((rest.length - 5) % 2 === 0) {
+                // `a/P b/P` with ` b/` inside P: the split that names one path twice.
+                const n = (rest.length - 5) / 2;
+                const a = rest.slice(2, 2 + n);
+                if (rest.slice(2 + n, 5 + n) === ' b/' && rest.slice(5 + n) === a)
+                    add(scopeDiffPath(a, ''));
+            }
+        }
+        else if (line.slice(0, 4) === '--- ')
+            add(scopeDiffPath(line.slice(4), 'a/'));
+        else if (line.slice(0, 4) === '+++ ')
+            add(scopeDiffPath(line.slice(4), 'b/'));
+        else if (line.slice(0, 12) === 'rename from ')
+            add(scopeDiffPath(line.slice(12), ''));
+        else if (line.slice(0, 10) === 'rename to ')
+            add(scopeDiffPath(line.slice(10), ''));
+    }
+    return out;
+}
+/** A POSIX path with `.` and `..` resolved and slashes collapsed; `..` never climbs above `/`. */
+function scopeNormalisePath(p) {
+    const parts = [];
+    for (const seg of p.split('/')) {
+        if (seg === '' || seg === '.')
+            continue;
+        if (seg === '..')
+            parts.pop();
+        else
+            parts.push(seg);
+    }
+    return '/' + parts.join('/');
+}
+/**
+ * `target` relative to the workspace `root` (both resolved against `cwd`
+ * when relative), or null when it is outside the root, names a home
+ * directory (`~`), or either path is not absolute after resolving. A gate
+ * checks the result with {@link isWithinScope}; null is out of scope.
+ */
+export function scopeRelativePath(target, cwd, root) {
+    if (target === '' || target.charAt(0) === '~' || cwd.charAt(0) !== '/' || root.charAt(0) !== '/')
+        return null;
+    const abs = scopeNormalisePath(target.charAt(0) === '/' ? target : cwd + '/' + target);
+    const base = scopeNormalisePath(root);
+    if (abs === base)
+        return '';
+    const head = base === '/' ? '/' : base + '/';
+    return abs.slice(0, head.length) === head ? abs.slice(head.length) : null;
+}
+/** Whether `plan_approval:` lets `tool` run before the plan is approved: one of {@link PLAN_EXEMPT_TOOLS}, ignoring case, bare or as an MCP tool (`mcp__<server>__grep`). */
+export function isPlanExemptTool(tool) {
+    const lower = tool.toLowerCase();
+    for (const t of ['read', 'readfile', 'view', 'cat', 'open_file', 'glob', 'grep', 'ls', 'list_dir', 'search', 'todowrite']) {
+        if (lower === t || lower.slice(-(t.length + 2)) === '__' + t)
+            return true;
+    }
+    return false;
+}
+/**
+ * Whether the call changed files: a mutation ({@link changeTargets}) or a
+ * shell command with one of {@link FILE_WRITE_SHELL_PHRASES} (`sed -i`,
+ * `git checkout`, …). An earlier passing test run is stale after one.
+ */
+export function isFileWriteCall(tool, input) {
+    if (changeTargets(tool, input).length > 0)
+        return true;
+    if (!scopeToolIs(tool, ['bash', 'shell', 'run_command', 'runcommand', 'execute_command', 'run_shell_command', 'terminal', 'execute', 'exec']))
+        return false;
+    const command = scopeKeyed(input, ['command', 'cmd', 'script']);
+    if (command === null)
+        return false;
+    const words = phraseText(command);
+    for (const p of ['sed -i', 'perl -i', 'perl -pi', 'git apply', 'git am', 'git checkout', 'git switch', 'git restore', 'git reset', 'git merge', 'git pull', 'git rebase', 'git cherry-pick', 'git revert', 'git stash pop', 'git stash apply', 'patch -p']) {
+        if (hasPhrase(words, p))
+            return true;
+    }
+    return false;
+}
+/**
+ * The functions above as JavaScript source, for the hook gates to embed
+ * after the phrase matcher's source (`PHRASES_JS_SOURCE`), which
+ * {@link isFileWriteCall} calls. The lists the functions read are written
+ * into them, so the source needs nothing else; `scopeMatch.test.ts` holds
+ * those copies to the exported lists.
+ */
+export const SCOPE_MATCH_JS_SOURCE = [
+    scopeAsciiLower,
+    scopeToolIs,
+    scopeKeyed,
+    scopeClip,
+    isWithinScope,
+    sopAppliesToRole,
+    collectScopePaths,
+    collectPlanSteps,
+    planOffSteps,
+    changeTargets,
+    scopeDiffPath,
+    diffChangedPaths,
+    scopeNormalisePath,
+    scopeRelativePath,
+    isPlanExemptTool,
+    isFileWriteCall,
+]
+    .map((fn) => fn
+    .toString()
+    .replace(/\(0,\s*(?:[\w$]+_js_\d+|__vite_ssr_import_\d+__)\.([\w$]+)\)/g, '$1')
+    .replace(/\b(?:[\w$]+_js_\d+|__vite_ssr_import_\d+__)\.([\w$]+)/g, '$1')
+    .replace(/\bexports\./g, ''))
+    .join('\n')
+    .replace(/\bNARROWED_TO_NOTHING\b/g, JSON.stringify(NARROWED_TO_NOTHING));
+//# sourceMappingURL=scopeMatch.js.map

package/dist/scopeMatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopeMatch.js","sourceRoot":"","sources":["../src/scopeMatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEpD,gIAAgI;AAChI,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAA;AAE3C,0HAA0H;AAC1H,MAAM,CAAC,MAAM,mBAAmB,GAAG,kDAAkD,CAAA;AAErF,kCAAkC;AAClC,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,CAAA;AACrH,iCAAiC;AACjC,MAAM,CAAC,MAAM,gBAAgB,GAAsB,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,CAAC,CAAA;AAC/I,mCAAmC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,CAAC,CAAA;AAC5G,iCAAiC;AACjC,MAAM,CAAC,MAAM,gBAAgB,GAAsB,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;AACrG,8FAA8F;AAC9F,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,oBAAoB,EAAE,aAAa,EAAE,YAAY,EAAE,6BAA6B,CAAC,CAAA;AACvI,gCAAgC;AAChC,MAAM,CAAC,MAAM,eAAe,GAAsB,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,CAAC,CAAA;AAC/H,mCAAmC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;AACjF,iCAAiC;AACjC,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;AACzK,gCAAgC;AAChC,MAAM,CAAC,MAAM,gBAAgB,GAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,CAAA;AACnG,yDAAyD;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAsB,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;AACpG,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,aAAa,EAAE,kBAAkB,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;AAC1G,uGAAuG;AACvG,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAA;AAEzC;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;AAE7J;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsB;IACzD,QAAQ;IACR,SAAS;IACT,UAAU;IACV,WAAW;IACX,QAAQ;IACR,cAAc;IACd,YAAY;IACZ,aAAa;IACb,WAAW;IACX,WAAW;IACX,UAAU;IACV,YAAY;IACZ,iBAAiB;IACjB,YAAY;IACZ,eAAe;IACf,iBAAiB;IACjB,UAAU;CACX,CAAA;AAQD,wDAAwD;AACxD,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;AACrD,CAAC;AAED,wFAAwF;AACxF,SAAS,WAAW,CAAC,IAAY,EAAE,KAAwB;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IAChC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;IACnF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CAAC,KAAc,EAAE,IAAuB;IACzD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACpF,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACd,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,6FAA6F;AAC7F,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,GAAG,CAAC,CAAA;QACT,IAAI,CAAC,GAAG,CAAC,CAAA;QACT,IAAI,CAAC,GAAG,IAAI;YAAE,CAAC,GAAG,CAAC,CAAA;aACd,IAAI,CAAC,GAAG,KAAK;YAAE,CAAC,GAAG,CAAC,CAAA;aACpB,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YACxD,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YAC7B,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;gBAC/B,CAAC,GAAG,CAAC,CAAA;gBACL,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,GAAG,GAAG;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAA;QAC/C,KAAK,IAAI,CAAC,CAAA;QACV,CAAC,IAAI,CAAC,CAAA;IACR,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,MAAyB;IACrE,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE;QACjC,IAAI,CAAC,GAAG,CAAC,CAAA;QACT,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC7C,IAAI,CAAC,GAAG,CAAC,CAAA;QACT,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,CAAC,EAAE,CAAA;QAC/C,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACd,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,CAAC,EAAE,CAAA;QAC5C,OAAO,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACvC,CAAC,CAAA;IACD,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IACtB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;QACnB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG;YAAE,OAAO,IAAI,CAAA;IAC9E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AASD,sIAAsI;AACtI,MAAM,UAAU,gBAAgB,CAAC,KAAwB,EAAE,IAAY;IACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACnC,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,KAAK,CAAA;IAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAyB,EAAE,IAAY;IACvE,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC;YAAE,SAAQ;QAC9C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU;YAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,GAAa,CAAA;IACjB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,GAAG,SAAS,CAAA;SAChC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,GAAG,GAAG,CAAA;SACrC,CAAC;QACJ,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QACpD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAA;IACnD,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;AAC9E,CAAC;AASD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAwB,EAAE,IAAY;IACrE,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC;YAAE,SAAQ;QAC9C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS;YAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACtC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAA;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IACxC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC/E,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAA;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,QAA2B,EAAE,SAA4B,EAAE,SAAiB;IACvG,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;IACrF,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;IACtD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;IAC1C,IAAI,KAAK,IAAI,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;IACrD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAA;AACtH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAc;IACxD,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;QAC7E,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,kBAAkB,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAA;QACnF,IAAI,IAAI,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,GAAG,GAAmB,EAAE,CAAA;YAC9B,IAAI,IAAI,KAAK,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACpE,IAAI,EAAE,KAAK,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YAChE,OAAO,GAAG,CAAA;QACZ,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,CAAC,CAAA;IAC1F,IAAI,EAAE,GAA8B,IAAI,CAAA;IACxC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,oBAAoB,EAAE,aAAa,EAAE,YAAY,EAAE,6BAA6B,CAAC,CAAC,EAAE,CAAC;QAC1G,MAAM,CAAC,GAAG,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAA;QACxH,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/E,EAAE,GAAG,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;QACxE,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,EAAE,CAAA;IAC5B,CAAC;SAAM,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;QAAE,EAAE,GAAG,OAAO,CAAA;SACxG,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;QAAE,EAAE,GAAG,MAAM,CAAA;SAChI,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QAAE,EAAE,GAAG,QAAQ,CAAA;IAClG,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACtC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACnE,CAAC;AAED,oJAAoJ;AACpJ,SAAS,aAAa,CAAC,GAAW,EAAE,MAAc;IAChD,IAAI,CAAC,GAAG,GAAG,CAAA;IACX,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACnC,mEAAmE;IACnE,gEAAgE;IAChE,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAA;IAClB,OAAO,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,CAAA;IACzD,OAAO,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,CAAA;IACzD,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACvB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9F,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA;IAC9C,IAAI,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrF,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,GAAG,GAAG,CAAC,CAAgB,EAAE,EAAE;QAC/B,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACtD,CAAC,CAAA;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QACnC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,aAAa,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI;gBAAE,SAAQ;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACjC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,SAAQ;YAC1B,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;gBAC9C,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;YACjD,CAAC;iBAAM,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,sEAAsE;gBACtE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;gBAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC9B,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;oBAAE,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YAC9F,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM;YAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;aAC1E,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM;YAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;aACxE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,cAAc;YAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;aAChF,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,YAAY;YAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;IACrF,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,kGAAkG;AAClG,SAAS,kBAAkB,CAAC,CAAS;IACnC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;YAAE,SAAQ;QACvC,IAAI,GAAG,KAAK,IAAI;YAAE,KAAK,CAAC,GAAG,EAAE,CAAA;;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,GAAW,EAAE,IAAY;IACzE,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAC7G,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,CAAA;IACtF,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACrC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC3B,MAAM,IAAI,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAA;IAC5C,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC3E,CAAC;AAED,6KAA6K;AAC7K,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IAChC,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1H,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;IAC3E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAc;IAC1D,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACtD,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3J,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC/D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;IACjC,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,UAAU,CAAC,EAAE,CAAC;QAC3P,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;IACtC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,eAAe;IACf,WAAW;IACX,UAAU;IACV,SAAS;IACT,aAAa;IACb,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,kBAAkB;IAClB,iBAAiB;IACjB,gBAAgB;IAChB,eAAe;CAChB;KACE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACV,EAAE;KACC,QAAQ,EAAE;KACV,OAAO,CAAC,+DAA+D,EAAE,IAAI,CAAC;KAC9E,OAAO,CAAC,wDAAwD,EAAE,IAAI,CAAC;KACvE,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAC/B;KACA,IAAI,CAAC,IAAI,CAAC;KACV,OAAO,CAAC,0BAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAA"}