@intutic/sync-daemon 2.0.0 → 2.2.0

package/dist/harness/protectedPaths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protectedPaths.d.ts","sourceRoot":"","sources":["../../src/harness/protectedPaths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAIH,iEAAiE;AACjE,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAiEtD,CAAA;AAMD;;;;;;;GAOG;AACH;;;;;;;;;GASG;AACH;;0DAE0D;AAC1D,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAA;AAEvF,MAAM,WAAW,YAAY;IAC3B;4EACwE;IACxE,EAAE,EAAE,MAAM,CAAA;IACV,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAA;IACd;;;;;6BAKyB;IACzB,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,iEAAiE;IACjE,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAA;IAC9C;wDACoD;IACpD,MAAM,EAAE,MAAM,CAAA;IACd;;2BAEuB;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,gCAAgC;IAChC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B;;;yCAGqC;IACrC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAoCD,eAAO,MAAM,kBAAkB;IAC7B;;;;;;OAMG;iBACqD,CAAC,CAAC,EAAE,OAAO,KAAK,MAAM;IAE9E,oEAAoE;;IAGpE;;;;;;;;;;;;;OAaG;IACH,8DAA8D;;IAM9D;;;;;;;;;;;OAWG;;CASK,CAAA;AAEV;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CA2BlE;AA0CD;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,YAAY,EAyD5D,CAAA;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,YAAY,EAyG1D,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,YAAY,EA+CxD,CAAA;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,YAAY,EAmJ/D,CAAA;AA2CD,wBAAgB,0BAA0B,IAAI,SAAS,YAAY,EAAE,CAEpE;AAED;;;;;;;;;;kBAUkB;AAClB,wBAAgB,mBAAmB,IAAI,SAAS,YAAY,EAAE,CAO7D"}
+{"version":3,"file":"protectedPaths.d.ts","sourceRoot":"","sources":["../../src/harness/protectedPaths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAIH,iEAAiE;AACjE,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAuEtD,CAAA;AAMD;;;;;;;GAOG;AACH;;;;;;;;;GASG;AACH;;0DAE0D;AAC1D,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAA;AAEvF,MAAM,WAAW,YAAY;IAC3B;4EACwE;IACxE,EAAE,EAAE,MAAM,CAAA;IACV,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAA;IACd;;;;;6BAKyB;IACzB,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,iEAAiE;IACjE,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAA;IAC9C;wDACoD;IACpD,MAAM,EAAE,MAAM,CAAA;IACd;;2BAEuB;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,gCAAgC;IAChC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B;;;yCAGqC;IACrC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAoCD,eAAO,MAAM,kBAAkB;IAC7B;;;;;;OAMG;iBACqD,CAAC,CAAC,EAAE,OAAO,KAAK,MAAM;IAE9E,oEAAoE;;IAGpE;;;;;;;;;;;;;OAaG;IACH,8DAA8D;;IAM9D;;;;;;;;;;;OAWG;;CASK,CAAA;AAEV;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CA2BlE;AA0CD;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,YAAY,EAyD5D,CAAA;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,YAAY,EAyG1D,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,YAAY,EA+CxD,CAAA;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAgC1D;AAaD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,YAAY,EAsBzD,CAAA;AAiCD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,YAAY,EAoJ/D,CAAA;AA2CD,wBAAgB,0BAA0B,IAAI,SAAS,YAAY,EAAE,CAEpE;AAED;;;;;;;;;;kBAUkB;AAClB,wBAAgB,mBAAmB,IAAI,SAAS,YAAY,EAAE,CAO7D"}

package/dist/harness/protectedPaths.js

@@ -60,7 +60,7 @@
  *
  * @module
  */
-import { SECRET_VALUE_PATTERNS } from '@intutic/shared-types';
+import { SECRET_VALUE_PATTERNS, SKILL_CONTENT_BLOCK_PATTERN_IDS, SKILL_SCAN_PATTERNS } from '@intutic/shared-types';
 /** Governance config that must hold still, for every harness. */
 export const UNIVERSAL_PROTECTED_PATHS = [
     // Intutic's own enforcement surface.
@@ -110,9 +110,15 @@ export const UNIVERSAL_PROTECTED_PATHS = [
     // directory (every profile's cordis.patch.yml, not just one), the same
     // "the surface, not the one file" discipline `.grok/hooks` above uses —
     // dsh may have zero, one, or several profiles, and a tamper anywhere under
-    // it is the same threat. `.dsh/settings.yaml` is the LLM-egress half; both
-    // are the only two files `dshHooks.ts` writes.
+    // it is the same threat. `.dsh/cordis.patch.yml` is the home-level patch
+    // layer, applied AFTER every profile's own (dsh 0.2 `dsh-app-boot`: "the
+    // home-level file ... outranks it") — one `{ id: intutic-governance,
+    // disabled: true }` or `llm-deepseek` row there overrides both halves this
+    // writer puts in the profile files. `.dsh/settings.yaml` is no longer
+    // written, but dsh 0.2 still imports a leftover one into the next profile
+    // that boots, so it remains a way to rewrite the egress row.
     '.dsh/profiles',
+    '.dsh/cordis.patch.yml',
     '.dsh/settings.yaml',
     // OpenCode — the plugin directories OpenCode globs (`.opencode/plugin` and
     // `.opencode/plugins` are both read; only the latter is written) plus the
@@ -532,12 +538,9 @@ export const SECRET_CONTENT_PATTERNS = assertGuardTableSane((() => {
  * exists to flag — narrower than `UNIVERSAL_PROTECTED_PATHS`'s "any mention"
  * rule on purpose, since that rule blocks and this one only advises.
  *
- * A future promotion to `block` on skill CONTENT (not path) is a different,
- * later, and still-open decision — it needs the corpus measurement TD-358
- * describes, which this change does not supply. It should ship through the
- * same policy-snapshot channel the way this path-tier promotion and
- * `DESTRUCTIVE_COMMAND_PATTERNS` both do, so it too is retractable in a sync
- * cycle rather than a release if the measurement turns out wrong.
+ * Blocking on skill CONTENT (not path) is a separate table,
+ * {@link SKILL_CONTENT_PATTERNS}, licensed by the benign-corpus measurement
+ * TD-358 asked for and shipped only through the policy snapshot.
  */
 export const SKILL_SURFACE_PATTERNS = assertGuardTableSane([
     {
@@ -583,6 +586,152 @@ export const SKILL_SURFACE_PATTERNS = assertGuardTableSane([
         ],
     },
 ]);
+/**
+ * Rewrites a case-insensitive JS `RegExp` source into a case-SENSITIVE one that
+ * means the same thing in JS and Python `re`, for use as an `argPattern`.
+ *
+ * Why: an `argPattern` is compiled with no flags by every gate family
+ * (`new RegExp(p)` in the JS gates, `re.compile(p)` in the bash gates'
+ * python3 helper), and there is no inline case-insensitive flag both engines
+ * accept — JS rejects a leading `(?i)`. The `skillScan.ts` patterns are matched
+ * case-insensitively, so each ASCII letter becomes `[xX]`.
+ *
+ * Also rewrites `\s` outside a character class to `(?:\s|\\[nrt])`. An
+ * argPattern sees `JSON.stringify(tool_input)`, where a newline in the content
+ * is the two characters `\n`; without this, `do not\ntell the user` would stop
+ * matching the moment the words wrap. Known residual gap: a `\b` directly after
+ * such an escape sees `n` as a word character, so a few line-wrapped phrasings
+ * still slip. That costs recall, not precision.
+ *
+ * Throws on a letter range inside a class (`[a-z]`). None of the scan patterns
+ * has one, and folding one correctly is more code than the case deserves.
+ */
+export function caseFoldedArgSource(source) {
+    let out = '';
+    let inClass = false;
+    for (let i = 0; i < source.length; i++) {
+        const c = source[i];
+        if (c === '\\') {
+            const next = source[i + 1] ?? '';
+            out += !inClass && next === 's' ? '(?:\\s|\\\\[nrt])' : c + next;
+            i++;
+            continue;
+        }
+        const isLetter = /[A-Za-z]/.test(c);
+        if (inClass) {
+            if (c === ']')
+                inClass = false;
+            if (isLetter && (source[i + 1] === '-' || source[i - 1] === '-')) {
+                throw new Error(`caseFoldedArgSource: letter range in a character class is not supported: ${source}`);
+            }
+            out += isLetter ? c.toLowerCase() + c.toUpperCase() : c;
+            continue;
+        }
+        if (c === '[') {
+            inClass = true;
+            out += c;
+            if (source[i + 1] === '^') {
+                out += '^';
+                i++;
+            }
+            continue;
+        }
+        out += isLetter ? `[${c.toLowerCase()}${c.toUpperCase()}]` : c;
+    }
+    return out;
+}
+/**
+ * The JSON keys whose string value is content being WRITTEN, across the
+ * harnesses' write and edit tools: `content` (Write, write_file, write_to_file,
+ * OpenCode write), `new_string` / `newString` (Edit, MultiEdit's `edits[]`,
+ * OpenCode edit), `new_str` / `file_text` (str_replace_editor). `old_string`
+ * is left out on purpose: an edit that REMOVES a poisoned line is the fix, not
+ * the attack. Diff-shaped editors (`apply_patch`, Cline's `replace_in_file`)
+ * carry old and new text in one field and are not covered.
+ */
+const WRITTEN_CONTENT_KEYS = ['content', 'new_string', 'newString', 'new_str', 'file_text'];
+/**
+ * Skill-CONTENT block tier (TD-358): a write into a skill directory whose
+ * written text matches one of the `skillScan.ts` patterns measured at zero
+ * false positives on the benign-skill corpus (`SKILL_CONTENT_BLOCK_PATTERN_IDS`;
+ * `packages/shared-types/src/__tests__/corpus/skills/`, 350 real skills).
+ * `read-sensitive-path` fired on 11 of them and is not here.
+ *
+ * Each rule is two conditions, which a GuardPattern can express: `source`
+ * matches the write's target path against the skill surface (subject
+ * `target`, as in {@link SKILL_SURFACE_PATTERNS}), and `argPattern`, which
+ * every gate family already evaluates for SOP WHERE clauses, matches the
+ * pattern inside the value of a {@link WRITTEN_CONTENT_KEYS} key of the
+ * serialized tool input.
+ *
+ * **Snapshot-only, never in `staticFloorPatterns()`**, as TD-358 required: a
+ * content judgement ships where one sync cycle retracts it
+ * (`SKILL_CONTENT_TIER_SEVERITY` in `lib/policySnapshot.ts`). The table's own
+ * `warn` is a placeholder the snapshot builder always overrides.
+ *
+ * **What it adds over the path tier.** In steady state
+ * `skill_surface.*.tier` already refuses every write under a skill directory,
+ * so today this tier mostly changes the reason the developer reads. It
+ * becomes the only refusal if the path tier is retracted to `warn`. That
+ * independence is the point: the blanket path block and the narrow content
+ * block can each be retracted without the other. One exception: the
+ * `@intutic/gate-js` and `intutic-clawde` snapshot readers do not read the
+ * `.rules` argPattern column (true of every WHERE rule shipped this way), so
+ * in those two the content rules act as path-only blocks — the same calls
+ * `skill_surface.*.tier` already refuses. Retracting only the path tier would
+ * not unblock benign skill writes there; flip both constants.
+ *
+ * **What it does not catch.** A write through a shell redirect or heredoc
+ * (`cat > .claude/skills/x/SKILL.md`). `subject: 'command'` cannot tell that
+ * from a `grep '<system>' .claude/skills/`, and the corpus measured skill
+ * files, not commands. It also misses diff-shaped editors (see
+ * {@link WRITTEN_CONTENT_KEYS}), symlinked or relative-walk targets (the same
+ * limits as the path tier), and some line-wrapped phrasings (see
+ * {@link caseFoldedArgSource}).
+ */
+export const SKILL_CONTENT_PATTERNS = assertGuardTableSane(SKILL_CONTENT_BLOCK_PATTERN_IDS.map((id) => {
+    const scan = SKILL_SCAN_PATTERNS.find((p) => p.id === id);
+    const argPattern = `"(?:${WRITTEN_CONTENT_KEYS.join('|')})":"(?:[^"\\\\]|\\\\.)*?(?:${caseFoldedArgSource(scan.source)})`;
+    assertSkillContentArgSane(id, argPattern, scan.matches, scan.notMatches);
+    return {
+        id: `skill_content.${id}`,
+        source: '\\.(agents|claude)/skills/',
+        subject: 'target',
+        severity: 'warn',
+        reason: `Write into a skill file contains a ${scan.category.replace('_', ' ')} pattern ` +
+            `(${id}): ${scan.description}`,
+        rationale: 'See SKILL_CONTENT_PATTERNS. Zero hits on the 350-skill benign corpus licenses the block; ' +
+            'shell-redirect writes, diff-shaped editors and symlinked targets are not caught.',
+        matches: [' .claude/skills/x/SKILL.md ', ' /w/.agents/skills/y/SKILL.md '],
+        notMatches: [' src/skills/x.md ', ' .claude/settings.json ', ' README.md '],
+        argPattern,
+    };
+}));
+/**
+ * The argPattern half of {@link SKILL_CONTENT_PATTERNS}' fixture contract,
+ * which `assertGuardTableSane` does not check: every one of the scan pattern's
+ * own `matches` must fire when written as `content`, in either case, and none
+ * of its `notMatches` may. The same text as `old_string` must NOT fire.
+ */
+function assertSkillContentArgSane(id, argPattern, matches, notMatches) {
+    const re = new RegExp(argPattern);
+    const target = '/w/.claude/skills/x/SKILL.md';
+    for (const m of matches) {
+        for (const v of [m, m.toUpperCase(), m.toLowerCase()]) {
+            if (!re.test(JSON.stringify({ file_path: target, content: v }))) {
+                throw new Error(`SKILL_CONTENT_PATTERNS ${id}: argPattern misses declared match ${JSON.stringify(v)}`);
+            }
+        }
+        if (re.test(JSON.stringify({ file_path: target, old_string: m, new_string: 'fixed' }))) {
+            throw new Error(`SKILL_CONTENT_PATTERNS ${id}: argPattern fires on old_string — removing the line would be refused`);
+        }
+    }
+    for (const nm of notMatches) {
+        if (re.test(JSON.stringify({ file_path: target, content: nm }))) {
+            throw new Error(`SKILL_CONTENT_PATTERNS ${id}: argPattern matches declared notMatch ${JSON.stringify(nm)}`);
+        }
+    }
+}
 /**
  * Commands that destroy the machine or its data irrecoverably.
  *
@@ -727,8 +876,9 @@ export const DESTRUCTIVE_COMMAND_PATTERNS = assertGuardTableSane(
         rationale: 'Demoted from the hook gate\'s hard block. Against a local development ' +
             'database this is what a migration looks like, and the gate cannot tell a ' +
             'dev DSN from a production one — the proxy can, and that is where a block ' +
-            'belongs. Warn keeps the signal without owning a decision it lacks the ' +
-            'context to make.',
+            'belongs: a SOP declaring `sql_guard:` with an `sql_allow_dsns:` allowlist ' +
+            'refuses it at the LLM proxy (packages/proxy/src/plugins/sql_guard.rs). ' +
+            'Warn keeps the signal without owning a decision it lacks the context to make.',
         matches: [' DROP TABLE users ', ' drop database app ', ' TRUNCATE TABLE events '],
         notMatches: [' SELECT * FROM users ', ' echo drop it ', ' git stash drop '],
     },

package/dist/harness/protectedPaths.js.map

@@ -1 +1 @@
-{"version":3,"file":"protectedPaths.js","sourceRoot":"","sources":["../../src/harness/protectedPaths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,iEAAiE;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,qCAAqC;IACrC,gBAAgB;IAChB,yBAAyB;IACzB,iBAAiB;IAEjB,sEAAsE;IACtE,4EAA4E;IAC5E,oEAAoE;IACpE,uBAAuB;IACvB,6BAA6B;IAE7B,2EAA2E;IAC3E,sEAAsE;IACtE,iCAAiC;IACjC,oBAAoB;IACpB,cAAc;IACd,8BAA8B;IAC9B,0EAA0E;IAC1E,qEAAqE;IACrE,oEAAoE;IACpE,qEAAqE;IACrE,2CAA2C;IAC3C,qBAAqB;IACrB,sBAAsB;IACtB,uBAAuB;IACvB,uBAAuB;IACvB,oCAAoC;IAEpC,2EAA2E;IAC3E,gEAAgE;IAChE,kBAAkB;IAClB,4BAA4B;IAC5B,yCAAyC;IAEzC,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,qEAAqE;IACrE,wEAAwE;IACxE,qEAAqE;IACrE,uCAAuC;IACvC,aAAa;IACb,mBAAmB;IACnB,4BAA4B;IAE5B,sEAAsE;IACtE,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,2EAA2E;IAC3E,+CAA+C;IAC/C,eAAe;IACf,oBAAoB;IAEpB,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnE,mBAAmB;IACnB,kBAAkB;IAClB,0BAA0B;CAC3B,CAAA;AAoGD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH;;;;;;;;;;GAUG;AACH,MAAM,iBAAiB,GAAG,8DAA8D,CAAA;AAExF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC;;;;;;OAMG;IACH,EAAE,EAAE,IAAI,QAAQ,CAAC,GAAG,EAAE,UAAU,iBAAiB,EAAE,CAA2B;IAE9E,oEAAoE;IACpE,QAAQ,EAAE,4CAA4C,iBAAiB,MAAM;IAE7E;;;;;;;;;;;;;OAaG;IACH,8DAA8D;IAC9D,QAAQ,EAAE;QACR,+BAA+B;QAC/B,oFAAoF;KACrF,CAAC,IAAI,CAAC,IAAI,CAAC;IAEZ;;;;;;;;;;;OAWG;IACH,KAAK,EAAE;QACL,uBAAuB;QACvB,gBAAgB;QAChB,sCAAsC;QACtC,2DAA2D;QAC3D,wBAAwB;QACxB,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC;CACJ,CAAA;AAEV;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,EAAU;IAC1D,MAAM,SAAS,GAA6C;QAC1D,CAAC,cAAc,EAAE,8FAA8F,CAAC;QAChH;YACE,cAAc;YACd,6EAA6E;gBAC3E,wEAAwE;gBACxE,0EAA0E;gBAC1E,8EAA8E;SACjF;QACD,CAAC,OAAO,EAAE,mEAAmE,CAAC;QAC9E,CAAC,MAAM,EAAE,sDAAsD,CAAC;QAChE,CAAC,SAAS,EAAE,kCAAkC,CAAC;QAC/C,CAAC,aAAa,EAAE,6EAA6E,CAAC;QAC9F,CAAC,eAAe,EAAE,uEAAuE,CAAC;QAC1F,CAAC,IAAI,EAAE,uDAAuD,CAAC;QAC/D,CAAC,GAAG,EAAE,uEAAuE,CAAC;KAC/E,CAAA;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,KAAK,GAAG,QAAQ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACtG,CAAC;IACD,sCAAsC;IACtC,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,CAAC,CAAA;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IAC5F,CAAC;AACH,CAAC;AAED;+CAC+C;AAC/C,SAAS,oBAAoB,CAAC,QAAiC;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,iBAAiB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAA;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC7E,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACd,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,gBAAgB,CAAC,CAAC,EAAE,uDAAuD;gBACzE,sEAAsE;gBACtE,sEAAsE;gBACtE,uEAAuE,CAC1E,CAAA;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACxD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CACb,gBAAgB,CAAC,CAAC,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB;oBACzE,oEAAoE,CACvE,CAAA;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,gBAAgB,CAAC,CAAC,EAAE,iDAAiD;gBACnE,sEAAsE,CACzE,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,8DAA8D;AAC9D,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAA4B,oBAAoB,CAAC;IACtF;QACE,EAAE,EAAE,uBAAuB;QAC3B,MAAM,EAAE,mBAAmB;QAC3B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,mFAAmF;QAC3F,SAAS,EACP,sEAAsE;YACtE,uEAAuE;YACvE,0EAA0E;YAC1E,iEAAiE;QACnE,OAAO,EAAE,CAAC,iCAAiC,EAAE,6BAA6B,EAAE,sBAAsB,CAAC;QACnG,4EAA4E;QAC5E,wEAAwE;QACxE,mCAAmC;QACnC,UAAU,EAAE,CAAC,gCAAgC,EAAE,eAAe,EAAE,gBAAgB,CAAC;KAClF;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,MAAM,EAAE,uBAAuB;QAC/B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,wFAAwF;QAChG,SAAS,EACP,uEAAuE;YACvE,uEAAuE;YACvE,sDAAsD;QACxD,OAAO,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,sBAAsB,CAAC;QACxE,UAAU,EAAE,CAAC,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,CAAC;KAChE;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,MAAM,EAAE,iDAAiD;QACzD,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,sEAAsE;QAC9E,SAAS,EACP,gEAAgE;YAChE,sEAAsE;YACtE,wEAAwE;YACxE,oEAAoE;QACtE,OAAO,EAAE,CAAC,8BAA8B,EAAE,wBAAwB,EAAE,+BAA+B,CAAC;QACpG,UAAU,EAAE,CAAC,uBAAuB,EAAE,0BAA0B,EAAE,qBAAqB,CAAC;KACzF;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,0BAA0B;QAClC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,2FAA2F;QACnG,SAAS,EACP,yEAAyE;YACzE,0EAA0E;YAC1E,mEAAmE;YACnE,uEAAuE;YACvE,mEAAmE;YACnE,+DAA+D;QACjE,OAAO,EAAE,CAAC,yBAAyB,EAAE,uBAAuB,EAAE,yCAAyC,CAAC;QACxG,UAAU,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,wBAAwB,CAAC;KAC7E;CACF,CAAC,CAAA;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA4B,oBAAoB,CAClF,CAAC,GAAG,EAAE;IACJ,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,MAAM,GAAG,MAAM,GAAG,kBAAkB,CAAA;IAC1C,MAAM,MAAM,GAAG,SAAS,GAAG,wBAAwB,CAAA;IACnD,MAAM,OAAO,GAAG,MAAM,GAAG,sCAAsC,CAAA;IAC/D,MAAM,KAAK,GAAG,WAAW,GAAG,0BAA0B,CAAA;IACtD,6EAA6E;IAC7E,MAAM,KAAK,GAAG,KAAK,GAAG,kCAAkC,CAAA;IACxD,gFAAgF;IAChF,MAAM,MAAM,GAAG,MAAM,GAAG,kCAAkC,GAAG,kCAAkC,CAAA;IAC/F,MAAM,SAAS,GAAG,UAAU,GAAG,0BAA0B,CAAA;IACzD,MAAM,YAAY,GAAG,aAAa,GAAG,sBAAsB,CAAA;IAC3D,MAAM,SAAS,GAAG,aAAa,GAAG,kBAAkB,CAAA;IACpD,MAAM,QAAQ,GAAgE;QAC5E,wBAAwB,EAAE;YACxB,OAAO,EAAE,CAAC,oDAAoD,MAAM,KAAK,CAAC;YAC1E,UAAU,EAAE;gBACV,2CAA2C;gBAC3C,cAAc,GAAG,MAAM,GAAG,aAAa,EAAE,yBAAyB;gBAClE,cAAc,GAAG,MAAM,GAAG,oBAAoB,EAAE,4BAA4B;aAC7E;SACF;QACD,2BAA2B,EAAE;YAC3B,OAAO,EAAE,CAAC,iCAAiC,MAAM,IAAI,CAAC;YACtD,UAAU,EAAE;gBACV,oDAAoD;gBACpD,cAAc,GAAG,SAAS,GAAG,SAAS;gBACtC,oDAAoD;aACrD;SACF;QACD,sBAAsB,EAAE;YACtB,OAAO,EAAE,CAAC,6BAA6B,OAAO,IAAI,CAAC;YACnD,UAAU,EAAE;gBACV,6CAA6C;gBAC7C,cAAc,GAAG,MAAM,GAAG,eAAe;gBACzC,cAAc,GAAG,MAAM,GAAG,wCAAwC;aACnE;SACF;QACD,yBAAyB,EAAE;YACzB,OAAO,EAAE,CAAC,eAAe,YAAY,IAAI,EAAE,eAAe,SAAS,IAAI,CAAC;YACxE,UAAU,EAAE;gBACV,2CAA2C;gBAC3C,0CAA0C;gBAC1C,qDAAqD;aACtD;SACF;QACD,4BAA4B,EAAE;YAC5B,OAAO,EAAE,CAAC,kCAAkC,KAAK,IAAI,CAAC;YACtD,UAAU,EAAE;gBACV,kDAAkD;gBAClD,cAAc,GAAG,WAAW,GAAG,SAAS;gBACxC,cAAc,GAAG,WAAW,GAAG,4BAA4B,EAAE,oBAAoB;aAClF;SACF;QACD,6BAA6B,EAAE;YAC7B,OAAO,EAAE,CAAC,+BAA+B,KAAK,IAAI,CAAC;YACnD,UAAU,EAAE;gBACV,sDAAsD;gBACtD,cAAc,GAAG,KAAK,GAAG,YAAY;gBACrC,2DAA2D;gBAC3D,cAAc,GAAG,KAAK,GAAG,mCAAmC;aAC7D;SACF;QACD,+BAA+B,EAAE;YAC/B,OAAO,EAAE,CAAC,6CAA6C,MAAM,IAAI,CAAC;YAClE,UAAU,EAAE;gBACV,iDAAiD;gBACjD,cAAc,GAAG,MAAM,GAAG,YAAY;gBACtC,2DAA2D;gBAC3D,cAAc,GAAG,MAAM,GAAG,kCAAkC,GAAG,mCAAmC;aACnG;SACF;QACD,2BAA2B,EAAE;YAC3B,OAAO,EAAE,CAAC,iCAAiC,SAAS,IAAI,CAAC;YACzD,UAAU,EAAE;gBACV,uDAAuD;gBACvD,cAAc,GAAG,UAAU,GAAG,SAAS;gBACvC,cAAc,GAAG,UAAU,GAAG,4BAA4B,EAAE,sBAAsB;aACnF;SACF;KACF,CAAA;IACD,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAgB,EAAE;QACnD,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACxB,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAA;QAC5E,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,OAAO;YACjB,MAAM,EACJ,GAAG,CAAC,CAAC,WAAW,kDAAkD;gBAClE,gEAAgE;gBAChE,yDAAyD;YAC3D,SAAS,EACP,oEAAoE;gBACpE,mEAAmE;gBACnE,kEAAkE;gBAClE,0BAA0B;YAC5B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,EAAE,CACL,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA4B,oBAAoB,CAAC;IAClF;QACE,EAAE,EAAE,mCAAmC;QACvC,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,MAAM;QAChB,MAAM,EACJ,kFAAkF;YAClF,qFAAqF;QACvF,SAAS,EACP,sFAAsF;YACtF,uFAAuF;YACvF,wEAAwE;QAC1E,OAAO,EAAE;YACP,oCAAoC;YACpC,0CAA0C;YAC1C,kDAAkD;SACnD;QACD,UAAU,EAAE;YACV,oBAAoB;YACpB,+BAA+B;YAC/B,aAAa;YACb,uCAAuC;SACxC;KACF;IACD;QACE,EAAE,EAAE,mCAAmC;QACvC,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,MAAM;QAChB,MAAM,EACJ,kFAAkF;YAClF,qFAAqF;QACvF,SAAS,EACP,gFAAgF;QAClF,OAAO,EAAE;YACP,oCAAoC;YACpC,0CAA0C;YAC1C,kDAAkD;SACnD;QACD,UAAU,EAAE;YACV,yBAAyB;YACzB,2BAA2B;YAC3B,+BAA+B;YAC/B,uCAAuC;SACxC;KACF;CACF,CAAC,CAAA;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAA4B,oBAAoB;AACvF,8EAA8E;AAC9E,4EAA4E;AAC5E,sDAAsD;AACrD;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,+BAA+B;QACvC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,yCAAyC;QACjD,SAAS,EACP,0EAA0E;YAC1E,0EAA0E;YAC1E,2EAA2E;YAC3E,iEAAiE;QACnE,OAAO,EAAE;YACP,YAAY;YACZ,+BAA+B;YAC/B,iBAAiB;YACjB,aAAa;YACb,uBAAuB;SACxB;QACD,UAAU,EAAE;YACV,iCAAiC;YACjC,iBAAiB;YACjB,YAAY;YACZ,uBAAuB;YACvB,uBAAuB;YACvB,iBAAiB;SAClB;KACF;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,MAAM,EAAE,yBAAyB;QACjC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,2BAA2B;QACnC,SAAS,EACP,0EAA0E;YAC1E,0EAA0E;YAC1E,4EAA4E;QAC9E,OAAO,EAAE,CAAC,uBAAuB,EAAE,yBAAyB,EAAE,8BAA8B,CAAC;QAC7F,UAAU,EAAE,CAAC,sBAAsB,EAAE,eAAe,EAAE,oBAAoB,CAAC;KAC5E;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,MAAM,EAAE,gBAAgB;QACxB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,yCAAyC;QACjD,SAAS,EACP,0EAA0E;YAC1E,uEAAuE;YACvE,yEAAyE;YACzE,qEAAqE;QACvE,OAAO,EAAE,CAAC,+BAA+B,EAAE,wCAAwC,EAAE,wBAAwB,CAAC;QAC9G,UAAU,EAAE,CAAC,gCAAgC,EAAE,iCAAiC,EAAE,aAAa,CAAC;KACjG;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,oCAAoC;QAC5C,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,uBAAuB;QAC/B,SAAS,EACP,2EAA2E;YAC3E,4EAA4E;YAC5E,gCAAgC;QAClC,OAAO,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,gCAAgC,CAAC;QACvF,UAAU,EAAE,CAAC,uBAAuB,EAAE,iBAAiB,EAAE,YAAY,CAAC;KACvE;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,gDAAgD;QACxD,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,wDAAwD;QAChE,SAAS,EACP,0EAA0E;YAC1E,uEAAuE;YACvE,0BAA0B;QAC5B,OAAO,EAAE,CAAC,kBAAkB,EAAE,wBAAwB,EAAE,mBAAmB,CAAC;QAC5E,UAAU,EAAE,CAAC,6BAA6B,EAAE,sBAAsB,EAAE,eAAe,CAAC;KACrF;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,0DAA0D;QAClE,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,uDAAuD;QAC/D,SAAS,EACP,qEAAqE;YACrE,oEAAoE;YACpE,0BAA0B;QAC5B,OAAO,EAAE,CAAC,iBAAiB,EAAE,8BAA8B,EAAE,uBAAuB,CAAC;QACrF,UAAU,EAAE,CAAC,wBAAwB,EAAE,4BAA4B,EAAE,qBAAqB,CAAC;KAC5F;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,MAAM,EAAE,qBAAqB;QAC7B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,WAAW;QACnB,SAAS,EACP,sEAAsE;YACtE,0EAA0E;YAC1E,yEAAyE;YACzE,+CAA+C;QACjD,OAAO,EAAE,CAAC,eAAe,EAAE,oBAAoB,EAAE,yBAAyB,CAAC;QAC3E,UAAU,EAAE,CAAC,YAAY,EAAE,uBAAuB,EAAE,wBAAwB,CAAC;KAC9E;IACD,0EAA0E;IAC1E;QACE,EAAE,EAAE,6BAA6B;QACjC,MAAM,EAAE,2CAA2C;QACnD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,kDAAkD;QAC1D,SAAS,EACP,uEAAuE;YACvE,sEAAsE;YACtE,yEAAyE;YACzE,uBAAuB;QACzB,OAAO,EAAE,CAAC,gCAAgC,EAAE,mCAAmC,EAAE,gBAAgB,CAAC;QAClG,UAAU,EAAE,CAAC,0BAA0B,EAAE,6BAA6B,EAAE,yBAAyB,CAAC;KACnG;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,MAAM,EAAE,mDAAmD;QAC3D,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,2BAA2B;QACnC,SAAS,EACP,wEAAwE;YACxE,2EAA2E;YAC3E,2EAA2E;YAC3E,wEAAwE;YACxE,kBAAkB;QACpB,OAAO,EAAE,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,CAAC;QACjF,UAAU,EAAE,CAAC,uBAAuB,EAAE,gBAAgB,EAAE,kBAAkB,CAAC;KAC5E;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,2DAA2D;QACnE,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,sDAAsD;QAC9D,SAAS,EACP,sEAAsE;YACtE,2EAA2E;YAC3E,oDAAoD;QACtD,OAAO,EAAE,CAAC,2BAA2B,EAAE,kBAAkB,EAAE,gCAAgC,CAAC;QAC5F,UAAU,EAAE,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,wBAAwB,CAAC;KAC/E;CACiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,SAAkB,EAAE,CAAC,CAAC,CACvE,CAAA;AAED;;;;;;;;;;;;;;;GAeG;AACH;;;;;;GAMG;AACH,MAAM,6BAA6B,GAA4B,CAAC,GAAG,EAAE,CACnE,oBAAoB,CAClB,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpC,EAAE,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE;IACpE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,OAAgB;IAC1B,MAAM,EAAE,0DAA0D,CAAC,EAAE;IACrE,SAAS,EACP,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,CAAC,GAAG;IACZ,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC;IACnE,UAAU,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,iBAAiB,CAAC;CAC9D,CAAC,CAAC,CACJ,CAAC,EAAE,CAAA;AAEN,MAAM,UAAU,0BAA0B;IACxC,OAAO,6BAA6B,CAAA;AACtC,CAAC;AAED;;;;;;;;;;kBAUkB;AAClB,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,GAAG,0BAA0B;QAC7B,GAAG,uBAAuB;QAC1B,GAAG,sBAAsB;QACzB,GAAG,0BAA0B,EAAE;KAChC,CAAA;AACH,CAAC"}
+{"version":3,"file":"protectedPaths.js","sourceRoot":"","sources":["../../src/harness/protectedPaths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAEH,OAAO,EAAE,qBAAqB,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAEnH,iEAAiE;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,qCAAqC;IACrC,gBAAgB;IAChB,yBAAyB;IACzB,iBAAiB;IAEjB,sEAAsE;IACtE,4EAA4E;IAC5E,oEAAoE;IACpE,uBAAuB;IACvB,6BAA6B;IAE7B,2EAA2E;IAC3E,sEAAsE;IACtE,iCAAiC;IACjC,oBAAoB;IACpB,cAAc;IACd,8BAA8B;IAC9B,0EAA0E;IAC1E,qEAAqE;IACrE,oEAAoE;IACpE,qEAAqE;IACrE,2CAA2C;IAC3C,qBAAqB;IACrB,sBAAsB;IACtB,uBAAuB;IACvB,uBAAuB;IACvB,oCAAoC;IAEpC,2EAA2E;IAC3E,gEAAgE;IAChE,kBAAkB;IAClB,4BAA4B;IAC5B,yCAAyC;IAEzC,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,qEAAqE;IACrE,wEAAwE;IACxE,qEAAqE;IACrE,uCAAuC;IACvC,aAAa;IACb,mBAAmB;IACnB,4BAA4B;IAE5B,sEAAsE;IACtE,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,2EAA2E;IAC3E,sEAAsE;IACtE,0EAA0E;IAC1E,6DAA6D;IAC7D,eAAe;IACf,uBAAuB;IACvB,oBAAoB;IAEpB,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnE,mBAAmB;IACnB,kBAAkB;IAClB,0BAA0B;CAC3B,CAAA;AAoGD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH;;;;;;;;;;GAUG;AACH,MAAM,iBAAiB,GAAG,8DAA8D,CAAA;AAExF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC;;;;;;OAMG;IACH,EAAE,EAAE,IAAI,QAAQ,CAAC,GAAG,EAAE,UAAU,iBAAiB,EAAE,CAA2B;IAE9E,oEAAoE;IACpE,QAAQ,EAAE,4CAA4C,iBAAiB,MAAM;IAE7E;;;;;;;;;;;;;OAaG;IACH,8DAA8D;IAC9D,QAAQ,EAAE;QACR,+BAA+B;QAC/B,oFAAoF;KACrF,CAAC,IAAI,CAAC,IAAI,CAAC;IAEZ;;;;;;;;;;;OAWG;IACH,KAAK,EAAE;QACL,uBAAuB;QACvB,gBAAgB;QAChB,sCAAsC;QACtC,2DAA2D;QAC3D,wBAAwB;QACxB,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC;CACJ,CAAA;AAEV;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,EAAU;IAC1D,MAAM,SAAS,GAA6C;QAC1D,CAAC,cAAc,EAAE,8FAA8F,CAAC;QAChH;YACE,cAAc;YACd,6EAA6E;gBAC3E,wEAAwE;gBACxE,0EAA0E;gBAC1E,8EAA8E;SACjF;QACD,CAAC,OAAO,EAAE,mEAAmE,CAAC;QAC9E,CAAC,MAAM,EAAE,sDAAsD,CAAC;QAChE,CAAC,SAAS,EAAE,kCAAkC,CAAC;QAC/C,CAAC,aAAa,EAAE,6EAA6E,CAAC;QAC9F,CAAC,eAAe,EAAE,uEAAuE,CAAC;QAC1F,CAAC,IAAI,EAAE,uDAAuD,CAAC;QAC/D,CAAC,GAAG,EAAE,uEAAuE,CAAC;KAC/E,CAAA;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,KAAK,GAAG,QAAQ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACtG,CAAC;IACD,sCAAsC;IACtC,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,CAAC,CAAA;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IAC5F,CAAC;AACH,CAAC;AAED;+CAC+C;AAC/C,SAAS,oBAAoB,CAAC,QAAiC;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,iBAAiB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAA;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC7E,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACd,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,gBAAgB,CAAC,CAAC,EAAE,uDAAuD;gBACzE,sEAAsE;gBACtE,sEAAsE;gBACtE,uEAAuE,CAC1E,CAAA;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACxD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CACb,gBAAgB,CAAC,CAAC,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB;oBACzE,oEAAoE,CACvE,CAAA;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,gBAAgB,CAAC,CAAC,EAAE,iDAAiD;gBACnE,sEAAsE,CACzE,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,8DAA8D;AAC9D,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAA4B,oBAAoB,CAAC;IACtF;QACE,EAAE,EAAE,uBAAuB;QAC3B,MAAM,EAAE,mBAAmB;QAC3B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,mFAAmF;QAC3F,SAAS,EACP,sEAAsE;YACtE,uEAAuE;YACvE,0EAA0E;YAC1E,iEAAiE;QACnE,OAAO,EAAE,CAAC,iCAAiC,EAAE,6BAA6B,EAAE,sBAAsB,CAAC;QACnG,4EAA4E;QAC5E,wEAAwE;QACxE,mCAAmC;QACnC,UAAU,EAAE,CAAC,gCAAgC,EAAE,eAAe,EAAE,gBAAgB,CAAC;KAClF;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,MAAM,EAAE,uBAAuB;QAC/B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,wFAAwF;QAChG,SAAS,EACP,uEAAuE;YACvE,uEAAuE;YACvE,sDAAsD;QACxD,OAAO,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,sBAAsB,CAAC;QACxE,UAAU,EAAE,CAAC,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,CAAC;KAChE;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,MAAM,EAAE,iDAAiD;QACzD,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,sEAAsE;QAC9E,SAAS,EACP,gEAAgE;YAChE,sEAAsE;YACtE,wEAAwE;YACxE,oEAAoE;QACtE,OAAO,EAAE,CAAC,8BAA8B,EAAE,wBAAwB,EAAE,+BAA+B,CAAC;QACpG,UAAU,EAAE,CAAC,uBAAuB,EAAE,0BAA0B,EAAE,qBAAqB,CAAC;KACzF;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,0BAA0B;QAClC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,2FAA2F;QACnG,SAAS,EACP,yEAAyE;YACzE,0EAA0E;YAC1E,mEAAmE;YACnE,uEAAuE;YACvE,mEAAmE;YACnE,+DAA+D;QACjE,OAAO,EAAE,CAAC,yBAAyB,EAAE,uBAAuB,EAAE,yCAAyC,CAAC;QACxG,UAAU,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,wBAAwB,CAAC;KAC7E;CACF,CAAC,CAAA;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA4B,oBAAoB,CAClF,CAAC,GAAG,EAAE;IACJ,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,MAAM,GAAG,MAAM,GAAG,kBAAkB,CAAA;IAC1C,MAAM,MAAM,GAAG,SAAS,GAAG,wBAAwB,CAAA;IACnD,MAAM,OAAO,GAAG,MAAM,GAAG,sCAAsC,CAAA;IAC/D,MAAM,KAAK,GAAG,WAAW,GAAG,0BAA0B,CAAA;IACtD,6EAA6E;IAC7E,MAAM,KAAK,GAAG,KAAK,GAAG,kCAAkC,CAAA;IACxD,gFAAgF;IAChF,MAAM,MAAM,GAAG,MAAM,GAAG,kCAAkC,GAAG,kCAAkC,CAAA;IAC/F,MAAM,SAAS,GAAG,UAAU,GAAG,0BAA0B,CAAA;IACzD,MAAM,YAAY,GAAG,aAAa,GAAG,sBAAsB,CAAA;IAC3D,MAAM,SAAS,GAAG,aAAa,GAAG,kBAAkB,CAAA;IACpD,MAAM,QAAQ,GAAgE;QAC5E,wBAAwB,EAAE;YACxB,OAAO,EAAE,CAAC,oDAAoD,MAAM,KAAK,CAAC;YAC1E,UAAU,EAAE;gBACV,2CAA2C;gBAC3C,cAAc,GAAG,MAAM,GAAG,aAAa,EAAE,yBAAyB;gBAClE,cAAc,GAAG,MAAM,GAAG,oBAAoB,EAAE,4BAA4B;aAC7E;SACF;QACD,2BAA2B,EAAE;YAC3B,OAAO,EAAE,CAAC,iCAAiC,MAAM,IAAI,CAAC;YACtD,UAAU,EAAE;gBACV,oDAAoD;gBACpD,cAAc,GAAG,SAAS,GAAG,SAAS;gBACtC,oDAAoD;aACrD;SACF;QACD,sBAAsB,EAAE;YACtB,OAAO,EAAE,CAAC,6BAA6B,OAAO,IAAI,CAAC;YACnD,UAAU,EAAE;gBACV,6CAA6C;gBAC7C,cAAc,GAAG,MAAM,GAAG,eAAe;gBACzC,cAAc,GAAG,MAAM,GAAG,wCAAwC;aACnE;SACF;QACD,yBAAyB,EAAE;YACzB,OAAO,EAAE,CAAC,eAAe,YAAY,IAAI,EAAE,eAAe,SAAS,IAAI,CAAC;YACxE,UAAU,EAAE;gBACV,2CAA2C;gBAC3C,0CAA0C;gBAC1C,qDAAqD;aACtD;SACF;QACD,4BAA4B,EAAE;YAC5B,OAAO,EAAE,CAAC,kCAAkC,KAAK,IAAI,CAAC;YACtD,UAAU,EAAE;gBACV,kDAAkD;gBAClD,cAAc,GAAG,WAAW,GAAG,SAAS;gBACxC,cAAc,GAAG,WAAW,GAAG,4BAA4B,EAAE,oBAAoB;aAClF;SACF;QACD,6BAA6B,EAAE;YAC7B,OAAO,EAAE,CAAC,+BAA+B,KAAK,IAAI,CAAC;YACnD,UAAU,EAAE;gBACV,sDAAsD;gBACtD,cAAc,GAAG,KAAK,GAAG,YAAY;gBACrC,2DAA2D;gBAC3D,cAAc,GAAG,KAAK,GAAG,mCAAmC;aAC7D;SACF;QACD,+BAA+B,EAAE;YAC/B,OAAO,EAAE,CAAC,6CAA6C,MAAM,IAAI,CAAC;YAClE,UAAU,EAAE;gBACV,iDAAiD;gBACjD,cAAc,GAAG,MAAM,GAAG,YAAY;gBACtC,2DAA2D;gBAC3D,cAAc,GAAG,MAAM,GAAG,kCAAkC,GAAG,mCAAmC;aACnG;SACF;QACD,2BAA2B,EAAE;YAC3B,OAAO,EAAE,CAAC,iCAAiC,SAAS,IAAI,CAAC;YACzD,UAAU,EAAE;gBACV,uDAAuD;gBACvD,cAAc,GAAG,UAAU,GAAG,SAAS;gBACvC,cAAc,GAAG,UAAU,GAAG,4BAA4B,EAAE,sBAAsB;aACnF;SACF;KACF,CAAA;IACD,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAgB,EAAE;QACnD,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACxB,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAA;QAC5E,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,OAAO;YACjB,MAAM,EACJ,GAAG,CAAC,CAAC,WAAW,kDAAkD;gBAClE,gEAAgE;gBAChE,yDAAyD;YAC3D,SAAS,EACP,oEAAoE;gBACpE,mEAAmE;gBACnE,kEAAkE;gBAClE,0BAA0B;YAC5B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,EAAE,CACL,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA4B,oBAAoB,CAAC;IAClF;QACE,EAAE,EAAE,mCAAmC;QACvC,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,MAAM;QAChB,MAAM,EACJ,kFAAkF;YAClF,qFAAqF;QACvF,SAAS,EACP,sFAAsF;YACtF,uFAAuF;YACvF,wEAAwE;QAC1E,OAAO,EAAE;YACP,oCAAoC;YACpC,0CAA0C;YAC1C,kDAAkD;SACnD;QACD,UAAU,EAAE;YACV,oBAAoB;YACpB,+BAA+B;YAC/B,aAAa;YACb,uCAAuC;SACxC;KACF;IACD;QACE,EAAE,EAAE,mCAAmC;QACvC,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,MAAM;QAChB,MAAM,EACJ,kFAAkF;YAClF,qFAAqF;QACvF,SAAS,EACP,gFAAgF;QAClF,OAAO,EAAE;YACP,oCAAoC;YACpC,0CAA0C;YAC1C,kDAAkD;SACnD;QACD,UAAU,EAAE;YACV,yBAAyB;YACzB,2BAA2B;YAC3B,+BAA+B;YAC/B,uCAAuC;SACxC;KACF;CACF,CAAC,CAAA;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAA;QACpB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;YAChC,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;YAChE,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,GAAG,KAAK,CAAA;YAC9B,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,KAAK,CAAC,4EAA4E,MAAM,EAAE,CAAC,CAAA;YACvG,CAAC;YACD,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACvD,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,OAAO,GAAG,IAAI,CAAA;YACd,GAAG,IAAI,CAAC,CAAA;YACR,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC1B,GAAG,IAAI,GAAG,CAAA;gBACV,CAAC,EAAE,CAAA;YACL,CAAC;YACD,SAAQ;QACV,CAAC;QACD,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAA;AAE3F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA4B,oBAAoB,CACjF,+BAA+B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAgB,EAAE;IACvD,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAE,CAAA;IAC1D,MAAM,UAAU,GACd,OAAO,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,8BAA8B,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA;IACxG,yBAAyB,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IACxE,OAAO;QACL,EAAE,EAAE,iBAAiB,EAAE,EAAE;QACzB,MAAM,EAAE,4BAA4B;QACpC,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,MAAM;QAChB,MAAM,EACJ,sCAAsC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW;YAChF,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,EAAE;QAChC,SAAS,EACP,2FAA2F;YAC3F,kFAAkF;QACpF,OAAO,EAAE,CAAC,6BAA6B,EAAE,gCAAgC,CAAC;QAC1E,UAAU,EAAE,CAAC,mBAAmB,EAAE,yBAAyB,EAAE,aAAa,CAAC;QAC3E,UAAU;KACX,CAAA;AACH,CAAC,CAAC,CACH,CAAA;AAED;;;;;GAKG;AACH,SAAS,yBAAyB,CAChC,EAAU,EACV,UAAkB,EAClB,OAA0B,EAC1B,UAA6B;IAE7B,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,8BAA8B,CAAA;IAC7C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,0BAA0B,EAAE,sCAAsC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACxG,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,0BAA0B,EAAE,uEAAuE,CAAC,CAAA;QACtH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,0BAA0B,EAAE,0CAA0C,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC7G,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAA4B,oBAAoB;AACvF,8EAA8E;AAC9E,4EAA4E;AAC5E,sDAAsD;AACrD;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,+BAA+B;QACvC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,yCAAyC;QACjD,SAAS,EACP,0EAA0E;YAC1E,0EAA0E;YAC1E,2EAA2E;YAC3E,iEAAiE;QACnE,OAAO,EAAE;YACP,YAAY;YACZ,+BAA+B;YAC/B,iBAAiB;YACjB,aAAa;YACb,uBAAuB;SACxB;QACD,UAAU,EAAE;YACV,iCAAiC;YACjC,iBAAiB;YACjB,YAAY;YACZ,uBAAuB;YACvB,uBAAuB;YACvB,iBAAiB;SAClB;KACF;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,MAAM,EAAE,yBAAyB;QACjC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,2BAA2B;QACnC,SAAS,EACP,0EAA0E;YAC1E,0EAA0E;YAC1E,4EAA4E;QAC9E,OAAO,EAAE,CAAC,uBAAuB,EAAE,yBAAyB,EAAE,8BAA8B,CAAC;QAC7F,UAAU,EAAE,CAAC,sBAAsB,EAAE,eAAe,EAAE,oBAAoB,CAAC;KAC5E;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,MAAM,EAAE,gBAAgB;QACxB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,yCAAyC;QACjD,SAAS,EACP,0EAA0E;YAC1E,uEAAuE;YACvE,yEAAyE;YACzE,qEAAqE;QACvE,OAAO,EAAE,CAAC,+BAA+B,EAAE,wCAAwC,EAAE,wBAAwB,CAAC;QAC9G,UAAU,EAAE,CAAC,gCAAgC,EAAE,iCAAiC,EAAE,aAAa,CAAC;KACjG;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,oCAAoC;QAC5C,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,uBAAuB;QAC/B,SAAS,EACP,2EAA2E;YAC3E,4EAA4E;YAC5E,gCAAgC;QAClC,OAAO,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,gCAAgC,CAAC;QACvF,UAAU,EAAE,CAAC,uBAAuB,EAAE,iBAAiB,EAAE,YAAY,CAAC;KACvE;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,gDAAgD;QACxD,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,wDAAwD;QAChE,SAAS,EACP,0EAA0E;YAC1E,uEAAuE;YACvE,0BAA0B;QAC5B,OAAO,EAAE,CAAC,kBAAkB,EAAE,wBAAwB,EAAE,mBAAmB,CAAC;QAC5E,UAAU,EAAE,CAAC,6BAA6B,EAAE,sBAAsB,EAAE,eAAe,CAAC;KACrF;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,0DAA0D;QAClE,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,uDAAuD;QAC/D,SAAS,EACP,qEAAqE;YACrE,oEAAoE;YACpE,0BAA0B;QAC5B,OAAO,EAAE,CAAC,iBAAiB,EAAE,8BAA8B,EAAE,uBAAuB,CAAC;QACrF,UAAU,EAAE,CAAC,wBAAwB,EAAE,4BAA4B,EAAE,qBAAqB,CAAC;KAC5F;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,MAAM,EAAE,qBAAqB;QAC7B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,WAAW;QACnB,SAAS,EACP,sEAAsE;YACtE,0EAA0E;YAC1E,yEAAyE;YACzE,+CAA+C;QACjD,OAAO,EAAE,CAAC,eAAe,EAAE,oBAAoB,EAAE,yBAAyB,CAAC;QAC3E,UAAU,EAAE,CAAC,YAAY,EAAE,uBAAuB,EAAE,wBAAwB,CAAC;KAC9E;IACD,0EAA0E;IAC1E;QACE,EAAE,EAAE,6BAA6B;QACjC,MAAM,EAAE,2CAA2C;QACnD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,kDAAkD;QAC1D,SAAS,EACP,uEAAuE;YACvE,sEAAsE;YACtE,yEAAyE;YACzE,uBAAuB;QACzB,OAAO,EAAE,CAAC,gCAAgC,EAAE,mCAAmC,EAAE,gBAAgB,CAAC;QAClG,UAAU,EAAE,CAAC,0BAA0B,EAAE,6BAA6B,EAAE,yBAAyB,CAAC;KACnG;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,MAAM,EAAE,mDAAmD;QAC3D,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,2BAA2B;QACnC,SAAS,EACP,wEAAwE;YACxE,2EAA2E;YAC3E,2EAA2E;YAC3E,4EAA4E;YAC5E,yEAAyE;YACzE,+EAA+E;QACjF,OAAO,EAAE,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,CAAC;QACjF,UAAU,EAAE,CAAC,uBAAuB,EAAE,gBAAgB,EAAE,kBAAkB,CAAC;KAC5E;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,2DAA2D;QACnE,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,sDAAsD;QAC9D,SAAS,EACP,sEAAsE;YACtE,2EAA2E;YAC3E,oDAAoD;QACtD,OAAO,EAAE,CAAC,2BAA2B,EAAE,kBAAkB,EAAE,gCAAgC,CAAC;QAC5F,UAAU,EAAE,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,wBAAwB,CAAC;KAC/E;CACiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,SAAkB,EAAE,CAAC,CAAC,CACvE,CAAA;AAED;;;;;;;;;;;;;;;GAeG;AACH;;;;;;GAMG;AACH,MAAM,6BAA6B,GAA4B,CAAC,GAAG,EAAE,CACnE,oBAAoB,CAClB,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpC,EAAE,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE;IACpE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,OAAgB;IAC1B,MAAM,EAAE,0DAA0D,CAAC,EAAE;IACrE,SAAS,EACP,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,CAAC,GAAG;IACZ,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC;IACnE,UAAU,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,iBAAiB,CAAC;CAC9D,CAAC,CAAC,CACJ,CAAC,EAAE,CAAA;AAEN,MAAM,UAAU,0BAA0B;IACxC,OAAO,6BAA6B,CAAA;AACtC,CAAC;AAED;;;;;;;;;;kBAUkB;AAClB,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,GAAG,0BAA0B;QAC7B,GAAG,uBAAuB;QAC1B,GAAG,sBAAsB;QACzB,GAAG,0BAA0B,EAAE;KAChC,CAAA;AACH,CAAC"}

package/dist/harness/rooCodeHooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rooCodeHooks.d.ts","sourceRoot":"","sources":["../../src/harness/rooCodeHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAqNH;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAuEf"}
+{"version":3,"file":"rooCodeHooks.d.ts","sourceRoot":"","sources":["../../src/harness/rooCodeHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAsNH;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAiEf"}

package/dist/harness/rooCodeHooks.js

@@ -19,6 +19,7 @@ import * as fs from 'node:fs/promises';
 import * as path from 'node:path';
 import * as os from 'node:os';
 import { createLogger } from '@intutic/logger';
+import { keepOriginal, writeOwnedFile } from '../disconnect/originals.js';
 import { newIso } from '@intutic/id';
 import { emitJsGate, emitJsFailClosedPrelude } from './gateBody.js';
 import { UNIVERSAL_PROTECTED_PATHS } from './protectedPaths.js';
@@ -231,6 +232,7 @@ export async function writeRooCodeHooks(workspaceRoot, proxyUrl, workspaceId = '
     const hookEventsDir = path.join(workspaceRoot, '.intutic', 'events');
     const rooRulesDir = path.join(workspaceRoot, '.roorules');
     const rooHooksDir = path.join(rooRulesDir, 'hooks');
+    await keepOriginal(path.join(rooHooksDir, 'hooks.json'), workspaceRoot);
     await Promise.all([
         fs.mkdir(hookScriptDir, { recursive: true }),
         fs.mkdir(hookEventsDir, { recursive: true }),
@@ -256,15 +258,10 @@ export async function writeRooCodeHooks(workspaceRoot, proxyUrl, workspaceId = '
     }
     if (rooRulesIsDir) {
         // Write README.md inside the directory
-        const readmePath = path.join(rooRulesPath, 'README.md');
-        const tmpReadme = readmePath + '.intutic-tmp';
-        await fs.writeFile(tmpReadme, buildRooRulesContent(), 'utf-8');
-        await fs.rename(tmpReadme, readmePath);
+        await writeOwnedFile(path.join(rooRulesPath, 'README.md'), workspaceRoot, buildRooRulesContent());
     }
     else {
-        const tmpRooRules = rooRulesPath + '.intutic-tmp';
-        await fs.writeFile(tmpRooRules, buildRooRulesContent(), 'utf-8');
-        await fs.rename(tmpRooRules, rooRulesPath);
+        await writeOwnedFile(rooRulesPath, workspaceRoot, buildRooRulesContent());
     }
     log.info({ action: 'roo_rules_written' }, 'Roo Code .roorules written');
     // ── 4. Write .roorules/hooks/hooks.json (atomic) ──────────────────────────
@@ -278,9 +275,7 @@ export async function writeRooCodeHooks(workspaceRoot, proxyUrl, workspaceId = '
             },
         ],
     };
-    const tmpHooksJson = hooksJsonPath + '.intutic-tmp';
-    await fs.writeFile(tmpHooksJson, JSON.stringify(hooksConfig, null, 2) + '\n', 'utf-8');
-    await fs.rename(tmpHooksJson, hooksJsonPath);
+    await writeOwnedFile(hooksJsonPath, workspaceRoot, JSON.stringify(hooksConfig, null, 2) + '\n');
     log.info({ action: 'roo_hooks_json_written', path: hooksJsonPath }, 'Roo Code hooks.json written');
 }
 //# sourceMappingURL=rooCodeHooks.js.map

package/dist/harness/rooCodeHooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"rooCodeHooks.js","sourceRoot":"","sources":["../../src/harness/rooCodeHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAE/D,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAA;AAE/C,8DAA8D;AAE9D,iFAAiF;AAEjF,SAAS,mBAAmB,CAC1B,QAAgB,EAChB,aAAqB,EACrB,WAAmB;IAEnB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,uBAAuB,CAAC,CAAA;IAC7F,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;IAEhF,OAAO;;;;;;;;;;;YAWG,QAAQ;gBACJ,MAAM,EAAE;gBACR,WAAW;;;EAGzB,uBAAuB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;;;;;;;;;2BASlD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;;;;;;4BAM7B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;;;;;;;EAiBrD,UAAU,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;;;0BAGtC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyGtD,CAAC,IAAI,EAAE,CAAA;AACR,CAAC;AAED,iFAAiF;AAEjF,SAAS,oBAAoB;IAC3B,OAAO;QACL,6CAA6C;QAC7C,gDAAgD;QAChD,gBAAgB,MAAM,EAAE,EAAE;QAC1B,EAAE;QACF,4BAA4B;QAC5B,EAAE;QACF,6EAA6E;QAC7E,6EAA6E;QAC7E,wBAAwB;QACxB,EAAE;QACF,qBAAqB;QACrB,EAAE;QACF,wDAAwD;QACxD,EAAE;QACF,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACrD,EAAE;QACF,iBAAiB;QACjB,EAAE;QACF,2EAA2E;QAC3E,gEAAgE;QAChE,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,8EAA8E;IAE9E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACnE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAEnD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KAC3C,CAAC,CAAA;IAEF,6EAA6E;IAE7E,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,cAAc,GAAG,cAAc,CAAA;IACjD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,mBAAmB,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IACjG,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAE1C,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAErG,6EAA6E;IAE7E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IAC1D,yEAAyE;IACzE,iEAAiE;IACjE,IAAI,aAAa,GAAG,KAAK,CAAA;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACxC,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,uCAAuC;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAA;QACvD,MAAM,SAAS,GAAG,UAAU,GAAG,cAAc,CAAA;QAC7C,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,oBAAoB,EAAE,EAAE,OAAO,CAAC,CAAA;QAC9D,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IACxC,CAAC;SAAM,CAAC;QACN,MAAM,WAAW,GAAG,YAAY,GAAG,cAAc,CAAA;QACjD,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,oBAAoB,EAAE,EAAE,OAAO,CAAC,CAAA;QAChE,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IAC5C,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,4BAA4B,CAAC,CAAA;IAEvE,6EAA6E;IAE7E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IAC1D,MAAM,WAAW,GAAG;QAClB,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,QAAQ,cAAc,EAAE;aAClC;SACF;KACF,CAAA;IAED,MAAM,YAAY,GAAG,aAAa,GAAG,cAAc,CAAA;IACnD,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACtF,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,CAAA;IAE5C,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,wBAAwB,EAAE,IAAI,EAAE,aAAa,EAAE,EACzD,6BAA6B,CAC9B,CAAA;AACH,CAAC"}
+{"version":3,"file":"rooCodeHooks.js","sourceRoot":"","sources":["../../src/harness/rooCodeHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAE/D,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAA;AAE/C,8DAA8D;AAE9D,iFAAiF;AAEjF,SAAS,mBAAmB,CAC1B,QAAgB,EAChB,aAAqB,EACrB,WAAmB;IAEnB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,uBAAuB,CAAC,CAAA;IAC7F,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;IAEhF,OAAO;;;;;;;;;;;YAWG,QAAQ;gBACJ,MAAM,EAAE;gBACR,WAAW;;;EAGzB,uBAAuB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;;;;;;;;;2BASlD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;;;;;;4BAM7B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;;;;;;;EAiBrD,UAAU,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;;;0BAGtC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyGtD,CAAC,IAAI,EAAE,CAAA;AACR,CAAC;AAED,iFAAiF;AAEjF,SAAS,oBAAoB;IAC3B,OAAO;QACL,6CAA6C;QAC7C,gDAAgD;QAChD,gBAAgB,MAAM,EAAE,EAAE;QAC1B,EAAE;QACF,4BAA4B;QAC5B,EAAE;QACF,6EAA6E;QAC7E,6EAA6E;QAC7E,wBAAwB;QACxB,EAAE;QACF,qBAAqB;QACrB,EAAE;QACF,wDAAwD;QACxD,EAAE;QACF,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACrD,EAAE;QACF,iBAAiB;QACjB,EAAE;QACF,2EAA2E;QAC3E,gEAAgE;QAChE,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,8EAA8E;IAE9E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACnE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAEnD,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,aAAa,CAAC,CAAA;IACvE,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KAC3C,CAAC,CAAA;IAEF,6EAA6E;IAE7E,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,cAAc,GAAG,cAAc,CAAA;IACjD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,mBAAmB,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IACjG,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAE1C,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAErG,6EAA6E;IAE7E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IAC1D,yEAAyE;IACzE,iEAAiE;IACjE,IAAI,aAAa,GAAG,KAAK,CAAA;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACxC,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,uCAAuC;QACvC,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC,CAAA;IACnG,CAAC;SAAM,CAAC;QACN,MAAM,cAAc,CAAC,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC,CAAA;IAC3E,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,4BAA4B,CAAC,CAAA;IAEvE,6EAA6E;IAE7E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IAC1D,MAAM,WAAW,GAAG;QAClB,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,QAAQ,cAAc,EAAE;aAClC;SACF;KACF,CAAA;IAED,MAAM,cAAc,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IAE/F,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,wBAAwB,EAAE,IAAI,EAAE,aAAa,EAAE,EACzD,6BAA6B,CAC9B,CAAA;AACH,CAAC"}

package/dist/harness/windsurfHooks.d.ts

@@ -5,8 +5,9 @@
  * (.windsurf/hooks.json) governance hooks using the Windsurf Cascade
  * hook system (exit code 2 = block).
  *
- * Also writes the proxy settings into ~/.codeium/windsurf/settings.json
- * so that Windsurf routes HTTP traffic through the Intutic TLS MITM proxy,
+ * Also writes the proxy settings into Windsurf's user settings.json (see
+ * `windsurfSettingsPath`) so that Windsurf routes HTTP traffic through the
+ * Intutic TLS MITM proxy,
  * enabling governance of Cascade AI traffic that has no native base URL override.
  *
  * LLD #14 — Phase 3 cross-harness defence
@@ -86,13 +87,30 @@
  *
  * @module
  */
+/**
+ * Windsurf Desktop's user `settings.json`, the file `http.proxy` is read from.
+ * Windsurf is a VS Code fork, so it keeps user settings where VS Code does,
+ * under its own product name (`nameShort: "Windsurf"` in the app's
+ * product.json): `User/settings.json` in the platform's application-data
+ * directory. Checked against a Windsurf 1.9600.41 install on macOS, whose
+ * user settings live in ~/Library/Application Support/Windsurf/User/; the
+ * Linux and
+ * Windows directories are VS Code's
+ * (https://code.visualstudio.com/docs/configure/settings#_settings-file-locations).
+ * `~/.codeium/windsurf/` holds Cascade's hooks.json and mcp_config.json, not
+ * editor settings; earlier versions wrote the proxy keys there, where Windsurf
+ * never read them.
+ */
+export declare function windsurfSettingsPath(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv, home?: string): string;
 /**
  * Write Windsurf hooks at user-level and workspace-level.
  * Also configures the HTTP proxy to route through Intutic's TLS MITM layer.
  *
  * @param workspaceRoot - Absolute workspace root.
  * @param proxyUrl      - Intutic proxy URL (used in the hook script comment).
- * @param proxyPort     - Local port where the Intutic proxy is listening (for TLS MITM).
+ * @param proxyPort     - Local port the Intutic proxy listens on; it serves
+ *                        HTTP CONNECT (TLS MITM) on the same listener as its
+ *                        API routes.
  * @param workspaceId   - Workspace ID embedded in hook event payloads.
  */
 export declare function writeWindsurfHooks(workspaceRoot: string, proxyUrl: string, proxyPort?: number, workspaceId?: string): Promise<void>;

package/dist/harness/windsurfHooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"windsurfHooks.d.ts","sourceRoot":"","sources":["../../src/harness/windsurfHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuFG;AAuKH;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,SAAS,SAAO,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAwEf"}
+{"version":3,"file":"windsurfHooks.d.ts","sourceRoot":"","sources":["../../src/harness/windsurfHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AAoBH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,IAAI,GAAE,MAAqB,GAC1B,MAAM,CAKR;AA6KD;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,SAAS,SAAO,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAuEf"}

package/dist/harness/windsurfHooks.js

@@ -5,8 +5,9 @@
  * (.windsurf/hooks.json) governance hooks using the Windsurf Cascade
  * hook system (exit code 2 = block).
  *
- * Also writes the proxy settings into ~/.codeium/windsurf/settings.json
- * so that Windsurf routes HTTP traffic through the Intutic TLS MITM proxy,
+ * Also writes the proxy settings into Windsurf's user settings.json (see
+ * `windsurfSettingsPath`) so that Windsurf routes HTTP traffic through the
+ * Intutic TLS MITM proxy,
  * enabling governance of Cascade AI traffic that has no native base URL override.
  *
  * LLD #14 — Phase 3 cross-harness defence
@@ -90,30 +91,79 @@ import * as fs from 'node:fs/promises';
 import * as path from 'node:path';
 import * as os from 'node:os';
 import { createLogger } from '@intutic/logger';
+import { keepOriginal, noteProxyUrl } from '../disconnect/originals.js';
 import { newIso } from '@intutic/id';
+import { readJsonObjectForMerge } from './jsonMergeTarget.js';
 import { emitJsGate, emitJsFailClosedPrelude } from './gateBody.js';
 import { configureJetBrainsWindsurfProxy } from './windsurfJetBrainsProxy.js';
 const log = createLogger('sync-windsurf-hooks');
-const WINDSURF_USER_DIR = path.join(os.homedir(), '.codeium', 'windsurf');
+/** Desktop's user-level directory, resolved at call time so tests that move
+ *  HOME are honoured. */
+function windsurfUserDir() {
+    return path.join(os.homedir(), '.codeium', 'windsurf');
+}
+/**
+ * Windsurf Desktop's user `settings.json`, the file `http.proxy` is read from.
+ * Windsurf is a VS Code fork, so it keeps user settings where VS Code does,
+ * under its own product name (`nameShort: "Windsurf"` in the app's
+ * product.json): `User/settings.json` in the platform's application-data
+ * directory. Checked against a Windsurf 1.9600.41 install on macOS, whose
+ * user settings live in ~/Library/Application Support/Windsurf/User/; the
+ * Linux and
+ * Windows directories are VS Code's
+ * (https://code.visualstudio.com/docs/configure/settings#_settings-file-locations).
+ * `~/.codeium/windsurf/` holds Cascade's hooks.json and mcp_config.json, not
+ * editor settings; earlier versions wrote the proxy keys there, where Windsurf
+ * never read them.
+ */
+export function windsurfSettingsPath(platform = process.platform, env = process.env, home = os.homedir()) {
+    const user = ['Windsurf', 'User', 'settings.json'];
+    if (platform === 'darwin')
+        return path.join(home, 'Library', 'Application Support', ...user);
+    if (platform === 'win32')
+        return path.join(env.APPDATA || path.join(home, 'AppData', 'Roaming'), ...user);
+    return path.join(env.XDG_CONFIG_HOME || path.join(home, '.config'), ...user);
+}
 /** The JetBrains plugin's user-level hooks.json lives directly under
  *  `~/.codeium` — no `windsurf` subdirectory — confirmed against
  *  docs.devin.ai/desktop/cascade/hooks (see module doc comment). Only
  *  hooks.json goes here: this writer's `settings.json` proxy-config write
- *  targets Desktop's known path specifically, and whether/how the
- *  JetBrains plugin has an equivalent proxy-config surface was not
- *  researched — out of scope for this fix, which is about hook dispatch. */
-const WINDSURF_JETBRAINS_USER_DIR = path.join(os.homedir(), '.codeium');
+ *  targets Desktop's known path specifically; the JetBrains plugin's proxy
+ *  is configured through the IDE platform instead (windsurfJetBrainsProxy.ts). */
+function windsurfJetBrainsUserDir() {
+    return path.join(os.homedir(), '.codeium');
+}
 /** Cascade's real pre-hook event names (see module doc comment). Each maps
  *  to an ARRAY of hook entries in `hooks.json` — Windsurf's schema, unlike
  *  Cursor's, has no `failClosed` field; exit code 2 is the only block
  *  signal Cascade recognizes. */
 const CASCADE_HOOK_EVENTS = ['pre_run_command', 'pre_write_code', 'pre_mcp_tool_use'];
-function buildHooksConfig(hookScriptPath) {
-    return {
-        _comment: 'Intutic governance hooks — auto-generated. DO NOT EDIT.',
-        _lastSync: newIso(),
-        hooks: Object.fromEntries(CASCADE_HOOK_EVENTS.map((event) => [event, [{ command: `node "${hookScriptPath}"` }]])),
-    };
+function isRecord(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+/**
+ * Register the gate for every Cascade pre-hook event in `filePath`, keeping
+ * every hook the user registered there. The Intutic entry is recognised by
+ * its command, so repeated syncs replace it rather than stacking copies. A
+ * file that is not a plain JSON object is left alone (see jsonMergeTarget.ts).
+ */
+async function mergeCascadeHooksJson(filePath, hookScriptPath, workspaceRoot) {
+    await keepOriginal(filePath, workspaceRoot);
+    const existing = await readJsonObjectForMerge(filePath);
+    if (existing === null)
+        return;
+    const command = `node "${hookScriptPath}"`;
+    const hooks = isRecord(existing.hooks) ? { ...existing.hooks } : {};
+    for (const event of CASCADE_HOOK_EVENTS) {
+        const current = Array.isArray(hooks[event]) ? hooks[event] : [];
+        hooks[event] = [...current.filter((e) => !(isRecord(e) && e.command === command)), { command }];
+    }
+    // Provenance fields earlier versions stamped when they owned the whole file.
+    delete existing._comment;
+    delete existing._lastSync;
+    delete existing._note;
+    await fs.mkdir(path.dirname(filePath), { recursive: true });
+    await atomicWriteJson(filePath, { ...existing, hooks });
 }
 function buildHookScript(proxyUrl, workspaceRoot, workspaceId) {
     const hookEventsLog = path.join(workspaceRoot, '.intutic', 'events', 'hook-events.jsonl');
@@ -247,10 +297,12 @@ process.stdin.on('end', () => {
  *
  * @param workspaceRoot - Absolute workspace root.
  * @param proxyUrl      - Intutic proxy URL (used in the hook script comment).
- * @param proxyPort     - Local port where the Intutic proxy is listening (for TLS MITM).
+ * @param proxyPort     - Local port the Intutic proxy listens on; it serves
+ *                        HTTP CONNECT (TLS MITM) on the same listener as its
+ *                        API routes.
  * @param workspaceId   - Workspace ID embedded in hook event payloads.
  */
-export async function writeWindsurfHooks(workspaceRoot, proxyUrl, proxyPort = 8877, workspaceId = '') {
+export async function writeWindsurfHooks(workspaceRoot, proxyUrl, proxyPort = 4000, workspaceId = '') {
     const hookScriptDir = path.join(workspaceRoot, '.intutic', 'hooks');
     await fs.mkdir(hookScriptDir, { recursive: true });
     // Ensure hook events log directory exists
@@ -260,48 +312,48 @@ export async function writeWindsurfHooks(workspaceRoot, proxyUrl, proxyPort = 88
     await fs.writeFile(tmpScript, buildHookScript(proxyUrl, workspaceRoot, workspaceId), 'utf-8');
     await fs.rename(tmpScript, hookScriptPath);
     await fs.chmod(hookScriptPath, 0o755);
-    const config = buildHooksConfig(hookScriptPath);
     // 1. User-level hooks — Desktop's path.
-    await fs.mkdir(WINDSURF_USER_DIR, { recursive: true });
-    await atomicWriteJson(path.join(WINDSURF_USER_DIR, 'hooks.json'), config);
+    await mergeCascadeHooksJson(path.join(windsurfUserDir(), 'hooks.json'), hookScriptPath, workspaceRoot);
     log.info({ action: 'windsurf_hooks_written', level: 'user' }, 'Windsurf user-level hooks written');
-    // 1b. User-level hooks — the JetBrains plugin's SEPARATE path. Same config
-    // content: the JetBrains plugin's own changelog (v2.12.4) names
+    // 1b. User-level hooks — the JetBrains plugin's SEPARATE path. Same entries:
+    // the JetBrains plugin's own changelog (v2.12.4) names
     // `post_setup_worktree` — one of Cascade's documented event names — as a
     // hook it added, which is corroborating evidence (not a guess) that it
     // dispatches the same Cascade hook event/payload system as Desktop, just
     // reads its user-level config from this different file.
-    await fs.mkdir(WINDSURF_JETBRAINS_USER_DIR, { recursive: true });
-    await atomicWriteJson(path.join(WINDSURF_JETBRAINS_USER_DIR, 'hooks.json'), config);
+    await mergeCascadeHooksJson(path.join(windsurfJetBrainsUserDir(), 'hooks.json'), hookScriptPath, workspaceRoot);
     log.info({ action: 'windsurf_hooks_written', level: 'user-jetbrains' }, 'Windsurf JetBrains plugin user-level hooks written');
     // 2. Workspace-level hooks (.windsurf/hooks.json) — the SAME relative path
     // for both Desktop and the JetBrains plugin (workspace-root-relative, not
     // app-specific), so this one write already covers both. Hooks configured
     // at multiple levels are NOT one-wins: Cascade runs every level's hooks
     // for a matching event, in order system → user → workspace (confirmed
-    // against docs.devin.ai/desktop/cascade/hooks) — an earlier version of
-    // this comment claimed user-level "takes precedence," which was another
-    // unverified assumption.
-    const wsWindsurfDir = path.join(workspaceRoot, '.windsurf');
-    await fs.mkdir(wsWindsurfDir, { recursive: true });
-    await atomicWriteJson(path.join(wsWindsurfDir, 'hooks.json'), {
-        ...config,
-        _note: 'Workspace-level hooks — agent may be able to modify this file. Runs IN ADDITION to ' +
-            'user-level hooks (Cascade runs every configured level for a matching event; last-wins/' +
-            'precedence is not how this works), so this file being tampered with does not disable ' +
-            'user-level enforcement.',
-    });
+    // against docs.devin.ai/desktop/cascade/hooks), so this file being edited
+    // by an agent does not disable the user-level registration above.
+    await mergeCascadeHooksJson(path.join(workspaceRoot, '.windsurf', 'hooks.json'), hookScriptPath, workspaceRoot);
     log.info({ action: 'windsurf_hooks_written', level: 'workspace' }, 'Windsurf workspace-level hooks written');
-    // 3. HTTP proxy settings — Desktop's own settings.json.
-    const wsSettings = {
-        _comment: 'Intutic proxy settings — auto-generated. DO NOT EDIT.',
-        _lastSync: newIso(),
-        'http.proxy': `http://127.0.0.1:${proxyPort}`,
-        'http.proxyStrictSSL': false, // Our CA cert handles validation
-        'codeium.proxy': `http://127.0.0.1:${proxyPort}`,
-    };
-    await atomicWriteJson(path.join(WINDSURF_USER_DIR, 'settings.json'), wsSettings);
-    log.info({ action: 'windsurf_proxy_configured', port: proxyPort }, 'Windsurf HTTP proxy configured for TLS MITM interception');
+    // 3. HTTP proxy settings — Desktop's own settings.json. Merged: the keys
+    // below are the only ones Intutic owns, and a file that is not a plain JSON
+    // object is left alone (see jsonMergeTarget.ts).
+    const settingsPath = windsurfSettingsPath();
+    await keepOriginal(settingsPath, workspaceRoot);
+    // The local listener, not the configured proxy URL: disconnect recognises
+    // the proxy settings below, and the JetBrains ones, by it.
+    await noteProxyUrl(`http://127.0.0.1:${proxyPort}`);
+    const existingSettings = await readJsonObjectForMerge(settingsPath);
+    if (existingSettings !== null) {
+        // Provenance fields earlier versions stamped when they owned the whole file.
+        delete existingSettings._comment;
+        delete existingSettings._lastSync;
+        await fs.mkdir(path.dirname(settingsPath), { recursive: true });
+        await atomicWriteJson(settingsPath, {
+            ...existingSettings,
+            'http.proxy': `http://127.0.0.1:${proxyPort}`,
+            'http.proxyStrictSSL': false, // Our CA cert handles validation
+            'codeium.proxy': `http://127.0.0.1:${proxyPort}`,
+        });
+        log.info({ action: 'windsurf_proxy_configured', port: proxyPort }, 'Windsurf HTTP proxy configured for TLS MITM interception');
+    }
     // 4. HTTP proxy settings — every installed JetBrains product. See
     // windsurfJetBrainsProxy.ts's module doc comment for what this
     // configures and why it needs two merge-writes per product rather than