@mneme-ai/mcp 1.17.6 → 1.19.0

package/dist/tools/_replay.js

@@ -0,0 +1,253 @@
+/**
+ * Replay Traces (v1.18.0 — black sheep #7)
+ *
+ * Every MCP tool call is recorded as one HMAC-chained line in
+ * `.mneme/replay.jsonl`. Each entry's `prevHash` references the previous
+ * line, so any tampering breaks the chain at exactly one point — Merkle
+ * trail without a tree.
+ *
+ *   • mneme.replay.dump       — return the whole session trace as JSON
+ *   • mneme.replay.fingerprint — return the Merkle root + chain integrity
+ *
+ * Use cases: SOC2 / EU AI Act audit evidence, deterministic-session proofs,
+ * post-mortem reconstruction. The fingerprint is what you publish; the
+ * dump is what you'd hand an auditor.
+ *
+ * The recorder lives in this file but is invoked from index.ts on every
+ * call. Recording is best-effort — any I/O error is swallowed so a
+ * corrupted disk can never block tool dispatch.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync, appendFileSync } from "node:fs";
+import { createHash, randomBytes } from "node:crypto";
+import { join } from "node:path";
+const REPLAY_DIR = ".mneme";
+const REPLAY_FILE = "replay.jsonl";
+const SECRET_FILE = "replay-secret.bin";
+function ensureSecret(repoRoot) {
+    const dir = join(repoRoot, REPLAY_DIR);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    const path = join(dir, SECRET_FILE);
+    if (existsSync(path))
+        return readFileSync(path);
+    const buf = randomBytes(32);
+    writeFileSync(path, buf, { mode: 0o600 });
+    return buf;
+}
+function shortHash(s) {
+    return createHash("sha256").update(s).digest("hex").slice(0, 16);
+}
+function hmacSha(secret, payload) {
+    // HMAC-SHA-256, returned as 32-char hex prefix.
+    const h = createHash("sha256");
+    h.update(secret);
+    h.update("|");
+    h.update(payload);
+    return h.digest("hex").slice(0, 32);
+}
+function readLastHash(repoRoot) {
+    const path = join(repoRoot, REPLAY_DIR, REPLAY_FILE);
+    if (!existsSync(path))
+        return "GENESIS";
+    const txt = readFileSync(path, "utf8").trimEnd();
+    if (!txt)
+        return "GENESIS";
+    const lines = txt.split("\n");
+    const last = lines[lines.length - 1];
+    if (!last)
+        return "GENESIS";
+    try {
+        const e = JSON.parse(last);
+        return e.hash;
+    }
+    catch {
+        return "GENESIS";
+    }
+}
+/** Append a single tool-call record. Best-effort — never throws. */
+export function recordReplay(repoRoot, tool, args, response) {
+    try {
+        const secret = ensureSecret(repoRoot);
+        const argHash = shortHash(JSON.stringify(args ?? {}));
+        const responseHash = shortHash(JSON.stringify(response ?? {}));
+        const verdict = extractVerdict(response);
+        const prevHash = readLastHash(repoRoot);
+        const ts = new Date().toISOString();
+        const payload = `${ts}|${tool}|${argHash}|${responseHash}|${verdict ?? ""}|${prevHash}`;
+        const hash = hmacSha(secret, payload);
+        const entry = { ts, tool, argHash, responseHash, prevHash, hash };
+        if (verdict)
+            entry.verdict = verdict;
+        appendFileSync(join(repoRoot, REPLAY_DIR, REPLAY_FILE), JSON.stringify(entry) + "\n", "utf8");
+    }
+    catch {
+        // best-effort — never block dispatch
+    }
+}
+function extractVerdict(response) {
+    if (!response || typeof response !== "object")
+        return undefined;
+    const r = response;
+    if (r.data && typeof r.data === "object") {
+        const d = r.data;
+        if (typeof d.verdict === "string")
+            return d.verdict;
+    }
+    return undefined;
+}
+export function verifyChain(repoRoot) {
+    const path = join(repoRoot, REPLAY_DIR, REPLAY_FILE);
+    if (!existsSync(path))
+        return { total: 0, intact: true, root: "EMPTY" };
+    const txt = readFileSync(path, "utf8").trimEnd();
+    if (!txt)
+        return { total: 0, intact: true, root: "EMPTY" };
+    const secret = ensureSecret(repoRoot);
+    const lines = txt.split("\n").filter(Boolean);
+    let prev = "GENESIS";
+    for (let i = 0; i < lines.length; i++) {
+        let entry;
+        try {
+            entry = JSON.parse(lines[i]);
+        }
+        catch {
+            return { total: lines.length, intact: false, brokenAt: i, root: "INVALID" };
+        }
+        if (entry.prevHash !== prev) {
+            return { total: lines.length, intact: false, brokenAt: i, root: "BROKEN" };
+        }
+        const expected = hmacSha(secret, `${entry.ts}|${entry.tool}|${entry.argHash}|${entry.responseHash}|${entry.verdict ?? ""}|${entry.prevHash}`);
+        if (expected !== entry.hash) {
+            return { total: lines.length, intact: false, brokenAt: i, root: "TAMPERED" };
+        }
+        prev = entry.hash;
+    }
+    // Merkle root = HMAC of the final hash (so root depends on all entries).
+    const root = hmacSha(secret, prev);
+    return { total: lines.length, intact: true, root };
+}
+export function readReplay(repoRoot, limit = 1000) {
+    const path = join(repoRoot, REPLAY_DIR, REPLAY_FILE);
+    if (!existsSync(path))
+        return [];
+    const txt = readFileSync(path, "utf8").trimEnd();
+    if (!txt)
+        return [];
+    const lines = txt.split("\n").filter(Boolean);
+    const slice = limit > 0 && lines.length > limit ? lines.slice(-limit) : lines;
+    return slice
+        .map((l) => {
+        try {
+            return JSON.parse(l);
+        }
+        catch {
+            return null;
+        }
+    })
+        .filter((e) => e !== null);
+}
+export const replayDumpTool = {
+    name: "mneme.replay.dump",
+    category: "meta",
+    description: "Return the HMAC-chained replay log of every MCP tool call this session " +
+        "(and earlier sessions in the same repo). Each entry: timestamp, tool name, " +
+        "argument-hash, response-hash, verdict (if present), and the chain link. " +
+        "Use WHEN you need a complete audit trail of what the AI did — for SOC2 / " +
+        "EU AI Act compliance, postmortem reconstruction, or deterministic-session " +
+        "proofs. Pair with mneme.replay.fingerprint for a tamper-evident root hash.",
+    whenToUse: "You need the complete audit trail of every tool call in this repo (or session) — for compliance / postmortem / reproducibility.",
+    triggers: ["dump replay log", "audit trail", "session trace", "SOC2 evidence"],
+    inputSchema: {
+        type: "object",
+        properties: {
+            limit: {
+                type: "number",
+                description: "Max entries to return (most-recent N). Default 1000. 0 = no cap.",
+            },
+        },
+    },
+    outputSchema: {
+        type: "object",
+        properties: {
+            total: { type: "number" },
+            returned: { type: "number" },
+            entries: { type: "array", items: { type: "object" } },
+        },
+    },
+    examples: [
+        {
+            userQuery: "Give me the audit trail of every Mneme call from this AI session",
+            args: { limit: 1000 },
+            expectedOutput: "Returns up to 1000 most-recent ReplayEntry objects. Each has ts/tool/argHash/responseHash/prevHash/hash and optional verdict.",
+        },
+    ],
+    pitfalls: [
+        "The log is INDEFINITE — it grows across sessions. Rotate manually if you don't want cross-session traces.",
+        "Hashes are short (16-char prefix) for readability — a determined attacker COULD find collisions; this is audit-grade, not crypto-grade integrity.",
+        "Recording is best-effort: a disk-full error swallows the entry silently rather than blocking dispatch.",
+    ],
+    composeWith: ["mneme.replay.fingerprint", "mneme.audit.ledger", "mneme.audit.report"],
+    handler: async (rt, args) => {
+        const limit = typeof args["limit"] === "number" ? args["limit"] : 1000;
+        const entries = readReplay(rt.meta.rootPath, limit);
+        return {
+            data: {
+                total: entries.length,
+                returned: entries.length,
+                entries,
+            },
+            wisdom: entries.length === 0
+                ? "Replay log is empty — either no tool calls have happened in this repo yet, or the log was never created."
+                : `Returned ${entries.length} chain-linked entries. Verify integrity via mneme.replay.fingerprint.`,
+            followUp: ["mneme.replay.fingerprint"],
+            confidence: { level: "high" },
+        };
+    },
+};
+export const replayFingerprintTool = {
+    name: "mneme.replay.fingerprint",
+    category: "meta",
+    description: "Return the tamper-evident root hash of the replay log + chain integrity " +
+        "status. Each entry in the log links to the previous via HMAC, so any " +
+        "tampering breaks the chain at exactly one point. The root is a stable " +
+        "identifier you can publish to prove this AI session was deterministic + " +
+        "untouched. Use WHEN you want to attest to session integrity (e.g., embed " +
+        "the root in a release note, or compare two replay logs to prove they ran " +
+        "the same sequence).",
+    whenToUse: "You need a single tamper-evident hash that summarizes the entire MCP-call history of this repo — publishable proof of session integrity.",
+    triggers: ["replay fingerprint", "session merkle root", "integrity check"],
+    inputSchema: { type: "object", properties: {} },
+    outputSchema: {
+        type: "object",
+        properties: {
+            total: { type: "number" },
+            intact: { type: "boolean" },
+            brokenAt: { type: "number", description: "Line index where chain broke (only set if intact=false)." },
+            root: { type: "string", description: "Merkle root — stable identifier for this trace." },
+        },
+    },
+    examples: [
+        {
+            userQuery: "Is the audit trail intact?",
+            expectedOutput: "Returns { total, intact: true, root: '<32-hex>' } when chain verifies. If tampered: intact=false, brokenAt set, root = 'TAMPERED' / 'BROKEN' / 'INVALID'.",
+        },
+    ],
+    pitfalls: [
+        "Verifies the LOCAL log only — there's no global anchor (yet). For external attestation, post the root to git via a tagged commit.",
+        "If .mneme/replay-secret.bin is regenerated, ALL prior chain links become unverifiable. Treat the secret like a key.",
+    ],
+    composeWith: ["mneme.replay.dump", "mneme.audit.ledger"],
+    handler: async (rt) => {
+        const status = verifyChain(rt.meta.rootPath);
+        return {
+            data: status,
+            wisdom: status.intact
+                ? `Chain intact — ${status.total} entr${status.total === 1 ? "y" : "ies"}. Root: ${status.root}.`
+                : `CHAIN BROKEN at entry ${status.brokenAt} — replay log has been tampered with or corrupted. Root: ${status.root}.`,
+            confidence: { level: "high" },
+            followUp: ["mneme.replay.dump"],
+        };
+    },
+};
+export const replayTools = [replayDumpTool, replayFingerprintTool];
+//# sourceMappingURL=_replay.js.map

package/dist/tools/_replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_replay.js","sourceRoot":"","sources":["../../src/tools/_replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,UAAU,GAAG,QAAQ,CAAC;AAC5B,MAAM,WAAW,GAAG,cAAc,CAAC;AACnC,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAmBxC,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,OAAe;IAC9C,gDAAgD;IAChD,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACd,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;QAC1C,OAAO,CAAC,CAAC,IAAI,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAC1B,QAAgB,EAChB,IAAY,EACZ,IAAa,EACb,QAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,IAAI,IAAI,OAAO,IAAI,YAAY,IAAI,OAAO,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;QACxF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,KAAK,GAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,IAAI,OAAO;YAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QACrC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAChG,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAAiB;IACvC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,CAAC,GAAG,QAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,CAAC,IAA4B,CAAC;QACzC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAUD,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACxE,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,IAAI,GAAG,SAAS,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAkB,CAAC;QACvB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAgB,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC9E,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC7E,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CACtB,MAAM,EACN,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAC5G,CAAC;QACF,IAAI,QAAQ,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,yEAAyE;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,KAAK,GAAG,IAAI;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9E,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAgB,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAc;IACvC,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,MAAM;IAChB,WAAW,EACT,yEAAyE;QACzE,6EAA6E;QAC7E,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;IAC9E,SAAS,EACP,iIAAiI;IACnI,QAAQ,EAAE,CAAC,iBAAiB,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,CAAC;IAC9E,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,kEAAkE;aAChF;SACF;KACF;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;SACtD;KACF;IACD,QAAQ,EAAE;QACR;YACE,SAAS,EAAE,kEAAkE;YAC7E,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;YACrB,cAAc,EAAE,+HAA+H;SAChJ;KACF;IACD,QAAQ,EAAE;QACR,2GAA2G;QAC3G,mJAAmJ;QACnJ,wGAAwG;KACzG;IACD,WAAW,EAAE,CAAC,0BAA0B,EAAE,oBAAoB,EAAE,oBAAoB,CAAC;IACrF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,OAAO,CAAY,CAAC,CAAC,CAAC,IAAI,CAAC;QACnF,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACpD,OAAO;YACL,IAAI,EAAE;gBACJ,KAAK,EAAE,OAAO,CAAC,MAAM;gBACrB,QAAQ,EAAE,OAAO,CAAC,MAAM;gBACxB,OAAO;aACR;YACD,MAAM,EACJ,OAAO,CAAC,MAAM,KAAK,CAAC;gBAClB,CAAC,CAAC,0GAA0G;gBAC5G,CAAC,CAAC,YAAY,OAAO,CAAC,MAAM,uEAAuE;YACvG,QAAQ,EAAE,CAAC,0BAA0B,CAAC;YACtC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAc;IAC9C,IAAI,EAAE,0BAA0B;IAChC,QAAQ,EAAE,MAAM;IAChB,WAAW,EACT,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,qBAAqB;IACvB,SAAS,EACP,0IAA0I;IAC5I,QAAQ,EAAE,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,iBAAiB,CAAC;IAC1E,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;IAC/C,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0DAA0D,EAAE;YACrG,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iDAAiD,EAAE;SACzF;KACF;IACD,QAAQ,EAAE;QACR;YACE,SAAS,EAAE,4BAA4B;YACvC,cAAc,EACZ,2JAA2J;SAC9J;KACF;IACD,QAAQ,EAAE;QACR,mIAAmI;QACnI,qHAAqH;KACtH;IACD,WAAW,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;IACxD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QACpB,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,MAAM,CAAC,MAAM;gBACnB,CAAC,CAAC,kBAAkB,MAAM,CAAC,KAAK,QAAQ,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,WAAW,MAAM,CAAC,IAAI,GAAG;gBACjG,CAAC,CAAC,yBAAyB,MAAM,CAAC,QAAQ,4DAA4D,MAAM,CAAC,IAAI,GAAG;YACtH,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;YAC7B,QAAQ,EAAE,CAAC,mBAAmB,CAAC;SAChC,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAgB,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC"}

package/dist/tools/_replay.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Replay Traces — unit tests for the HMAC-chained log + verifier.
+ */
+export {};
+//# sourceMappingURL=_replay.test.d.ts.map

package/dist/tools/_replay.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_replay.test.d.ts","sourceRoot":"","sources":["../../src/tools/_replay.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/tools/_replay.test.js

@@ -0,0 +1,90 @@
+/**
+ * Replay Traces — unit tests for the HMAC-chained log + verifier.
+ */
+import { describe, expect, it, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, rmSync, readFileSync, writeFileSync, existsSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { recordReplay, verifyChain, readReplay } from "./_replay.js";
+describe("recordReplay + verifyChain", () => {
+    let repo;
+    beforeEach(() => {
+        repo = mkdtempSync(join(tmpdir(), "mneme-replay-"));
+    });
+    afterEach(() => {
+        try {
+            rmSync(repo, { recursive: true, force: true });
+        }
+        catch { /* ignore */ }
+    });
+    it("verifyChain on an empty/missing log returns intact=true with EMPTY root", () => {
+        const s = verifyChain(repo);
+        expect(s.intact).toBe(true);
+        expect(s.total).toBe(0);
+        expect(s.root).toBe("EMPTY");
+    });
+    it("records entries with chain-linked hashes", () => {
+        recordReplay(repo, "mneme.memory.ask", { question: "why?" }, { data: { ok: true } });
+        recordReplay(repo, "mneme.audit.certify", { strict: true }, { data: { verdict: "PASS" } });
+        const entries = readReplay(repo);
+        expect(entries).toHaveLength(2);
+        expect(entries[0].prevHash).toBe("GENESIS");
+        expect(entries[1].prevHash).toBe(entries[0].hash);
+    });
+    it("verifyChain returns intact=true after legitimate appends", () => {
+        recordReplay(repo, "tool.a", {}, { data: {} });
+        recordReplay(repo, "tool.b", {}, { data: {} });
+        recordReplay(repo, "tool.c", {}, { data: {} });
+        const s = verifyChain(repo);
+        expect(s.intact).toBe(true);
+        expect(s.total).toBe(3);
+        expect(s.root).not.toBe("EMPTY");
+        expect(s.root).toMatch(/^[0-9a-f]+$/);
+    });
+    it("verifyChain detects tampering in the middle of the log", () => {
+        recordReplay(repo, "tool.a", {}, { data: {} });
+        recordReplay(repo, "tool.b", {}, { data: {} });
+        recordReplay(repo, "tool.c", {}, { data: {} });
+        // Tamper: rewrite the second line with a different tool name.
+        const path = join(repo, ".mneme", "replay.jsonl");
+        const lines = readFileSync(path, "utf8").trimEnd().split("\n");
+        const tampered = lines.map((l, i) => {
+            if (i === 1) {
+                const e = JSON.parse(l);
+                e.tool = "tool.evil";
+                return JSON.stringify(e);
+            }
+            return l;
+        });
+        writeFileSync(path, tampered.join("\n") + "\n", "utf8");
+        const s = verifyChain(repo);
+        expect(s.intact).toBe(false);
+        expect(s.brokenAt).toBe(1);
+        expect(["TAMPERED", "BROKEN", "INVALID"]).toContain(s.root);
+    });
+    it("verdict is captured when present in response.data.verdict", () => {
+        recordReplay(repo, "mneme.audit.certify", {}, { data: { verdict: "WARN" } });
+        const entries = readReplay(repo);
+        expect(entries[0].verdict).toBe("WARN");
+    });
+    it("recordReplay never throws on bad input", () => {
+        // Pass a circular reference — JSON.stringify throws, recorder should swallow.
+        const circ = {};
+        circ["self"] = circ;
+        expect(() => recordReplay(repo, "tool.bad", circ, { data: {} })).not.toThrow();
+    });
+    it("readReplay respects the limit parameter (most-recent N)", () => {
+        for (let i = 0; i < 10; i++)
+            recordReplay(repo, `tool.${i}`, {}, { data: {} });
+        const last3 = readReplay(repo, 3);
+        expect(last3).toHaveLength(3);
+        expect(last3[0].tool).toBe("tool.7");
+        expect(last3[2].tool).toBe("tool.9");
+    });
+    it("creates the .mneme dir + secret on first record", () => {
+        recordReplay(repo, "tool.a", {}, {});
+        expect(existsSync(join(repo, ".mneme", "replay-secret.bin"))).toBe(true);
+        expect(existsSync(join(repo, ".mneme", "replay.jsonl"))).toBe(true);
+    });
+});
+//# sourceMappingURL=_replay.test.js.map

package/dist/tools/_replay.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_replay.test.js","sourceRoot":"","sources":["../../src/tools/_replay.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAErE,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,IAAI,IAAY,CAAC;IACjB,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC;YAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,YAAY,CAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACrF,YAAY,CAAC,IAAI,EAAE,qBAAqB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3F,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,8DAA8D;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAClC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACxB,CAAC,CAAC,IAAI,GAAG,WAAW,CAAC;gBACrB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;QACH,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,YAAY,CAAC,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,8EAA8E;QAC9E,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QACpB,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tools/_timetravel.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Time-travel MCP (v1.18.0 — black sheep #2)
+ *
+ * Snap the AI agent's view of the repo to a specific git ref. Every
+ * subsequent tool call (within the same MCP server process) operates
+ * AS IF today were that ref. State is per-server-process, so two AI
+ * sessions connecting to the same repo via separate MCP processes
+ * don't collide.
+ *
+ *   • mneme.timetravel.activate(ref)   — freeze the view at this ref
+ *   • mneme.timetravel.status          — query current state
+ *   • mneme.timetravel.deactivate      — return to live HEAD
+ *
+ * v1.18.0 ships the SCAFFOLDING — a per-process state holder + the
+ * three tools above. Existing tools that want to honor time-travel
+ * read `getTimeTravelState()` from this module and clamp their git
+ * commands to `--until <commitDate>` or `<ref>` accordingly. The
+ * gradual-rollout pattern: tools opt in over time without a big-bang
+ * refactor.
+ *
+ * Use cases:
+ *   • Counterfactual analysis: "If I were on duty Sept 2024, what
+ *     would I have seen?" — recreate incident-response state.
+ *   • Hindsight-bias audit: "Did the AI's recommendation REALLY hold
+ *     up at the time?" — replay decisions against frozen context.
+ *   • Onboarding rehearsal: walk a new engineer through the repo at
+ *     the moment they would have joined.
+ */
+import type { MnemeTool } from "./_types.js";
+interface TimeTravelState {
+    active: boolean;
+    ref: string | null;
+    resolvedHash: string | null;
+    resolvedDate: string | null;
+    activatedAt: string | null;
+}
+/** Read current time-travel state — exported for tools that opt in. */
+export declare function getTimeTravelState(): Readonly<TimeTravelState>;
+/** Reset to live HEAD. Exported for tests. */
+export declare function resetTimeTravel(): void;
+export declare const timeTravelActivateTool: MnemeTool;
+export declare const timeTravelStatusTool: MnemeTool;
+export declare const timeTravelDeactivateTool: MnemeTool;
+export declare const timeTravelTools: MnemeTool[];
+export {};
+//# sourceMappingURL=_timetravel.d.ts.map

package/dist/tools/_timetravel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_timetravel.d.ts","sourceRoot":"","sources":["../../src/tools/_timetravel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,UAAU,eAAe;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAYD,uEAAuE;AACvE,wBAAgB,kBAAkB,IAAI,QAAQ,CAAC,eAAe,CAAC,CAE9D;AAED,8CAA8C;AAC9C,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AA4BD,eAAO,MAAM,sBAAsB,EAAE,SA+FpC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,SAwClC,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,SAsCtC,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,SAAS,EAItC,CAAC"}