@monoes/monomindcli 2.15.6 → 2.16.0

package/dist/src/catalog/projection.d.ts

@@ -0,0 +1,57 @@
+import type { ArtifactIntent } from '../platform-adapters/types.js';
+import { type CatalogAsset } from './snapshot.js';
+export type ProjectionSurface = 'platform:claude' | 'platform:agents';
+export declare const PROJECTION_SURFACES: readonly ProjectionSurface[];
+export interface ProjectedPackage {
+    id: string;
+    sha256: string;
+    paths: string[];
+}
+export interface ProjectionRemoval {
+    id: string;
+    /** Package directory relative to the surface's skill root. */
+    dir: string;
+    marker: string;
+    /** Files of a re-projected package to leave alone; only the rest are removed. */
+    keep?: string[];
+}
+export interface ProjectionPlan {
+    surface: ProjectionSurface;
+    intents: ArtifactIntent[];
+    packages: ProjectedPackage[];
+    removals: ProjectionRemoval[];
+    diagnostics: string[];
+}
+export interface ProjectionResult extends ProjectionPlan {
+    dryRun: boolean;
+    changed: string[];
+    skipped: string[];
+    /** Where each changed file's previous content was backed up. */
+    backupDir: string;
+    /** The skill registry rebuilt after the apply, when there was one to rebuild. */
+    registry?: string;
+}
+export interface ProjectionOptions {
+    /** Plan only the removal of this id's package; project nothing. */
+    unproject?: string;
+}
+export declare const catalogMarker: (name: string) => string;
+/** The first body line of a projected SKILL.md; `jev:` is read by build-skill-registry.cjs. */
+export declare const catalogMarkerLine: (a: Pick<CatalogAsset, 'id' | 'sha256' | 'targets'>) => string;
+/**
+ * Surfaces that still hold a projected copy of catalog skill `id` (a marked
+ * package dir reached without following a link). Read-only; disable/revoke use
+ * it to point at the `project --apply` that removes the copy.
+ */
+export declare function projectedSurfaces(root: string, id: string): ProjectionSurface[];
+/** Read-only plan: what `applyProjection` would write and remove. */
+export declare function planProjection(root: string, surface: ProjectionSurface, opts?: ProjectionOptions): Promise<ProjectionPlan>;
+/**
+ * Plans and applies in one transaction under the platform mutation lock. A dry
+ * run takes the same path with `dryRun` set (no lock, no writes), so its
+ * `changed` list is the prediction.
+ */
+export declare function applyProjection(root: string, surface: ProjectionSurface, opts: ProjectionOptions & {
+    dryRun: boolean;
+}): Promise<ProjectionResult>;
+//# sourceMappingURL=projection.d.ts.map

package/dist/src/catalog/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../../src/catalog/projection.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,cAAc,EAA8B,MAAM,+BAA+B,CAAC;AAIhG,OAAO,EAAiB,KAAK,YAAY,EAAY,MAAM,eAAe,CAAC;AAG3E,MAAM,MAAM,iBAAiB,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;AACtE,eAAO,MAAM,mBAAmB,EAAE,SAAS,iBAAiB,EAG3D,CAAC;AAQF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACtD,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,aAAa,SAAU,MAAM,KAAG,MAAiC,CAAC;AAE/E,+FAA+F;AAC/F,eAAO,MAAM,iBAAiB,MAAO,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,QAAQ,GAAG,SAAS,CAAC,KAAG,MACQ,CAAC;AA4KhG;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAU/E;AAED,qEAAqE;AACrE,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,iBAAiB,EAC1B,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,cAAc,CAAC,CAEzB;AA0BD;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE,iBAAiB,GAAG;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GAC5C,OAAO,CAAC,gBAAgB,CAAC,CA4B3B"}

package/dist/src/catalog/projection.js

@@ -0,0 +1,272 @@
+/**
+ * Explicit, reversible projection of active catalog skills into the two real
+ * platform surfaces: `.claude/skills` (platform:claude) and the shared
+ * `.agents/skills` (platform:agents). Every projected file carries the stable
+ * managed marker `catalog:skill:<name>`; a destination without it is foreign
+ * and never written, and no write or removal passes through a symbolic link.
+ */
+import { existsSync, lstatSync, readdirSync, readFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { dirname, join, relative } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { atomicWrite, removeManagedSkillPackage, symlinkedComponent, withMutationLock, } from '../platform-adapters/mutation.js';
+import { applyIntents, resolveArtifactLocation } from '../platform-adapters/operations.js';
+import { PLATFORM_REGISTRY } from '../platform-adapters/registry.js';
+import { verifyEntry } from './digest.js';
+import { frontmatterViolations } from './frontmatter.js';
+import { shellExecSyntax } from './scan.js';
+import { buildSnapshot, eligible } from './snapshot.js';
+import { CatalogIdSchema } from './types.js';
+export const PROJECTION_SURFACES = [
+    'platform:claude',
+    'platform:agents',
+];
+/** Any `.agents` adapter resolves the same `.agents/skills` directory. */
+const ADAPTER = {
+    'platform:claude': 'claude',
+    'platform:agents': 'codex',
+};
+export const catalogMarker = (name) => `catalog:skill:${name}`;
+/** The first body line of a projected SKILL.md; `jev:` is read by build-skill-registry.cjs. */
+export const catalogMarkerLine = (a) => `<!-- catalog ${a.id} sha256:${a.sha256} jev:${a.targets.includes('jev') ? 'yes' : 'no'} -->`;
+/** Refusals of the package content itself (not drift or digest problems). */
+const SECURITY_REFUSAL = /^(?:frontmatter-not-allowed|body-exec):/;
+const FRONTMATTER = /^---\r?\n[\s\S]*?\r?\n---\r?\n/;
+const isOurs = (content, name) => content.includes(`monomind:start ${catalogMarker(name)}`);
+function requestFor(root, surface, dryRun) {
+    return { platform: ADAPTER[surface], scope: 'project', path: root, dryRun };
+}
+function listFiles(dir, prefix = '') {
+    const out = [];
+    for (const e of readdirSync(join(dir, prefix), { withFileTypes: true })) {
+        const rel = prefix ? `${prefix}/${e.name}` : e.name;
+        if (e.isDirectory())
+            out.push(...listFiles(dir, rel));
+        else if (e.isFile())
+            out.push(rel);
+    }
+    return out.sort();
+}
+function withMarkerLine(skillMd, line) {
+    const header = FRONTMATTER.exec(skillMd)?.[0];
+    if (!header)
+        return skillMd;
+    return `${header}\n${line}\n${skillMd.slice(header.length).replace(/^\r?\n/, '')}`;
+}
+/** Intents for one verified package, or the reason it is refused. */
+function packageIntents(root, skillRoot, asset) {
+    const check = verifyEntry(root, asset);
+    if (!check.ok)
+        return { refused: check.reason };
+    const intents = [];
+    const paths = [];
+    const files = listFiles(check.dir);
+    // The same checks staging applies: stored bytes may predate them.
+    for (const file of files.filter((f) => f.endsWith('.md'))) {
+        const text = readFileSync(join(check.dir, file), 'utf8');
+        const nested = file !== 'SKILL.md' && file.endsWith('/SKILL.md');
+        if (file === 'SKILL.md' || (nested && FRONTMATTER.test(text))) {
+            const bad = frontmatterViolations(text);
+            if (bad.length)
+                return { refused: `frontmatter-not-allowed: ${file}: ${bad.join(', ')}` };
+        }
+        if (shellExecSyntax(text))
+            return { refused: `body-exec: ${file} carries shell execution syntax` };
+    }
+    for (const file of files) {
+        const dest = join(skillRoot, asset.name, file);
+        const display = relative(root, dest);
+        const link = symlinkedComponent(root, dest);
+        if (link)
+            return { refused: `symlinked-destination: ${relative(root, link) || link}` };
+        let content = readFileSync(join(check.dir, file), 'utf8');
+        if (file === 'SKILL.md')
+            content = withMarkerLine(content, catalogMarkerLine(asset));
+        const st = lstatSync(dest, { throwIfNoEntry: false });
+        if (st) {
+            const existing = st.isFile() ? readFileSync(dest, 'utf8') : '';
+            if (!isOurs(existing, asset.name))
+                return { refused: `not catalog-managed: ${display}` };
+            if (file === 'SKILL.md' && FRONTMATTER.exec(existing)?.[0] !== FRONTMATTER.exec(content)?.[0])
+                return {
+                    refused: `frontmatter-drift: run catalog unproject ${asset.id} then catalog project`,
+                };
+        }
+        paths.push(display);
+        intents.push({
+            kind: 'skill',
+            locationKey: 'skill',
+            scope: 'project',
+            replace: 'managed_block',
+            format: 'md',
+            marker: catalogMarker(asset.name),
+            relativePath: `${asset.name}/${file}`,
+            content,
+        });
+    }
+    return { intents, paths, files };
+}
+/** Files below `dir` (not following links) that carry `name`'s marker. */
+function markedFiles(dir, name) {
+    try {
+        return listFiles(dir).filter((f) => isOurs(readFileSync(join(dir, f), 'utf8'), name));
+    }
+    catch {
+        return [];
+    }
+}
+function buildPlan(root, surface, opts) {
+    const plan = {
+        surface,
+        intents: [],
+        packages: [],
+        removals: [],
+        diagnostics: [],
+    };
+    const adapter = PLATFORM_REGISTRY[ADAPTER[surface]];
+    const location = resolveArtifactLocation(adapter, 'skill', 'project', { root });
+    if (!location)
+        throw new Error(`no project skill location for ${surface}`);
+    const skillRoot = location.path;
+    const unprojectName = opts.unproject ? parseId(opts.unproject) : undefined;
+    const snapshot = buildSnapshot(root);
+    const wanted = unprojectName ? [] : eligible(snapshot, surface);
+    if (!unprojectName)
+        for (const d of snapshot.diagnostics) {
+            const a = snapshot.assets.find((x) => x.id === d.id);
+            if (!a || (a.status === 'active' && a.targets.includes(surface)))
+                plan.diagnostics.push(`${d.id}: ${d.reason}`);
+        }
+    const rootLink = symlinkedComponent(root, skillRoot);
+    if (rootLink) {
+        if (wanted.length || unprojectName || existsSync(skillRoot))
+            plan.diagnostics.push(`symlinked-destination: ${relative(root, rootLink)}`);
+        return plan;
+    }
+    const unsafe = new Set();
+    for (const asset of wanted) {
+        if (asset.kind !== 'skill') {
+            plan.diagnostics.push(`${asset.id}: only skills are projected`);
+            continue;
+        }
+        const r = packageIntents(root, skillRoot, asset);
+        if ('refused' in r) {
+            plan.diagnostics.push(`${asset.id}: ${r.refused}`);
+            if (SECURITY_REFUSAL.test(r.refused))
+                unsafe.add(asset.name);
+        }
+        else {
+            plan.intents.push(...r.intents);
+            plan.packages.push({ id: asset.id, sha256: asset.sha256, paths: r.paths });
+            const stale = markedFiles(join(skillRoot, asset.name), asset.name).filter((f) => !r.files.includes(f));
+            if (stale.length)
+                plan.removals.push({
+                    id: asset.id,
+                    dir: asset.name,
+                    marker: catalogMarker(asset.name),
+                    keep: r.files,
+                });
+        }
+    }
+    // Only skills own a projection. A refused skill keeps its earlier copy, unless
+    // the refusal is a security one: that copy may carry what is now refused.
+    const keep = new Set(wanted.filter((a) => a.kind === 'skill' && !unsafe.has(a.name)).map((a) => a.name));
+    const entries = existsSync(skillRoot) ? readdirSync(skillRoot, { withFileTypes: true }) : [];
+    for (const e of entries.sort((a, b) => (a.name < b.name ? -1 : 1))) {
+        if (unprojectName ? e.name !== unprojectName : keep.has(e.name))
+            continue;
+        if (e.isSymbolicLink()) {
+            if (unprojectName)
+                plan.diagnostics.push(`symlinked-destination: ${relative(root, join(skillRoot, e.name))}`);
+            continue;
+        }
+        if (e.isDirectory() && markedFiles(join(skillRoot, e.name), e.name).length)
+            plan.removals.push({ id: `skill:${e.name}`, dir: e.name, marker: catalogMarker(e.name) });
+    }
+    return plan;
+}
+function parseId(id) {
+    const parsed = CatalogIdSchema.safeParse(id);
+    if (!parsed.success || !parsed.data.startsWith('skill:'))
+        throw new Error(`not a skill catalog id: ${id}`);
+    return parsed.data.slice('skill:'.length);
+}
+/**
+ * Surfaces that still hold a projected copy of catalog skill `id` (a marked
+ * package dir reached without following a link). Read-only; disable/revoke use
+ * it to point at the `project --apply` that removes the copy.
+ */
+export function projectedSurfaces(root, id) {
+    if (!id.startsWith('skill:'))
+        return [];
+    const name = id.slice('skill:'.length);
+    return PROJECTION_SURFACES.filter((surface) => {
+        const adapter = PLATFORM_REGISTRY[ADAPTER[surface]];
+        const location = resolveArtifactLocation(adapter, 'skill', 'project', { root });
+        if (!location)
+            return false;
+        const dir = join(location.path, name);
+        return !symlinkedComponent(root, dir) && markedFiles(dir, name).length > 0;
+    });
+}
+/** Read-only plan: what `applyProjection` would write and remove. */
+export async function planProjection(root, surface, opts = {}) {
+    return buildPlan(root, surface, opts);
+}
+const HERE = dirname(fileURLToPath(import.meta.url));
+/** src/catalog → ../.. is the package root; dist/src/catalog → ../../.. */
+const BUILDER_CANDIDATES = [
+    join(HERE, '..', '..', '.claude', 'helpers', 'build-skill-registry.cjs'),
+    join(HERE, '..', '..', '..', '.claude', 'helpers', 'build-skill-registry.cjs'),
+];
+/**
+ * Regenerates `<root>/.claude/helpers/skill-registry.json` with the bundled
+ * builder (which knows the catalog `jev:` flag) — only when the project
+ * already has one, so a project without the per-prompt router gains nothing.
+ */
+function rebuildSkillRegistry(root) {
+    const file = join(root, '.claude', 'helpers', 'skill-registry.json');
+    if (!existsSync(file) || symlinkedComponent(root, file))
+        return undefined;
+    const builder = BUILDER_CANDIDATES.find((p) => existsSync(p));
+    if (!builder)
+        return undefined;
+    const { build } = createRequire(import.meta.url)(builder);
+    atomicWrite(file, `${JSON.stringify(build(root), null, 2)}\n`);
+    return relative(root, file);
+}
+/**
+ * Plans and applies in one transaction under the platform mutation lock. A dry
+ * run takes the same path with `dryRun` set (no lock, no writes), so its
+ * `changed` list is the prediction.
+ */
+export async function applyProjection(root, surface, opts) {
+    const request = requestFor(root, surface, opts.dryRun);
+    const adapter = PLATFORM_REGISTRY[request.platform];
+    const run = (plan) => {
+        const applied = applyIntents(adapter, plan.intents, request);
+        const result = {
+            ...plan,
+            dryRun: opts.dryRun,
+            changed: applied.changed,
+            skipped: applied.skipped,
+            diagnostics: [...plan.diagnostics, ...applied.diagnostics],
+            backupDir: '.monomind/backups/',
+        };
+        for (const r of plan.removals) {
+            const removed = removeManagedSkillPackage(adapter, request, r.dir, r.marker, r.keep);
+            result.changed.push(...removed.changed);
+            result.skipped.push(...removed.skipped);
+            result.diagnostics.push(...removed.diagnostics.map((d) => `${r.id}: ${d}`));
+        }
+        if (!opts.dryRun && surface === 'platform:claude' && result.changed.length)
+            result.registry = rebuildSkillRegistry(root);
+        return result;
+    };
+    const preview = buildPlan(root, surface, opts);
+    // Nothing to do: return without taking the lock, so an empty apply creates nothing.
+    if (opts.dryRun || (preview.intents.length === 0 && preview.removals.length === 0))
+        return run(preview);
+    return withMutationLock(request, () => run(buildPlan(root, surface, opts)));
+}
+//# sourceMappingURL=projection.js.map

package/dist/src/catalog/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../../src/catalog/projection.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,WAAW,EACX,yBAAyB,EACzB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAqB,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG7C,MAAM,CAAC,MAAM,mBAAmB,GAAiC;IAC/D,iBAAiB;IACjB,iBAAiB;CAClB,CAAC;AAEF,0EAA0E;AAC1E,MAAM,OAAO,GAA0C;IACrD,iBAAiB,EAAE,QAAQ;IAC3B,iBAAiB,EAAE,OAAO;CAC3B,CAAC;AAwCF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,iBAAiB,IAAI,EAAE,CAAC;AAE/E,+FAA+F;AAC/F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAkD,EAAU,EAAE,CAC9F,gBAAgB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;AAEhG,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,yCAAyC,CAAC;AACnE,MAAM,WAAW,GAAG,gCAAgC,CAAC;AACrD,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,IAAY,EAAW,EAAE,CACxD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAE5D,SAAS,UAAU,CAAC,IAAY,EAAE,OAA0B,EAAE,MAAe;IAC3E,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,MAAM,GAAG,EAAE;IACzC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;aACjD,IAAI,CAAC,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,IAAY;IACnD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,GAAG,MAAM,KAAK,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,qEAAqE;AACrE,SAAS,cAAc,CACrB,IAAY,EACZ,SAAiB,EACjB,KAAmB;IAEnB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAChD,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,kEAAkE;IAClE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,4BAA4B,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC5F,CAAC;QACD,IAAI,eAAe,CAAC,IAAI,CAAC;YACvB,OAAO,EAAE,OAAO,EAAE,cAAc,IAAI,iCAAiC,EAAE,CAAC;IAC5E,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACvF,IAAI,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrF,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,EAAE,EAAE,CAAC;YACP,MAAM,QAAQ,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,OAAO,EAAE,EAAE,CAAC;YACzF,IAAI,IAAI,KAAK,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC3F,OAAO;oBACL,OAAO,EAAE,4CAA4C,KAAK,CAAC,EAAE,uBAAuB;iBACrF,CAAC;QACN,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,OAAO;YACpB,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;YACjC,YAAY,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE;YACrC,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,0EAA0E;AAC1E,SAAS,WAAW,CAAC,GAAW,EAAE,IAAY;IAC5C,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAChB,IAAY,EACZ,OAA0B,EAC1B,IAAuB;IAEvB,MAAM,IAAI,GAAmB;QAC3B,OAAO;QACP,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,EAAE;KAChB,CAAC;IACF,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC;IAChC,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,aAAa;QAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC9D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,MAAM,CAAC,MAAM,IAAI,aAAa,IAAI,UAAU,CAAC,SAAS,CAAC;YACzD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,0BAA0B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,6BAA6B,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3E,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CACvE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC5B,CAAC;YACF,IAAI,KAAK,CAAC,MAAM;gBACd,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,GAAG,EAAE,KAAK,CAAC,IAAI;oBACf,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;oBACjC,IAAI,EAAE,CAAC,CAAC,KAAK;iBACd,CAAC,CAAC;QACP,CAAC;IACH,CAAC;IACD,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACnF,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1E,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;YACvB,IAAI,aAAa;gBACf,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,0BAA0B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7F,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM;YACxE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,EAAU;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QAC5C,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,OAA0B,EAC1B,IAAI,GAAsB,EAAE;IAE5B,OAAO,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG;IACzB,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,0BAA0B,CAAC;IACxE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,0BAA0B,CAAC;CAC/E,CAAC;AAEF;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACrE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1E,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAEvD,CAAC;IACF,WAAW,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,OAA0B,EAC1B,IAA6C;IAE7C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,CAAC,IAAoB,EAAoB,EAAE;QACrD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAqB;YAC/B,GAAG,IAAI;YACP,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC;YAC1D,SAAS,EAAE,oBAAoB;SAChC,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACrF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,KAAK,iBAAiB,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM;YACxE,MAAM,CAAC,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/C,oFAAoF;IACpF,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;QAChF,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;IACtB,OAAO,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC"}

package/dist/src/catalog/scan.d.ts

@@ -0,0 +1,37 @@
+import { type FenceInstance } from '../orgrt/fence.js';
+import { type CatalogEntry } from './types.js';
+export type CatalogFence = Pick<FenceInstance, 'detect'>;
+/** Returns the scanner, or null when it is unavailable. */
+export type FenceLoader = () => Promise<CatalogFence | null>;
+export interface PackageInspection {
+    /** Set when the package as a whole is unusable; nothing may be staged. */
+    fatal?: string;
+    verdict: 'clean' | 'quarantine';
+    accepted: string[];
+    rejected: {
+        path: string;
+        reason: string;
+    }[];
+    requestedTools: string[];
+    scanner: {
+        ok: boolean;
+        blocked: boolean;
+        summary: string;
+    };
+}
+export declare const MAX_FILE_BYTES: number;
+export declare const MAX_MARKDOWN_FILES = 100;
+export declare const SKIP_DIRS: Set<string>;
+/**
+ * True when `text` carries Markdown that a platform executes as a shell
+ * command — as written, or in the body Claude Code cuts from it (the leading
+ * `\n` stands in for its prefix, so a `!` at body start counts as preceded by
+ * whitespace).
+ */
+export declare const shellExecSyntax: (text: string) => boolean;
+/** Inspect a package directory (the staged temp copy). Never writes. */
+export declare function inspectPackage(dir: string, kind: CatalogEntry['kind'], opts: {
+    root: string;
+    fence?: FenceLoader;
+}): Promise<PackageInspection>;
+//# sourceMappingURL=scan.d.ts.map

package/dist/src/catalog/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../../src/catalog/scan.ts"],"names":[],"mappings":"AAQA,OAAO,EAAsB,KAAK,aAAa,EAAyB,MAAM,mBAAmB,CAAC;AAIlG,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAEhE,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;AACzD,2DAA2D;AAC3D,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;AAE7D,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,GAAG,YAAY,CAAC;IAChC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7C,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,OAAO,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7D;AAED,eAAO,MAAM,cAAc,QAAa,CAAC;AACzC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAGtC,eAAO,MAAM,SAAS,aAAoC,CAAC;AA0C3D;;;;;GAKG;AACH,eAAO,MAAM,eAAe,SAAU,MAAM,KAAG,OACsB,CAAC;AA8FtE,wEAAwE;AACxE,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,EAC1B,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,WAAW,CAAA;CAAE,GAC1C,OAAO,CAAC,iBAAiB,CAAC,CA6D5B"}

package/dist/src/catalog/scan.js

@@ -0,0 +1,214 @@
+/**
+ * Package inspection: deterministic file checks first, then the monofence
+ * scanner over the accepted Markdown. Read-only — the caller deletes the
+ * rejected files. A blocked scan, a scanner error or an unavailable scanner
+ * all yield `verdict: 'quarantine'`; nothing here changes lifecycle status.
+ */
+import { lstatSync, readdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { createFenceForRole, loadGlobalFenceConfig } from '../orgrt/fence.js';
+import { parseFrontmatter } from '../orgrt/skill-library.js';
+import { BlueprintSchema } from './blueprints.js';
+import { frontmatterViolations } from './frontmatter.js';
+import { CATALOG_NAME_RE } from './types.js';
+export const MAX_FILE_BYTES = 512 * 1024;
+export const MAX_MARKDOWN_FILES = 100;
+const SCAN_CHAR_CAP = 200_000;
+const SUMMARY_CAP = 500;
+export const SKIP_DIRS = new Set(['.git', 'node_modules']);
+/** Text reserved for projection markers; a package carrying it could forge one. */
+const RESERVED_MARKERS = ['<!-- catalog ', 'monomind:start', 'monomind:end'];
+/**
+ * Claude Code runs a skill's inline !`cmd` / !$cmd (its detector:
+ * `(?<=^|\s)!(?=`|\$)`), every ```! run anywhere in the text (its extractor
+ * has no line anchor, so `> ```!`, `- ```!` and inline ```!cmd``` all execute)
+ * and ~~~! fenced blocks when the skill loads.
+ */
+const SHELL_EXEC = [/(?:^|\s)!(?=[`$])/m, /```!/, /^[ \t]*~{3,}[ \t]*!/m];
+/**
+ * What Claude Code substitutes before it extracts runs: `$ARGUMENTS`,
+ * `$ARGUMENTS[n]`, `$n`, `${CLAUDE_…}` (and a `\` escape that drops to the
+ * literal). A preload substitutes "" and an argument can be any text except a
+ * `!` (it escapes those), so a placeholder next to a `!` — directly after it,
+ * or anywhere in the run of spaces, backticks and tildes before it — can
+ * splice a run that the text as written does not contain.
+ */
+// `${…}` is bounded (and stops at a `$`) so a run of `${` scans in linear time.
+const PLACEHOLDER = /\\?\$(?:ARGUMENTS(?:\[\d+\])?|\d+(?!\w)|\{[^}\s$]{0,128}\})/g;
+const BEFORE_BANG = ' \t`~\0';
+function placeholderSplice(text) {
+    const t = text.replace(PLACEHOLDER, '\0');
+    // Runs end at a `!`, so each character is scanned at most once.
+    for (let i = t.indexOf('!'); i !== -1; i = t.indexOf('!', i + 1)) {
+        if (t[i + 1] === '\0')
+            return true;
+        for (let j = i - 1; j >= 0 && BEFORE_BANG.includes(t[j]); j--)
+            if (t[j] === '\0')
+                return true;
+    }
+    return false;
+}
+/**
+ * Claude Code's frontmatter split (/^---\s*\n([\s\S]*?)---\s*\n?/ after a BOM
+ * strip): it ends at the first `---` anywhere, even mid-line, and the body it
+ * hands on follows a "Base directory …\n\n" prefix. Same match, but the opener
+ * stops at its first newline so a run of blank lines cannot backtrack.
+ */
+const CLAUDE_FRONTMATTER = /^\uFEFF?---[^\S\n]*\n[\s\S]*?---\s*/;
+const execIn = (text) => SHELL_EXEC.some((re) => re.test(text)) || placeholderSplice(text);
+/**
+ * True when `text` carries Markdown that a platform executes as a shell
+ * command — as written, or in the body Claude Code cuts from it (the leading
+ * `\n` stands in for its prefix, so a `!` at body start counts as preceded by
+ * whitespace).
+ */
+export const shellExecSyntax = (text) => execIn(text) || execIn(`\n${text.replace(CLAUDE_FRONTMATTER, '')}`);
+/** Every path under `dir`, relative, with its lstat kind. Skipped dirs are reported, not walked. */
+function walk(dir, prefix = '') {
+    const out = [];
+    for (const name of readdirSync(join(dir, prefix)).sort()) {
+        const rel = prefix ? `${prefix}/${name}` : name;
+        const st = lstatSync(join(dir, rel));
+        if (st.isSymbolicLink())
+            out.push({ rel, kind: 'symlink' });
+        else if (st.isDirectory()) {
+            if (SKIP_DIRS.has(name))
+                out.push({ rel, kind: 'skipped' });
+            else
+                out.push(...walk(dir, rel));
+        }
+        else
+            out.push({ rel, kind: st.isFile() ? 'file' : 'other' });
+    }
+    return out;
+}
+function fileVerdict(rel, kind, size) {
+    if (rel.split('/').includes('..'))
+        return 'path contains ..';
+    // A nested `.claude/skills/…` (or any dot dir) is platform config, not package content.
+    if (rel.split('/').some((seg) => seg.startsWith('.')))
+        return 'path segment starts with "."';
+    const base = rel.slice(rel.lastIndexOf('/') + 1);
+    const allowed = base === 'LICENSE.txt' ||
+        (kind === 'blueprint' ? rel === 'blueprint.json' : base.endsWith('.md'));
+    if (!allowed)
+        return kind === 'blueprint'
+            ? 'not blueprint.json or LICENSE.txt'
+            : 'not Markdown or LICENSE.txt';
+    if (size > MAX_FILE_BYTES)
+        return `larger than ${MAX_FILE_BYTES / 1024} KiB`;
+    return undefined;
+}
+const str = (v) => Array.isArray(v) ? v.join(' ') : v;
+const list = (v) => v === undefined ? [] : Array.isArray(v) ? v : v.split(/[,\s]+/).filter(Boolean);
+/** Package-level problems of the authored metadata; `requestedTools` for skills. */
+function metadata(dir, kind) {
+    if (kind === 'blueprint') {
+        try {
+            BlueprintSchema.parse(JSON.parse(readFileSync(join(dir, 'blueprint.json'), 'utf8')));
+            return { tools: [] };
+        }
+        catch (e) {
+            return { fatal: `invalid blueprint.json: ${e.message.slice(0, 300)}`, tools: [] };
+        }
+    }
+    const { data } = parseFrontmatter(readFileSync(join(dir, 'SKILL.md'), 'utf8'));
+    const name = str(data.name);
+    if (!name)
+        return { fatal: 'SKILL.md has no frontmatter name', tools: [] };
+    if (!str(data.description)?.trim())
+        return { fatal: 'SKILL.md has no frontmatter description', tools: [] };
+    if (!CATALOG_NAME_RE.test(name))
+        return { fatal: `name "${name}" is not a valid catalog name`, tools: [] };
+    return { tools: [...new Set(list(data.tools))].sort() };
+}
+const defaultFence = (root) => () => createFenceForRole(loadGlobalFenceConfig(root) ?? {});
+async function runScanner(text, load) {
+    try {
+        const fence = await load();
+        if (!fence)
+            return {
+                ok: false,
+                blocked: false,
+                summary: 'scanner unavailable (monofence-ai could not be loaded)',
+            };
+        const r = await fence.detect(text);
+        const threats = r.threats.map((t) => `${t.type} ${t.confidence.toFixed(2)}`).join(', ');
+        return {
+            ok: true,
+            blocked: !r.safe,
+            summary: (r.safe ? `clean (risk ${r.overallRisk.toFixed(2)})` : `blocked: ${threats}`).slice(0, SUMMARY_CAP),
+        };
+    }
+    catch (e) {
+        return {
+            ok: false,
+            blocked: false,
+            summary: `scanner error: ${e.message}`.slice(0, SUMMARY_CAP),
+        };
+    }
+}
+/** Inspect a package directory (the staged temp copy). Never writes. */
+export async function inspectPackage(dir, kind, opts) {
+    const accepted = [];
+    const rejected = [];
+    for (const { rel, kind: k } of walk(dir)) {
+        if (k === 'symlink')
+            rejected.push({ path: rel, reason: 'symlink' });
+        else if (k === 'skipped')
+            rejected.push({ path: rel, reason: 'excluded directory' });
+        else if (k === 'other')
+            rejected.push({ path: rel, reason: 'not a regular file' });
+        else {
+            const why = fileVerdict(rel, kind, lstatSync(join(dir, rel)).size);
+            if (why)
+                rejected.push({ path: rel, reason: why });
+            else
+                accepted.push(rel);
+        }
+    }
+    accepted.sort();
+    const base = { accepted, rejected, requestedTools: [] };
+    const refuse = (fatal) => ({
+        ...base,
+        fatal,
+        verdict: 'quarantine',
+        scanner: { ok: false, blocked: false, summary: 'not scanned' },
+    });
+    const primary = kind === 'blueprint' ? 'blueprint.json' : 'SKILL.md';
+    if (!accepted.includes(primary))
+        return refuse(`package has no usable ${primary}`);
+    const markdown = accepted.filter((f) => f.endsWith('.md'));
+    if (markdown.length > MAX_MARKDOWN_FILES)
+        return refuse(`more than ${MAX_MARKDOWN_FILES} Markdown files`);
+    const meta = metadata(dir, kind);
+    if (meta.fatal)
+        return refuse(meta.fatal);
+    for (const f of accepted) {
+        const content = readFileSync(join(dir, f), 'utf8');
+        const marker = RESERVED_MARKERS.find((m) => content.includes(m));
+        if (marker)
+            return refuse(`${f} contains reserved marker text "${marker.trim()}"`);
+        // What projection re-checks: a nested SKILL.md only when it has frontmatter.
+        const bad = f === 'SKILL.md' || f.endsWith('/SKILL.md') ? frontmatterViolations(content) : [];
+        if (bad.length && !(f !== 'SKILL.md' && bad[0] === 'SKILL.md has no frontmatter'))
+            return refuse(`frontmatter-not-allowed: ${f}: ${bad.join(', ')}`);
+        if (f.endsWith('.md') && shellExecSyntax(content))
+            return refuse(`body-exec: ${f} contains shell execution syntax (!\`…\`, a \`\`\`! block or a placeholder beside a !)`);
+    }
+    const scanned = accepted.filter((f) => f !== 'LICENSE.txt');
+    const full = scanned.map((f) => readFileSync(join(dir, f), 'utf8')).join('\n\n');
+    const scanner = await runScanner(full.slice(0, SCAN_CHAR_CAP), opts.fence ?? defaultFence(opts.root));
+    // Content past the cap was never scanned: it must not pass as clean.
+    const truncated = full.length > SCAN_CHAR_CAP;
+    if (truncated)
+        scanner.summary =
+            `not fully scanned (${full.length} chars > ${SCAN_CHAR_CAP}); ${scanner.summary}`.slice(0, SUMMARY_CAP);
+    return {
+        ...base,
+        requestedTools: meta.tools,
+        verdict: scanner.ok && !scanner.blocked && !truncated ? 'clean' : 'quarantine',
+        scanner,
+    };
+}
+//# sourceMappingURL=scan.js.map

package/dist/src/catalog/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../../src/catalog/scan.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAsB,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAqB,MAAM,YAAY,CAAC;AAgBhE,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,aAAa,GAAG,OAAO,CAAC;AAC9B,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAC3D,mFAAmF;AACnF,MAAM,gBAAgB,GAAG,CAAC,eAAe,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;AAC7E;;;;;GAKG;AACH,MAAM,UAAU,GAAG,CAAC,oBAAoB,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC;AAC1E;;;;;;;GAOG;AACH,gFAAgF;AAChF,MAAM,WAAW,GAAG,8DAA8D,CAAC;AACnF,MAAM,WAAW,GAAG,SAAS,CAAC;AAE9B,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC1C,gEAAgE;IAChE,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;IAChG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,qCAAqC,CAAC;AACjE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAW,EAAE,CACvC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAW,EAAE,CACvD,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AAEtE,oGAAoG;AACpG,SAAS,IAAI,CACX,GAAW,EACX,MAAM,GAAG,EAAE;IAEX,MAAM,GAAG,GAAsE,EAAE,CAAC;IAClF,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,EAAE,CAAC,cAAc,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;aACvD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;;gBACvD,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;;YAAM,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,IAA0B,EAAE,IAAY;IACxE,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAC7D,wFAAwF;IACxF,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,8BAA8B,CAAC;IAC7F,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,MAAM,OAAO,GACX,IAAI,KAAK,aAAa;QACtB,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC,OAAO;QACV,OAAO,IAAI,KAAK,WAAW;YACzB,CAAC,CAAC,mCAAmC;YACrC,CAAC,CAAC,6BAA6B,CAAC;IACpC,IAAI,IAAI,GAAG,cAAc;QAAE,OAAO,eAAe,cAAc,GAAG,IAAI,MAAM,CAAC;IAC7E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAgC,EAAsB,EAAE,CACnE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,MAAM,IAAI,GAAG,CAAC,CAAgC,EAAY,EAAE,CAC1D,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAElF,oFAAoF;AACpF,SAAS,QAAQ,CAAC,GAAW,EAAE,IAA0B;IACvD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACrF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,EAAE,2BAA4B,CAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC3E,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE;QAChC,OAAO,EAAE,KAAK,EAAE,yCAAyC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACzE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,SAAS,IAAI,+BAA+B,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC5E,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,YAAY,GAChB,CAAC,IAAY,EAAe,EAAE,CAC9B,GAAG,EAAE,CACH,kBAAkB,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAE1D,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAiB;IACvD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK;YACR,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,wDAAwD;aAClE,CAAC;QACJ,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;YAChB,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC,KAAK,CAC1F,CAAC,EACD,WAAW,CACZ;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,kBAAmB,CAAW,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC;SACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,IAA0B,EAC1B,IAA2C;IAE3C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAkC,EAAE,CAAC;IACnD,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;aAChE,IAAI,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;aAChF,IAAI,CAAC,KAAK,OAAO;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;aAC9E,CAAC;YACJ,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnE,IAAI,GAAG;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;;gBAC9C,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChB,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAc,EAAE,CAAC;IACpE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAqB,EAAE,CAAC,CAAC;QACpD,GAAG,IAAI;QACP,KAAK;QACL,OAAO,EAAE,YAAY;QACrB,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE;KAC/D,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC;IACrE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,MAAM,GAAG,kBAAkB;QACtC,OAAO,MAAM,CAAC,aAAa,kBAAkB,iBAAiB,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,mCAAmC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnF,6EAA6E;QAC7E,MAAM,GAAG,GAAG,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC;YAC/E,OAAO,MAAM,CAAC,4BAA4B,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC;YAC/C,OAAO,MAAM,CACX,cAAc,CAAC,wFAAwF,CACxG,CAAC;IACN,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,MAAM,UAAU,CAC9B,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAC5B,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CACtC,CAAC;IACF,qEAAqE;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC;IAC9C,IAAI,SAAS;QACX,OAAO,CAAC,OAAO;YACb,sBAAsB,IAAI,CAAC,MAAM,YAAY,aAAa,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CACrF,CAAC,EACD,WAAW,CACZ,CAAC;IACN,OAAO;QACL,GAAG,IAAI;QACP,cAAc,EAAE,IAAI,CAAC,KAAK;QAC1B,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY;QAC9E,OAAO;KACR,CAAC;AACJ,CAAC"}