@nanonets/graft 0.23.1 → 0.24.1

package/dist/skills/risk.js

@@ -0,0 +1,396 @@
+import { hookUnrun, quotedTextHit, simpleCommands } from '../trace/shell.js';
+export const MAX_RUN_LINES = 12;
+export const MAX_STEP_CHARS = 300;
+/** The words after a program, to the end of its command (an unquoted-looking `;`, `&`, `|`, `)`, newline or backtick), quotes dropped. */
+/** How far past a program word its arguments are read: a call's own arguments, never the rest of a 2 MB command. */
+const ARGS_MAX = 4096;
+/**
+ * The words after `from`, up to the end of that call. `until` is where the next match of the same program starts
+ * (callers pass it), so `git push git push …` reads each call once and the whole scan stays linear (g7 review).
+ */
+export function argsAfter(text, from, until = text.length) {
+    // `$(git rev-parse HEAD)` is one word to the shell, not the end of the command.
+    const rest = text.slice(from, Math.min(until, from + ARGS_MAX)).replace(/\$\([^()]*\)/g, '$X');
+    const end = rest.search(/[;&|)\n`]/);
+    return (end < 0 ? rest : rest.slice(0, end)).split(/\s+/).map((w) => w.replace(/^['"]+|['"]+$/g, '')).filter(Boolean);
+}
+/** Where a program word starts: not inside another word or path name (`/bin/rm` counts, `git-rm` doesn't). */
+export const word = (name) => new RegExp(String.raw `(?<![\w./-])(?:[\w./-]*\/)?${name}(?=\s|$)`, 'g');
+const PROD = new Set(['main', 'master', 'prod', 'production']);
+const GIT_PUSH = /(?<![\w./-])(?:[\w./-]*\/)?git((?:\s+(?:-C|-c|--git-dir|--work-tree|--namespace)\s+\S+|\s+(?!(?:-C|-c|--git-dir|--work-tree|--namespace)\s)-[\w-]+(?:=\S+)?)*)\s+push(?=\s|$|[;&|)'"])/g;
+export function pushes(text) {
+    const out = [];
+    const calls = [...text.matchAll(GIT_PUSH)];
+    for (const [i, m] of calls.entries()) {
+        const words = argsAfter(text, m.index + m[0].length, calls[i + 1]?.index);
+        let force = false;
+        let all = false;
+        let tags = false;
+        let flagsDone = false;
+        const pos = [];
+        for (let i = 0; i < words.length; i++) {
+            const w = words[i];
+            if (!flagsDone && w === '--')
+                flagsDone = true;
+            else if (flagsDone || !w.startsWith('-'))
+                pos.push(w);
+            else if (/^--force(?:-with-lease)?(?:=.*)?$/.test(w) || /^-[a-zA-Z]*f[a-zA-Z]*$/.test(w))
+                force = true;
+            else if (w === '--mirror')
+                force = all = true;
+            else if (w === '--all' || w === '--branches')
+                all = true;
+            else if (w === '--tags')
+                tags = true;
+            else if (/^(?:-o|--push-option|--repo|--receive-pack|--exec)$/.test(w))
+                i++;
+        }
+        const refspecs = pos.slice(1);
+        const dsts = [];
+        const srcs = [];
+        for (const r of refspecs) {
+            if (r.startsWith('+'))
+                force = true;
+            const x = r.replace(/^\+/, '');
+            const colon = x.lastIndexOf(':');
+            const src = colon < 0 ? x : x.slice(0, colon);
+            const dst = (colon < 0 ? x : x.slice(colon + 1)).replace(/^refs\/heads\//, '');
+            srcs.push(src);
+            dsts.push(dst === 'HEAD' || dst === '@' ? '<current>' : /[$`{}]/.test(dst) || !dst ? '<unknown>' : dst);
+        }
+        if (all)
+            dsts.push('<all>');
+        else if (!refspecs.length && !tags)
+            dsts.push('<current>');
+        out.push({ force, dsts, srcs });
+    }
+    return out;
+}
+export const unknownDst = (d) => d.startsWith('<');
+const pushProd = (c) => pushes(c).some((p) => p.dsts.some((d) => PROD.has(d.toLowerCase()) || unknownDst(d)));
+/** A value written out in the command, not read from a variable or a {param} (`$PW`, `"${PW:?set PW}"`, `{password}`, `<pw>`). */
+export const written = (v) => {
+    const u = v.replace(/^['"]+|['"]+$/g, '');
+    return u.length >= 4 && !/^\$|^\{[A-Za-z_]\w*\}$|^<[^>]*>$|^\*+$|^-/.test(u);
+};
+/** The end of a branch name: not more of a name (`main-fix`, `main/x`, `main.old`). */
+const SEP_END = String.raw `(?![\w:-])`;
+/**
+ * The gated patterns, built once (they ran on every call: a 2 MB command split into pieces built them per piece). Every
+ * span inside a call is bounded, and migrate's flags can't be read two ways, so no command makes them backtrack (g7 review).
+ */
+const PUBLISH_RE = new RegExp(String.raw `\b(?:npm|pnpm|yarn|bun)\b(?:\s+[^\s;&|]+){0,12}?\s+(?:publish|pub)(?![\w:.-])|\b(?:changeset|lerna)\s+publish\b|\bnpx\s+np(?![\w-])|\b(?:poetry|uv|flit|hatch|deno|jsr|vsce|ovsx)\s+publish\b|\bcargo\s+publish\b|\btwine\s+upload\b|\bgem\s+push\b|\b(?:docker|podman)\s+(?:image\s+)?push\b|\bdocker\s+buildx\s+build\b[^;&|\n]{0,300}\s--push\b|\bdotnet\s+nuget\s+push\b|\bpod\s+trunk\s+push\b|\b(?:flutter|dart)\s+pub\s+publish\b|\bmix\s+hex\.publish\b|\bmvn\b[^;&|\n]{0,300}\sdeploy\b|\bgradlew?\b[^;&|\n]{0,300}\spublish\w*\b`, 'i');
+const DEPLOY_RE = new RegExp(String.raw `\bvercel\b[^;&|\n]{0,300}\s--prod\b|\bvercel\s+(?:deploy|promote|rollback)\b|\bvercel\s+alias\s+set\b|\bnetlify(?:-cli)?\s+deploy\b[^;&|\n]{0,300}\s--prod\b|\bfly(?:ctl)?\s+deploy\b|\bkubectl\b[^;&|\n]{0,300}?\s(?:apply|create|replace|patch|delete|scale|set|edit|rollout\s+(?:restart|undo))(?![\w-])|\bhelm\b[^;&|\n]{0,300}?\s(?:upgrade|install|uninstall|rollback|delete)(?![\w-])|\b(?:terraform|tofu)\b(?:\s+-chdir=\S+)?\s+(?:apply|destroy)\b|\bwrangler\b[^;&|\n]{0,300}\s(?:deploy|publish)\b|\bgcloud\b[^;&|\n]{0,300}\sdeploy\b|\b(?:serverless|sls|cdk|sam)\s+deploy\b|\bpulumi\s+up\b|\bfirebase\s+deploy\b|\brailway\s+up\b|\bheroku\s+(?:releases:rollback|container:release)\b|\b(?:npm|pnpm|yarn|bun)\s+(?:run\s+)?deploy(?:[:-]prod(?:uction)?)?${SEP_END}|\bmake\s+deploy(?:-prod(?:uction)?)?${SEP_END}`, 'i');
+const MIGRATE_RE = new RegExp(String.raw `\bprisma\s+(?:migrate\s+deploy|db\s+push)\b|\bsupabase\s+(?:db\s+push|migration\s+up)\b|\bknex\s+migrate:latest\b|\balembic\s+upgrade\b|\bdb:migrate\b|\bmanage\.py\s+migrate\b|\becto\.migrate\b|\bflyway\s+migrate\b|\bliquibase\s+update\b|\bdbmate\s+(?:up|migrate)\b|\bdrizzle-kit\s+(?:push|migrate)\b|\bgoose\b[^;&|\n]{0,300}\sup\b|\batlas\s+migrate\s+apply\b|(?:^|[\s/])migrat\w*(?:\s+-{1,2}\w[\w-]*(?:=\S+|\s+(?!-)(?!(?:up|deploy|apply|run)\b)\S+)?){0,16}\s+(?:up|deploy|apply|run)\b|\b(?:npm|pnpm|yarn|bun)\s+(?:run\s+)?(?:db:)?migrat\w*(?::(?:up|deploy|prod|latest))?${SEP_END}`, 'i');
+/**
+ * D93: logging in to a service, wherever it sits in the call (`script -q /dev/null npm login`, `env … npm login`,
+ * `npx vercel login`). Flags before npm's command are read only as `--flag` or `--flag=value` (a value after a space
+ * would let every word be either, which costs a second on 2 MB of `npm --a `); aws's flags take a value either way,
+ * a flag word starting with `-` and a value not. Every span is bounded.
+ */
+const LOGIN_RE = new RegExp([
+    String.raw `\b(?:npm|pnpm)(?:\s+-{1,2}[\w-]{1,64}(?:=[^\s;&|]{0,256})?){0,6}\s+(?:login|adduser|add-user)(?![\w:.-])`,
+    String.raw `\byarn(?:\s+npm)?\s+login(?![\w:.-])`,
+    String.raw `\bgh\s+auth\s+login\b`,
+    String.raw `\bvercel\s+login\b`,
+    String.raw `\b(?:docker|podman)\s+login\b`,
+    String.raw `\baws(?:\s+--[\w-]{1,64}(?:=[^\s;&|]{0,256}|\s+(?!-)[^\s;&|]{1,256})?){0,6}\s+(?:configure(?![\w-])(?!\s+(?:get|list|list-profiles|export-credentials)\b)|sso\s+login\b)`,
+    String.raw `\bgcloud\s+auth\s+(?:application-default\s+)?login\b`,
+    String.raw `\bfirebase(?:-tools)?\s+login\b`,
+    String.raw `\bheroku\s+(?:auth:)?login\b`,
+    String.raw `\baz\s+login\b`,
+].join('|'), 'i');
+const GATED = [
+    ['publish', (c) => PUBLISH_RE.test(c)],
+    ['push-prod', pushProd],
+    ['deploy', (c) => DEPLOY_RE.test(c)],
+    ['merge', (c) => /\bgh\s+pr\s+merge\b|\bglab\s+mr\s+merge\b/i.test(c)
+            || (/\bgh\s+api\b/i.test(c) && /(?:-X|--method)[\s=]+(?:PUT|POST)\b/i.test(c) && /\/pulls\/[^/\s'"]+\/merge\b|\/merges\b/i.test(c))],
+    ['migrate', (c) => MIGRATE_RE.test(c)],
+    ['prune', (c) => /\b(?:docker|podman)\s+(?:system|volume|image|container)\s+prune\b|\b(?:docker|podman)\s+volume\s+rm\b/i.test(c)],
+    ['login', (c) => LOGIN_RE.test(c)],
+];
+/** `--dry-run`, `--dry-run=client`: changes nothing. `--dry-run=false` and kubectl's `--dry-run=none` do. */
+const DRY = /(?:^|\s)--dry-run(?:=(?!(?:false|0|none)\b)\S+)?(?=\s|$|[;&|)])/;
+/** Every gated kind whose pattern appears anywhere in `cmd`, dry run or not: linear, for a command too long to split (3.3). */
+export function gatedAnywhere(cmd) {
+    const c = String(cmd ?? '');
+    return new Set(GATED.filter(([, hit]) => hit(c)).map(([kind]) => kind));
+}
+export function gatedKind(cmd) {
+    const c = String(cmd ?? '');
+    // A dry run changes nothing: only the commands without one count.
+    const parts = DRY.test(c) ? simpleCommands(c).filter((x) => !DRY.test(x)) : [c];
+    for (const p of parts)
+        for (const [kind, hit] of GATED)
+            if (hit(p))
+                return kind;
+    return null;
+}
+const REGISTRY = [
+    [/\bcargo\s+publish\b/i, 'crates.io'], [/\btwine\s+upload\b|\b(?:poetry|uv|flit|hatch)\s+publish\b/i, 'PyPI'], [/\bgem\s+push\b/i, 'RubyGems'],
+    [/\b(?:docker|podman)\b/i, 'the image registry'], [/\b(?:vsce|ovsx)\s+publish\b/i, 'the extension marketplace'],
+];
+const SHA = /^[0-9a-f]{7,40}$/;
+/** Which service a login step logs in to, for its ask. */
+const LOGIN_TO = [
+    [/\b(?:npm|pnpm|yarn)\b/i, 'npm'], [/\bgh\s+auth\b/i, 'GitHub'], [/\bvercel\b/i, 'Vercel'], [/\b(?:docker|podman)\s+login\b/i, 'the image registry'],
+    [/\baws\b/i, 'AWS'], [/\bgcloud\b/i, 'Google Cloud'], [/\bfirebase/i, 'Firebase'], [/\bheroku\b/i, 'Heroku'], [/\baz\s+login\b/i, 'Azure'],
+];
+/** D116 item 5: the login a command runs, as the person would type it (flags dropped), and the service; null when none. */
+export function loginOf(cmd) {
+    const m = LOGIN_RE.exec(String(cmd ?? ''));
+    if (!m)
+        return null;
+    const login = m[0].replace(/\s+-{1,2}[\w-]+(?:=\S*)?/g, '').replace(/\s+/g, ' ').trim().toLowerCase();
+    return { service: LOGIN_TO.find(([re]) => re.test(m[0]))?.[1] ?? 'the service', login };
+}
+/** "publishes 0.22.1 to npm", "moves prod to 4e1c9a2", ... (4.11). */
+export function gatedWhat(kind, cmd, values) {
+    // A value worked out when it runs (`$(git rev-parse HEAD)`) reads as a variable.
+    const fill = (t) => t.replace(/\{([A-Za-z_]\w*)\}/g, (m, k) => (values[k] === undefined ? m : /[$`]/.test(values[k]) ? '$X' : values[k]));
+    const c = fill(String(cmd ?? ''));
+    if (kind === 'publish') {
+        const where = REGISTRY.find(([re]) => re.test(c))?.[1] ?? 'npm';
+        const v = values.version;
+        return `publishes ${v && !v.includes('$') ? v : 'a new version'} to ${where}`;
+    }
+    if (kind === 'push-prod') {
+        for (const p of pushes(c)) {
+            const i = p.dsts.findIndex((d) => PROD.has(d.toLowerCase()));
+            if (i >= 0) {
+                const src = p.srcs[i] ?? '';
+                const to = SHA.test(src) ? src.slice(0, 7) : !src || /[$`{}]/.test(src) || src === 'HEAD' || src === p.dsts[i] ? 'HEAD' : src;
+                return `moves ${p.dsts[i]} to ${to}`;
+            }
+            if (p.dsts.includes('<all>'))
+                return 'pushes every branch';
+            if (p.dsts.includes('<current>'))
+                return 'pushes the current branch';
+            if (p.dsts.includes('<unknown>'))
+                return 'pushes to a branch named when it runs';
+        }
+        // A branch the skill fills in when it runs: not a branch name to show.
+        if (c !== String(cmd ?? '') && pushes(String(cmd).replace(/\{[A-Za-z_]\w*\}/g, '$X')).some((p) => p.dsts.includes('<unknown>'))) {
+            return 'pushes to a branch named when it runs';
+        }
+        return 'moves prod';
+    }
+    if (kind === 'deploy')
+        return 'deploys to production';
+    if (kind === 'merge') {
+        const pr = values.pr ?? /\bmerge\s+#?(\d+)\b|\/pulls\/(\d+)\/merge\b/.exec(c)?.slice(1).find(Boolean);
+        return pr && /^\d+$/.test(pr) ? `merges PR #${pr}` : 'merges a PR';
+    }
+    if (kind === 'migrate')
+        return 'runs a database migration';
+    if (kind === 'login')
+        return `logs in to ${LOGIN_TO.find(([re]) => re.test(c))?.[1] ?? 'a service'}`;
+    return 'deletes unused Docker data';
+}
+/** Consecutive steps of one gated kind form one group; one host ask covers a group (3.3). */
+export function gatedGroups(steps) {
+    const out = [];
+    let prev = null;
+    for (const s of steps) {
+        if (s.gated && s.gated === prev)
+            out[out.length - 1].steps.push(s.n);
+        else if (s.gated)
+            out.push({ kind: s.gated, steps: [s.n] });
+        prev = s.gated;
+    }
+    return out;
+}
+/** A Trail program word anywhere in the call: named, through a package, an alias or a variable (`t=trail`). */
+const TRAIL_WORD = /(?<![\w./-])(?:trail|graft|trail-code)(?![\w./-])|@trailhq\/trail-code\b|@nanonets\/graft\b|\bbin\/(?:trail|graft)\.js\b/i;
+/**
+ * Flags between `skills` and the switch. Bounded, like every quantifier below: the guard reads commands of up to
+ * 2 MB on the 5 s PreToolUse budget, after which Claude Code runs the command anyway (g7 review).
+ */
+const FL = String.raw `(?:-[^\s]{1,64}\s+){0,8}`;
+const REASONS = {
+    'offers-on': 'Only the person turns skill offers on, in their own terminal: trail skills offers on. Tell the person; don\'t run it for them.',
+    'skills-on': 'Only the person turns skills on, in their own terminal: trail skills on. Tell the person; don\'t run it for them.',
+    'keep-held': 'Keeping a held skill is the person\'s yes, so only the person runs trail skills keep, in their own terminal. Tell the person; don\'t run it for them.',
+    'hook-script': 'Trail\'s hook scripts run only from the host\'s hooks, never by hand. If something about Trail looks wrong, tell the person.',
+    'restore-version': 'Only the person brings back an older version of a skill, in their own terminal: trail skills restore {name} --version {n}. Tell the person; don\'t run it for them.',
+};
+/**
+ * The person-only switches after `skills`, whatever runs them: a Trail binary, a renamed or copied one
+ * (`node /tmp/t.js skills on`), an alias or a variable (`T=trail; $T skills on`). Printing them is denied too.
+ */
+const SWITCH = [
+    ['offers-on', new RegExp(String.raw `\bskills\s+${FL}offers\s+${FL}on\b`, 'i')],
+    ['skills-on', new RegExp(String.raw `\bskills\s+${FL}on\b`, 'i')],
+    ['keep-held', new RegExp(String.raw `\bskills\s+${FL}keep\b`, 'i')],
+];
+/** With a Trail word in the call: the switch not written out (`trail skills $x`, `trail skills $(echo on)`). */
+const DYNAMIC_SWITCH = [
+    ['offers-on', new RegExp(String.raw `\bskills\s+${FL}offers\s+${FL}[$\x60]`, 'i')],
+    ['skills-on', new RegExp(String.raw `\bskills\s+${FL}[$\x60]`, 'i')],
+];
+/** With a Trail word in the call: the word `skills` not written out (`trail $s on`, `trail $(echo skills) on`). */
+const AFTER = String.raw `\s+${FL}(?:(offers)\s+${FL}on|(on)|(keep))\b`;
+const DYNAMIC_WORD = [
+    [/\$\w/, new RegExp(String.raw `\$\w{1,64}${AFTER}`, 'i')],
+    [/\$\{/, new RegExp(String.raw `\}${AFTER}`, 'i')],
+    [/\$\(/, new RegExp(String.raw `\)${AFTER}`, 'i')],
+    [/\x60/, new RegExp(String.raw `\x60${AFTER}`, 'i')],
+];
+/** xargs or parallel supplying the switch from stdin: `skills` ends the call or a placeholder follows it. */
+const XARGS = /\b(?:xargs|parallel)\b/i;
+const XARGS_SKILLS = /\bskills(?:\s+-[^\s]{1,64}){0,8}\s*(?:$|\{\}|%)/i;
+/**
+ * P28: `skills restore <name> --version <n>`, read per command (split on `; & | newline`, one pass, so a flag
+ * any distance after the verb is found and a 2 MB command stays linear). With a Trail word in the call, also the
+ * forms that don't write it out: the flag or the verb from a variable or a substitution, or `skills` itself.
+ */
+const RESTORE_AT = new RegExp(String.raw `\bskills\s+${FL}restore\b`, 'i');
+const RESTORE_SKILLS_DYNAMIC = new RegExp(String.raw `\bskills\s+${FL}[$\x60]`, 'i');
+const RESTORE_WORD_DYNAMIC = new RegExp(String.raw `(?:\$\w{1,64}|[})\x60])\s+${FL}restore\b`, 'i');
+const VERSION_FLAG = /(?<![\w-])--version(?![\w-])/;
+function restoreVersionIn(c, trailWord) {
+    if (!/restore|--version/i.test(c))
+        return false;
+    for (const seg of c.split(/[;&|\n]/)) {
+        const m = RESTORE_AT.exec(seg);
+        const rest = m ? seg.slice(m.index + m[0].length) : '';
+        if (m && VERSION_FLAG.test(rest))
+            return true;
+        if (!trailWord)
+            continue;
+        if (m && /[$\x60]/.test(rest))
+            return true;
+        if (VERSION_FLAG.test(seg) && (RESTORE_SKILLS_DYNAMIC.test(seg) || RESTORE_WORD_DYNAMIC.test(seg)))
+            return true;
+    }
+    return false;
+}
+/**
+ * Trail's hook scripts and hook modules: the shims by name or by a glob (`t*-hooks.cjs`, `trail-hook?.cjs`), a
+ * helpers path the shell works out (`.claude/helpers/*`, `.claude/helpers/$(ls …)`), and the package's
+ * `dist/claude/<module>.js` run or imported by hand.
+ */
+const HOOK_SCRIPT = [
+    /\b(?:trail|graft)-hooks?[\w*?[\]-]{0,64}(?:\.cjs\b|\*)/i,
+    /hooks?[*?[\]]{0,8}\.cjs\b/i,
+    /\.claude\/helpers\/[^\s/]{0,64}[*?[$\x60]/i,
+    /(?:@trailhq\/trail-code|@nanonets\/graft|\bdist)\/(?:dist\/)?claude\/[\w-]{1,64}\.js\b/i,
+];
+/** What `shellWords` drops: a line continuation, then any quote or backslash. */
+const UNSAID = /\\\n|["'\\]/g;
+/** The words the shell runs: quotes and backslashes don't change them, and a line continuation joins with nothing. */
+export function shellWords(cmd) {
+    const s = String(cmd ?? '');
+    // Slices between the few dropped characters; past 4,096 of them, one pass over char codes (two regex
+    // replaces cost 20+ ms on 2 MB of `"a" `; a copy of a 2 MB command with a few quotes costs 13).
+    let r = '';
+    let last = 0;
+    let n = 0;
+    UNSAID.lastIndex = 0;
+    for (let m = UNSAID.exec(s); m; m = UNSAID.exec(s)) {
+        r += s.slice(last, m.index);
+        last = m.index + m[0].length;
+        if (++n > 4096)
+            return r + dropUnsaid(s, last);
+    }
+    return last ? r + s.slice(last) : s;
+}
+function dropUnsaid(s, from) {
+    const out = new Uint16Array(s.length - from);
+    let k = 0;
+    for (let i = from; i < s.length; i++) {
+        const c = s.charCodeAt(i);
+        if (c === 34 || c === 39)
+            continue;
+        if (c === 92) {
+            if (s.charCodeAt(i + 1) === 10)
+                i++;
+            continue;
+        }
+        out[k++] = c;
+    }
+    let r = '';
+    for (let i = 0; i < k; i += 8192)
+        r += String.fromCharCode.apply(null, out.subarray(i, Math.min(k, i + 8192)));
+    return r;
+}
+function hitOf(m) {
+    return m[1] ? 'offers-on' : m[2] ? 'skills-on' : 'keep-held';
+}
+/** Past this a command is read whole: any switch denies, wherever it sits (the lexer on 2 MB takes seconds). */
+const TEXT_MAX = 64 * 1024;
+/** The switch written out, as the shell's words read: `skills on`, `skills offers on`, `skills keep`. */
+function staticSwitch(c) {
+    if (!/skills/i.test(c))
+        return null;
+    for (const [hit, re] of SWITCH)
+        if (re.test(c))
+            return hit;
+    return restoreVersionIn(c, false) ? 'restore-version' : null;
+}
+/** The switch or the word `skills` not written out, with a Trail word in the call, and xargs supplying it. */
+function dynamicSwitch(c, trailWord) {
+    if (trailWord && restoreVersionIn(c, true))
+        return 'restore-version';
+    if (trailWord) {
+        for (const [hit, re] of DYNAMIC_SWITCH)
+            if (re.test(c))
+                return hit;
+        for (const [has, re] of DYNAMIC_WORD) {
+            const m = has.test(c) ? re.exec(c) : null;
+            if (m)
+                return hitOf(m);
+        }
+    }
+    if (XARGS.test(c)) {
+        for (const seg of c.split(/[;&|\n]/))
+            if (XARGS.test(seg) && XARGS_SKILLS.test(seg))
+                return 'skills-on';
+    }
+    return null;
+}
+/**
+ * D89: a switch found in the text is denied where the shell runs it, not where it is only words: inside quoted
+ * arguments of grep, rg, git commit or log, echo or printf not fed to a shell, sed, awk patterns, cat. Over
+ * TEXT_MAX, or when no one command carries it, the whole text decides.
+ */
+function runsSwitch(cmd, whole, find) {
+    if (cmd.length > TEXT_MAX)
+        return whole;
+    return quotedTextHit(cmd, (t) => find(shellWords(t)), whole);
+}
+const hookNamed = (t) => (HOOK_SCRIPT.some((re) => re.test(shellWords(t))) ? true : null);
+const namesHook = (t) => hookNamed(t) === true;
+/** fix-lab5: a command only naming a hook script leaves it unrun (shell-words' hookUnrun: a read, a delete, a check, an edit of another file). */
+const leavesHookUnrun = (head, bodies, hitOf) => hookUnrun(head, bodies, hitOf, namesHook);
+/** D116 item 2: the hook script is run, not only read (an argument of grep, sed, cat, a pager, head, git log) or named (fix-lab5). */
+function runsHookScript(raw) {
+    if (raw.length > TEXT_MAX)
+        return true;
+    return quotedTextHit(raw, hookNamed, true, 0, leavesHookUnrun) !== null;
+}
+/** P28's words, with the person's own command when the name and version are written out (else `<name>`, `<n>`). */
+function restoreReason(c) {
+    const m = /\bskills\s+restore\s+([a-z0-9][a-z0-9-]{0,63})\s+--version[=\s]([1-9]\d{0,5})(?![\w-])/i.exec(c)
+        ?? /\bskills\s+restore\s+--version[=\s]([1-9]\d{0,5})\s+([a-z0-9][a-z0-9-]{0,63})(?![\w-])/i.exec(c);
+    const [name, n] = m ? (/^\d/.test(m[1]) ? [m[2], m[1]] : [m[1], m[2]]) : ['<name>', '<n>'];
+    return REASONS['restore-version'].replace('{name}', name).replace('{n}', n);
+}
+/** 4.11 agent guard: commands only the person may run, and Trail's hook scripts run by hand. Linear in the command. */
+export function agentGuard(cmd) {
+    const raw = String(cmd ?? '');
+    const c = shellWords(raw);
+    const found = (hit) => ({ hit, reason: hit === 'restore-version' ? restoreReason(c) : REASONS[hit] });
+    const fixed = staticSwitch(c);
+    const ran = fixed && runsSwitch(raw, fixed, staticSwitch);
+    if (ran)
+        return found(ran);
+    if (HOOK_SCRIPT.some((re) => re.test(c)) && runsHookScript(raw))
+        return found('hook-script');
+    const trailWord = TRAIL_WORD.test(c);
+    const dynamic = dynamicSwitch(c, trailWord);
+    const ranDynamic = dynamic && runsSwitch(raw, dynamic, (t) => dynamicSwitch(t, trailWord));
+    return ranDynamic ? found(ranDynamic) : null;
+}
+//# sourceMappingURL=risk.js.map

package/dist/skills/risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../src/skills/risk.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE7E,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AAElC,0IAA0I;AAC1I,oHAAoH;AACpH,MAAM,QAAQ,GAAG,IAAI,CAAC;AAEtB;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM;IACvE,gFAAgF;IAChF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAC/F,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACxH,CAAC;AACD,8GAA8G;AAC9G,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,8BAA8B,IAAI,UAAU,EAAE,GAAG,CAAC,CAAC;AAE9G,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;AAC/D,MAAM,QAAQ,GAAG,yLAAyL,CAAC;AAK3M,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,MAAM,GAAG,GAAW,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,KAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC3E,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,GAAG,GAAG,KAAK,CAAC;QAChB,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACpB,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,IAAI;gBAAE,SAAS,GAAG,IAAI,CAAC;iBAC1C,IAAI,SAAS,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBACjD,IAAI,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,KAAK,GAAG,IAAI,CAAC;iBAClG,IAAI,CAAC,KAAK,UAAU;gBAAE,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC;iBACzC,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,YAAY;gBAAE,GAAG,GAAG,IAAI,CAAC;iBACpD,IAAI,CAAC,KAAK,QAAQ;gBAAE,IAAI,GAAG,IAAI,CAAC;iBAChC,IAAI,qDAAqD,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,KAAK,GAAG,IAAI,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC3D,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtH,kIAAkI;AAClI,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE;IACnC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,2CAA2C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC;AACF,uFAAuF;AACvF,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAA,YAAY,CAAC;AAEvC;;;GAGG;AACH,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,4gBAA4gB,EAAE,GAAG,CAAC,CAAC;AAC3jB,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,4uBAA4uB,OAAO,wCAAwC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;AACl1B,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,8jBAA8jB,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;AACtnB;;;;;GAKG;AACH,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC;IAC1B,MAAM,CAAC,GAAG,CAAA,0GAA0G;IACpH,MAAM,CAAC,GAAG,CAAA,sCAAsC;IAChD,MAAM,CAAC,GAAG,CAAA,uBAAuB;IACjC,MAAM,CAAC,GAAG,CAAA,oBAAoB;IAC9B,MAAM,CAAC,GAAG,CAAA,+BAA+B;IACzC,MAAM,CAAC,GAAG,CAAA,0KAA0K;IACpL,MAAM,CAAC,GAAG,CAAA,sDAAsD;IAChE,MAAM,CAAC,GAAG,CAAA,iCAAiC;IAC3C,MAAM,CAAC,GAAG,CAAA,8BAA8B;IACxC,MAAM,CAAC,GAAG,CAAA,gBAAgB;CAC3B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AAClB,MAAM,KAAK,GAA+C;IACxD,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,WAAW,EAAE,QAAQ,CAAC;IACvB,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,4CAA4C,CAAC,IAAI,CAAC,CAAC,CAAC;eAChE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,yCAAyC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,wGAAwG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;CACnC,CAAC;AAEF,6GAA6G;AAC7G,MAAM,GAAG,GAAG,iEAAiE,CAAC;AAE9E,+HAA+H;AAC/H,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC5B,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC5B,kEAAkE;IAClE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK;YAAE,IAAI,GAAG,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;IAChF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,QAAQ,GAA4B;IACxC,CAAC,sBAAsB,EAAE,WAAW,CAAC,EAAE,CAAC,4DAA4D,EAAE,MAAM,CAAC,EAAE,CAAC,iBAAiB,EAAE,UAAU,CAAC;IAC9I,CAAC,wBAAwB,EAAE,oBAAoB,CAAC,EAAE,CAAC,8BAA8B,EAAE,2BAA2B,CAAC;CAChH,CAAC;AACF,MAAM,GAAG,GAAG,kBAAkB,CAAC;AAC/B,0DAA0D;AAC1D,MAAM,QAAQ,GAA4B;IACxC,CAAC,wBAAwB,EAAE,KAAK,CAAC,EAAE,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC,gCAAgC,EAAE,oBAAoB,CAAC;IACpJ,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC,iBAAiB,EAAE,OAAO,CAAC;CAC3I,CAAC;AAEF,2HAA2H;AAC3H,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtG,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,aAAa,EAAE,KAAK,EAAE,CAAC;AAC1F,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,SAAS,CAAC,IAAe,EAAE,GAAW,EAAE,MAA8B;IACpF,iFAAiF;IACjF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAC5J,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QAChE,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,OAAO,KAAK,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5B,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC9H,OAAO,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACvC,CAAC;YACD,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,OAAO,qBAAqB,CAAC;YAC3D,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,OAAO,2BAA2B,CAAC;YACrE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,OAAO,uCAAuC,CAAC;QACnF,CAAC;QACD,uEAAuE;QACvE,IAAI,CAAC,KAAK,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAChI,OAAO,uCAAuC,CAAC;QACjD,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,uBAAuB,CAAC;IACtD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,IAAI,6CAA6C,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtG,OAAO,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;IACrE,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,2BAA2B,CAAC;IAC3D,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,cAAc,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;IACrG,OAAO,4BAA4B,CAAC;AACtC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,WAAW,CAAC,KAAoD;IAC9E,MAAM,GAAG,GAAgD,EAAE,CAAC;IAC5D,IAAI,IAAI,GAAqB,IAAI,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;YAAE,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACjE,IAAI,CAAC,CAAC,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAKD,+GAA+G;AAC/G,MAAM,UAAU,GAAG,2HAA2H,CAAC;AAC/I;;;GAGG;AACH,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAA,0BAA0B,CAAC;AAChD,MAAM,OAAO,GAA6B;IACxC,WAAW,EAAE,gIAAgI;IAC7I,WAAW,EAAE,mHAAmH;IAChI,WAAW,EAAE,uJAAuJ;IACpK,aAAa,EAAE,8HAA8H;IAC7I,iBAAiB,EAAE,qKAAqK;CACzL,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,GAA8B;IACxC,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9E,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,cAAc,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;CACnE,CAAC;AACF,gHAAgH;AAChH,MAAM,cAAc,GAA8B;IAChD,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACjF,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,cAAc,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;CACpE,CAAC;AACF,mHAAmH;AACnH,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAA,MAAM,EAAE,iBAAiB,EAAE,mBAAmB,CAAC;AACvE,MAAM,YAAY,GAA4B;IAC5C,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,aAAa,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,KAAK,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,KAAK,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,OAAO,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;CACpD,CAAC;AACF,6GAA6G;AAC7G,MAAM,KAAK,GAAG,yBAAyB,CAAC;AACxC,MAAM,YAAY,GAAG,kDAAkD,CAAC;AACxE;;;;GAIG;AACH,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,cAAc,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;AAC1E,MAAM,sBAAsB,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,cAAc,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;AACpF,MAAM,oBAAoB,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,6BAA6B,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;AACnG,MAAM,YAAY,GAAG,8BAA8B,CAAC;AACpD,SAAS,gBAAgB,CAAC,CAAS,EAAE,SAAkB;IACrD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAClH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD;;;;GAIG;AACH,MAAM,WAAW,GAAG;IAClB,yDAAyD;IACzD,4BAA4B;IAC5B,4CAA4C;IAC5C,yFAAyF;CAC1F,CAAC;AAEF,iFAAiF;AACjF,MAAM,MAAM,GAAG,cAAc,CAAC;AAE9B,sHAAsH;AACtH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC5B,qGAAqG;IACrG,gGAAgG;IAChG,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7B,IAAI,EAAE,CAAC,GAAG,IAAI;YAAE,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,CAAS,EAAE,IAAY;IACzC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YAAE,SAAS;QACnC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE;gBAAE,CAAC,EAAE,CAAC;YACpC,SAAS;QACX,CAAC;QACD,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI;QAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAwB,CAAC,CAAC;IACtI,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,CAAkB;IAC/B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;AAC/D,CAAC;AAED,gHAAgH;AAChH,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3B,yGAAyG;AACzG,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,MAAM;QAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;IAC3D,OAAO,gBAAgB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAED,8GAA8G;AAC9G,SAAS,aAAa,CAAC,CAAS,EAAE,SAAkB;IAClD,IAAI,SAAS,IAAI,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACrE,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,cAAc;YAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC;QACnE,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1C,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,WAAW,CAAC;IAC1G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,GAAW,EAAE,KAAe,EAAE,IAAoC;IACpF,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAElG,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AACvD,kJAAkJ;AAClJ,MAAM,eAAe,GAAG,CAAI,IAAY,EAAE,MAAgB,EAAE,KAAiC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAE5I,sIAAsI;AACtI,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,eAAe,CAAC,KAAK,IAAI,CAAC;AAC1E,CAAC;AAED,mHAAmH;AACnH,SAAS,aAAa,CAAC,CAAS;IAC9B,MAAM,CAAC,GAAG,yFAAyF,CAAC,IAAI,CAAC,CAAC,CAAC;WACtG,yFAAyF,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChG,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,CAAC,GAAa,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChH,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,KAAK,IAAI,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IAC1D,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7F,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,OAAO,IAAI,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3F,OAAO,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC"}

package/dist/skills/run-checkout.d.ts

@@ -0,0 +1,4 @@
+import type { RunSheet } from '../trace/types.js';
+/** The run's own checkout when it holds, else the first hint that does (an older sheet has none); '' when none. */
+export declare function runCheckout(sheet: Pick<RunSheet, 'repoKey' | 'checkout'>, env?: NodeJS.ProcessEnv, ...hints: Array<string | null | undefined>): string;
+//# sourceMappingURL=run-checkout.d.ts.map

package/dist/skills/run-checkout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-checkout.d.ts","sourceRoot":"","sources":["../../src/skills/run-checkout.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAelD,mHAAmH;AACnH,wBAAgB,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,GAAG,UAAU,CAAC,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,CAGnK"}

package/dist/skills/run-checkout.js

@@ -0,0 +1,37 @@
+/**
+ * The checkout a run ran in (D93), for everything that compiles the run as a
+ * skill: the prompt hook's asked save, the offer moment, both halves of the
+ * save gate and the held copy. Compile reads paths relative to that root, so
+ * every one of them must use the same one, taken from the run itself (its
+ * sheet, or the receipt the PreToolUse half wrote), never from the folder a
+ * command happens to run in: a session that starts in a folder above the
+ * repo and cds into it runs `trail skills add` up there.
+ *
+ * A folder is used only when it still exists and is the top of a git
+ * checkout whose repo key is the run's. Otherwise ''.
+ */
+import { statSync } from 'node:fs';
+import { isAbsolute, resolve } from 'node:path';
+import { repoPlace } from '../notes/home.js';
+/** `dir` is an existing checkout's top, with the key `repoKey`. */
+function holds(dir, repoKey, env) {
+    if (typeof dir !== 'string' || !dir || !isAbsolute(dir) || !repoKey)
+        return false;
+    try {
+        if (!statSync(dir).isDirectory())
+            return false;
+    }
+    catch {
+        return false;
+    }
+    const place = repoPlace(dir, env);
+    return place.git && place.key === repoKey && resolve(place.checkout) === resolve(dir);
+}
+/** The run's own checkout when it holds, else the first hint that does (an older sheet has none); '' when none. */
+export function runCheckout(sheet, env = process.env, ...hints) {
+    for (const dir of [sheet.checkout, ...hints])
+        if (holds(dir, sheet.repoKey, env))
+            return resolve(dir);
+    return '';
+}
+//# sourceMappingURL=run-checkout.js.map

package/dist/skills/run-checkout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-checkout.js","sourceRoot":"","sources":["../../src/skills/run-checkout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,mEAAmE;AACnE,SAAS,KAAK,CAAC,GAAY,EAAE,OAAe,EAAE,GAAsB;IAClE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAClF,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,KAAK,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;AACxF,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,WAAW,CAAC,KAA6C,EAAE,MAAyB,OAAO,CAAC,GAAG,EAAE,GAAG,KAAuC;IACzJ,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC;QAAE,IAAI,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACtG,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/skills/runblock.d.ts

@@ -0,0 +1,45 @@
+import type { SkillInjection } from '../trace/types.js';
+import { type Candidate } from './recall.js';
+import type { ParsedSkill } from './types.js';
+import { type ProbeResult } from './probes.js';
+import { type Lesson } from './lessons.js';
+import { type Anchor } from './anchors.js';
+export { runProbes, probePassWords, readyProbes, PROBE_BUDGET_MS, type ProbeResult, type ProbeOpts, type ProbeGit } from './probes.js';
+export declare const RUN_BLOCK_MAX = 1200;
+/** 'Oct 14' for a local date (`2026-10-14`) or an ISO time, in local time. */
+export declare function dayWords(d: string | null | undefined): string;
+/**
+ * canAsk: interactive entry, permission_mode in hostFacts.askModes, host claude (4.15 step 5).
+ * 1b: `lessons` (default: the skill folder's) end the block, guardrail-kind first (4.16); `gone` (default: the
+ * anchors gone where the candidate was found) opens it with the out-of-date line (4.18). Both count toward 1,200:
+ * lessons are the second thing cut, oldest first; guardrail-kind lessons and the out-of-date line never are.
+ */
+export declare function runBlock(c: Candidate, ctx: {
+    values: Record<string, string>;
+    notes: string[];
+    probes: ProbeResult[];
+    canAsk: boolean;
+    header: 'job' | 'compact';
+    lastFail: {
+        step: number;
+        at: string;
+    } | null;
+    lessons?: Lesson[];
+    gone?: Anchor[];
+    anchorDeadline?: number;
+}): string;
+/**
+ * D116 item 1: the check is a step that only reads (a status, a view, a log, a GET, a tests or query run), so a
+ * status question may run it. A push (it is the step that moved the branch), anything gated, or a command
+ * that changes things is not: that skill gets no check line.
+ */
+export declare function readOnlyCheck(s: Pick<ParsedSkill, 'check' | 'steps' | 'meta'>): boolean;
+/** The check line for a status question; '' when the skill has no check, or none that only reads (D116 item 1). */
+export declare function checkLine(c: Candidate, values: Record<string, string>): string;
+/** The SkillInjection recorded for a block or check line (live: true for job, name and compact cues). */
+export declare function injectionFor(c: Candidate, values: Record<string, string>, cue: SkillInjection['cue'], epoch: number, now?: Date): SkillInjection;
+/** g4's open issue 4 (D71 d): the ready probes that failed for a block ride on its injection, for the use line (never counted against the skill). */
+export declare function withReadyFailed(inj: SkillInjection, probes: ProbeResult[]): SkillInjection;
+/** 'trail: using skill <name> (v<n>, worked <Mon D>)'. */
+export declare function useNotice(c: Candidate): string;
+//# sourceMappingURL=runblock.d.ts.map

package/dist/skills/runblock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runblock.d.ts","sourceRoot":"","sources":["../../src/skills/runblock.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAQrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAA8D,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AACvG,OAAO,EAA8B,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAGvE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvI,eAAO,MAAM,aAAa,OAAO,CAAC;AAMlC,8EAA8E;AAC9E,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAI7D;AA+CD;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,KAAK,GAAG,SAAS,CAAC;IAAC,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CA0DvR;AAMD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC,GAAG,OAAO,CASvF;AAED,mHAAmH;AACnH,wBAAgB,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAM9E;AAUD,yGAAyG;AACzG,wBAAgB,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,cAAc,CAsB5J;AAED,qJAAqJ;AACrJ,wBAAgB,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,cAAc,CAG1F;AAED,0DAA0D;AAC1D,wBAAgB,SAAS,CAAC,CAAC,EAAE,SAAS,GAAG,MAAM,CAG9C"}