@nanonets/graft 0.23.1 → 0.24.1

package/dist/trace/skill-session.js

@@ -0,0 +1,232 @@
+/**
+ * The skills session: the gate every skills hook starts with (design 3.0),
+ * and the one locked read-modify-write of `~/.trail/sessions/<id>.json`
+ * (2.8). That file holds two keys: `trace`, the transcript cursor, and
+ * `skills`, this session's `SkillSessionState`. The catch-up (read what the
+ * transcript gained, fold it, write sheets for the runs it closed) runs
+ * inside the same lock as the state, so the cursor and the state can never
+ * disagree.
+ *
+ * Two gates (0 rule 2): `fold` (runs and run sheets) needs an interactive,
+ * top-level session outside CI and scratch folders, on any host; `learn`
+ * (pool days, offers, credit, live saves) needs that and tier A. Headless
+ * is decided by `CLAUDE_CODE_ENTRYPOINT` (D16), and on Codex by the rollout's
+ * first line (4.17: `codex exec` and the MCP server); the lab's switch works only in
+ * a lab box (D26); what the payload says about where a prompt came from is
+ * never read (D34).
+ */
+import { createHash } from 'node:crypto';
+import { tmpdir } from 'node:os';
+import { resolve, sep } from 'node:path';
+import { payloadSessionId } from '../claude/hook-io.js';
+import { repoPlace } from '../notes/home.js';
+import { trailHome } from '../notes/trail-home.js';
+import { labInteractive, readSettings, trailNow } from '../skills/settings.js';
+import { hostTier } from '../skills/host-facts.js';
+import { codexMeta } from './codex.js';
+import { readJsonSafe, withLock, writePrivate } from '../util/private-fs.js';
+import { CLAUDE_DIALECT, dialectFor } from './dialect.js';
+import { sessionPath, takePostMarks } from './gate-file.js';
+import { detectHost } from './host.js';
+import { checkedSuccess, foldEvents, runHelpers, writeRunSheet } from './runs.js';
+export { housekeeping } from './housekeeping.js';
+const set = (v) => typeof v === 'string' && v !== '' && v !== '0' && v.toLowerCase() !== 'false';
+function scratchFolder(cwd) {
+    // Windows paths ignore case (c:\ and C:\ are one folder) and resolve() gives them '\'.
+    const fold = (x) => (process.platform === 'win32' ? x.toLowerCase() : x);
+    const p = fold(resolve(cwd));
+    if (`${p}${sep}`.includes(`${sep}scratchpad${sep}`))
+        return true;
+    const roots = [tmpdir(), '/tmp', '/private/tmp', '/var/folders', '/private/var/folders'].map((r) => fold(resolve(r)));
+    return roots.some((r) => p === r || p.startsWith(r + sep));
+}
+/** 3.0. */
+export function skillsGate(input, dir, env = process.env, now) {
+    if (set(env.TRAIL_NO_HOOKS))
+        return { ok: false, why: 'no-hooks' };
+    if (readSettings(env).skills !== 'on')
+        return { ok: false, why: 'off' };
+    const p = input && typeof input === 'object' && !Array.isArray(input) ? input : {};
+    const rawId = [p.session_id, p.sessionId, p.conversation_id].find((v) => typeof v === 'string' && v !== '');
+    if (rawId === undefined)
+        return { ok: false, why: 'no-session' };
+    const sessionId = payloadSessionId(p);
+    const info = detectHost(p);
+    const tier = hostTier(info.host, info.tier, env);
+    const subagent = info.subagent === true || (typeof p.agent_id === 'string' && p.agent_id !== '');
+    const transcript = typeof p.transcript_path === 'string' ? p.transcript_path : typeof p.transcriptPath === 'string' ? p.transcriptPath : null;
+    // 4.17: Codex says nothing of how it was started in the payload; the rollout's first line does (one positioned read).
+    const codex = info.host === 'codex';
+    const meta = codex && transcript ? codexMeta(transcript) : null;
+    const codexScript = !!meta && (meta.originator === 'codex_exec' || meta.source === 'exec' || meta.source === 'mcp');
+    // CLAUDE_CODE_ENTRYPOINT is Claude Code's: unset means a script started it. Other hosts never set it.
+    const ep = env.CLAUDE_CODE_ENTRYPOINT;
+    // `sdk` with or without a suffix, as the transcript reader treats it (claude.ts).
+    const script = (typeof ep === 'string' && ep.startsWith('sdk')) || (!ep && info.host === 'claude') || codexScript;
+    const entry = script && !labInteractive(env) ? 'headless' : 'interactive';
+    const cwd = typeof p.cwd === 'string' && p.cwd ? p.cwd : dir;
+    const learnOff = subagent ? 'subagent'
+        // A Codex session kept nowhere on disk (R18): nothing to fold or learn from, recall only.
+        : codex && !transcript ? 'ephemeral'
+            : entry === 'headless' ? 'headless'
+                : set(env.CI) || set(env.GITHUB_ACTIONS) ? 'ci'
+                    : scratchFolder(cwd) ? 'scratch'
+                        : tier !== 'A' ? 'host'
+                            : null;
+    const place = repoPlace(cwd, env);
+    return {
+        ok: true,
+        ctx: {
+            sessionId,
+            sessionHash: createHash('sha256').update(sessionId).digest('hex').slice(0, 12),
+            host: info.host,
+            tier,
+            entry,
+            permissionMode: typeof p.permission_mode === 'string' ? p.permission_mode : null,
+            subagent,
+            fold: learnOff === null || learnOff === 'host',
+            learn: learnOff === null,
+            learnOff,
+            dir,
+            checkout: place.git ? place.checkout : '',
+            repoKey: place.key,
+            transcriptPath: transcript || null,
+            env,
+            now: now ?? trailNow(env),
+            ...(codex ? { codexMeta: meta } : {}),
+        },
+    };
+}
+function newState(ctx) {
+    return {
+        v: 1, sessionHash: ctx.sessionHash, host: ctx.host, tier: ctx.tier, learn: ctx.learn, scopeKeys: ctx.repoKey ? [ctx.repoKey] : [],
+        epoch: 0, pendingBoundary: false, runs: [], pendingOffer: null, offerUsed: false, offerUsedBy: null, saveRequest: null,
+        injected: [], credit: [], tampered: null, updatedAt: ctx.now.toISOString(),
+    };
+}
+/** The stored state when it has the shape this version writes; null otherwise (a new one is made). */
+function parseState(v) {
+    if (!v || typeof v !== 'object' || Array.isArray(v))
+        return null;
+    const s = v;
+    if (s.v !== 1 || typeof s.epoch !== 'number' || !Array.isArray(s.runs) || !Array.isArray(s.injected) || !Array.isArray(s.credit))
+        return null;
+    if (!s.runs.every((r) => r && typeof r.id === 'string' && Array.isArray(r.calls)))
+        return null;
+    return s;
+}
+const statePath = (ctx) => sessionPath(ctx.sessionId, '.json', ctx.env);
+function readBox(path) {
+    const raw = readJsonSafe(path);
+    return raw && typeof raw === 'object' && !Array.isArray(raw) ? raw : {};
+}
+/** Writes `skills`, keeping `trace` (just moved by the catch-up) and any other key as they are on disk now. */
+function save(path, st) {
+    const box = readBox(path);
+    box.skills = st;
+    writePrivate(path, JSON.stringify(box));
+}
+function foldContext(ctx, marks) {
+    const places = new Map();
+    const place = (p) => {
+        let v = places.get(p);
+        if (!v) {
+            v = repoPlace(p, ctx.env);
+            places.set(p, v);
+        }
+        return v;
+    };
+    return {
+        sessionHash: ctx.sessionHash,
+        checkout: ctx.checkout,
+        repoKey: ctx.repoKey,
+        repoKeyOf: (p) => (place(p).git ? place(p).key : null),
+        rootOf: (p) => (place(p).git ? place(p).checkout : null),
+        trailHome: trailHome(ctx.env),
+        transcriptPath: ctx.transcriptPath ?? '',
+        marks,
+        now: ctx.now,
+    };
+}
+/** Sheets for closed runs with steps whose calls are still here (the ones this fold closed, or a write that failed before). */
+function writeSheets(st, closed, ctx) {
+    const runs = new Set([...closed, ...st.runs.filter((r) => r.closed)]);
+    for (const run of runs) {
+        if (!run.closed || run.stepCalls <= 0 || !run.calls.length)
+            continue;
+        try {
+            writeRunSheet(run, checkedSuccess(run, null), { host: ctx.host, tier: ctx.tier, sessionHash: ctx.sessionHash, helpers: runHelpers(run) }, ctx.env);
+        }
+        catch {
+            /* the calls stay, so the next catch-up writes it */
+        }
+    }
+}
+/** Closed runs keep their calls only until their sheet is written (2.8). */
+function flushCalls(st) {
+    for (const r of st.runs)
+        if (r.closed && r.calls.length && (r.sheet !== 'none' || r.stepCalls <= 0))
+            r.calls = [];
+}
+/**
+ * Locked read-modify-write of the `skills` key of sessions/<id>.json (lock wait default 200 ms).
+ * With catchUp (ctx.fold only): takePostMarks, then the host dialect's readNewEvents(transcript, sessionStatePath(id))
+ * (4.16; a host with no dialect keeps 1a's reader, so J24's Cursor and Copilot payloads still fold and are held)
+ * then foldEvents, inside the
+ * same lock (the `trace` cursor lives in the same file); then, for every run the fold closed with
+ * stepCalls > 0 and sheet 'none', writeRunSheet(run, checkedSuccess(run, null)), then its calls are emptied.
+ * Returns undefined when the lock timed out: the caller fails open.
+ *
+ * `fn` still sees the closed runs' calls (in `fold.closed`); they are emptied before the state is written. When `fn`
+ * throws, the folded state is written as it was before `fn`, so the cursor that moved and the state agree.
+ * `prepare` runs on the state first, before the catch-up: the Codex prompt hook records the prompt's keyed hash
+ * there, so a typed line already in the rollout counts in this same read (P30).
+ */
+export function withSkillSession(ctx, opts, fn) {
+    const path = statePath(ctx);
+    const done = withLock(path, () => {
+        const st = parseState(readBox(path).skills) ?? newState(ctx);
+        let fold = null;
+        // 4.17: the rollout's first line, kept once; the prompt hook's typed hashes stay as they are.
+        if (ctx.host === 'codex' && ctx.codexMeta && !st.codex?.meta)
+            st.codex = { meta: ctx.codexMeta, typedShas: st.codex?.typedShas ?? [] };
+        opts.prepare?.(st);
+        const dialect = dialectFor(ctx.host) ?? CLAUDE_DIALECT;
+        if (opts.catchUp && ctx.fold && ctx.transcriptPath) {
+            const marks = takePostMarks(ctx.sessionId, ctx.env);
+            const events = dialect.readNewEvents(ctx.transcriptPath, path, { env: ctx.env, state: st });
+            const res = foldEvents(st, events, foldContext(ctx, marks));
+            writeSheets(st, res.closed, ctx);
+            fold = { ...res, events };
+        }
+        const before = structuredClone(st);
+        let value;
+        try {
+            value = fn(st, fold);
+        }
+        catch (e) {
+            flushCalls(before);
+            save(path, before);
+            throw e;
+        }
+        flushCalls(st);
+        save(path, st);
+        return value;
+    }, opts.waitMs ?? 200);
+    return done.ok ? done.value : undefined;
+}
+/** Unlocked read (`trail skills`). A new state when none. */
+export function loadSkillSession(ctx) {
+    return parseState(readBox(statePath(ctx)).skills) ?? newState(ctx);
+}
+export function currentRun(st) {
+    const last = st.runs[st.runs.length - 1];
+    return last && !last.closed ? last : null;
+}
+export function injectedThisEpoch(st) {
+    return st.injected.filter((i) => i.epoch === st.epoch);
+}
+export function liveInjections(st) {
+    return st.injected.filter((i) => i.live);
+}
+//# sourceMappingURL=skill-session.js.map

package/dist/trace/skill-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-session.js","sourceRoot":"","sources":["../../src/trace/skill-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAkB,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE7E,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAqC,MAAM,WAAW,CAAC;AAGrH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AA4BjD,MAAM,GAAG,GAAG,CAAC,CAAqB,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;AAErH,SAAS,aAAa,CAAC,GAAW;IAChC,uFAAuF;IACvF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,IAAI,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,GAAG,aAAa,GAAG,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtH,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,WAAW;AACX,MAAM,UAAU,UAAU,CAAC,KAAU,EAAE,GAAW,EAAE,MAAyB,OAAO,CAAC,GAAG,EAAE,GAAU;IAClG,IAAI,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;IACnE,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACxE,MAAM,CAAC,GAA4B,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5G,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5G,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;IACjG,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9I,sHAAsH;IACtH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;IACpH,sGAAsG;IACtG,MAAM,EAAE,GAAG,GAAG,CAAC,sBAAsB,CAAC;IACtC,kFAAkF;IAClF,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,WAAW,CAAC;IAClH,MAAM,KAAK,GAAqB,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;IAC5F,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7D,MAAM,QAAQ,GAAuB,QAAQ,CAAC,CAAC,CAAC,UAAU;QACxD,0FAA0F;QAC1F,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;YACpC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU;gBACnC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;oBAC/C,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;wBAChC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM;4BACvB,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG,EAAE;YACH,SAAS;YACT,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC9E,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI;YACJ,KAAK;YACL,cAAc,EAAE,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI;YAChF,QAAQ;YACR,IAAI,EAAE,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,MAAM;YAC9C,KAAK,EAAE,QAAQ,KAAK,IAAI;YACxB,QAAQ;YACR,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YACzC,OAAO,EAAE,KAAK,CAAC,GAAG;YAClB,cAAc,EAAE,UAAU,IAAI,IAAI;YAClC,GAAG;YACH,GAAG,EAAE,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;QACjI,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI;QACtH,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE;KAC3E,CAAC;AACJ,CAAC;AAED,sGAAsG;AACtG,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,CAAC,GAAG,CAAsB,CAAC;IACjC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9I,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/F,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;AAEjF,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,GAAG,GAAG,YAAY,CAAU,IAAI,CAAC,CAAC;IACxC,OAAO,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;AACvG,CAAC;AAED,+GAA+G;AAC/G,SAAS,IAAI,CAAC,IAAY,EAAE,EAAqB;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAChB,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,KAA2B;IAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE;QAC1B,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;QAC7B,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE;QACxC,KAAK;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;KACb,CAAC;AACJ,CAAC;AAED,+HAA+H;AAC/H,SAAS,WAAW,CAAC,EAAqB,EAAE,MAAkB,EAAE,GAAY;IAC1E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAW,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM;YAAE,SAAS;QACrE,IAAI,CAAC;YACH,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACrJ,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,UAAU,CAAC,EAAqB;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI;QAAE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;YAAE,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;AACpH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAI,GAAY,EAAE,IAAsF,EACtI,EAAsF;IACtF,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE;QAC/B,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,IAAI,GAAmD,IAAI,CAAC;QAChE,8FAA8F;QAC9F,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI;YAAE,EAAE,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;QACvI,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC;QACvD,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5F,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YAC5D,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACjC,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,KAAQ,CAAC;QACb,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACnB,MAAM,CAAC,CAAC;QACV,CAAC;QACD,UAAU,CAAC,EAAE,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAqB;IAC9C,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAqB;IACrD,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAqB;IAClD,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC"}

package/dist/trace/state.d.ts

@@ -0,0 +1,27 @@
+/**
+ * A folder only its owner can open, made if missing and tightened if it was
+ * looser. A link is left as it is: a chmod would follow it and tighten what
+ * it points to, which may be a folder that isn't Trail's (a person's dotfiles
+ * can link the Trail home; skills/own-folder.ts refuses links in place of
+ * Trail's own folders before anything is written). The mode is set through a
+ * descriptor that refuses a link, so one swapped in after the check isn't
+ * followed either.
+ */
+export declare function ensurePrivateDir(dir: string): void;
+/**
+ * JSON only its owner can read, written whole or not at all. Folders it has
+ * to make are made private; a folder that already exists is left as it is
+ * (a cursor kept beside a caller's own files must not lock them away).
+ */
+export declare function writePrivateJson(path: string, value: unknown): void;
+/** `~/.trail/sessions/<id>.json`; the folder exists (0700) once this returns, when it can be made. */
+export declare function sessionStatePath(sessionId: string): string;
+/**
+ * `~/.trail/sessions/<id>.hooks.json`: where the turn-end hooks keep their
+ * own transcript cursor and what they carry between reads (the reply in
+ * progress, the responses already billed). Apart from `<id>.json`, whose
+ * cursor belongs to the skills catch-up, so neither reader moves the
+ * other's offset.
+ */
+export declare function hookCursorPath(sessionId: string): string;
+//# sourceMappingURL=state.d.ts.map

package/dist/trace/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/trace/state.ts"],"names":[],"mappings":"AAiBA;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAwBlD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAGnE;AAYD,sGAAsG;AACtG,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAQ1D;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAExD"}

package/dist/trace/state.js

@@ -0,0 +1,98 @@
+/**
+ * Where Trail keeps what it knows about one live session on this machine:
+ * `~/.trail/sessions/<id>.json` (the transcript offset, the epoch, a pending
+ * offer). Only offsets, ids and counts go there, never what anyone typed.
+ * Folders are 0700 and files 0600: a session file says what someone was
+ * working on.
+ */
+import { createHash } from "node:crypto";
+import { chmodSync, closeSync, constants, fchmodSync, lstatSync, mkdirSync, openSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { trailHome } from "../notes/trail-home.js";
+import { writeJsonAtomic } from "../util/state.js";
+const POSIX = process.platform !== "win32";
+/** Opens a folder, and refuses a link (ELOOP) where the platform has O_NOFOLLOW. */
+const DIR_NOFOLLOW = constants.O_RDONLY | (constants.O_DIRECTORY ?? 0) | (constants.O_NOFOLLOW ?? 0);
+/**
+ * A folder only its owner can open, made if missing and tightened if it was
+ * looser. A link is left as it is: a chmod would follow it and tighten what
+ * it points to, which may be a folder that isn't Trail's (a person's dotfiles
+ * can link the Trail home; skills/own-folder.ts refuses links in place of
+ * Trail's own folders before anything is written). The mode is set through a
+ * descriptor that refuses a link, so one swapped in after the check isn't
+ * followed either.
+ */
+export function ensurePrivateDir(dir) {
+    try {
+        if (lstatSync(dir).isSymbolicLink())
+            return;
+    }
+    catch {
+        /* missing: made below */
+    }
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    if (!POSIX || constants.O_NOFOLLOW === undefined)
+        return;
+    try {
+        const fd = openSync(dir, DIR_NOFOLLOW);
+        try {
+            fchmodSync(fd, 0o700);
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+    catch (e) {
+        // A folder its owner can't read can't be opened, but can still be tightened.
+        if (e.code !== "EACCES")
+            return;
+        try {
+            if (!lstatSync(dir).isSymbolicLink())
+                chmodSync(dir, 0o700);
+        }
+        catch {
+            /* not ours to change */
+        }
+    }
+}
+/**
+ * JSON only its owner can read, written whole or not at all. Folders it has
+ * to make are made private; a folder that already exists is left as it is
+ * (a cursor kept beside a caller's own files must not lock them away).
+ */
+export function writePrivateJson(path, value) {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    writeJsonAtomic(path, value, true, 0o600);
+}
+/**
+ * A session id as a file name. Hosts send UUIDs; anything else (a path, a
+ * dot, a very long string) is hashed, so a payload can never point the file
+ * outside the folder.
+ */
+function fileId(sessionId) {
+    if (/^[A-Za-z0-9_-][A-Za-z0-9._-]{0,127}$/.test(sessionId))
+        return sessionId;
+    return `h-${createHash("sha256").update(String(sessionId)).digest("hex").slice(0, 16)}`;
+}
+/** `~/.trail/sessions/<id>.json`; the folder exists (0700) once this returns, when it can be made. */
+export function sessionStatePath(sessionId) {
+    const dir = join(trailHome(), "sessions");
+    try {
+        ensurePrivateDir(dir);
+    }
+    catch {
+        /* read-only home: the caller's write fails and it fails open */
+    }
+    return join(dir, `${fileId(sessionId)}.json`);
+}
+/**
+ * `~/.trail/sessions/<id>.hooks.json`: where the turn-end hooks keep their
+ * own transcript cursor and what they carry between reads (the reply in
+ * progress, the responses already billed). Apart from `<id>.json`, whose
+ * cursor belongs to the skills catch-up, so neither reader moves the
+ * other's offset.
+ */
+export function hookCursorPath(sessionId) {
+    return sessionStatePath(sessionId).replace(/\.json$/, ".hooks.json");
+}
+//# sourceMappingURL=state.js.map

package/dist/trace/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/trace/state.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAC3C,oFAAoF;AACpF,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AAErG;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE;YAAE,OAAO;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,6EAA6E;QAC7E,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC3D,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE;gBAAE,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAc;IAC3D,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CAAC,SAAiB;IAC/B,IAAI,sCAAsC,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7E,OAAO,KAAK,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,gBAAgB,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AACvE,CAAC"}

package/dist/trace/tamper-code.d.ts

@@ -0,0 +1,9 @@
+export declare const SHELLS: RegExp;
+/** Program code that hands a guarded path to a call that writes it. `guardedLiteral`: a string literal names one. */
+export declare function codeWrites(code: string, guardedLiteral: (literal: string) => boolean): boolean;
+/**
+ * The code an interpreter or shell runs from its own words (`-c`, `-e`), else from its stdin: a here-string, its
+ * heredoc bodies, or what the pipeline's earlier stages hand it (`piped`, g5 review); null when it runs a file.
+ */
+export declare function programCode(prog: string, w: string[], bodies: string[], piped?: string | null): string | null;
+//# sourceMappingURL=tamper-code.d.ts.map

package/dist/trace/tamper-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tamper-code.d.ts","sourceRoot":"","sources":["../../src/trace/tamper-code.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,MAAM,QAAqB,CAAC;AAuEzC,qHAAqH;AACrH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAgC9F;AAcD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,GAAE,MAAM,GAAG,IAAW,GAAG,MAAM,GAAG,IAAI,CAqBnH"}

package/dist/trace/tamper-code.js

@@ -0,0 +1,174 @@
+/**
+ * The tamper check's reading of program code (design 4.1, split from
+ * `tamper.ts`): whether code an interpreter runs hands a protected path to a
+ * call that writes it, and where that code comes from (`-c`/`-e`, a heredoc,
+ * a here-string, or the pipeline feeding its stdin). A literal path is judged
+ * by the caller (`guardedLiteral`); a home folder joined with `.trail` or the
+ * host's transcripts folder is judged here.
+ */
+import { unquote } from './shell-scan.js';
+export const SHELLS = /^(?:ba|z|da)?sh$/;
+const HOME_REF = /\b(?:homedir\(\)|Path\.home\(\)|expanduser\(|environ(?:\.get\(|\[)\s*['"]HOME|process\.env\.HOME\b|getenv\(\s*['"]HOME|ENV\[\s*['"]HOME|Dir\.home\b|ENV\{\s*['"]?HOME)/;
+const TRAIL_PART = /['"`/]\.trail(?![\w.-])/;
+/** The host's transcripts joined onto a home folder, outside a project's memory/ folder (Claude Code's own notes). */
+const PROJECTS_PART = /['"`/]\.claude\/projects\b(?![^'"`\n]*\/memory\/)/;
+const TRAIL_ENV = /\b(?:environ(?:\.get\(|\[)\s*['"]TRAIL_HOME|process\.env\.TRAIL_HOME\b|getenv\(\s*['"]TRAIL_HOME|ENV\[\s*['"]TRAIL_HOME)/;
+const ASSIGNMENT = /^\s*(?:(?:const|let|var|my|local)\s+)?\$?([A-Za-z_]\w*)\s*(?::\s*[\w.[\]]+\s*)?=(?!=)\s*([^\n]+)$/;
+/** Calls that build a path around what they are given: `Path(`, `os.path.expanduser(`, `path.join(`. */
+const WRAPS = String.raw `^\s*(?:(?:[\w.]+\.)?(?:Path|PurePath|expanduser|expandvars|abspath|realpath|join|resolve|expand_path|normpath)\(\s*)*`;
+const PATHY_LITERAL = new RegExp(`${WRAPS}[frbFRB]?(['"\`])((?:(?!\\1)[^\\\\\\n]|\\\\.)*)\\1`);
+/** A path expression that starts from a variable: `os.path.join(base, 'x')`, `root / 'runs'`. */
+const HELD_FROM = new RegExp(`${WRAPS}([A-Za-z_]\\w*)\\b`);
+/** What may follow the path in a path expression: closing parens, joins, more parts; never a read or a parse. */
+const PATH_REST = /^(?:[\s)/+,\w]|\.(?:resolve|expanduser|absolute)\(\)|'[^'\n]*'|"[^"\n]*")*$/;
+/** Calls whose path argument(s) they write: `first` arg, both of the first `two` (copy, move), or a write `mode`. */
+const ARG_CALLS = [
+    [/\b(?:open|fopen|openSync)\(/g, 'mode'],
+    [/\b(?:writeFile|appendFile|createWriteStream|outputFile|writeJson|truncate|rmSync|rmdir|unlink|mkdir|makedirs|removedirs|remove|rmtree|to_csv|to_json|to_parquet|to_excel)(?:Sync)?\(/g, 'first'],
+    [/\b(?:fs|fsp|promises)\.rm\(/g, 'first'],
+    [/\bFile\.(?:write|delete|unlink)\(/g, 'first'],
+    [/\b(?:rename|renameSync|copyFile|copyFileSync|cpSync|copy|copy2|copyfile|copytree|move|symlink|symlinkSync|link)\(/g, 'two'],
+    [/\b(?:fs|fsp|promises)\.cp\(|\bos\.replace\(|\bFileUtils\.\w+\(/g, 'two'],
+];
+/** Methods that write their receiver: `Path(x).write_text(...)`. */
+const RECEIVER_CALLS = /\.(?:write_text|write_bytes|unlink|touch|mkdir|rmdir|rename|open)\(/g;
+const WRITE_MODE = /^\s*(?:mode\s*=\s*)?[rbuf]?['"][^'"]*[wax+]/;
+/** The arguments of the call whose `(` is at `open`, split at top-level commas (at most 2000 characters read). */
+function callArgs(code, open) {
+    const out = [];
+    let depth = 0;
+    let from = open + 1;
+    const end = Math.min(code.length, open + 2000);
+    for (let i = open + 1; i < end; i++) {
+        const c = code[i];
+        if (c === '"' || c === "'" || c === '`') {
+            for (i++; i < end && code[i] !== c; i++)
+                if (code[i] === '\\')
+                    i++;
+            continue;
+        }
+        if (c === '(' || c === '[' || c === '{')
+            depth++;
+        else if (c === ')' || c === ']' || c === '}') {
+            if (depth === 0) {
+                out.push(code.slice(from, i));
+                return out;
+            }
+            depth--;
+        }
+        else if (c === ',' && depth === 0) {
+            out.push(code.slice(from, i));
+            from = i + 1;
+        }
+    }
+    out.push(code.slice(from, end));
+    return out;
+}
+/** The expression a method is called on: `Path(x)`, `(home / '.trail')`, `p`. */
+function receiverBefore(code, dot) {
+    let j = dot - 1;
+    while (j >= 0) {
+        const c = code[j];
+        if (c === ')' || c === ']') {
+            let depth = 0;
+            for (; j >= 0; j--) {
+                if (code[j] === ')' || code[j] === ']')
+                    depth++;
+                else if ((code[j] === '(' || code[j] === '[') && --depth === 0)
+                    break;
+            }
+            j--;
+        }
+        else if (/[\w.$]/.test(c))
+            j--;
+        else
+            break;
+    }
+    return code.slice(j + 1, dot);
+}
+/** Program code that hands a guarded path to a call that writes it. `guardedLiteral`: a string literal names one. */
+export function codeWrites(code, guardedLiteral) {
+    const pathy = (text) => {
+        const m = PATHY_LITERAL.exec(text);
+        const v = m?.[2];
+        if (v && PATH_REST.test(text.slice(m.index + m[0].length)) && guardedLiteral(v))
+            return true;
+        return (HOME_REF.test(text) && (TRAIL_PART.test(text) || PROJECTS_PART.test(text))) || TRAIL_ENV.test(text);
+    };
+    // Variables set to a guarded path, or a path built from one (assignments in order, twice for a late one).
+    const held = new Set();
+    const statements = code.split(/\n|;/);
+    for (let pass = 0; pass < 2; pass++) {
+        for (const s of statements) {
+            const m = ASSIGNMENT.exec(s);
+            if (!m || held.has(m[1]))
+                continue;
+            const value = m[2];
+            const from = HELD_FROM.exec(value);
+            if (pathy(value) || (from !== null && held.has(from[1]) && PATH_REST.test(value.slice(from[0].length))))
+                held.add(m[1]);
+        }
+    }
+    const mentionsHeld = (arg) => held.size > 0 && (arg.match(/[A-Za-z_]\w*/g) ?? []).some((id) => held.has(id));
+    const target = (arg) => arg !== undefined && (pathy(arg) || mentionsHeld(arg));
+    for (const [re, which] of ARG_CALLS) {
+        for (const m of code.matchAll(re)) {
+            const args = callArgs(code, m.index + m[0].length - 1);
+            if (which === 'mode' ? args.slice(1).some((a) => WRITE_MODE.test(a)) && target(args[0]) : target(args[0]) || (which === 'two' && target(args[1])))
+                return true;
+        }
+    }
+    for (const m of code.matchAll(RECEIVER_CALLS)) {
+        if (m[0] === '.open(' && !callArgs(code, m.index + m[0].length - 1).some((a) => WRITE_MODE.test(a)))
+            continue;
+        if (target(receiverBefore(code, m.index)))
+            return true;
+    }
+    return false;
+}
+/** Flags whose next word is the program, per interpreter family. */
+function codeFlag(prog, a) {
+    if (SHELLS.test(prog))
+        return /^-[a-z]*c$/.test(a);
+    if (/^python/.test(prog))
+        return a === '-c';
+    if (prog === 'php')
+        return a === '-r';
+    if (prog === 'ruby' || prog === 'perl')
+        return a === '-e' || a === '-E';
+    return a === '-e' || a === '--eval' || a === '-p' || a === '--print';
+}
+/** A redirect whose target is the next word (`>`, `2>`, `<<`), not one written onto it (`>out.txt`). */
+const BARE_REDIRECT = /^(?:\d+|&)?(?:>>?|>\||<<?|<>|&>>?)$/;
+/**
+ * The code an interpreter or shell runs from its own words (`-c`, `-e`), else from its stdin: a here-string, its
+ * heredoc bodies, or what the pipeline's earlier stages hand it (`piped`, g5 review); null when it runs a file.
+ */
+export function programCode(prog, w, bodies, piped = null) {
+    const parts = [];
+    let script = false;
+    let here = null;
+    for (let i = 1; i < w.length; i++) {
+        const a = w[i];
+        if (a.startsWith('<<<')) {
+            here = unquote(a.length > 3 ? a.slice(3) : (w[++i] ?? ''));
+            continue;
+        }
+        if (/^(?:\d*[<>]|&>)/.test(a)) {
+            if (BARE_REDIRECT.test(a))
+                i++;
+            continue;
+        }
+        if (codeFlag(prog, a) && w[i + 1] !== undefined)
+            parts.push(unquote(w[++i]));
+        else if (!a.startsWith('-'))
+            script = true;
+    }
+    if (parts.length)
+        return parts.join('\n');
+    if (script)
+        return null;
+    const stdin = [here, ...bodies, piped].filter((x) => !!x);
+    return stdin.length ? stdin.join('\n') : null;
+}
+//# sourceMappingURL=tamper-code.js.map

package/dist/trace/tamper-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tamper-code.js","sourceRoot":"","sources":["../../src/trace/tamper-code.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,CAAC,MAAM,MAAM,GAAG,kBAAkB,CAAC;AACzC,MAAM,QAAQ,GAAG,wKAAwK,CAAC;AAC1L,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAC7C,sHAAsH;AACtH,MAAM,aAAa,GAAG,mDAAmD,CAAC;AAC1E,MAAM,SAAS,GAAG,0HAA0H,CAAC;AAC7I,MAAM,UAAU,GAAG,mGAAmG,CAAC;AACvH,wGAAwG;AACxG,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAA,uHAAuH,CAAC;AAChJ,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,oDAAoD,CAAC,CAAC;AAC/F,iGAAiG;AACjG,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;AAC3D,iHAAiH;AACjH,MAAM,SAAS,GAAG,6EAA6E,CAAC;AAEhG,qHAAqH;AACrH,MAAM,SAAS,GAA8C;IAC3D,CAAC,8BAA8B,EAAE,MAAM,CAAC;IACxC,CAAC,uLAAuL,EAAE,OAAO,CAAC;IAClM,CAAC,8BAA8B,EAAE,OAAO,CAAC;IACzC,CAAC,oCAAoC,EAAE,OAAO,CAAC;IAC/C,CAAC,oHAAoH,EAAE,KAAK,CAAC;IAC7H,CAAC,iEAAiE,EAAE,KAAK,CAAC;CAC3E,CAAC;AACF,oEAAoE;AACpE,MAAM,cAAc,GAAG,sEAAsE,CAAC;AAC9F,MAAM,UAAU,GAAG,6CAA6C,CAAC;AAEjE,kHAAkH;AAClH,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC;IACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACxC,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE;gBAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;oBAAE,CAAC,EAAE,CAAC;YACnE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC7C,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAC,OAAO,GAAG,CAAC;YAAC,CAAC;YAC/D,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,SAAS,cAAc,CAAC,IAAY,EAAE,GAAW;IAC/C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IAChB,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACnB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,KAAK,EAAE,CAAC;qBAC3C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC;oBAAE,MAAM;YACxE,CAAC;YACD,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,CAAC,EAAE,CAAC;;YAC5B,MAAM;IACb,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,cAA4C;IACnF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAE,CAAC,KAAK,GAAG,CAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/F,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9G,CAAC,CAAC;IACF,0GAA0G;IAC1G,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7B,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;gBAAE,SAAS;YACpC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACpB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAC5H,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACrH,MAAM,MAAM,GAAG,CAAC,GAAuB,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACnG,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,KAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACxD,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACjK,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,KAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAC/G,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,SAAS,QAAQ,CAAC,IAAY,EAAE,CAAS;IACvC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC5C,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACtC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC;IACxE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC;AACvE,CAAC;AAED,wGAAwG;AACxG,MAAM,aAAa,GAAG,qCAAqC,CAAC;AAE5D;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,CAAW,EAAE,MAAgB,EAAE,QAAuB,IAAI;IAClG,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9B,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAE,CAAC,CAAC,CAAC;aACzE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,CAAC;IACD,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,GAAG,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC"}

package/dist/trace/tamper-git.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Which folders a git command writes, for the tamper check (D59e): `git -C ~/.trail commit`, `--git-dir`,
+ * a shell already sitting in Trail's home, a clone into it. Commands that only read (status, log, diff, the
+ * list forms of branch, tag, remote, config and stash) write nothing. Pure: words in, folders out.
+ */
+/**
+ * The folders a git command changes (D59e): the folder its `-C` chain names (or the shell's), its `--git-dir`
+ * and `--work-tree`, and the folder a clone or init makes. Empty when the command only reads. `pathOf` turns a
+ * word into an absolute path from a folder (null when only the shell could know it).
+ */
+export declare function gitWriteTargets(w: string[], folder: string | null, pathOf: (word: string, from: string | null) => string | null): Array<string | null>;
+//# sourceMappingURL=tamper-git.d.ts.map

package/dist/trace/tamper-git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tamper-git.d.ts","sourceRoot":"","sources":["../../src/trace/tamper-git.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkCH;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAwBtJ"}