@nanonets/graft 0.23.1 → 0.24.1

package/dist/trace/tamper-git.js

@@ -0,0 +1,77 @@
+/**
+ * Which folders a git command writes, for the tamper check (D59e): `git -C ~/.trail commit`, `--git-dir`,
+ * a shell already sitting in Trail's home, a clone into it. Commands that only read (status, log, diff, the
+ * list forms of branch, tag, remote, config and stash) write nothing. Pure: words in, folders out.
+ */
+/** git commands that only read the repository they run in (push and fetch leave its files as they are). */
+const GIT_READS = new Set(['status', 'log', 'diff', 'show', 'rev-parse', 'ls-files', 'ls-tree', 'ls-remote', 'cat-file', 'describe', 'blame',
+    'annotate', 'grep', 'shortlog', 'show-ref', 'for-each-ref', 'rev-list', 'merge-base', 'name-rev', 'whatchanged', 'version', 'help', 'var',
+    'check-ignore', 'check-attr', 'count-objects', 'verify-commit', 'verify-tag', 'cherry', 'range-diff', 'diff-tree', 'diff-files', 'diff-index',
+    'show-branch', 'fetch', 'push']);
+/** git's own options that take the next word. */
+const GIT_VALUE = new Set(['-C', '-c', '--git-dir', '--work-tree', '--namespace', '--exec-path', '--config-env', '--super-prefix']);
+const BRANCH_WRITE = /^(?:-[a-zA-Z]*[dDmMcCfu]|--(?:delete|move|copy|force|set-upstream-to|unset-upstream|edit-description|track|no-track|create-reflog))(?:=|$)/;
+const BRANCH_LIST = /^(?:-l|--list|--contains|--no-contains|--merged|--no-merged|--points-at|--sort|--format)(?:=|$)/;
+const CONFIG_READ = /^(?:-l|--(?:get|get-all|get-regexp|get-urlmatch|list|get-color|get-colorbool))$/;
+const CONFIG_WRITE = /^(?:-e|--(?:unset|unset-all|add|replace-all|remove-section|rename-section|edit))$/;
+/** Whether `git <sub> <args>` changes the repository it runs in; the list forms of branch, tag, remote, config and stash read. */
+function gitSubWrites(sub, args) {
+    if (GIT_READS.has(sub))
+        return false;
+    const pos = args.filter((a) => !a.startsWith('-'));
+    const first = args[0] ?? '';
+    switch (sub) {
+        case 'branch': return args.some((a) => BRANCH_WRITE.test(a)) || (pos.length > 0 && !args.some((a) => BRANCH_LIST.test(a)));
+        case 'tag': return !(args.length === 0 || args.includes('-l') || args.includes('--list')) || args.some((a) => /^(?:-[a-zA-Z]*d|--delete)$/.test(a));
+        case 'remote': return !(args.length === 0 || ['-v', '--verbose', 'show', 'get-url'].includes(first));
+        case 'config':
+            if (args.includes('--global') || args.includes('--system'))
+                return false; // not this repository's files
+            return args.some((a) => CONFIG_WRITE.test(a)) || (!args.some((a) => CONFIG_READ.test(a)) && pos.length >= 2);
+        case 'stash': return !['list', 'show'].includes(first);
+        case 'worktree': return first !== 'list';
+        case 'reflog':
+        case 'notes':
+        case 'submodule': return !(args.length === 0 || first.startsWith('-') || ['show', 'list', 'status', 'summary'].includes(first));
+        case 'archive': return args.some((a) => a === '-o' || a.startsWith('--output'));
+        default: return true;
+    }
+}
+/**
+ * The folders a git command changes (D59e): the folder its `-C` chain names (or the shell's), its `--git-dir`
+ * and `--work-tree`, and the folder a clone or init makes. Empty when the command only reads. `pathOf` turns a
+ * word into an absolute path from a folder (null when only the shell could know it).
+ */
+export function gitWriteTargets(w, folder, pathOf) {
+    let dir = folder;
+    const dirs = [];
+    let i = 1;
+    for (; i < w.length; i++) {
+        const a = w[i];
+        if (!a.startsWith('-'))
+            break;
+        const eq = a.startsWith('--') ? a.indexOf('=') : -1;
+        const name = eq > 0 ? a.slice(0, eq) : a;
+        const value = eq > 0 ? a.slice(eq + 1) : GIT_VALUE.has(a) ? w[++i] : undefined;
+        if (value === undefined)
+            continue;
+        if (name === '-C')
+            dir = pathOf(value, dir);
+        else if (name === '--git-dir' || name === '--work-tree')
+            dirs.push(pathOf(value, dir));
+    }
+    const sub = w[i];
+    if (sub === undefined)
+        return [];
+    const args = w.slice(i + 1);
+    if (!gitSubWrites(sub, args))
+        return [];
+    dirs.push(dir);
+    if (sub === 'clone' || sub === 'init') {
+        const target = args.filter((a) => !a.startsWith('-'))[sub === 'clone' ? 1 : 0];
+        if (target !== undefined)
+            dirs.push(pathOf(target, dir));
+    }
+    return dirs;
+}
+//# sourceMappingURL=tamper-git.js.map

package/dist/trace/tamper-git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tamper-git.js","sourceRoot":"","sources":["../../src/trace/tamper-git.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,2GAA2G;AAC3G,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO;IAC1I,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK;IACzI,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY;IAC7I,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACnC,iDAAiD;AACjD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACpI,MAAM,YAAY,GAAG,4IAA4I,CAAC;AAClK,MAAM,WAAW,GAAG,iGAAiG,CAAC;AACtH,MAAM,WAAW,GAAG,iFAAiF,CAAC;AACtG,MAAM,YAAY,GAAG,mFAAmF,CAAC;AAEzG,kIAAkI;AAClI,SAAS,YAAY,CAAC,GAAW,EAAE,IAAc;IAC/C,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3H,KAAK,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpJ,KAAK,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACrG,KAAK,QAAQ;YACX,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,8BAA8B;YACxG,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QAC/G,KAAK,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvD,KAAK,UAAU,CAAC,CAAC,OAAO,KAAK,KAAK,MAAM,CAAC;QACzC,KAAK,QAAQ,CAAC;QAAC,KAAK,OAAO,CAAC;QAAC,KAAK,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7J,KAAK,SAAS,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QAChF,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,CAAW,EAAE,MAAqB,EAAE,MAA4D;IAC9H,IAAI,GAAG,GAAG,MAAM,CAAC;IACjB,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM;QAC9B,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/E,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,IAAI,KAAK,IAAI;YAAE,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;aACvC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,aAAa;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/trace/tamper.d.ts

@@ -0,0 +1,12 @@
+export interface TamperCtx {
+    trailHome: string;
+    transcriptPath: string;
+    home?: string;
+    /** The folder the agent's shell was in when the call started (the transcript entry's `cwd`). */
+    folder?: string | null;
+}
+/** A mark `tamperOf` gives for Trail's hook script run by hand, not a write (D93: the refusal says so). */
+export declare const isHookScriptTamper: (what: string) => boolean;
+/** The first rule a call breaks, as '<tool> <path or program>'; null when none. */
+export declare function tamperOf(name: string, input: unknown, raw: string | null, ctx: TamperCtx): string | null;
+//# sourceMappingURL=tamper.d.ts.map

package/dist/trace/tamper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tamper.d.ts","sourceRoot":"","sources":["../../src/trace/tamper.ts"],"names":[],"mappings":"AAkCA,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAgUD,2GAA2G;AAC3G,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,KAAG,OAA+F,CAAC;AAElJ,mFAAmF;AACnF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAqBxG"}

package/dist/trace/tamper.js

@@ -0,0 +1,405 @@
+/**
+ * The tamper check (design 4.1): the first call that writes Trail's files or
+ * the host's transcripts marks the session, and it can never save a skill.
+ *
+ * What counts is a write, not a mention. On this machine's real sessions a
+ * rule that fired on any Bash call naming `~/.trail` or `.claude/projects/`
+ * marked about a quarter of them: heredocs that only quoted the path,
+ * scripts that read transcripts, and Claude Code writing its own memory files
+ * under `.claude/projects/<p>/memory/`. So a Bash call tampers when:
+ *
+ * - a redirect (`>`, `>>`, `>|`, `&>`) targets a protected path;
+ * - a program that writes its arguments (tee, cp, mv, rm, touch, sed -i, ...)
+ *   or an output file (`--output`, `curl -o`) is given one, after following the call's `cd`s from the folder its shell
+ *   was already in;
+ * - an interpreter's own code (a heredoc body, `-c`, `-e`) passes one to a
+ *   call that writes: as a literal, through a variable set to one, or as a
+ *   home folder joined with `.trail`;
+ * - it runs Trail's hook script by hand.
+ *
+ * Protected: the Trail home, the session's transcript, and everything under
+ * `~/.claude/projects/` except a project's `memory/` folder. A script that
+ * builds the path some other way gets through; the check raises the bar, it
+ * does not close it (0 rule 13).
+ */
+import { realpathSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { EDIT_TOOLS, effectiveFolder, INTERPRETERS } from './run-calls.js';
+import { gitWriteTargets } from './tamper-git.js';
+import { base, OPEN_KW, scan, unquote, words } from './shell-scan.js';
+import { codeWrites, programCode, SHELLS } from './tamper-code.js';
+import { bareCommand, onlyTrail, programOf, simpleCommands } from './shell.js';
+import { agentGuard } from '../skills/risk.js';
+const HOOK_SCRIPT = /(?:trail|graft)-hooks\.cjs\b/;
+/** Every form the PreToolUse agent guard reads as Trail's hook scripts run by hand (globs, helpers paths, the package's hook modules). */
+const ranHookScript = (raw) => agentGuard(raw)?.hit === 'hook-script';
+/** Windows paths ignore case: C:\Users\dev\.trail and c:\users\dev\.trail are one folder. */
+const fold = (p) => (process.platform === 'win32' ? p.toLowerCase() : p);
+const under = (p, dir) => { const a = fold(p), b = fold(dir); return a === b || a.startsWith(b + sep); };
+/** `p` with its deepest existing folder resolved through symlinks: where a write to `p` really lands. */
+function realOf(p) {
+    const rest = [];
+    let cur = p;
+    for (let i = 0; i < 64; i++) {
+        try {
+            return join(realpathSync(cur), ...rest.reverse());
+        }
+        catch { /* not there (yet): its folder */ }
+        const up = dirname(cur);
+        if (up === cur)
+            break;
+        rest.push(basename(cur));
+        cur = up;
+    }
+    return p;
+}
+const ZONES = new Map();
+function zonesOf(ctx) {
+    const home = ctx.home ?? homedir();
+    const memo = `${ctx.trailHome}\0${ctx.transcriptPath}\0${home}`;
+    let z = ZONES.get(memo);
+    if (!z) {
+        const as = { trail: resolve(ctx.trailHome), projects: resolve(home, '.claude', 'projects'), transcript: ctx.transcriptPath ? resolve(ctx.transcriptPath) : null };
+        const real = { trail: realOf(as.trail), projects: realOf(as.projects), transcript: as.transcript === null ? null : realOf(as.transcript) };
+        z = { as, real, home };
+        if (ZONES.size > 32)
+            ZONES.clear();
+        ZONES.set(memo, z);
+    }
+    return z;
+}
+function guardedIn(p, z, wipe) {
+    if (under(p, z.trail) || (z.transcript !== null && fold(p) === fold(z.transcript)))
+        return true;
+    if (wipe && (under(z.trail, p) || under(z.projects, p)))
+        return true;
+    if (!under(p, z.projects))
+        return false;
+    return relative(z.projects, p).split(sep)[1] !== 'memory';
+}
+/** A path Trail's record depends on, as written or through a symlink. `wipe`: also a folder that holds one (rm, mv). */
+function guarded(p, z, wipe = false) {
+    return guardedIn(p, z.as, wipe) || guardedIn(realOf(p), z.real, wipe);
+}
+/** A word with quotes gone and `~`, `$HOME`, `$TRAIL_HOME` and the command's own variables expanded. */
+function expand(word, z, vars) {
+    let w = word.replace(/['"]/g, '');
+    if (vars?.size)
+        w = w.replace(/\$\{?([A-Za-z_]\w*)\}?/g, (m, n) => vars.get(n) ?? m);
+    return w.replace(/^~(?=\/|$)/, z.home)
+        .replace(/^\$(?:HOME|\{HOME\})(?=\/|$)/, z.home)
+        .replace(/^\$(?:TRAIL_HOME|\{TRAIL_HOME\})(?=\/|$)/, z.as.trail);
+}
+/**
+ * A shell word or string literal as an absolute path; null for a variable the command did not set. A folder named
+ * before such a variable is still a place (g5 review): `~/.trail/sessions/$SID.json` is a file in that folder.
+ */
+function pathOf(word, folder, z, vars) {
+    let w = expand(word, z, vars);
+    const dyn = w.search(/[$`]/);
+    if (dyn >= 0) {
+        const dir = w.slice(0, w.lastIndexOf('/', dyn) + 1);
+        if (!dir)
+            return null;
+        w = `${dir}$`;
+    }
+    if (!w)
+        return null;
+    if (isAbsolute(w))
+        return resolve(w);
+    return folder ? resolve(folder, w) : null;
+}
+const DECLARE = /^(?:export|declare|local|readonly|typeset)$/;
+/** Records `NAME=value` words of a simple command that only assigns (or exports) them. */
+function noteAssignments(simple, z, vars) {
+    const all = words(simple);
+    const list = DECLARE.test(all[0] ?? '') ? all.slice(1).filter((x) => !x.startsWith('-')) : all;
+    if (!list.length || !list.every((x) => /^[A-Za-z_]\w*=/.test(x)))
+        return false;
+    for (const x of list) {
+        const eq = x.indexOf('=');
+        vars.set(x.slice(0, eq), expand(x.slice(eq + 1), z, vars));
+    }
+    return true;
+}
+/* -------------------------------------------------------------------- shell */
+/** Programs that write the paths they are given: which arguments. */
+const WRITERS = {
+    tee: 'all', rm: 'all', rmdir: 'all', unlink: 'all', shred: 'all', truncate: 'all', touch: 'all', mkdir: 'all', chmod: 'all', chown: 'all',
+    // A link to a protected file is a way to write it under another name.
+    mv: 'all', ln: 'all', cp: 'last', install: 'last', rsync: 'last',
+};
+const OP_WORD = /^(?:\d+|&)?(?:>>?|>\||<<?<?|<>)$/;
+const OUT_REDIRECT = /^(?:\d+|&)?(?:>>?|>\|)(.*)$/s;
+const INLINE_REDIRECT = /^[^'"$`(<>]+?(?:\d|&)?(?:>>?|>\|)(.+)$/s;
+/** Redirect targets of one simple command (`2>&1` and `>(...)` are not files). */
+function redirectTargets(w) {
+    const out = [];
+    for (let i = 0; i < w.length; i++) {
+        const m = OUT_REDIRECT.exec(w[i]) ?? INLINE_REDIRECT.exec(w[i]);
+        if (!m)
+            continue;
+        const target = m[1] || w[++i] || '';
+        if (target && !/^[&(]/.test(target))
+            out.push(target);
+    }
+    return out;
+}
+/** Programs whose short flag names the file they write: `curl -o f`, `sort -o f`, `wget -O f`, `tree -o f`. */
+const OUT_FLAG = { curl: '-o', sort: '-o', tree: '-o', wget: '-O' };
+/** Files named by `--output f`, `--output=f`, or the program's own output flag. */
+function outputFiles(prog, w) {
+    const out = [];
+    for (let i = 1; i < w.length; i++) {
+        const a = w[i];
+        if (a.startsWith('--output='))
+            out.push(a.slice(9));
+        else if ((a === '--output' || a === OUT_FLAG[prog]) && w[i + 1] !== undefined)
+            out.push(w[++i]);
+    }
+    return out;
+}
+/** Arguments that are not flags or redirects. */
+function positional(w) {
+    const out = [];
+    for (let i = 0; i < w.length; i++) {
+        const a = w[i];
+        if (OP_WORD.test(a)) {
+            i++;
+            continue;
+        }
+        if (/^(?:\d*[<>]|&>)/.test(a) || (a.startsWith('-') && a !== '-'))
+            continue;
+        out.push(a);
+    }
+    return out;
+}
+/** The words of a simple command with env prefixes, wrappers, `sudo` and `env A=B` gone. */
+function programWordsOf(simple) {
+    let w = words(bareCommand(simple));
+    while (w[0] === 'sudo' || w[0] === 'env') {
+        w = w.slice(1);
+        while (w.length && (/^[A-Za-z_]\w*=/.test(w[0]) || w[0].startsWith('-')))
+            w = w.slice(1);
+    }
+    return w;
+}
+/** The folder a `tar` extracts into or the archive it creates, when it does either. */
+function tarTargets(w) {
+    const out = [];
+    const bundle = w[1] && !w[1].startsWith('-') ? w[1] : '';
+    const short = w.filter((a) => /^-[A-Za-z]+$/.test(a)).join('') + bundle;
+    const extract = /x/.test(short) || w.includes('--extract') || w.includes('--get');
+    const create = /[cru]/.test(short) || w.includes('--create') || w.includes('--append') || w.includes('--update');
+    for (let i = 1; i < w.length; i++) {
+        const a = w[i];
+        if (extract && (a === '-C' || a === '--directory') && w[i + 1])
+            out.push(w[i + 1]);
+        if (extract && a.startsWith('--directory='))
+            out.push(a.slice(12));
+        if (create && (a === '-f' || a === '--file' || (/^-[A-Za-z]*f$/.test(a))) && w[i + 1])
+            out.push(w[i + 1]);
+        if (create && a.startsWith('--file='))
+            out.push(a.slice(7));
+    }
+    if (create && bundle.endsWith('f') && w[2])
+        out.push(w[2]);
+    return out;
+}
+/* --------------------------------------------------------------------- git */
+/** D59e: git writing in a protected folder (its `-C` chain, `--git-dir`, `--work-tree`, or a clone's or init's target). */
+function gitWrites(w, folder, z, vars) {
+    return gitWriteTargets(w, folder, (word, from) => pathOf(word, from, z, vars)).some((d) => d !== null && guarded(d, z));
+}
+/* ------------------------------------------------------------------- xargs */
+/** xargs options that take the next word (GNU and BSD). */
+const XARGS_VALUE = /^(?:-[nPLdEsaSR]|--(?:max-args|max-procs|max-lines|delimiter|eof|max-chars|arg-file))$/;
+/**
+ * What xargs feeds the program: a path under the first protected path an earlier stage of the pipeline names
+ * (`find ~/.trail/runs ... |`), else under the first absolute one, else a name in the shell's folder (`ls |`).
+ */
+function xargsInput(pipeIn, folder, z, vars) {
+    let first = null;
+    for (const w of pipeIn) {
+        for (const a of positional(w.slice(1))) {
+            const p = pathOf(a, folder, z, vars);
+            if (p === null)
+                continue;
+            if (guarded(p, z))
+                return join(p, 'f');
+            if (first === null && isAbsolute(expand(a, z, vars)))
+                first = p;
+        }
+    }
+    return join(first ?? folder ?? '', 'f');
+}
+/** D59e: `… | xargs [-I R] <writer> …` handing the listed paths (or a protected one of its own) to a program that writes. */
+function xargsWrites(w, pipeIn, folder, z, vars) {
+    let rep = null;
+    let i = 1;
+    for (; i < w.length; i++) {
+        const a = w[i];
+        if (a === '--') {
+            i++;
+            break;
+        }
+        if (!a.startsWith('-'))
+            break;
+        if (a === '-I' || a === '-J' || a === '--replace')
+            rep = w[++i] ?? null;
+        else if (/^-[IJ]./.test(a))
+            rep = a.slice(2);
+        else if (a.startsWith('--replace='))
+            rep = a.slice(10);
+        else if (/^-i/.test(a))
+            rep = a.slice(2) || '{}';
+        else if (XARGS_VALUE.test(a))
+            i++;
+    }
+    const cmd = w.slice(i).map((a) => unquote(a));
+    if (!cmd.length)
+        return false;
+    const input = xargsInput(pipeIn, folder, z, vars);
+    const r = rep ? unquote(rep) : null;
+    const argv = r ? cmd.map((a) => (a === r ? input : a.includes(r) ? a.split(r).join('f') : a)) : [...cmd, input];
+    return simpleWrites(argv, folder, z, vars);
+}
+/** Whether one simple command's redirects or written arguments are protected. */
+function simpleWrites(w, folder, z, vars) {
+    const hit = (word, wipe = false) => {
+        const p = pathOf(word, folder, z, vars);
+        return p !== null && guarded(p, z, wipe);
+    };
+    const prog = base(w[0] ?? '');
+    if (redirectTargets(w).some((t) => hit(t)) || outputFiles(prog, w).some((t) => hit(t)))
+        return true;
+    if (prog === 'git')
+        return gitWrites(w, folder, z, vars);
+    const args = positional(w.slice(1));
+    const which = WRITERS[prog];
+    if (which === 'all')
+        return args.some((a) => hit(a, prog === 'rm' || prog === 'mv'));
+    if (which === 'last')
+        return args.length > 1 && hit(args[args.length - 1]);
+    if ((prog === 'sed' || prog === 'perl') && w.some((a) => /^-[a-zA-Z]*i/.test(a) || a.startsWith('--in-place')))
+        return args.some((a) => hit(a));
+    if ((prog === 'awk' || prog === 'gawk') && w.some((a, i) => (a === '-i' && w[i + 1] === 'inplace') || a === '--include=inplace'))
+        return args.some((a) => hit(a));
+    if (prog === 'dd')
+        return w.some((a) => a.startsWith('of=') && hit(a.slice(3)));
+    if (prog === 'tar')
+        return tarTargets(w).some((t) => hit(t));
+    if (prog === 'unzip')
+        return w.some((a, i) => (a === '-d' && w[i + 1] !== undefined && hit(w[i + 1])) || (a.startsWith('-d') && a.length > 2 && hit(a.slice(2))));
+    const execs = w.flatMap((a, i) => (a === '-exec' || a === '-execdir' ? [base(w[i + 1] ?? '')] : []));
+    if (prog === 'find' && (w.includes('-delete') || execs.some((e) => e in WRITERS || e === 'sed' || e === 'perl'))) {
+        const roots = [];
+        for (const a of w.slice(1)) {
+            if (/^[-(!]/.test(a))
+                break;
+            roots.push(a);
+        }
+        return roots.some((a) => hit(a, true));
+    }
+    return false;
+}
+/* ---------------------------------------------------------------------- all */
+/** A `cd` from `folder`; null when only the shell could know where it lands. */
+function cdFrom(folder, simple, home) {
+    const next = effectiveFolder(folder ?? '/\0', simple, home);
+    // No real path holds a NUL; on Windows resolve() puts a drive before the '/\0' this starts from.
+    return next && !next.includes('\0') ? next : null;
+}
+/** Whether a Bash command writes a guarded path; `depth` bounds `bash -c` inside `bash -c`. */
+function bashWrites(text, start, z, depth = 0, vars = new Map()) {
+    // `>|` (write even with noclobber) is a redirect, not a pipe.
+    const raw = text.includes('>|') ? text.replace(/>\|/g, '> ') : text;
+    let folder = start;
+    let prev = null;
+    const stack = [];
+    const { segs } = scan(raw);
+    // The earlier stages of the pipeline the current segment is in: what an `xargs` reads, and (as text: their words
+    // unquoted and their heredoc bodies) what an interpreter or shell reading its stdin runs (g5 review).
+    let pipeIn = [];
+    let piped = [];
+    for (const p of segs) {
+        if (p.group) {
+            if (bashWrites(raw.slice(p.group.open + 1, p.group.close < 0 ? p.end : p.group.close), folder, z, depth, new Map(vars)))
+                return true;
+            pipeIn = [];
+            piped = [];
+            continue;
+        }
+        const head = raw.slice(p.start, p.end);
+        const plain = !OPEN_KW.has(words(head)[0] ?? '');
+        const stage = [];
+        simples: for (const [n, simple] of simpleCommands(head).entries()) {
+            if (noteAssignments(simple, z, vars))
+                continue simples;
+            const w = programWordsOf(simple);
+            if (w[0] === 'cd' || w[0] === 'pushd' || w[0] === 'popd') {
+                const to = w[0] === 'popd' ? (stack.length ? stack.pop() : null)
+                    : w[1] === '-' ? prev
+                        : cdFrom(folder, `cd ${w.slice(1).filter((a) => !/^-[LPe@]+$/.test(a)).map((a) => expand(a, z, vars)).join(' ')}`, z.home);
+                if (w[0] === 'pushd')
+                    stack.push(folder);
+                prev = folder;
+                folder = to;
+                continue simples;
+            }
+            if (simpleWrites(w, folder, z, vars))
+                return true;
+            const prog = base(w[0] ?? '');
+            if (prog === 'xargs' && xargsWrites(w, pipeIn, folder, z, vars))
+                return true;
+            stage.push(w);
+            const shell = SHELLS.test(prog);
+            if (!shell && !INTERPRETERS.test(prog))
+                continue;
+            const code = programCode(prog, w, plain && n === 0 ? p.bodies.map(([a, b]) => raw.slice(a, b)) : [], n === 0 && piped.length ? piped.join('\n') : null);
+            const literal = (v) => {
+                const at = pathOf(v, folder, z);
+                return at !== null && guarded(at, z);
+            };
+            if (code !== null && (shell ? depth < 2 && bashWrites(code, folder, z, depth + 1, new Map(vars)) : codeWrites(code, literal)))
+                return true;
+        }
+        const fed = [...stage.map((w) => w.slice(1).map((a) => unquote(a)).join(' ')), ...p.bodies.map(([a, b]) => raw.slice(a, b))];
+        piped = p.sep === '|' ? [...piped, ...fed] : [];
+        pipeIn = p.sep === '|' ? [...pipeIn, ...stage] : [];
+    }
+    return false;
+}
+/** A mark `tamperOf` gives for Trail's hook script run by hand, not a write (D93: the refusal says so). */
+export const isHookScriptTamper = (what) => /^Bash (?:(?:trail|graft)-hooks\.cjs|a Trail hook script)$/.test(String(what ?? ''));
+/** The first rule a call breaks, as '<tool> <path or program>'; null when none. */
+export function tamperOf(name, input, raw, ctx) {
+    const z = zonesOf(ctx);
+    if (EDIT_TOOLS.has(name)) {
+        const i = input && typeof input === 'object' ? input : {};
+        const fp = typeof i.file_path === 'string' ? i.file_path : typeof i.notebook_path === 'string' ? i.notebook_path : '';
+        if (!fp)
+            return null;
+        const p = resolve(fp.replace(/^~(?=\/|$)/, z.home));
+        return guarded(p, z) ? `${name} ${p}` : null;
+    }
+    // Codex's write_stdin (review): the keys fed to a running shell are a command line like any other.
+    if (name === 'write_stdin') {
+        const keys = input && typeof input === 'object' && typeof input.chars === 'string' ? input.chars : '';
+        if (!keys.trim())
+            return null;
+        if (ranHookScript(keys))
+            return 'Bash a Trail hook script';
+        return bashWrites(keys, ctx.folder ?? null, z) ? `Bash ${programOf(keys) ?? 'shell'}` : null;
+    }
+    if (name !== 'Bash' || raw === null)
+        return null;
+    // D116 item 2: running it by hand marks the session; reading it does not.
+    if (ranHookScript(raw))
+        return HOOK_SCRIPT.test(raw) ? `Bash ${HOOK_SCRIPT.exec(raw)[0]}` : 'Bash a Trail hook script';
+    if (onlyTrail(raw))
+        return null;
+    return bashWrites(raw, ctx.folder ?? null, z) ? `Bash ${programOf(raw) ?? 'shell'}` : null;
+}
+//# sourceMappingURL=tamper.js.map

package/dist/trace/tamper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tamper.js","sourceRoot":"","sources":["../../src/trace/tamper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAU/C,MAAM,WAAW,GAAG,8BAA8B,CAAC;AACnD,0IAA0I;AAC1I,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,aAAa,CAAC;AAM9E,6FAA6F;AAC7F,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjF,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,GAAW,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzH,yGAAyG;AACzG,SAAS,MAAM,CAAC,CAAS;IACvB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,EAAE,KAAK,GAAG;YAAE,MAAM;QACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,GAAG,GAAG,EAAE,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;AAEvC,SAAS,OAAO,CAAC,GAAc;IAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;IAChE,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,EAAE,GAAU,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzK,MAAM,IAAI,GAAU,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAClJ,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QACnC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,CAAQ,EAAE,IAAa;IACnD,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;AAC5D,CAAC;AAED,wHAAwH;AACxH,SAAS,OAAO,CAAC,CAAS,EAAE,CAAQ,EAAE,IAAI,GAAG,KAAK;IAChD,OAAO,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC;AAKD,wGAAwG;AACxG,SAAS,MAAM,CAAC,IAAY,EAAE,CAAQ,EAAE,IAAW;IACjD,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClC,IAAI,IAAI,EAAE,IAAI;QAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7F,OAAO,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC;SACnC,OAAO,CAAC,8BAA8B,EAAE,CAAC,CAAC,IAAI,CAAC;SAC/C,OAAO,CAAC,0CAA0C,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,SAAS,MAAM,CAAC,IAAY,EAAE,MAAqB,EAAE,CAAQ,EAAE,IAAW;IACxE,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,MAAM,OAAO,GAAG,6CAA6C,CAAC;AAE9D,0FAA0F;AAC1F,SAAS,eAAe,CAAC,MAAc,EAAE,CAAQ,EAAE,IAAU;IAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/F,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/E,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAEhF,qEAAqE;AACrE,MAAM,OAAO,GAAmC;IAC9C,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IACzI,sEAAsE;IACtE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CACjE,CAAC;AACF,MAAM,OAAO,GAAG,kCAAkC,CAAC;AACnD,MAAM,YAAY,GAAG,8BAA8B,CAAC;AACpD,MAAM,eAAe,GAAG,yCAAyC,CAAC;AAElE,kFAAkF;AAClF,SAAS,eAAe,CAAC,CAAW;IAClC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAClE,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+GAA+G;AAC/G,MAAM,QAAQ,GAA2B,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAE5F,mFAAmF;AACnF,SAAS,WAAW,CAAC,IAAY,EAAE,CAAW;IAC5C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aAC/C,IAAI,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAE,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iDAAiD;AACjD,SAAS,UAAU,CAAC,CAAW;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACvC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC;YAAE,SAAS;QAC5E,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4FAA4F;AAC5F,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QACzC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACf,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uFAAuF;AACvF,SAAS,UAAU,CAAC,CAAW;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;IACxE,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;QACpF,IAAI,OAAO,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACnE,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;QAC3G,IAAI,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAE/E,2HAA2H;AAC3H,SAAS,SAAS,CAAC,CAAW,EAAE,MAAqB,EAAE,CAAQ,EAAE,IAAW;IAC1E,OAAO,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1H,CAAC;AAED,+EAA+E;AAE/E,2DAA2D;AAC3D,MAAM,WAAW,GAAG,wFAAwF,CAAC;AAE7G;;;GAGG;AACH,SAAS,UAAU,CAAC,MAAkB,EAAE,MAAqB,EAAE,CAAQ,EAAE,IAAW;IAClF,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,IAAI;gBAAE,SAAS;YACzB,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;gBAAE,KAAK,GAAG,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,6HAA6H;AAC7H,SAAS,WAAW,CAAC,CAAW,EAAE,MAAkB,EAAE,MAAqB,EAAE,CAAQ,EAAE,IAAW;IAChG,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,MAAM;QAAC,CAAC;QAC/B,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM;QAC9B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,WAAW;YAAE,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;aACnE,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACxC,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aAClD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;aAC5C,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,CAAC,EAAE,CAAC;IACpC,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;IAChH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,iFAAiF;AACjF,SAAS,YAAY,CAAC,CAAW,EAAE,MAAqB,EAAE,CAAQ,EAAE,IAAW;IAC7E,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE;QACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACxC,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpG,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;IACrF,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChJ,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,KAAK,mBAAmB,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClK,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnK,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrG,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC;QACjH,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,MAAM;YAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAC3E,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAEhF,gFAAgF;AAChF,SAAS,MAAM,CAAC,MAAqB,EAAE,MAAc,EAAE,IAAY;IACjE,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5D,iGAAiG;IACjG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED,+FAA+F;AAC/F,SAAS,UAAU,CAAC,IAAY,EAAE,KAAoB,EAAE,CAAQ,EAAE,KAAK,GAAG,CAAC,EAAE,OAAa,IAAI,GAAG,EAAE;IACjG,8DAA8D;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,iHAAiH;IACjH,sGAAsG;IACtG,IAAI,MAAM,GAAe,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACZ,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrI,MAAM,GAAG,EAAE,CAAC;YACZ,KAAK,GAAG,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,GAAe,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YAClE,IAAI,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC;gBAAE,SAAS,OAAO,CAAC;YACvD,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;gBACzD,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC/D,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI;wBACrB,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC7H,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO;oBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,GAAG,MAAM,CAAC;gBACd,MAAM,GAAG,EAAE,CAAC;gBACZ,SAAS,OAAO,CAAC;YACnB,CAAC;YACD,IAAI,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,OAAO,IAAI,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACjD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxJ,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE;gBAC5B,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;gBAChC,OAAO,EAAE,KAAK,IAAI,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACvC,CAAC,CAAC;YACF,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC7I,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7H,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2GAA2G;AAC3G,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,2DAA2D,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AAElJ,mFAAmF;AACnF,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAc,EAAE,GAAkB,EAAE,GAAc;IACvF,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACtH,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrB,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IACD,mGAAmG;IACnG,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAA6B,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACtJ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,aAAa,CAAC,IAAI,CAAC;YAAE,OAAO,0BAA0B,CAAC;QAC3D,OAAO,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,SAAS,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/F,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjD,0EAA0E;IAC1E,IAAI,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,WAAW,CAAC,IAAI,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC;IACxH,IAAI,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,SAAS,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC"}

package/dist/trace/typed.d.ts

@@ -0,0 +1,30 @@
+import type { TypedAnswer } from './types.js';
+export type { TypedAnswer } from './types.js';
+/** The person's words in a UserPromptSubmit `prompt`: phase 0's ownText(raw); null when that gives ''. */
+export declare function typedPrompt(raw: string): string | null;
+/** 4.4: the spec's phrasings and the self-learning worktree's keep asks. A file (`skill.md`) or a "skill issue" is not a skill. */
+export declare const SAVE_REQUEST: RegExp;
+/** A no before the verb, in the same clause: "don't save", "I don't want to save", "you shouldn't keep", "I'd rather not keep". */
+export declare const NOT_SAVE: RegExp;
+/**
+ * SAVE_REQUEST on 25 words or fewer, and not NOT_SAVE. Also not a status or history question ("did you
+ * save this as a skill?"), not taken back, not wondering, not recalling: a wrong yes here saves a skill
+ * nobody asked for, a wrong no only means the person says it plainly.
+ */
+export declare function isSaveRequest(typed: string): boolean;
+export declare function scopeWords(typed: string): 'every repo' | 'this repo' | 'repo' | 'team';
+/**
+ * D116 item 3: the person said to go on: the line's first clause (up to `,` `:` `;` `.` `!` or a dash) is a
+ * go-ahead (yes, ok, continue, go on, do it, proceed), whatever follows it. Never a question.
+ */
+export declare function isGoAhead(typed: string): boolean;
+/** 4.12. afterShow: the offer already got its one 'show me'. A yes is never a question. */
+export declare function classifyAnswer(typed: string, afterShow: boolean): TypedAnswer;
+/**
+ * The person is correcting what the agent just did. Ported from the worktree's detect.ts `isCorrection`; D111 adds
+ * "it didn't X" and "you forgot to X" without a leading no (moment 4's forms, 4.14 step 2).
+ */
+export declare function isCorrection(typed: string): boolean;
+/** sha256 hex of the text NFC-normalised, trimmed, whitespace collapsed. The only form typed text is ever stored in. */
+export declare function typedSha(typed: string): string;
+//# sourceMappingURL=typed.d.ts.map

package/dist/trace/typed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typed.d.ts","sourceRoot":"","sources":["../../src/trace/typed.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,0GAA0G;AAC1G,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEtD;AAED,mIAAmI;AACnI,eAAO,MAAM,YAAY,QAQxB,CAAC;AACF,mIAAmI;AACnI,eAAO,MAAM,QAAQ,QAAkM,CAAC;AAQxN;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAIpD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,WAAW,GAAG,MAAM,GAAG,MAAM,CAMtF;AAkCD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAKhD;AAED,2FAA2F;AAC3F,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,WAAW,CAQ7E;AAQD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAInD;AAED,wHAAwH;AACxH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG9C"}