@nanonets/graft 0.24.0 → 0.25.0

package/dist/claude/post-bash.js

@@ -0,0 +1,191 @@
+/**
+ * The skills part of PostToolUse and PostToolUseFailure on Bash (design 3.4).
+ *
+ * Claude Code fires PostToolUse for a Bash call that worked and
+ * PostToolUseFailure for one that failed, never PostToolUse (D34). Each
+ * leaves a mark for a call whose result the transcript may not hold yet
+ * (`<id>.post.jsonl`, taken by the next catch-up; the transcript's result
+ * wins when it arrives); a check's mark carries the output's tail, cut by
+ * the fold's own `cleanTail`, so a check read from a mark reads as it will
+ * from the transcript. Marks are for Bash only: MCP results (a deploy read)
+ * come from the transcript.
+ *
+ * The asked call's PostToolUse is the person's yes to a step that can't be
+ * undone (the group's later steps are covered); a failure never approves,
+ * since a refused ask arrives the same way.
+ *
+ * Where the host shows the offer best as PostToolUse context (`offerChannel`
+ * 'post-tool'), the passing check of a job's 3rd day brings it; Stop counts
+ * it shown only when the reply ends with it (3.5 step 6).
+ *
+ * 1b (3.4 step 1, recall half): a result whose error is in the wall catalog
+ * gets the catalog's fix as context, from Trail (D88), plus what fixed it
+ * here before when a kept lesson worked in 2 epochs; on PostToolUseFailure
+ * only where the host reads that context (`failureContext`). Nothing is
+ * written for it (R34): Stop records the hit from the transcript.
+ *
+ * Codex (phase 2, 3.4): PostToolUse fires on every exit, with `tool_response`
+ * the text the model sees, so `codexPostBash` reads the exit from its header
+ * (`codexFailed`) and hands on the body as the rollout reader shows it; a text
+ * with no exit header writes no mark (P34). Each host's own facts decide what
+ * context goes out (`postToolContext` on PostToolUse, `failureContext` on
+ * PostToolUseFailure).
+ */
+import { existsSync } from 'node:fs';
+import { appendPostMark, gateFilePath, markApproved, skillsOnFast } from '../trace/gate-file.js';
+import { checkFamilyOf } from '../trace/checks.js';
+import { cleanTail } from '../trace/run-calls.js';
+import { currentRun, skillsGate, withSkillSession } from '../trace/skill-session.js';
+import { checkedSuccess, runHelpers, writeRunSheet } from '../trace/runs.js';
+import { trailNow } from '../skills/settings.js';
+import { hostFacts } from '../skills/host-facts.js';
+import { detectHost } from '../trace/host.js';
+import { codexExitOf, outputBody, outputText } from '../trace/codex-exec.js';
+import { offerDue } from '../skills/offer-moment.js';
+import { postToolOfferText } from '../skills/offers.js';
+import { hookError } from './skills-hook-util.js';
+import { notePool } from './stop-skills.js';
+import { wallContextText, wallOfResult } from './walls-hook.js';
+/** PostToolUse(Bash) with `failed` false; PostToolUseFailure(Bash) with `failed` true. Never throws. */
+export function postBashSkills(input, dir, env = process.env, failed = false) {
+    return postBashRun(input, dir, env, failed).out;
+}
+/** 3.4: 1a's marks and post-tool offer, then 1b's wall fix. `marked` or a wall hit means it did work (the caller times those). */
+export function postBashRun(input, dir, env = process.env, failed = false) {
+    const r = marksAndOffer(input, dir, env, failed);
+    const sent = [];
+    const wall = wallPart(input, dir, env, failed, sent);
+    const context = [r.out.context, wall].filter(Boolean).join('\n');
+    return { out: context ? { ...r.out, context } : r.out, marked: r.marked, sent };
+}
+/** 3.4 step 1 (1b): the fix line for a wall hit, and `wall_hit` telemetry. '' when none, or on any throw. */
+function wallPart(input, dir, env, failed, sent) {
+    try {
+        if (!skillsOnFast(env) || input?.tool_name !== 'Bash')
+            return '';
+        const command = typeof input.tool_input?.command === 'string' ? input.tool_input.command : '';
+        // The patterns first (8 KB at most); the gate only for a hit.
+        const cls = command ? wallOfResult(resultText(input, failed), command, failed) : null;
+        if (!cls)
+            return '';
+        const g = skillsGate(input, dir, env);
+        if (!g.ok)
+            return '';
+        const { text, hadLesson } = wallContextText(cls, { checkout: g.ctx.checkout, repoKey: g.ctx.repoKey, env, now: g.ctx.now });
+        sent.push(['wall_hit', { class: cls, had_lesson: String(hadLesson) }]);
+        // Where the host doesn't read this event's context, nothing is appended (P23; 2.10: Codex's PostToolUse until HC1).
+        return reachesModel(input, env, failed) ? text : '';
+    }
+    catch (e) {
+        hookError(failed ? 'post-bash-fail' : 'post-bash', e, env);
+        return '';
+    }
+}
+/** 1a's 3.4 steps 1 to 4. */
+function marksAndOffer(input, dir, env, failed) {
+    try {
+        // 1.
+        if (!skillsOnFast(env) || input?.tool_name !== 'Bash')
+            return { out: {}, marked: false };
+        const sid = [input.session_id, input.sessionId].find((v) => typeof v === 'string' && v !== '');
+        const id = typeof input.tool_use_id === 'string' ? input.tool_use_id : '';
+        const command = typeof input.tool_input?.command === 'string' ? input.tool_input.command : '';
+        if (!sid || !id)
+            return { out: {}, marked: false };
+        const now = trailNow(env);
+        const gate = existsSync(gateFilePath(sid, env));
+        // 2. The asked call ran: the person said yes.
+        if (!failed && gate)
+            markApproved(sid, id, now, env);
+        // 3.
+        const family = command ? checkFamilyOf(command, null) : null;
+        if (!gate && family === null)
+            return { out: {}, marked: false };
+        const tail = family === null ? undefined : cleanTail(resultText(input, failed));
+        appendPostMark(sid, { id, at: now.toISOString(), failed, ...(tail ? { tail } : {}) }, env);
+        // 4.
+        if (failed || family === null || factsOf(input, env).offerChannel !== 'post-tool' || !reachesModel(input, env, failed))
+            return { out: {}, marked: true };
+        return { out: postToolOffer(input, dir, env), marked: true };
+    }
+    catch (e) {
+        hookError(failed ? 'post-bash-fail' : 'post-bash', e, env);
+        return { out: {}, marked: false };
+    }
+}
+/** The facts of the host that sent `input` (c7: Codex's for a Codex payload, Claude Code's otherwise). */
+function factsOf(input, env) {
+    return hostFacts(env, detectHost(input).host);
+}
+/**
+ * This event's context reaches the model: PostToolUseFailure's where `failureContext`, PostToolUse's where
+ * `postToolContext`. Codex has no PostToolUseFailure: its failed calls come on PostToolUse.
+ */
+function reachesModel(input, env, failed) {
+    const host = detectHost(input).host;
+    const facts = hostFacts(env, host);
+    return failed && host !== 'codex' ? facts.failureContext : facts.postToolContext;
+}
+/** 1.7: whether a Codex shell output failed, from its header only; null when the text names no exit (P34). */
+export function codexFailed(toolResponse) {
+    const exit = codexExitOf(outputText(toolResponse));
+    return exit && 'code' in exit ? exit.code !== 0 : null;
+}
+/**
+ * 3.4, Codex: the exit from the output's header, then 1a's marks and 1b's wall part with the body as the rollout
+ * reader shows it (`Exit code N` in front when not 0, as Claude Code writes a failed result). Null when the text
+ * names no exit: nothing is written and the rollout's result is the only one (P34).
+ */
+export function codexPostBash(input, dir, env = process.env) {
+    const failed = codexFailed(input?.tool_response);
+    if (failed === null)
+        return null;
+    const text = outputText(input.tool_response);
+    const exit = codexExitOf(text);
+    const body = outputBody(text);
+    const shown = failed ? `Exit code ${exit.code}\n${body}` : body;
+    const as = failed ? { ...input, tool_response: undefined, error: shown } : { ...input, tool_response: shown };
+    return postBashRun(as, dir, env, failed);
+}
+/**
+ * What the call printed, as the transcript's result holds it: stdout then stderr joined with nothing, which is how
+ * Claude Code writes a Bash result (its stderr brings its own line break; checked on local transcripts, g7 review),
+ * or the error text (PostToolUseFailure's `error`).
+ */
+export function resultText(input, failed) {
+    if (failed)
+        return typeof input?.error === 'string' ? input.error : '';
+    const r = input?.tool_response;
+    if (typeof r === 'string')
+        return r;
+    if (!r || typeof r !== 'object')
+        return '';
+    return [r.stdout, r.stderr].filter((t) => typeof t === 'string').join('');
+}
+/**
+ * 3.4 step 4: the open run, with this mark folded, checks out (the turn's end is judged at Stop, when the reply is
+ * known); its sheet and today's pool day are written, and when 4.12 holds the offer waits, not yet shown.
+ */
+function postToolOffer(input, dir, env) {
+    const g = skillsGate(input, dir, env);
+    if (!g.ok || !g.ctx.learn)
+        return {};
+    const ctx = g.ctx;
+    const text = withSkillSession(ctx, { catchUp: true }, (st) => {
+        const run = currentRun(st);
+        if (!run || st.pendingOffer || !run.calls.length)
+            return null;
+        const verdict = checkedSuccess({ ...run, end: 'done' }, null);
+        if (!verdict.checked)
+            return null;
+        const sheet = writeRunSheet(run, verdict, { host: ctx.host, tier: ctx.tier, sessionHash: ctx.sessionHash, helpers: runHelpers(run) }, env);
+        notePool(run, ctx);
+        const due = offerDue({ run, verdict, sheet, st, ctx, channel: 'post-tool' });
+        if (!due.due)
+            return null;
+        st.pendingOffer = due.offer;
+        return postToolOfferText(due.offer);
+    });
+    return text ? { context: text } : {};
+}
+//# sourceMappingURL=post-bash.js.map

package/dist/claude/post-bash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-bash.js","sourceRoot":"","sources":["../../src/claude/post-bash.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAa,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEhE,wGAAwG;AACxG,MAAM,UAAU,cAAc,CAAC,KAAU,EAAE,GAAW,EAAE,MAAyB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK;IAC1G,OAAO,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC;AAClD,CAAC;AAID,kIAAkI;AAClI,MAAM,UAAU,WAAW,CAAC,KAAU,EAAE,GAAW,EAAE,MAAyB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK;IACvG,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,IAAI,GAAS,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AAClF,CAAC;AAED,6GAA6G;AAC7G,SAAS,QAAQ,CAAC,KAAU,EAAE,GAAW,EAAE,GAAsB,EAAE,MAAe,EAAE,IAAU;IAC5F,IAAI,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,SAAS,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,UAAU,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,8DAA8D;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtF,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACrB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5H,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,oHAAoH;QACpH,OAAO,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,6BAA6B;AAC7B,SAAS,aAAa,CAAC,KAAU,EAAE,GAAW,EAAE,GAAsB,EAAE,MAAe;IACrF,IAAI,CAAC;QACH,KAAK;QACL,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,SAAS,KAAK,MAAM;YAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACzF,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAuB,CAAC;QACrH,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,UAAU,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAChD,8CAA8C;QAC9C,IAAI,CAAC,MAAM,IAAI,IAAI;YAAE,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACrD,KAAK;QACL,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,IAAI,CAAC,IAAI,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAChF,cAAc,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3F,KAAK;QACL,IAAI,MAAM,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,YAAY,KAAK,WAAW,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACzJ,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC/D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,0GAA0G;AAC1G,SAAS,OAAO,CAAC,KAAc,EAAE,GAAsB;IACrD,OAAO,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAc,EAAE,GAAsB,EAAE,MAAe;IAC3E,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;IACpC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,MAAM,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;AACnF,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,WAAW,CAAC,YAAqB;IAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IACnD,OAAO,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAU,EAAE,GAAW,EAAE,MAAyB,OAAO,CAAC,GAAG;IACzF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAqB,CAAC;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAC9G,OAAO,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAU,EAAE,MAAe;IACpD,IAAI,MAAM;QAAE,OAAO,OAAO,KAAK,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,MAAM,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;IAC/B,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC3C,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAU,EAAE,GAAW,EAAE,GAAsB;IACpE,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;IAClB,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;QAC3D,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3I,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,GAAG,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAC1B,EAAE,CAAC,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC;QAC5B,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC"}

package/dist/claude/pre-bash-skills.d.ts

@@ -0,0 +1,21 @@
+import { shellWords } from '../skills/risk.js';
+import type { PreBashDecision } from './pre-bash.js';
+/** save-parse.ts SKILLS_ADD_RE, kept here so the fast path needn't load the save gate to test for it (a test holds them equal). */
+export declare const SKILLS_ADD: RegExp;
+/** save-parse.ts SAVE_GATE_RE (`skills add`, `skills lesson`, phase 2 `skills update`), kept here for the same reason (a test holds them equal). */
+export declare const SAVE_GATE: RegExp;
+/** How long a yes to the first step of a group covers its later steps. */
+export declare const APPROVED_MS: number;
+/** directive-words.ts FROM_TRAIL's who, kept here so the fast path loads nothing more (a test holds them equal). */
+export declare const TRAIL_WHO = "Trail, the tool this person installed to keep commands that worked as skills,";
+/** The words the shell runs, as the agent guard reads them (risk.ts shellWords): `tr''ail sk"ills" on`, a line continuation joined. */
+export declare const guardWords: typeof shellWords;
+/** 3.3. `command` is the shell call's command when the caller has it (any host's shape); else Claude Code's `tool_input.command`. */
+export declare function preBashSkills(input: any, dir: string, env?: NodeJS.ProcessEnv, command?: string): Promise<PreBashDecision | null>;
+/**
+ * Claude Code's own prompt reaches the person (D17): an interactive entrypoint (headless is decided by
+ * CLAUDE_CODE_ENTRYPOINT, as skillsGate decides it, D16, unless the lab's switch, D26), a permission mode the host
+ * asks in, and Claude Code itself.
+ */
+export declare function canAskHere(input: any, env?: NodeJS.ProcessEnv): boolean;
+//# sourceMappingURL=pre-bash-skills.d.ts.map

package/dist/claude/pre-bash-skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-bash-skills.d.ts","sourceRoot":"","sources":["../../src/claude/pre-bash-skills.ts"],"names":[],"mappings":"AAkCA,OAAO,EAAmD,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAIhG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIrD,mIAAmI;AACnI,eAAO,MAAM,UAAU,QAAqB,CAAC;AAC7C,oJAAoJ;AACpJ,eAAO,MAAM,SAAS,QAAuC,CAAC;AAC9D,0EAA0E;AAC1E,eAAO,MAAM,WAAW,QAAiB,CAAC;AAE1C,oHAAoH;AACpH,eAAO,MAAM,SAAS,kFAAkF,CAAC;AAIzG,uIAAuI;AACvI,eAAO,MAAM,UAAU,mBAAa,CAAC;AAErC,qIAAqI;AACrI,wBAAsB,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CA2BpJ;AA8CD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAOpF"}

package/dist/claude/pre-bash-skills.js

@@ -0,0 +1,253 @@
+/**
+ * The skills part of PreToolUse on Bash (design 3.3): the agent guard, the
+ * save gate, and the one ask before a step of a live run block that can't
+ * be undone.
+ *
+ * `pre-bash.ts` loads this file only when its prefilter holds (the command
+ * says `skills` or names a Trail hook script, or this session has a gate
+ * file), and only in the copy of the hooks that answers (0 rule 15). It runs
+ * before a shell command, so its static imports are the fast-path modules
+ * alone: the shell lexer, the gate file, the risk lists, the host facts and
+ * host detection, each loading only node:path and node:os. The save gate,
+ * the session state and compile load by `import()` on the save-gate path
+ * only.
+ *
+ * In order:
+ *  1. The agent guard, whatever the settings say: commands only the person
+ *     may run (turn skills or offers on, keep a held skill) and Trail's hook
+ *     scripts run by hand are denied.
+ *  2. Skills off: nothing more.
+ *  2b. 1b's sure-fail guardrail (4.11, recall half, subagents too): a
+ *     `timeout N` command on a machine with no `timeout`, when the person
+ *     kept the no-timeout guardrail, is denied and the deny marked for Stop's
+ *     count (no telemetry module on this path). Nothing else runs for it.
+ *  3. `skills add` or `skills lesson`: the save gate decides (a deny, or a
+ *     receipt and null); the lesson gate loads only for a lesson command.
+ *  4. A step of a live run block that can't be undone: Claude Code asks the
+ *     person once per group of such steps; where it can't ask (headless, a
+ *     mode that doesn't ask, another host), the step is denied and its
+ *     command shown for the person to run.
+ * Anything thrown lets the command through: a hook that can wedge every
+ * shell command is worse than none.
+ */
+import { normalizeCommand, programOf, simpleCommands, stepMatches } from '../trace/shell.js';
+import { markAsked, markHanded, readGateFile, skillsOnFast, trailHomeFast } from '../trace/gate-file.js';
+import { agentGuard, gatedAnywhere, gatedKind, gatedWhat, shellWords } from '../skills/risk.js';
+import { hostFacts, isTestHome, labInteractive } from '../skills/host-facts.js';
+import { detectHost } from '../trace/host.js';
+import { markDenied, sureFail } from '../trace/guard-fast.js';
+import { join } from 'node:path';
+/** save-parse.ts SKILLS_ADD_RE, kept here so the fast path needn't load the save gate to test for it (a test holds them equal). */
+export const SKILLS_ADD = /\bskills\s+add\b/;
+/** save-parse.ts SAVE_GATE_RE (`skills add`, `skills lesson`, phase 2 `skills update`), kept here for the same reason (a test holds them equal). */
+export const SAVE_GATE = /\bskills\s+(?:add|lesson|update)\b/;
+/** How long a yes to the first step of a group covers its later steps. */
+export const APPROVED_MS = 30 * 60 * 1000;
+const SHOWN_MAX = 500;
+/** directive-words.ts FROM_TRAIL's who, kept here so the fast path loads nothing more (a test holds them equal). */
+export const TRAIL_WHO = 'Trail, the tool this person installed to keep commands that worked as skills,';
+/** Past this a command is not split into its simple commands on the fast path (a 2 MB one takes seconds). */
+const SPLIT_MAX = 64 * 1024;
+/** The words the shell runs, as the agent guard reads them (risk.ts shellWords): `tr''ail sk"ills" on`, a line continuation joined. */
+export const guardWords = shellWords;
+/** 3.3. `command` is the shell call's command when the caller has it (any host's shape); else Claude Code's `tool_input.command`. */
+export async function preBashSkills(input, dir, env = process.env, command) {
+    try {
+        const cmd = typeof command === 'string' ? command : typeof input?.tool_input?.command === 'string' ? input.tool_input.command : '';
+        if (!cmd)
+            return null;
+        // 1. Any settings, no file read.
+        const guard = agentGuard(cmd);
+        if (guard)
+            return { permissionDecision: 'deny', reason: `trail: ${guard.reason}` };
+        // 2.
+        if (!skillsOnFast(env))
+            return null;
+        // 2b. 1b: the sure-fail guardrail. Its deny is the whole answer; Stop counts it from the mark (3.5 step 5).
+        const sure = sureFail(cmd, env);
+        if (sure) {
+            const sid = rawSessionId(input);
+            if (sid)
+                markDenied(sid, cmd, env, nowOf(env));
+            return { permissionDecision: 'deny', reason: sure.deny };
+        }
+        // 3. The only path that loads more code.
+        if (SAVE_GATE.test(cmd) || SAVE_GATE.test(guardWords(cmd))) {
+            const { saveOrLessonGate } = await import('../skills/save-gate.js');
+            return saveOrLessonGate(input, dir, env);
+        }
+        // 4.
+        return gatedAsk(input, cmd, env);
+    }
+    catch (e) {
+        await logThrow(e, env);
+        return null;
+    }
+}
+/**
+ * 0 rule 5: one line in `state/hook-errors.log`, as skills-hook-util's hookError writes it (the time, the hook, the
+ * error's name and file, never its message), with node:fs from the process so the fast path loads nothing more.
+ */
+async function logThrow(e, env) {
+    try {
+        const fs = process.getBuiltinModule('node:fs');
+        const err = e instanceof Error ? e : new Error('not an Error');
+        const where = (err.stack ?? '').split('\n').slice(1).map((l) => /\(?([^\s()]+:\d+):\d+\)?$/.exec(l.trim())?.[1]).find(Boolean) ?? '';
+        const file = (where.split('/').pop() ?? '').replace(/[^\w.:-]/g, '');
+        const dir = join(trailHomeFast(env), 'state');
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        const path = join(dir, 'hook-errors.log');
+        // Non-blocking, and only into a regular file: a FIFO planted here would hold PreToolUse (D100 18).
+        const { O_WRONLY, O_APPEND, O_CREAT, O_NOFOLLOW, O_NONBLOCK } = fs.constants;
+        const fd = fs.openSync(path, O_WRONLY | O_APPEND | O_CREAT | O_NOFOLLOW | (O_NONBLOCK ?? 0), 0o600);
+        try {
+            if (!fs.fstatSync(fd).isFile())
+                return;
+            fs.writeSync(fd, `${new Date().toISOString()} pre-bash ${err.name.replace(/[^\w]/g, '').slice(0, 40)}${file ? ` ${file}` : ''}\n`);
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+    }
+    catch {
+        /* the log is best effort; skills-hook-util cuts it to 100 KB on its next write */
+    }
+}
+/** The session id as payloadSessionId reads it; gate-file.ts turns it into a file name the same way. */
+function rawSessionId(input) {
+    const p = input && typeof input === 'object' ? input : {};
+    const id = [p.session_id, p.sessionId, p.conversation_id].find((v) => typeof v === 'string' && v !== '');
+    return typeof id === 'string' ? id : null;
+}
+/** trailNow without the settings module: TRAIL_TEST_NOW only in a test home (0 rule 10). */
+function nowOf(env) {
+    const fixed = env.TRAIL_TEST_NOW;
+    if (fixed && isTestHome(env)) {
+        const d = new Date(fixed);
+        if (!Number.isNaN(d.getTime()))
+            return d;
+    }
+    return new Date();
+}
+/**
+ * Claude Code's own prompt reaches the person (D17): an interactive entrypoint (headless is decided by
+ * CLAUDE_CODE_ENTRYPOINT, as skillsGate decides it, D16, unless the lab's switch, D26), a permission mode the host
+ * asks in, and Claude Code itself.
+ */
+export function canAskHere(input, env = process.env) {
+    const host = detectHost(input).host;
+    const ep = env.CLAUDE_CODE_ENTRYPOINT;
+    const script = (typeof ep === 'string' && ep.startsWith('sdk')) || (!ep && host === 'claude');
+    if (script && !labInteractive(env))
+        return false;
+    const mode = typeof input?.permission_mode === 'string' ? input.permission_mode : '';
+    return host === 'claude' && hostFacts(env, host).askModes.includes(mode);
+}
+/**
+ * The gated step this command runs: newest live block first, each group, each step. First by the step's own
+ * text (at the start of the command or after `&&` / `;`); then by what the command does, for each simple
+ * command in it (`true || npm publish x`, `echo y | npm publish x`), against a step of the same kind and program.
+ */
+function findStep(gate, cmd) {
+    const live = [...gate.live].reverse();
+    if (cmd.length > SPLIT_MAX) {
+        // Too long to split piece by piece inside the hook's 5 s: any gated pattern anywhere in it is that group's ask (errs safe).
+        const kinds = gatedAnywhere(cmd);
+        for (const l of live)
+            for (const [gi, group] of l.groups.entries())
+                if (kinds.has(group.kind) && group.steps[0])
+                    return { live: l, gi, group, step: group.steps[0] };
+        return null;
+    }
+    for (const l of live) {
+        for (const [gi, group] of l.groups.entries()) {
+            for (const step of group.steps)
+                if (stepMatches(step.text, cmd, l.params))
+                    return { live: l, gi, group, step };
+        }
+    }
+    const simple = simpleCommands(cmd).map((s) => ({ kind: gatedKind(s), program: programOf(s) })).filter((s) => s.kind !== null);
+    if (!simple.length)
+        return null;
+    for (const l of live) {
+        for (const [gi, group] of l.groups.entries()) {
+            for (const step of group.steps) {
+                if (simple.some((s) => s.kind === group.kind && s.program === step.program))
+                    return { live: l, gi, group, step };
+            }
+        }
+    }
+    return null;
+}
+/** A name or command as one line of the reason: spaces collapsed, cut. */
+function oneLine(text, max) {
+    const t = String(text ?? '').replace(/[\u0000-\u001f\u007f]+/g, ' ').replace(/\s+/g, ' ').trim();
+    return t.length > max ? `${t.slice(0, max - 1)}…` : t;
+}
+/**
+ * For the person's own prompt (Claude Code shows them the reason): `step 5`, `steps 5 and 6; your yes here is for
+ * both`, `steps 4, 5 and 6; your yes here is for all 3`. The agent's words never say what a yes covers (D101).
+ */
+function stepWords(group) {
+    const ns = group.steps.map((s) => s.n);
+    if (ns.length === 1)
+        return `step ${ns[0]}`;
+    const list = `${ns.slice(0, -1).join(', ')} and ${ns[ns.length - 1]}`;
+    return `steps ${list}; your yes here is for ${ns.length === 2 ? 'both' : `all ${ns.length}`}`;
+}
+/**
+ * The command is that step exactly, its params filled as the block showed them: a yes covers what the person was
+ * told, never more (`git push origin beta --force`). A step with a param the block left blank is never covered.
+ */
+function sameStep(cmd, step, params) {
+    let plain = true;
+    const filled = step.replace(/\{([A-Za-z_]\w*)\}/g, (m, k) => {
+        const v = params[k];
+        if (typeof v !== 'string')
+            return m;
+        // A value is a version, a sha, a branch: one that carries more shell (`x && npm publish y`, `$(…)`) was never what the person saw asked.
+        if (!PLAIN_VALUE.test(v))
+            plain = false;
+        return v;
+    });
+    return plain && !/\{[A-Za-z_]\w*\}/.test(filled) && normalizeCommand(cmd) === normalizeCommand(filled);
+}
+/** recall.ts SAFE_VALUE: the shape a filled value must have for a yes to cover the step it is in. */
+const PLAIN_VALUE = /^[A-Za-z0-9][A-Za-z0-9._@:+\/-]{0,99}$/;
+/** 3.3 step 4. */
+function gatedAsk(input, cmd, env) {
+    const sid = rawSessionId(input);
+    if (!sid)
+        return null;
+    const gate = readGateFile(sid, env);
+    if (!gate)
+        return null;
+    const hit = findStep(gate, cmd);
+    if (!hit)
+        return null;
+    const { live, gi, group, step } = hit;
+    const what = gatedWhat(group.kind, step.text, live.params);
+    const name = oneLine(live.name, 80);
+    if (!canAskHere(input, env)) {
+        // D137: the step is handed to the person; credit counts it so, and their next ask of this job continues the run.
+        try {
+            markHanded(sid, live.injId, step.n, nowOf(env), env);
+        }
+        catch { /* the deny stands either way */ }
+        return {
+            permissionDecision: 'deny',
+            // D101: who stopped it and why, and what to do instead; never a bare order.
+            reason: `trail: ${TRAIL_WHO} stopped step ${step.n} of skill ${name}: it ${what} and can't be undone, and this session can't ask the person first. So don't run it, and don't try it again this turn, even after a yes in chat; ask the person to run this command in their own terminal: ${oneLine(cmd, SHOWN_MAX)}`,
+        };
+    }
+    const now = nowOf(env);
+    const since = group.approvedAt === null ? NaN : now.getTime() - Date.parse(group.approvedAt);
+    // A yes from the last 30 minutes; one stamped after now (a clock that moved back, a file written by hand) covers nothing.
+    const approved = since >= 0 && since <= APPROVED_MS;
+    if (approved && typeof group.askedStep === 'number' && step.n > group.askedStep && sameStep(cmd, step.text, live.params))
+        return null;
+    const toolUseId = typeof input?.tool_use_id === 'string' ? input.tool_use_id : '';
+    markAsked(sid, live.injId, gi, toolUseId, now, env, step.n);
+    return { permissionDecision: 'ask', reason: `trail: this ${what} and can't be undone (${name}, ${stepWords(group)}).` };
+}
+//# sourceMappingURL=pre-bash-skills.js.map

package/dist/claude/pre-bash-skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-bash-skills.js","sourceRoot":"","sources":["../../src/claude/pre-bash-skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAiC,MAAM,uBAAuB,CAAC;AACxI,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAChG,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,mIAAmI;AACnI,MAAM,CAAC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAC7C,oJAAoJ;AACpJ,MAAM,CAAC,MAAM,SAAS,GAAG,oCAAoC,CAAC;AAC9D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,oHAAoH;AACpH,MAAM,CAAC,MAAM,SAAS,GAAG,+EAA+E,CAAC;AACzG,6GAA6G;AAC7G,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5B,uIAAuI;AACvI,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC;AAErC,qIAAqI;AACrI,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAU,EAAE,GAAW,EAAE,MAAyB,OAAO,CAAC,GAAG,EAAE,OAAgB;IACjH,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACnI,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,iCAAiC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK;YAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACnF,KAAK;QACL,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,4GAA4G;QAC5G,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,GAAG;gBAAE,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3D,CAAC;QACD,yCAAyC;QACzC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACpE,OAAO,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK;QACL,OAAO,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,QAAQ,CAAC,CAAU,EAAE,GAAsB;IACxD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAc,CAAC;QAC5D,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACrI,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;QAC9C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAC1C,mGAAmG;QACnG,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC;QAC7E,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACpG,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO;YACvC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,aAAa,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrI,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kFAAkF;IACpF,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,SAAS,YAAY,CAAC,KAAU;IAC9B,MAAM,CAAC,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACzG,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,4FAA4F;AAC5F,SAAS,KAAK,CAAC,GAAsB;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,CAAC;IACjC,IAAI,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,IAAI,EAAE,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAU,EAAE,MAAyB,OAAO,CAAC,GAAG;IACzE,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;IACpC,MAAM,EAAE,GAAG,GAAG,CAAC,sBAAsB,CAAC;IACtC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC9F,IAAI,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,KAAK,EAAE,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,OAAO,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAID;;;;GAIG;AACH,SAAS,QAAQ,CAAC,IAAc,EAAE,GAAW;IAC3C,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACtC,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,4HAA4H;QAC5H,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE;gBAAE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACrK,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK;gBAAE,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACjH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9H,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACnH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,SAAS,OAAO,CAAC,IAAY,EAAE,GAAW;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjG,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,KAAgB;IACjC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;IACtE,OAAO,SAAS,IAAI,0BAA0B,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;AAChG,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAY,EAAE,MAA8B;IACzE,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE;QAClE,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,yIAAyI;QACzI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,KAAK,GAAG,KAAK,CAAC;QACxC,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzG,CAAC;AAED,qGAAqG;AACrG,MAAM,WAAW,GAAG,wCAAwC,CAAC;AAE7D,kBAAkB;AAClB,SAAS,QAAQ,CAAC,KAAU,EAAE,GAAW,EAAE,GAAsB;IAC/D,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QAC5B,iHAAiH;QACjH,IAAI,CAAC;YAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;QACxG,OAAO;YACL,kBAAkB,EAAE,MAAM;YAC1B,4EAA4E;YAC5E,MAAM,EAAE,UAAU,SAAS,iBAAiB,IAAI,CAAC,CAAC,aAAa,IAAI,QAAQ,IAAI,6MAA6M,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE;SACtT,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7F,0HAA0H;IAC1H,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,WAAW,CAAC;IACpD,IAAI,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACtI,MAAM,SAAS,GAAG,OAAO,KAAK,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5D,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,IAAI,yBAAyB,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AAC1H,CAAC"}

package/dist/claude/pre-bash.d.ts

@@ -0,0 +1,50 @@
+/** What the hook can answer: Claude Code's PreToolUse permission decision and its reason. */
+export interface PreBashDecision {
+    permissionDecision: 'allow' | 'ask' | 'deny';
+    reason: string;
+}
+/**
+ * The decision for one Bash call, or null to let it run untouched. Phase 0:
+ * always null. Never throws.
+ */
+export declare function preBash(_input: unknown, _dir: string): PreBashDecision | null;
+/**
+ * detectHost(input).host === 'codex', without loading trace/host.ts (the fast path loads nothing it needn't). Read
+ * only for a decision about to be sent.
+ */
+export declare function codexPayload(input: unknown): boolean;
+/**
+ * The hook's stdout for `input`: the decision in Claude Code's PreToolUse
+ * shape, or '' when there is none, `decide` throws, or what it returns isn't
+ * a decision the host understands.
+ *
+ * Codex (P37, P38): its hooks can't ask (an `ask` fails the hook run and the
+ * command runs, D17), so an ask goes out as a deny with the same reason; and
+ * an `allow` without `updatedInput` drops the hook's whole output there, so
+ * Trail never sends one. The deny is the whole output.
+ */
+export declare function preBashOutput(input: unknown, dir: string, decide?: (input: unknown, dir: string) => PreBashDecision | null): string;
+/**
+ * The command of a shell call, in Claude Code's and Cursor's shape
+ * (`tool_name`, `tool_input.command`) or Copilot CLI's (`toolName`,
+ * `toolArgs` as JSON text or an object), or null when the payload isn't a
+ * shell call. Copilot may run this hook for every tool whatever the matcher
+ * says, so the hook checks for itself.
+ */
+export declare function shellCommand(input: unknown): string | null;
+/** The longest the payload may take to arrive. Hosts write it at once and close stdin; this bounds one that doesn't, well inside the 5 s the hook is given. */
+export declare const STDIN_WAIT_MS = 2000;
+/** A payload over this is read to its end and dropped: no shell command worth checking is this long. */
+export declare const STDIN_MAX_BYTES: number;
+/** gate-file.ts gateFilePath without loading it: the same file name for the same id (a test holds them equal). */
+export declare function gateFilePathFast(input: Record<string, unknown>, env: NodeJS.ProcessEnv): string | null;
+/**
+ * Design 1.7: whether the skills part has anything to look at, decided without loading it. The command
+ * (read as the agent guard reads it: quotes and backslashes don't change the words) says `skills` or names a
+ * Trail hook script, or this session has a gate file (a run block with a step that can't be undone is live).
+ * Every other shell command pays one regex and one stat.
+ */
+export declare function skillsPrefilter(input: Record<string, unknown>, command: string, env?: NodeJS.ProcessEnv): boolean;
+/** The shim's entry: `node trail-hooks.cjs pre-bash`. Never rejects. `decide` is preBash; tests pass their own. */
+export declare function main(event?: string, decide?: (input: unknown, dir: string) => PreBashDecision | null): Promise<void>;
+//# sourceMappingURL=pre-bash.d.ts.map

package/dist/claude/pre-bash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-bash.d.ts","sourceRoot":"","sources":["../../src/claude/pre-bash.ts"],"names":[],"mappings":"AA4BA,6FAA6F;AAC7F,MAAM,WAAW,eAAe;IAC9B,kBAAkB,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC;CAChB;AAID;;;GAGG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAE7E;AAKD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAapD;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,eAAe,GAAG,IAAc,GAAG,MAAM,CAa5I;AAKD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAa1D;AAOD,+JAA+J;AAC/J,eAAO,MAAM,aAAa,OAAO,CAAC;AAClC,wGAAwG;AACxG,eAAO,MAAM,eAAe,QAAkB,CAAC;AAmF/C,kHAAkH;AAClH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,IAAI,CAStG;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAS9H;AAED,mHAAmH;AACnH,wBAAsB,IAAI,CAAC,KAAK,SAAa,EAAE,MAAM,GAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,eAAe,GAAG,IAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BvI"}