@nanonets/graft 0.24.0 → 0.25.0

package/dist/trace/skill-session.js

@@ -0,0 +1,232 @@
+/**
+ * The skills session: the gate every skills hook starts with (design 3.0),
+ * and the one locked read-modify-write of `~/.trail/sessions/<id>.json`
+ * (2.8). That file holds two keys: `trace`, the transcript cursor, and
+ * `skills`, this session's `SkillSessionState`. The catch-up (read what the
+ * transcript gained, fold it, write sheets for the runs it closed) runs
+ * inside the same lock as the state, so the cursor and the state can never
+ * disagree.
+ *
+ * Two gates (0 rule 2): `fold` (runs and run sheets) needs an interactive,
+ * top-level session outside CI and scratch folders, on any host; `learn`
+ * (pool days, offers, credit, live saves) needs that and tier A. Headless
+ * is decided by `CLAUDE_CODE_ENTRYPOINT` (D16), and on Codex by the rollout's
+ * first line (4.17: `codex exec` and the MCP server); the lab's switch works only in
+ * a lab box (D26); what the payload says about where a prompt came from is
+ * never read (D34).
+ */
+import { createHash } from 'node:crypto';
+import { tmpdir } from 'node:os';
+import { resolve, sep } from 'node:path';
+import { payloadSessionId } from '../claude/hook-io.js';
+import { repoPlace } from '../notes/home.js';
+import { trailHome } from '../notes/trail-home.js';
+import { labInteractive, readSettings, trailNow } from '../skills/settings.js';
+import { hostTier } from '../skills/host-facts.js';
+import { codexMeta } from './codex.js';
+import { readJsonSafe, withLock, writePrivate } from '../util/private-fs.js';
+import { CLAUDE_DIALECT, dialectFor } from './dialect.js';
+import { sessionPath, takePostMarks } from './gate-file.js';
+import { detectHost } from './host.js';
+import { checkedSuccess, foldEvents, runHelpers, writeRunSheet } from './runs.js';
+export { housekeeping } from './housekeeping.js';
+const set = (v) => typeof v === 'string' && v !== '' && v !== '0' && v.toLowerCase() !== 'false';
+function scratchFolder(cwd) {
+    // Windows paths ignore case (c:\ and C:\ are one folder) and resolve() gives them '\'.
+    const fold = (x) => (process.platform === 'win32' ? x.toLowerCase() : x);
+    const p = fold(resolve(cwd));
+    if (`${p}${sep}`.includes(`${sep}scratchpad${sep}`))
+        return true;
+    const roots = [tmpdir(), '/tmp', '/private/tmp', '/var/folders', '/private/var/folders'].map((r) => fold(resolve(r)));
+    return roots.some((r) => p === r || p.startsWith(r + sep));
+}
+/** 3.0. */
+export function skillsGate(input, dir, env = process.env, now) {
+    if (set(env.TRAIL_NO_HOOKS))
+        return { ok: false, why: 'no-hooks' };
+    if (readSettings(env).skills !== 'on')
+        return { ok: false, why: 'off' };
+    const p = input && typeof input === 'object' && !Array.isArray(input) ? input : {};
+    const rawId = [p.session_id, p.sessionId, p.conversation_id].find((v) => typeof v === 'string' && v !== '');
+    if (rawId === undefined)
+        return { ok: false, why: 'no-session' };
+    const sessionId = payloadSessionId(p);
+    const info = detectHost(p);
+    const tier = hostTier(info.host, info.tier, env);
+    const subagent = info.subagent === true || (typeof p.agent_id === 'string' && p.agent_id !== '');
+    const transcript = typeof p.transcript_path === 'string' ? p.transcript_path : typeof p.transcriptPath === 'string' ? p.transcriptPath : null;
+    // 4.17: Codex says nothing of how it was started in the payload; the rollout's first line does (one positioned read).
+    const codex = info.host === 'codex';
+    const meta = codex && transcript ? codexMeta(transcript) : null;
+    const codexScript = !!meta && (meta.originator === 'codex_exec' || meta.source === 'exec' || meta.source === 'mcp');
+    // CLAUDE_CODE_ENTRYPOINT is Claude Code's: unset means a script started it. Other hosts never set it.
+    const ep = env.CLAUDE_CODE_ENTRYPOINT;
+    // `sdk` with or without a suffix, as the transcript reader treats it (claude.ts).
+    const script = (typeof ep === 'string' && ep.startsWith('sdk')) || (!ep && info.host === 'claude') || codexScript;
+    const entry = script && !labInteractive(env) ? 'headless' : 'interactive';
+    const cwd = typeof p.cwd === 'string' && p.cwd ? p.cwd : dir;
+    const learnOff = subagent ? 'subagent'
+        // A Codex session kept nowhere on disk (R18): nothing to fold or learn from, recall only.
+        : codex && !transcript ? 'ephemeral'
+            : entry === 'headless' ? 'headless'
+                : set(env.CI) || set(env.GITHUB_ACTIONS) ? 'ci'
+                    : scratchFolder(cwd) ? 'scratch'
+                        : tier !== 'A' ? 'host'
+                            : null;
+    const place = repoPlace(cwd, env);
+    return {
+        ok: true,
+        ctx: {
+            sessionId,
+            sessionHash: createHash('sha256').update(sessionId).digest('hex').slice(0, 12),
+            host: info.host,
+            tier,
+            entry,
+            permissionMode: typeof p.permission_mode === 'string' ? p.permission_mode : null,
+            subagent,
+            fold: learnOff === null || learnOff === 'host',
+            learn: learnOff === null,
+            learnOff,
+            dir,
+            checkout: place.git ? place.checkout : '',
+            repoKey: place.key,
+            transcriptPath: transcript || null,
+            env,
+            now: now ?? trailNow(env),
+            ...(codex ? { codexMeta: meta } : {}),
+        },
+    };
+}
+function newState(ctx) {
+    return {
+        v: 1, sessionHash: ctx.sessionHash, host: ctx.host, tier: ctx.tier, learn: ctx.learn, scopeKeys: ctx.repoKey ? [ctx.repoKey] : [],
+        epoch: 0, pendingBoundary: false, runs: [], pendingOffer: null, offerUsed: false, offerUsedBy: null, saveRequest: null,
+        injected: [], credit: [], tampered: null, updatedAt: ctx.now.toISOString(),
+    };
+}
+/** The stored state when it has the shape this version writes; null otherwise (a new one is made). */
+function parseState(v) {
+    if (!v || typeof v !== 'object' || Array.isArray(v))
+        return null;
+    const s = v;
+    if (s.v !== 1 || typeof s.epoch !== 'number' || !Array.isArray(s.runs) || !Array.isArray(s.injected) || !Array.isArray(s.credit))
+        return null;
+    if (!s.runs.every((r) => r && typeof r.id === 'string' && Array.isArray(r.calls)))
+        return null;
+    return s;
+}
+const statePath = (ctx) => sessionPath(ctx.sessionId, '.json', ctx.env);
+function readBox(path) {
+    const raw = readJsonSafe(path);
+    return raw && typeof raw === 'object' && !Array.isArray(raw) ? raw : {};
+}
+/** Writes `skills`, keeping `trace` (just moved by the catch-up) and any other key as they are on disk now. */
+function save(path, st) {
+    const box = readBox(path);
+    box.skills = st;
+    writePrivate(path, JSON.stringify(box));
+}
+function foldContext(ctx, marks) {
+    const places = new Map();
+    const place = (p) => {
+        let v = places.get(p);
+        if (!v) {
+            v = repoPlace(p, ctx.env);
+            places.set(p, v);
+        }
+        return v;
+    };
+    return {
+        sessionHash: ctx.sessionHash,
+        checkout: ctx.checkout,
+        repoKey: ctx.repoKey,
+        repoKeyOf: (p) => (place(p).git ? place(p).key : null),
+        rootOf: (p) => (place(p).git ? place(p).checkout : null),
+        trailHome: trailHome(ctx.env),
+        transcriptPath: ctx.transcriptPath ?? '',
+        marks,
+        now: ctx.now,
+    };
+}
+/** Sheets for closed runs with steps whose calls are still here (the ones this fold closed, or a write that failed before). */
+function writeSheets(st, closed, ctx) {
+    const runs = new Set([...closed, ...st.runs.filter((r) => r.closed)]);
+    for (const run of runs) {
+        if (!run.closed || run.stepCalls <= 0 || !run.calls.length)
+            continue;
+        try {
+            writeRunSheet(run, checkedSuccess(run, null), { host: ctx.host, tier: ctx.tier, sessionHash: ctx.sessionHash, helpers: runHelpers(run) }, ctx.env);
+        }
+        catch {
+            /* the calls stay, so the next catch-up writes it */
+        }
+    }
+}
+/** Closed runs keep their calls only until their sheet is written (2.8). */
+function flushCalls(st) {
+    for (const r of st.runs)
+        if (r.closed && r.calls.length && (r.sheet !== 'none' || r.stepCalls <= 0))
+            r.calls = [];
+}
+/**
+ * Locked read-modify-write of the `skills` key of sessions/<id>.json (lock wait default 200 ms).
+ * With catchUp (ctx.fold only): takePostMarks, then the host dialect's readNewEvents(transcript, sessionStatePath(id))
+ * (4.16; a host with no dialect keeps 1a's reader, so J24's Cursor and Copilot payloads still fold and are held)
+ * then foldEvents, inside the
+ * same lock (the `trace` cursor lives in the same file); then, for every run the fold closed with
+ * stepCalls > 0 and sheet 'none', writeRunSheet(run, checkedSuccess(run, null)), then its calls are emptied.
+ * Returns undefined when the lock timed out: the caller fails open.
+ *
+ * `fn` still sees the closed runs' calls (in `fold.closed`); they are emptied before the state is written. When `fn`
+ * throws, the folded state is written as it was before `fn`, so the cursor that moved and the state agree.
+ * `prepare` runs on the state first, before the catch-up: the Codex prompt hook records the prompt's keyed hash
+ * there, so a typed line already in the rollout counts in this same read (P30).
+ */
+export function withSkillSession(ctx, opts, fn) {
+    const path = statePath(ctx);
+    const done = withLock(path, () => {
+        const st = parseState(readBox(path).skills) ?? newState(ctx);
+        let fold = null;
+        // 4.17: the rollout's first line, kept once; the prompt hook's typed hashes stay as they are.
+        if (ctx.host === 'codex' && ctx.codexMeta && !st.codex?.meta)
+            st.codex = { meta: ctx.codexMeta, typedShas: st.codex?.typedShas ?? [] };
+        opts.prepare?.(st);
+        const dialect = dialectFor(ctx.host) ?? CLAUDE_DIALECT;
+        if (opts.catchUp && ctx.fold && ctx.transcriptPath) {
+            const marks = takePostMarks(ctx.sessionId, ctx.env);
+            const events = dialect.readNewEvents(ctx.transcriptPath, path, { env: ctx.env, state: st });
+            const res = foldEvents(st, events, foldContext(ctx, marks));
+            writeSheets(st, res.closed, ctx);
+            fold = { ...res, events };
+        }
+        const before = structuredClone(st);
+        let value;
+        try {
+            value = fn(st, fold);
+        }
+        catch (e) {
+            flushCalls(before);
+            save(path, before);
+            throw e;
+        }
+        flushCalls(st);
+        save(path, st);
+        return value;
+    }, opts.waitMs ?? 200);
+    return done.ok ? done.value : undefined;
+}
+/** Unlocked read (`trail skills`). A new state when none. */
+export function loadSkillSession(ctx) {
+    return parseState(readBox(statePath(ctx)).skills) ?? newState(ctx);
+}
+export function currentRun(st) {
+    const last = st.runs[st.runs.length - 1];
+    return last && !last.closed ? last : null;
+}
+export function injectedThisEpoch(st) {
+    return st.injected.filter((i) => i.epoch === st.epoch);
+}
+export function liveInjections(st) {
+    return st.injected.filter((i) => i.live);
+}
+//# sourceMappingURL=skill-session.js.map

package/dist/trace/skill-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-session.js","sourceRoot":"","sources":["../../src/trace/skill-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAkB,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE7E,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAqC,MAAM,WAAW,CAAC;AAGrH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AA4BjD,MAAM,GAAG,GAAG,CAAC,CAAqB,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;AAErH,SAAS,aAAa,CAAC,GAAW;IAChC,uFAAuF;IACvF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,IAAI,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,GAAG,aAAa,GAAG,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtH,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,WAAW;AACX,MAAM,UAAU,UAAU,CAAC,KAAU,EAAE,GAAW,EAAE,MAAyB,OAAO,CAAC,GAAG,EAAE,GAAU;IAClG,IAAI,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;IACnE,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACxE,MAAM,CAAC,GAA4B,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5G,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5G,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;IACjG,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9I,sHAAsH;IACtH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;IACpH,sGAAsG;IACtG,MAAM,EAAE,GAAG,GAAG,CAAC,sBAAsB,CAAC;IACtC,kFAAkF;IAClF,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,WAAW,CAAC;IAClH,MAAM,KAAK,GAAqB,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;IAC5F,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7D,MAAM,QAAQ,GAAuB,QAAQ,CAAC,CAAC,CAAC,UAAU;QACxD,0FAA0F;QAC1F,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;YACpC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU;gBACnC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;oBAC/C,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;wBAChC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM;4BACvB,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG,EAAE;YACH,SAAS;YACT,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC9E,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI;YACJ,KAAK;YACL,cAAc,EAAE,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI;YAChF,QAAQ;YACR,IAAI,EAAE,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,MAAM;YAC9C,KAAK,EAAE,QAAQ,KAAK,IAAI;YACxB,QAAQ;YACR,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YACzC,OAAO,EAAE,KAAK,CAAC,GAAG;YAClB,cAAc,EAAE,UAAU,IAAI,IAAI;YAClC,GAAG;YACH,GAAG,EAAE,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;QACjI,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI;QACtH,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE;KAC3E,CAAC;AACJ,CAAC;AAED,sGAAsG;AACtG,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,CAAC,GAAG,CAAsB,CAAC;IACjC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9I,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/F,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;AAEjF,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,GAAG,GAAG,YAAY,CAAU,IAAI,CAAC,CAAC;IACxC,OAAO,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;AACvG,CAAC;AAED,+GAA+G;AAC/G,SAAS,IAAI,CAAC,IAAY,EAAE,EAAqB;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAChB,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,KAA2B;IAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE;QAC1B,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;QAC7B,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE;QACxC,KAAK;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;KACb,CAAC;AACJ,CAAC;AAED,+HAA+H;AAC/H,SAAS,WAAW,CAAC,EAAqB,EAAE,MAAkB,EAAE,GAAY;IAC1E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAW,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM;YAAE,SAAS;QACrE,IAAI,CAAC;YACH,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACrJ,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,UAAU,CAAC,EAAqB;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI;QAAE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;YAAE,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;AACpH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAI,GAAY,EAAE,IAAsF,EACtI,EAAsF;IACtF,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE;QAC/B,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,IAAI,GAAmD,IAAI,CAAC;QAChE,8FAA8F;QAC9F,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI;YAAE,EAAE,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;QACvI,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC;QACvD,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5F,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YAC5D,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACjC,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,KAAQ,CAAC;QACb,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACnB,MAAM,CAAC,CAAC;QACV,CAAC;QACD,UAAU,CAAC,EAAE,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAqB;IAC9C,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAqB;IACrD,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAqB;IAClD,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC"}

package/dist/trace/tamper.d.ts

@@ -0,0 +1,12 @@
+export interface TamperCtx {
+    trailHome: string;
+    transcriptPath: string;
+    home?: string;
+    /** The folder the agent's shell was in when the call started (the transcript entry's `cwd`). */
+    folder?: string | null;
+}
+/** A mark `tamperOf` gives for Trail's hook script run by hand, not a write (D93: the refusal says so). */
+export declare const isHookScriptTamper: (what: string) => boolean;
+/** The first rule a call breaks, as '<tool> <path or program>'; null when none. */
+export declare function tamperOf(name: string, input: unknown, raw: string | null, ctx: TamperCtx): string | null;
+//# sourceMappingURL=tamper.d.ts.map

package/dist/trace/tamper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tamper.d.ts","sourceRoot":"","sources":["../../src/trace/tamper.ts"],"names":[],"mappings":"AAkCA,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAgUD,2GAA2G;AAC3G,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,KAAG,OAA+F,CAAC;AAElJ,mFAAmF;AACnF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAqBxG"}