@pentoshi/clai 3.6.0 → 3.7.2

package/dist/safety/engagement-policy.js

@@ -0,0 +1,198 @@
+import { normalizeScopeTarget, targetInScope } from "../store/scope.js";
+const methodAllowed = (method, scope) => {
+    if (!scope.allowedMethods?.length)
+        return true;
+    return scope.allowedMethods.some((allowed) => allowed.toUpperCase() === method.toUpperCase());
+};
+const pathAllowed = (path, scope) => {
+    if (!scope.allowedPaths?.length)
+        return true;
+    const normalized = path.startsWith("/") ? path : `/${path}`;
+    return scope.allowedPaths.some((allowed) => {
+        const prefix = allowed.startsWith("/") ? allowed : `/${allowed}`;
+        return normalized === prefix || normalized.startsWith(prefix.endsWith("/") ? prefix : `${prefix}/`);
+    });
+};
+export function evaluateEngagementAction(scope, action, now = Date.now()) {
+    const target = normalizeScopeTarget(action.target);
+    const deny = (reason) => ({
+        allowed: false,
+        reason,
+        normalizedTarget: target,
+        capability: action.capability,
+        phase: action.phase,
+    });
+    if (!scope || !isScopeActiveAt(scope, now))
+        return deny("engagement scope is missing, empty, or outside its time window");
+    if (!targetInScope(target, scope))
+        return deny(`target is excluded or not authorized: ${target}`);
+    if (scope.allowedPhases?.length && !scope.allowedPhases.includes(action.phase)) {
+        return deny(`phase is not authorized: ${action.phase}`);
+    }
+    if (action.port !== undefined && scope.allowedPorts?.length && !scope.allowedPorts.includes(action.port)) {
+        return deny(`port is not authorized: ${action.port}`);
+    }
+    if (!methodAllowed(action.method ?? "GET", scope))
+        return deny(`HTTP method is not authorized: ${action.method}`);
+    if (!pathAllowed(action.path ?? "/", scope))
+        return deny(`path is not authorized: ${action.path}`);
+    for (const redirect of action.redirectChain ?? []) {
+        if (!targetInScope(redirect, scope))
+            return deny(`redirect destination is excluded or out of scope: ${normalizeScopeTarget(redirect)}`);
+    }
+    for (const address of action.resolvedAddresses ?? []) {
+        if (!targetInScope(address, scope))
+            return deny(`DNS resolution escaped authorized assets: ${address}`);
+    }
+    return {
+        allowed: true,
+        reason: "authorized by engagement scope",
+        normalizedTarget: target,
+        capability: action.capability,
+        phase: action.phase,
+    };
+}
+function isScopeActiveAt(scope, now) {
+    if (!scope.authorizedTargets?.length)
+        return false;
+    if (!scope.expiresAt)
+        return true;
+    const expires = Date.parse(scope.expiresAt);
+    return Number.isNaN(expires) || now <= expires;
+}
+/** In-memory token bucket/concurrency enforcement; inject clock for deterministic tests. */
+export class EngagementPolicyEngine {
+    now;
+    tokens = 0;
+    lastRefill = 0;
+    active = 0;
+    scopeIdentity = "";
+    constructor(now = Date.now) {
+        this.now = now;
+    }
+    acquire(scope, action) {
+        const decision = evaluateEngagementAction(scope, action, this.now());
+        if (!decision.allowed || !scope)
+            return { decision, release: () => undefined };
+        const identity = JSON.stringify([scope.name, scope.updatedAt, scope.authorizedTargets, scope.maxRate, scope.maxConcurrency]);
+        const rate = Math.max(0, scope.maxRate ?? Number.POSITIVE_INFINITY);
+        const concurrency = Math.max(1, Math.floor(scope.maxConcurrency ?? Number.MAX_SAFE_INTEGER));
+        const now = this.now();
+        if (identity !== this.scopeIdentity) {
+            this.scopeIdentity = identity;
+            this.tokens = Number.isFinite(rate) ? rate : Number.MAX_SAFE_INTEGER;
+            this.lastRefill = now;
+            this.active = 0;
+        }
+        if (this.active >= concurrency) {
+            return { decision: { ...decision, allowed: false, reason: "engagement concurrency limit reached" }, release: () => undefined };
+        }
+        if (Number.isFinite(rate)) {
+            const elapsedSeconds = Math.max(0, now - this.lastRefill) / 1_000;
+            this.tokens = Math.min(rate, this.tokens + elapsedSeconds * rate);
+            this.lastRefill = now;
+            if (this.tokens < 1) {
+                return { decision: { ...decision, allowed: false, reason: "engagement rate limit reached" }, release: () => undefined };
+            }
+            this.tokens -= 1;
+        }
+        this.active += 1;
+        let released = false;
+        return {
+            decision,
+            release: () => {
+                if (released)
+                    return;
+                released = true;
+                this.active = Math.max(0, this.active - 1);
+            },
+        };
+    }
+}
+export function actionFromUrl(input) {
+    const parsed = new URL(input.url);
+    return {
+        target: parsed.hostname,
+        url: input.url,
+        port: parsed.port ? Number(parsed.port) : parsed.protocol === "https:" ? 443 : 80,
+        path: parsed.pathname || "/",
+        method: input.method ?? "GET",
+        phase: input.phase ?? "enumeration",
+        capability: input.capability ?? (/^(?:GET|HEAD|OPTIONS)$/i.test(input.method ?? "GET") ? "passive" : "active-enumeration"),
+        redirectChain: input.redirectChain,
+        resolvedAddresses: input.resolvedAddresses,
+    };
+}
+export function engagementActionForToolCall(call) {
+    if (call.name === "pentest.webDiscover") {
+        const url = String(call.args.baseUrl ?? "");
+        return url ? actionFromUrl({ url, phase: "enumeration", capability: "active-enumeration" }) : undefined;
+    }
+    if (call.name === "pentest.apiEnumerate") {
+        const url = String(call.args.specUrl ?? "");
+        return url ? actionFromUrl({ url, phase: "enumeration", capability: "active-enumeration" }) : undefined;
+    }
+    if (call.name === "pentest.authCompare") {
+        const url = String(call.args.url ?? "");
+        return url ? actionFromUrl({ url, phase: "authentication", capability: "authentication" }) : undefined;
+    }
+    if (call.name === "pentest.scanStatus") {
+        const target = String(call.args.target ?? "");
+        return target ? { target, path: "/", method: "GET", phase: "recon", capability: "passive" } : undefined;
+    }
+    if (call.name === "http.fetch") {
+        const url = typeof call.args.url === "string" ? call.args.url : "";
+        if (!url)
+            return undefined;
+        return actionFromUrl({
+            url,
+            method: typeof call.args.method === "string" ? call.args.method : "GET",
+            phase: /^(?:GET|HEAD|OPTIONS)$/i.test(String(call.args.method ?? "GET")) ? "enumeration" : "exploitation",
+        });
+    }
+    if (call.name === "net.scan" || call.name === "pentest.recon") {
+        const target = String(call.args.target ?? call.args.host ?? "");
+        if (!target)
+            return undefined;
+        const port = typeof call.args.port === "number" ? call.args.port : undefined;
+        return { target, port, path: "/", method: "GET", phase: "recon", capability: "active-enumeration" };
+    }
+    if (call.name !== "shell.exec" && call.name !== "shell.start")
+        return undefined;
+    const command = String(call.args.command ?? "");
+    const url = command.match(/https?:\/\/[^\s'"<>]+/i)?.[0];
+    const hostCandidates = [...command.matchAll(/(?:^|\s)((?:[a-z0-9-]+\.)+[a-z]{2,}|(?:\d{1,3}\.){3}\d{1,3})(?=\s|$)/gi)]
+        .map((match) => match[1])
+        .filter((candidate) => Boolean(candidate));
+    const host = url ? new URL(url).hostname : hostCandidates.at(-1);
+    if (!host)
+        return undefined;
+    const destructive = /\b(?:rm\s+-rf|mkfs|dd\s+if=|shutdown|reboot|drop\s+(?:database|table)|delete\s+from)\b/i.test(command);
+    const persistence = /\b(?:crontab|launchctl|systemctl\s+enable|schtasks|authorized_keys|startup|persistence)\b/i.test(command);
+    const exploitation = /\b(?:sqlmap|hydra|metasploit|msfconsole|exploit|payload|reverse.shell|csrf|xss|union\s+select)\b/i.test(command);
+    const authentication = /\b(?:login|auth|password|credential|jwt|session|hydra)\b/i.test(command);
+    const phase = destructive || persistence
+        ? "post-exploitation"
+        : exploitation
+            ? "exploitation"
+            : authentication
+                ? "authentication"
+                : "enumeration";
+    const capability = destructive
+        ? "destructive"
+        : persistence
+            ? "persistence"
+            : exploitation
+                ? "exploitation"
+                : authentication
+                    ? "authentication"
+                    : "active-enumeration";
+    return {
+        target: host,
+        ...(url ? { url, port: Number(new URL(url).port || (new URL(url).protocol === "https:" ? 443 : 80)), path: new URL(url).pathname } : {}),
+        method: /\bcurl\b[^\n]*\s-X\s+([A-Z]+)/i.exec(command)?.[1] ?? "GET",
+        phase,
+        capability,
+    };
+}
+//# sourceMappingURL=engagement-policy.js.map

package/dist/safety/engagement-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engagement-policy.js","sourceRoot":"","sources":["../../src/safety/engagement-policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAqCxE,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,KAAsB,EAAW,EAAE;IACxE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAChG,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAsB,EAAW,EAAE;IACpE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAC5D,OAAO,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QACjE,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,UAAU,wBAAwB,CACtC,KAAkC,EAClC,MAAwB,EACxB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAkB,EAAE,CAAC,CAAC;QAChD,OAAO,EAAE,KAAK;QACd,MAAM;QACN,gBAAgB,EAAE,MAAM;QACxB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,gEAAgE,CAAC,CAAC;IAC1H,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,yCAAyC,MAAM,EAAE,CAAC,CAAC;IAClG,IAAI,KAAK,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC,4BAA4B,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACzG,OAAO,IAAI,CAAC,2BAA2B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,kCAAkC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAClH,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,2BAA2B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAEnG,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,qDAAqD,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1I,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,6CAA6C,OAAO,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,gCAAgC;QACxC,gBAAgB,EAAE,MAAM;QACxB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAsB,EAAE,GAAW;IAC1D,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,MAAM;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC;AACjD,CAAC;AAOD,4FAA4F;AAC5F,MAAM,OAAO,sBAAsB;IAMJ;IALrB,MAAM,GAAG,CAAC,CAAC;IACX,UAAU,GAAG,CAAC,CAAC;IACf,MAAM,GAAG,CAAC,CAAC;IACX,aAAa,GAAG,EAAE,CAAC;IAE3B,YAA6B,MAAoB,IAAI,CAAC,GAAG;QAA5B,QAAG,GAAH,GAAG,CAAyB;IAAG,CAAC;IAE7D,OAAO,CAAC,KAAkC,EAAE,MAAwB;QAClE,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAC7H,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,QAAQ,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YACpC,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;YAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACrE,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;YACtB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;YAC/B,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;QACjI,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;YAClE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC,CAAC;YAClE,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;YACtB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;YAC1H,CAAC;YACD,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO;YACL,QAAQ;YACR,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC7C,CAAC;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,KAO7B;IACC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,QAAQ;QACvB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACjF,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,GAAG;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK;QAC7B,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,aAAa;QACnC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAC1H,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;KAC3C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAc;IACxD,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzG,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,OAAO,aAAa,CAAC;YACnB,GAAG;YACH,MAAM,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YACvE,KAAK,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc;SAC1G,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7E,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC;IACtG,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,SAAS,CAAC;IAChF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,wEAAwE,CAAC,CAAC;SACnH,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SACxB,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,WAAW,GAAG,yFAAyF,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5H,MAAM,WAAW,GAAG,4FAA4F,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/H,MAAM,YAAY,GAAG,mGAAmG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvI,MAAM,cAAc,GAAG,2DAA2D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjG,MAAM,KAAK,GAAoB,WAAW,IAAI,WAAW;QACvD,CAAC,CAAC,mBAAmB;QACrB,CAAC,CAAC,YAAY;YACZ,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,cAAc;gBACd,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,aAAa,CAAC;IACtB,MAAM,UAAU,GAAqB,WAAW;QAC9C,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,WAAW;YACX,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,YAAY;gBACZ,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,cAAc;oBACd,CAAC,CAAC,gBAAgB;oBAClB,CAAC,CAAC,oBAAoB,CAAC;IAC/B,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxI,MAAM,EAAE,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK;QACpE,KAAK;QACL,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/store/engagement.d.ts

@@ -0,0 +1,115 @@
+import type { EngagementScope } from "./scope.js";
+export type FindingState = "suspected" | "reproduced" | "verified" | "reported" | "remediated" | "retested" | "rejected" | "inconclusive";
+export type CoverageState = "applicable" | "covered" | "inconclusive" | "excluded";
+export interface EngagementFinding {
+    id: string;
+    title: string;
+    targetId: string;
+    state: FindingState;
+    reproduction?: string | undefined;
+    impact?: string | undefined;
+    remediation?: string | undefined;
+    evidenceIds: string[];
+    severity?: string | undefined;
+    updatedAt: string;
+}
+export interface EngagementEvidence {
+    id: string;
+    targetId: string;
+    testCaseId?: string | undefined;
+    artifactPath?: string | undefined;
+    artifactHash?: string | undefined;
+    observation: string;
+    observedAt: string;
+}
+export interface EngagementCheckpoint {
+    id: string;
+    actionId: string;
+    jobId: string;
+    status: string;
+    artifactPath: string;
+    offset: number;
+    observation: string;
+    recordedAt: string;
+}
+export interface EngagementActionRecord {
+    id: string;
+    targetId: string;
+    testCaseId: string;
+    tool: string;
+    phase: string;
+    capability: string;
+    authorized: boolean;
+    authorizationReason: string;
+    status: "blocked" | "running" | "passed" | "failed" | "inconclusive";
+    evidenceId?: string | undefined;
+    recordedAt: string;
+}
+export interface EngagementGraph {
+    schemaVersion: 1;
+    id: string;
+    name: string;
+    scope: EngagementScope;
+    assets: Array<{
+        id: string;
+        value: string;
+        addresses: string[];
+        services: string[];
+        endpoints: string[];
+    }>;
+    principals: Array<{
+        id: string;
+        label: string;
+        roles: string[];
+    }>;
+    testCases: Array<{
+        id: string;
+        targetId: string;
+        phase: string;
+        capability: string;
+        status: "planned" | "running" | "passed" | "failed" | "inconclusive";
+    }>;
+    actions: EngagementActionRecord[];
+    checkpoints: EngagementCheckpoint[];
+    evidence: EngagementEvidence[];
+    findings: EngagementFinding[];
+    coverage: Array<{
+        dimension: string;
+        state: CoverageState;
+        rationale: string;
+    }>;
+    residualRisk: string[];
+    createdAt: string;
+    updatedAt: string;
+}
+/** Stable across process restarts and conversation compaction for the same authorization. */
+export declare function engagementIdForScope(scope: EngagementScope): string;
+export declare function createEngagement(scope: EngagementScope): EngagementGraph;
+export declare function saveEngagement(graph: EngagementGraph): Promise<void>;
+export declare function loadEngagement(id: string): Promise<EngagementGraph | undefined>;
+export declare function openEngagement(scope: EngagementScope): Promise<EngagementGraph>;
+export declare function beginEngagementAction(graph: EngagementGraph, input: {
+    tool: string;
+    target: string;
+    phase: string;
+    capability: string;
+    authorized: boolean;
+    reason: string;
+}): EngagementActionRecord;
+export declare function recordEngagementCheckpoint(graph: EngagementGraph, input: Omit<EngagementCheckpoint, "id" | "recordedAt">): EngagementCheckpoint;
+export declare function reconcileEngagementJob(graph: EngagementGraph, input: {
+    jobId: string;
+    status: string;
+    artifactPath: string;
+    offset: number;
+    observation: string;
+}): EngagementCheckpoint | undefined;
+export declare function finishEngagementAction(graph: EngagementGraph, actionId: string, result: {
+    ok: boolean;
+    observation: string;
+    artifactPath?: string | undefined;
+    scannerLead?: boolean | undefined;
+}): EngagementEvidence;
+export declare function transitionFinding(graph: EngagementGraph, findingId: string, state: FindingState, patch?: Partial<Pick<EngagementFinding, "reproduction" | "impact" | "remediation" | "severity" | "evidenceIds">>): EngagementFinding;
+export declare function createFinding(graph: EngagementGraph, input: Pick<EngagementFinding, "title" | "targetId"> & Partial<Pick<EngagementFinding, "severity" | "evidenceIds">>): EngagementFinding;
+export declare function renderEngagementReport(graph: EngagementGraph): string;

package/dist/store/engagement.js

@@ -0,0 +1,278 @@
+import { createHash, randomUUID } from "node:crypto";
+import { mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { getDataDir } from "./paths.js";
+const pathFor = (id) => join(getDataDir(), "engagements", `${encodeURIComponent(id)}.json`);
+const engagementSaveQueues = new Map();
+function mergeById(existing, incoming, choose = (_current, next) => next) {
+    const merged = new Map(existing.map((entry) => [entry.id, entry]));
+    for (const entry of incoming) {
+        const current = merged.get(entry.id);
+        merged.set(entry.id, current ? choose(current, entry) : entry);
+    }
+    return [...merged.values()];
+}
+const terminalProgress = (status) => status === "running" || status === "planned" ? 0 : 1;
+/** Preserve sibling parallel action updates while merging whole-graph snapshots. */
+function mergeEngagementGraphs(existing, incoming) {
+    if (!existing || existing.id !== incoming.id)
+        return incoming;
+    return {
+        ...existing,
+        ...incoming,
+        assets: mergeById(existing.assets, incoming.assets, (current, next) => ({
+            ...current,
+            ...next,
+            addresses: [...new Set([...current.addresses, ...next.addresses])],
+            services: [...new Set([...current.services, ...next.services])],
+            endpoints: [...new Set([...current.endpoints, ...next.endpoints])],
+        })),
+        principals: mergeById(existing.principals, incoming.principals, (current, next) => ({
+            ...current,
+            ...next,
+            roles: [...new Set([...current.roles, ...next.roles])],
+        })),
+        testCases: mergeById(existing.testCases, incoming.testCases, (current, next) => terminalProgress(next.status) >= terminalProgress(current.status) ? next : current),
+        actions: mergeById(existing.actions, incoming.actions, (current, next) => terminalProgress(next.status) >= terminalProgress(current.status) ? next : current),
+        checkpoints: mergeById(existing.checkpoints, incoming.checkpoints),
+        evidence: mergeById(existing.evidence, incoming.evidence),
+        findings: mergeById(existing.findings, incoming.findings, (current, next) => next.updatedAt >= current.updatedAt ? next : current),
+        coverage: [
+            ...new Map([...existing.coverage, ...incoming.coverage].map((entry) => [entry.dimension, entry])).values(),
+        ],
+        residualRisk: [...new Set([...existing.residualRisk, ...incoming.residualRisk])],
+        createdAt: existing.createdAt <= incoming.createdAt ? existing.createdAt : incoming.createdAt,
+    };
+}
+const normalizedScopeIdentity = (scope) => JSON.stringify({
+    name: scope.name ?? "",
+    authorizedTargets: [...scope.authorizedTargets].sort(),
+    excludedTargets: [...(scope.excludedTargets ?? [])].sort(),
+    createdAt: scope.createdAt ?? "",
+});
+/** Stable across process restarts and conversation compaction for the same authorization. */
+export function engagementIdForScope(scope) {
+    return createHash("sha256").update(normalizedScopeIdentity(scope)).digest("hex").slice(0, 32);
+}
+export function createEngagement(scope) {
+    const now = new Date().toISOString();
+    return {
+        schemaVersion: 1,
+        id: engagementIdForScope(scope),
+        name: scope.name ?? "authorized engagement",
+        scope,
+        assets: scope.authorizedTargets.map((value) => ({ id: randomUUID(), value, addresses: [], services: [], endpoints: [] })),
+        principals: [],
+        testCases: [],
+        actions: [],
+        checkpoints: [],
+        evidence: [],
+        findings: [],
+        coverage: [],
+        residualRisk: [],
+        createdAt: now,
+        updatedAt: now,
+    };
+}
+export function saveEngagement(graph) {
+    const previous = engagementSaveQueues.get(graph.id) ?? Promise.resolve();
+    const queued = previous.catch(() => undefined).then(async () => {
+        const dir = join(getDataDir(), "engagements");
+        const path = pathFor(graph.id);
+        const temp = `${path}.${process.pid}.${randomUUID()}.tmp`;
+        await mkdir(dir, { recursive: true });
+        try {
+            let existing;
+            try {
+                const parsed = JSON.parse(await readFile(path, "utf8"));
+                if (parsed.schemaVersion === 1)
+                    existing = parsed;
+            }
+            catch {
+                // First save or corrupt prior state: the incoming valid graph replaces it.
+            }
+            const merged = mergeEngagementGraphs(existing, graph);
+            merged.updatedAt = new Date().toISOString();
+            await writeFile(temp, `${JSON.stringify(merged, null, 2)}\n`, { mode: 0o600 });
+            await rename(temp, path);
+        }
+        finally {
+            await unlink(temp).catch(() => undefined);
+        }
+    });
+    engagementSaveQueues.set(graph.id, queued);
+    void queued.finally(() => {
+        if (engagementSaveQueues.get(graph.id) === queued) {
+            engagementSaveQueues.delete(graph.id);
+        }
+    }).catch(() => undefined);
+    return queued;
+}
+export async function loadEngagement(id) {
+    try {
+        const parsed = JSON.parse(await readFile(pathFor(id), "utf8"));
+        if (parsed.schemaVersion !== 1)
+            return undefined;
+        parsed.actions ??= [];
+        parsed.checkpoints ??= [];
+        return parsed;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function openEngagement(scope) {
+    const id = engagementIdForScope(scope);
+    const existing = await loadEngagement(id);
+    if (existing) {
+        existing.scope = scope;
+        return existing;
+    }
+    const created = createEngagement(scope);
+    await saveEngagement(created);
+    return created;
+}
+function assetFor(graph, target) {
+    const existing = graph.assets.find((asset) => asset.value === target);
+    if (existing)
+        return existing;
+    const asset = { id: randomUUID(), value: target, addresses: [], services: [], endpoints: [] };
+    graph.assets.push(asset);
+    return asset;
+}
+export function beginEngagementAction(graph, input) {
+    const target = assetFor(graph, input.target);
+    const testCase = {
+        id: randomUUID(),
+        targetId: target.id,
+        phase: input.phase,
+        capability: input.capability,
+        status: (input.authorized ? "running" : "failed"),
+    };
+    graph.testCases.push(testCase);
+    const action = {
+        id: randomUUID(),
+        targetId: target.id,
+        testCaseId: testCase.id,
+        tool: input.tool,
+        phase: input.phase,
+        capability: input.capability,
+        authorized: input.authorized,
+        authorizationReason: input.reason,
+        status: input.authorized ? "running" : "blocked",
+        recordedAt: new Date().toISOString(),
+    };
+    graph.actions.push(action);
+    return action;
+}
+export function recordEngagementCheckpoint(graph, input) {
+    const action = graph.actions.find((entry) => entry.id === input.actionId);
+    if (!action)
+        throw new Error(`Unknown engagement action: ${input.actionId}`);
+    const checkpoint = {
+        id: randomUUID(),
+        ...input,
+        recordedAt: new Date().toISOString(),
+    };
+    graph.checkpoints.push(checkpoint);
+    action.status = ["exited", "failed", "killed", "lost"].includes(input.status)
+        ? input.status === "exited" ? "inconclusive" : "failed"
+        : "running";
+    return checkpoint;
+}
+export function reconcileEngagementJob(graph, input) {
+    const prior = [...graph.checkpoints].reverse().find((entry) => entry.jobId === input.jobId);
+    if (!prior)
+        return undefined;
+    const checkpoint = recordEngagementCheckpoint(graph, {
+        actionId: prior.actionId,
+        ...input,
+    });
+    if (["exited", "failed", "killed", "lost"].includes(input.status)) {
+        const action = graph.actions.find((entry) => entry.id === prior.actionId);
+        const testCase = action ? graph.testCases.find((entry) => entry.id === action.testCaseId) : undefined;
+        const terminalStatus = input.status === "exited" ? "inconclusive" : "failed";
+        if (action)
+            action.status = terminalStatus;
+        if (testCase)
+            testCase.status = terminalStatus;
+    }
+    return checkpoint;
+}
+export function finishEngagementAction(graph, actionId, result) {
+    const action = graph.actions.find((entry) => entry.id === actionId);
+    if (!action)
+        throw new Error(`Unknown engagement action: ${actionId}`);
+    const evidence = {
+        id: randomUUID(),
+        targetId: action.targetId,
+        testCaseId: action.testCaseId,
+        ...(result.artifactPath ? { artifactPath: result.artifactPath } : {}),
+        observation: result.observation,
+        observedAt: new Date().toISOString(),
+    };
+    graph.evidence.push(evidence);
+    action.evidenceId = evidence.id;
+    action.status = result.scannerLead ? "inconclusive" : result.ok ? "passed" : "failed";
+    const testCase = graph.testCases.find((entry) => entry.id === action.testCaseId);
+    if (testCase)
+        testCase.status = action.status;
+    return evidence;
+}
+const validTransitions = {
+    suspected: ["reproduced", "rejected", "inconclusive"],
+    reproduced: ["verified", "rejected", "inconclusive"],
+    verified: ["reported", "rejected"],
+    reported: ["remediated"],
+    remediated: ["retested"],
+    retested: [],
+    rejected: [],
+    inconclusive: ["suspected", "rejected"],
+};
+export function transitionFinding(graph, findingId, state, patch = {}) {
+    const finding = graph.findings.find((entry) => entry.id === findingId);
+    if (!finding)
+        throw new Error(`Unknown finding: ${findingId}`);
+    if (finding.state !== state && !validTransitions[finding.state].includes(state)) {
+        throw new Error(`Invalid finding transition: ${finding.state} -> ${state}`);
+    }
+    Object.assign(finding, patch);
+    if (state === "verified") {
+        if (!finding.reproduction?.trim() || !finding.impact?.trim() || finding.evidenceIds.length === 0) {
+            throw new Error("Verified findings require reproduction, impact, and linked evidence");
+        }
+        const linked = new Set(graph.evidence.map((entry) => entry.id));
+        if (finding.evidenceIds.some((id) => !linked.has(id)))
+            throw new Error("Verified finding references unknown evidence");
+    }
+    finding.state = state;
+    finding.updatedAt = new Date().toISOString();
+    return finding;
+}
+export function createFinding(graph, input) {
+    const finding = {
+        id: randomUUID(),
+        title: input.title,
+        targetId: input.targetId,
+        state: "suspected",
+        evidenceIds: input.evidenceIds ?? [],
+        ...(input.severity ? { severity: input.severity } : {}),
+        updatedAt: new Date().toISOString(),
+    };
+    graph.findings.push(finding);
+    return finding;
+}
+export function renderEngagementReport(graph) {
+    const verified = graph.findings.filter((finding) => ["verified", "reported", "remediated", "retested"].includes(finding.state));
+    const leads = graph.findings.filter((finding) => ["suspected", "reproduced", "inconclusive"].includes(finding.state));
+    const exclusions = graph.scope.excludedTargets ?? [];
+    const section = (title, lines) => `${title}\n${lines.length ? lines.map((line) => `- ${line}`).join("\n") : "- None"}`;
+    return [
+        section("Verified findings", verified.map((finding) => `${finding.title} (${finding.state})`)),
+        section("Inconclusive leads", leads.map((finding) => `${finding.title} (${finding.state})`)),
+        section("Coverage", graph.coverage.map((item) => `${item.dimension}: ${item.state} — ${item.rationale}`)),
+        section("Exclusions", exclusions),
+        section("Residual risk", graph.residualRisk),
+    ].join("\n\n");
+}
+//# sourceMappingURL=engagement.js.map

package/dist/store/engagement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engagement.js","sourceRoot":"","sources":["../../src/store/engagement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAgFxC,MAAM,OAAO,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,GAAG,kBAAkB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC5G,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAE9D,SAAS,SAAS,CAChB,QAAsB,EACtB,QAAsB,EACtB,SAAqC,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI;IAE7D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAU,EAAE,CAClD,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEvD,oFAAoF;AACpF,SAAS,qBAAqB,CAC5B,QAAqC,EACrC,QAAyB;IAEzB,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC9D,OAAO;QACL,GAAG,QAAQ;QACX,GAAG,QAAQ;QACX,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACtE,GAAG,OAAO;YACV,GAAG,IAAI;YACP,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAClE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/D,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;SACnE,CAAC,CAAC;QACH,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAClF,GAAG,OAAO;YACV,GAAG,IAAI;YACP,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;SACvD,CAAC,CAAC;QACH,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAC7E,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CACnF;QACD,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CACvE,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CACnF;QACD,WAAW,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;QAClE,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;QACzD,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAC1E,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CACrD;QACD,QAAQ,EAAE;YACR,GAAG,IAAI,GAAG,CACR,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CACtF,CAAC,MAAM,EAAE;SACX;QACD,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,YAAY,EAAE,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QAChF,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS;KAC9F,CAAC;AACJ,CAAC;AAED,MAAM,uBAAuB,GAAG,CAAC,KAAsB,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;IACjF,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;IACtB,iBAAiB,EAAE,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE;IACtD,eAAe,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;IAC1D,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE;CACjC,CAAC,CAAC;AAEH,6FAA6F;AAC7F,MAAM,UAAU,oBAAoB,CAAC,KAAsB;IACzD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,EAAE,EAAE,oBAAoB,CAAC,KAAK,CAAC;QAC/B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,uBAAuB;QAC3C,KAAK;QACL,MAAM,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACzH,UAAU,EAAE,EAAE;QACd,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE,EAAE;QAChB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAsB;IACnD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;QAC1D,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,IAAI,QAAqC,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAoB,CAAC;gBAC3E,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC;oBAAE,QAAQ,GAAG,MAAM,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,2EAA2E;YAC7E,CAAC;YACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/E,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IACH,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3C,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;QACvB,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC;YAClD,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAU;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAoB,CAAC;QAClF,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACjD,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,WAAW,KAAK,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAsB;IACzD,MAAM,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;QACvB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAsB,EAAE,MAAc;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IACtE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,KAAK,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC9F,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAsB,EACtB,KAA+G;IAE/G,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG;QACf,EAAE,EAAE,UAAU,EAAE;QAChB,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAyB;KAC1E,CAAC;IACF,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,MAAM,GAA2B;QACrC,EAAE,EAAE,UAAU,EAAE;QAChB,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,mBAAmB,EAAE,KAAK,CAAC,MAAM;QACjC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAChD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAsB,EACtB,KAAsD;IAEtD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1E,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAyB;QACvC,EAAE,EAAE,UAAU,EAAE;QAChB,GAAG,KAAK;QACR,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAC3E,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ;QACvD,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAsB,EACtB,KAAmG;IAEnG,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5F,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,EAAE;QACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,KAAK;KACT,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtG,MAAM,cAAc,GAA8B,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;QACxG,IAAI,MAAM;YAAE,MAAM,CAAC,MAAM,GAAG,cAAc,CAAC;QAC3C,IAAI,QAAQ;YAAE,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC;IACjD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAsB,EACtB,QAAgB,EAChB,MAAkH;IAElH,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAuB;QACnC,EAAE,EAAE,UAAU,EAAE;QAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAC;IAChC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtF,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC;IACjF,IAAI,QAAQ;QAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,gBAAgB,GAAyC;IAC7D,SAAS,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,cAAc,CAAC;IACrD,UAAU,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,CAAC;IACpD,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;IAClC,QAAQ,EAAE,CAAC,YAAY,CAAC;IACxB,UAAU,EAAE,CAAC,UAAU,CAAC;IACxB,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,EAAE;IACZ,YAAY,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;CACxC,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAC/B,KAAsB,EACtB,SAAiB,EACjB,KAAmB,EACnB,QAAkH,EAAE;IAEpH,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,SAAS,EAAE,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,CAAC,KAAK,OAAO,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjG,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACzH,CAAC;IACD,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;IACtB,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAsB,EACtB,KAAmH;IAEnH,MAAM,OAAO,GAAsB;QACjC,EAAE,EAAE,UAAU,EAAE;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;QACpC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAsB;IAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAChI,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACtH,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,KAAe,EAAU,EAAE,CAAC,GAAG,KAAK,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACjJ,OAAO;QACL,OAAO,CAAC,mBAAmB,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;QAC9F,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;QAC5F,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACzG,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC;QACjC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC;KAC7C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC"}

package/dist/store/logs.d.ts

@@ -7,3 +7,8 @@ export declare function getLogsDir(): string;
 export declare function clearArtifacts(): Promise<{
     removed: number;
 }>;
+/** Export local, metadata-only diagnostics. User prompts, project code, commands, and tool output are excluded by default. */
+export declare function exportDiagnostics(destination: string): Promise<{
+    path: string;
+    events: number;
+}>;