@rewind-ai/cli 0.6.2

package/dist/src/mcp/server.js

@@ -0,0 +1,364 @@
+import { McpServer } from "@modelcontextprotocol/server";
+import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
+import * as z from "zod";
+import { readFile } from "node:fs/promises";
+import { getProjectRoot, getSandboxPath, assertApprovedSandbox, PathSafetyError, SANDBOX_DIR_NAME, ENFORCED_SANDBOX_DIR_NAME, } from "../paths.js";
+import { resolveSandboxRelative, sandboxAbs, } from "../action/capture.js";
+import { defaultMediateContext, formatActionResponse, mediateCreateDirectory, mediateDeleteDirectory, mediateDeleteFile, mediateMoveFile, mediateWriteFile, } from "../action/mediate.js";
+import { listDirectoryMediated } from "../action/mutate.js";
+import { endMcpSession, listActions, loadAction, loadOrCreateMcpSession, markIncompleteFailed, } from "../action/store.js";
+import { formatUndoConflict, undoAction } from "../action/undo.js";
+import { buildManifest } from "../manifest.js";
+import { loadCheckpoint } from "../checkpoint.js";
+import { listPolicyEvents, formatPolicyViolation } from "../enforcement/policy.js";
+import { listTrustRecords } from "../enforcement/trust.js";
+import { loadEnforcementState } from "../enforcement/setup.js";
+function logErr(msg) {
+    process.stderr.write(`[rewind-mcp] ${msg}\n`);
+}
+function textResult(text, isError = false) {
+    return {
+        content: [{ type: "text", text }],
+        isError,
+    };
+}
+const sandboxSchema = z
+    .enum(["test", "enforced"])
+    .default("test")
+    .describe("Which sandbox: test=sandbox-test-project (default), enforced=sandbox-enforced-project (V3)");
+function sandboxNameFromArg(s) {
+    return s === "enforced" ? ENFORCED_SANDBOX_DIR_NAME : SANDBOX_DIR_NAME;
+}
+function clientFromServer(server) {
+    const v = server.server.getClientVersion?.();
+    if (v?.name) {
+        return { name: v.name, version: v.version ?? "unknown" };
+    }
+    return { name: "UNKNOWN_MCP_CLIENT", version: "unknown" };
+}
+function ctxFor(server, projectRoot, sandbox = "test") {
+    return defaultMediateContext(projectRoot, clientFromServer(server), sandboxNameFromArg(sandbox));
+}
+export async function createRewindMcpServer(projectRoot = getProjectRoot()) {
+    await markIncompleteFailed(projectRoot);
+    await assertApprovedSandbox(getSandboxPath(projectRoot), projectRoot).catch(async () => {
+        logErr("Sandbox missing — create it with npm run sandbox:create");
+    });
+    const server = new McpServer({ name: "rewind", version: "0.5.0" }, { capabilities: { tools: {} } });
+    // Ensure MCP session exists once client connects — refreshed per tool via client info
+    server.registerTool("rewind_read_file", {
+        title: "Read sandbox file",
+        description: "Read a UTF-8 text file inside an approved sandbox. Non-mutating audit (not in reversible ledger).",
+        inputSchema: z.object({
+            path: z.string().describe("Relative path inside the sandbox"),
+            sandbox: sandboxSchema,
+        }),
+    }, async ({ path: relPath, sandbox }) => {
+        try {
+            const sn = sandboxNameFromArg(sandbox);
+            const rel = resolveSandboxRelative(relPath, projectRoot, sn);
+            if (!rel)
+                return textResult("Cannot read sandbox root as file", true);
+            const abs = sandboxAbs(rel, projectRoot, sn);
+            const data = await readFile(abs);
+            return textResult(data.toString("utf8"));
+        }
+        catch (err) {
+            return textResult(err instanceof Error ? err.message : String(err), true);
+        }
+    });
+    server.registerTool("rewind_list_directory", {
+        title: "List sandbox directory",
+        description: "List entries inside an approved sandbox only.",
+        inputSchema: z.object({
+            path: z
+                .string()
+                .default(".")
+                .describe("Relative directory path (default sandbox root)"),
+            sandbox: sandboxSchema,
+        }),
+    }, async ({ path: relPath, sandbox }) => {
+        try {
+            const sn = sandboxNameFromArg(sandbox);
+            const rel = !relPath || relPath === "."
+                ? ""
+                : resolveSandboxRelative(relPath, projectRoot, sn);
+            const names = await listDirectoryMediated(rel, projectRoot, sn);
+            return textResult(names.join("\n") || "(empty)");
+        }
+        catch (err) {
+            return textResult(err instanceof Error ? err.message : String(err), true);
+        }
+    });
+    server.registerTool("rewind_write_file", {
+        title: "Write sandbox file (mediated)",
+        description: "Create or overwrite a file via REWIND mediation. Use sandbox=enforced for V3 mandatory-mediation proofs.",
+        inputSchema: z.object({
+            path: z.string(),
+            content: z.string(),
+            sandbox: sandboxSchema,
+        }),
+    }, async ({ path: relPath, content, sandbox }) => {
+        try {
+            const action = await mediateWriteFile(ctxFor(server, projectRoot, sandbox), {
+                path: relPath,
+                content,
+            });
+            return textResult(formatActionResponse(action));
+        }
+        catch (err) {
+            return textResult(err instanceof Error ? err.message : String(err), true);
+        }
+    });
+    server.registerTool("rewind_create_file", {
+        title: "Create sandbox file (mediated)",
+        description: "Create a new file (fails if exists) via REWIND mediation.",
+        inputSchema: z.object({
+            path: z.string(),
+            content: z.string(),
+            sandbox: sandboxSchema,
+        }),
+    }, async ({ path: relPath, content, sandbox }) => {
+        try {
+            const action = await mediateWriteFile(ctxFor(server, projectRoot, sandbox), {
+                path: relPath,
+                content,
+                createOnly: true,
+            });
+            return textResult(formatActionResponse(action));
+        }
+        catch (err) {
+            return textResult(err instanceof Error ? err.message : String(err), true);
+        }
+    });
+    server.registerTool("rewind_delete_file", {
+        title: "Delete sandbox file (mediated)",
+        description: "Delete a file via REWIND mediation.",
+        inputSchema: z.object({ path: z.string(), sandbox: sandboxSchema }),
+    }, async ({ path: relPath, sandbox }) => {
+        try {
+            const action = await mediateDeleteFile(ctxFor(server, projectRoot, sandbox), {
+                path: relPath,
+            });
+            return textResult(formatActionResponse(action));
+        }
+        catch (err) {
+            return textResult(err instanceof Error ? err.message : String(err), true);
+        }
+    });
+    server.registerTool("rewind_move_file", {
+        title: "Move/rename sandbox file (mediated)",
+        description: "Move a file via REWIND mediation.",
+        inputSchema: z.object({
+            from: z.string(),
+            to: z.string(),
+            sandbox: sandboxSchema,
+        }),
+    }, async ({ from, to, sandbox }) => {
+        try {
+            const action = await mediateMoveFile(ctxFor(server, projectRoot, sandbox), {
+                from,
+                to,
+            });
+            return textResult(formatActionResponse(action));
+        }
+        catch (err) {
+            return textResult(err instanceof Error ? err.message : String(err), true);
+        }
+    });
+    server.registerTool("rewind_create_directory", {
+        title: "Create sandbox directory (mediated)",
+        description: "Create a directory via REWIND mediation.",
+        inputSchema: z.object({ path: z.string(), sandbox: sandboxSchema }),
+    }, async ({ path: relPath, sandbox }) => {
+        try {
+            const action = await mediateCreateDirectory(ctxFor(server, projectRoot, sandbox), {
+                path: relPath,
+            });
+            return textResult(formatActionResponse(action));
+        }
+        catch (err) {
+            return textResult(err instanceof Error ? err.message : String(err), true);
+        }
+    });
+    server.registerTool("rewind_delete_directory", {
+        title: "Delete sandbox directory (mediated)",
+        description: "Delete a directory tree via REWIND mediation (subtree captured for undo).",
+        inputSchema: z.object({ path: z.string(), sandbox: sandboxSchema }),
+    }, async ({ path: relPath, sandbox }) => {
+        try {
+            const action = await mediateDeleteDirectory(ctxFor(server, projectRoot, sandbox), {
+                path: relPath,
+            });
+            return textResult(formatActionResponse(action));
+        }
+        catch (err) {
+            return textResult(err instanceof Error ? err.message : String(err), true);
+        }
+    });
+    server.registerTool("rewind_get_status", {
+        title: "REWIND status",
+        description: "Show sandbox fingerprint, MCP session, enforcement, and recent action counts.",
+        inputSchema: z.object({}),
+    }, async () => {
+        try {
+            const client = clientFromServer(server);
+            const session = await loadOrCreateMcpSession(projectRoot, client);
+            const actions = await listActions(projectRoot);
+            const mediated = actions.filter((a) => a.source === "MCP");
+            const enf = await loadEnforcementState(projectRoot);
+            const policy = await listPolicyEvents(projectRoot);
+            const trust = await listTrustRecords(projectRoot);
+            let fingerprint = "(no checkpoint)";
+            try {
+                const cp = await loadCheckpoint("latest", projectRoot);
+                const live = await buildManifest(getSandboxPath(projectRoot), "sandbox-test-project");
+                fingerprint = `checkpoint=${cp.meta.fingerprint.slice(0, 12)}… live=${live.fingerprint.slice(0, 12)}… match=${cp.meta.fingerprint === live.fingerprint}`;
+            }
+            catch {
+                /* optional */
+            }
+            return textResult([
+                "REWIND STATUS",
+                `Client: ${client.name}@${client.version}`,
+                `MCP session: ${session.id}`,
+                `Actions (all): ${actions.length}`,
+                `Mediated MCP actions: ${mediated.length}`,
+                `Completed: ${mediated.filter((a) => a.status === "COMPLETED").length}`,
+                `Undone: ${mediated.filter((a) => a.status === "UNDONE").length}`,
+                `Conflicted: ${mediated.filter((a) => a.status === "CONFLICTED").length}`,
+                fingerprint,
+                "",
+                "ENFORCEMENT (V3)",
+                `Enabled: ${enf?.enabled ? "YES" : "NO"}`,
+                `Mechanism: ${enf?.mechanism ?? "none"}`,
+                `Locked (fs-readonly): ${enf?.locked ? "YES" : "NO"}`,
+                `Policy events: ${policy.length}`,
+                `Untrusted paths: ${trust.filter((t) => t.state === "UNTRUSTED").length}`,
+                "",
+                "NOTE: Native Cursor edits of sandbox-test-project bypass MCP.",
+                "NOTE: sandbox-enforced-project uses fs-readonly + Cursor hooks + optional seatbelt harness.",
+            ].join("\n"));
+        }
+        catch (err) {
+            return textResult(err instanceof Error ? err.message : String(err), true);
+        }
+    });
+    server.registerTool("rewind_policy_events", {
+        title: "List policy / enforcement events",
+        description: "List V3 policy events (bypass detection, blocked writes, enable/disable).",
+        inputSchema: z.object({
+            limit: z.number().int().positive().max(100).default(20),
+        }),
+    }, async ({ limit }) => {
+        const events = await listPolicyEvents(projectRoot);
+        const slice = events.slice(-limit);
+        const lines = slice.map((e) => `${e.time} ${e.id} ${e.status.padEnd(10)} ${e.type} ${e.path ?? "—"} [${e.mechanism}]`);
+        return textResult(lines.join("\n") || "(no policy events)");
+    });
+    server.registerTool("rewind_trust_status", {
+        title: "Path trust status",
+        description: "Show AUTHORITATIVE vs UNTRUSTED path records for mediated vs external state.",
+        inputSchema: z.object({}),
+    }, async () => {
+        const trust = await listTrustRecords(projectRoot);
+        if (trust.length === 0)
+            return textResult("(no trust records)");
+        const lines = trust.map((t) => `${t.state.padEnd(14)} ${t.path} action=${t.lastMediatedActionId ?? "—"} policy=${t.lastPolicyEventId ?? "—"}`);
+        const untrusted = trust.filter((t) => t.state === "UNTRUSTED");
+        if (untrusted.length > 0) {
+            lines.push("");
+            lines.push("POLICY VIOLATION — untrusted paths present:");
+            for (const u of untrusted) {
+                lines.push(formatPolicyViolation({
+                    id: u.lastPolicyEventId ?? "unknown",
+                    version: 3,
+                    time: u.updatedAt,
+                    type: "UNKNOWN_MUTATION",
+                    path: u.path,
+                    mechanism: "trust-store",
+                    evidence: u.note ?? "untrusted",
+                    status: "UNTRUSTED",
+                }));
+            }
+        }
+        return textResult(lines.join("\n"));
+    });
+    server.registerTool("rewind_action_history", {
+        title: "List mediated actions",
+        description: "List REWIND MCP action ledger entries (newest last).",
+        inputSchema: z.object({
+            limit: z.number().int().positive().max(100).default(20),
+        }),
+    }, async ({ limit }) => {
+        const actions = await listActions(projectRoot);
+        const slice = actions.slice(-limit);
+        const lines = slice.map((a) => `${a.sequence.toString().padStart(4)} ${a.id} ${a.status.padEnd(10)} ${a.tool} ${a.target}${a.targetSecondary ? "→" + a.targetSecondary : ""}`);
+        return textResult(lines.join("\n") || "(no actions)");
+    });
+    server.registerTool("rewind_undo_action", {
+        title: "Undo mediated action",
+        description: "Undo a single COMPLETED MCP action if current state still equals the recorded after-state. Refuses on conflict to protect newer work.",
+        inputSchema: z.object({
+            actionId: z.string().describe("Action id, e.g. act_…"),
+        }),
+    }, async ({ actionId }) => {
+        try {
+            const result = await undoAction(actionId, projectRoot);
+            if (result.conflict) {
+                return textResult(formatUndoConflict(result), true);
+            }
+            return textResult(result.ok
+                ? `${result.message}\nStatus: ${result.action.status}`
+                : result.message, !result.ok);
+        }
+        catch (err) {
+            return textResult(err instanceof Error ? err.message : String(err), true);
+        }
+    });
+    return server;
+}
+export async function runMcpServer(projectRoot = getProjectRoot()) {
+    const server = await createRewindMcpServer(projectRoot);
+    const transport = new StdioServerTransport();
+    logErr(`starting stdio MCP for project ${projectRoot}`);
+    await server.connect(transport);
+    logErr("connected — waiting for MCP client");
+}
+export async function printActionCli(id, projectRoot = getProjectRoot()) {
+    if (!id) {
+        const actions = await listActions(projectRoot);
+        console.log("REWIND ACTIONS");
+        console.log("");
+        for (const a of actions) {
+            console.log(`${a.sequence.toString().padStart(4)} ${a.id} ${a.status.padEnd(10)} ${a.tool} ${a.target}`);
+        }
+        console.log("");
+        console.log(`Total: ${actions.length}`);
+        return;
+    }
+    const a = await loadAction(id, projectRoot);
+    console.log(JSON.stringify(a, null, 2));
+}
+export async function printMcpSessionReport(projectRoot = getProjectRoot()) {
+    const actions = await listActions(projectRoot);
+    const sessionIds = [...new Set(actions.map((a) => a.sessionId))];
+    console.log("REWIND MCP SESSIONS");
+    console.log("");
+    for (const sid of sessionIds) {
+        const subset = actions.filter((a) => a.sessionId === sid);
+        const client = subset[0]?.client;
+        console.log(`Session ${sid}`);
+        console.log(`Source: MCP`);
+        console.log(`Client: ${client ? `${client.name}@${client.version}` : "unknown"}`);
+        console.log(`Actions: ${subset.length}`);
+        console.log(`Reversible completed: ${subset.filter((a) => a.status === "COMPLETED" && a.reversibility === "REVERSIBLE").length}`);
+        console.log(`Conflicted: ${subset.filter((a) => a.status === "CONFLICTED").length}`);
+        console.log(`Undone: ${subset.filter((a) => a.status === "UNDONE").length}`);
+        console.log(`Failed: ${subset.filter((a) => a.status === "FAILED").length}`);
+        console.log("");
+    }
+    await endMcpSession(projectRoot).catch(() => null);
+}
+export { PathSafetyError };
+//# sourceMappingURL=server.js.map

package/dist/src/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EACL,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,GAE1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,UAAU,GACX,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EACL,aAAa,EACb,WAAW,EACX,UAAU,EACV,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEnE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,OAAO,GAAG,KAAK;IAC/C,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC;QAC1C,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GAAG,CAAC;KACpB,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;KAC1B,OAAO,CAAC,MAAM,CAAC;KACf,QAAQ,CACP,4FAA4F,CAC7F,CAAC;AAEJ,SAAS,kBAAkB,CAAC,CAAkC;IAC5D,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACzE,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAiB;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,CAAC;IAC7C,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,MAAM,CACb,MAAiB,EACjB,WAAmB,EACnB,UAA2C,MAAM;IAEjD,OAAO,qBAAqB,CAC1B,WAAW,EACX,gBAAgB,CAAC,MAAM,CAAC,EACxB,kBAAkB,CAAC,OAAO,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,qBAAqB,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC,KAAK,CACzE,KAAK,IAAI,EAAE;QACT,MAAM,CAAC,yDAAyD,CAAC,CAAC;IACpE,CAAC,CACF,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EACpC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;IAEF,sFAAsF;IAEtF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,mGAAmG;QACrG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;YAC7D,OAAO,EAAE,aAAa;SACvB,CAAC;KACH,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,GAAG;gBAAE,OAAO,UAAU,CAAC,kCAAkC,EAAE,IAAI,CAAC,CAAC;YACtE,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,UAAU,CACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,+CAA+C;QAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,OAAO,CAAC,GAAG,CAAC;iBACZ,QAAQ,CAAC,gDAAgD,CAAC;YAC7D,OAAO,EAAE,aAAa;SACvB,CAAC;KACH,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACvC,MAAM,GAAG,GACP,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG;gBACzB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,sBAAsB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YAChE,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,UAAU,CACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,0GAA0G;QAC5G,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,OAAO,EAAE,aAAa;SACvB,CAAC;KACH,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE;gBAC1E,IAAI,EAAE,OAAO;gBACb,OAAO;aACR,CAAC,CAAC;YACH,OAAO,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,UAAU,CACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,gCAAgC;QACvC,WAAW,EACT,2DAA2D;QAC7D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,OAAO,EAAE,aAAa;SACvB,CAAC;KACH,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE;gBAC1E,IAAI,EAAE,OAAO;gBACb,OAAO;gBACP,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,OAAO,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,UAAU,CACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,qCAAqC;QAClD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;KACpE,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE;gBAC3E,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YACH,OAAO,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,UAAU,CACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EAAE,mCAAmC;QAChD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;YACd,OAAO,EAAE,aAAa;SACvB,CAAC;KACH,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE;gBACzE,IAAI;gBACJ,EAAE;aACH,CAAC,CAAC;YACH,OAAO,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,UAAU,CACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;QACE,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EAAE,0CAA0C;QACvD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;KACpE,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE;gBAChF,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YACH,OAAO,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,UAAU,CACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;QACE,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EACT,2EAA2E;QAC7E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;KACpE,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE;gBAChF,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YACH,OAAO,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,UAAU,CACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,+EAA+E;QAC5F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;KAC1B,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;YAC3D,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAClD,IAAI,WAAW,GAAG,iBAAiB,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBACvD,MAAM,IAAI,GAAG,MAAM,aAAa,CAC9B,cAAc,CAAC,WAAW,CAAC,EAC3B,sBAAsB,CACvB,CAAC;gBACF,WAAW,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3J,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,OAAO,UAAU,CACf;gBACE,eAAe;gBACf,WAAW,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE;gBAC1C,gBAAgB,OAAO,CAAC,EAAE,EAAE;gBAC5B,kBAAkB,OAAO,CAAC,MAAM,EAAE;gBAClC,yBAAyB,QAAQ,CAAC,MAAM,EAAE;gBAC1C,cAAc,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM,EAAE;gBACvE,WAAW,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,EAAE;gBACjE,eAAe,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,MAAM,EAAE;gBACzE,WAAW;gBACX,EAAE;gBACF,kBAAkB;gBAClB,YAAY,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;gBACzC,cAAc,GAAG,EAAE,SAAS,IAAI,MAAM,EAAE;gBACxC,yBAAyB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;gBACrD,kBAAkB,MAAM,CAAC,MAAM,EAAE;gBACjC,oBAAoB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,MAAM,EAAE;gBACzE,EAAE;gBACF,+DAA+D;gBAC/D,6FAA6F;aAC9F,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,UAAU,CACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,2EAA2E;QACxF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACxD,CAAC;KACH,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CACrB,CAAC,CAAC,EAAE,EAAE,CACJ,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,GAAG,CACzF,CAAC;QACF,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,8EAA8E;QAC3F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;KAC1B,EACD,KAAK,IAAI,EAAE;QACT,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC,oBAAoB,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CACrB,CAAC,CAAC,EAAE,EAAE,CACJ,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,oBAAoB,IAAI,GAAG,WAAW,CAAC,CAAC,iBAAiB,IAAI,GAAG,EAAE,CACjH,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC;QAC/D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAC1D,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC;oBAC/B,EAAE,EAAE,CAAC,CAAC,iBAAiB,IAAI,SAAS;oBACpC,OAAO,EAAE,CAAC;oBACV,IAAI,EAAE,CAAC,CAAC,SAAS;oBACjB,IAAI,EAAE,kBAAkB;oBACxB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,SAAS,EAAE,aAAa;oBACxB,QAAQ,EAAE,CAAC,CAAC,IAAI,IAAI,WAAW;oBAC/B,MAAM,EAAE,WAAW;iBACpB,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,sDAAsD;QACnE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACxD,CAAC;KACH,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CACrB,CAAC,CAAC,EAAE,EAAE,CACJ,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CACjJ,CAAC;QACF,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC;IACxD,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACT,uIAAuI;QACzI,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;SACvD,CAAC;KACH,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,OAAO,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,UAAU,CACf,MAAM,CAAC,EAAE;gBACP,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;gBACtD,CAAC,CAAC,MAAM,CAAC,OAAO,EAClB,CAAC,MAAM,CAAC,EAAE,CACX,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,UAAU,CACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,CAAC,kCAAkC,WAAW,EAAE,CAAC,CAAC;IACxD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,oCAAoC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAsB,EACtB,WAAW,GAAG,cAAc,EAAE;IAE9B,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CACT,WAAW,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CACrE,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CACT,yBAAyB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,aAAa,KAAK,YAAY,CAAC,CAAC,MAAM,EAAE,CACrH,CAAC;QACF,OAAO,CAAC,GAAG,CACT,eAAe,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,MAAM,EAAE,CACxE,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,CAAC"}

package/dist/src/paths.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Path safety for REWIND.
+ *
+ * Fail closed: only approved project-local sandboxes may be mutated
+ * (sandbox-test-project, sandbox-enforced-project). Checkpoint data lives
+ * under .rewind/ inside the *user project*, never inside the npm package.
+ */
+export declare const SANDBOX_DIR_NAME = "sandbox-test-project";
+export declare const ENFORCED_SANDBOX_DIR_NAME = "sandbox-enforced-project";
+export declare const REWIND_DIR_NAME = ".rewind";
+export type SandboxName = typeof SANDBOX_DIR_NAME | typeof ENFORCED_SANDBOX_DIR_NAME;
+export declare const APPROVED_SANDBOX_NAMES: readonly SandboxName[];
+/**
+ * Absolute path to the installed REWIND *package* (read-only runtime).
+ * Never write user/project state here.
+ */
+export declare function getPackageRoot(): string;
+/**
+ * Absolute path to the *user project* REWIND operates on.
+ * Defaults to process.cwd() — never the npm package / dist tree.
+ */
+export declare function getProjectRoot(): string;
+/** Global user state directory (~/.rewind) — credentials, commercial, keys. */
+export declare function getUserRewindDir(override?: string | undefined): string;
+/**
+ * How to invoke the installed REWIND CLI (portable — no tsx / src paths).
+ */
+export declare function resolveRewindCliInvocation(extraArgs?: string[]): {
+    command: string;
+    args: string[];
+};
+export declare function assertSandboxName(name: string): SandboxName;
+export declare function getSandboxPath(projectRoot?: string, sandboxName?: SandboxName): string;
+export declare function getEnforcedSandboxPath(projectRoot?: string): string;
+export declare function getPolicyDir(projectRoot?: string): string;
+export declare function getTrustDir(projectRoot?: string): string;
+export declare function getEnforcementDir(projectRoot?: string): string;
+export declare function getRewindHome(projectRoot?: string): string;
+export declare function getCheckpointsDir(projectRoot?: string): string;
+export declare function getTransactionsDir(projectRoot?: string): string;
+export declare function getSessionsDir(projectRoot?: string): string;
+export declare function getActionsDir(projectRoot?: string): string;
+export declare function getObjectsDir(projectRoot?: string): string;
+export declare function getMcpSessionsDir(projectRoot?: string): string;
+export declare class PathSafetyError extends Error {
+    readonly name = "PathSafetyError";
+    constructor(message: string);
+}
+/** Normalize to absolute, resolved path without requiring existence. */
+export declare function normalizeAbsolute(input: string): string;
+/**
+ * Returns true if `candidate` is exactly `root` or a path strictly inside it.
+ * Both arguments should be absolute. Does not follow symlinks.
+ * Also treats path strings as equal when they differ only by a shared
+ * realpath prefix mismatch that the caller already normalized.
+ */
+export declare function isPathInside(root: string, candidate: string): boolean;
+/**
+ * Like isPathInside, but resolves both sides with realpath when they exist.
+ * Handles macOS /var vs /private/var discrepancies.
+ */
+export declare function isPathInsideAsync(root: string, candidate: string): Promise<boolean>;
+/** Forbidden roots that must never be targeted. */
+export declare function getForbiddenRoots(): string[];
+/**
+ * Assert a relative path from sandbox has no traversal / absolute / null bytes.
+ * Returns a cleaned POSIX-style relative path.
+ */
+export declare function assertSafeRelativePath(rel: string): string;
+/**
+ * Resolve a relative sandbox path to an absolute path and ensure it stays
+ * inside the approved sandbox. Does not follow the final component if it is
+ * a dangling symlink (uses join + resolve of parent).
+ */
+export declare function resolveInsideSandbox(relativePath: string, sandboxRoot?: string): string;
+export interface SandboxValidation {
+    ok: true;
+    target: string;
+    approvedSandbox: string;
+    realTarget: string;
+}
+/**
+ * Validate that `target` is exactly an approved sandbox directory
+ * (sandbox-test-project or sandbox-enforced-project).
+ * Fail closed on missing paths, wrong identity, or symlink escape.
+ */
+export declare function assertApprovedSandbox(target: string, projectRoot?: string, sandboxName?: SandboxName): Promise<SandboxValidation>;
+/**
+ * After resolving a path that may be a symlink, ensure the real target
+ * remains inside the sandbox. Used when reading/writing individual files.
+ */
+export declare function assertNoSymlinkEscape(absolutePath: string, sandboxRoot: string): Promise<void>;
+/** Print chaos-test safety banner. Throws if not approved. */
+export declare function printChaosSafetyBanner(target: string, projectRoot?: string): Promise<SandboxValidation>;