@skillsmith/core 0.12.1 → 0.12.2

package/dist/src/services/skill-identity-classification.js

@@ -0,0 +1,295 @@
+/**
+ * @fileoverview Shared skill-identity contradiction-signal classification
+ * @module @skillsmith/core/services/skill-identity-classification
+ * @see SMI-6343 Wave 3 — tamper-check classification (AC#3)
+ *
+ * Three deterministic-or-best-effort "does this manifest entry's recorded
+ * identity contradict what's actually installed" signals, plus a
+ * "has this on-disk content been locally edited since install" check —
+ * consumed by BOTH `packages/mcp-server/src/tools/outdated.ts` (via
+ * `outdated.identity.ts`) and `packages/cli/src/commands/manage.update.ts`,
+ * so the two packages cannot drift into two independently-maintained
+ * implementations of the same contradiction logic (exactly the "sibling
+ * implementation" bug class both Wave 1 and Wave 2 of SMI-6343 already hit).
+ *
+ * Deliberately decoupled from either caller's own `RegistrySkillInfo` shape
+ * (mcp-server's `install.types.ts` and core's own `skill-installation.types.ts`
+ * both have independently-evolved versions) — callers adapt their own
+ * registry-lookup result into the minimal {@link RegistryLookupOutcome} shape
+ * this module needs.
+ *
+ * Every function here is synchronous and filesystem-free by design: signal 3
+ * (path containment) is a pure string check against an already-resolved
+ * expected root directory, not a `fs.realpath` call — the callers of this
+ * module (`outdated.ts`, `manage.update.ts`) only ever reach the "outdated"
+ * classification branch after already having successfully read the
+ * installed skill's SKILL.md this same iteration, so "does installPath
+ * exist" is already established by the time these signals run.
+ */
+import { relative, isAbsolute, sep } from 'node:path';
+import { SkillParser } from '../indexer/SkillParser.js';
+import { firstNonBlankHash } from './skill-content-comparison.js';
+// ============================================================================
+// Signal 1 — owner mismatch
+// ============================================================================
+/**
+ * Parse a clean `owner/name` pair (exactly one slash, no URL scheme) into
+ * its owner segment. Returns `null` for anything that isn't that exact
+ * shape — critically, a raw URL (`https://github.com/owner/repo`, a
+ * direct-URL install's `id`/`source`) is NOT an `owner/name` pair and must
+ * return `null` here rather than a garbage "owner" parsed from before the
+ * URL's first slash (e.g. `'https:'`). Mirrors the same 2-segment
+ * distinction `install.helpers.ts`'s `parseSkillId()` already draws between
+ * a registry id and a direct GitHub reference.
+ */
+function parseOwnerFromOwnerNamePair(value) {
+    if (value.includes('://'))
+        return null;
+    const parts = value.split('/');
+    if (parts.length !== 2)
+        return null;
+    const [owner, name] = parts;
+    return owner.length > 0 && name.length > 0 ? owner : null;
+}
+/**
+ * Parse the owner segment out of a manifest `source` string. Real installs
+ * write `source` as `'github:' + owner + '/' + repo` (`skill-installation.
+ * service.ts`) — the `'github:'` prefix is optional here so a bare
+ * `owner/repo` (or a future non-GitHub source shape) still parses. Returns
+ * `null` for the `'unknown'` distrust sentinel, a raw URL, or anything else
+ * with no parseable `owner/name` shape.
+ */
+export function parseOwnerFromSource(source) {
+    if (!source || source === 'unknown')
+        return null;
+    const withoutPrefix = source.startsWith('github:') ? source.slice('github:'.length) : source;
+    return parseOwnerFromOwnerNamePair(withoutPrefix);
+}
+/**
+ * Parse the owner segment out of a manifest entry's `id`. Returns `null`
+ * for anything that isn't a clean `owner/name` pair — most importantly a
+ * raw GitHub URL, which a direct-URL install records as `id` verbatim (see
+ * {@link parseOwnerFromOwnerNamePair}).
+ */
+export function parseOwnerFromId(id) {
+    if (!id)
+        return null;
+    return parseOwnerFromOwnerNamePair(id);
+}
+/**
+ * Signal 1: `id` parses as `owner/name` and `source` names a DIFFERENT
+ * owner. Deterministic, offline, zero network dependency. Catches the real
+ * `linear` skill corruption (`source: "github:lobehub/lobehub"` vs
+ * `id: "wrsmith108/linear"`).
+ */
+export function detectOwnerMismatch(entry) {
+    const idOwner = parseOwnerFromId(entry.id);
+    const sourceOwner = parseOwnerFromSource(entry.source);
+    if (!idOwner || !sourceOwner)
+        return false;
+    return idOwner.toLowerCase() !== sourceOwner.toLowerCase();
+}
+// ============================================================================
+// Signal 3 — path unresolved
+// ============================================================================
+/**
+ * Signal 3: `installPath` is absent, or resolves OUTSIDE `expectedRootDir`
+ * (the claimed client's native install root, or a workspace-scoped
+ * equivalent the caller resolves — see each caller's own scope handling).
+ *
+ * Deliberately a pure string containment check (`path.relative`), not a
+ * filesystem call: both callers of this module only reach this signal after
+ * already having successfully read the entry's SKILL.md this same
+ * iteration, so filesystem existence is already established. This also
+ * catches the exact shape of the SMI-6343 Wave 1 test-fixture leak (an
+ * OS-temp-dir `installPath` written into the real manifest) via simple
+ * string comparison, with no need to resolve symlinks.
+ *
+ * NOT a symlink-escape check (Wave 3 adversarial review, considered and
+ * scoped out): a real `installPath` inside `expectedRootDir` that is
+ * ITSELF a symlink pointing elsewhere is a local-filesystem-tampering
+ * threat distinct from this signal's actual purpose (catching a manifest
+ * entry whose *recorded* path doesn't match a legitimate install
+ * location — a software-bug/registry-tamper shape, not local attacker
+ * capability); an attacker with write access to plant such a symlink
+ * inside the client root already has equivalent-or-greater capability to
+ * edit SKILL.md content directly, making a `fs.realpath` upgrade here
+ * (which would also force this whole synchronous, filesystem-free module
+ * to become async) address a threat this signal was never meant to cover.
+ *
+ * The parent-segment check below (`rel === '..' || rel.startsWith('..' +
+ * sep)`) is deliberately NOT a bare `rel.startsWith('..')`: a literal
+ * directory name that happens to start with two dots (e.g. `..cache`) is a
+ * legitimate contained child — `path.relative('/r', '/r/..cache')` returns
+ * `'..cache'`, which a bare `startsWith('..')` would misclassify as an
+ * escape (Wave 3 adversarial review finding).
+ */
+export function detectPathUnresolved(installPath, expectedRootDir) {
+    if (!installPath)
+        return true;
+    const rel = relative(expectedRootDir, installPath);
+    if (rel === '')
+        return false;
+    return rel === '..' || rel.startsWith('..' + sep) || isAbsolute(rel);
+}
+function normalize(value) {
+    if (typeof value !== 'string')
+        return null;
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : null;
+}
+/**
+ * Signal 2: on-disk front-matter `author`/`name` contradicts the registry's
+ * record for the claimed `id`. Catches the real `commit` skill corruption
+ * (internally-consistent id/source, but content that belongs to an
+ * unrelated skill) — signal 1 alone does not catch this shape.
+ *
+ * H2 (fail-closed): when the registry lookup could not complete (offline,
+ * network error, quota-exhausted) OR completed but found no record for the
+ * claimed id, this returns `inconclusive: true` — NEVER "no contradiction."
+ * An inconclusive signal 2 still forces the overall classification to
+ * `unknown`, not `local-drift`/`current` — see {@link classifyDivergentEntry}.
+ *
+ * Exception, not a weakening of H2: when `id` itself doesn't parse as a
+ * well-formed `owner/name` registry key (a raw GitHub URL from a direct-URL
+ * install, an unresolved UUID) there is structurally no registry record to
+ * look up in the first place — a caller cannot "fail to check" something
+ * that was never a registry-backed identity to begin with. This is a clean
+ * non-fire, not an inconclusive one, exactly mirroring how an unparseable
+ * on-disk front-matter is treated below.
+ */
+function evaluateFrontmatterContradiction(entryId, localContent, registryLookup) {
+    if (parseOwnerFromId(entryId) === null) {
+        return { fired: false, inconclusive: false, inconclusiveReason: null };
+    }
+    if (!registryLookup.attempted) {
+        return {
+            fired: false,
+            inconclusive: true,
+            inconclusiveReason: registryLookup.failureReason ?? 'network-error',
+        };
+    }
+    if (registryLookup.failureReason) {
+        return { fired: false, inconclusive: true, inconclusiveReason: registryLookup.failureReason };
+    }
+    if (!registryLookup.record) {
+        return { fired: false, inconclusive: true, inconclusiveReason: 'no-registry-record' };
+    }
+    const parsed = localContent !== null ? new SkillParser().parse(localContent) : null;
+    if (!parsed) {
+        // Nothing to contradict with — a local parse failure is a data-quality
+        // fact, not a network-dependent uncertainty, so this is a clean
+        // non-fire, not `inconclusive` (see this module's fileoverview).
+        return { fired: false, inconclusive: false, inconclusiveReason: null };
+    }
+    const localAuthor = normalize(parsed.author);
+    const localName = normalize(parsed.name);
+    const registryAuthor = normalize(registryLookup.record.author);
+    const registryName = normalize(registryLookup.record.name);
+    const authorContradiction = localAuthor !== null &&
+        registryAuthor !== null &&
+        localAuthor.toLowerCase() !== registryAuthor.toLowerCase();
+    const nameContradiction = localName !== null &&
+        registryName !== null &&
+        localName.toLowerCase() !== registryName.toLowerCase();
+    return {
+        fired: authorContradiction || nameContradiction,
+        inconclusive: false,
+        inconclusiveReason: null,
+    };
+}
+// ============================================================================
+// Combined signal classification
+// ============================================================================
+/**
+ * Run all three contradiction signals against a manifest entry. Any one
+ * conclusively firing means `signal` is non-null — order (1, 3, 2) checks
+ * the two deterministic/offline signals first, only falling to the
+ * network-dependent signal 2 when neither of those already answered the
+ * question.
+ */
+export function classifyManifestEntryIdentity(params) {
+    const { entry, localContent, expectedRootDir, registryLookup } = params;
+    if (detectOwnerMismatch(entry)) {
+        return { signal: 'owner-mismatch', inconclusive: false, inconclusiveReason: null };
+    }
+    if (detectPathUnresolved(entry.installPath, expectedRootDir)) {
+        return { signal: 'path-unresolved', inconclusive: false, inconclusiveReason: null };
+    }
+    const signal2 = evaluateFrontmatterContradiction(entry.id, localContent, registryLookup);
+    if (signal2.inconclusive) {
+        return { signal: null, inconclusive: true, inconclusiveReason: signal2.inconclusiveReason };
+    }
+    if (signal2.fired) {
+        return { signal: 'frontmatter-contradiction', inconclusive: false, inconclusiveReason: null };
+    }
+    return { signal: null, inconclusive: false, inconclusiveReason: null };
+}
+// ============================================================================
+// Local-edit detection (local-drift vs outdated)
+// ============================================================================
+/**
+ * Has the on-disk content changed since the manifest's own recorded
+ * install/update-time hash? This is what distinguishes a benign local edit
+ * (`local-drift`) from a genuine registry version bump (`outdated`) once
+ * no identity signal has fired.
+ *
+ * When the manifest never recorded a comparable hash at all (a legacy or
+ * adopted entry, `contentHash`/`originalContentHash` both absent), this
+ * deliberately defaults to `false` (no edit evidence) rather than `true`
+ * (conservative) — absence of a recorded hash is a data-quality gap, not
+ * positive evidence of tampering, and defaulting to `true` here would
+ * misclassify the large population of legacy/adopted entries that never had
+ * a hash recorded as `local-drift` even when they are genuinely just
+ * outdated (SMI-6343 Wave 3 review finding).
+ */
+export function hasRecordedLocalEdit(entry, localHash) {
+    const recordedHash = firstNonBlankHash(entry.contentHash, entry.originalContentHash);
+    if (recordedHash === null || localHash === null)
+        return false;
+    return recordedHash !== localHash;
+}
+// ============================================================================
+// Full divergent-entry classification
+// ============================================================================
+/**
+ * Classify an entry the caller has ALREADY determined is divergent from the
+ * registry (mcp-server: `compareSkillContentHashes(...).outcome ===
+ * 'outdated'`; CLI: `getSkillDiff()` found a version/content difference).
+ * Never returns `'current'` — callers own that trivial case themselves,
+ * since it never needs signal evaluation at all.
+ */
+export function classifyDivergentEntry(params) {
+    const identity = classifyManifestEntryIdentity(params);
+    if (identity.signal) {
+        return { state: 'identity-mismatch', signal: identity.signal, inconclusiveReason: null };
+    }
+    if (identity.inconclusive) {
+        return { state: 'unknown', signal: null, inconclusiveReason: identity.inconclusiveReason };
+    }
+    const hasLocalEdit = hasRecordedLocalEdit(params.entry, params.localHash);
+    return hasLocalEdit
+        ? { state: 'local-drift', signal: null, inconclusiveReason: null }
+        : { state: 'outdated', signal: null, inconclusiveReason: null };
+}
+/**
+ * Full 5-state classification given an already-computed content-comparison
+ * outcome (from `compareSkillContentHashes`) plus the caller-derived reason
+ * a plain `'unknown'` comparison outcome couldn't be resolved (offline,
+ * quota-exhausted, network-error, or no-history — the caller already tracks
+ * which applies; see `outdated.ts`'s `deriveUnknownReason`).
+ */
+export function classifyOutdatedState(params) {
+    if (params.comparisonOutcome === 'current') {
+        return { state: 'current', signal: null, inconclusiveReason: null };
+    }
+    if (params.comparisonOutcome === 'unknown') {
+        return {
+            state: 'unknown',
+            signal: null,
+            inconclusiveReason: params.unknownReasonWhenComparisonUnknown,
+        };
+    }
+    return classifyDivergentEntry(params);
+}
+//# sourceMappingURL=skill-identity-classification.js.map

package/dist/src/services/skill-identity-classification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-identity-classification.js","sourceRoot":"","sources":["../../../src/services/skill-identity-classification.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AA8EjE,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,SAAS,2BAA2B,CAAC,KAAa;IAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACnC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAA;IAC3B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAiC;IACpE,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IAChD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAC5F,OAAO,2BAA2B,CAAC,aAAa,CAAC,CAAA;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAA6B;IAC5D,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IACpB,OAAO,2BAA2B,CAAC,EAAE,CAAC,CAAA;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsD;IAEtD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC1C,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACtD,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAA;IAC1C,OAAO,OAAO,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,CAAA;AAC5D,CAAC;AAED,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAsC,EACtC,eAAuB;IAEvB,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAA;IAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,CAAA;IAClD,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,KAAK,CAAA;IAC5B,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;AACtE,CAAC;AAYD,SAAS,SAAS,CAAC,KAAgC;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;AAC5C,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,gCAAgC,CACvC,OAAe,EACf,YAA2B,EAC3B,cAAqC;IAErC,IAAI,gBAAgB,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;IACxE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,YAAY,EAAE,IAAI;YAClB,kBAAkB,EAAE,cAAc,CAAC,aAAa,IAAI,eAAe;SACpE,CAAA;IACH,CAAC;IACD,IAAI,cAAc,CAAC,aAAa,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,kBAAkB,EAAE,cAAc,CAAC,aAAa,EAAE,CAAA;IAC/F,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,CAAA;IACvF,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACnF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,uEAAuE;QACvE,gEAAgE;QAChE,iEAAiE;QACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;IACxE,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,cAAc,GAAG,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC9D,MAAM,YAAY,GAAG,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAE1D,MAAM,mBAAmB,GACvB,WAAW,KAAK,IAAI;QACpB,cAAc,KAAK,IAAI;QACvB,WAAW,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,WAAW,EAAE,CAAA;IAC5D,MAAM,iBAAiB,GACrB,SAAS,KAAK,IAAI;QAClB,YAAY,KAAK,IAAI;QACrB,SAAS,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,WAAW,EAAE,CAAA;IAExD,OAAO;QACL,KAAK,EAAE,mBAAmB,IAAI,iBAAiB;QAC/C,YAAY,EAAE,KAAK;QACnB,kBAAkB,EAAE,IAAI;KACzB,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAK7C;IACC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,MAAM,CAAA;IAEvE,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;IACpF,CAAC;IACD,IAAI,oBAAoB,CAAC,KAAK,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;IACrF,CAAC;IAED,MAAM,OAAO,GAAG,gCAAgC,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,cAAc,CAAC,CAAA;IACxF,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAA;IAC7F,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,2BAA2B,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;IAC/F,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;AACxE,CAAC;AAED,+EAA+E;AAC/E,iDAAiD;AACjD,+EAA+E;AAE/E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA4E,EAC5E,SAAwB;IAExB,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACpF,IAAI,YAAY,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7D,OAAO,YAAY,KAAK,SAAS,CAAA;AACnC,CAAC;AAED,+EAA+E;AAC/E,sCAAsC;AACtC,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAMtC;IACC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAA;IACtD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;IAC1F,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAA;IAC5F,CAAC;IAED,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;IACzE,OAAO,YAAY;QACjB,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAClE,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;AACnE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAQrC;IAKC,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;IACrE,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,IAAI;YACZ,kBAAkB,EAAE,MAAM,CAAC,kCAAkC;SAC9D,CAAA;IACH,CAAC;IACD,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAA;AACvC,CAAC"}

package/dist/src/services/skill-identity-classification.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @fileoverview Unit tests for the shared skill-identity classification module
+ * @see SMI-6343 Wave 3 — tamper-check classification (AC#3)
+ */
+export {};
+//# sourceMappingURL=skill-identity-classification.test.d.ts.map

package/dist/src/services/skill-identity-classification.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-identity-classification.test.d.ts","sourceRoot":"","sources":["../../../src/services/skill-identity-classification.test.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/src/services/skill-identity-classification.test.js

@@ -0,0 +1,314 @@
+/**
+ * @fileoverview Unit tests for the shared skill-identity classification module
+ * @see SMI-6343 Wave 3 — tamper-check classification (AC#3)
+ */
+import { describe, it, expect } from 'vitest';
+import { parseOwnerFromSource, parseOwnerFromId, detectOwnerMismatch, detectPathUnresolved, hasRecordedLocalEdit, classifyManifestEntryIdentity, classifyDivergentEntry, classifyOutdatedState, } from './skill-identity-classification.js';
+function entry(overrides = {}) {
+    return {
+        id: 'wrsmith108/linear',
+        source: 'github:wrsmith108/linear',
+        installPath: '/home/user/.claude/skills/linear',
+        ...overrides,
+    };
+}
+const notAttempted = { attempted: false, record: null, failureReason: null };
+describe('parseOwnerFromSource', () => {
+    it('parses the owner out of a github: prefixed source', () => {
+        expect(parseOwnerFromSource('github:lobehub/lobehub')).toBe('lobehub');
+    });
+    it('parses a bare owner/repo without the prefix', () => {
+        expect(parseOwnerFromSource('acme/widget')).toBe('acme');
+    });
+    it('returns null for the "unknown" distrust sentinel', () => {
+        expect(parseOwnerFromSource('unknown')).toBeNull();
+    });
+    it('returns null for a source with no parseable owner segment', () => {
+        expect(parseOwnerFromSource('registry')).toBeNull();
+        expect(parseOwnerFromSource('')).toBeNull();
+        expect(parseOwnerFromSource(null)).toBeNull();
+        expect(parseOwnerFromSource(undefined)).toBeNull();
+    });
+    it('returns null for a raw URL source with no github: prefix', () => {
+        expect(parseOwnerFromSource('https://github.com/owner/repo')).toBeNull();
+    });
+});
+describe('parseOwnerFromId', () => {
+    it('parses the owner out of an owner/name id', () => {
+        expect(parseOwnerFromId('wrsmith108/linear')).toBe('wrsmith108');
+    });
+    it('returns null for a bare name with no slash', () => {
+        expect(parseOwnerFromId('linear')).toBeNull();
+    });
+    it('returns null for null/undefined', () => {
+        expect(parseOwnerFromId(null)).toBeNull();
+        expect(parseOwnerFromId(undefined)).toBeNull();
+    });
+    it('returns null for a raw GitHub URL id (direct-URL install) — regression: must not parse "https:" as the owner', () => {
+        expect(parseOwnerFromId('https://github.com/owner-b/test-repo')).toBeNull();
+    });
+    it('returns null for a 3+-segment owner/repo/path shape', () => {
+        expect(parseOwnerFromId('owner/repo/path')).toBeNull();
+    });
+});
+describe('detectOwnerMismatch (signal 1)', () => {
+    it('fires when id and source name different owners — the real `linear` incident shape', () => {
+        expect(detectOwnerMismatch({ id: 'wrsmith108/linear', source: 'github:lobehub/lobehub' })).toBe(true);
+    });
+    it('does not fire when owners agree', () => {
+        expect(detectOwnerMismatch({ id: 'wrsmith108/linear', source: 'github:wrsmith108/linear' })).toBe(false);
+    });
+    it('does not fire (case-insensitive) when owners agree only up to case', () => {
+        expect(detectOwnerMismatch({ id: 'WrSmith108/linear', source: 'github:wrsmith108/linear' })).toBe(false);
+    });
+    it('does not fire when source is the "unknown" sentinel', () => {
+        expect(detectOwnerMismatch({ id: 'wrsmith108/linear', source: 'unknown' })).toBe(false);
+    });
+    it('does not fire when id has no owner segment', () => {
+        expect(detectOwnerMismatch({ id: 'linear', source: 'github:lobehub/lobehub' })).toBe(false);
+    });
+    it('does not fire for a direct-URL install (id is the raw URL itself) — regression found against a real CLI multi-client fixture', () => {
+        expect(detectOwnerMismatch({
+            id: 'https://github.com/owner-b/test-repo',
+            source: 'github:owner-b/test-repo',
+        })).toBe(false);
+    });
+});
+describe('detectPathUnresolved (signal 3)', () => {
+    const root = '/home/user/.claude/skills';
+    it('does not fire for a path inside the expected root', () => {
+        expect(detectPathUnresolved(`${root}/astro`, root)).toBe(false);
+    });
+    it('fires for a path outside the expected root — the fixture-leak shape', () => {
+        expect(detectPathUnresolved('/tmp/skillsmith-test-abc123/fixture', root)).toBe(true);
+    });
+    it('fires for a missing installPath', () => {
+        expect(detectPathUnresolved(undefined, root)).toBe(true);
+        expect(detectPathUnresolved('', root)).toBe(true);
+    });
+    it('does not fire when installPath equals the root itself', () => {
+        expect(detectPathUnresolved(root, root)).toBe(false);
+    });
+    it('does NOT fire for a contained child whose name merely starts with two dots (adversarial-review regression)', () => {
+        // path.relative('/root', '/root/..cache') === '..cache' — a literal,
+        // legitimate directory name, not a parent-directory escape. A bare
+        // `rel.startsWith('..')` check would misclassify this as outside.
+        expect(detectPathUnresolved(`${root}/..cache`, root)).toBe(false);
+    });
+    it('fires for an actual parent-directory escape one level up', () => {
+        expect(detectPathUnresolved('/home/user/.claude/other', root)).toBe(true);
+    });
+});
+describe('hasRecordedLocalEdit', () => {
+    it('returns true when the on-disk hash differs from the recorded hash', () => {
+        expect(hasRecordedLocalEdit({ contentHash: 'aaa' }, 'bbb')).toBe(true);
+    });
+    it('returns false when the on-disk hash matches the recorded hash', () => {
+        expect(hasRecordedLocalEdit({ contentHash: 'aaa' }, 'aaa')).toBe(false);
+    });
+    it('falls back to originalContentHash when contentHash is absent', () => {
+        expect(hasRecordedLocalEdit({ originalContentHash: 'aaa' }, 'bbb')).toBe(true);
+    });
+    it('defaults to false (no evidence of edit) when neither hash was ever recorded', () => {
+        expect(hasRecordedLocalEdit({}, 'bbb')).toBe(false);
+    });
+    it('defaults to false when the local hash itself is unavailable', () => {
+        expect(hasRecordedLocalEdit({ contentHash: 'aaa' }, null)).toBe(false);
+    });
+});
+describe('classifyManifestEntryIdentity — signal 2 (frontmatter contradiction)', () => {
+    const frontmatterContent = [
+        '---',
+        'name: commit',
+        'author: some-unrelated-author',
+        '---',
+        '# Commit skill',
+        'Sentry commit-message conventions.',
+    ].join('\n');
+    it('fires when on-disk author contradicts the registry record for the claimed id', () => {
+        const result = classifyManifestEntryIdentity({
+            entry: entry({ id: 'acme/commit', source: 'github:acme/commit' }),
+            localContent: frontmatterContent,
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: { attempted: true, record: { author: 'acme', name: 'commit' } },
+        });
+        expect(result.signal).toBe('frontmatter-contradiction');
+        expect(result.inconclusive).toBe(false);
+    });
+    it('does not fire when on-disk author agrees with the registry record', () => {
+        const result = classifyManifestEntryIdentity({
+            entry: entry({
+                id: 'some-unrelated-author/commit',
+                source: 'github:some-unrelated-author/commit',
+            }),
+            localContent: frontmatterContent,
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: {
+                attempted: true,
+                record: { author: 'some-unrelated-author', name: 'commit' },
+            },
+        });
+        expect(result.signal).toBeNull();
+        expect(result.inconclusive).toBe(false);
+    });
+    it('is inconclusive (never "no contradiction") when the lookup was not attempted — offline', () => {
+        const result = classifyManifestEntryIdentity({
+            entry: entry(),
+            localContent: frontmatterContent,
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: { attempted: false, record: null, failureReason: 'offline' },
+        });
+        expect(result.signal).toBeNull();
+        expect(result.inconclusive).toBe(true);
+        expect(result.inconclusiveReason).toBe('offline');
+    });
+    it('is inconclusive when quota-exhausted', () => {
+        const result = classifyManifestEntryIdentity({
+            entry: entry(),
+            localContent: frontmatterContent,
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: { attempted: false, record: null, failureReason: 'quota-exhausted' },
+        });
+        expect(result.inconclusive).toBe(true);
+        expect(result.inconclusiveReason).toBe('quota-exhausted');
+    });
+    it('is inconclusive when the lookup was attempted but failed (network error)', () => {
+        const result = classifyManifestEntryIdentity({
+            entry: entry(),
+            localContent: frontmatterContent,
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: { attempted: true, record: null, failureReason: 'network-error' },
+        });
+        expect(result.inconclusive).toBe(true);
+        expect(result.inconclusiveReason).toBe('network-error');
+    });
+    it('is inconclusive when the lookup completed but found no registry record', () => {
+        const result = classifyManifestEntryIdentity({
+            entry: entry(),
+            localContent: frontmatterContent,
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: { attempted: true, record: null },
+        });
+        expect(result.inconclusive).toBe(true);
+        expect(result.inconclusiveReason).toBe('no-registry-record');
+    });
+    it('does not fire (and is not inconclusive) when local content has no parseable frontmatter', () => {
+        const result = classifyManifestEntryIdentity({
+            entry: entry(),
+            localContent: 'plain content with no frontmatter',
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: { attempted: true, record: { author: 'wrsmith108', name: 'linear' } },
+        });
+        expect(result.signal).toBeNull();
+        expect(result.inconclusive).toBe(false);
+    });
+    it('is a clean non-fire (not inconclusive) when id does not parse as owner/name — a raw-URL direct install has no registry key to check', () => {
+        const result = classifyManifestEntryIdentity({
+            entry: entry({
+                id: 'https://github.com/owner-b/test-repo',
+                source: 'github:owner-b/test-repo',
+            }),
+            localContent: frontmatterContent,
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: notAttempted,
+        });
+        expect(result.signal).toBeNull();
+        expect(result.inconclusive).toBe(false);
+    });
+    it('signal 1 takes precedence over an inconclusive signal 2', () => {
+        const result = classifyManifestEntryIdentity({
+            entry: entry({ id: 'wrsmith108/linear', source: 'github:lobehub/lobehub' }),
+            localContent: frontmatterContent,
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: notAttempted,
+        });
+        expect(result.signal).toBe('owner-mismatch');
+        expect(result.inconclusive).toBe(false);
+    });
+});
+describe('classifyDivergentEntry', () => {
+    it('classifies as identity-mismatch when a signal fires', () => {
+        const result = classifyDivergentEntry({
+            entry: entry({ id: 'wrsmith108/linear', source: 'github:lobehub/lobehub' }),
+            localHash: 'abc',
+            localContent: 'content',
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: notAttempted,
+        });
+        expect(result.state).toBe('identity-mismatch');
+        expect(result.signal).toBe('owner-mismatch');
+    });
+    it('classifies as unknown when signal 2 is inconclusive', () => {
+        const result = classifyDivergentEntry({
+            entry: entry(),
+            localHash: 'abc',
+            localContent: 'content',
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: { attempted: false, record: null, failureReason: 'offline' },
+        });
+        expect(result.state).toBe('unknown');
+        expect(result.inconclusiveReason).toBe('offline');
+    });
+    it('classifies as local-drift when no signal fires but on-disk content diverges from the recorded hash', () => {
+        const result = classifyDivergentEntry({
+            entry: entry({ contentHash: 'recorded-hash' }),
+            localHash: 'edited-hash',
+            localContent: 'content',
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: { attempted: true, record: { author: 'wrsmith108', name: 'linear' } },
+        });
+        expect(result.state).toBe('local-drift');
+        expect(result.signal).toBeNull();
+    });
+    it('classifies as outdated when no signal fires and no local edit is evidenced', () => {
+        const result = classifyDivergentEntry({
+            entry: entry(),
+            localHash: 'installed-hash',
+            localContent: 'content',
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: { attempted: true, record: { author: 'wrsmith108', name: 'linear' } },
+        });
+        expect(result.state).toBe('outdated');
+    });
+});
+describe('classifyOutdatedState', () => {
+    it('returns current without evaluating signals', () => {
+        const result = classifyOutdatedState({
+            comparisonOutcome: 'current',
+            unknownReasonWhenComparisonUnknown: 'no-history',
+            entry: entry({ id: 'wrsmith108/linear', source: 'github:lobehub/lobehub' }), // would fire if evaluated
+            localHash: 'x',
+            localContent: 'content',
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: notAttempted,
+        });
+        expect(result.state).toBe('current');
+        expect(result.signal).toBeNull();
+    });
+    it('returns unknown with the caller-supplied reason when the comparison itself is unknown', () => {
+        const result = classifyOutdatedState({
+            comparisonOutcome: 'unknown',
+            unknownReasonWhenComparisonUnknown: 'no-history',
+            entry: entry(),
+            localHash: null,
+            localContent: null,
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: notAttempted,
+        });
+        expect(result.state).toBe('unknown');
+        expect(result.inconclusiveReason).toBe('no-history');
+    });
+    it('delegates to classifyDivergentEntry for an outdated comparison outcome', () => {
+        const result = classifyOutdatedState({
+            comparisonOutcome: 'outdated',
+            unknownReasonWhenComparisonUnknown: 'no-history',
+            entry: entry(),
+            localHash: 'installed-hash',
+            localContent: 'content',
+            expectedRootDir: '/home/user/.claude/skills',
+            registryLookup: { attempted: true, record: { author: 'wrsmith108', name: 'linear' } },
+        });
+        expect(result.state).toBe('outdated');
+    });
+});
+//# sourceMappingURL=skill-identity-classification.test.js.map

package/dist/src/services/skill-identity-classification.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-identity-classification.test.js","sourceRoot":"","sources":["../../../src/services/skill-identity-classification.test.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,6BAA6B,EAC7B,sBAAsB,EACtB,qBAAqB,GAGtB,MAAM,oCAAoC,CAAA;AAE3C,SAAS,KAAK,CAAC,YAA+C,EAAE;IAC9D,OAAO;QACL,EAAE,EAAE,mBAAmB;QACvB,MAAM,EAAE,0BAA0B;QAClC,WAAW,EAAE,kCAAkC;QAC/C,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,MAAM,YAAY,GAA0B,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAA;AAEnG,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACpD,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACnD,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC3C,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC7C,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACpD,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC1E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACzC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAChD,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,8GAA8G,EAAE,GAAG,EAAE;QACtH,MAAM,CAAC,gBAAgB,CAAC,sCAAsC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC7E,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,CAC7F,IAAI,CACL,CAAA;IACH,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CACJ,mBAAmB,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CACrF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACf,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CACJ,mBAAmB,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CACrF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACf,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,8HAA8H,EAAE,GAAG,EAAE;QACtI,MAAM,CACJ,mBAAmB,CAAC;YAClB,EAAE,EAAE,sCAAsC;YAC1C,MAAM,EAAE,0BAA0B;SACnC,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACf,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,MAAM,IAAI,GAAG,2BAA2B,CAAA;IACxC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,oBAAoB,CAAC,GAAG,IAAI,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,oBAAoB,CAAC,qCAAqC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,oBAAoB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxD,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,4GAA4G,EAAE,GAAG,EAAE;QACpH,qEAAqE;QACrE,mEAAmE;QACnE,kEAAkE;QAClE,MAAM,CAAC,oBAAoB,CAAC,GAAG,IAAI,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,oBAAoB,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,oBAAoB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,oBAAoB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,oBAAoB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sEAAsE,EAAE,GAAG,EAAE;IACpF,MAAM,kBAAkB,GAAG;QACzB,KAAK;QACL,cAAc;QACd,+BAA+B;QAC/B,KAAK;QACL,gBAAgB;QAChB,oCAAoC;KACrC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEZ,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,MAAM,GAAG,6BAA6B,CAAC;YAC3C,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;YACjE,YAAY,EAAE,kBAAkB;YAChC,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;SAChF,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;QACvD,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,6BAA6B,CAAC;YAC3C,KAAK,EAAE,KAAK,CAAC;gBACX,EAAE,EAAE,8BAA8B;gBAClC,MAAM,EAAE,qCAAqC;aAC9C,CAAC;YACF,YAAY,EAAE,kBAAkB;YAChC,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE;gBACd,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC5D;SACF,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAChC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,MAAM,GAAG,6BAA6B,CAAC;YAC3C,KAAK,EAAE,KAAK,EAAE;YACd,YAAY,EAAE,kBAAkB;YAChC,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE;SAC7E,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAChC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,6BAA6B,CAAC;YAC3C,KAAK,EAAE,KAAK,EAAE;YACd,YAAY,EAAE,kBAAkB;YAChC,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,iBAAiB,EAAE;SACrF,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,MAAM,GAAG,6BAA6B,CAAC;YAC3C,KAAK,EAAE,KAAK,EAAE;YACd,YAAY,EAAE,kBAAkB;YAChC,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE;SAClF,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,MAAM,GAAG,6BAA6B,CAAC;YAC3C,KAAK,EAAE,KAAK,EAAE;YACd,YAAY,EAAE,kBAAkB;YAChC,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;SAClD,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,MAAM,MAAM,GAAG,6BAA6B,CAAC;YAC3C,KAAK,EAAE,KAAK,EAAE;YACd,YAAY,EAAE,mCAAmC;YACjD,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;SACtF,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAChC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qIAAqI,EAAE,GAAG,EAAE;QAC7I,MAAM,MAAM,GAAG,6BAA6B,CAAC;YAC3C,KAAK,EAAE,KAAK,CAAC;gBACX,EAAE,EAAE,sCAAsC;gBAC1C,MAAM,EAAE,0BAA0B;aACnC,CAAC;YACF,YAAY,EAAE,kBAAkB;YAChC,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,YAAY;SAC7B,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAChC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,MAAM,GAAG,6BAA6B,CAAC;YAC3C,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;YAC3E,YAAY,EAAE,kBAAkB;YAChC,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,YAAY;SAC7B,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAC5C,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,sBAAsB,CAAC;YACpC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;YAC3E,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,SAAS;YACvB,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,YAAY;SAC7B,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAC9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,sBAAsB,CAAC;YACpC,KAAK,EAAE,KAAK,EAAE;YACd,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,SAAS;YACvB,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE;SAC7E,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oGAAoG,EAAE,GAAG,EAAE;QAC5G,MAAM,MAAM,GAAG,sBAAsB,CAAC;YACpC,KAAK,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;YAC9C,SAAS,EAAE,aAAa;YACxB,YAAY,EAAE,SAAS;YACvB,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;SACtF,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,MAAM,GAAG,sBAAsB,CAAC;YACpC,KAAK,EAAE,KAAK,EAAE;YACd,SAAS,EAAE,gBAAgB;YAC3B,YAAY,EAAE,SAAS;YACvB,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;SACtF,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACnC,iBAAiB,EAAE,SAAS;YAC5B,kCAAkC,EAAE,YAAY;YAChD,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,EAAE,0BAA0B;YACvG,SAAS,EAAE,GAAG;YACd,YAAY,EAAE,SAAS;YACvB,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,YAAY;SAC7B,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACnC,iBAAiB,EAAE,SAAS;YAC5B,kCAAkC,EAAE,YAAY;YAChD,KAAK,EAAE,KAAK,EAAE;YACd,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,YAAY;SAC7B,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACnC,iBAAiB,EAAE,UAAU;YAC7B,kCAAkC,EAAE,YAAY;YAChD,KAAK,EAAE,KAAK,EAAE;YACd,SAAS,EAAE,gBAAgB;YAC3B,YAAY,EAAE,SAAS;YACvB,eAAe,EAAE,2BAA2B;YAC5C,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;SACtF,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}