@smeltjs/core 0.1.0 → 0.2.0

package/dist/hooks/guard-core.js

@@ -0,0 +1,513 @@
+import { readSync, statSync, existsSync, readFileSync } from 'node:fs';
+import { dirname, isAbsolute, join, resolve } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import process from 'node:process';
+/**
+ * The guard core — one zero-dependency node script, shared by every harness shim.
+ *
+ * Contract (KOT-212): stdin carries one JSON request
+ * `{ tool, input: { path?, command?, offsetLimited? } }`, stdout answers with one
+ * JSON decision `{ action: "allow" | "deny", reason?, suggestion? }`, and the exit
+ * code is always 0 — the decision lives in the JSON, and each shim translates it
+ * into its harness's own schema (exit 2, `permissionDecision`, `cancel:true`, …).
+ *
+ * Two properties are load-bearing and guarded:
+ *
+ *  - **Fail open, loudly.** Malformed stdin, a malformed config, an unstatable path —
+ *    every degenerate input produces `{"action":"allow"}` plus a warning on stderr.
+ *    A guard that can brick a session on bad input is worse than no guard; the agent
+ *    loses nothing but the optimization, and the warning says so.
+ *  - **No library import on any path.** This module imports node builtins only —
+ *    never `../index.ts`, never a planner, never web-tree-sitter. The allow case is
+ *    a stat and an exit; the research note
+ *    (docs/research/2026-09-02-agent-enforcement.md § 5) budgets the always-on guard
+ *    at tens of milliseconds, and loading grammar machinery here would spend that
+ *    budget before deciding anything. The smelt run itself is only ever paid by the
+ *    *replacement* command the model runs after a deny (or the rewritten command).
+ *
+ * Config: the nearest `smelt.config.json` (walking up from the cwd, same discovery
+ * as the CLI) may carry a `hooks` block — `thresholdBytes` and `enforcement` — plus
+ * the `defaultBudgetBytes` the suggested command quotes. This file reads that config
+ * with its own tolerant reader instead of importing `cli/config.ts`: the CLI's strict
+ * parser sits on the planner import graph, and a *guard* must fail open where the CLI
+ * correctly refuses. `test/hooks-guard-core.test.ts` pins the two readers to the same
+ * key names and defaults, so they cannot drift apart silently.
+ */
+/** Deny threshold when no config says otherwise: reads at or under this pass untouched. */
+export const DEFAULT_THRESHOLD_BYTES = 8192;
+/**
+ * The `--budget` the suggested replacement command quotes when no config carries
+ * `defaultBudgetBytes`. A suggestion default, not a smelt default: the CLI itself
+ * still refuses to run without an explicit budget from a flag or the config.
+ */
+export const DEFAULT_SUGGESTION_BUDGET_BYTES = 8000;
+/** The `hooks.enforcement` values `smelt.config.json` may carry. Deny is the default. */
+export const ENFORCEMENT_MODES = ['deny', 'rewrite'];
+/** The config file this guard discovers, by the same name the CLI uses. */
+export const GUARD_CONFIG_FILE_NAME = 'smelt.config.json';
+/**
+ * The runnable CLI name every reason and suggestion quotes. A local (non-global)
+ * `npm install @smeltjs/core` puts no `smelt` on anyone's PATH — the installer wires
+ * every shim as `node "<dist path>"` for exactly that reason — so a suggestion
+ * saying bare `smelt` would exit 127 the moment the model (or a rewrite-mode
+ * harness) ran it. When this module's sibling `cli/bin.js` exists — the shipped
+ * `dist/` layout every real run executes from — the command names it through `node`
+ * explicitly; the bare name is only the fallback for layouts where the sibling is
+ * absent (the source tree under the test runner).
+ */
+export function smeltCliCommand() {
+    try {
+        const bin = join(dirname(fileURLToPath(import.meta.url)), '..', 'cli', 'bin.js');
+        if (existsSync(bin))
+            return `node ${shellQuote(bin)}`;
+    }
+    catch {
+        // fall through to the PATH name
+    }
+    return 'smelt';
+}
+const SMELT_CLI = smeltCliCommand();
+export const DEFAULT_GUARD_SETTINGS = {
+    thresholdBytes: DEFAULT_THRESHOLD_BYTES,
+    enforcement: 'deny',
+    budgetBytes: DEFAULT_SUGGESTION_BUDGET_BYTES,
+    persistentStore: false,
+};
+/**
+ * Read the nearest `smelt.config.json`'s guard-relevant fields, tolerantly.
+ *
+ * Tolerant is a deliberate divergence from the CLI: `smelt` refuses a malformed
+ * config because a silently skipped setting is a setting the user believed was in
+ * force — but this code runs inside somebody's *session*, before every Read, and a
+ * guard that turns a config typo into a hard-down harness has failed worse than the
+ * typo. So: any unreadable or ill-typed field falls back to its default, and `warn`
+ * receives one line saying which file and why — visible in the harness's hook debug
+ * output, never fatal.
+ */
+export function readGuardSettings(cwd, warn) {
+    const path = findGuardConfigFile(cwd);
+    if (path === undefined)
+        return DEFAULT_GUARD_SETTINGS;
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch (cause) {
+        warn(`smelt guard: ${path} is not readable JSON ` +
+            `(${cause instanceof Error ? cause.message : String(cause)}) — ` +
+            `guarding with defaults instead. \`smelt\` itself will refuse this config.`);
+        return DEFAULT_GUARD_SETTINGS;
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        warn(`smelt guard: ${path} is not a JSON object — guarding with defaults instead.`);
+        return DEFAULT_GUARD_SETTINGS;
+    }
+    const fields = parsed;
+    const hooks = typeof fields['hooks'] === 'object' &&
+        fields['hooks'] !== null &&
+        !Array.isArray(fields['hooks'])
+        ? fields['hooks']
+        : {};
+    return {
+        thresholdBytes: positiveInteger(hooks['thresholdBytes'], DEFAULT_THRESHOLD_BYTES, `${path}: hooks.thresholdBytes`, warn),
+        enforcement: enforcementMode(hooks['enforcement'], `${path}: hooks.enforcement`, warn),
+        budgetBytes: positiveInteger(fields['defaultBudgetBytes'], DEFAULT_SUGGESTION_BUDGET_BYTES, `${path}: defaultBudgetBytes`, warn),
+        persistentStore: isDirectoryStore(fields['store']),
+    };
+}
+/** True for a well-formed `{"kind":"directory","path":…}` store block; no warning
+ * otherwise — an absent or memory store is a valid (just non-persistent) choice. */
+function isDirectoryStore(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const fields = value;
+    return fields['kind'] === 'directory' && typeof fields['path'] === 'string';
+}
+function positiveInteger(value, fallback, what, warn) {
+    if (value === undefined)
+        return fallback;
+    if (typeof value === 'number' && Number.isInteger(value) && value > 0)
+        return value;
+    warn(`smelt guard: ${what} must be a positive integer, got ${JSON.stringify(value)} — ` +
+        `using ${String(fallback)}.`);
+    return fallback;
+}
+function enforcementMode(value, what, warn) {
+    if (value === undefined)
+        return 'deny';
+    if (value === 'deny' || value === 'rewrite')
+        return value;
+    warn(`smelt guard: ${what} must be "deny" or "rewrite", got ${JSON.stringify(value)} — ` +
+        `using "deny".`);
+    return 'deny';
+}
+/** The same upward walk `cli/config.ts` does, re-implemented to keep this module tiny. */
+export function findGuardConfigFile(cwd) {
+    let dir = resolve(cwd);
+    for (;;) {
+        const candidate = join(dir, GUARD_CONFIG_FILE_NAME);
+        if (existsSync(candidate))
+            return candidate;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return undefined;
+        dir = parent;
+    }
+}
+/** Parse one stdin request. `undefined` means malformed — the caller allows and warns. */
+export function parseGuardRequest(text) {
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+        return undefined;
+    const fields = parsed;
+    if (typeof fields['tool'] !== 'string')
+        return undefined;
+    const input = fields['input'];
+    if (typeof input !== 'object' || input === null || Array.isArray(input))
+        return undefined;
+    const inputFields = input;
+    const path = inputFields['path'];
+    const command = inputFields['command'];
+    const offsetLimited = inputFields['offsetLimited'];
+    if (path !== undefined && typeof path !== 'string')
+        return undefined;
+    if (command !== undefined && typeof command !== 'string')
+        return undefined;
+    if (offsetLimited !== undefined && typeof offsetLimited !== 'boolean')
+        return undefined;
+    return {
+        tool: fields['tool'],
+        input: {
+            ...(path === undefined ? {} : { path }),
+            ...(command === undefined ? {} : { command }),
+            ...(offsetLimited === undefined ? {} : { offsetLimited }),
+        },
+    };
+}
+const ALLOW = { action: 'allow' };
+/**
+ * The decision, pure given a stat function — so tests exercise every branch without
+ * a filesystem, and the script wires `statSync` in.
+ *
+ * The shape of the rules, from the research note (§ 5, "the ~8 KB threshold,
+ * validated", with both amendments):
+ *
+ *  - **Read**: stat the exact target; deny only above the threshold, and never when
+ *    the read is already windowed (`offsetLimited`) — a windowed read of a huge file
+ *    is an economy move.
+ *  - **Bash**: only a *simple* command whose subject is a statable named file can be
+ *    judged pre-run. `cat <file>` above the threshold is denied with the faithful
+ *    replacement; `grep`/`rg` output is unknowable pre-run, so it passes in deny
+ *    mode and is wrapped (` | smelt --budget … --focus <pattern>`) only under
+ *    `hooks.enforcement: "rewrite"`. Pipelines, redirects, substitutions — anything
+ *    this parser cannot be sure about — pass untouched. Fail open, always.
+ */
+export function decide(request, settings, cwd, statFile = statFileReal) {
+    if (request.tool === 'Read') {
+        return decideRead(request.input, settings, cwd, statFile);
+    }
+    if (request.tool === 'Bash') {
+        return decideBash(request.input, settings, cwd, statFile);
+    }
+    return ALLOW;
+}
+function statFileReal(path) {
+    try {
+        const stat = statSync(path);
+        return { size: stat.size, isFile: stat.isFile() };
+    }
+    catch {
+        return undefined;
+    }
+}
+function decideRead(input, settings, cwd, statFile) {
+    if (input.path === undefined)
+        return ALLOW;
+    if (input.offsetLimited === true)
+        return ALLOW; // already windowed — an economy move
+    const path = isAbsolute(input.path) ? input.path : resolve(cwd, input.path);
+    const stat = statFile(path);
+    if (stat === undefined || !stat.isFile)
+        return ALLOW; // let the tool surface its own error
+    if (stat.size <= settings.thresholdBytes)
+        return ALLOW;
+    return denyOversized(path, stat.size, settings, 'Reading it raw');
+}
+function decideBash(input, settings, cwd, statFile) {
+    if (input.command === undefined)
+        return ALLOW;
+    const command = input.command.trim();
+    // A command already using smelt is the model doing the right thing — including the
+    // exact replacement a previous deny suggested. Never intercept it (and never wrap a
+    // wrapped pipeline a second time).
+    if (/(^|[\s/"'=])smelt($|[\s"'])/.test(command))
+        return ALLOW;
+    const words = simpleCommandWords(command);
+    if (words === undefined || words.length === 0)
+        return ALLOW; // not simple — unknowable pre-run
+    const program = words[0].split('/').at(-1);
+    if (program === 'cat') {
+        const files = words.slice(1).filter((word) => word !== '--' && !word.startsWith('-'));
+        for (const file of files) {
+            const path = isAbsolute(file) ? file : resolve(cwd, file);
+            const stat = statFile(path);
+            if (stat === undefined || !stat.isFile)
+                continue;
+            if (stat.size > settings.thresholdBytes) {
+                const decision = denyOversized(path, stat.size, settings, `\`${command}\``);
+                // The suggestion is only a *faithful* replacement when cat named exactly this
+                // one file; `cat a b` replaced by `smelt a` would silently drop b, so the
+                // multi-file case keeps the reason (the model decides), drops the suggestion
+                // (nothing may auto-substitute it), and says out loud that the named
+                // replacement covers only the oversized file — a model following the reason
+                // verbatim must not silently drop the others.
+                return files.length === 1
+                    ? decision
+                    : {
+                        action: 'deny',
+                        reason: `${decision.reason ?? ''} Note: \`${command}\` names ` +
+                            `${String(files.length)} files and the replacement above covers only ` +
+                            `${path} — read the other file(s) separately (cat is fine for the ones ` +
+                            `under the threshold).`,
+                    };
+            }
+        }
+        return ALLOW;
+    }
+    if ((program === 'grep' || program === 'rg') && settings.enforcement === 'rewrite') {
+        const pattern = searchPattern(words);
+        if (pattern === undefined)
+            return ALLOW;
+        // Deliberately no `--focus` on the wrap: a plain grep's every output line contains
+        // the searched pattern, so focusing on it would protect the entire output — zero
+        // elisions exactly when the output is large, plus an over-budget exit. The wrap
+        // lets smelt's lexical planner keep the head and tail and collapse the middle
+        // into retrievable markers instead.
+        const wrapped = `${command} | ${SMELT_CLI} --budget ${String(settings.budgetBytes)}`;
+        return {
+            action: 'deny',
+            reason: `smelt guard (rewrite mode): \`${program}\` output size is unknowable before it runs, ` +
+                `so pipe it through smelt instead. Run exactly: ${wrapped} — output within the ` +
+                `budget passes through untouched; past it, elided regions leave <<smelt/v1 …>> ` +
+                `markers. ${retrieveSentence(settings)}`,
+            suggestion: wrapped,
+        };
+    }
+    return ALLOW;
+}
+/**
+ * The one sentence about getting elided bytes back — honest about the store: the
+ * retrieval promise is only made when a persistent store is configured, because a
+ * memory store dies with the process and `retrieve` then refuses (`resolveStoreRun`).
+ */
+function retrieveSentence(settings) {
+    return settings.persistentStore
+        ? `\`${SMELT_CLI} retrieve <hash>\` prints any marker's bytes back, byte for byte.`
+        : `\`${SMELT_CLI} retrieve <hash>\` can print a marker's bytes back once a persistent ` +
+            `store is configured ({"store":{"kind":"directory","path":…}} in smelt.config.json — ` +
+            `\`smelt hooks install\` writes one); without it the elided bytes die with the ` +
+            `smelt process.`;
+}
+/** The deny everything above the threshold gets: steering text plus the exact command. */
+function denyOversized(path, size, settings, what) {
+    const replacement = `${SMELT_CLI} ${shellQuote(path)} --budget ${String(settings.budgetBytes)}`;
+    return {
+        action: 'deny',
+        reason: `smelt guard: ${path} is ${String(size)} bytes — over the ${String(settings.thresholdBytes)}-byte ` +
+            `threshold (smelt.config.json hooks.thresholdBytes). ${what} would spend context on bytes ` +
+            `the task may not need. Run instead: ${replacement} --focus <what you are looking for> ` +
+            `(repeat --focus per term; focused regions survive verbatim). Elided regions leave ` +
+            `<<smelt/v1 …>> markers — ${retrieveSentence(settings)} A windowed read (offset/limit) ` +
+            `of just the lines you need is also fine.`,
+        suggestion: replacement,
+    };
+}
+/**
+ * Split a command into words IF it is one simple command: no pipes, no logic, no
+ * redirects, no substitutions, no expansions this code would have to model. Anything
+ * else returns `undefined` and the caller allows — the guard judges only what it can
+ * see whole.
+ */
+export function simpleCommandWords(command) {
+    const words = [];
+    let current = '';
+    let started = false;
+    let i = 0;
+    const push = () => {
+        if (started)
+            words.push(current);
+        current = '';
+        started = false;
+    };
+    while (i < command.length) {
+        const ch = command[i];
+        if ('|&;<>()`$\\\n*?~{}!'.includes(ch))
+            return undefined; // shell would interpret it
+        if (ch === "'" || ch === '"') {
+            const quote = ch;
+            i += 1;
+            started = true;
+            while (i < command.length && command[i] !== quote) {
+                if (quote === '"' && (command[i] === '$' || command[i] === '`' || command[i] === '\\')) {
+                    return undefined; // expansions inside double quotes — not simple
+                }
+                current += command[i];
+                i += 1;
+            }
+            if (i >= command.length)
+                return undefined; // unterminated quote
+            i += 1;
+            continue;
+        }
+        if (ch === ' ' || ch === '\t') {
+            push();
+            i += 1;
+            continue;
+        }
+        current += ch;
+        started = true;
+        i += 1;
+    }
+    push();
+    return words;
+}
+/**
+ * The pattern a grep/rg invocation searches for: an explicit `-e`/`--regexp` value if
+ * given, else the first word that is not a flag or a flag's value. `undefined` when
+ * the parse is not sure — and unsure means allow, like everything else here.
+ */
+export function searchPattern(words) {
+    const takesValue = new Set([
+        '-e',
+        '--regexp',
+        '-f',
+        '--file',
+        '-m',
+        '--max-count',
+        '-A',
+        '--after-context',
+        '-B',
+        '--before-context',
+        '-C',
+        '--context',
+        '-d',
+        '--directories',
+        '-D',
+        '--devices',
+        '--include',
+        '--exclude',
+        '--exclude-dir',
+        '-t',
+        '--type',
+        '-T',
+        '--type-not',
+        '-g',
+        '--glob',
+        '--iglob',
+        '-j',
+        '--threads',
+        '--color',
+        '--colour',
+    ]);
+    let i = 1;
+    while (i < words.length) {
+        const word = words[i];
+        if (word === '--')
+            return words[i + 1];
+        if (word === '-e' || word === '--regexp')
+            return words[i + 1];
+        if (word.startsWith('--') && word.includes('=')) {
+            i += 1;
+            continue;
+        }
+        if (word.startsWith('-') && word.length > 1) {
+            i += takesValue.has(word) ? 2 : 1;
+            continue;
+        }
+        return word;
+    }
+    return undefined;
+}
+/** Single-quote a value for `sh` unless it is plainly safe bare. */
+export function shellQuote(value) {
+    if (/^[A-Za-z0-9_./:=-]+$/.test(value))
+        return value;
+    return `'${value.replaceAll("'", `'"'"'`)}'`;
+}
+/* ------------------------------------------------------------------------------------
+ * The script half: `node dist/hooks/guard-core.js` — stdin request, stdout decision.
+ * ---------------------------------------------------------------------------------- */
+/** True when this module is the file node was asked to run, not an import. */
+export function isMainModule(moduleUrl) {
+    const entry = process.argv[1];
+    if (entry === undefined)
+        return false;
+    try {
+        return pathToFileURL(entry).href === moduleUrl;
+    }
+    catch {
+        return false;
+    }
+}
+/** Every byte of fd 0 to EOF, retrying EAGAIN — the same shape `cli/bin.ts` uses. */
+export function readAllOfStdin() {
+    const sleeper = new Int32Array(new SharedArrayBuffer(4));
+    const chunks = [];
+    const chunk = Buffer.alloc(1 << 16);
+    for (;;) {
+        let bytesRead;
+        try {
+            bytesRead = readSync(0, chunk, 0, chunk.length, null);
+        }
+        catch (error) {
+            const code = error.code;
+            if (code === 'EAGAIN') {
+                Atomics.wait(sleeper, 0, 0, 10);
+                continue;
+            }
+            if (code === 'EOF')
+                break;
+            throw error;
+        }
+        if (bytesRead === 0)
+            break;
+        chunks.push(Buffer.from(chunk.subarray(0, bytesRead)));
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+/**
+ * Run the guard over stdin and print the decision. Exit code 0 in every case —
+ * including every failure, which becomes an allow with a stderr warning. A guard
+ * subprocess that exits non-zero on its own bug would look like a policy decision
+ * to some harnesses, and "my hook crashed" must never read as "denied".
+ */
+export function runGuardMain() {
+    let decision = ALLOW;
+    try {
+        const raw = readAllOfStdin();
+        const request = parseGuardRequest(raw);
+        if (request === undefined) {
+            process.stderr.write(`smelt guard: stdin was not a {tool, input} JSON request — allowing the call. ` +
+                `A malformed hook wiring must never brick the session; fix the shim, not the model.\n`);
+        }
+        else {
+            const settings = readGuardSettings(process.cwd(), (text) => process.stderr.write(`${text}\n`));
+            decision = decide(request, settings, process.cwd());
+        }
+    }
+    catch (error) {
+        process.stderr.write(`smelt guard: unexpected error — allowing the call. ` +
+            `${error instanceof Error ? (error.stack ?? error.message) : String(error)}\n`);
+        decision = ALLOW;
+    }
+    process.stdout.write(`${JSON.stringify(decision)}\n`);
+}
+if (isMainModule(import.meta.url))
+    runGuardMain();
+//# sourceMappingURL=guard-core.js.map

package/dist/hooks/guard-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-core.js","sourceRoot":"","sources":["../../src/hooks/guard-core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,2FAA2F;AAC3F,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAEpD,yFAAyF;AACzF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,SAAS,CAAU,CAAC;AAG9D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAE1D;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACjF,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,QAAQ,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;AAiDpC,MAAM,CAAC,MAAM,sBAAsB,GAAkB;IACnD,cAAc,EAAE,uBAAuB;IACvC,WAAW,EAAE,MAAM;IACnB,WAAW,EAAE,+BAA+B;IAC5C,eAAe,EAAE,KAAK;CACvB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,IAA4B;IACzE,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,sBAAsB,CAAC;IAEtD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CACF,gBAAgB,IAAI,wBAAwB;YAC1C,IAAI,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;YAChE,2EAA2E,CAC9E,CAAC;QACF,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,gBAAgB,IAAI,yDAAyD,CAAC,CAAC;QACpF,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,MAAM,KAAK,GACT,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ;QACnC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI;QACxB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAE,MAAM,CAAC,OAAO,CAA6B;QAC9C,CAAC,CAAC,EAAE,CAAC;IAET,OAAO;QACL,cAAc,EAAE,eAAe,CAC7B,KAAK,CAAC,gBAAgB,CAAC,EACvB,uBAAuB,EACvB,GAAG,IAAI,wBAAwB,EAC/B,IAAI,CACL;QACD,WAAW,EAAE,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,IAAI,qBAAqB,EAAE,IAAI,CAAC;QACtF,WAAW,EAAE,eAAe,CAC1B,MAAM,CAAC,oBAAoB,CAAC,EAC5B,+BAA+B,EAC/B,GAAG,IAAI,sBAAsB,EAC7B,IAAI,CACL;QACD,eAAe,EAAE,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;KACnD,CAAC;AACJ,CAAC;AAED;oFACoF;AACpF,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,WAAW,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC;AAC9E,CAAC;AAED,SAAS,eAAe,CACtB,KAAc,EACd,QAAgB,EAChB,IAAY,EACZ,IAA4B;IAE5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,CACF,gBAAgB,IAAI,oCAAoC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK;QAChF,SAAS,MAAM,CAAC,QAAQ,CAAC,GAAG,CAC/B,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CACtB,KAAc,EACd,IAAY,EACZ,IAA4B;IAE5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,CACF,gBAAgB,IAAI,qCAAqC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK;QACjF,eAAe,CAClB,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACvB,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACpD,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACrC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7F,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1F,MAAM,WAAW,GAAG,KAAgC,CAAC;IACrD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;IACnD,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACrE,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC3E,IAAI,aAAa,KAAK,SAAS,IAAI,OAAO,aAAa,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxF,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE;YACL,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;YAC7C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;SAC1D;KACF,CAAC;AACJ,CAAC;AAED,MAAM,KAAK,GAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAEjD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,MAAM,CACpB,OAAqB,EACrB,QAAuB,EACvB,GAAW,EACX,QAAQ,GAAoE,YAAY;IAExF,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,KAA4B,EAC5B,QAAuB,EACvB,GAAW,EACX,QAAyE;IAEzE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,qCAAqC;IACrF,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,CAAC,qCAAqC;IAC3F,IAAI,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,cAAc;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,UAAU,CACjB,KAA4B,EAC5B,QAAuB,EACvB,GAAW,EACX,QAAyE;IAEzE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACrC,mFAAmF;IACnF,oFAAoF;IACpF,mCAAmC;IACnC,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAE9D,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,kCAAkC;IAE/F,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;IAE7C,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACtF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,SAAS;YACjD,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;gBACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC;gBAC5E,8EAA8E;gBAC9E,0EAA0E;gBAC1E,6EAA6E;gBAC7E,qEAAqE;gBACrE,4EAA4E;gBAC5E,8CAA8C;gBAC9C,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;oBACvB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC;wBACE,MAAM,EAAE,MAAM;wBACd,MAAM,EACJ,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,YAAY,OAAO,WAAW;4BACtD,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,+CAA+C;4BACtE,GAAG,IAAI,iEAAiE;4BACxE,uBAAuB;qBAC1B,CAAC;YACR,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,IAAI,CAAC,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnF,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACxC,mFAAmF;QACnF,iFAAiF;QACjF,gFAAgF;QAChF,8EAA8E;QAC9E,oCAAoC;QACpC,MAAM,OAAO,GAAG,GAAG,OAAO,MAAM,SAAS,aAAa,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACrF,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EACJ,iCAAiC,OAAO,+CAA+C;gBACvF,kDAAkD,OAAO,uBAAuB;gBAChF,gFAAgF;gBAChF,YAAY,gBAAgB,CAAC,QAAQ,CAAC,EAAE;YAC1C,UAAU,EAAE,OAAO;SACpB,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,QAAuB;IAC/C,OAAO,QAAQ,CAAC,eAAe;QAC7B,CAAC,CAAC,KAAK,SAAS,mEAAmE;QACnF,CAAC,CAAC,KAAK,SAAS,uEAAuE;YACnF,sFAAsF;YACtF,gFAAgF;YAChF,gBAAgB,CAAC;AACzB,CAAC;AAED,0FAA0F;AAC1F,SAAS,aAAa,CACpB,IAAY,EACZ,IAAY,EACZ,QAAuB,EACvB,IAAY;IAEZ,MAAM,WAAW,GAAG,GAAG,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IAChG,OAAO;QACL,MAAM,EAAE,MAAM;QACd,MAAM,EACJ,gBAAgB,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ;YACnG,uDAAuD,IAAI,gCAAgC;YAC3F,uCAAuC,WAAW,sCAAsC;YACxF,oFAAoF;YACpF,4BAA4B,gBAAgB,CAAC,QAAQ,CAAC,kCAAkC;YACxF,0CAA0C;QAC5C,UAAU,EAAE,WAAW;KACxB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC,CAAC,2BAA2B;QACrF,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,EAAE,CAAC;YACjB,CAAC,IAAI,CAAC,CAAC;YACP,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBAClD,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;oBACvF,OAAO,SAAS,CAAC,CAAC,+CAA+C;gBACnE,CAAC;gBACD,OAAO,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC;gBACvB,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC,CAAC,qBAAqB;YAChE,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,EAAE,CAAC;YACP,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;QACd,OAAO,GAAG,IAAI,CAAC;QACf,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,IAAI,EAAE,CAAC;IACP,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAwB;IACpD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;QACzB,IAAI;QACJ,UAAU;QACV,IAAI;QACJ,QAAQ;QACR,IAAI;QACJ,aAAa;QACb,IAAI;QACJ,iBAAiB;QACjB,IAAI;QACJ,kBAAkB;QAClB,IAAI;QACJ,WAAW;QACX,IAAI;QACJ,eAAe;QACf,IAAI;QACJ,WAAW;QACX,WAAW;QACX,WAAW;QACX,eAAe;QACf,IAAI;QACJ,QAAQ;QACR,IAAI;QACJ,YAAY;QACZ,IAAI;QACJ,QAAQ;QACR,SAAS;QACT,IAAI;QACJ,WAAW;QACX,SAAS;QACT,UAAU;KACX,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC;AAED;;wFAEwF;AAExF,8EAA8E;AAC9E,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc;IAC5B,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpC,SAAS,CAAC;QACR,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChC,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,KAAK;gBAAE,MAAM;YAC1B,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,SAAS,KAAK,CAAC;YAAE,MAAM;QAC3B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY;IAC1B,IAAI,QAAQ,GAAkB,KAAK,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+EAA+E;gBAC7E,sFAAsF,CACzF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAClC,CAAC;YACF,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qDAAqD;YACnD,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CACjF,CAAC;QACF,QAAQ,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;IAAE,YAAY,EAAE,CAAC"}

package/dist/hooks/shim.d.ts

@@ -0,0 +1,85 @@
+import { decide, isMainModule, parseGuardRequest } from './guard-core.ts';
+import type { GuardDecision, GuardRequest, GuardSettings } from './guard-core.ts';
+/**
+ * The shim runtime — the one loop every per-harness shim runs.
+ *
+ * A shim is a thin adapter: it maps its harness's native PreToolUse stdin schema
+ * onto a {@link GuardRequest}, hands that to the guard core, and renders the
+ * {@link GuardDecision} back in the harness's native output schema. All policy —
+ * threshold, windows, suggestion rendering, enforcement mode — lives in
+ * `guard-core.ts`; a shim that grew an opinion of its own would be a second guard
+ * that drifts from the first.
+ *
+ * The enforcement gate lives here, once, because it is the same for every harness:
+ *
+ *  - **deny mode (the default)**: a deny is rendered as the harness's deny, with the
+ *    guard's steering reason. The transcript stays truthful — the model sees what it
+ *    asked for refused and why, and learns to run the replacement (and
+ *    `smelt retrieve`) itself.
+ *  - **rewrite mode (`hooks.enforcement: "rewrite"` in smelt.config.json)**: when the
+ *    denied call is a Bash command, the guard produced a faithful executable
+ *    `suggestion`, and this harness can modify tool input, the shim substitutes the
+ *    suggestion instead of denying. A harness that cannot rewrite falls back to the
+ *    deny — with the exact command in the reason — so rewrite mode never silently
+ *    weakens into nothing. A substitution is always announced: in the decision
+ *    reason where the harness's rewrite schema carries one (Claude Code, Codex),
+ *    and on stderr where it does not (Gemini, Cursor, Hermes, the opencode
+ *    plugin) — a rewrite nobody can see would change what the model asked for
+ *    without telling anyone. And a shim never rewrites in deny mode: a silent
+ *    rewrite changes what the model asked for without telling it, which is this
+ *    project's signature failure shape applied to the harness (founder ruling,
+ *    KOT-212).
+ */
+/** What one harness shim supplies. Everything else is {@link runShim}'s. */
+export interface ShimAdapter {
+    /** Map the harness's raw stdin JSON to a guard request; `undefined` = pass through. */
+    readonly toRequest: (raw: unknown) => GuardRequest | undefined;
+    /**
+     * The working directory tool-relative paths resolve against, read from the raw
+     * payload when the harness sends one (Claude Code's hook stdin carries `cwd`: the
+     * *session's* Bash cwd, which after a `cd` differs from this hook process's own).
+     * `undefined` falls back to the shim process's cwd.
+     */
+    readonly cwd?: (raw: unknown) => string | undefined;
+    /** Render an allow. Most harnesses: empty stdout, exit 0. */
+    readonly pass: () => ShimOutput;
+    /** Render a deny, in the harness's schema. */
+    readonly deny: (raw: unknown, request: GuardRequest, decision: GuardDecision) => ShimOutput;
+    /**
+     * Render an input rewrite (only ever called for a Bash-shaped request whose
+     * decision carries a faithful `suggestion`, and only in rewrite mode). Omit on
+     * harnesses whose hook schema cannot modify tool input — they deny instead. A
+     * schema with no reason channel must announce the substitution via `stderr`.
+     */
+    readonly rewrite?: (raw: unknown, request: GuardRequest, decision: GuardDecision) => ShimOutput;
+}
+/** What a shim writes and how it exits. `stdout` is a complete JSON line or ''. */
+export interface ShimOutput {
+    readonly stdout: string;
+    /** Written to the shim process's stderr — the announcement channel for harnesses
+     * whose rewrite schema has no reason field. Never a decision by itself. */
+    readonly stderr?: string;
+    readonly exitCode: number;
+}
+/** The pure half of the shim loop, for tests: raw harness input → rendered output. */
+export declare function renderShimDecision(adapter: ShimAdapter, raw: unknown, settings: GuardSettings, cwd: string, statFile?: Parameters<typeof decide>[3]): ShimOutput;
+/**
+ * The whole shim as a process: read the harness's stdin, decide, render, exit.
+ * Fail open exactly like the guard core — unparseable stdin passes with a stderr
+ * warning, and an unexpected error passes too. A shim crash must never read as a
+ * policy decision.
+ */
+export declare function runShimMain(adapter: ShimAdapter): void;
+/**
+ * Map one `{tool name, tool input}` pair — the shape every surveyed harness feeds its
+ * pre-tool hook, under varying key spellings — onto a {@link GuardRequest}.
+ * `undefined` for tools the guard has no opinion on: pass through.
+ */
+export declare function toolCallRequest(toolName: unknown, toolInput: unknown, names: {
+    readonly read: readonly string[];
+    readonly bash: readonly string[];
+}): GuardRequest | undefined;
+/** The raw stdin as a keyed record, or an empty record when it is not object-shaped. */
+export declare function asRecord(raw: unknown): Record<string, unknown>;
+export { isMainModule, parseGuardRequest };
+//# sourceMappingURL=shim.d.ts.map

package/dist/hooks/shim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shim.d.ts","sourceRoot":"","sources":["../../src/hooks/shim.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,MAAM,EACN,YAAY,EACZ,iBAAiB,EAGlB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAElF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,4EAA4E;AAC5E,MAAM,WAAW,WAAW;IAC1B,uFAAuF;IACvF,QAAQ,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,YAAY,GAAG,SAAS,CAAC;IAC/D;;;;;OAKG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC;IACpD,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,UAAU,CAAC;IAChC,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,KAAK,UAAU,CAAC;IAC5F;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,KAAK,UAAU,CAAC;CACjG;AAED,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;+EAC2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,sFAAsF;AACtF,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,WAAW,EACpB,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,aAAa,EACvB,GAAG,EAAE,MAAM,EACX,QAAQ,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,GACtC,UAAU,CAkBZ;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,CA+BtD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC5E,YAAY,GAAG,SAAS,CAoB1B;AAiBD,wFAAwF;AACxF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAI9D;AAED,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC"}