@vigil-guard/vge-cc-guard 0.9.0-beta.1

package/dist/commands/reset-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-session.js","sourceRoot":"","sources":["../../src/commands/reset-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AASjE,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,UAAU,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAA4B,CAAC;YACvF,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,IAAI,CAAC,WAAW,CAAW;gBACtC,YAAY,EAAG,IAAI,CAAC,cAAc,CAAY,IAAI,CAAC;gBACnD,QAAQ;gBACR,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;AAClE,CAAC;AAID,6EAA6E;AAC7E,2EAA2E;AAC3E,4CAA4C;AAC5C,SAAS,cAAc,CAAC,SAAiB;IACvC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CACtB;YACE,UAAU,EAAE,iBAAiB,EAAE;YAC/B,IAAI,EAAE,2BAA2B;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;gBACzC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACrC;YACD,OAAO,EAAE,KAAK;SACf,EACD,CAAC,GAAG,EAAE,EAAE;YACN,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAChC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC3B,OAAO,CAAC,cAAc,CAAC,CAAC;oBACxB,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACjG,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,aAAa,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,MAAmB;IACtC,MAAM,OAAO,GAAG;QACd,GAAG,MAAM,CAAC,IAAI;QACd,SAAS,EAAE,EAAE;QACb,sBAAsB,EAAE,EAAE;QAC1B,SAAS,EAAE,EAAE;QACb,sBAAsB,EAAE,EAAE;QAC1B,kBAAkB,EAAE,EAAE;QACtB,eAAe,EAAE,CAAC;QAClB,YAAY,EAAE,EAAE;QAChB,KAAK,EAAE,OAAO;KACf,CAAC;IACF,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,QAAQ,GAAG,YAAY,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IAE5B,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IACD,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,8CAA8C;IAC9C,WAAW,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,CAAC,GAAG,CAAC,yDAAyD,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;AACjE,CAAC"}

package/dist/commands/uninstall.d.ts

@@ -0,0 +1,2 @@
+export declare function runUninstall(args: string[]): Promise<void>;
+//# sourceMappingURL=uninstall.d.ts.map

package/dist/commands/uninstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall.d.ts","sourceRoot":"","sources":["../../src/commands/uninstall.ts"],"names":[],"mappings":"AAsRA,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsChE"}

package/dist/commands/uninstall.js

@@ -0,0 +1,277 @@
+import fs from 'fs';
+import * as path from 'path';
+import { installsDir, resolveSettingsPath, resolveVgeDir, } from './_lib/install-paths.js';
+const CLEANUP_TRANSIENT_CODES = new Set(['EPERM', 'EBUSY', 'ENOTEMPTY']);
+const CLEANUP_MAX_RETRIES = 5;
+const CLEANUP_RETRY_DELAY_MS = 100;
+function parseFlags(args) {
+    let scope = null;
+    let projectDir = null;
+    let yes = false;
+    let restore = false;
+    let explicitScope = false;
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === '--yes')
+            yes = true;
+        else if (arg === '--restore')
+            restore = true;
+        else if (arg === '--project') {
+            scope = 'project';
+            explicitScope = true;
+        }
+        else if (arg === '--scope=project') {
+            scope = 'project';
+            explicitScope = true;
+        }
+        else if (arg === '--scope=user') {
+            scope = 'user';
+            explicitScope = true;
+        }
+        else if (arg === '--scope') {
+            const value = args[i + 1];
+            if (value === 'project' || value === 'user') {
+                scope = value;
+                explicitScope = true;
+                i++;
+            }
+        }
+        else if (arg?.startsWith('--project-dir=')) {
+            projectDir = arg.slice('--project-dir='.length);
+            if (!explicitScope)
+                scope = 'project';
+        }
+        else if (arg === '--project-dir') {
+            const value = args[i + 1];
+            if (typeof value === 'string') {
+                projectDir = value;
+                if (!explicitScope)
+                    scope = 'project';
+                i++;
+            }
+        }
+    }
+    if (scope === 'user' && projectDir !== null) {
+        throw new Error('vge-cc-guard: --project-dir can only be used with project uninstall.');
+    }
+    return { scope, projectDir, yes, restore };
+}
+function listInstalls() {
+    const dir = installsDir();
+    if (!fs.existsSync(dir))
+        return [];
+    const entries = fs.readdirSync(dir).filter((f) => f.endsWith('.meta.json'));
+    const installs = [];
+    for (const name of entries) {
+        const metaFile = path.join(dir, name);
+        try {
+            const raw = JSON.parse(fs.readFileSync(metaFile, 'utf-8'));
+            if ((raw['scope'] !== 'user' && raw['scope'] !== 'project') ||
+                typeof raw['settingsPath'] !== 'string' ||
+                typeof raw['installedAt'] !== 'string') {
+                console.warn(`vge-cc-guard: ignoring malformed install metadata at ${metaFile}`);
+                continue;
+            }
+            installs.push({
+                meta: {
+                    scope: raw['scope'],
+                    settingsPath: raw['settingsPath'],
+                    installedAt: raw['installedAt'],
+                },
+                metaFile,
+                backupFile: metaFile.replace(/\.meta\.json$/, '.backup.json'),
+            });
+        }
+        catch {
+            console.warn(`vge-cc-guard: ignoring malformed install metadata at ${metaFile}`);
+        }
+    }
+    return installs;
+}
+function describeInstalls(installs) {
+    return installs
+        .map((i) => `  [${i.meta.scope.padEnd(7)}] ${i.meta.settingsPath}  (installed ${i.meta.installedAt})`)
+        .join('\n');
+}
+function pickInstall(all, flags) {
+    if (all.length === 0) {
+        throw new Error('vge-cc-guard: no installations found.');
+    }
+    if (flags.scope === 'project') {
+        const expected = resolveSettingsPath('project', flags.projectDir ?? undefined);
+        const match = all.find((i) => i.meta.scope === 'project' && i.meta.settingsPath === expected);
+        if (!match)
+            throw new Error(`vge-cc-guard: no project install found for ${expected}.`);
+        return match;
+    }
+    if (flags.scope === 'user') {
+        const expected = resolveSettingsPath('user');
+        const match = all.find((i) => i.meta.scope === 'user' && i.meta.settingsPath === expected);
+        if (!match)
+            throw new Error(`vge-cc-guard: no user install found for ${expected}.`);
+        return match;
+    }
+    if (all.length === 1)
+        return all[0];
+    try {
+        const cwdProject = resolveSettingsPath('project');
+        const match = all.find((i) => i.meta.scope === 'project' && i.meta.settingsPath === cwdProject);
+        if (match)
+            return match;
+    }
+    catch {
+        // If CWD was deleted, fall through to the normal ambiguous-install error.
+    }
+    throw new Error([
+        'vge-cc-guard: multiple installs found. Specify which to uninstall:',
+        '  --yes --scope=user',
+        '  --yes --project-dir /path/to/repo',
+        '',
+        'Installed:',
+        describeInstalls(all),
+    ].join('\n'));
+}
+function removeVgeHooks(settings) {
+    const hooks = settings['hooks'];
+    if (!hooks)
+        return { settings, removed: 0 };
+    const filtered = {};
+    let removed = 0;
+    for (const [event, entries] of Object.entries(hooks)) {
+        const current = entries;
+        const kept = current.filter((e) => !e.hooks?.some((h) => h.command?.includes('vge-cc-guard hook')));
+        removed += current.length - kept.length;
+        if (kept.length > 0)
+            filtered[event] = kept;
+    }
+    return { settings: { ...settings, hooks: filtered }, removed };
+}
+// PR-review S2: crash-safe atomic write — see install.ts for rationale.
+function writeAtomic(filePath, content) {
+    const tmp = filePath + '.tmp';
+    try {
+        const fd = fs.openSync(tmp, 'w');
+        try {
+            fs.writeSync(fd, content);
+            fs.fsyncSync(fd);
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+        fs.renameSync(tmp, filePath);
+    }
+    catch (error) {
+        fs.rmSync(tmp, { force: true });
+        throw error;
+    }
+}
+function filterCurrentSettings(picked) {
+    const { settingsPath } = picked.meta;
+    if (fs.existsSync(settingsPath)) {
+        let current;
+        try {
+            current = JSON.parse(fs.readFileSync(settingsPath, 'utf-8'));
+        }
+        catch (error) {
+            const detail = error instanceof Error ? error.message : 'invalid JSON';
+            throw new Error(`vge-cc-guard: refusing to overwrite ${settingsPath} because it cannot be parsed (${detail}). ` +
+                'Fix it manually, or run `vge-cc-guard uninstall --restore` to use the install-time backup.');
+        }
+        const removal = removeVgeHooks(current);
+        if (removal.removed === 0) {
+            console.warn(`vge-cc-guard: no hook entries containing "vge-cc-guard hook" found in ${settingsPath}; manual cleanup may be needed.`);
+        }
+        else {
+            const noun = removal.removed === 1 ? 'entry' : 'entries';
+            console.log(`vge-cc-guard: removed ${removal.removed} hook ${noun} from ${settingsPath}.`);
+        }
+        writeAtomic(settingsPath, JSON.stringify(removal.settings, null, 2));
+        return;
+    }
+    console.warn(`vge-cc-guard: settings.json at ${settingsPath} no longer exists — removing install record only.`);
+}
+function restoreInstallSnapshot(picked) {
+    const { settingsPath } = picked.meta;
+    if (!fs.existsSync(picked.backupFile)) {
+        filterCurrentSettings(picked);
+        return;
+    }
+    console.log('NOTE: restoring pre-install settings.json — any settings you added');
+    console.log('      after the initial install will be replaced by the snapshot.');
+    const backup = fs.readFileSync(picked.backupFile, 'utf-8');
+    fs.mkdirSync(path.dirname(settingsPath), { recursive: true });
+    writeAtomic(settingsPath, backup);
+}
+function removeInstallStateDir(dir) {
+    removeWithCleanupRetry(() => {
+        fs.rmSync(dir, {
+            recursive: true,
+            force: true,
+            maxRetries: CLEANUP_MAX_RETRIES,
+            retryDelay: CLEANUP_RETRY_DELAY_MS,
+        });
+    });
+}
+function removeInstallRecordFile(file) {
+    removeWithCleanupRetry(() => {
+        fs.rmSync(file, { force: true });
+    });
+}
+function removeWithCleanupRetry(remove) {
+    let attempt = 0;
+    while (true) {
+        try {
+            remove();
+            return;
+        }
+        catch (err) {
+            if (!isCleanupTransientError(err) || attempt >= CLEANUP_MAX_RETRIES)
+                throw err;
+            attempt += 1;
+            sleepSync(CLEANUP_RETRY_DELAY_MS);
+        }
+    }
+}
+function isCleanupTransientError(err) {
+    return err instanceof Error
+        && 'code' in err
+        && CLEANUP_TRANSIENT_CODES.has(String(err.code));
+}
+function sleepSync(ms) {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+export async function runUninstall(args) {
+    const flags = parseFlags(args);
+    const vgeDir = resolveVgeDir();
+    if (!fs.existsSync(vgeDir)) {
+        console.log('vge-cc-guard is not installed. Nothing to do.');
+        return;
+    }
+    if (!flags.yes) {
+        console.error('Use --yes to confirm uninstall, or run interactively (Sprint 4).');
+        process.exit(1);
+    }
+    const all = listInstalls();
+    if (all.length === 0) {
+        // No install records but vgeDir exists — clean it up.
+        removeInstallStateDir(vgeDir);
+        console.log('vge-cc-guard: no install records found. Cleaned up state directory.');
+        return;
+    }
+    const picked = pickInstall(all, flags);
+    if (flags.restore)
+        restoreInstallSnapshot(picked);
+    else
+        filterCurrentSettings(picked);
+    removeInstallRecordFile(picked.metaFile);
+    removeInstallRecordFile(picked.backupFile);
+    const remaining = listInstalls();
+    if (remaining.length === 0) {
+        removeInstallStateDir(vgeDir);
+        console.log('Uninstall complete. Last install removed — global state cleared. Restart Claude Code to apply.');
+    }
+    else {
+        console.log(`Uninstall complete for ${picked.meta.settingsPath}. ${remaining.length} install(s) remain — config/audit/sessions kept.`);
+    }
+}
+//# sourceMappingURL=uninstall.js.map

package/dist/commands/uninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall.js","sourceRoot":"","sources":["../../src/commands/uninstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,aAAa,GAGd,MAAM,yBAAyB,CAAC;AAoBjC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AACzE,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC,SAAS,UAAU,CAAC,IAAuB;IACzC,IAAI,KAAK,GAAwB,IAAI,CAAC;IACtC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,OAAO;YAAE,GAAG,GAAG,IAAI,CAAC;aAC3B,IAAI,GAAG,KAAK,WAAW;YAAE,OAAO,GAAG,IAAI,CAAC;aACxC,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC7B,KAAK,GAAG,SAAS,CAAC;YAClB,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;YACrC,KAAK,GAAG,SAAS,CAAC;YAClB,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAClC,KAAK,GAAG,MAAM,CAAC;YACf,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC5C,KAAK,GAAG,KAAK,CAAC;gBACd,aAAa,GAAG,IAAI,CAAC;gBACrB,CAAC,EAAE,CAAC;YACN,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,EAAE,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7C,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,CAAC,aAAa;gBAAE,KAAK,GAAG,SAAS,CAAC;QACxC,CAAC;aAAM,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,UAAU,GAAG,KAAK,CAAC;gBACnB,IAAI,CAAC,aAAa;oBAAE,KAAK,GAAG,SAAS,CAAC;gBACtC,CAAC,EAAE,CAAC;YACN,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK,KAAK,MAAM,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAA4B,CAAC;YACtF,IACE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;gBACvD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ;gBACvC,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,QAAQ,EACtC,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,wDAAwD,QAAQ,EAAE,CAAC,CAAC;gBACjF,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE;oBACJ,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC;oBACnB,YAAY,EAAE,GAAG,CAAC,cAAc,CAAC;oBACjC,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC;iBAChC;gBACD,QAAQ;gBACR,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,cAAc,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,wDAAwD,QAAQ,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAoC;IAC5D,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,gBAAgB,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC;SACrG,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,GAA+B,EAAE,KAAqB;IACzE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC;QAC9F,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,QAAQ,GAAG,CAAC,CAAC;QACvF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC;QAC3F,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,GAAG,CAAC,CAAC;QACpF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,CAAE,CAAC;IAErC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC;QAChG,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;IAED,MAAM,IAAI,KAAK,CACb;QACE,oEAAoE;QACpE,sBAAsB;QACtB,qCAAqC;QACrC,EAAE;QACF,YAAY;QACZ,gBAAgB,CAAC,GAAG,CAAC;KACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAAiC;IACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAA0C,CAAC;IACzE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAE5C,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,OAAyD,CAAC;QAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACpG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC9C,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC;AACjE,CAAC;AAED,wEAAwE;AACxE,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe;IACpD,MAAM,GAAG,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC1B,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;QACD,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAuB;IACpD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IAErC,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,IAAI,OAAgC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAA4B,CAAC;QAC1F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;YACvE,MAAM,IAAI,KAAK,CACb,uCAAuC,YAAY,iCAAiC,MAAM,KAAK;gBAC/F,4FAA4F,CAC7F,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,yEAAyE,YAAY,iCAAiC,CAAC,CAAC;QACvI,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,yBAAyB,OAAO,CAAC,OAAO,SAAS,IAAI,SAAS,YAAY,GAAG,CAAC,CAAC;QAC7F,CAAC;QACD,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,kCAAkC,YAAY,mDAAmD,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAuB;IACrD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IAErC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,sBAAsB,CAAC,GAAG,EAAE;QAC1B,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE;YACb,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,mBAAmB;YAC/B,UAAU,EAAE,sBAAsB;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY;IAC3C,sBAAsB,CAAC,GAAG,EAAE;QAC1B,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAkB;IAChD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,EAAE,CAAC;YACT,OAAO;QACT,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,mBAAmB;gBAAE,MAAM,GAAG,CAAC;YAC/E,OAAO,IAAI,CAAC,CAAC;YACb,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAY;IAC3C,OAAO,GAAG,YAAY,KAAK;WACtB,MAAM,IAAI,GAAG;WACb,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAE,GAA6B,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAE/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,sDAAsD;QACtD,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,OAAO;QAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC;;QAC7C,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAEnC,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzC,uBAAuB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAE3C,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,gGAAgG,CAAC,CAAC;IAChH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,0BAA0B,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,MAAM,kDAAkD,CAC1H,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/daemon/active-conversation-decisions.d.ts

@@ -0,0 +1,9 @@
+import type { BlockingDecision } from '../shared/types.js';
+export interface ActiveConversationDecision {
+    decision: BlockingDecision;
+    source: 'pretool' | 'posttool' | 'attachment' | 'prompt';
+}
+export declare function nextDecisionCreationSequence(): number;
+export declare function activeConversationDecisionsForSession(sessionId: string): ActiveConversationDecision[];
+export declare function renderActiveConversationDecisionDisambiguation(sessionId: string): string;
+//# sourceMappingURL=active-conversation-decisions.d.ts.map

package/dist/daemon/active-conversation-decisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-conversation-decisions.d.ts","sourceRoot":"","sources":["../../src/daemon/active-conversation-decisions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAQ3D,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,QAAQ,CAAC;CAC1D;AAID,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAmBD,wBAAgB,qCAAqC,CAAC,SAAS,EAAE,MAAM,GAAG,0BAA0B,EAAE,CAUrG;AAED,wBAAgB,8CAA8C,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CA0BxF"}

package/dist/daemon/active-conversation-decisions.js

@@ -0,0 +1,58 @@
+import { activeAttachmentEscrowDecisionsForSession } from './attachment-decision-escrow.js';
+import { decisionOwnerFromDecision, decisionOwnerLabel } from './decision-owner.js';
+import { activePostToolEscrowDecisionsForSession } from './posttool-decision-escrow.js';
+import { activePreToolEscrowDecisionsForSession } from './pretool-decision-escrow.js';
+import { sanitizeDecisionResourceLabel } from './conversation-decision-prompt.js';
+import { activeUserPromptEscrowDecisionsForSession } from './userprompt-decision-escrow.js';
+let decisionCreationSequence = 0;
+export function nextDecisionCreationSequence() {
+    return ++decisionCreationSequence;
+}
+function compareActiveDecision(left, right) {
+    const byTime = left.decision.createdAt - right.decision.createdAt;
+    if (byTime !== 0)
+        return byTime;
+    const bySeq = (left.decision.creationSequence ?? 0) - (right.decision.creationSequence ?? 0);
+    if (bySeq !== 0)
+        return bySeq;
+    const a = left.decision.decisionId;
+    const b = right.decision.decisionId;
+    return a < b ? -1 : a > b ? 1 : 0;
+}
+function sourceLabel(source) {
+    if (source === 'pretool')
+        return 'PreTool';
+    if (source === 'posttool')
+        return 'PostTool';
+    if (source === 'attachment')
+        return 'Attachment';
+    return 'Prompt';
+}
+export function activeConversationDecisionsForSession(sessionId) {
+    return [
+        ...activePreToolEscrowDecisionsForSession(sessionId).map((decision) => ({ decision, source: 'pretool' })),
+        ...activePostToolEscrowDecisionsForSession(sessionId).map((decision) => ({ decision, source: 'posttool' })),
+        ...activeAttachmentEscrowDecisionsForSession(sessionId).map((decision) => ({ decision, source: 'attachment' })),
+        ...activeUserPromptEscrowDecisionsForSession(sessionId, 'prompt_input').map((decision) => ({
+            decision,
+            source: 'prompt',
+        })),
+    ].sort(compareActiveDecision);
+}
+export function renderActiveConversationDecisionDisambiguation(sessionId) {
+    const active = activeConversationDecisionsForSession(sessionId);
+    if (active.length === 0) {
+        return 'VGE Agent Guard: there is no active conversation decision to resolve.';
+    }
+    const lines = [
+        'Multiple VGE decisions are active in this session.',
+        'Use one exact command for the decision you want to resolve:',
+        '',
+    ];
+    for (const entry of active) {
+        const decision = entry.decision;
+        lines.push(`Decision ID: ${decision.decisionId}`, `Stage: ${sourceLabel(entry.source)}`, `Owner: ${decisionOwnerLabel(decisionOwnerFromDecision(decision))}`, `Tool: ${decision.toolName}`, `Resource: ${sanitizeDecisionResourceLabel(decision.resourceLabel)}`, `Commands: vge block ${decision.decisionId} | vge allow ${decision.decisionId} | vge allow-session ${decision.decisionId}`, '');
+    }
+    return lines.join('\n').trimEnd();
+}
+//# sourceMappingURL=active-conversation-decisions.js.map

package/dist/daemon/active-conversation-decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-conversation-decisions.js","sourceRoot":"","sources":["../../src/daemon/active-conversation-decisions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yCAAyC,EAAE,MAAM,iCAAiC,CAAC;AAC5F,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,uCAAuC,EAAE,MAAM,+BAA+B,CAAC;AACxF,OAAO,EAAE,sCAAsC,EAAE,MAAM,8BAA8B,CAAC;AACtF,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EAAE,yCAAyC,EAAE,MAAM,iCAAiC,CAAC;AAO5F,IAAI,wBAAwB,GAAG,CAAC,CAAC;AAEjC,MAAM,UAAU,4BAA4B;IAC1C,OAAO,EAAE,wBAAwB,CAAC;AACpC,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAgC,EAAE,KAAiC;IAChG,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;IAClE,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;IAC7F,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;IACnC,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,MAA4C;IAC/D,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC7C,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IACjD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,SAAiB;IACrE,OAAO;QACL,GAAG,sCAAsC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC,CAAC;QAClH,GAAG,uCAAuC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAmB,EAAE,CAAC,CAAC;QACpH,GAAG,yCAAyC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAqB,EAAE,CAAC,CAAC;QACxH,GAAG,yCAAyC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACzF,QAAQ;YACR,MAAM,EAAE,QAAiB;SAC1B,CAAC,CAAC;KACJ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,8CAA8C,CAAC,SAAiB;IAC9E,MAAM,MAAM,GAAG,qCAAqC,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,uEAAuE,CAAC;IACjF,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,oDAAoD;QACpD,6DAA6D;QAC7D,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,gBAAgB,QAAQ,CAAC,UAAU,EAAE,EACrC,UAAU,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EACrC,UAAU,kBAAkB,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,EAAE,EACnE,SAAS,QAAQ,CAAC,QAAQ,EAAE,EAC5B,aAAa,6BAA6B,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,EACpE,uBAAuB,QAAQ,CAAC,UAAU,gBAAgB,QAAQ,CAAC,UAAU,wBAAwB,QAAQ,CAAC,UAAU,EAAE,EAC1H,EAAE,CACH,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AACpC,CAAC"}

package/dist/daemon/allowlist.d.ts

@@ -0,0 +1,2 @@
+export declare function canonicalizeKey(toolName: string, toolInput: Record<string, unknown>): string;
+//# sourceMappingURL=allowlist.d.ts.map

package/dist/daemon/allowlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.d.ts","sourceRoot":"","sources":["../../src/daemon/allowlist.ts"],"names":[],"mappings":"AAkDA,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CA8D5F"}

package/dist/daemon/allowlist.js

@@ -0,0 +1,118 @@
+import * as crypto from 'crypto';
+import * as path from 'path';
+import { expandTilde } from './path-deny.js';
+function sha256(input) {
+    return crypto.createHash('sha256').update(input).digest('hex');
+}
+function normalizeWhitespace(s) {
+    return s.replace(/\s+/g, ' ').trim();
+}
+const VOLATILE_KEYS = new Set(['timestamp', 'requestId', 'sessionId', 'traceId', 'id']);
+const TRACKING_PARAM_RE = /^utm_/i;
+function isTrackingParam(name) {
+    const normalized = name.toLowerCase();
+    return TRACKING_PARAM_RE.test(normalized) || normalized === 'fbclid' || normalized === 'ref';
+}
+function stripTrackingParams(url) {
+    const paramsToDelete = Array.from(url.searchParams.keys()).filter(isTrackingParam);
+    for (const param of paramsToDelete) {
+        url.searchParams.delete(param);
+    }
+}
+function stripVolatileFields(obj) {
+    if (obj === null || typeof obj !== 'object')
+        return {};
+    return Object.fromEntries(Object.entries(obj).filter(([k]) => !VOLATILE_KEYS.has(k)));
+}
+function stableStringify(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value) ?? 'null';
+    if (Array.isArray(value))
+        return '[' + value.map(stableStringify).join(',') + ']';
+    const sorted = Object.keys(value)
+        .sort()
+        .map((k) => `${JSON.stringify(k)}:${stableStringify(value[k])}`);
+    return '{' + sorted.join(',') + '}';
+}
+// Stable fallback key when expected fields are missing or malformed.
+// PR-review W4: canonicalizeKey must never throw — combined with C2's fail-closed
+// shim, throws here would silently turn into pretool fail-open via Express 500.
+function malformedKey(toolName, toolInput) {
+    const safeName = typeof toolName === 'string' && toolName.length > 0 ? toolName : 'unknown';
+    const safeInput = toolInput && typeof toolInput === 'object' ? toolInput : {};
+    return `${safeName}:malformed:${sha256(stableStringify(stripVolatileFields(safeInput))).slice(0, 12)}`;
+}
+export function canonicalizeKey(toolName, toolInput) {
+    try {
+        switch (toolName) {
+            case 'WebFetch': {
+                const raw = toolInput['url'];
+                if (typeof raw !== 'string')
+                    return malformedKey(toolName, toolInput);
+                const u = new URL(raw);
+                u.hash = '';
+                stripTrackingParams(u);
+                return `WebFetch:${u.href}`;
+            }
+            case 'WebSearch': {
+                const q = toolInput['query'];
+                if (typeof q !== 'string')
+                    return malformedKey(toolName, toolInput);
+                return `WebSearch:${q}`;
+            }
+            case 'Read': {
+                const fp = toolInput['file_path'];
+                if (typeof fp !== 'string')
+                    return malformedKey(toolName, toolInput);
+                return `Read:${path.resolve(expandTilde(fp))}`;
+            }
+            case 'Glob': {
+                const pattern = toolInput['pattern'];
+                if (typeof pattern !== 'string')
+                    return malformedKey(toolName, toolInput);
+                const cwd = toolInput['cwd'] ?? process.cwd();
+                return `${pattern}:${path.resolve(cwd)}`;
+            }
+            case 'Grep': {
+                const pattern = toolInput['pattern'];
+                if (typeof pattern !== 'string')
+                    return malformedKey(toolName, toolInput);
+                const p = toolInput['path'] ?? process.cwd();
+                return `${pattern}:${path.resolve(p)}`;
+            }
+            case 'Bash': {
+                const cmd = toolInput['command'];
+                if (typeof cmd !== 'string')
+                    return malformedKey(toolName, toolInput);
+                return `bash:${sha256(normalizeWhitespace(cmd.toLowerCase())).slice(0, 12)}`;
+            }
+            case 'Edit': {
+                const fp = toolInput['file_path'];
+                const old = toolInput['old_string'];
+                if (typeof fp !== 'string' || typeof old !== 'string')
+                    return malformedKey(toolName, toolInput);
+                return `${path.resolve(fp)}:edit:${sha256(old).slice(0, 12)}`;
+            }
+            case 'Write': {
+                const fp = toolInput['file_path'];
+                const content = toolInput['content'];
+                if (typeof fp !== 'string' || typeof content !== 'string')
+                    return malformedKey(toolName, toolInput);
+                return `${path.resolve(fp)}:write:${sha256(content).slice(0, 12)}`;
+            }
+            case 'Task': {
+                const prompt = toolInput['prompt'];
+                if (typeof prompt !== 'string')
+                    return malformedKey(toolName, toolInput);
+                const sub = toolInput['subagent_type'] ?? 'unknown';
+                return `task:${sub}:${sha256(prompt).slice(0, 12)}`;
+            }
+            default:
+                return `${toolName}:${sha256(stableStringify(stripVolatileFields(toolInput ?? {}))).slice(0, 12)}`;
+        }
+    }
+    catch {
+        return malformedKey(toolName, toolInput);
+    }
+}
+//# sourceMappingURL=allowlist.js.map

package/dist/daemon/allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../src/daemon/allowlist.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,mBAAmB,CAAC,CAAS;IACpC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;AACxF,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AAEnC,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,KAAK,CAAC;AAC/F,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAQ;IACnC,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACnF,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAA4B;IACvD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACvD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAClF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC;SACxC,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAE,KAAiC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACtC,CAAC;AAED,qEAAqE;AACrE,kFAAkF;AAClF,gFAAgF;AAChF,SAAS,YAAY,CAAC,QAAgB,EAAE,SAAkC;IACxE,MAAM,QAAQ,GAAG,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,SAAS,GAAG,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,OAAO,GAAG,QAAQ,cAAc,MAAM,CAAC,eAAe,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,SAAkC;IAClF,IAAI,CAAC;QACH,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACtE,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;gBACZ,mBAAmB,CAAC,CAAC,CAAC,CAAC;gBACvB,OAAO,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,CAAC;YACD,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBAC7B,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACpE,OAAO,aAAa,CAAC,EAAE,CAAC;YAC1B,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;gBAClC,IAAI,OAAO,EAAE,KAAK,QAAQ;oBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACrE,OAAO,QAAQ,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACjD,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;gBACrC,IAAI,OAAO,OAAO,KAAK,QAAQ;oBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAC1E,MAAM,GAAG,GAAI,SAAS,CAAC,KAAK,CAAwB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBACtE,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;gBACrC,IAAI,OAAO,OAAO,KAAK,QAAQ;oBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAC1E,MAAM,CAAC,GAAI,SAAS,CAAC,MAAM,CAAwB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBACrE,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;gBACjC,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACtE,OAAO,QAAQ,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAC/E,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;gBAClC,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;gBACpC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAChG,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAChE,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;gBAClC,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;gBACrC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;oBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACpG,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACrE,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,OAAO,MAAM,KAAK,QAAQ;oBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACzE,MAAM,GAAG,GAAI,SAAS,CAAC,eAAe,CAAwB,IAAI,SAAS,CAAC;gBAC5E,OAAO,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACtD,CAAC;YACD;gBACE,OAAO,GAAG,QAAQ,IAAI,MAAM,CAAC,eAAe,CAAC,mBAAmB,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACvG,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}

package/dist/daemon/analysis-source.d.ts

@@ -0,0 +1,17 @@
+import type { CCPostToolPayload } from '../shared/types.js';
+export declare const MAX_RAW_FILE_BYTES: number;
+export type AnalysisSourceKind = 'tool_response' | 'tool_input_field' | 'raw_file';
+export interface ResolvedAnalysisSource {
+    source: unknown;
+    sourceKind: AnalysisSourceKind;
+    sourceField?: string;
+    sourcePath?: string;
+    fallbackReason?: string;
+    credentialPath?: boolean;
+}
+export declare function analysisAuditFields(source: ResolvedAnalysisSource): {
+    analysisSource: AnalysisSourceKind;
+    analysisSourceFallbackReason?: string;
+};
+export declare function resolveAnalysisSource(payload: CCPostToolPayload): ResolvedAnalysisSource;
+//# sourceMappingURL=analysis-source.d.ts.map

package/dist/daemon/analysis-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analysis-source.d.ts","sourceRoot":"","sources":["../../src/daemon/analysis-source.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAI5D,eAAO,MAAM,kBAAkB,QAAkB,CAAC;AAElD,MAAM,MAAM,kBAAkB,GAC1B,eAAe,GACf,kBAAkB,GAClB,UAAU,CAAC;AAEf,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,sBAAsB,GAAG;IACnE,cAAc,EAAE,kBAAkB,CAAC;IACnC,4BAA4B,CAAC,EAAE,MAAM,CAAC;CACvC,CAKA;AA0GD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,sBAAsB,CAaxF"}