@winspan/claude-forge 8.54.4 → 9.12.0

package/dist/core/governance/global-inject.js

@@ -0,0 +1,184 @@
+/**
+ * Global governance protocol injection (global-governance Phase 1,
+ * decision 7fa0f2ab).
+ *
+ * Other projects' Claude sessions read `~/.claude/CLAUDE.md` (the user-level
+ * global context) but NOT claude-forge's per-repo CLAUDE.md. So a pointer like
+ * "see <repo>/CLAUDE.md" is useless there — they can't resolve the path. We
+ * inject a *self-contained, condensed* copy of the DECISION HINT protocol
+ * contract directly into the global file, wrapped in idempotent markers.
+ *
+ * Idempotent: the block lives between `cf:governance:start` / `:end` markers.
+ * Re-running replaces the marker contents in place (never appends a duplicate).
+ * Reversible: `removeGlobalGovernanceBlock` strips the block.
+ *
+ * NOTE: this module deliberately takes the target path as a parameter so tests
+ * can point it at a temp HOME and NEVER touch the real `~/.claude/CLAUDE.md`.
+ */
+import { existsSync, readFileSync, writeFileSync, copyFileSync, mkdirSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { homedir } from 'node:os';
+import { stripForgeResumeBlocks } from '../utils/forge-resume-block.js';
+export const GOVERNANCE_MARKER_START = '<!-- cf:governance:start -->';
+export const GOVERNANCE_MARKER_END = '<!-- cf:governance:end -->';
+/**
+ * Resolve the real global CLAUDE.md path (`~/.claude/CLAUDE.md`).
+ * Production callers use this; tests pass an explicit temp path instead.
+ */
+export function defaultGlobalClaudeMdPath() {
+    return join(homedir(), '.claude', 'CLAUDE.md');
+}
+/**
+ * The condensed DECISION HINT protocol contract.
+ *
+ * Authority ruling (decision ed98c8e8, 2026-06-10): the project CLAUDE.md
+ * "DECISION HINT 协议契约" section is the SINGLE authoritative full text.
+ * This global body is a short pointer-style digest — core directives only,
+ * everything else (codegraph/grep 分工、并行细则、例外清单) lives in the
+ * project file. This kills the ~950-token triple-injection duplication
+ * (global block + project block + hint template all carrying the full text).
+ *
+ * Also carries the spec-before-change discipline (decision 393481d1): a
+ * cross-project user mandate that previously lived only as a hand-written
+ * block OUTSIDE the markers on one machine — now folded into the generator
+ * so every install gets it via inject-global (same path as decision def0adcb
+ * took for the cd/output-redirection Bash convention).
+ *
+ * Excludes the marker lines; `buildGovernanceBlock` wraps it.
+ */
+export const GOVERNANCE_PROTOCOL_BODY = `## claude-forge 决策治理协议（全局注入 · 压缩版）
+
+> 本块由 \`cf governance inject-global\` 自动写入/更新；移除：\`--remove\`。
+> 完整协议（codegraph/grep 分工、并行细则、例外清单）见各项目 CLAUDE.md 的「DECISION HINT 协议契约」节。
+
+**主线程是纯编排者**——只 spawn agent、传递结果、等用户批准、回填 outcome；不自己 grep/find 查代码、不 Edit/Write 实施。
+1. 决策（第一动作）：先 spawn \`decision-maker\`（prompt 头带 \`<!-- decision-id: XXXX -->\`，若有），它返回前不回答正文、不动手。
+2. 搜索/查代码 → spawn \`Explore\` / \`doc-reviewer\`；实施（用户批准后）→ spawn \`coder\` 等实施 agent；实施后 → spawn \`verify-agent\`。
+3. 可拆分的独立工作在一条消息里 batch spawn 并行跑；bypass：prompt 末尾加 \`skip decision\`。
+
+> 诚实边界：强指令、非机械锁——提高遵守率，不做 100% 保证。
+
+## Bash 命令约定（减少授权弹窗）
+
+跑 Bash 时**不要**写「\`cd <路径> && cmd > file\`」这种「复合命令 + cd + 输出重定向」
+组合——它触发 Claude Code 的 path-resolution-bypass 安全检查（\`Compound command
+contains cd with output redirection - manual approval required\`），该检查**无法**用
+\`permissions.allow\` 放行，只能从命令写法规避：
+
+- ❌ \`cd /some/path && cmd > file\`（触发强制人工批准）
+- ✅ 用绝对路径：\`cmd > /some/path/file\`，目标路径写全
+- ✅ 工作目录本来就持久在项目根，**多数命令根本不需要 \`cd\` 前缀**——直接跑
+- ✅ 实在要换目录，分两条独立命令，或不带 \`>\` 重定向
+
+> 这能消除跨项目反复出现的 \`cd\` 授权弹窗，且不牺牲安全（无需开 bypassPermissions）。
+> 这是强约定、非硬锁——提高遵守率，不做 100% 保证。
+
+## 通用工程纪律：代码改动前先写 spec（所有项目 · 用户强制）
+
+任何**涉及代码改动**的任务（bugfix / 样式 / 单点 / 重构 / 新功能）实施前**必须**先写一份 spec
+经用户批准，再 spawn 实施 agent；适用**所有项目**。
+- 流程：spawn \`planner\`（或项目约定 spec agent）写 spec 到 \`docs/design/\` → 用户批准 → 才 spawn \`coder\` 实施 → 实施后 \`verify-agent\`。
+- 事后 changelog / 实施记录**不能**替代「实施前的 spec」；**不得**以「小 / trivial / 已诊断清楚 / 只改一行」为由跳过。
+- 例外（不需 spec）：纯查询 / 诊断 / 元任务（commit、build、restart、改版本号、改文档/注释）。
+
+> 强指令、非机械锁——提高遵守率，不做 100% 保证。这条由主线程自律保证。`;
+/** Wrap the protocol body in idempotent markers. */
+export function buildGovernanceBlock(body = GOVERNANCE_PROTOCOL_BODY) {
+    return `${GOVERNANCE_MARKER_START}\n${body}\n${GOVERNANCE_MARKER_END}`;
+}
+/**
+ * Build a regex that matches the full marker block (markers inclusive),
+ * tolerant of surrounding whitespace/newlines.
+ */
+function markerBlockRegex() {
+    const esc = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    return new RegExp(`${esc(GOVERNANCE_MARKER_START)}[\\s\\S]*?${esc(GOVERNANCE_MARKER_END)}`);
+}
+/** True when the file content already contains a governance marker block. */
+export function hasGovernanceBlock(content) {
+    return markerBlockRegex().test(content);
+}
+/**
+ * Strip legacy forge-resume residue from the GLOBAL CLAUDE.md content
+ * (decision ed98c8e8, 2026-06-10).
+ *
+ * The resume engine historically wrote "上次工作续接" blocks into
+ * `~/.claude/CLAUDE.md`; that target was later retired (resume now goes to
+ * the per-project CLAUDE.md only), leaving stale blocks behind that get
+ * re-injected into every session of every project. This removes all known
+ * forms:
+ *   1. UUID envelope: `<!-- forge:resume-begin:<uuid> -->…<!-- forge:resume-end:<uuid> -->`
+ *   2. Legacy markers: `<!-- forge:resume -->…<!-- forge:end-resume -->`
+ *      (both delegated to the shared `stripForgeResumeBlocks` util)
+ *   3. Bare fenced residue: optional `## 上次工作续接` heading +
+ *      ```forge-resume-body``` fence + trailing `_生成时间: …_` line.
+ *
+ * Called by `injectGlobalGovernance` on every run, so the one-time cleanup
+ * self-heals even if stale content reappears.
+ */
+export function stripLegacyResumeBlocks(content) {
+    // Forms 1 + 2 — shared util (handles UUID envelope + legacy bare markers).
+    let s = stripForgeResumeBlocks(content);
+    // Form 3 — bare fenced block (no surviving HTML markers around it).
+    s = s.replace(/(?:^|\n)(?:##\s*上次工作续接[^\n]*\n+)?```forge-resume-body\n[\s\S]*?\n```[^\S\n]*(?:\n+_生成时间:[^\n]*_)?[^\S\n]*/g, '\n');
+    // Stray standalone "_生成时间: …_" lines left between removed blocks.
+    s = s.replace(/(?:^|\n)_生成时间:[^\n]*_[^\S\n]*(?=\n|$)/g, '\n');
+    s = s.replace(/\n{3,}/g, '\n\n').replace(/^\n+/, '');
+    return s;
+}
+function backupExisting(targetPath) {
+    const bak = `${targetPath}.bak`;
+    copyFileSync(targetPath, bak);
+    return bak;
+}
+/**
+ * Idempotently inject (or update) the governance block into `targetPath`.
+ *
+ * - File missing → create it (with the block as its content).
+ * - Block present → replace marker contents in place.
+ * - Block absent  → append the block (separated by a blank line).
+ *
+ * Always backs up a pre-existing file to `<path>.bak` before mutating.
+ */
+export function injectGlobalGovernance(targetPath = defaultGlobalClaudeMdPath(), body = GOVERNANCE_PROTOCOL_BODY) {
+    const block = buildGovernanceBlock(body);
+    if (!existsSync(targetPath)) {
+        mkdirSync(dirname(targetPath), { recursive: true });
+        writeFileSync(targetPath, `${block}\n`, 'utf8');
+        return { action: 'created', path: targetPath, backupPath: null };
+    }
+    const original = readFileSync(targetPath, 'utf8');
+    const backupPath = backupExisting(targetPath);
+    // Self-healing cleanup of stale resume residue (decision ed98c8e8).
+    const cleaned = stripLegacyResumeBlocks(original);
+    if (hasGovernanceBlock(cleaned)) {
+        const next = cleaned.replace(markerBlockRegex(), block);
+        if (next !== original)
+            writeFileSync(targetPath, next, 'utf8');
+        return { action: 'updated', path: targetPath, backupPath };
+    }
+    // Append, ensuring exactly one blank line of separation.
+    const sep = cleaned.endsWith('\n') ? (cleaned.endsWith('\n\n') ? '' : '\n') : '\n\n';
+    writeFileSync(targetPath, `${cleaned}${sep}${block}\n`, 'utf8');
+    return { action: 'inserted', path: targetPath, backupPath };
+}
+/**
+ * Remove the governance block from `targetPath` (reversible counterpart).
+ * Backs up the file first. Returns 'absent' when there is no block / no file.
+ */
+export function removeGlobalGovernanceBlock(targetPath = defaultGlobalClaudeMdPath()) {
+    if (!existsSync(targetPath)) {
+        return { action: 'absent', path: targetPath, backupPath: null };
+    }
+    const original = readFileSync(targetPath, 'utf8');
+    if (!hasGovernanceBlock(original)) {
+        return { action: 'absent', path: targetPath, backupPath: null };
+    }
+    const backupPath = backupExisting(targetPath);
+    // Strip the block plus any immediately-trailing blank lines it left behind.
+    let next = original.replace(markerBlockRegex(), '');
+    next = next.replace(/\n{3,}/g, '\n\n').replace(/^\n+/, '');
+    writeFileSync(targetPath, next, 'utf8');
+    return { action: 'removed', path: targetPath, backupPath };
+}
+//# sourceMappingURL=global-inject.js.map

package/dist/core/governance/global-inject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-inject.js","sourceRoot":"","sources":["../../../src/core/governance/global-inject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE,MAAM,CAAC,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AACtE,MAAM,CAAC,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAElE;;;GAGG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yCAmCC,CAAC;AAE1C,oDAAoD;AACpD,MAAM,UAAU,oBAAoB,CAAC,OAAe,wBAAwB;IAC1E,OAAO,GAAG,uBAAuB,KAAK,IAAI,KAAK,qBAAqB,EAAE,CAAC;AACzE,CAAC;AAWD;;;GAGG;AACH,SAAS,gBAAgB;IACvB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,uBAAuB,CAAC,aAAa,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,gBAAgB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,2EAA2E;IAC3E,IAAI,CAAC,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACxC,oEAAoE;IACpE,CAAC,GAAG,CAAC,CAAC,OAAO,CACX,4GAA4G,EAC5G,IAAI,CACL,CAAC;IACF,kEAAkE;IAClE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,wCAAwC,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,MAAM,GAAG,GAAG,GAAG,UAAU,MAAM,CAAC;IAChC,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC9B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,aAAqB,yBAAyB,EAAE,EAChD,OAAe,wBAAwB;IAEvC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAEzC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,aAAa,CAAC,UAAU,EAAE,GAAG,KAAK,IAAI,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAE9C,oEAAoE;IACpE,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAElD,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,KAAK,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,QAAQ;YAAE,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAC7D,CAAC;IAED,yDAAyD;IACzD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACrF,aAAa,CAAC,UAAU,EAAE,GAAG,OAAO,GAAG,GAAG,GAAG,KAAK,IAAI,EAAE,MAAM,CAAC,CAAC;IAChE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,aAAqB,yBAAyB,EAAE;IAEhD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,IAAI,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3D,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAC7D,CAAC"}

package/dist/core/insights/agent-anchor-guard.d.ts

@@ -0,0 +1,77 @@
+/**
+ * agent-anchor-guard.ts — Phase 3 retro-distill safety floor (decision 234f1ad4).
+ *
+ * Mirror of `src/skills/distill/project-anchor-guard.ts` but with INVERTED
+ * semantics: the skill guard forbids a denylist of project anchors; this guard
+ * forbids a denylist of **protected regions** of an agent template — anything
+ * the retro-distiller's patch is NOT allowed to touch.
+ *
+ * 不变量 (decision 234f1ad4 / 75344363): the LLM-drafted patch may only edit the
+ * "evolvable" region of a template (skill-discovery wording, KB-pull step
+ * wording, Role/Steps explanatory prose). It must NEVER edit:
+ *   - the YAML frontmatter block (name / description / tools / model / color /
+ *     version) — behavior identity + the version line (version is bumped only
+ *     mechanically on adoption, never hand-written by the distiller),
+ *   - the `# IMPORTANT: subagent rules` section body — behavior本体,
+ *   - the `` `Decision: <id>` `` header requirement token + "header" wording
+ *     (the changelog-surfacing invariant, test 75344363).
+ *
+ * Any patch line that touches a protected region → a violation. The CLI caller
+ * rejects the whole draft (no retry — same no-retry policy as the skill
+ * distiller's ProjectAnchorRejection).
+ *
+ * READ-ONLY pure functions; never writes a template.
+ */
+/** A single protected-region hit inside a candidate patch. */
+export interface AgentAnchorViolation {
+    /** Protected-region label (e.g. "frontmatter", "subagent-rules"). */
+    region: string;
+    /** The offending patch line (changed line content, '+'/'-' marker stripped). */
+    line: string;
+    /** 1-indexed position of the offending line within the patch text. */
+    patchLine: number;
+}
+/**
+ * Protected-region matchers. Each label maps to a regex tested against a
+ * single changed line of the patch (the `+`/`-` body, marker stripped). A hit
+ * means the distiller tried to add/remove a line that belongs to a protected
+ * region — rejected.
+ *
+ * Exported so tests can assert the matcher set is intact.
+ */
+export declare const PROTECTED_REGION_MATCHERS: ReadonlyArray<{
+    region: string;
+    regex: RegExp;
+}>;
+/**
+ * Split a unified-diff / patch text into its CHANGED lines (those starting with
+ * `+` or `-`, excluding the `+++`/`---` file headers and `@@` hunk markers),
+ * returning the marker-stripped body plus the 1-indexed patch line number.
+ *
+ * The distiller is asked to emit a unified diff in the `---AGENT-PATCH---`
+ * envelope; we only care about lines it ADDS or REMOVES.
+ */
+export declare function extractChangedLines(patch: string): Array<{
+    body: string;
+    patchLine: number;
+}>;
+/**
+ * Scan a candidate patch for protected-region hits. Returns the (possibly
+ * empty) list of violations. Empty = the patch only touches the evolvable
+ * region → safe to write as a draft.
+ *
+ * Pure: no IO.
+ */
+export declare function scanAgentPatch(patch: string): AgentAnchorViolation[];
+/**
+ * Convenience: throw if a patch touches any protected region. The CLI uses
+ * `scanAgentPatch` directly (to print all violations); this is for tests /
+ * call-sites that just want a hard gate.
+ */
+export declare class AgentAnchorRejection extends Error {
+    readonly hits: AgentAnchorViolation[];
+    readonly agent: string;
+    constructor(agent: string, hits: AgentAnchorViolation[]);
+}
+export declare function assertEvolvableOnly(agent: string, patch: string): void;
+//# sourceMappingURL=agent-anchor-guard.d.ts.map

package/dist/core/insights/agent-anchor-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-anchor-guard.d.ts","sourceRoot":"","sources":["../../../src/core/insights/agent-anchor-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,8DAA8D;AAC9D,MAAM,WAAW,oBAAoB;IACnC,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,aAAa,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAmBtF,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAa7F;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB,EAAE,CAcpE;AAED;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,oBAAoB,EAAE,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACX,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE;CASxD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAGtE"}

package/dist/core/insights/agent-anchor-guard.js

@@ -0,0 +1,119 @@
+/**
+ * agent-anchor-guard.ts — Phase 3 retro-distill safety floor (decision 234f1ad4).
+ *
+ * Mirror of `src/skills/distill/project-anchor-guard.ts` but with INVERTED
+ * semantics: the skill guard forbids a denylist of project anchors; this guard
+ * forbids a denylist of **protected regions** of an agent template — anything
+ * the retro-distiller's patch is NOT allowed to touch.
+ *
+ * 不变量 (decision 234f1ad4 / 75344363): the LLM-drafted patch may only edit the
+ * "evolvable" region of a template (skill-discovery wording, KB-pull step
+ * wording, Role/Steps explanatory prose). It must NEVER edit:
+ *   - the YAML frontmatter block (name / description / tools / model / color /
+ *     version) — behavior identity + the version line (version is bumped only
+ *     mechanically on adoption, never hand-written by the distiller),
+ *   - the `# IMPORTANT: subagent rules` section body — behavior本体,
+ *   - the `` `Decision: <id>` `` header requirement token + "header" wording
+ *     (the changelog-surfacing invariant, test 75344363).
+ *
+ * Any patch line that touches a protected region → a violation. The CLI caller
+ * rejects the whole draft (no retry — same no-retry policy as the skill
+ * distiller's ProjectAnchorRejection).
+ *
+ * READ-ONLY pure functions; never writes a template.
+ */
+/**
+ * Protected-region matchers. Each label maps to a regex tested against a
+ * single changed line of the patch (the `+`/`-` body, marker stripped). A hit
+ * means the distiller tried to add/remove a line that belongs to a protected
+ * region — rejected.
+ *
+ * Exported so tests can assert the matcher set is intact.
+ */
+export const PROTECTED_REGION_MATCHERS = [
+    // ── YAML frontmatter fields (behavior identity) ──────────────────────────
+    // The frontmatter lives inside the leading `---`...`---` block. We flag any
+    // changed line that looks like one of its top-level fields. `version:` is
+    // included here: it is bumped only by the adoption script, never by a patch.
+    { region: 'frontmatter', regex: /^(name|description|tools|model|color|version)\s*:/i },
+    // The frontmatter fence itself.
+    { region: 'frontmatter-fence', regex: /^---\s*$/ },
+    // ── `# IMPORTANT: subagent rules` section header (behavior本体 anchor) ─────
+    { region: 'subagent-rules', regex: /^#\s*IMPORTANT:\s*subagent rules/i },
+    // The canonical bullet lines of that section (behavior本体). We flag the
+    // load-bearing rule lines so a patch cannot quietly rewrite the rules body.
+    { region: 'subagent-rules', regex: /You are a subagent\s*—\s*you\s*(?:\*\*)?cannot(?:\*\*)?\s*spawn other agents/i },
+    { region: 'subagent-rules', regex: /You MUST NOT modify test fixtures/i },
+    // ── Decision-header changelog invariant (test 75344363) ──────────────────
+    // The literal token `Decision: <id>` and the surrounding "header" wording.
+    { region: 'decision-header', regex: /`Decision:\s*<id>`/ },
+];
+/**
+ * Split a unified-diff / patch text into its CHANGED lines (those starting with
+ * `+` or `-`, excluding the `+++`/`---` file headers and `@@` hunk markers),
+ * returning the marker-stripped body plus the 1-indexed patch line number.
+ *
+ * The distiller is asked to emit a unified diff in the `---AGENT-PATCH---`
+ * envelope; we only care about lines it ADDS or REMOVES.
+ */
+export function extractChangedLines(patch) {
+    const out = [];
+    const lines = patch.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const raw = lines[i];
+        // Skip unified-diff file headers (`+++ ` / `--- `) and hunk markers (`@@`).
+        if (raw.startsWith('+++') || raw.startsWith('---'))
+            continue;
+        if (raw.startsWith('@@'))
+            continue;
+        if (raw.startsWith('+') || raw.startsWith('-')) {
+            out.push({ body: raw.slice(1).trim(), patchLine: i + 1 });
+        }
+    }
+    return out;
+}
+/**
+ * Scan a candidate patch for protected-region hits. Returns the (possibly
+ * empty) list of violations. Empty = the patch only touches the evolvable
+ * region → safe to write as a draft.
+ *
+ * Pure: no IO.
+ */
+export function scanAgentPatch(patch) {
+    const violations = [];
+    const changed = extractChangedLines(patch);
+    for (const { body, patchLine } of changed) {
+        if (!body)
+            continue;
+        for (const { region, regex } of PROTECTED_REGION_MATCHERS) {
+            regex.lastIndex = 0;
+            if (regex.test(body)) {
+                violations.push({ region, line: body, patchLine });
+                break; // one violation per offending line is enough
+            }
+        }
+    }
+    return violations;
+}
+/**
+ * Convenience: throw if a patch touches any protected region. The CLI uses
+ * `scanAgentPatch` directly (to print all violations); this is for tests /
+ * call-sites that just want a hard gate.
+ */
+export class AgentAnchorRejection extends Error {
+    hits;
+    agent;
+    constructor(agent, hits) {
+        super(`[agent-distill] ${agent} patch rejected: ${hits.length} protected-region edit(s) ` +
+            `(first: ${hits[0]?.region} @ patch line ${hits[0]?.patchLine}: "${hits[0]?.line}")`);
+        this.name = 'AgentAnchorRejection';
+        this.hits = hits;
+        this.agent = agent;
+    }
+}
+export function assertEvolvableOnly(agent, patch) {
+    const hits = scanAgentPatch(patch);
+    if (hits.length > 0)
+        throw new AgentAnchorRejection(agent, hits);
+}
+//# sourceMappingURL=agent-anchor-guard.js.map

package/dist/core/insights/agent-anchor-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-anchor-guard.js","sourceRoot":"","sources":["../../../src/core/insights/agent-anchor-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAYH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAqD;IACzF,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,6EAA6E;IAC7E,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACtF,gCAAgC;IAChC,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,UAAU,EAAE;IAElD,4EAA4E;IAC5E,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,mCAAmC,EAAE;IACxE,uEAAuE;IACvE,4EAA4E;IAC5E,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,+EAA+E,EAAE;IACpH,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,oCAAoC,EAAE;IAEzE,4EAA4E;IAC5E,2EAA2E;IAC3E,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,oBAAoB,EAAE;CAC3D,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,GAAG,GAA+C,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,4EAA4E;QAC5E,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;QAC7D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC3C,KAAK,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,KAAK,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,yBAAyB,EAAE,CAAC;YAC1D,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBACnD,MAAM,CAAC,6CAA6C;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,CAAyB;IAC7B,KAAK,CAAS;IACvB,YAAY,KAAa,EAAE,IAA4B;QACrD,KAAK,CACH,mBAAmB,KAAK,oBAAoB,IAAI,CAAC,MAAM,4BAA4B;YACjF,WAAW,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,iBAAiB,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CACvF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,KAAa;IAC9D,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACnE,CAAC"}

package/dist/core/insights/agent-distill-context.d.ts

@@ -0,0 +1,55 @@
+/**
+ * agent-distill-context.ts — Phase 3 retro-distill prompt assembly (decision
+ * 234f1ad4). Pure function: turns the read-only health/drift/failure signals
+ * into the structured prompt fed to the `agent-retro-distiller` template, plus a
+ * human-readable signal summary used by `--dry-run` (which never spawns the LLM).
+ *
+ * READ-ONLY: takes already-aggregated data + the template text, returns strings.
+ * No IO, no spawn, no template writes.
+ */
+import type { AgentHealth } from './agent-health.js';
+import type { DriftNudge } from './agent-drift.js';
+/**
+ * Command-level gate (门槛 1, spec §数据稀薄退化): below this delegation count we
+ * do NOT spawn the LLM — there is not enough usage signal to draft a confident
+ * change. = MIN_DELEGATIONS_FOR_SIGNAL × 5 (spec recommendation ≈ 15).
+ */
+export declare const DISTILL_MIN_DELEGATIONS: number;
+export interface FailureSample {
+    /** task title (or '(untitled)'). */
+    title: string;
+    /** session id (for traceability). */
+    session_id: string;
+    ts: number;
+}
+export interface DistillContextInput {
+    agent: string;
+    currentVersion: number;
+    currentTemplate: string;
+    health: AgentHealth | null;
+    drift: DriftNudge[];
+    failureSamples: FailureSample[];
+    windowDays: number;
+    /** Distinct (agent,skill) pairs with total_rated ≥ SUGGESTION_MIN_RATED. */
+    ratedPairs: number;
+}
+export interface DistillContext {
+    /** Whether command-level + signal-level gates allow a spawn (门槛 1+2). */
+    enoughSignal: boolean;
+    /** One-line reason when !enoughSignal (printed by the CLI degradation path). */
+    insufficientReason: string | null;
+    /** Maturity annotation (printed in --dry-run + the draft header). */
+    maturity: string;
+    /** Human-readable signal summary (printed by --dry-run). */
+    summary: string;
+    /** The full structured prompt for the distiller (only used on real spawn). */
+    prompt: string;
+    /** The dead/weak/drift dimensions that WOULD drive drafted changes. */
+    proposedChangeTypes: string[];
+}
+/**
+ * Build the distill context (gates + maturity + summary + prompt + proposed
+ * change types) from read-only signals. Pure.
+ */
+export declare function buildDistillContext(input: DistillContextInput): DistillContext;
+//# sourceMappingURL=agent-distill-context.d.ts.map

package/dist/core/insights/agent-distill-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-distill-context.d.ts","sourceRoot":"","sources":["../../../src/core/insights/agent-distill-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,QAAiC,CAAC;AAEtE,MAAM,WAAW,aAAa;IAC5B,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,WAAW,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,YAAY,EAAE,OAAO,CAAC;IACtB,gFAAgF;IAChF,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CAgI9E"}

package/dist/core/insights/agent-distill-context.js

@@ -0,0 +1,146 @@
+/**
+ * agent-distill-context.ts — Phase 3 retro-distill prompt assembly (decision
+ * 234f1ad4). Pure function: turns the read-only health/drift/failure signals
+ * into the structured prompt fed to the `agent-retro-distiller` template, plus a
+ * human-readable signal summary used by `--dry-run` (which never spawns the LLM).
+ *
+ * READ-ONLY: takes already-aggregated data + the template text, returns strings.
+ * No IO, no spawn, no template writes.
+ */
+import { MIN_DELEGATIONS_FOR_SIGNAL, SUGGESTION_MIN_RATED } from './agent-health.js';
+/**
+ * Command-level gate (门槛 1, spec §数据稀薄退化): below this delegation count we
+ * do NOT spawn the LLM — there is not enough usage signal to draft a confident
+ * change. = MIN_DELEGATIONS_FOR_SIGNAL × 5 (spec recommendation ≈ 15).
+ */
+export const DISTILL_MIN_DELEGATIONS = MIN_DELEGATIONS_FOR_SIGNAL * 5;
+/**
+ * Build the distill context (gates + maturity + summary + prompt + proposed
+ * change types) from read-only signals. Pure.
+ */
+export function buildDistillContext(input) {
+    const delegations = input.health?.delegations ?? 0;
+    const maturity = `delegations=${delegations} rated_pairs=${input.ratedPairs} window_days=${input.windowDays}`;
+    // ── Gate (门槛 1): not enough delegations to trust the signal. ──────────────
+    let enoughSignal = true;
+    let insufficientReason = null;
+    if (delegations < DISTILL_MIN_DELEGATIONS) {
+        enoughSignal = false;
+        insufficientReason =
+            `数据不足（delegations=${delegations} < 阈值 ${DISTILL_MIN_DELEGATIONS}），建议先观测，未产改进草案。`;
+    }
+    // ── Collect the change types the evidence would support (门槛 2 per-pair). ──
+    const proposedChangeTypes = [];
+    const dead = [];
+    const weak = [];
+    if (input.health) {
+        for (const r of input.health.recommended_skills) {
+            // 门槛 2: a pair must clear SUGGESTION_MIN_RATED to drive a change.
+            if (r.recommendation_health === 'dead' && r.total_rated >= SUGGESTION_MIN_RATED) {
+                dead.push(`${r.skill_id} (${r.pulls} pull / actionable ${(r.actionable_rate * 100).toFixed(1)}%)`);
+            }
+        }
+        for (const w of input.health.weak_skills) {
+            // dead pairs are already surfaced above — don't double-count.
+            const rec = input.health.recommended_skills.find((r) => r.skill_id === w.skill_id);
+            if (rec?.recommendation_health === 'dead')
+                continue;
+            weak.push(`${w.skill_id} (actionable ${(w.actionable_rate * 100).toFixed(1)}%, sample ${w.total_rated})`);
+        }
+    }
+    if (dead.length > 0) {
+        proposedChangeTypes.push(`skill-discovery 段降权死推荐: ${dead.join('; ')}`);
+    }
+    if (weak.length > 0) {
+        proposedChangeTypes.push(`复核弱推荐 pull 步: ${weak.join('; ')}`);
+    }
+    for (const d of input.drift) {
+        if (d.kind === 'dangling-ref')
+            proposedChangeTypes.push(`删/换悬空引用: ${d.skill_id}`);
+        else if (d.kind === 'orphan-skill')
+            proposedChangeTypes.push(`提示孤儿高分 skill: ${d.skill_id}`);
+        else if (d.kind === 'no-pull')
+            proposedChangeTypes.push(`核查声明但零 pull 的步骤 (${d.agent})`);
+    }
+    if (input.failureSamples.length > 0) {
+        proposedChangeTypes.push(`据 ${input.failureSamples.length} 条 failed 执行补防线说明`);
+    }
+    // ── Human-readable summary (the --dry-run payload). ────────────────────────
+    const summaryLines = [];
+    summaryLines.push(`# Agent distill 信号摘要: ${input.agent}`);
+    summaryLines.push(`> 当前 version: ${input.currentVersion}  |  信号成熟度: ${maturity}`);
+    summaryLines.push('');
+    if (!enoughSignal) {
+        summaryLines.push(`⚠ ${insufficientReason}`);
+        summaryLines.push('');
+    }
+    summaryLines.push('## 死/弱推荐信号');
+    if (input.health && input.health.recommended_skills.length > 0) {
+        for (const r of input.health.recommended_skills) {
+            const flag = r.recommendation_health === 'dead' ? ' ⚠ 死推荐' : '';
+            summaryLines.push(`- ${r.skill_id}: ${r.pulls} pull / actionable ${(r.actionable_rate * 100).toFixed(1)}% [${r.recommendation_health}]${flag}`);
+        }
+    }
+    else {
+        summaryLines.push('- （无推荐 skill 信号）');
+    }
+    summaryLines.push('');
+    summaryLines.push('## drift');
+    if (input.drift.length > 0) {
+        for (const d of input.drift)
+            summaryLines.push(`- [${d.kind}] ${d.message}`);
+    }
+    else {
+        summaryLines.push('- （无）');
+    }
+    summaryLines.push('');
+    summaryLines.push('## failed 执行样本');
+    if (input.failureSamples.length > 0) {
+        for (const f of input.failureSamples) {
+            summaryLines.push(`- ${f.title}  (session ${f.session_id})`);
+        }
+    }
+    else {
+        summaryLines.push('- （无 failed 样本）');
+    }
+    summaryLines.push('');
+    summaryLines.push('## 拟改动类型（会喂给 distiller）');
+    if (proposedChangeTypes.length > 0) {
+        for (const t of proposedChangeTypes)
+            summaryLines.push(`- ${t}`);
+    }
+    else {
+        summaryLines.push('- （无足够信号支撑改动，distiller 预期产 NOOP）');
+    }
+    const summary = summaryLines.join('\n');
+    // ── Structured prompt for the distiller (real spawn only). ─────────────────
+    const healthJson = input.health
+        ? JSON.stringify({
+            recommended_skills: input.health.recommended_skills,
+            weak_skills: input.health.weak_skills,
+            suggestions: input.health.suggestions,
+        }, null, 2)
+        : '{}';
+    const driftJson = JSON.stringify(input.drift, null, 2);
+    const failuresText = input.failureSamples.length > 0
+        ? input.failureSamples.map((f) => `- ${f.title} (session ${f.session_id})`).join('\n')
+        : '(none)';
+    const prompt = [
+        `<agent_name>${input.agent}</agent_name>`,
+        `<current_version>${input.currentVersion}</current_version>`,
+        `<current_template>\n${input.currentTemplate}\n</current_template>`,
+        `<health_signals>\n${healthJson}\n</health_signals>`,
+        `<drift>\n${driftJson}\n</drift>`,
+        `<failure_samples>\n${failuresText}\n</failure_samples>`,
+        `<maturity>${maturity}</maturity>`,
+    ].join('\n\n');
+    return {
+        enoughSignal,
+        insufficientReason,
+        maturity,
+        summary,
+        prompt,
+        proposedChangeTypes,
+    };
+}
+//# sourceMappingURL=agent-distill-context.js.map

package/dist/core/insights/agent-distill-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-distill-context.js","sourceRoot":"","sources":["../../../src/core/insights/agent-distill-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAGrF;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,GAAG,CAAC,CAAC;AAqCtE;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAA0B;IAC5D,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,CAAC;IACnD,MAAM,QAAQ,GACZ,eAAe,WAAW,gBAAgB,KAAK,CAAC,UAAU,gBAAgB,KAAK,CAAC,UAAU,EAAE,CAAC;IAE/F,6EAA6E;IAC7E,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,IAAI,kBAAkB,GAAkB,IAAI,CAAC;IAC7C,IAAI,WAAW,GAAG,uBAAuB,EAAE,CAAC;QAC1C,YAAY,GAAG,KAAK,CAAC;QACrB,kBAAkB;YAChB,oBAAoB,WAAW,SAAS,uBAAuB,iBAAiB,CAAC;IACrF,CAAC;IAED,6EAA6E;IAC7E,MAAM,mBAAmB,GAAa,EAAE,CAAC;IACzC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAChD,kEAAkE;YAClE,IAAI,CAAC,CAAC,qBAAqB,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,IAAI,oBAAoB,EAAE,CAAC;gBAChF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,sBAAsB,CAAC,CAAC,CAAC,eAAe,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACzC,8DAA8D;YAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;YACnF,IAAI,GAAG,EAAE,qBAAqB,KAAK,MAAM;gBAAE,SAAS;YACpD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,gBAAgB,CAAC,CAAC,CAAC,eAAe,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,mBAAmB,CAAC,IAAI,CAAC,2BAA2B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,mBAAmB,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;YAAE,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;aAC7E,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;YAAE,mBAAmB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;aACvF,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,mBAAmB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,mBAAmB,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,cAAc,CAAC,MAAM,mBAAmB,CAAC,CAAC;IAChF,CAAC;IAED,8EAA8E;IAC9E,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,YAAY,CAAC,IAAI,CAAC,yBAAyB,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1D,YAAY,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,cAAc,eAAe,QAAQ,EAAE,CAAC,CAAC;IAClF,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,CAAC,IAAI,CAAC,KAAK,kBAAkB,EAAE,CAAC,CAAC;QAC7C,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,CAAC,CAAC,qBAAqB,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,YAAY,CAAC,IAAI,CACf,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,sBAAsB,CAAC,CAAC,CAAC,eAAe,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,qBAAqB,IAAI,IAAI,EAAE,CAC7H,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACxC,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YACrC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvC,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC7C,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,mBAAmB;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAExC,8EAA8E;IAC9E,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM;QAC7B,CAAC,CAAC,IAAI,CAAC,SAAS,CACZ;YACE,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,kBAAkB;YACnD,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;YACrC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;SACtC,EACD,IAAI,EACJ,CAAC,CACF;QACH,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,YAAY,GAChB,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QAC7B,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACtF,CAAC,CAAC,QAAQ,CAAC;IAEf,MAAM,MAAM,GAAG;QACb,eAAe,KAAK,CAAC,KAAK,eAAe;QACzC,oBAAoB,KAAK,CAAC,cAAc,oBAAoB;QAC5D,uBAAuB,KAAK,CAAC,eAAe,uBAAuB;QACnE,qBAAqB,UAAU,qBAAqB;QACpD,YAAY,SAAS,YAAY;QACjC,sBAAsB,YAAY,sBAAsB;QACxD,aAAa,QAAQ,aAAa;KACnC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEf,OAAO;QACL,YAAY;QACZ,kBAAkB;QAClB,QAAQ;QACR,OAAO;QACP,MAAM;QACN,mBAAmB;KACpB,CAAC;AACJ,CAAC"}