@winspan/claude-forge 8.54.4 → 9.12.0

package/dist/daemon/handlers/pre-tool-use.js

@@ -0,0 +1,618 @@
+/**
+ * PreToolUseHandler — Phase 1 strict-mode rule engine + dry_run shim.
+ *
+ * Pipeline per event:
+ *   1. Build RuleContext (recent_agent_spawn, active_agent_depth, edited_files,
+ *      recent_prompt).
+ *   2. Detect explicit bypass marker (`forge:bypass=<reason>`) in tool input.
+ *   3. Find the first matching ToolInterceptRule from RuleRegistry.
+ *   4. Decide & persist:
+ *      - Flag OFF (default): row written with decision='dry_run'; allow=true.
+ *      - Flag ON  + bypass : decision='bypass'; allow=true.
+ *      - Flag ON  + deny   : decision='deny';   allow=false + hookSpecificOutput.
+ *      - Flag ON  + warn   : decision='warn';   allow=true + additionalContext.
+ *
+ * Storage / config failures must never propagate — `tool_intercepts` is a
+ * fact table; missing rows are acceptable, breaking the tool pipeline is not.
+ *
+ * Session-state computed lazily (per-event) instead of cached, to keep the
+ * handler stateless across daemon restarts. Phase 2 will fold this into
+ * sessions.intercept_count etc. so the lazy scan can be replaced.
+ */
+import { RuleRegistry } from '../rules/registry.js';
+import { isWhitelisted, isProjectInterceptDisabled } from '../rules/whitelist.js';
+import { InterceptRollbackGuard } from '../services/intercept-rollback-guard.js';
+import { getFilePath, getUserPrompt } from '../../core/event-fields.js';
+import { truncateString } from '../../core/utils/format.js';
+import { logger } from '../../core/utils/logger.js';
+import { readBypassFile } from '../../core/utils/bypass-token.js';
+/** Per-tool max bytes we capture into `tool_intercepts.tool_input_summary`. */
+const SUMMARY_MAX_CHARS = 500;
+/**
+ * Sliding-window for "recent agent spawn detected" check (milliseconds).
+ *
+ * F6 fix (2026-05-27): bumped 30s → 5min and switched the signal source from
+ * `hook_type='PostToolUse'` to `'PreToolUse'`. PostToolUse Task events only
+ * arrive when the sub-agent COMPLETES (typically 30s–5min+ later), so the old
+ * window was guaranteed to miss the main thread's immediate post-spawn
+ * coordination — the very window we wanted to relax rules in. PreToolUse Task
+ * fires at spawn time, matching the Phase 5 `PHASE5_WINDOW_MS` (5 min).
+ */
+const RECENT_AGENT_WINDOW_MS = 5 * 60 * 1000;
+/** Cap on how many PostToolUse events we scan when computing edited_files. */
+const EDIT_HISTORY_SCAN_LIMIT = 200;
+/** Bypass marker regex — captures the optional reason for the audit row. */
+const BYPASS_PATTERN = /forge:bypass=([^\s'"`]*)/;
+/** Feature-flag key probed on every event. */
+const FEATURE_FLAG_KEY = 'pre_tool_intercept.enabled';
+/** v9.x Phase 2 (2026-05-26): hard enforce flag for `task-question-needs-bmad`. */
+const QUESTION_DEFAULT_BMAD_ENFORCE_FLAG = 'question_default_bmad.enforce';
+/** f47c2c90 (2026-06-17): enable flag for `inline-edit-no-spawn` warn rules. */
+const INLINE_EDIT_NO_SPAWN_FLAG = 'inline_edit_no_spawn.enabled';
+export class PreToolUseHandler {
+    storage;
+    configStore;
+    registry;
+    /**
+     * Session → edited-files incremental cache (F7).
+     * Cleared per-session on Stop via `clearSession()`.
+     */
+    editedFilesCache = new Map();
+    rollbackGuard;
+    constructor(storage, configStore, registry = new RuleRegistry(), rollbackGuard) {
+        this.storage = storage;
+        this.configStore = configStore;
+        this.registry = registry;
+        this.rollbackGuard = rollbackGuard ?? new InterceptRollbackGuard(storage, configStore);
+    }
+    /**
+     * Drop cached edited-files state for a session. Called from StopHandler so
+     * long-running daemons don't leak per-session Sets forever.
+     */
+    clearSession(sessionId) {
+        this.editedFilesCache.delete(sessionId);
+    }
+    async handle(event) {
+        try {
+            const input = event.tool_input;
+            // 8-in-1 Phase D (2026-05-27): per-project intercept disable. Projects
+            // on the user-configured `disabled_project_prefixes` list skip the rule
+            // engine entirely BEFORE the whitelist check — no tool_intercepts rows,
+            // no rule lookups, no allow/deny decisions surfaced to the user. Useful
+            // for docs-only / tutorial / scratch repos where the noise outweighs
+            // value. See `isProjectInterceptDisabled` for path-matching semantics.
+            if (isProjectInterceptDisabled(event.project_path, this.configStore)) {
+                return { allow: true };
+            }
+            // Safety-net #1 (Phase 2c): whitelist early-exit. Read/Glob/Grep + a
+            // small set of project-essential Bash commands skip the rule engine
+            // entirely. We deliberately do NOT write a tool_intercepts row here —
+            // the table is for "rule fired" observability, not for every tool call.
+            if (isWhitelisted(event.tool_name, input)) {
+                return { allow: true };
+            }
+            const ctx = this.buildContext(event);
+            const rule = this.registry.findFirstMatch(event.tool_name, input, ctx);
+            if (!rule) {
+                // Cheap fast path: no rule fired → nothing to log.
+                return { allow: true };
+            }
+            const flagEnabled = this.isFlagEnabled();
+            const inlineBypass = extractBypassToken(input);
+            // Safety-net #2 (Phase 2c): bypass token file (~/.claude-forge/bypass.token).
+            // Treated identically to the inline `forge:bypass=` marker. File bypass
+            // wins if both are present; either is sufficient.
+            const fileBypass = readBypassFile();
+            const bypassToken = inlineBypass !== null
+                ? inlineBypass
+                : fileBypass !== null
+                    ? `file:${fileBypass.token.slice(0, 8)}:${fileBypass.reason}`.slice(0, 200)
+                    : null;
+            const summary = buildToolInputSummary(input);
+            const hintText = safeHint(rule, input, ctx);
+            // Safety-net #4 (Phase 2c): observation_until lets a freshly-added rule
+            // ride along in dry_run mode for the first 24h even when the flag is ON.
+            const inObservationWindow = isInObservationWindow(rule, event.timestamp);
+            // Compute the decision actually persisted in the row.
+            // 'ask' (spec 1200 decision-hint-pending) maps to 'warn' in storage —
+            // both are non-blocking; 'ask' vs 'warn' is a semantic distinction in
+            // the rule definition only. The CHECK constraint in schema.sql only
+            // allows 'deny' | 'warn' | 'bypass' | 'dry_run'.
+            let persistedDecision;
+            if (!flagEnabled) {
+                persistedDecision = 'dry_run';
+            }
+            else if (bypassToken !== null) {
+                persistedDecision = 'bypass';
+            }
+            else if (inObservationWindow) {
+                persistedDecision = 'dry_run';
+            }
+            else {
+                persistedDecision = rule.decision === 'ask' ? 'warn' : rule.decision;
+            }
+            this.persistIntercept({
+                event,
+                rule,
+                decision: persistedDecision,
+                hint: hintText,
+                summary,
+                bypassToken,
+            });
+            // Build the HookResponse sent back to Claude Code.
+            if (!flagEnabled) {
+                logger.debug(`[PreToolUse] dry_run ${rule.id} on ${event.tool_name} (flag OFF, would have ${rule.decision}ed)`);
+                return { allow: true };
+            }
+            if (bypassToken !== null) {
+                logger.info(`[PreToolUse] bypass ${rule.id} on ${event.tool_name} (token=${truncateString(bypassToken || '<no-reason>', 40)})`);
+                return { allow: true };
+            }
+            if (inObservationWindow) {
+                logger.info(`[PreToolUse] dry_run ${rule.id} on ${event.tool_name} (rule in observation window until ${rule.observation_until})`);
+                return { allow: true };
+            }
+            if (rule.decision === 'deny') {
+                logger.info(`[PreToolUse] DENY ${rule.id} on ${event.tool_name}`);
+                // Safety-net #3: count denies in the last 60s; trigger auto-rollback
+                // when threshold reached. The rollback writes config flags but does
+                // NOT change THIS event's deny outcome — the next deny would be
+                // dry_run because the flag is now OFF.
+                const rb = this.rollbackGuard.checkAndMaybeRollback({
+                    sessionId: event.session_id,
+                    nowIso: event.timestamp,
+                });
+                const response = {
+                    allow: false,
+                    reason: hintText,
+                    hookSpecificOutput: {
+                        hookEventName: 'PreToolUse',
+                        permissionDecision: 'deny',
+                        permissionDecisionReason: hintText,
+                    },
+                };
+                if (rb.triggered && rb.additionalContext) {
+                    response.systemMessage = rb.additionalContext;
+                }
+                return response;
+            }
+            // warn / ask — non-blocking, attach a contextual hint.
+            // 'ask' (decision-hint-pending) behaves identically to 'warn' at the
+            // transport layer; the distinction is semantic (one-sided advisory vs
+            // interactive prompt for future 'deny' upgrade path).
+            logger.info(`[PreToolUse] ${rule.decision.toUpperCase()} ${rule.id} on ${event.tool_name}`);
+            return {
+                allow: true,
+                additionalContext: hintText,
+            };
+        }
+        catch (err) {
+            // Last-line backstop: handler errors must never break tool execution.
+            logger.warn(`[PreToolUse] handler failed (allowing tool): ${err}`);
+            return { allow: true };
+        }
+    }
+    // ── Private ──────────────────────────────────────────────────────────────
+    isFlagEnabled() {
+        try {
+            return this.configStore.isEnabled(FEATURE_FLAG_KEY);
+        }
+        catch (err) {
+            logger.debug(`[PreToolUse] ConfigStore probe failed (default OFF): ${err}`);
+            return false;
+        }
+    }
+    buildContext(event) {
+        const { files: editedFiles, withTs: editedFilesWithTs } = this.computeEditedFilesWithTs(event.session_id);
+        const recentAgentSpawn = this.detectRecentAgentSpawn(event.session_id, event.timestamp);
+        const activeAgentDepth = this.computeActiveAgentDepth(event.session_id);
+        const lastSpawnTs = this.getLastSpawnTs(event.session_id, event.timestamp);
+        const recentPrompt = this.fetchRecentPrompt(event.session_id);
+        const questionDefaultBmadEnforce = this.probeQuestionDefaultBmadEnforce();
+        const inlineEditNoSpawnEnabled = this.probeInlineEditNoSpawn();
+        return {
+            session_id: event.session_id,
+            project_path: event.project_path,
+            timestamp_ms: parseTimestampMs(event.timestamp),
+            recent_agent_spawn: recentAgentSpawn,
+            active_agent_depth: activeAgentDepth,
+            edited_files: editedFiles,
+            edited_files_with_ts: editedFilesWithTs,
+            last_spawn_ts: lastSpawnTs,
+            recent_prompt: recentPrompt,
+            question_default_bmad_enforce: questionDefaultBmadEnforce,
+            inline_edit_no_spawn_enabled: inlineEditNoSpawnEnabled,
+        };
+    }
+    /**
+     * f47c2c90 (2026-06-17): probe `inline_edit_no_spawn.enabled`. Default false
+     * (gray-rollout OFF). Storage / config failures degrade to `false` (fail-safe
+     * — keep the rule dormant; warn-only rule never blocks anyway).
+     */
+    probeInlineEditNoSpawn() {
+        try {
+            return this.configStore.isEnabled(INLINE_EDIT_NO_SPAWN_FLAG);
+        }
+        catch (err) {
+            logger.debug(`[PreToolUse] probeInlineEditNoSpawn failed: ${err}`);
+            return false;
+        }
+    }
+    /**
+     * v9.x Phase 2 (2026-05-26): probe `question_default_bmad.enforce`. Default
+     * false during the 7-day dry_run window starting 2026-05-26. Storage /
+     * config failures degrade to `false` (fail-safe — keep dry_run behaviour).
+     */
+    probeQuestionDefaultBmadEnforce() {
+        try {
+            return this.configStore.isEnabled(QUESTION_DEFAULT_BMAD_ENFORCE_FLAG);
+        }
+        catch (err) {
+            logger.debug(`[PreToolUse] probeQuestionDefaultBmadEnforce failed: ${err}`);
+            return false;
+        }
+    }
+    /**
+     * Distinct file_paths edited in PostToolUse Edit/Write events for the session.
+     *
+     * F7 fix: incremental cache keyed by session_id. First call scans up to
+     * `EDIT_HISTORY_SCAN_LIMIT` events; subsequent calls fetch only events with
+     * `timestamp >= maxTs` (Set dedup absorbs the boundary). A session with N
+     * PreToolUse events now amortizes to O(N) total scan work instead of O(N·200).
+     *
+     * Returns a fresh copy of the Set so rule matchers can't mutate cached state.
+     */
+    computeEditedFiles(sessionId) {
+        return this.computeEditedFilesWithTs(sessionId).files;
+    }
+    /**
+     * P0-1 fix (2026-05-27): same as `computeEditedFiles` but additionally
+     * surfaces per-file last-edit ISO timestamp so the HARD multi-file rule can
+     * drop pre-spawn entries. The Set is preserved as the legacy `files`
+     * companion for callers (rule matchers, hint factories) that don't need
+     * timing.
+     *
+     * Cache shape was upgraded (added `fileTs: Map<string,string>`) but the
+     * incremental-scan invariant is unchanged: we only fetch events newer than
+     * the cached `maxTs` and merge into the existing fileTs map (`Map.set`
+     * naturally overwrites with the newest ts since queryEvents returns DESC).
+     */
+    computeEditedFilesWithTs(sessionId) {
+        try {
+            const cached = this.editedFilesCache.get(sessionId);
+            const filter = {
+                session_id: sessionId,
+                hook_type: 'PostToolUse',
+                limit: EDIT_HISTORY_SCAN_LIMIT,
+            };
+            if (cached)
+                filter.since = cached.maxTs;
+            const events = this.storage.queryEvents(filter);
+            const files = cached ? cached.files : new Set();
+            const fileTs = cached ? cached.fileTs : new Map();
+            // queryEvents returns DESC by timestamp; track the newest timestamp seen.
+            let newMaxTs = cached?.maxTs ?? '';
+            for (const e of events) {
+                if (e.timestamp > newMaxTs)
+                    newMaxTs = e.timestamp;
+                if (e.tool_name !== 'Edit' && e.tool_name !== 'Write')
+                    continue;
+                const fp = getFilePath(e);
+                if (!fp)
+                    continue;
+                files.add(fp);
+                // Keep the LATEST timestamp per file (events DESC; only overwrite
+                // when the cached value is missing or strictly older).
+                const prev = fileTs.get(fp);
+                if (!prev || e.timestamp > prev)
+                    fileTs.set(fp, e.timestamp);
+            }
+            // Persist updated entry only if we observed any state to track.
+            if (newMaxTs) {
+                this.editedFilesCache.set(sessionId, { files, fileTs, maxTs: newMaxTs });
+            }
+            // Return fresh copies so rule matchers can't mutate cached state.
+            const withTs = [];
+            for (const [path, ts] of fileTs.entries())
+                withTs.push({ path, ts });
+            return { files: new Set(files), withTs };
+        }
+        catch (err) {
+            logger.debug(`[PreToolUse] computeEditedFilesWithTs failed: ${err}`);
+            return { files: new Set(), withTs: [] };
+        }
+    }
+    /**
+     * P0-1 fix (2026-05-27): timestamp of the most recent PreToolUse Task/Agent
+     * event within the F6 5-min window. Returns null when no spawn was observed.
+     * Uses the same query shape as `detectRecentAgentSpawn` so callers don't pay
+     * twice (storage layer prepared-stmt cache absorbs the duplicate).
+     */
+    getLastSpawnTs(sessionId, eventTs) {
+        try {
+            const nowMs = parseTimestampMs(eventTs);
+            const events = this.storage.queryEvents({
+                session_id: sessionId,
+                hook_type: 'PreToolUse',
+                limit: 100,
+            });
+            for (const e of events) {
+                if (e.tool_name !== 'Agent' && e.tool_name !== 'Task')
+                    continue;
+                const eTs = parseTimestampMs(e.timestamp);
+                if (nowMs - eTs <= RECENT_AGENT_WINDOW_MS)
+                    return e.timestamp;
+            }
+            return null;
+        }
+        catch (err) {
+            logger.debug(`[PreToolUse] getLastSpawnTs failed: ${err}`);
+            return null;
+        }
+    }
+    /**
+     * Did the session spawn an agent (Task / Agent tool) within the recent
+     * observation window?
+     *
+     * F6 fix (2026-05-27): query `PreToolUse` (spawn-initiated) instead of
+     * `PostToolUse` (spawn-completed). PostToolUse Task events only arrive
+     * 30s–5min+ after spawn (when the sub-agent finishes), so the previous
+     * 30s window was permanently false during the actual post-spawn
+     * coordination period the rule was designed to relax. PreToolUse Task
+     * fires at the spawn instant; combined with the 5-min window (aligned
+     * with Phase 5 `PHASE5_WINDOW_MS`), the main thread now correctly sees
+     * `recent_agent_spawn=true` during BMAD coordination.
+     *
+     * `limit` bumped from 40 → 100 because a 5-min window can hold many more
+     * spawn events than the prior 30s window.
+     */
+    detectRecentAgentSpawn(sessionId, eventTs) {
+        try {
+            const nowMs = parseTimestampMs(eventTs);
+            const events = this.storage.queryEvents({
+                session_id: sessionId,
+                hook_type: 'PreToolUse',
+                limit: 100,
+            });
+            for (const e of events) {
+                if (e.tool_name !== 'Agent' && e.tool_name !== 'Task')
+                    continue;
+                const eTs = parseTimestampMs(e.timestamp);
+                if (nowMs - eTs <= RECENT_AGENT_WINDOW_MS)
+                    return true;
+            }
+            return false;
+        }
+        catch (err) {
+            logger.debug(`[PreToolUse] detectRecentAgentSpawn failed: ${err}`);
+            return false;
+        }
+    }
+    /**
+     * Audit #4 fix (2026-06-09): compute the number of sub-agents currently
+     * IN-FLIGHT for the session (agent-depth).
+     *
+     * Claude Code sub-agents SHARE the main thread's `session_id`, so a spawned
+     * `coder` editing 3+ files (its authorized job) trips the session-level
+     * multi-file HARD threshold even though the main thread never edited a file.
+     * The 6 audited deny rows were all this false-positive class.
+     *
+     * Pure daemon-side signal — NO hook (.sh) change required, because the daemon
+     * already receives both ends of the Task lifecycle:
+     *   • PreToolUse  tool_name='Task'/'Agent'  → a sub-agent was SPAWNED (+1)
+     *   • PostToolUse tool_name='Task'/'Agent'  → that sub-agent COMPLETED (-1)
+     *
+     * depth = max(0, #spawns − #completions). `depth >= 1` means at least one
+     * authorized sub-agent is running right now → the multi-file HARD rule
+     * exempts the session (the edits are the agent's legitimate work).
+     *
+     * Scanning is capped + degrades to 0 on any failure (fail-OPEN toward the
+     * legacy threshold behaviour, never breaks the tool pipeline).
+     *
+     * NOTE: this intentionally does NOT use a tight time window. A long-running
+     * `coder` can run well past the 5-min `recent_agent_spawn` window; as long as
+     * its PostToolUse completion has not yet arrived, depth stays ≥1 and its
+     * edits remain exempt. The PostToolUse decrement is what closes the window.
+     */
+    computeActiveAgentDepth(sessionId) {
+        try {
+            const events = this.storage.queryEvents({
+                session_id: sessionId,
+                limit: EDIT_HISTORY_SCAN_LIMIT,
+            });
+            let spawns = 0;
+            let completions = 0;
+            for (const e of events) {
+                if (e.tool_name !== 'Agent' && e.tool_name !== 'Task')
+                    continue;
+                if (e.hook_type === 'PreToolUse')
+                    spawns++;
+                else if (e.hook_type === 'PostToolUse')
+                    completions++;
+            }
+            const depth = spawns - completions;
+            return depth > 0 ? depth : 0;
+        }
+        catch (err) {
+            logger.debug(`[PreToolUse] computeActiveAgentDepth failed: ${err}`);
+            return 0;
+        }
+    }
+    /** Most-recent UserPromptSubmit prompt text (best-effort, used for intent relaxation). */
+    fetchRecentPrompt(sessionId) {
+        try {
+            const events = this.storage.queryEvents({
+                session_id: sessionId,
+                hook_type: 'UserPromptSubmit',
+                limit: 1,
+            });
+            if (events.length === 0)
+                return '';
+            const p = getUserPrompt(events[0]);
+            return p ?? '';
+        }
+        catch (err) {
+            logger.debug(`[PreToolUse] fetchRecentPrompt failed: ${err}`);
+            return '';
+        }
+    }
+    persistIntercept(args) {
+        try {
+            this.storage.writeToolIntercept({
+                event_id: args.event.event_id ?? null,
+                session_id: args.event.session_id,
+                project_path: args.event.project_path,
+                timestamp: args.event.timestamp,
+                tool_name: args.event.tool_name,
+                tool_input_summary: args.summary,
+                rule_id: args.rule.id,
+                decision: args.decision,
+                hint: args.hint,
+                bypass_token: args.bypassToken,
+            });
+        }
+        catch (err) {
+            logger.warn(`[PreToolUse] writeToolIntercept failed: ${err}`);
+        }
+    }
+}
+// ── Module helpers ─────────────────────────────────────────────────────────
+function parseTimestampMs(ts) {
+    const ms = Date.parse(ts);
+    return Number.isFinite(ms) ? ms : Date.now();
+}
+/**
+ * Build a compact, secret-scrubbed summary of the tool input for audit logs.
+ * The full input may contain credentials (Bash command env vars, etc.) so we
+ * truncate aggressively and redact common secret keywords.
+ */
+function buildToolInputSummary(input) {
+    const pieces = [];
+    if (typeof input.command === 'string')
+        pieces.push(`command=${input.command}`);
+    if (typeof input.file_path === 'string')
+        pieces.push(`file=${input.file_path}`);
+    if (typeof input.subagent_type === 'string')
+        pieces.push(`subagent=${input.subagent_type}`);
+    if (typeof input.description === 'string')
+        pieces.push(`desc=${input.description}`);
+    if (typeof input.new_string === 'string') {
+        pieces.push(`new=${truncateString(input.new_string, 80)}`);
+    }
+    const joined = pieces.join(' | ');
+    return truncateString(redactSecrets(joined), SUMMARY_MAX_CHARS);
+}
+/**
+ * Shape-based secret redaction patterns (audit F-medium #5, 2026-05-26).
+ *
+ * Applied to the `tool_input_summary` string we persist into `tool_intercepts`
+ * for auditing. The raw `tool_input` JSON is NEVER redacted at the rule-engine
+ * level (rules legitimately need to inspect verbatim arguments); we only
+ * scrub the *summary* that gets written to durable storage and surfaced in
+ * the Web UI / weekly report.
+ *
+ * Order matters: longer / more specific patterns first so they're not
+ * partially eaten by a more general regex on the same span.
+ *
+ * Patterns covered:
+ *   1. CLI-flag style: --token=…, --api-key=…, password=…, secret=…
+ *   2. JWT shape:       eyJ<base64>.<base64>.<base64>
+ *   3. Anthropic / OpenAI keys: sk-… (40+ chars)
+ *   4. Slack bot tokens: xoxb-… (40+ chars)
+ *   5. AWS access key IDs: AKIA + 16 alnum uppercase
+ *   6. Long hex strings (>= 32 chars) — catches hex API keys / session tokens
+ *
+ * Exported (under-test) for unit tests in pre-tool-use.test.ts so we can lock
+ * down each shape with a focused assertion.
+ */
+/**
+ * Shared redaction pattern table. Each entry is either:
+ *   • `prefixed: true`  — the regex has a single capture group that names the
+ *                          key (e.g. `--token=`); replacement preserves the
+ *                          prefix and substitutes `<redacted>` for the value.
+ *   • `prefixed: false` — the regex matches the entire secret literal; the
+ *                          whole match is replaced with `<redacted>`.
+ *
+ * Exported so tests can lock down each shape individually.
+ */
+export const SECRET_REDACTION_PATTERNS = [
+    // 1a. CLI flag forms (--token=… / --token …).
+    { name: 'flag-token', re: /(--token[= ])[^\s]+/gi, prefixed: true },
+    { name: 'flag-api-key', re: /(--api[-_]?key[= ])[^\s]+/gi, prefixed: true },
+    // 1b. key=value forms — match `password=…` / `secret=…` even when embedded
+    // mid-string (no leading word boundary required, matches legacy behavior).
+    { name: 'password-kv', re: /(password[= ])[^\s]+/gi, prefixed: true },
+    { name: 'secret-kv', re: /(secret[= ])[^\s]+/gi, prefixed: true },
+    // 2. JWT — three base64url segments separated by `.`. Require ≥20 chars per
+    // segment so file paths like "a.b.c" don't match.
+    {
+        name: 'jwt',
+        re: /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}/g,
+        prefixed: false,
+    },
+    // 3. Anthropic / OpenAI / sk- prefixed keys.
+    { name: 'sk-key', re: /\bsk-[A-Za-z0-9_-]{32,}/g, prefixed: false },
+    // 4. Slack tokens: xoxb-/xoxp-/xoxa-/xoxr-/xoxs-.
+    { name: 'slack-token', re: /\bxox[abprs]-[A-Za-z0-9-]{20,}/g, prefixed: false },
+    // 5. AWS access key id: AKIA + 16 uppercase alnum.
+    { name: 'aws-akid', re: /\bAKIA[0-9A-Z]{16}\b/g, prefixed: false },
+    // 6. Long lowercase hex blobs (≥32 chars). Common for hex API keys + signed
+    // session IDs. Applied LAST so named patterns above keep their shape.
+    { name: 'long-hex', re: /\b[a-f0-9]{32,}\b/g, prefixed: false },
+];
+/**
+ * Apply all `SECRET_REDACTION_PATTERNS` to a string. Exported for unit tests;
+ * production callers should go through `buildToolInputSummary`.
+ */
+export function redactSecrets(s) {
+    let out = s;
+    for (const p of SECRET_REDACTION_PATTERNS) {
+        out = p.prefixed
+            ? out.replace(p.re, '$1<redacted>')
+            : out.replace(p.re, '<redacted>');
+    }
+    return out;
+}
+function extractBypassToken(input) {
+    const candidates = [];
+    if (typeof input.command === 'string')
+        candidates.push(input.command);
+    if (typeof input.new_string === 'string')
+        candidates.push(input.new_string);
+    if (typeof input.content === 'string')
+        candidates.push(input.content);
+    if (typeof input.description === 'string')
+        candidates.push(input.description);
+    for (const c of candidates) {
+        const m = c.match(BYPASS_PATTERN);
+        if (m)
+            return m[1] ?? '';
+    }
+    return null;
+}
+/**
+ * Phase 2c safety-net #4: rule "observation window" check.
+ * Returns true when the rule has `observation_until` set AND that timestamp is
+ * AFTER the current event timestamp. In that case the handler force-demotes
+ * the persisted decision to `dry_run` and returns allow=true.
+ */
+function isInObservationWindow(rule, eventTs) {
+    if (!rule.observation_until)
+        return false;
+    const untilMs = Date.parse(rule.observation_until);
+    if (!Number.isFinite(untilMs))
+        return false;
+    const eventMs = Date.parse(eventTs);
+    const refMs = Number.isFinite(eventMs) ? eventMs : Date.now();
+    return refMs < untilMs;
+}
+function safeHint(rule, input, ctx) {
+    try {
+        return rule.hint(input, ctx);
+    }
+    catch (err) {
+        logger.debug(`[PreToolUse] rule.hint threw: ${err}`);
+        return `Rule ${rule.id} matched (hint unavailable due to internal error).`;
+    }
+}
+//# sourceMappingURL=pre-tool-use.js.map

package/dist/daemon/handlers/pre-tool-use.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-tool-use.js","sourceRoot":"","sources":["../../../src/daemon/handlers/pre-tool-use.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,EAAc,WAAW,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAElE,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B;;;;;;;;;GASG;AACH,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7C,8EAA8E;AAC9E,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,4EAA4E;AAC5E,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAClD,8CAA8C;AAC9C,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AACtD,mFAAmF;AACnF,MAAM,kCAAkC,GAAG,+BAA+B,CAAC;AAC3E,gFAAgF;AAChF,MAAM,yBAAyB,GAAG,8BAA8B,CAAC;AAwBjE,MAAM,OAAO,iBAAiB;IAUlB;IACA;IACA;IAXV;;;OAGG;IACc,gBAAgB,GAAuC,IAAI,GAAG,EAAE,CAAC;IAEjE,aAAa,CAAyB;IAEvD,YACU,OAAsB,EACtB,WAAwB,EACxB,WAAyB,IAAI,YAAY,EAAE,EACnD,aAAsC;QAH9B,YAAO,GAAP,OAAO,CAAe;QACtB,gBAAW,GAAX,WAAW,CAAa;QACxB,aAAQ,GAAR,QAAQ,CAAmC;QAGnD,IAAI,CAAC,aAAa,GAAG,aAAa,IAAI,IAAI,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACzF,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,SAAiB;QAC5B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAsB;QACjC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,UAA6B,CAAC;YAElD,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,uEAAuE;YACvE,IAAI,0BAA0B,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YAED,qEAAqE;YACrE,oEAAoE;YACpE,sEAAsE;YACtE,wEAAwE;YACxE,IAAI,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAEvE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,mDAAmD;gBACnD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC/C,8EAA8E;YAC9E,wEAAwE;YACxE,kDAAkD;YAClD,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;YACpC,MAAM,WAAW,GACf,YAAY,KAAK,IAAI;gBACnB,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,UAAU,KAAK,IAAI;oBACnB,CAAC,CAAC,QAAQ,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBAC3E,CAAC,CAAC,IAAI,CAAC;YACb,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAE5C,wEAAwE;YACxE,yEAAyE;YACzE,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAEzE,sDAAsD;YACtD,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,iDAAiD;YACjD,IAAI,iBAAyD,CAAC;YAC9D,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,iBAAiB,GAAG,SAAS,CAAC;YAChC,CAAC;iBAAM,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBAChC,iBAAiB,GAAG,QAAQ,CAAC;YAC/B,CAAC;iBAAM,IAAI,mBAAmB,EAAE,CAAC;gBAC/B,iBAAiB,GAAG,SAAS,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,iBAAiB,GAAG,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;YACvE,CAAC;YAED,IAAI,CAAC,gBAAgB,CAAC;gBACpB,KAAK;gBACL,IAAI;gBACJ,QAAQ,EAAE,iBAAiB;gBAC3B,IAAI,EAAE,QAAQ;gBACd,OAAO;gBACP,WAAW;aACZ,CAAC,CAAC;YAEH,mDAAmD;YACnD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,CAAC,KAAK,CACV,wBAAwB,IAAI,CAAC,EAAE,OAAO,KAAK,CAAC,SAAS,0BAA0B,IAAI,CAAC,QAAQ,KAAK,CAClG,CAAC;gBACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YAED,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CACT,uBAAuB,IAAI,CAAC,EAAE,OAAO,KAAK,CAAC,SAAS,WAAW,cAAc,CAAC,WAAW,IAAI,aAAa,EAAE,EAAE,CAAC,GAAG,CACnH,CAAC;gBACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YAED,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CACT,wBAAwB,IAAI,CAAC,EAAE,OAAO,KAAK,CAAC,SAAS,sCAAsC,IAAI,CAAC,iBAAiB,GAAG,CACrH,CAAC;gBACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YAED,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,EAAE,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;gBAClE,qEAAqE;gBACrE,oEAAoE;gBACpE,gEAAgE;gBAChE,uCAAuC;gBACvC,MAAM,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC;oBAClD,SAAS,EAAE,KAAK,CAAC,UAAU;oBAC3B,MAAM,EAAE,KAAK,CAAC,SAAS;iBACxB,CAAC,CAAC;gBACH,MAAM,QAAQ,GAAiB;oBAC7B,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,QAAQ;oBAChB,kBAAkB,EAAE;wBAClB,aAAa,EAAE,YAAY;wBAC3B,kBAAkB,EAAE,MAAM;wBAC1B,wBAAwB,EAAE,QAAQ;qBACnC;iBACF,CAAC;gBACF,IAAI,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,iBAAiB,EAAE,CAAC;oBACzC,QAAQ,CAAC,aAAa,GAAG,EAAE,CAAC,iBAAiB,CAAC;gBAChD,CAAC;gBACD,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,uDAAuD;YACvD,qEAAqE;YACrE,sEAAsE;YACtE,sDAAsD;YACtD,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,EAAE,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAC5F,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,iBAAiB,EAAE,QAAQ;aAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,MAAM,CAAC,IAAI,CAAC,gDAAgD,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,4EAA4E;IAEpE,aAAa;QACnB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,wDAAwD,GAAG,EAAE,CAAC,CAAC;YAC5E,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,KAAsB;QACzC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,GACrD,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACxF,MAAM,gBAAgB,GAAG,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,0BAA0B,GAAG,IAAI,CAAC,+BAA+B,EAAE,CAAC;QAC1E,MAAM,wBAAwB,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC/D,OAAO;YACL,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;YAC/C,kBAAkB,EAAE,gBAAgB;YACpC,kBAAkB,EAAE,gBAAgB;YACpC,YAAY,EAAE,WAAW;YACzB,oBAAoB,EAAE,iBAAiB;YACvC,aAAa,EAAE,WAAW;YAC1B,aAAa,EAAE,YAAY;YAC3B,6BAA6B,EAAE,0BAA0B;YACzD,4BAA4B,EAAE,wBAAwB;SACvD,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,sBAAsB;QAC5B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,+CAA+C,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,+BAA+B;QACrC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,wDAAwD,GAAG,EAAE,CAAC,CAAC;YAC5E,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACK,kBAAkB,CAAC,SAAiB;QAC1C,OAAO,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;OAWG;IACK,wBAAwB,CAAC,SAAiB;QAIhD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,MAAM,GAAmD;gBAC7D,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,aAAa;gBACxB,KAAK,EAAE,uBAAuB;aAC/B,CAAC;YACF,IAAI,MAAM;gBAAE,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAExC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,EAAkB,CAAC;YAClE,0EAA0E;YAC1E,IAAI,QAAQ,GAAG,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC,CAAC,SAAS,GAAG,QAAQ;oBAAE,QAAQ,GAAG,CAAC,CAAC,SAAS,CAAC;gBACnD,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO;oBAAE,SAAS;gBAChE,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;gBAC1B,IAAI,CAAC,EAAE;oBAAE,SAAS;gBAClB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACd,kEAAkE;gBAClE,uDAAuD;gBACvD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC5B,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,GAAG,IAAI;oBAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;YAC/D,CAAC;YAED,gEAAgE;YAChE,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,kEAAkE;YAClE,MAAM,MAAM,GAAwC,EAAE,CAAC;YACvD,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACrE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,iDAAiD,GAAG,EAAE,CAAC,CAAC;YACrE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,cAAc,CAAC,SAAiB,EAAE,OAAe;QACvD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBACtC,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,YAAY;gBACvB,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM;oBAAE,SAAS;gBAChE,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC1C,IAAI,KAAK,GAAG,GAAG,IAAI,sBAAsB;oBAAE,OAAO,CAAC,CAAC,SAAS,CAAC;YAChE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,sBAAsB,CAAC,SAAiB,EAAE,OAAe;QAC/D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBACtC,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,YAAY;gBACvB,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM;oBAAE,SAAS;gBAChE,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC1C,IAAI,KAAK,GAAG,GAAG,IAAI,sBAAsB;oBAAE,OAAO,IAAI,CAAC;YACzD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,+CAA+C,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACK,uBAAuB,CAAC,SAAiB;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBACtC,UAAU,EAAE,SAAS;gBACrB,KAAK,EAAE,uBAAuB;aAC/B,CAAC,CAAC;YACH,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM;oBAAE,SAAS;gBAChE,IAAI,CAAC,CAAC,SAAS,KAAK,YAAY;oBAAE,MAAM,EAAE,CAAC;qBACtC,IAAI,CAAC,CAAC,SAAS,KAAK,aAAa;oBAAE,WAAW,EAAE,CAAC;YACxD,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,GAAG,WAAW,CAAC;YACnC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,gDAAgD,GAAG,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,0FAA0F;IAClF,iBAAiB,CAAC,SAAiB;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBACtC,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,kBAAkB;gBAC7B,KAAK,EAAE,CAAC;aACT,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,0CAA0C,GAAG,EAAE,CAAC,CAAC;YAC9D,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,IAOxB;QACC,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;gBAC9B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI;gBACrC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;gBACjC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;gBACrC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;gBAC/B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;gBAC/B,kBAAkB,EAAE,IAAI,CAAC,OAAO;gBAChC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,YAAY,EAAE,IAAI,CAAC,WAAW;aAC/B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;CACF;AAED,8EAA8E;AAE9E,SAAS,gBAAgB,CAAC,EAAU;IAClC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,KAAsB;IACnD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/E,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAChF,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5F,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACpF,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,OAAO,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,cAAc,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAIjC;IACH,8CAA8C;IAC9C,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE;IACnE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,6BAA6B,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE;IACrE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;IACjE,4EAA4E;IAC5E,kDAAkD;IAClD;QACE,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,gEAAgE;QACpE,QAAQ,EAAE,KAAK;KAChB;IACD,6CAA6C;IAC7C,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,KAAK,EAAE;IACnE,kDAAkD;IAClD,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,iCAAiC,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC/E,mDAAmD;IACnD,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,KAAK,EAAE;IAClE,4EAA4E;IAC5E,sEAAsE;IACtE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE;CAChE,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,yBAAyB,EAAE,CAAC;QAC1C,GAAG,GAAG,CAAC,CAAC,QAAQ;YACd,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,CAAC;YACnC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAsB;IAChD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtE,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtE,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,IAAuB,EAAE,OAAe;IACrE,IAAI,CAAC,IAAI,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9D,OAAO,KAAK,GAAG,OAAO,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAuB,EAAE,KAAsB,EAAE,GAAgB;IACjF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QACrD,OAAO,QAAQ,IAAI,CAAC,EAAE,oDAAoD,CAAC;IAC7E,CAAC;AACH,CAAC"}