azcodr 2.2.0 → 2.4.0

package/lib/agent-guard-command.js

@@ -0,0 +1,103 @@
+/**
+ * Command safety guard inspecting shell commands against a destructive denylist.
+ */
+export const DESTRUCTIVE_RULES = [
+    {
+        pattern: /\brm\s+(-[a-z-]*[rf][a-z-]*\s+)+(\/|\/\*|~|~\/\*|\$home|\$\{home\}|\.|\.\.|\.\/|[a-z]:\\|[a-z]:\/)/i,
+        reason: 'destructive rm targeting root, home, drive, or the current directory'
+    },
+    {
+        pattern: /(^|\s)rm\s+(-[a-z-]*\s+)*(\/|~|[a-z]:\\|[a-z]:\/)($|\s)/i,
+        reason: 'destructive rm targeting root or home'
+    },
+    {
+        pattern: /\brm\s+--recursive.*--force\s+(\/|~|\$home|\.)/i,
+        reason: 'destructive rm using long-form flags'
+    },
+    {
+        pattern: /\brm\s+.*--no-preserve-root/i,
+        reason: 'rm --no-preserve-root is forbidden under agent execution'
+    },
+    {
+        pattern: /\b(wipefs\s+-a|shred\s+-u|find\s+.*-delete)\b/i,
+        reason: 'irreversible disk or mass-delete operation'
+    },
+    {
+        pattern: /\bgit\s+push\s+.*(-f|--force|--mirror)\b/i,
+        reason: 'force-push or mirror-push can destroy remote history'
+    },
+    {
+        pattern: /\bgit\s+push\b.*--force-with-lease\b/i,
+        reason: 'force-push variant detected'
+    },
+    {
+        pattern: /\bgit\s+(reset\s+--hard|clean\s+-[a-z]*[fd])/i,
+        reason: 'destructive git worktree operation (reset --hard / clean)'
+    },
+    {
+        pattern: /\bgit\s+checkout\s+--\s+\./i,
+        reason: 'git checkout -- . discards all uncommitted work'
+    },
+    {
+        pattern: /\bgit\s+branch\s+-D\b/i,
+        reason: 'force branch delete'
+    },
+    {
+        pattern: /\b(drop\s+(database|schema|table)|truncate\s+(table\s+)?[a-z_])/i,
+        reason: 'destructive SQL DDL'
+    },
+    {
+        pattern: /\b(delete\s+from|update\s+[a-z_]+\s+set|alter\s+table)\b/i,
+        reason: 'destructive SQL DML'
+    },
+    {
+        pattern: /\b(grant\s+all|revoke\s+all)\b/i,
+        reason: 'privilege escalation in SQL'
+    },
+    {
+        pattern: /\b(mkfs|dd\s+if=|fdisk|parted\s+\/dev)\b/i,
+        reason: 'raw disk operation'
+    },
+    {
+        pattern: /(:[\s]*\([\s]*\)[\s]*\{|:[\s]*\|[\s]*:)/,
+        reason: 'fork bomb'
+    },
+    {
+        pattern: /\b(curl|wget)\s+.*\|\s*(sudo\s+)?(ba)?sh\b/i,
+        reason: 'piping download directly into shell execution'
+    },
+    {
+        pattern: /\b(base64\s+-d|base64\s+--decode)\s+.*\|/i,
+        reason: 'decoding encoded payload into a pipe'
+    },
+    {
+        pattern: /\b(npm|yarn|pnpm)\s+publish\b/i,
+        reason: 'package publish must run via release workflow, not ad-hoc tool call'
+    }
+];
+export function normalizeCommand(raw) {
+    return raw.replace(/[\r\n\t]+/g, ' ').replace(/\s+/g, ' ').trim();
+}
+/**
+ * Checks a command string against the safety denylist.
+ *
+ * @param command - Raw shell command string.
+ * @returns Violation details if blocked, or clean outcome.
+ */
+export function inspectCommand(command) {
+    const normalized = normalizeCommand(command);
+    if (!normalized)
+        return { blocked: false };
+    for (const rule of DESTRUCTIVE_RULES) {
+        if (rule.pattern.test(normalized)) {
+            return {
+                blocked: true,
+                reason: rule.reason,
+                command: normalized.slice(0, 300)
+            };
+        }
+    }
+    return { blocked: false, command: normalized };
+}
+export default { DESTRUCTIVE_RULES, normalizeCommand, inspectCommand };
+//# sourceMappingURL=agent-guard-command.js.map

package/lib/agent-guard-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-guard-command.js","sourceRoot":"","sources":["../src/agent-guard-command.ts"],"names":[],"mappings":"AAAA;;GAEG;AAaH,MAAM,CAAC,MAAM,iBAAiB,GAA4B;IACxD;QACE,OAAO,EAAE,qGAAqG;QAC9G,MAAM,EAAE,sEAAsE;KAC/E;IACD;QACE,OAAO,EAAE,0DAA0D;QACnE,MAAM,EAAE,uCAAuC;KAChD;IACD;QACE,OAAO,EAAE,iDAAiD;QAC1D,MAAM,EAAE,sCAAsC;KAC/C;IACD;QACE,OAAO,EAAE,8BAA8B;QACvC,MAAM,EAAE,0DAA0D;KACnE;IACD;QACE,OAAO,EAAE,gDAAgD;QACzD,MAAM,EAAE,4CAA4C;KACrD;IACD;QACE,OAAO,EAAE,2CAA2C;QACpD,MAAM,EAAE,sDAAsD;KAC/D;IACD;QACE,OAAO,EAAE,uCAAuC;QAChD,MAAM,EAAE,6BAA6B;KACtC;IACD;QACE,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,2DAA2D;KACpE;IACD;QACE,OAAO,EAAE,6BAA6B;QACtC,MAAM,EAAE,iDAAiD;KAC1D;IACD;QACE,OAAO,EAAE,wBAAwB;QACjC,MAAM,EAAE,qBAAqB;KAC9B;IACD;QACE,OAAO,EAAE,kEAAkE;QAC3E,MAAM,EAAE,qBAAqB;KAC9B;IACD;QACE,OAAO,EAAE,2DAA2D;QACpE,MAAM,EAAE,qBAAqB;KAC9B;IACD;QACE,OAAO,EAAE,iCAAiC;QAC1C,MAAM,EAAE,6BAA6B;KACtC;IACD;QACE,OAAO,EAAE,2CAA2C;QACpD,MAAM,EAAE,oBAAoB;KAC7B;IACD;QACE,OAAO,EAAE,yCAAyC;QAClD,MAAM,EAAE,WAAW;KACpB;IACD;QACE,OAAO,EAAE,6CAA6C;QACtD,MAAM,EAAE,+CAA+C;KACxD;IACD;QACE,OAAO,EAAE,2CAA2C;QACpD,MAAM,EAAE,sCAAsC;KAC/C;IACD;QACE,OAAO,EAAE,gCAAgC;QACzC,MAAM,EAAE,qEAAqE;KAC9E;CACF,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACpE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE3C,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aAClC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjD,CAAC;AAED,eAAe,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC"}

package/lib/agent-guard-file.d.ts

@@ -0,0 +1,32 @@
+export declare const DEFAULT_MAX_FILE_LINES = 300;
+export interface FileCheckInput {
+    filePath: string;
+    incomingContent?: string;
+    replacementContent?: string;
+    targetContent?: string;
+    maxLines?: number;
+}
+export interface FileCheckResult {
+    blocked: boolean;
+    reason?: string;
+    currentLines: number;
+    projectedLines: number;
+    maxLines: number;
+}
+export declare function countLines(text: string): number;
+export declare function readExistingLines(filePath: string): number;
+/**
+ * Checks a proposed file write or edit against Refactor-Before-Add rules.
+ *
+ * @param input - File path and proposed content.
+ * @returns Decision result indicating whether the write is blocked.
+ */
+export declare function inspectFileWrite(input: FileCheckInput): FileCheckResult;
+declare const _default: {
+    DEFAULT_MAX_FILE_LINES: number;
+    countLines: typeof countLines;
+    readExistingLines: typeof readExistingLines;
+    inspectFileWrite: typeof inspectFileWrite;
+};
+export default _default;
+//# sourceMappingURL=agent-guard-file.d.ts.map

package/lib/agent-guard-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-guard-file.d.ts","sourceRoot":"","sources":["../src/agent-guard-file.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG/C;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQ1D;AAgDD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,GAAG,eAAe,CAWvE;;;;;;;AAED,wBAKE"}

package/lib/agent-guard-file.js

@@ -0,0 +1,77 @@
+import fs from 'node:fs';
+import path from 'node:path';
+export const DEFAULT_MAX_FILE_LINES = 300;
+export function countLines(text) {
+    if (!text)
+        return 0;
+    return text.split('\n').length;
+}
+export function readExistingLines(filePath) {
+    if (!fs.existsSync(filePath))
+        return 0;
+    try {
+        const content = fs.readFileSync(filePath, 'utf-8');
+        return countLines(content);
+    }
+    catch {
+        return 0;
+    }
+}
+function calculateProjectedLines(currentLines, input) {
+    if (input.incomingContent !== undefined) {
+        return countLines(input.incomingContent);
+    }
+    if (input.replacementContent !== undefined) {
+        const addedLines = countLines(input.replacementContent);
+        const removedLines = input.targetContent !== undefined ? countLines(input.targetContent) : 1;
+        return Math.max(0, currentLines + addedLines - removedLines);
+    }
+    return currentLines;
+}
+function evaluateLineThresholds(params) {
+    const { filePath, currentLines, projectedLines, maxLines } = params;
+    const base = { currentLines, projectedLines, maxLines };
+    const relPath = path.basename(filePath);
+    if (currentLines > maxLines) {
+        if (projectedLines >= currentLines) {
+            return {
+                ...base,
+                blocked: true,
+                reason: `Refactor-Before-Add violation: '${relPath}' currently has ${currentLines} lines (limit: ${maxLines}). Adding or maintaining lines in an overflowing file is blocked. Refactor into modular units under green tests first.`
+            };
+        }
+        return { ...base, blocked: false };
+    }
+    if (projectedLines > maxLines) {
+        return {
+            ...base,
+            blocked: true,
+            reason: `File line budget exceeded: '${relPath}' would grow to ${projectedLines} lines (limit: ${maxLines}). Decompose into modular components before appending more code.`
+        };
+    }
+    return { ...base, blocked: false };
+}
+/**
+ * Checks a proposed file write or edit against Refactor-Before-Add rules.
+ *
+ * @param input - File path and proposed content.
+ * @returns Decision result indicating whether the write is blocked.
+ */
+export function inspectFileWrite(input) {
+    const maxLines = input.maxLines ?? DEFAULT_MAX_FILE_LINES;
+    const currentLines = readExistingLines(input.filePath);
+    const projectedLines = calculateProjectedLines(currentLines, input);
+    return evaluateLineThresholds({
+        filePath: input.filePath,
+        currentLines,
+        projectedLines,
+        maxLines
+    });
+}
+export default {
+    DEFAULT_MAX_FILE_LINES,
+    countLines,
+    readExistingLines,
+    inspectFileWrite
+};
+//# sourceMappingURL=agent-guard-file.js.map

package/lib/agent-guard-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-guard-file.js","sourceRoot":"","sources":["../src/agent-guard-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAkB1C,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,YAAoB,EAAE,KAAqB;IAC1E,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxD,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,UAAU,GAAG,YAAY,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AASD,SAAS,sBAAsB,CAAC,MAAuB;IACrD,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACpE,MAAM,IAAI,GAAG,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAExC,IAAI,YAAY,GAAG,QAAQ,EAAE,CAAC;QAC5B,IAAI,cAAc,IAAI,YAAY,EAAE,CAAC;YACnC,OAAO;gBACL,GAAG,IAAI;gBACP,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,mCAAmC,OAAO,mBAAmB,YAAY,kBAAkB,QAAQ,wHAAwH;aACpO,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IAED,IAAI,cAAc,GAAG,QAAQ,EAAE,CAAC;QAC9B,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,+BAA+B,OAAO,mBAAmB,cAAc,kBAAkB,QAAQ,kEAAkE;SAC5K,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAqB;IACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,sBAAsB,CAAC;IAC1D,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,uBAAuB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAEpE,OAAO,sBAAsB,CAAC;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY;QACZ,cAAc;QACd,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,eAAe;IACb,sBAAsB;IACtB,UAAU;IACV,iBAAiB;IACjB,gBAAgB;CACjB,CAAC"}

package/lib/agent-guard-tdd.d.ts

@@ -0,0 +1,34 @@
+export interface SessionTddState {
+    lastFailingTestRecorded: boolean;
+    lastTestRunTime?: number;
+    lastTestPath?: string;
+}
+export interface TddCheckResult {
+    blocked: boolean;
+    reason?: string;
+    isProductionFile: boolean;
+}
+export declare function isTestFile(filePath: string): boolean;
+export declare function isNonCodeFile(filePath: string): boolean;
+export declare function isProductionFile(filePath: string): boolean;
+export declare function readTddState(stateFile: string): SessionTddState;
+export declare function writeTddState(stateFile: string, state: SessionTddState): void;
+/**
+ * Checks whether an edit to a file is allowed under RED-before-GREEN TDD rules.
+ *
+ * @param filePath - Path to file being edited.
+ * @param state - Current session TDD state.
+ * @param enforceTestFirst - Whether test-first enforcement is strictly enabled.
+ * @returns Decision result indicating whether edit is blocked.
+ */
+export declare function inspectTddRequirement(filePath: string, state: SessionTddState, enforceTestFirst?: boolean): TddCheckResult;
+declare const _default: {
+    isTestFile: typeof isTestFile;
+    isNonCodeFile: typeof isNonCodeFile;
+    isProductionFile: typeof isProductionFile;
+    readTddState: typeof readTddState;
+    writeTddState: typeof writeTddState;
+    inspectTddRequirement: typeof inspectTddRequirement;
+};
+export default _default;
+//# sourceMappingURL=agent-guard-tdd.d.ts.map

package/lib/agent-guard-tdd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-guard-tdd.d.ts","sourceRoot":"","sources":["../src/agent-guard-tdd.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,eAAe;IAC9B,uBAAuB,EAAE,OAAO,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAMpD;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIvD;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAK1D;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,CAU/D;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,IAAI,CAQ7E;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,eAAe,EACtB,gBAAgB,GAAE,OAAe,GAChC,cAAc,CAgBhB;;;;;;;;;AAED,wBAOE"}

package/lib/agent-guard-tdd.js

@@ -0,0 +1,77 @@
+import fs from 'node:fs';
+import path from 'node:path';
+export function isTestFile(filePath) {
+    const norm = filePath.replace(/\\/g, '/').toLowerCase();
+    if (/(^|\/)(tests?|__tests__)(\/|$)/i.test(norm)) {
+        return true;
+    }
+    return /\.(test|spec)\.[a-z0-9]+$/i.test(norm);
+}
+export function isNonCodeFile(filePath) {
+    const ext = path.extname(filePath).toLowerCase();
+    const nonCodeExts = new Set(['.md', '.json', '.yml', '.yaml', '.txt', '.toml', '.lock', '.svg', '.png']);
+    return nonCodeExts.has(ext);
+}
+export function isProductionFile(filePath) {
+    if (isNonCodeFile(filePath))
+        return false;
+    if (isTestFile(filePath))
+        return false;
+    const norm = filePath.replace(/\\/g, '/').toLowerCase();
+    return norm.includes('src/') || norm.includes('lib/') || norm.includes('app/');
+}
+export function readTddState(stateFile) {
+    if (!fs.existsSync(stateFile)) {
+        return { lastFailingTestRecorded: false };
+    }
+    try {
+        const raw = fs.readFileSync(stateFile, 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return { lastFailingTestRecorded: false };
+    }
+}
+export function writeTddState(stateFile, state) {
+    try {
+        const dir = path.dirname(stateFile);
+        if (!fs.existsSync(dir))
+            fs.mkdirSync(dir, { recursive: true });
+        fs.writeFileSync(stateFile, JSON.stringify(state, null, 2), 'utf-8');
+    }
+    catch {
+        // Fail-safe write: do not crash agent if state cannot be persisted
+    }
+}
+/**
+ * Checks whether an edit to a file is allowed under RED-before-GREEN TDD rules.
+ *
+ * @param filePath - Path to file being edited.
+ * @param state - Current session TDD state.
+ * @param enforceTestFirst - Whether test-first enforcement is strictly enabled.
+ * @returns Decision result indicating whether edit is blocked.
+ */
+export function inspectTddRequirement(filePath, state, enforceTestFirst = false) {
+    const prod = isProductionFile(filePath);
+    if (!enforceTestFirst || !prod) {
+        return { blocked: false, isProductionFile: prod };
+    }
+    if (!state.lastFailingTestRecorded) {
+        const baseName = path.basename(filePath);
+        return {
+            blocked: true,
+            isProductionFile: true,
+            reason: `Test-First (RED-before-GREEN) requirement: Production file '${baseName}' cannot be edited before a failing test (RED) is recorded. Author a failing unit or acceptance test first, verify failure output, then edit production code.`
+        };
+    }
+    return { blocked: false, isProductionFile: true };
+}
+export default {
+    isTestFile,
+    isNonCodeFile,
+    isProductionFile,
+    readTddState,
+    writeTddState,
+    inspectTddRequirement
+};
+//# sourceMappingURL=agent-guard-tdd.js.map

package/lib/agent-guard-tdd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-guard-tdd.js","sourceRoot":"","sources":["../src/agent-guard-tdd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAc7B,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzG,OAAO,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,aAAa,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,KAAsB;IACrE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,KAAsB,EACtB,mBAA4B,KAAK;IAEjC,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,+DAA+D,QAAQ,+JAA+J;SAC/O,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,eAAe;IACb,UAAU;IACV,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,qBAAqB;CACtB,CAAC"}

package/lib/agent-guard.d.ts

@@ -0,0 +1,38 @@
+import { inspectCommand } from './agent-guard-command.js';
+import type { CommandViolation } from './agent-guard-command.js';
+import { inspectFileWrite } from './agent-guard-file.js';
+import type { FileCheckResult } from './agent-guard-file.js';
+import { inspectTddRequirement, readTddState, writeTddState } from './agent-guard-tdd.js';
+import type { SessionTddState } from './agent-guard-tdd.js';
+export interface GuardDecision {
+    allowed: boolean;
+    reason?: string;
+    source?: 'command' | 'file' | 'tdd';
+}
+export interface ToolEnvelope {
+    tool_name?: string;
+    tool_input?: Record<string, unknown>;
+}
+export interface GuardOptions {
+    workspaceRoot?: string;
+    enforceTestFirst?: boolean;
+    maxFileLines?: number;
+}
+/**
+ * Inspects a tool-use request before execution (PreToolUse hook).
+ *
+ * @param rawInput - Raw command string, JSON envelope, or argv slice.
+ * @param options - Guard configuration options.
+ * @returns Guard decision indicating whether tool execution is permitted.
+ */
+export declare function inspectPreTool(rawInput: string, options?: GuardOptions): GuardDecision;
+export { inspectCommand, inspectFileWrite, inspectTddRequirement, readTddState, writeTddState };
+export type { CommandViolation, FileCheckResult, SessionTddState };
+declare const _default: {
+    inspectPreTool: typeof inspectPreTool;
+    inspectCommand: typeof inspectCommand;
+    inspectFileWrite: typeof inspectFileWrite;
+    inspectTddRequirement: typeof inspectTddRequirement;
+};
+export default _default;
+//# sourceMappingURL=agent-guard.d.ts.map

package/lib/agent-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-guard.d.ts","sourceRoot":"","sources":["../src/agent-guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,KAAK,CAAC;CACrC;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAkED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,aAAa,CAY1F;AAED,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACd,CAAC;AACF,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC;;;;;;;AACnE,wBAA2F"}

package/lib/agent-guard.js

@@ -0,0 +1,80 @@
+import path from 'node:path';
+import { inspectCommand } from './agent-guard-command.js';
+import { inspectFileWrite } from './agent-guard-file.js';
+import { inspectTddRequirement, readTddState, writeTddState } from './agent-guard-tdd.js';
+function parseEnvelope(raw) {
+    try {
+        const trimmed = raw.trim();
+        if (!trimmed.startsWith('{'))
+            return null;
+        return JSON.parse(trimmed);
+    }
+    catch {
+        return null;
+    }
+}
+function extractKey(input, keys) {
+    for (const k of keys) {
+        if (typeof input[k] === 'string')
+            return input[k];
+    }
+    return undefined;
+}
+function extractFilePath(input) {
+    return extractKey(input, ['TargetFile', 'file_path', 'path', 'filePath']);
+}
+function extractCommand(input) {
+    return extractKey(input, ['CommandLine', 'command', 'cmd']);
+}
+function inspectPreCommand(cmd) {
+    const violation = inspectCommand(cmd);
+    if (violation.blocked) {
+        return { allowed: false, reason: violation.reason, source: 'command' };
+    }
+    return { allowed: true };
+}
+function inspectPreFile(filePath, input, options) {
+    const incoming = extractKey(input, ['CodeContent', 'content']);
+    const replacement = extractKey(input, ['ReplacementContent', 'replacement']);
+    const target = extractKey(input, ['TargetContent', 'target']);
+    const fileDecision = inspectFileWrite({
+        filePath,
+        incomingContent: incoming,
+        replacementContent: replacement,
+        targetContent: target,
+        maxLines: options.maxFileLines
+    });
+    if (fileDecision.blocked) {
+        return { allowed: false, reason: fileDecision.reason, source: 'file' };
+    }
+    const root = options.workspaceRoot ?? process.cwd();
+    const statePath = path.join(root, '.agents', '.session-state.json');
+    const state = readTddState(statePath);
+    const tddDecision = inspectTddRequirement(filePath, state, options.enforceTestFirst);
+    if (tddDecision.blocked) {
+        return { allowed: false, reason: tddDecision.reason, source: 'tdd' };
+    }
+    return { allowed: true };
+}
+/**
+ * Inspects a tool-use request before execution (PreToolUse hook).
+ *
+ * @param rawInput - Raw command string, JSON envelope, or argv slice.
+ * @param options - Guard configuration options.
+ * @returns Guard decision indicating whether tool execution is permitted.
+ */
+export function inspectPreTool(rawInput, options = {}) {
+    const env = parseEnvelope(rawInput);
+    if (env && env.tool_input) {
+        const cmd = extractCommand(env.tool_input);
+        if (cmd)
+            return inspectPreCommand(cmd);
+        const targetFile = extractFilePath(env.tool_input);
+        if (targetFile)
+            return inspectPreFile(targetFile, env.tool_input, options);
+    }
+    return inspectPreCommand(rawInput);
+}
+export { inspectCommand, inspectFileWrite, inspectTddRequirement, readTddState, writeTddState };
+export default { inspectPreTool, inspectCommand, inspectFileWrite, inspectTddRequirement };
+//# sourceMappingURL=agent-guard.js.map

package/lib/agent-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-guard.js","sourceRoot":"","sources":["../src/agent-guard.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACd,MAAM,sBAAsB,CAAC;AAoB9B,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAA8B,EAAE,IAAuB;IACzE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,KAA8B;IACrD,OAAO,UAAU,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B;IACpD,OAAO,UAAU,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,cAAc,CACrB,QAAgB,EAChB,KAA8B,EAC9B,OAAqB;IAErB,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE9D,MAAM,YAAY,GAAG,gBAAgB,CAAC;QACpC,QAAQ;QACR,eAAe,EAAE,QAAQ;QACzB,kBAAkB,EAAE,WAAW;QAC/B,aAAa,EAAE,MAAM;QACrB,QAAQ,EAAE,OAAO,CAAC,YAAY;KAC/B,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrF,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACvE,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,UAAwB,EAAE;IACzE,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEpC,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,GAAG;YAAE,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAEvC,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,UAAU;YAAE,OAAO,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACd,CAAC;AAEF,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,CAAC"}

package/lib/boundaries.d.ts

@@ -0,0 +1,41 @@
+export interface BoundaryRule {
+    fromLayer: string;
+    disallowImportsFrom: readonly string[];
+}
+export interface BoundaryViolation {
+    file: string;
+    importedFile: string;
+    fromLayer: string;
+    toLayer: string;
+}
+export interface BoundaryReport {
+    moduleCount: number;
+    cycles: string[][];
+    violations: BoundaryViolation[];
+    ok: boolean;
+}
+export declare const DEFAULT_BOUNDARY_RULES: readonly BoundaryRule[];
+export declare function findSourceFiles(dir: string): string[];
+export declare function extractLocalImports(filePath: string): string[];
+export declare function buildDependencyGraph(files: readonly string[]): Map<string, string[]>;
+export declare function detectDependencyCycles(graph: Map<string, string[]>): string[][];
+export declare function detectBoundaryViolations(graph: Map<string, string[]>, rules?: readonly BoundaryRule[]): BoundaryViolation[];
+/**
+ * Inspects a source tree for architectural boundary violations and circular dependency cycles.
+ *
+ * @param sourceDir - Directory containing source code (e.g. src/).
+ * @param rules - Architectural boundary rules.
+ * @returns Report summarizing cycle and boundary findings.
+ */
+export declare function inspectBoundaries(sourceDir: string, rules?: readonly BoundaryRule[]): BoundaryReport;
+declare const _default: {
+    DEFAULT_BOUNDARY_RULES: readonly BoundaryRule[];
+    findSourceFiles: typeof findSourceFiles;
+    extractLocalImports: typeof extractLocalImports;
+    buildDependencyGraph: typeof buildDependencyGraph;
+    detectDependencyCycles: typeof detectDependencyCycles;
+    detectBoundaryViolations: typeof detectBoundaryViolations;
+    inspectBoundaries: typeof inspectBoundaries;
+};
+export default _default;
+//# sourceMappingURL=boundaries.d.ts.map

package/lib/boundaries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundaries.d.ts","sourceRoot":"","sources":["../src/boundaries.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACnB,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,EAAE,EAAE,OAAO,CAAC;CACb;AAED,eAAO,MAAM,sBAAsB,EAAE,SAAS,YAAY,EASzD,CAAC;AAYF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAgBrD;AAcD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAiB9D;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAMpF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,EAAE,CA+B/E;AAMD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAC5B,KAAK,GAAE,SAAS,YAAY,EAA2B,GACtD,iBAAiB,EAAE,CAuBrB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,SAAS,YAAY,EAA2B,GACtD,cAAc,CAYhB;;;;;;;;;;AAED,wBAQE"}