claudecode-omc 4.9.4 → 5.0.0

package/dist/lib/worktree-paths.js

@@ -1,643 +0,0 @@
-/**
- * Worktree Path Enforcement
- *
- * Provides strict path validation and resolution for .omc/ paths,
- * ensuring all operations stay within the worktree boundary.
- *
- * Supports OMC_STATE_DIR environment variable for centralized state storage.
- * When set, state is stored at $OMC_STATE_DIR/{project-identifier}/ instead
- * of {worktree}/.omc/. This preserves state across worktree deletions.
- */
-import { createHash } from 'crypto';
-import { execSync } from 'child_process';
-import { existsSync, mkdirSync, realpathSync, readdirSync } from 'fs';
-import { homedir } from 'os';
-import { resolve, normalize, relative, sep, join, isAbsolute, basename, dirname } from 'path';
-/** Standard .omc subdirectories */
-export const OmcPaths = {
-    ROOT: '.omc',
-    STATE: '.omc/state',
-    SESSIONS: '.omc/state/sessions',
-    PLANS: '.omc/plans',
-    RESEARCH: '.omc/research',
-    NOTEPAD: '.omc/notepad.md',
-    PROJECT_MEMORY: '.omc/project-memory.json',
-    DRAFTS: '.omc/drafts',
-    NOTEPADS: '.omc/notepads',
-    LOGS: '.omc/logs',
-    SCIENTIST: '.omc/scientist',
-    AUTOPILOT: '.omc/autopilot',
-    SKILLS: '.omc/skills',
-    SHARED_MEMORY: '.omc/state/shared-memory',
-    DEEPINIT_MANIFEST: '.omc/deepinit-manifest.json',
-};
-/**
- * LRU cache for worktree root lookups to avoid repeated git subprocess calls.
- * Bounded to MAX_WORKTREE_CACHE_SIZE entries to prevent memory growth when
- * alternating between many different cwds (cache thrashing).
- */
-const MAX_WORKTREE_CACHE_SIZE = 8;
-const worktreeCacheMap = new Map();
-/**
- * Get the git worktree root for the current or specified directory.
- * Returns null if not in a git repository.
- */
-export function getWorktreeRoot(cwd) {
-    const effectiveCwd = cwd || process.cwd();
-    // Return cached value if present (LRU: move to end on access)
-    if (worktreeCacheMap.has(effectiveCwd)) {
-        const root = worktreeCacheMap.get(effectiveCwd);
-        // Refresh insertion order for LRU eviction
-        worktreeCacheMap.delete(effectiveCwd);
-        worktreeCacheMap.set(effectiveCwd, root);
-        return root || null;
-    }
-    try {
-        const root = execSync('git rev-parse --show-toplevel', {
-            cwd: effectiveCwd,
-            encoding: 'utf-8',
-            stdio: ['pipe', 'pipe', 'pipe'],
-            timeout: 5000,
-        }).trim();
-        // Evict oldest entry when at capacity
-        if (worktreeCacheMap.size >= MAX_WORKTREE_CACHE_SIZE) {
-            const oldest = worktreeCacheMap.keys().next().value;
-            if (oldest !== undefined) {
-                worktreeCacheMap.delete(oldest);
-            }
-        }
-        worktreeCacheMap.set(effectiveCwd, root);
-        return root;
-    }
-    catch {
-        // Not in a git repository - do NOT cache fallback
-        // so that if directory becomes a git repo later, we re-detect
-        return null;
-    }
-}
-/**
- * Validate that a path is safe (no traversal attacks).
- *
- * @throws Error if path contains traversal sequences
- */
-export function validatePath(inputPath) {
-    // Reject explicit path traversal
-    if (inputPath.includes('..')) {
-        throw new Error(`Invalid path: path traversal not allowed (${inputPath})`);
-    }
-    // Reject absolute paths - use isAbsolute() for cross-platform coverage
-    // Covers: /unix, ~/home, C:\windows, D:/windows, \\UNC
-    if (inputPath.startsWith('~') || isAbsolute(inputPath)) {
-        throw new Error(`Invalid path: absolute paths not allowed (${inputPath})`);
-    }
-}
-// ============================================================================
-// OMC_STATE_DIR SUPPORT (Issue #1014)
-// ============================================================================
-/** Track which dual-dir warnings have been logged to avoid repeated warnings */
-const dualDirWarnings = new Set();
-/**
- * Clear the dual-directory warning cache (useful for testing).
- * @internal
- */
-export function clearDualDirWarnings() {
-    dualDirWarnings.clear();
-}
-/**
- * Get a stable project identifier for centralized state storage.
- *
- * Uses a hybrid strategy:
- * 1. Git remote URL hash (stable across worktrees and clones of the same repo)
- * 2. Fallback to worktree root path hash (for local-only repos without remotes)
- *
- * Format: `{dirName}-{hash}` where hash is first 16 chars of SHA-256.
- * Example: `my-project-a1b2c3d4e5f6g7h8`
- *
- * @param worktreeRoot - Optional worktree root path
- * @returns A stable project identifier string
- */
-export function getProjectIdentifier(worktreeRoot) {
-    const root = worktreeRoot || getWorktreeRoot() || process.cwd();
-    let source;
-    try {
-        const remoteUrl = execSync('git remote get-url origin', {
-            cwd: root,
-            encoding: 'utf-8',
-            stdio: ['pipe', 'pipe', 'pipe'],
-        }).trim();
-        source = remoteUrl || root;
-    }
-    catch {
-        // No git remote (local-only repo or not a git repo) — use path
-        source = root;
-    }
-    const hash = createHash('sha256').update(source).digest('hex').slice(0, 16);
-    const dirName = basename(root).replace(/[^a-zA-Z0-9_-]/g, '_');
-    return `${dirName}-${hash}`;
-}
-/**
- * Get the .omc root directory path.
- *
- * When OMC_STATE_DIR is set, returns $OMC_STATE_DIR/{project-identifier}/
- * instead of {worktree}/.omc/. This allows centralized state storage that
- * survives worktree deletion.
- *
- * @param worktreeRoot - Optional worktree root
- * @returns Absolute path to the omc root directory
- */
-export function getOmcRoot(worktreeRoot) {
-    const customDir = process.env.OMC_STATE_DIR;
-    if (customDir) {
-        const root = worktreeRoot || getWorktreeRoot() || process.cwd();
-        const projectId = getProjectIdentifier(root);
-        const centralizedPath = join(customDir, projectId);
-        // Log notice if both legacy .omc/ and new centralized dir exist
-        const legacyPath = join(root, OmcPaths.ROOT);
-        const warningKey = `${legacyPath}:${centralizedPath}`;
-        if (!dualDirWarnings.has(warningKey) && existsSync(legacyPath) && existsSync(centralizedPath)) {
-            dualDirWarnings.add(warningKey);
-            console.warn(`[omc] Both legacy state dir (${legacyPath}) and centralized state dir (${centralizedPath}) exist. ` +
-                `Using centralized dir. Consider migrating data from the legacy dir and removing it.`);
-        }
-        return centralizedPath;
-    }
-    const root = worktreeRoot || getWorktreeRoot() || process.cwd();
-    return join(root, OmcPaths.ROOT);
-}
-/**
- * Resolve a relative path under .omc/ to an absolute path.
- * Validates the path is within the omc boundary.
- *
- * @param relativePath - Path relative to .omc/ (e.g., "state/ralph.json")
- * @param worktreeRoot - Optional worktree root (auto-detected if not provided)
- * @returns Absolute path
- * @throws Error if path would escape omc boundary
- */
-export function resolveOmcPath(relativePath, worktreeRoot) {
-    validatePath(relativePath);
-    const omcDir = getOmcRoot(worktreeRoot);
-    const fullPath = normalize(resolve(omcDir, relativePath));
-    // Verify resolved path is still under omc directory
-    const relativeToOmc = relative(omcDir, fullPath);
-    if (relativeToOmc.startsWith('..') || relativeToOmc.startsWith(sep + '..')) {
-        throw new Error(`Path escapes omc boundary: ${relativePath}`);
-    }
-    return fullPath;
-}
-/**
- * Resolve a state file path.
- *
- * State files follow the naming convention: {mode}-state.json
- * Examples: ralph-state.json, ultrawork-state.json, autopilot-state.json
- *
- * @param stateName - State name (e.g., "ralph", "ultrawork", or "ralph-state")
- * @param worktreeRoot - Optional worktree root
- * @returns Absolute path to state file
- */
-export function resolveStatePath(stateName, worktreeRoot) {
-    // Normalize: ensure -state suffix is present, then add .json
-    const normalizedName = stateName.endsWith('-state') ? stateName : `${stateName}-state`;
-    return resolveOmcPath(`state/${normalizedName}.json`, worktreeRoot);
-}
-/**
- * Ensure a directory exists under .omc/.
- * Creates parent directories as needed.
- *
- * @param relativePath - Path relative to .omc/
- * @param worktreeRoot - Optional worktree root
- * @returns Absolute path to the created directory
- */
-export function ensureOmcDir(relativePath, worktreeRoot) {
-    const fullPath = resolveOmcPath(relativePath, worktreeRoot);
-    if (!existsSync(fullPath)) {
-        mkdirSync(fullPath, { recursive: true });
-    }
-    return fullPath;
-}
-/**
- * Get the absolute path to the notepad file.
- * NOTE: Named differently from hooks/notepad/getNotepadPath which takes `directory` (required).
- * This version auto-detects worktree root.
- */
-export function getWorktreeNotepadPath(worktreeRoot) {
-    return join(getOmcRoot(worktreeRoot), 'notepad.md');
-}
-/**
- * Get the absolute path to the project memory file.
- */
-export function getWorktreeProjectMemoryPath(worktreeRoot) {
-    return join(getOmcRoot(worktreeRoot), 'project-memory.json');
-}
-/**
- * Resolve a plan file path.
- * @param planName - Plan name (without .md extension)
- */
-export function resolvePlanPath(planName, worktreeRoot) {
-    validatePath(planName);
-    return join(getOmcRoot(worktreeRoot), 'plans', `${planName}.md`);
-}
-/**
- * Resolve a research directory path.
- * @param name - Research folder name
- */
-export function resolveResearchPath(name, worktreeRoot) {
-    validatePath(name);
-    return join(getOmcRoot(worktreeRoot), 'research', name);
-}
-/**
- * Resolve the logs directory path.
- */
-export function resolveLogsPath(worktreeRoot) {
-    return join(getOmcRoot(worktreeRoot), 'logs');
-}
-/**
- * Resolve a wisdom/plan-scoped notepad directory path.
- * @param planName - Plan name for the scoped notepad
- */
-export function resolveWisdomPath(planName, worktreeRoot) {
-    validatePath(planName);
-    return join(getOmcRoot(worktreeRoot), 'notepads', planName);
-}
-/**
- * Check if an absolute path is under the .omc directory.
- * @param absolutePath - Absolute path to check
- */
-export function isPathUnderOmc(absolutePath, worktreeRoot) {
-    const omcRoot = getOmcRoot(worktreeRoot);
-    const normalizedPath = normalize(absolutePath);
-    const normalizedOmc = normalize(omcRoot);
-    return normalizedPath.startsWith(normalizedOmc + sep) || normalizedPath === normalizedOmc;
-}
-/**
- * Ensure all standard .omc subdirectories exist.
- */
-export function ensureAllOmcDirs(worktreeRoot) {
-    const omcRoot = getOmcRoot(worktreeRoot);
-    const subdirs = ['', 'state', 'plans', 'research', 'logs', 'notepads', 'drafts'];
-    for (const subdir of subdirs) {
-        const fullPath = subdir ? join(omcRoot, subdir) : omcRoot;
-        if (!existsSync(fullPath)) {
-            mkdirSync(fullPath, { recursive: true });
-        }
-    }
-}
-/**
- * Clear the worktree cache (useful for testing).
- */
-export function clearWorktreeCache() {
-    worktreeCacheMap.clear();
-}
-// ============================================================================
-// SESSION-SCOPED STATE PATHS
-// ============================================================================
-/** Regex for valid session IDs: alphanumeric, hyphens, underscores, max 256 chars */
-const SESSION_ID_REGEX = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,255}$/;
-// ============================================================================
-// AUTOMATIC PROCESS SESSION ID (Issue #456)
-// ============================================================================
-/**
- * Auto-generated session ID for the current process.
- * Uses PID + process start timestamp to be unique even if PIDs are reused.
- * Generated once at module load time and stable for the process lifetime.
- */
-let processSessionId = null;
-/**
- * Get or generate a unique session ID for the current process.
- *
- * Format: `pid-{PID}-{startTimestamp}`
- * Example: `pid-12345-1707350400000`
- *
- * This prevents concurrent Claude Code instances in the same repo from
- * sharing state files (Issue #456). The ID is stable for the process
- * lifetime and unique across concurrent processes.
- *
- * @returns A unique session ID for the current process
- */
-export function getProcessSessionId() {
-    if (!processSessionId) {
-        // process.pid is unique among concurrent processes.
-        // Adding a timestamp handles PID reuse after process exit.
-        const pid = process.pid;
-        const startTime = Date.now();
-        processSessionId = `pid-${pid}-${startTime}`;
-    }
-    return processSessionId;
-}
-/**
- * Reset the process session ID (for testing only).
- * @internal
- */
-export function resetProcessSessionId() {
-    processSessionId = null;
-}
-/**
- * Validate a session ID to prevent path traversal attacks.
- *
- * @param sessionId - The session ID to validate
- * @throws Error if session ID is invalid
- */
-export function validateSessionId(sessionId) {
-    if (!sessionId) {
-        throw new Error('Session ID cannot be empty');
-    }
-    if (sessionId.includes('..') || sessionId.includes('/') || sessionId.includes('\\')) {
-        throw new Error(`Invalid session ID: path traversal not allowed (${sessionId})`);
-    }
-    if (!SESSION_ID_REGEX.test(sessionId)) {
-        throw new Error(`Invalid session ID: must be alphanumeric with hyphens/underscores, max 256 chars (${sessionId})`);
-    }
-}
-/**
- * Validate a transcript path to prevent arbitrary file reads.
- * Transcript files should only be read from known Claude directories.
- *
- * @param transcriptPath - The transcript path to validate
- * @returns true if path is valid, false otherwise
- */
-export function isValidTranscriptPath(transcriptPath) {
-    if (!transcriptPath || typeof transcriptPath !== 'string') {
-        return false;
-    }
-    // Reject path traversal
-    if (transcriptPath.includes('..')) {
-        return false;
-    }
-    // Must be absolute
-    if (!isAbsolute(transcriptPath) && !transcriptPath.startsWith('~')) {
-        return false;
-    }
-    // Expand home directory if present
-    let expandedPath = transcriptPath;
-    if (transcriptPath.startsWith('~')) {
-        expandedPath = join(homedir(), transcriptPath.slice(1));
-    }
-    // Normalize and check it's within allowed directories
-    const normalized = normalize(expandedPath);
-    const home = homedir();
-    // Allowed: ~/.claude/..., ~/.omc/..., /tmp/...
-    const allowedPrefixes = [
-        join(home, '.claude'),
-        join(home, '.omc'),
-        '/tmp',
-        '/var/folders', // macOS temp
-    ];
-    return allowedPrefixes.some(prefix => normalized.startsWith(prefix));
-}
-/**
- * Resolve a session-scoped state file path.
- * Path: {omcRoot}/state/sessions/{sessionId}/{mode}-state.json
- *
- * @param stateName - State name (e.g., "ralph", "ultrawork")
- * @param sessionId - Session identifier
- * @param worktreeRoot - Optional worktree root
- * @returns Absolute path to session-scoped state file
- */
-export function resolveSessionStatePath(stateName, sessionId, worktreeRoot) {
-    validateSessionId(sessionId);
-    const normalizedName = stateName.endsWith('-state') ? stateName : `${stateName}-state`;
-    return resolveOmcPath(`state/sessions/${sessionId}/${normalizedName}.json`, worktreeRoot);
-}
-/**
- * Get the session state directory path.
- * Path: {omcRoot}/state/sessions/{sessionId}/
- *
- * @param sessionId - Session identifier
- * @param worktreeRoot - Optional worktree root
- * @returns Absolute path to session state directory
- */
-export function getSessionStateDir(sessionId, worktreeRoot) {
-    validateSessionId(sessionId);
-    return join(getOmcRoot(worktreeRoot), 'state', 'sessions', sessionId);
-}
-/**
- * List all session IDs that have state directories.
- *
- * @param worktreeRoot - Optional worktree root
- * @returns Array of session IDs
- */
-export function listSessionIds(worktreeRoot) {
-    const sessionsDir = join(getOmcRoot(worktreeRoot), 'state', 'sessions');
-    if (!existsSync(sessionsDir)) {
-        return [];
-    }
-    try {
-        const entries = readdirSync(sessionsDir, { withFileTypes: true });
-        return entries
-            .filter(entry => entry.isDirectory() && SESSION_ID_REGEX.test(entry.name))
-            .map(entry => entry.name);
-    }
-    catch {
-        return [];
-    }
-}
-/**
- * Ensure the session state directory exists.
- *
- * @param sessionId - Session identifier
- * @param worktreeRoot - Optional worktree root
- * @returns Absolute path to the session state directory
- */
-export function ensureSessionStateDir(sessionId, worktreeRoot) {
-    const sessionDir = getSessionStateDir(sessionId, worktreeRoot);
-    if (!existsSync(sessionDir)) {
-        mkdirSync(sessionDir, { recursive: true });
-    }
-    return sessionDir;
-}
-/**
- * Resolve a directory path to its git worktree root.
- *
- * Walks up from `directory` using `git rev-parse --show-toplevel`.
- * Falls back to `getWorktreeRoot(process.cwd())`, then `process.cwd()`.
- *
- * This ensures .omc/ state is always written at the worktree root,
- * even when called from a subdirectory (fixes #576).
- *
- * @param directory - Any directory inside a git worktree (optional)
- * @returns The worktree root (never a subdirectory)
- */
-export function resolveToWorktreeRoot(directory) {
-    if (directory) {
-        const resolved = resolve(directory);
-        const root = getWorktreeRoot(resolved);
-        if (root)
-            return root;
-        console.error('[worktree] non-git directory provided, falling back to process root', {
-            directory: resolved,
-        });
-    }
-    // Fallback: derive from process CWD (the MCP server / CLI entry point)
-    return getWorktreeRoot(process.cwd()) || process.cwd();
-}
-// ============================================================================
-// TRANSCRIPT PATH RESOLUTION (Issue #1094)
-// ============================================================================
-/**
- * Resolve a Claude Code transcript path that may be mismatched in worktree sessions.
- *
- * When Claude Code runs inside a worktree (.claude/worktrees/X), it encodes the
- * worktree CWD into the project directory path, creating a transcript_path like:
- *   ~/.claude/projects/-path-to-project--claude-worktrees-X/<session>.jsonl
- *
- * But the actual transcript lives at the original project's path:
- *   ~/.claude/projects/-path-to-project/<session>.jsonl
- *
- * Claude Code encodes `/` as `-` (dots are preserved). The `.claude/worktrees/`
- * segment becomes `-claude-worktrees-`, preceded by a `-` from the path
- * separator, yielding the distinctive `--claude-worktrees-` pattern in the
- * encoded directory name.
- *
- * This function detects the mismatch and resolves to the correct path.
- *
- * @param transcriptPath - The transcript_path from Claude Code hook input
- * @param cwd - Optional CWD for fallback detection
- * @returns The resolved transcript path (original if already correct or no resolution found)
- */
-export function resolveTranscriptPath(transcriptPath, cwd) {
-    if (!transcriptPath)
-        return undefined;
-    // Fast path: if the file already exists, no resolution needed
-    if (existsSync(transcriptPath))
-        return transcriptPath;
-    // Strategy 1: Detect worktree-encoded segment in the transcript path itself.
-    // The pattern `--claude-worktrees-` appears when Claude Code encodes a CWD
-    // containing `/.claude/worktrees/` (separator `/` → `-`, dot `.` → `-`).
-    // Strip everything from this pattern to the next `/` to recover the original
-    // project directory encoding.
-    const worktreeSegmentPattern = /--claude-worktrees-[^/\\]+/;
-    if (worktreeSegmentPattern.test(transcriptPath)) {
-        const resolved = transcriptPath.replace(worktreeSegmentPattern, '');
-        if (existsSync(resolved))
-            return resolved;
-    }
-    // Strategy 2: Use CWD to detect worktree and reconstruct the path.
-    // When the CWD contains `/.claude/worktrees/`, we can derive the main
-    // project root and look for the transcript there.
-    const effectiveCwd = cwd || process.cwd();
-    const worktreeMarker = '.claude/worktrees/';
-    const markerIdx = effectiveCwd.indexOf(worktreeMarker);
-    if (markerIdx !== -1) {
-        // Adjust index to exclude the preceding path separator
-        const mainProjectRoot = effectiveCwd.substring(0, markerIdx > 0 && effectiveCwd[markerIdx - 1] === sep ? markerIdx - 1 : markerIdx);
-        // Extract session filename from the original path
-        const lastSep = transcriptPath.lastIndexOf('/');
-        const sessionFile = lastSep !== -1 ? transcriptPath.substring(lastSep + 1) : '';
-        if (sessionFile) {
-            // The projects directory is under the Claude config dir
-            const configDir = process.env.CLAUDE_CONFIG_DIR || join(homedir(), '.claude');
-            const projectsDir = join(configDir, 'projects');
-            if (existsSync(projectsDir)) {
-                // Encode the main project root the same way Claude Code does:
-                // replace path separators with `-`, replace dots with `-`.
-                const encodedMain = mainProjectRoot.replace(/[/\\]/g, '-');
-                const resolvedPath = join(projectsDir, encodedMain, sessionFile);
-                if (existsSync(resolvedPath))
-                    return resolvedPath;
-            }
-        }
-    }
-    // Strategy 3: Detect native git worktree via git-common-dir.
-    // When CWD is a linked worktree (created by `git worktree add`), the
-    // transcript path encodes the worktree CWD, but the file lives under
-    // the main repo's encoded path. Use `git rev-parse --git-common-dir`
-    // to find the main repo root and re-encode.
-    try {
-        const gitCommonDir = execSync('git rev-parse --git-common-dir', {
-            cwd: effectiveCwd,
-            encoding: 'utf-8',
-            stdio: ['pipe', 'pipe', 'pipe'],
-        }).trim();
-        const absoluteCommonDir = resolve(effectiveCwd, gitCommonDir);
-        const mainRepoRoot = dirname(absoluteCommonDir);
-        const worktreeTop = execSync('git rev-parse --show-toplevel', {
-            cwd: effectiveCwd,
-            encoding: 'utf-8',
-            stdio: ['pipe', 'pipe', 'pipe'],
-        }).trim();
-        if (mainRepoRoot !== worktreeTop) {
-            const lastSep = transcriptPath.lastIndexOf('/');
-            const sessionFile = lastSep !== -1 ? transcriptPath.substring(lastSep + 1) : '';
-            if (sessionFile) {
-                const configDir = process.env.CLAUDE_CONFIG_DIR || join(homedir(), '.claude');
-                const projectsDir = join(configDir, 'projects');
-                if (existsSync(projectsDir)) {
-                    const encodedMain = mainRepoRoot.replace(/[/\\]/g, '-');
-                    const resolvedPath = join(projectsDir, encodedMain, sessionFile);
-                    if (existsSync(resolvedPath))
-                        return resolvedPath;
-                }
-            }
-        }
-    }
-    catch {
-        // Not in a git repo or git not available — skip
-    }
-    // No resolution found — return original path.
-    // Callers should handle non-existent paths gracefully.
-    return transcriptPath;
-}
-/**
- * Validate that a workingDirectory is within the trusted worktree root.
- * The trusted root is derived from process.cwd(), NOT from user input.
- *
- * Always returns a git worktree root — never a subdirectory.
- * This prevents .omc/state/ from being created in subdirectories (#576).
- *
- * @param workingDirectory - User-supplied working directory
- * @returns The validated worktree root
- * @throws Error if workingDirectory is outside trusted root
- */
-export function validateWorkingDirectory(workingDirectory) {
-    const trustedRoot = getWorktreeRoot(process.cwd()) || process.cwd();
-    if (!workingDirectory) {
-        return trustedRoot;
-    }
-    // Resolve to absolute
-    const resolved = resolve(workingDirectory);
-    let trustedRootReal;
-    try {
-        trustedRootReal = realpathSync(trustedRoot);
-    }
-    catch {
-        trustedRootReal = trustedRoot;
-    }
-    // Try to resolve the provided directory to a git worktree root.
-    const providedRoot = getWorktreeRoot(resolved);
-    if (providedRoot) {
-        // Git resolution succeeded — require exact worktree identity.
-        let providedRootReal;
-        try {
-            providedRootReal = realpathSync(providedRoot);
-        }
-        catch {
-            throw new Error(`workingDirectory '${workingDirectory}' does not exist or is not accessible.`);
-        }
-        if (providedRootReal !== trustedRootReal) {
-            console.error('[worktree] workingDirectory resolved to different git worktree root, using trusted root', {
-                workingDirectory: resolved,
-                providedRoot: providedRootReal,
-                trustedRoot: trustedRootReal,
-            });
-            return trustedRoot;
-        }
-        return providedRoot;
-    }
-    // Git resolution failed (lock contention, env issues, non-repo dir).
-    // Validate that the raw directory is under the trusted root before falling
-    // back — otherwise reject it as truly outside (#576).
-    let resolvedReal;
-    try {
-        resolvedReal = realpathSync(resolved);
-    }
-    catch {
-        throw new Error(`workingDirectory '${workingDirectory}' does not exist or is not accessible.`);
-    }
-    const rel = relative(trustedRootReal, resolvedReal);
-    if (rel.startsWith('..') || isAbsolute(rel)) {
-        throw new Error(`workingDirectory '${workingDirectory}' is outside the trusted worktree root '${trustedRoot}'.`);
-    }
-    // Directory is under trusted root but git failed — return trusted root,
-    // never the subdirectory, to prevent .omc/ creation in subdirs (#576).
-    return trustedRoot;
-}
-//# sourceMappingURL=worktree-paths.js.map

package/dist/lib/worktree-paths.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"worktree-paths.js","sourceRoot":"","sources":["../../src/lib/worktree-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE9F,mCAAmC;AACnC,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,YAAY;IACnB,QAAQ,EAAE,qBAAqB;IAC/B,KAAK,EAAE,YAAY;IACnB,QAAQ,EAAE,eAAe;IACzB,OAAO,EAAE,iBAAiB;IAC1B,cAAc,EAAE,0BAA0B;IAC1C,MAAM,EAAE,aAAa;IACrB,QAAQ,EAAE,eAAe;IACzB,IAAI,EAAE,WAAW;IACjB,SAAS,EAAE,gBAAgB;IAC3B,SAAS,EAAE,gBAAgB;IAC3B,MAAM,EAAE,aAAa;IACrB,aAAa,EAAE,0BAA0B;IACzC,iBAAiB,EAAE,6BAA6B;CACxC,CAAC;AAEX;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEnD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,YAAY,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1C,8DAA8D;IAC9D,IAAI,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC;QACjD,2CAA2C;QAC3C,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtC,gBAAgB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,+BAA+B,EAAE;YACrD,GAAG,EAAE,YAAY;YACjB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,sCAAsC;QACtC,IAAI,gBAAgB,CAAC,IAAI,IAAI,uBAAuB,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;QAClD,8DAA8D;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,iCAAiC;IACjC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,6CAA6C,SAAS,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED,uEAAuE;IACvE,uDAAuD;IACvD,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,6CAA6C,SAAS,GAAG,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,sCAAsC;AACtC,+EAA+E;AAE/E,gFAAgF;AAChF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;AAE1C;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,YAAqB;IACxD,MAAM,IAAI,GAAG,YAAY,IAAI,eAAe,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEhE,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,QAAQ,CAAC,2BAA2B,EAAE;YACtD,GAAG,EAAE,IAAI;YACT,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,GAAG,SAAS,IAAI,IAAI,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,YAAqB;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC5C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,YAAY,IAAI,eAAe,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAEnD,gEAAgE;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,GAAG,UAAU,IAAI,eAAe,EAAE,CAAC;QACtD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAC9F,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CACV,gCAAgC,UAAU,gCAAgC,eAAe,WAAW;gBACpG,qFAAqF,CACtF,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,IAAI,eAAe,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAChE,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,YAAoB,EAAE,YAAqB;IACxE,YAAY,CAAC,YAAY,CAAC,CAAC;IAE3B,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IAE1D,oDAAoD;IACpD,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,8BAA8B,YAAY,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,YAAqB;IACvE,6DAA6D;IAC7D,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,QAAQ,CAAC;IACvF,OAAO,cAAc,CAAC,SAAS,cAAc,OAAO,EAAE,YAAY,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,YAAqB;IACtE,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAE5D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,YAAqB;IAC1D,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAAC,YAAqB;IAChE,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,YAAqB;IACrE,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,GAAG,QAAQ,KAAK,CAAC,CAAC;AACnE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,YAAqB;IACrE,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,YAAqB;IACnD,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,YAAqB;IACvE,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,YAAoB,EAAE,YAAqB;IACxE,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,cAAc,CAAC,UAAU,CAAC,aAAa,GAAG,GAAG,CAAC,IAAI,cAAc,KAAK,aAAa,CAAC;AAC5F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAqB;IACpD,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;AAE7D,+EAA+E;AAC/E,4CAA4C;AAC5C,+EAA+E;AAE/E;;;;GAIG;AACH,IAAI,gBAAgB,GAAkB,IAAI,CAAC;AAE3C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,oDAAoD;QACpD,2DAA2D;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,gBAAgB,GAAG,OAAO,GAAG,IAAI,SAAS,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,gBAAgB,GAAG,IAAI,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,mDAAmD,SAAS,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,qFAAqF,SAAS,GAAG,CAAC,CAAC;IACrH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,cAAsB;IAC1D,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,wBAAwB;IACxB,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mBAAmB;IACnB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mCAAmC;IACnC,IAAI,YAAY,GAAG,cAAc,CAAC;IAClC,IAAI,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,sDAAsD;IACtD,MAAM,UAAU,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IAEvB,+CAA+C;IAC/C,MAAM,eAAe,GAAG;QACtB,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QAClB,MAAM;QACN,cAAc,EAAE,aAAa;KAC9B,CAAC;IAEF,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACvE,CAAC;AAGD;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,SAAiB,EAAE,YAAqB;IACjG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAE7B,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,QAAQ,CAAC;IACvF,OAAO,cAAc,CAAC,kBAAkB,SAAS,IAAI,cAAc,OAAO,EAAE,YAAY,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,YAAqB;IACzE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,YAAqB;IAClD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAExE,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,OAAO;aACX,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aACzE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB,EAAE,YAAqB;IAC5E,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAE/D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAkB;IACtD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAEtB,OAAO,CAAC,KAAK,CAAC,qEAAqE,EAAE;YACnF,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;IACL,CAAC;IACD,uEAAuE;IACvE,OAAO,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACzD,CAAC;AAED,+EAA+E;AAC/E,2CAA2C;AAC3C,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,qBAAqB,CAAC,cAAkC,EAAE,GAAY;IACpF,IAAI,CAAC,cAAc;QAAE,OAAO,SAAS,CAAC;IAEtC,8DAA8D;IAC9D,IAAI,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,cAAc,CAAC;IAEtD,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,6EAA6E;IAC7E,8BAA8B;IAC9B,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;IAC5D,IAAI,sBAAsB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;IAC5C,CAAC;IAED,mEAAmE;IACnE,sEAAsE;IACtE,kDAAkD;IAClD,MAAM,YAAY,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1C,MAAM,cAAc,GAAG,oBAAoB,CAAC;IAC5C,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACvD,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,uDAAuD;QACvD,MAAM,eAAe,GAAG,YAAY,CAAC,SAAS,CAC5C,CAAC,EACD,SAAS,GAAG,CAAC,IAAI,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CACjF,CAAC;QAEF,kDAAkD;QAClD,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,IAAI,WAAW,EAAE,CAAC;YAChB,wDAAwD;YACxD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAEhD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5B,8DAA8D;gBAC9D,2DAA2D;gBAC3D,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;gBACjE,IAAI,UAAU,CAAC,YAAY,CAAC;oBAAE,OAAO,YAAY,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,4CAA4C;IAC5C,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,QAAQ,CAAC,gCAAgC,EAAE;YAC9D,GAAG,EAAE,YAAY;YACjB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,MAAM,iBAAiB,GAAG,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAEhD,MAAM,WAAW,GAAG,QAAQ,CAAC,+BAA+B,EAAE;YAC5D,GAAG,EAAE,YAAY;YACjB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;gBAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBAChD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC5B,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;oBACxD,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;oBACjE,IAAI,UAAU,CAAC,YAAY,CAAC;wBAAE,OAAO,YAAY,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IAED,8CAA8C;IAC9C,uDAAuD;IACvD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,gBAAyB;IAChE,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEpE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,sBAAsB;IACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE3C,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,eAAe,GAAG,WAAW,CAAC;IAChC,CAAC;IAED,gEAAgE;IAChE,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE/C,IAAI,YAAY,EAAE,CAAC;QACjB,8DAA8D;QAC9D,IAAI,gBAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,gBAAgB,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,qBAAqB,gBAAgB,wCAAwC,CAAC,CAAC;QACjG,CAAC;QAED,IAAI,gBAAgB,KAAK,eAAe,EAAE,CAAC;YACzC,OAAO,CAAC,KAAK,CAAC,yFAAyF,EAAE;gBACvG,gBAAgB,EAAE,QAAQ;gBAC1B,YAAY,EAAE,gBAAgB;gBAC9B,WAAW,EAAE,eAAe;aAC7B,CAAC,CAAC;YACH,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,qEAAqE;IACrE,2EAA2E;IAC3E,sDAAsD;IACtD,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qBAAqB,gBAAgB,wCAAwC,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IACpD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,qBAAqB,gBAAgB,2CAA2C,WAAW,IAAI,CAAC,CAAC;IACnH,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/mcp/__tests__/prompt-injection.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=prompt-injection.test.d.ts.map

package/dist/mcp/__tests__/prompt-injection.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"prompt-injection.test.d.ts","sourceRoot":"","sources":["../../../src/mcp/__tests__/prompt-injection.test.ts"],"names":[],"mappings":""}