dravix-agent 0.1.0

package/dist/install/claude-code.js

@@ -0,0 +1,447 @@
+/**
+ * Claude Code installer — registers aegis as a PreToolUse hook + MCP server
+ * + writes a mandatory-validate block to ~/.claude/CLAUDE.md.
+ *
+ * Cross-platform (Windows / macOS / Linux). Atomic + idempotent + reversible:
+ *   - Re-running install is a no-op (markers detect prior install).
+ *   - Backs up every file it touches as <file>.bak-dravix-<unix_ts>.
+ *   - --dry-run prints what would change without writing.
+ *   - `aegis uninstall` removes everything cleanly.
+ */
+import { copyFileSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync, } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { randomBytes } from "node:crypto";
+const BEGIN_MARKER = "<!-- BEGIN DRAVIX-AGENT -->";
+const END_MARKER = "<!-- END DRAVIX-AGENT -->";
+/** Old FixMe block detection — pre-dravix users will have this header.
+ * Strip from `# FixMe Agent ...` up to the next top-level `#`/`## ` header
+ * (or EOF). Matches the block layout in user's original ~/.claude/CLAUDE.md. */
+const FIXME_HEADER_RE = /^# FixMe Agent[^\n]*\n[\s\S]*?(?=^#{1,2} \S|\Z)/m;
+/** Locate the absolute path of dist/bin/aegis.js. Reads from import.meta.url
+ * so it works no matter where the package is installed (global, local, link). */
+function locateAegisBin() {
+    const here = fileURLToPath(import.meta.url);
+    // here = .../dist/install/claude-code.js
+    return resolve(dirname(here), "..", "bin", "aegis.js");
+}
+/** ~/.claude/ on all platforms (Claude Code uses the same path everywhere). */
+function locateClaudeHome(override) {
+    if (override)
+        return override;
+    return resolve(homedir(), ".claude");
+}
+/** Locate ~/.claude.json — the user-scope MCP server config Claude Code reads. */
+function locateClaudeMcpConfig() {
+    return resolve(homedir(), ".claude.json");
+}
+/** Atomic write: tmp file + rename. On Windows rename is mostly-atomic; good
+ * enough for config files since we always have a .bak alongside. The tmp
+ * suffix uses crypto.randomBytes (not for security; just collision-resistant
+ * unique naming on concurrent installs). */
+function atomicWriteFile(filePath, content) {
+    mkdirSync(dirname(filePath), { recursive: true });
+    const tmp = `${filePath}.tmp-${Date.now()}-${randomBytes(3).toString("hex")}`;
+    writeFileSync(tmp, content, "utf8");
+    renameSync(tmp, filePath);
+}
+/** Backup an existing file as <file>.bak-dravix-<ts>. No-op if file missing. */
+function backupFile(filePath) {
+    if (!existsSync(filePath))
+        return;
+    const bak = `${filePath}.bak-dravix-${Date.now()}`;
+    copyFileSync(filePath, bak);
+}
+/** Read JSON file, return parsed object or empty object on missing/bad json.
+ * We never throw — config files belong to the user and must round-trip safely. */
+function readJsonSafe(filePath) {
+    if (!existsSync(filePath))
+        return {};
+    try {
+        const raw = readFileSync(filePath, "utf8");
+        const trimmed = raw.trim();
+        if (trimmed.length === 0)
+            return {};
+        const parsed = JSON.parse(trimmed);
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+            return parsed;
+        }
+        return {};
+    }
+    catch {
+        return {};
+    }
+}
+/** Merge our aegis MCP server entry into ~/.claude.json without disturbing
+ * other servers. Returns the merged JSON string (pretty-printed). */
+function mergeMcpConfig(existing, aegisBin) {
+    const out = { ...existing };
+    const servers = out.mcpServers && typeof out.mcpServers === "object" && !Array.isArray(out.mcpServers)
+        ? { ...out.mcpServers }
+        : {};
+    servers.aegis = {
+        type: "stdio",
+        command: process.execPath,
+        args: [aegisBin, "mcp"],
+    };
+    out.mcpServers = servers;
+    return JSON.stringify(out, null, 2) + "\n";
+}
+/** Merge our PreToolUse Write|Edit hook into ~/.claude/settings.json.
+ * Preserves other hooks (other matchers, other events). If our exact hook
+ * command already exists under the right matcher, we don't double-register. */
+function mergeSettings(existing, aegisBin) {
+    const out = { ...existing };
+    const hooks = out.hooks ? { ...out.hooks } : {};
+    const pre = Array.isArray(hooks.PreToolUse) ? [...hooks.PreToolUse] : [];
+    const ourCmd = `${JSON.stringify(process.execPath)} ${JSON.stringify(aegisBin)} hook`;
+    // Match an existing aegis-hook entry (any path variant) so re-install
+    // upgrades it in place rather than appending a duplicate.
+    const isAegisHook = (h) => typeof h.command === "string" && /aegis(?:\.js)?["'\s]+hook(?:\b|$)/.test(h.command);
+    let foundMatcher = -1;
+    for (let i = 0; i < pre.length; i++) {
+        if (pre[i].matcher === "Write|Edit") {
+            foundMatcher = i;
+            break;
+        }
+    }
+    const aegisHook = { type: "command", command: ourCmd, timeout: 60 };
+    if (foundMatcher === -1) {
+        pre.push({ matcher: "Write|Edit", hooks: [aegisHook] });
+    }
+    else {
+        const existingHooks = Array.isArray(pre[foundMatcher].hooks) ? pre[foundMatcher].hooks : [];
+        const others = existingHooks.filter((h) => !isAegisHook(h));
+        pre[foundMatcher] = { matcher: "Write|Edit", hooks: [...others, aegisHook] };
+    }
+    hooks.PreToolUse = pre;
+    out.hooks = hooks;
+    return JSON.stringify(out, null, 2) + "\n";
+}
+/** The mandatory-validate block written into ~/.claude/CLAUDE.md.
+ * Marked with BEGIN/END comments so uninstall can strip it precisely. */
+function claudeMdBlock() {
+    return `${BEGIN_MARKER}
+
+# Dravix Agent — Real-Time Code Quality Guard (MANDATORY)
+
+## BLOCKING REQUIREMENT: Pre-Validate ALL Code
+
+Before EVERY file write, edit, or creation, you MUST call the Dravix MCP tool \`validate_edit\`:
+
+\`\`\`
+mcp__aegis-v2__validate_edit(file_path="absolute/path", content="full file content")
+\`\`\`
+
+This is NOT optional. This is NOT a suggestion. This is a hard requirement.
+If you skip this step, the code WILL contain bugs that could have been prevented.
+
+## Step-by-Step Workflow
+
+1. Compose the full post-edit content (for Edit: read the file, apply the swap)
+2. BEFORE applying the Write/Edit, call \`mcp__aegis-v2__validate_edit(file_path, content)\`
+3. If \`verdict === "block"\`:
+   a. Read the rule ID, line number, severity, remediation
+   b. Fix ALL findings
+   c. Re-call \`validate_edit\` with the fixed content
+   d. Repeat until \`verdict === "allow"\`
+4. ONLY THEN apply the Write/Edit
+5. End your response with a Validation Report
+
+## Available Dravix MCP Tools
+
+| Tool | Use | When |
+|---|---|---|
+| \`mcp__aegis-v2__validate_edit(file_path, content)\` | Authoritative gate (allow/warn/block + findings) | EVERY Write/Edit |
+| \`mcp__aegis-v2__precheck_change(file_path, content)\` | Fast advisory (<200ms, never blocks) | When deciding whether to attempt an edit |
+| \`mcp__aegis-v2__explain_risk(finding_id OR file_path,line)\` | Look up prior gate decision | When investigating a past block |
+| \`mcp__aegis-v2__aegis_health\` | Engine availability + cache stats | When diagnosing why a tool errored |
+
+## What Dravix Catches
+
+- SQL injection, XSS, command injection, path traversal (CRITICAL)
+- Hardcoded secrets, API keys, JWT signing keys (CRITICAL)
+- \`eval()\`, \`exec()\`, \`os.system()\`, \`subprocess(shell=True)\`, pickle.loads (HIGH)
+- Cross-file taint (caller-of-risky import + Joern CPG + Pysa)
+- Race conditions (concurrency hint routing -> LLM critic)
+- Logic bugs (Hypothesis property tests produce concrete counterexamples)
+- Weak crypto (MD5 / SHA1 / Math.random for security)
+- JWT misuse (alg:none, hardcoded secret, no algorithms set)
+- Prompt injection in LLM apps, hardcoded LLM API keys
+- 52+ deterministic rules across Python / JS / TS / multi-lang
+
+## MANDATORY: Validation Report (End of EVERY Response with Code Changes)
+
+After completing ANY coding task, you MUST end your response with this exact format:
+
+\`\`\`
+## Validation Report
+
+**Issues prevented:** X issues caught and fixed before code was written
+**Issues breakdown:**
+- Critical: X (e.g., SQL injection in db.py:15 -> fixed with parameterized query)
+- High: X (e.g., hardcoded API key in config.py:3 -> moved to env var)
+- Medium: X
+- Low: X
+
+**What was caught:**
+1. [RULE-ID] file:line — what was wrong -> what was fixed
+2. [RULE-ID] file:line — description -> fix
+
+**Verdicts:** orchestrator.ts -> allow, db.py -> block->fixed->allow
+\`\`\`
+
+If no issues were caught (all code passed on first try):
+
+\`\`\`
+## Validation Report
+All code passed validation on first attempt. Zero issues detected.
+\`\`\`
+
+## NEVER Skip Validation
+
+- Do NOT write code without calling \`validate_edit\` first
+- Do NOT retry the same code that was rejected — fix it first
+- Do NOT ignore warn-level findings — review and address
+- Do NOT apologize for "extra steps" — this protects the user's codebase
+
+${END_MARKER}`;
+}
+/** Strip the legacy FixMe block (if present) and any prior dravix block,
+ * then append the fresh dravix block. Preserves all other user content. */
+function injectClaudeMdBlock(existing) {
+    let out = existing;
+    let fixmeRemoved = false;
+    // Strip prior dravix block (BEGIN_MARKER ... END_MARKER, inclusive +
+    // surrounding blank lines).
+    const dravixBlock = new RegExp(`\\n*${escapeRe(BEGIN_MARKER)}[\\s\\S]*?${escapeRe(END_MARKER)}\\n*`, "g");
+    out = out.replace(dravixBlock, "\n");
+    // Strip legacy FixMe block, if present.
+    if (FIXME_HEADER_RE.test(out)) {
+        out = out.replace(FIXME_HEADER_RE, "");
+        fixmeRemoved = true;
+    }
+    // Trim trailing whitespace, then append our block + a trailing newline.
+    out = out.replace(/\s+$/, "");
+    if (out.length > 0)
+        out += "\n\n";
+    out += claudeMdBlock() + "\n";
+    return { content: out, fixmeRemoved };
+}
+function escapeRe(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+/** Public entry: register aegis in Claude Code. */
+export function installClaudeCode(opts = {}) {
+    const aegisBin = locateAegisBin();
+    const claudeHome = locateClaudeHome(opts.claudeHome);
+    const mcpFile = locateClaudeMcpConfig();
+    const settingsFile = resolve(claudeHome, "settings.json");
+    const claudeMdFile = resolve(claudeHome, "CLAUDE.md");
+    const changes = [];
+    // 1. ~/.claude.json (MCP servers)
+    {
+        const before = existsSync(mcpFile) ? readFileSync(mcpFile, "utf8") : "";
+        const merged = mergeMcpConfig(readJsonSafe(mcpFile), aegisBin);
+        if (before.trim() === merged.trim()) {
+            changes.push({ file: mcpFile, op: "skip", reason: "aegis MCP already registered" });
+        }
+        else {
+            if (!opts.dryRun) {
+                backupFile(mcpFile);
+                atomicWriteFile(mcpFile, merged);
+            }
+            changes.push({
+                file: mcpFile,
+                op: existsSync(mcpFile) ? "modify" : "create",
+                reason: "added mcpServers.aegis",
+                before: before.slice(0, 800),
+                after: merged.slice(0, 800),
+            });
+        }
+    }
+    // 2. ~/.claude/settings.json (PreToolUse hook)
+    {
+        const before = existsSync(settingsFile) ? readFileSync(settingsFile, "utf8") : "";
+        const merged = mergeSettings(readJsonSafe(settingsFile), aegisBin);
+        if (before.trim() === merged.trim()) {
+            changes.push({ file: settingsFile, op: "skip", reason: "PreToolUse hook already registered" });
+        }
+        else {
+            if (!opts.dryRun) {
+                backupFile(settingsFile);
+                atomicWriteFile(settingsFile, merged);
+            }
+            changes.push({
+                file: settingsFile,
+                op: existsSync(settingsFile) ? "modify" : "create",
+                reason: "added PreToolUse Write|Edit hook",
+                before: before.slice(0, 800),
+                after: merged.slice(0, 800),
+            });
+        }
+    }
+    // 3. ~/.claude/CLAUDE.md (mandatory-validate block)
+    let fixmeBlockRemoved = false;
+    if (!opts.skipClaudeMd) {
+        const before = existsSync(claudeMdFile) ? readFileSync(claudeMdFile, "utf8") : "";
+        const { content: merged, fixmeRemoved } = injectClaudeMdBlock(before);
+        fixmeBlockRemoved = fixmeRemoved;
+        if (before === merged) {
+            changes.push({ file: claudeMdFile, op: "skip", reason: "Dravix block already present and current" });
+        }
+        else {
+            if (!opts.dryRun) {
+                backupFile(claudeMdFile);
+                atomicWriteFile(claudeMdFile, merged);
+            }
+            changes.push({
+                file: claudeMdFile,
+                op: existsSync(claudeMdFile) ? "modify" : "create",
+                reason: fixmeRemoved
+                    ? "replaced legacy FixMe block with Dravix block"
+                    : "added Dravix block",
+            });
+        }
+    }
+    return {
+        dryRun: opts.dryRun === true,
+        aegisBinPath: aegisBin,
+        claudeHome,
+        changes,
+        fixmeBlockRemoved,
+    };
+}
+/** Public entry: remove aegis from Claude Code. Idempotent. */
+export function uninstallClaudeCode(opts = {}) {
+    const aegisBin = locateAegisBin();
+    const claudeHome = locateClaudeHome(opts.claudeHome);
+    const mcpFile = locateClaudeMcpConfig();
+    const settingsFile = resolve(claudeHome, "settings.json");
+    const claudeMdFile = resolve(claudeHome, "CLAUDE.md");
+    const changes = [];
+    // 1. ~/.claude.json — remove mcpServers.aegis
+    if (existsSync(mcpFile)) {
+        const data = readJsonSafe(mcpFile);
+        const servers = data.mcpServers && typeof data.mcpServers === "object" && !Array.isArray(data.mcpServers)
+            ? { ...data.mcpServers }
+            : null;
+        if (servers && "aegis" in servers) {
+            delete servers.aegis;
+            data.mcpServers = servers;
+            const merged = JSON.stringify(data, null, 2) + "\n";
+            if (!opts.dryRun) {
+                backupFile(mcpFile);
+                atomicWriteFile(mcpFile, merged);
+            }
+            changes.push({ file: mcpFile, op: "modify", reason: "removed mcpServers.aegis" });
+        }
+        else {
+            changes.push({ file: mcpFile, op: "skip", reason: "aegis MCP not registered" });
+        }
+    }
+    else {
+        changes.push({ file: mcpFile, op: "skip", reason: "file does not exist" });
+    }
+    // 2. ~/.claude/settings.json — remove our hook
+    if (existsSync(settingsFile)) {
+        const data = readJsonSafe(settingsFile);
+        const pre = Array.isArray(data.hooks?.PreToolUse) ? [...data.hooks.PreToolUse] : [];
+        let removed = false;
+        const cleaned = [];
+        for (const m of pre) {
+            if (!Array.isArray(m.hooks)) {
+                cleaned.push(m);
+                continue;
+            }
+            const filtered = m.hooks.filter((h) => {
+                const isOurs = typeof h.command === "string" && /aegis(?:\.js)?["'\s]+hook(?:\b|$)/.test(h.command);
+                if (isOurs)
+                    removed = true;
+                return !isOurs;
+            });
+            if (filtered.length > 0)
+                cleaned.push({ ...m, hooks: filtered });
+        }
+        if (removed) {
+            if (cleaned.length > 0) {
+                data.hooks = { ...data.hooks, PreToolUse: cleaned };
+            }
+            else if (data.hooks) {
+                const h = { ...data.hooks };
+                delete h.PreToolUse;
+                data.hooks = h;
+            }
+            const merged = JSON.stringify(data, null, 2) + "\n";
+            if (!opts.dryRun) {
+                backupFile(settingsFile);
+                atomicWriteFile(settingsFile, merged);
+            }
+            changes.push({ file: settingsFile, op: "modify", reason: "removed PreToolUse aegis hook" });
+        }
+        else {
+            changes.push({ file: settingsFile, op: "skip", reason: "aegis hook not present" });
+        }
+    }
+    else {
+        changes.push({ file: settingsFile, op: "skip", reason: "file does not exist" });
+    }
+    // 3. ~/.claude/CLAUDE.md — strip Dravix block (leaves user content + legacy
+    // FixMe block, if any, untouched).
+    if (existsSync(claudeMdFile)) {
+        const before = readFileSync(claudeMdFile, "utf8");
+        const stripRe = new RegExp(`\\n*${escapeRe(BEGIN_MARKER)}[\\s\\S]*?${escapeRe(END_MARKER)}\\n*`, "g");
+        const after = before.replace(stripRe, "\n").replace(/\s+$/, "") + "\n";
+        if (after === before) {
+            changes.push({ file: claudeMdFile, op: "skip", reason: "no Dravix block to remove" });
+        }
+        else {
+            if (!opts.dryRun) {
+                backupFile(claudeMdFile);
+                atomicWriteFile(claudeMdFile, after);
+            }
+            changes.push({ file: claudeMdFile, op: "modify", reason: "removed Dravix block" });
+        }
+    }
+    else {
+        changes.push({ file: claudeMdFile, op: "skip", reason: "file does not exist" });
+    }
+    return {
+        dryRun: opts.dryRun === true,
+        aegisBinPath: aegisBin,
+        claudeHome,
+        changes,
+        fixmeBlockRemoved: false,
+    };
+}
+/** Human-readable summary for the CLI. */
+export function formatReport(r) {
+    const lines = [];
+    lines.push(r.dryRun ? "(dry-run — no files written)" : "Done.");
+    lines.push("");
+    lines.push(`Aegis binary: ${r.aegisBinPath}`);
+    lines.push(`Claude home:  ${r.claudeHome}`);
+    if (r.fixmeBlockRemoved) {
+        lines.push("Removed legacy FixMe block from CLAUDE.md.");
+    }
+    lines.push("");
+    lines.push("Changes:");
+    for (const c of r.changes) {
+        const op = c.op.padEnd(7);
+        lines.push(`  ${op}  ${c.file}`);
+        lines.push(`           ${c.reason}`);
+    }
+    lines.push("");
+    if (!r.dryRun) {
+        lines.push("Next steps:");
+        lines.push("  1. Restart Claude Code so it picks up the new MCP + hook.");
+        lines.push("  2. Open a new conversation and try editing a file —");
+        lines.push("     the PreToolUse hook should fire, and Claude should");
+        lines.push("     proactively call mcp__aegis-v2__validate_edit.");
+        lines.push("  3. Run `aegis doctor` to see which engines are live.");
+        lines.push("  4. To remove later: `aegis uninstall`.");
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=claude-code.js.map

package/dist/install/claude-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../src/install/claude-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,YAAY,GAAG,6BAA6B,CAAC;AACnD,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAC/C;;gFAEgF;AAChF,MAAM,eAAe,GACnB,kDAAkD,CAAC;AA0BrD;iFACiF;AACjF,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,yCAAyC;IACzC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AACzD,CAAC;AAED,+EAA+E;AAC/E,SAAS,gBAAgB,CAAC,QAAiB;IACzC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,kFAAkF;AAClF,SAAS,qBAAqB;IAC5B,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AAC5C,CAAC;AAED;;;4CAG4C;AAC5C,SAAS,eAAe,CAAC,QAAgB,EAAE,OAAe;IACxD,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,GAAG,QAAQ,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9E,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC5B,CAAC;AAED,gFAAgF;AAChF,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO;IAClC,MAAM,GAAG,GAAG,GAAG,QAAQ,eAAe,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACnD,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;kFACkF;AAClF,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC9C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,MAAiC,CAAC;QAC3C,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;qEACqE;AACrE,SAAS,cAAc,CAAC,QAAiC,EAAE,QAAgB;IACzE,MAAM,GAAG,GAA4B,EAAE,GAAG,QAAQ,EAAE,CAAC;IACrD,MAAM,OAAO,GACX,GAAG,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QACpF,CAAC,CAAC,EAAE,GAAI,GAAG,CAAC,UAAsC,EAAE;QACpD,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,CAAC,KAAK,GAAG;QACd,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;KACxB,CAAC;IACF,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC;IACzB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAoBD;;+EAE+E;AAC/E,SAAS,aAAa,CAAC,QAAkB,EAAE,QAAgB;IACzD,MAAM,GAAG,GAAa,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,MAAM,GAAG,GAAkB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAExF,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;IACtF,sEAAsE;IACtE,0DAA0D;IAC1D,MAAM,WAAW,GAAG,CAAC,CAAY,EAAW,EAAE,CAC5C,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAEvF,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,CAAC,CAAE,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;YACrC,YAAY,GAAG,CAAC,CAAC;YACjB,MAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAc,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAE/E,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC,KAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;IACvB,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;IAClB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED;yEACyE;AACzE,SAAS,aAAa;IACpB,OAAO,GAAG,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoFtB,UAAU,EAAE,CAAC;AACf,CAAC;AAED;2EAC2E;AAC3E,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,qEAAqE;IACrE,4BAA4B;IAC5B,MAAM,WAAW,GAAG,IAAI,MAAM,CAC5B,OAAO,QAAQ,CAAC,YAAY,CAAC,aAAa,QAAQ,CAAC,UAAU,CAAC,MAAM,EACpE,GAAG,CACJ,CAAC;IACF,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAErC,wCAAwC;IACxC,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACvC,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,wEAAwE;IACxE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,IAAI,MAAM,CAAC;IAClC,GAAG,IAAI,aAAa,EAAE,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,iBAAiB,CAAC,OAAuB,EAAE;IACzD,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,kCAAkC;IAClC,CAAC;QACC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,MAAM,GAAG,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACtF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,UAAU,CAAC,OAAO,CAAC,CAAC;gBACpB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,OAAO;gBACb,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;gBAC7C,MAAM,EAAE,wBAAwB;gBAChC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC5B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,CAAC;QACC,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,CAAC,YAAY,CAAa,EAAE,QAAQ,CAAC,CAAC;QAC/E,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC,CAAC;QACjG,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,UAAU,CAAC,YAAY,CAAC,CAAC;gBACzB,eAAe,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,YAAY;gBAClB,EAAE,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;gBAClD,MAAM,EAAE,kCAAkC;gBAC1C,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC5B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACtE,iBAAiB,GAAG,YAAY,CAAC;QACjC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC,CAAC;QACvG,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,UAAU,CAAC,YAAY,CAAC,CAAC;gBACzB,eAAe,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,YAAY;gBAClB,EAAE,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;gBAClD,MAAM,EAAE,YAAY;oBAClB,CAAC,CAAC,+CAA+C;oBACjD,CAAC,CAAC,oBAAoB;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI;QAC5B,YAAY,EAAE,QAAQ;QACtB,UAAU;QACV,OAAO;QACP,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,mBAAmB,CAAC,OAAkD,EAAE;IACtF,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,8CAA8C;IAC9C,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,OAAO,GACX,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YACvF,CAAC,CAAC,EAAE,GAAI,IAAI,CAAC,UAAsC,EAAE;YACrD,CAAC,CAAC,IAAI,CAAC;QACX,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,KAAK,CAAC;YACrB,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,UAAU,CAAC,OAAO,CAAC,CAAC;gBACpB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACpF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,+CAA+C;IAC/C,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAa,CAAC;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAM,CAAC,UAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBACpC,MAAM,MAAM,GACV,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACvF,IAAI,MAAM;oBAAE,OAAO,GAAG,IAAI,CAAC;gBAC3B,OAAO,CAAC,MAAM,CAAC;YACjB,CAAC,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;YACtD,CAAC;iBAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC5B,OAAO,CAAC,CAAC,UAAU,CAAC;gBACpB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;YACjB,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,UAAU,CAAC,YAAY,CAAC,CAAC;gBACzB,eAAe,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAC9F,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,4EAA4E;IAC5E,mCAAmC;IACnC,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,MAAM,CACxB,OAAO,QAAQ,CAAC,YAAY,CAAC,aAAa,QAAQ,CAAC,UAAU,CAAC,MAAM,EACpE,GAAG,CACJ,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;QACvE,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACxF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,UAAU,CAAC,YAAY,CAAC,CAAC;gBACzB,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI;QAC5B,YAAY,EAAE,QAAQ;QACtB,UAAU;QACV,OAAO;QACP,iBAAiB,EAAE,KAAK;KACzB,CAAC;AACJ,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,YAAY,CAAC,CAAgB;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC3D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QAC1E,KAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QACrE,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/lang.d.ts

@@ -0,0 +1,5 @@
+export type Lang = "python" | "javascript" | "typescript" | "jsx" | "tsx" | "go" | "rust" | "java" | "ruby" | "php" | "c" | "cpp" | "csharp" | "shell" | "yaml" | "json" | "dockerfile" | "unknown";
+export declare function detectLang(filePath: string): Lang;
+/** Focus-language predicate — covers our primary engines */
+export declare function isFocusLang(lang: Lang): boolean;
+//# sourceMappingURL=lang.d.ts.map

package/dist/lang.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lang.d.ts","sourceRoot":"","sources":["../src/lang.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,IAAI,GACZ,QAAQ,GACR,YAAY,GACZ,YAAY,GACZ,KAAK,GACL,KAAK,GACL,IAAI,GACJ,MAAM,GACN,MAAM,GACN,MAAM,GACN,KAAK,GACL,GAAG,GACH,KAAK,GACL,QAAQ,GACR,OAAO,GACP,MAAM,GACN,MAAM,GACN,YAAY,GACZ,SAAS,CAAC;AAyCd,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAMjD;AAED,4DAA4D;AAC5D,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAE/C"}

package/dist/lang.js

@@ -0,0 +1,52 @@
+/** Language detection from file extension. */
+import { basename, extname } from "node:path";
+const EXT_LANG = {
+    ".py": "python",
+    ".pyi": "python",
+    ".js": "javascript",
+    ".mjs": "javascript",
+    ".cjs": "javascript",
+    ".jsx": "jsx",
+    ".ts": "typescript",
+    ".tsx": "tsx",
+    ".mts": "typescript",
+    ".cts": "typescript",
+    ".go": "go",
+    ".rs": "rust",
+    ".java": "java",
+    ".rb": "ruby",
+    ".php": "php",
+    ".c": "c",
+    ".h": "c",
+    ".cpp": "cpp",
+    ".cc": "cpp",
+    ".cxx": "cpp",
+    ".hpp": "cpp",
+    ".cs": "csharp",
+    ".sh": "shell",
+    ".bash": "shell",
+    ".zsh": "shell",
+    ".yml": "yaml",
+    ".yaml": "yaml",
+    ".json": "json",
+};
+const FILENAME_LANG = {
+    Dockerfile: "dockerfile",
+    dockerfile: "dockerfile",
+    Makefile: "shell",
+    ".eslintrc.cjs": "javascript",
+    ".eslintrc.js": "javascript",
+};
+export function detectLang(filePath) {
+    const base = basename(filePath);
+    const byName = FILENAME_LANG[base];
+    if (byName)
+        return byName;
+    const ext = extname(filePath).toLowerCase();
+    return EXT_LANG[ext] ?? "unknown";
+}
+/** Focus-language predicate — covers our primary engines */
+export function isFocusLang(lang) {
+    return ["python", "javascript", "typescript", "jsx", "tsx", "go"].includes(lang);
+}
+//# sourceMappingURL=lang.js.map

package/dist/lang.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lang.js","sourceRoot":"","sources":["../src/lang.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsB9C,MAAM,QAAQ,GAAmC;IAC/C,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,MAAM;IACb,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,OAAO;IAChB,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,MAAM;IACf,OAAO,EAAE,MAAM;CAChB,CAAC;AAEF,MAAM,aAAa,GAAmC;IACpD,UAAU,EAAE,YAAY;IACxB,UAAU,EAAE,YAAY;IACxB,QAAQ,EAAE,OAAO;IACjB,eAAe,EAAE,YAAY;IAC7B,cAAc,EAAE,YAAY;CAC7B,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;AACpC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,WAAW,CAAC,IAAU;IACpC,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC"}

package/dist/learning/suppressions.d.ts

@@ -0,0 +1,70 @@
+import { z } from "zod";
+declare const SuppressionEntry: z.ZodObject<{
+    op: z.ZodEnum<["add", "remove"]>;
+    id: z.ZodString;
+    ts: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+    expires_at: z.ZodOptional<z.ZodString>;
+    who: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    op: "add" | "remove";
+    ts: string;
+    reason?: string | undefined;
+    expires_at?: string | undefined;
+    who?: string | undefined;
+}, {
+    id: string;
+    op: "add" | "remove";
+    ts: string;
+    reason?: string | undefined;
+    expires_at?: string | undefined;
+    who?: string | undefined;
+}>;
+export type SuppressionEntry = z.infer<typeof SuppressionEntry>;
+export interface ActiveSuppression {
+    id: string;
+    added_at: string;
+    reason?: string;
+    expires_at?: string;
+    who?: string;
+}
+export declare function suppressionsPath(projectRoot: string): string;
+export interface SuppressOptions {
+    reason?: string;
+    expiresAt?: string;
+    who?: string;
+}
+/** Add an `add` event to the log. Idempotent — adding an already-active
+ * suppression is a no-op log entry (we still append for audit). */
+export declare function suppress(projectRoot: string, findingId: string, opts?: SuppressOptions): {
+    ok: true;
+    entry: SuppressionEntry;
+} | {
+    ok: false;
+    reason: string;
+};
+/** Add a `remove` event — the finding will be ALLOWED through again on
+ * the next gate run. */
+export declare function unsuppress(projectRoot: string, findingId: string, opts?: {
+    who?: string;
+    reason?: string;
+}): {
+    ok: true;
+    entry: SuppressionEntry;
+} | {
+    ok: false;
+    reason: string;
+};
+/** Return the currently-active suppressions (folded from the append log,
+ * with expired entries dropped). O(1) hit on the per-project cache when
+ * the log mtime hasn't changed since the last call. */
+export declare function listActive(projectRoot: string): ActiveSuppression[];
+/** Fast O(1) check used by the orchestrator. Returns true iff the finding
+ * id is currently suppressed (added + not removed + not expired). */
+export declare function isSuppressed(projectRoot: string, findingId: string): boolean;
+/** Test-only — wipe the in-memory cache so a test can re-read after
+ * writing fresh entries. */
+export declare function _resetActiveCacheForTests(): void;
+export {};
+//# sourceMappingURL=suppressions.d.ts.map

package/dist/learning/suppressions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suppressions.d.ts","sourceRoot":"","sources":["../../src/learning/suppressions.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;EAOpB,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAYD,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5D;AASD,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;mEACmE;AACnE,wBAAgB,QAAQ,CACtB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,eAAe,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAavE;AAED;wBACwB;AACxB,wBAAgB,UAAU,CACxB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAYvE;AAoBD;;uDAEuD;AACvD,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAEnE;AAED;qEACqE;AACrE,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAE5E;AA6DD;4BAC4B;AAC5B,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD"}