instar 0.28.49 → 0.28.51

package/dist/core/InputGuard.d.ts

@@ -15,6 +15,7 @@
  * Hard requirement: NEVER fail silently. Every fallback, timeout, or
  * degradation must be logged and surfaced via the attention queue.
  */
+import type { IntelligenceProvider } from './types.js';
 export interface InputGuardConfig {
     /** Whether the Input Guard is enabled */
     enabled: boolean;
@@ -26,7 +27,13 @@ export interface InputGuardConfig {
     topicCoherenceReview?: boolean;
     /** Action on suspicious messages: 'warn' (default), 'block', 'log' */
     action?: 'warn' | 'block' | 'log';
-    /** Timeout for LLM review in ms (default: 3000) */
+    /**
+     * Timeout for LLM review in ms. Values below 8000 are clamped up to 8000
+     * — the CLI-subscription provider spawns a subprocess per call whose
+     * cold-start p99 can exceed 3000ms, so a below-floor value would silently
+     * regress Layer 2 from "review ran" to "review timed out." Explicit values
+     * above 8000 take effect as-configured. Default: 8000 (the floor).
+     */
     reviewTimeout?: number;
 }
 export interface TopicBinding {
@@ -52,7 +59,7 @@ export declare class InputGuard {
     private config;
     private stateDir;
     private securityLogPath;
-    private apiKey;
+    private intelligence;
     private attentionQueueFn;
     private topicMemoryFn;
     private sessionCreationTimes;
@@ -61,7 +68,13 @@ export declare class InputGuard {
     constructor(options: {
         config: InputGuardConfig;
         stateDir: string;
-        apiKey?: string;
+        /**
+         * Shared IntelligenceProvider. Layer 2 topic-coherence review runs exclusively
+         * through this abstraction — InputGuard does not call the Anthropic API
+         * directly. When absent, Layer 2 fails closed-to-warn (a degradation log is
+         * emitted) and the session continues without topic-coherence supervision.
+         */
+        intelligence?: IntelligenceProvider;
     });
     /** Set the attention queue callback for surfacing degradation */
     setAttentionQueue(fn: (title: string, body: string) => void): void;
@@ -84,6 +97,19 @@ export declare class InputGuard {
      * Uses Haiku for fast, low-cost classification.
      */
     reviewTopicCoherence(text: string, binding: TopicBinding): Promise<InputReviewResult>;
+    /**
+     * Parse the LLM's raw response into an InputReviewResult.
+     *
+     * Fail-mode policy:
+     *   - Empty response → coherent (authority declined; indistinguishable from
+     *     transport absence, which is already logged elsewhere).
+     *   - Valid JSON → parsed verdict/reason/confidence.
+     *   - Malformed JSON → suspicious with low confidence AND a degradation log.
+     *     Rationale: under warn-only action, fail-closed-to-warn surfaces a
+     *     non-blocking system-reminder rather than silently passing content that
+     *     may have been crafted to produce malformed authority output.
+     */
+    private parseReviewResponse;
     /**
      * Build a system-reminder warning for suspicious messages.
      * Uses <system-reminder> tags which occupy a structurally privileged

package/dist/core/InputGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"InputGuard.d.ts","sourceRoot":"","sources":["../../src/core/InputGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,yCAAyC;IACzC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mDAAmD;IACnD,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gDAAgD;IAChD,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC;IAClC,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,UAAU,GAAG,UAAU,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,gBAAgB,GACxB,UAAU,GACV,gBAAgB,GAChB,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,UAAU,GAAG,YAAY,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,YAAY,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;CAC/D;AAED,UAAU,iBAAiB;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAsED,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,gBAAgB,CAAwD;IAChF,OAAO,CAAC,aAAa,CAAwE;IAC7F,OAAO,CAAC,oBAAoB,CAAkC;IAC9D,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,gBAAgB,CAAK;gBAEjB,OAAO,EAAE;QACnB,MAAM,EAAE,gBAAgB,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;IAOD,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI;IAIlE,gEAAgE;IAChE,cAAc,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI;IAI/E,iEAAiE;IACjE,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAM/C;;;OAGG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,gBAAgB;IAiDtE;;;OAGG;IACH,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAanD;;;OAGG;IACG,oBAAoB,CACxB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,iBAAiB,CAAC;IAqG7B;;;;OAIG;IACH,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAM3D,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI;IAgB/C,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,WAAW;CAsBpB"}
+{"version":3,"file":"InputGuard.d.ts","sourceRoot":"","sources":["../../src/core/InputGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAIvD,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,yCAAyC;IACzC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mDAAmD;IACnD,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gDAAgD;IAChD,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC;IAClC;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,UAAU,GAAG,UAAU,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,gBAAgB,GACxB,UAAU,GACV,gBAAgB,GAChB,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,UAAU,GAAG,YAAY,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,YAAY,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;CAC/D;AAED,UAAU,iBAAiB;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAsED,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,gBAAgB,CAAwD;IAChF,OAAO,CAAC,aAAa,CAAwE;IAC7F,OAAO,CAAC,oBAAoB,CAAkC;IAC9D,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,gBAAgB,CAAK;gBAEjB,OAAO,EAAE;QACnB,MAAM,EAAE,gBAAgB,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB;;;;;WAKG;QACH,YAAY,CAAC,EAAE,oBAAoB,CAAC;KACrC;IAOD,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI;IAIlE,gEAAgE;IAChE,cAAc,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI;IAI/E,iEAAiE;IACjE,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAM/C;;;OAGG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,gBAAgB;IAiDtE;;;OAGG;IACH,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAanD;;;OAGG;IACG,oBAAoB,CACxB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,iBAAiB,CAAC;IAiF7B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,mBAAmB;IAiC3B;;;;OAIG;IACH,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAM3D,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI;IAgB/C,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,WAAW;CAsBpB"}

package/dist/core/InputGuard.js

@@ -80,7 +80,7 @@ export class InputGuard {
     config;
     stateDir;
     securityLogPath;
-    apiKey;
+    intelligence;
     attentionQueueFn = null;
     topicMemoryFn = null;
     sessionCreationTimes = new Map();
@@ -89,7 +89,7 @@ export class InputGuard {
     constructor(options) {
         this.config = options.config;
         this.stateDir = options.stateDir;
-        this.apiKey = options.apiKey;
+        this.intelligence = options.intelligence ?? null;
         this.securityLogPath = path.join(options.stateDir, 'security.jsonl');
     }
     /** Set the attention queue callback for surfacing degradation */
@@ -173,8 +173,15 @@ export class InputGuard {
      * Uses Haiku for fast, low-cost classification.
      */
     async reviewTopicCoherence(text, binding) {
-        if (!this.config.topicCoherenceReview || !this.apiKey) {
-            return { verdict: 'coherent', reason: 'review disabled or no API key', confidence: 0, layer: 'topic-coherence' };
+        if (!this.config.topicCoherenceReview) {
+            return { verdict: 'coherent', reason: 'review disabled', confidence: 0, layer: 'topic-coherence' };
+        }
+        if (!this.intelligence) {
+            // No LLM transport available — visible degradation instead of silent no-op.
+            // Subscription-first: the Anthropic API is only reachable through the shared
+            // provider abstraction; InputGuard no longer carries its own direct transport.
+            this.logDegradation('topic coherence review skipped: no IntelligenceProvider');
+            return { verdict: 'coherent', reason: 'no LLM available — review skipped', confidence: 0, layer: 'topic-coherence' };
         }
         // Get recent messages for context
         let recentContext = 'No recent messages available';
@@ -209,58 +216,79 @@ Evaluate:
 
 Respond with ONLY valid JSON (no markdown, no explanation):
 {"verdict": "COHERENT" or "SUSPICIOUS", "reason": "Brief explanation", "confidence": 0.0 to 1.0}`;
-        const timeout = this.config.reviewTimeout ?? 3000;
+        // Effective timeout is a FLOOR, not a hard default: `max(config, 8000ms)`.
+        // Rationale: the CLI-subscription provider spawns a subprocess per call whose
+        // cold-start p99 can exceed 3000ms. Honoring a user-configured value below
+        // the floor would silently regress Layer 2 from "LLM review ran" to "LLM
+        // review timed out" on the subscription path. The floor is intentional: a
+        // below-floor config value is clamped up. Explicit config above 8s raises it.
+        // (Warn-only action makes a longer review benign — no user-visible latency.)
+        const FLOOR_MS = 8000;
+        const timeout = Math.max(this.config.reviewTimeout ?? 0, FLOOR_MS);
         try {
-            const controller = new AbortController();
-            const timer = setTimeout(() => controller.abort(), timeout);
-            const response = await fetch('https://api.anthropic.com/v1/messages', {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                    'x-api-key': this.apiKey,
-                    'anthropic-version': '2023-06-01',
-                },
-                body: JSON.stringify({
-                    model: 'claude-haiku-4-5-20251001',
-                    max_tokens: 150,
+            const rawText = await Promise.race([
+                this.intelligence.evaluate(prompt, {
+                    model: 'fast',
+                    maxTokens: 150,
                     temperature: 0,
-                    messages: [{ role: 'user', content: prompt }],
                 }),
-                signal: controller.signal,
-            });
-            clearTimeout(timer);
-            if (!response.ok) {
-                const errorText = await response.text().catch(() => 'unknown');
-                throw new Error(`API ${response.status}: ${errorText}`);
-            }
-            const data = await response.json();
-            const textBlock = data.content?.find(b => b.type === 'text');
-            if (!textBlock?.text) {
-                return { verdict: 'coherent', reason: 'Empty response', confidence: 0, layer: 'topic-coherence' };
-            }
-            try {
-                const parsed = JSON.parse(textBlock.text);
-                return {
-                    verdict: parsed.verdict?.toLowerCase() === 'suspicious' ? 'suspicious' : 'coherent',
-                    reason: parsed.reason || 'No reason provided',
-                    confidence: typeof parsed.confidence === 'number' ? parsed.confidence : 0.5,
-                    layer: 'topic-coherence',
-                };
-            }
-            catch {
-                // JSON parse failed — fail open
-                this.logDegradation('LLM response was not valid JSON', textBlock.text.slice(0, 100));
-                return { verdict: 'coherent', reason: 'Parse error — fail open', confidence: 0, layer: 'topic-coherence' };
-            }
+                new Promise((_, reject) => setTimeout(() => reject(new Error(`Review timeout after ${timeout}ms`)), timeout)),
+            ]);
+            return this.parseReviewResponse(rawText);
         }
         catch (err) {
-            // LLM call failed — fail open with logging
+            // Transport flake (timeout, network, subprocess failure) — fail open at the
+            // transport boundary so routine infrastructure hiccups don't produce warn-spam.
+            // Authority-level dissent (suspicious verdict) would have come through the
+            // parse path above. Degradation logging + error tracking surfaces persistent
+            // transport failure via the attention queue.
             const msg = err instanceof Error ? err.message : String(err);
             this.logDegradation(`LLM review failed: ${msg}`);
             this.trackErrors();
             return { verdict: 'coherent', reason: `Review failed: ${msg} — fail open`, confidence: 0, layer: 'topic-coherence' };
         }
     }
+    /**
+     * Parse the LLM's raw response into an InputReviewResult.
+     *
+     * Fail-mode policy:
+     *   - Empty response → coherent (authority declined; indistinguishable from
+     *     transport absence, which is already logged elsewhere).
+     *   - Valid JSON → parsed verdict/reason/confidence.
+     *   - Malformed JSON → suspicious with low confidence AND a degradation log.
+     *     Rationale: under warn-only action, fail-closed-to-warn surfaces a
+     *     non-blocking system-reminder rather than silently passing content that
+     *     may have been crafted to produce malformed authority output.
+     */
+    parseReviewResponse(rawText) {
+        if (!rawText || rawText.trim().length === 0) {
+            return { verdict: 'coherent', reason: 'Empty response', confidence: 0, layer: 'topic-coherence' };
+        }
+        let cleaned = rawText.trim();
+        if (cleaned.startsWith('```')) {
+            cleaned = cleaned.replace(/^```(?:json)?\n?/, '').replace(/\n?```$/, '');
+        }
+        const jsonMatch = cleaned.match(/\{[\s\S]*\}/);
+        const jsonText = jsonMatch ? jsonMatch[0] : cleaned;
+        try {
+            const parsed = JSON.parse(jsonText);
+            return {
+                verdict: parsed.verdict?.toLowerCase() === 'suspicious' ? 'suspicious' : 'coherent',
+                reason: parsed.reason || 'No reason provided',
+                confidence: typeof parsed.confidence === 'number' ? parsed.confidence : 0.5,
+                layer: 'topic-coherence',
+            };
+        }
+        catch {
+            this.logDegradation('LLM response was not valid JSON', rawText.slice(0, 100));
+            return {
+                verdict: 'suspicious',
+                reason: 'Parse error — fail-closed-to-warn',
+                confidence: 0.3,
+                layer: 'topic-coherence',
+            };
+        }
+    }
     // ── Warning Builder ─────────────────────────────────────────────
     /**
      * Build a system-reminder warning for suspicious messages.

package/dist/core/InputGuard.js.map

@@ -1 +1 @@
-{"version":3,"file":"InputGuard.js","sourceRoot":"","sources":["../../src/core/InputGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA8C7B,uEAAuE;AAEvE;;;GAGG;AACH,MAAM,kBAAkB,GAA6C;IACnE;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,0EAA0E;KACpF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,+DAA+D;KACzE;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,wEAAwE;KAClF;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,oCAAoC;KAC9C;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,iCAAiC;KAC3C;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,iEAAiE;KAC3E;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,kCAAkC;KAC5C;CACF,CAAC;AAEF,uEAAuE;AAEvE,mDAAmD;AACnD,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,qDAAqD;AACrD,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,gDAAgD;AAChD,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AAC5C,CAAC;AAED,gDAAgD;AAChD,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,iEAAiE;AACjE,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACzC,CAAC;AAED,uEAAuE;AAEvE,MAAM,OAAO,UAAU;IACb,MAAM,CAAmB;IACzB,QAAQ,CAAS;IACjB,eAAe,CAAS;IACxB,MAAM,CAAqB;IAC3B,gBAAgB,GAAmD,IAAI,CAAC;IACxE,aAAa,GAAmE,IAAI,CAAC;IACrF,oBAAoB,GAAwB,IAAI,GAAG,EAAE,CAAC;IACtD,UAAU,GAAG,CAAC,CAAC;IACf,gBAAgB,GAAG,CAAC,CAAC;IAE7B,YAAY,OAIX;QACC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACvE,CAAC;IAED,iEAAiE;IACjE,iBAAiB,CAAC,EAAyC;QACzD,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED,gEAAgE;IAChE,cAAc,CAAC,EAAyD;QACtE,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;IAC1B,CAAC;IAED,iEAAiE;IACjE,oBAAoB,CAAC,WAAmB;QACtC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,mEAAmE;IAEnE;;;OAGG;IACH,eAAe,CAAC,IAAY,EAAE,OAAqB;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,OAAO,UAAU,CAAC;QAEpD,+DAA+D;QAC/D,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC;YAChE,IAAI,QAAQ;gBAAE,OAAO,UAAU,CAAC;YAChC,iDAAiD;QACnD,CAAC;QAED,wCAAwC;QACxC,IAAI,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,UAAU,CAAC;QAE7C,4CAA4C;QAC5C,IAAI,kBAAkB,CAAC,IAAI,CAAC;YAAE,OAAO,UAAU,CAAC;QAEhD,qBAAqB;QACrB,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,OAAO,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACxE,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,yDAAyD;gBACzD,oCAAoC;gBACpC,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACxE,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACxE,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAED,oBAAoB;QACpB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,mEAAmE;IAEnE;;;OAGG;IACH,sBAAsB,CAAC,IAAY;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAEhD,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,kBAAkB,EAAE,CAAC;YACnD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mEAAmE;IAEnE;;;OAGG;IACH,KAAK,CAAC,oBAAoB,CACxB,IAAY,EACZ,OAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACtD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,+BAA+B,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACnH,CAAC;QAED,kCAAkC;QAClC,IAAI,aAAa,GAAG,8BAA8B,CAAC;QACnD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,sDAAsD;YACxD,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG;;;;;cAKL,OAAO,CAAC,OAAO,UAAU,OAAO,CAAC,OAAO,MAAM,OAAO,CAAC,SAAS;iCAC5C,aAAa;;;EAG5C,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;;;;;;;;;;iGAU6E,CAAC;QAE9F,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YAE5D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,uCAAuC,EAAE;gBACpE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,WAAW,EAAE,IAAI,CAAC,MAAO;oBACzB,mBAAmB,EAAE,YAAY;iBAClC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,2BAA2B;oBAClC,UAAU,EAAE,GAAG;oBACf,WAAW,EAAE,CAAC;oBACd,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;iBAC9C,CAAC;gBACF,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAE/B,CAAC;YAEF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;YAC7D,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;gBACrB,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;YACpG,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC1C,OAAO;oBACL,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;oBACnF,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,oBAAoB;oBAC7C,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG;oBAC3E,KAAK,EAAE,iBAAiB;iBACzB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;gBAChC,IAAI,CAAC,cAAc,CAAC,iCAAiC,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACrF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,yBAAyB,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;YAC7G,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2CAA2C;YAC3C,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,cAAc,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,GAAG,cAAc,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACvH,CAAC;IACH,CAAC;IAED,mEAAmE;IAEnE;;;;OAIG;IACH,YAAY,CAAC,OAAqB,EAAE,MAAc;QAChD,OAAO,sJAAsJ,OAAO,CAAC,SAAS,eAAe,MAAM,wLAAwL,CAAC;IAC9X,CAAC;IAED,mEAAmE;IAEnE,gBAAgB,CAAC,IAAuB;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,GAAG,IAAI;aACR,CAAC;YACF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,mEAAmE;IAE3D,cAAc,CAAC,OAAe,EAAE,MAAe;QACrD,OAAO,CAAC,KAAK,CAAC,6BAA6B,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,gBAAgB,CAAC;YACpB,KAAK,EAAE,yBAAyB;YAChC,OAAO,EAAE,QAAQ;YACjB,OAAO;YACP,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAEO,WAAW;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;QAE/C,IAAI,GAAG,GAAG,IAAI,CAAC,gBAAgB,GAAG,SAAS,EAAE,CAAC;YAC5C,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAElB,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAClD,IAAI,CAAC,gBAAgB,CACnB,sBAAsB,EACtB,2CAA2C,IAAI,CAAC,UAAU,iCAAiC;gBAC3F,gEAAgE;gBAChE,yCAAyC,CAC1C,CAAC;YACF,yBAAyB;YACzB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC;QAC9B,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"InputGuard.js","sourceRoot":"","sources":["../../src/core/InputGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAqD7B,uEAAuE;AAEvE;;;GAGG;AACH,MAAM,kBAAkB,GAA6C;IACnE;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,0EAA0E;KACpF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,+DAA+D;KACzE;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,wEAAwE;KAClF;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,oCAAoC;KAC9C;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,iCAAiC;KAC3C;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,iEAAiE;KAC3E;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,kCAAkC;KAC5C;CACF,CAAC;AAEF,uEAAuE;AAEvE,mDAAmD;AACnD,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,qDAAqD;AACrD,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,gDAAgD;AAChD,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AAC5C,CAAC;AAED,gDAAgD;AAChD,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,iEAAiE;AACjE,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACzC,CAAC;AAED,uEAAuE;AAEvE,MAAM,OAAO,UAAU;IACb,MAAM,CAAmB;IACzB,QAAQ,CAAS;IACjB,eAAe,CAAS;IACxB,YAAY,CAA8B;IAC1C,gBAAgB,GAAmD,IAAI,CAAC;IACxE,aAAa,GAAmE,IAAI,CAAC;IACrF,oBAAoB,GAAwB,IAAI,GAAG,EAAE,CAAC;IACtD,UAAU,GAAG,CAAC,CAAC;IACf,gBAAgB,GAAG,CAAC,CAAC;IAE7B,YAAY,OAUX;QACC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QACjD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACvE,CAAC;IAED,iEAAiE;IACjE,iBAAiB,CAAC,EAAyC;QACzD,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED,gEAAgE;IAChE,cAAc,CAAC,EAAyD;QACtE,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;IAC1B,CAAC;IAED,iEAAiE;IACjE,oBAAoB,CAAC,WAAmB;QACtC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,mEAAmE;IAEnE;;;OAGG;IACH,eAAe,CAAC,IAAY,EAAE,OAAqB;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,OAAO,UAAU,CAAC;QAEpD,+DAA+D;QAC/D,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC;YAChE,IAAI,QAAQ;gBAAE,OAAO,UAAU,CAAC;YAChC,iDAAiD;QACnD,CAAC;QAED,wCAAwC;QACxC,IAAI,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,UAAU,CAAC;QAE7C,4CAA4C;QAC5C,IAAI,kBAAkB,CAAC,IAAI,CAAC;YAAE,OAAO,UAAU,CAAC;QAEhD,qBAAqB;QACrB,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,OAAO,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACxE,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,yDAAyD;gBACzD,oCAAoC;gBACpC,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACxE,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACxE,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAED,oBAAoB;QACpB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,mEAAmE;IAEnE;;;OAGG;IACH,sBAAsB,CAAC,IAAY;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAEhD,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,kBAAkB,EAAE,CAAC;YACnD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mEAAmE;IAEnE;;;OAGG;IACH,KAAK,CAAC,oBAAoB,CACxB,IAAY,EACZ,OAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACrG,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,4EAA4E;YAC5E,6EAA6E;YAC7E,+EAA+E;YAC/E,IAAI,CAAC,cAAc,CAAC,yDAAyD,CAAC,CAAC;YAC/E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,mCAAmC,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACvH,CAAC;QAED,kCAAkC;QAClC,IAAI,aAAa,GAAG,8BAA8B,CAAC;QACnD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,sDAAsD;YACxD,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG;;;;;cAKL,OAAO,CAAC,OAAO,UAAU,OAAO,CAAC,OAAO,MAAM,OAAO,CAAC,SAAS;iCAC5C,aAAa;;;EAG5C,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;;;;;;;;;;iGAU6E,CAAC;QAE9F,2EAA2E;QAC3E,8EAA8E;QAC9E,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,8EAA8E;QAC9E,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QAEnE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE;oBACjC,KAAK,EAAE,MAAM;oBACb,SAAS,EAAE,GAAG;oBACd,WAAW,EAAE,CAAC;iBACf,CAAC;gBACF,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,OAAO,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAClF;aACF,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,4EAA4E;YAC5E,gFAAgF;YAChF,2EAA2E;YAC3E,6EAA6E;YAC7E,6CAA6C;YAC7C,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,cAAc,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,GAAG,cAAc,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACvH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACK,mBAAmB,CAAC,OAAe;QACzC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACpG,CAAC;QAED,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAEpD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;gBACnF,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,oBAAoB;gBAC7C,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG;gBAC3E,KAAK,EAAE,iBAAiB;aACzB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,cAAc,CAAC,iCAAiC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9E,OAAO;gBACL,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,mCAAmC;gBAC3C,UAAU,EAAE,GAAG;gBACf,KAAK,EAAE,iBAAiB;aACzB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,mEAAmE;IAEnE;;;;OAIG;IACH,YAAY,CAAC,OAAqB,EAAE,MAAc;QAChD,OAAO,sJAAsJ,OAAO,CAAC,SAAS,eAAe,MAAM,wLAAwL,CAAC;IAC9X,CAAC;IAED,mEAAmE;IAEnE,gBAAgB,CAAC,IAAuB;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,GAAG,IAAI;aACR,CAAC;YACF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,mEAAmE;IAE3D,cAAc,CAAC,OAAe,EAAE,MAAe;QACrD,OAAO,CAAC,KAAK,CAAC,6BAA6B,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,gBAAgB,CAAC;YACpB,KAAK,EAAE,yBAAyB;YAChC,OAAO,EAAE,QAAQ;YACjB,OAAO;YACP,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAEO,WAAW;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;QAE/C,IAAI,GAAG,GAAG,IAAI,CAAC,gBAAgB,GAAG,SAAS,EAAE,CAAC;YAC5C,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAElB,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAClD,IAAI,CAAC,gBAAgB,CACnB,sBAAsB,EACtB,2CAA2C,IAAI,CAAC,UAAU,iCAAiC;gBAC3F,gEAAgE;gBAChE,yCAAyC,CAC1C,CAAC;YACF,yBAAyB;YACzB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC;QAC9B,CAAC;IACH,CAAC;CACF"}

package/dist/core/PostUpdateMigrator.d.ts

@@ -41,6 +41,20 @@ export declare class PostUpdateMigrator {
      * each migration is idempotent.
      */
     migrate(): MigrationResult;
+    /**
+     * Upgrade built-in skills that hardcoded a localhost port at install time
+     * to use a runtime-expandable ${INSTAR_PORT:-PORT} pattern.
+     *
+     * Background: installBuiltinSkills used to template the port at install.
+     * Users who later changed their server port ended up with stale URLs in
+     * their skills. This migration rewrites `http://localhost:NNNN/` to
+     * `http://localhost:${INSTAR_PORT:-NNNN}/` in the known-default skill set.
+     *
+     * Idempotent: skips files that already use the dynamic pattern.
+     * Scoped: only touches skills from the installBuiltinSkills set — custom
+     * skills are never modified.
+     */
+    private migrateSkillPortHardcoding;
     /**
      * Deploy any missing built-in skills (e.g., guardian job skills added after initial setup).
      * Non-destructive — only writes SKILL.md files that don't already exist.

package/dist/core/PostUpdateMigrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAYH,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;gBAEnB,MAAM,EAAE,cAAc;IAIlC;;;OAGG;IACH,OAAO,IAAI,eAAe;IAqB1B;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IA8IpB;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IA+DzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAwGhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IA8DlC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAgXvB;;;OAGG;IACH,OAAO,CAAC,cAAc;IA0FtB;;;OAGG;IACH,OAAO,CAAC,eAAe;IA0NvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAqFrB;;;OAGG;IACH;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,MAAM;IAmBvY,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC,OAAO,CAAC,mBAAmB;IAyS3B,OAAO,CAAC,wBAAwB;IAmEhC,OAAO,CAAC,2BAA2B;IA0DnC,OAAO,CAAC,yBAAyB;IAuGjC,OAAO,CAAC,2BAA2B;IAsHnC,OAAO,CAAC,qBAAqB;IAqP7B,OAAO,CAAC,uBAAuB;IAgE/B,OAAO,CAAC,2BAA2B;IA8GnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA4LpC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,uBAAuB;IA4B/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAqB3B,OAAO,CAAC,8BAA8B;IAoHtC,OAAO,CAAC,+BAA+B;IAmJvC,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,qBAAqB;IA4N7B,OAAO,CAAC,qBAAqB;IA4H7B,OAAO,CAAC,6BAA6B;IAyKrC,OAAO,CAAC,0BAA0B;IAgClC,OAAO,CAAC,6BAA6B;CAoCtC"}
+{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAYH,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;gBAEnB,MAAM,EAAE,cAAc;IAIlC;;;OAGG;IACH,OAAO,IAAI,eAAe;IAsB1B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,0BAA0B;IA8BlC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IA8IpB;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IA+DzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAwGhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IA8DlC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAgXvB;;;OAGG;IACH,OAAO,CAAC,cAAc;IA0FtB;;;OAGG;IACH,OAAO,CAAC,eAAe;IA0NvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAqFrB;;;OAGG;IACH;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,MAAM;IAmBvY,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC,OAAO,CAAC,mBAAmB;IAyS3B,OAAO,CAAC,wBAAwB;IAmEhC,OAAO,CAAC,2BAA2B;IA0DnC,OAAO,CAAC,yBAAyB;IAuGjC,OAAO,CAAC,2BAA2B;IAsHnC,OAAO,CAAC,qBAAqB;IAqP7B,OAAO,CAAC,uBAAuB;IAgE/B,OAAO,CAAC,2BAA2B;IA8GnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA4LpC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,uBAAuB;IA4B/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAqB3B,OAAO,CAAC,8BAA8B;IAoHtC,OAAO,CAAC,+BAA+B;IAmJvC,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,qBAAqB;IA4N7B,OAAO,CAAC,qBAAqB;IA4H7B,OAAO,CAAC,6BAA6B;IAyKrC,OAAO,CAAC,0BAA0B;IAgClC,OAAO,CAAC,6BAA6B;CAoCtC"}

package/dist/core/PostUpdateMigrator.js

@@ -48,11 +48,57 @@ export class PostUpdateMigrator {
         this.migrateConfig(result);
         this.migrateGitignore(result);
         this.migrateBuiltinSkills(result);
+        this.migrateSkillPortHardcoding(result);
         this.migrateSelfKnowledgeTree(result);
         this.migrateSoulMd(result);
         this.migrateAgentMdSections(result);
         return result;
     }
+    /**
+     * Upgrade built-in skills that hardcoded a localhost port at install time
+     * to use a runtime-expandable ${INSTAR_PORT:-PORT} pattern.
+     *
+     * Background: installBuiltinSkills used to template the port at install.
+     * Users who later changed their server port ended up with stale URLs in
+     * their skills. This migration rewrites `http://localhost:NNNN/` to
+     * `http://localhost:${INSTAR_PORT:-NNNN}/` in the known-default skill set.
+     *
+     * Idempotent: skips files that already use the dynamic pattern.
+     * Scoped: only touches skills from the installBuiltinSkills set — custom
+     * skills are never modified.
+     */
+    migrateSkillPortHardcoding(result) {
+        const defaultSkills = [
+            'evolve', 'learn', 'gaps', 'commit-action', 'feedback',
+            'triage-findings', 'reflect', 'coherence-audit', 'degradation-digest',
+            'state-integrity-check', 'memory-hygiene', 'guardian-pulse',
+            'session-continuity-check', 'git-sync',
+        ];
+        const skillsDir = path.join(this.config.projectDir, '.claude', 'skills');
+        const hardcodedRe = /http:\/\/localhost:(\d+)\//g;
+        const dynamicMarker = '${INSTAR_PORT:-';
+        for (const name of defaultSkills) {
+            const skillFile = path.join(skillsDir, name, 'SKILL.md');
+            if (!fs.existsSync(skillFile))
+                continue;
+            try {
+                const original = fs.readFileSync(skillFile, 'utf8');
+                if (original.includes(dynamicMarker))
+                    continue;
+                if (!hardcodedRe.test(original))
+                    continue;
+                hardcodedRe.lastIndex = 0;
+                const updated = original.replace(hardcodedRe, (_m, p) => `http://localhost:\${INSTAR_PORT:-${p}}/`);
+                if (updated !== original) {
+                    fs.writeFileSync(skillFile, updated);
+                    result.upgraded.push(`skills/${name}/SKILL.md (hardcoded port -> \${INSTAR_PORT:-NNNN})`);
+                }
+            }
+            catch (err) {
+                result.errors.push(`skills/${name}/SKILL.md port migration: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+    }
     /**
      * Deploy any missing built-in skills (e.g., guardian job skills added after initial setup).
      * Non-destructive — only writes SKILL.md files that don't already exist.