opensquid 0.5.395

package/dist/runtime/hooks/memory_reconcile.js

@@ -0,0 +1,75 @@
+/**
+ * MAU.3 — session-boundary memory reconcile.
+ *
+ * Flushes a project's authored auto-memories into the long-term RAG at session
+ * end (import + refresh; NO delete — the no-auto-delete axiom
+ * [[memory-architecture-dual-surface-sync]]). The SessionEnd hook carries no
+ * cwd, so the dir is resolved from the cwd that PreToolUse recorded per session
+ * (`readSessionCwd`). Extracted from the hook bin so it's unit-testable with
+ * injected deps (the bin file runs `main()` on import).
+ *
+ * Failure policy: FAIL-LOUD (a silent reconcile failure is the exact drift this
+ * track prevents — surface it on stderr) but NEVER throw / block session end
+ * (hook fail-open contract). Engine-down → loud stderr, return cleanly.
+ *
+ * Imports from: node:fs/promises, node:os, node:path, ../../engine/client.js,
+ *   ../../setup/migrate/auto_memory_snapshot.js, ../paths.js, ../session_state.js.
+ * Imported by: src/runtime/hooks/session-end.ts; memory_reconcile.test.ts.
+ */
+import { stat } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { computeMemoryDrift, renderMemoryDrift } from '../../setup/migrate/memory_drift.js';
+import { snapshotAuto } from '../../setup/migrate/auto_memory_snapshot.js';
+import { makeMemoryStore } from '../../setup/migrate/memory_store_handle.js';
+import { OPENSQUID_HOME } from '../paths.js';
+import { readSessionCwd } from '../session_state.js';
+/**
+ * Encode a project path the way Claude Code names the auto-memory dir: every
+ * `/` → `-`. Mirrors `encodeProjectPath` in `src/setup/cli/memory.ts`; inlined
+ * (one line) so this module doesn't pull commander into the hook bundle.
+ */
+export function encodeProjectPath(projectPath) {
+    return projectPath.replace(/\//g, '-');
+}
+export async function reconcileMemoryOnSessionEnd(sessionId, deps = {}) {
+    const readCwd = deps.readCwd ?? readSessionCwd;
+    const root = deps.autoMemoryRoot ?? join(homedir(), '.claude', 'projects');
+    const storeFactory = deps.storeFactory ?? makeMemoryStore;
+    const home = deps.opensquidHome ?? OPENSQUID_HOME;
+    const err = deps.stderr ?? ((s) => void process.stderr.write(s));
+    try {
+        const cwd = await readCwd(sessionId);
+        if (cwd === null)
+            return; // no tool calls this session → nothing to resolve
+        const autoMemDir = join(root, encodeProjectPath(cwd), 'memory');
+        try {
+            await stat(autoMemDir);
+        }
+        catch {
+            return; // this project has no auto-memory dir → nothing to sync
+        }
+        const store = await storeFactory();
+        try {
+            const r = await snapshotAuto(autoMemDir, home(), store);
+            err(`opensquid: memory reconcile — imported ${String(r.imported)}, refreshed ${String(r.refreshed)}, skipped ${String(r.skipped)}, errors ${String(r.errors.length)}\n`);
+            // MF.1 (H1): the design's "loudly self-auditing" promise — a NON-empty drift AFTER
+            // reconcile means the sync did not converge (a real bug), so surface it LOUDLY. This
+            // is the automatic surface the original silent-drift failure lacked (the on-command
+            // `doctor memory` check was the only one). Runs before the `finally` close (engine
+            // still open); a throw here is caught by the outer catch → loud FAILED, never blocks.
+            const drift = await computeMemoryDrift(autoMemDir, store);
+            if (!drift.inSync) {
+                err(`opensquid: ${renderMemoryDrift(drift)} — post-reconcile drift (expected in-sync)\n`);
+            }
+        }
+        finally {
+            await store.close();
+        }
+    }
+    catch (e) {
+        // FAIL-LOUD, never block session end.
+        err(`opensquid: memory reconcile FAILED (engine down?) — ${String(e)}\n`);
+    }
+}
+//# sourceMappingURL=memory_reconcile.js.map

package/dist/runtime/hooks/memory_reconcile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory_reconcile.js","sourceRoot":"","sources":["../../../src/runtime/hooks/memory_reconcile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAoB,MAAM,4CAA4C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,SAAiB,EACjB,OAAsB,EAAE;IAExB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,eAAe,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,IAAI,cAAc,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAS,EAAQ,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,CAAC,kDAAkD;QAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,wDAAwD;QAClE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;YACxD,GAAG,CACD,0CAA0C,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CACpK,CAAC;YACF,mFAAmF;YACnF,qFAAqF;YACrF,oFAAoF;YACpF,mFAAmF;YACnF,sFAAsF;YACtF,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,GAAG,CAAC,cAAc,iBAAiB,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,sCAAsC;QACtC,GAAG,CAAC,uDAAuD,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC"}

package/dist/runtime/hooks/new_project_detect.d.ts

@@ -0,0 +1,35 @@
+/**
+ * T-CTX-LOOP CTX.4 (2026-05-29) — new-project detector.
+ *
+ * Fires inline at user-prompt-submit. Once per session — controlled by a
+ * marker file at `~/.opensquid/sessions/<sid>/.new-project-checked`. When
+ * the session's recorded cwd does NOT resolve to a known
+ * `~/.claude/projects/<encoded-cwd>/memory/` directory (Claude Code's
+ * per-project memory home), this module emits a one-paragraph
+ * additionalContext line proposing the agent surface the new project +
+ * route through CTX.0's verify-probe-gated `memorize` for global
+ * `~/.claude/CLAUDE.md` mind-map update.
+ *
+ * Per `[[project-opensquid-interconnected-communication-loop]]`: the
+ * cold-start LOAD position depends on the global mind-map's projects-index
+ * being current; CTX.4 closes the new-project edge case.
+ *
+ * Imports from: node:fs/promises, node:os, node:path, ../session_state.js.
+ * Imported by: src/runtime/hooks/user-prompt-submit.ts;
+ *   src/runtime/hooks/new_project_detect.test.ts.
+ */
+export interface NewProjectDetectDeps {
+    /** Defaults to `~/.claude/projects`. Test seam. */
+    claudeProjectsRoot?: string;
+    /** Defaults to `readSessionCwd`. Test seam. */
+    readCwd?: (sessionId: string) => Promise<string | null>;
+}
+/**
+ * Returns the additionalContext line to inject when a new project is
+ * detected for THIS session — or `null` when (a) the once-marker exists,
+ * (b) the cwd is unknown, or (c) the project's memory dir already exists.
+ * Always writes the once-marker before returning (so a follow-up call in
+ * the same session no-ops, regardless of outcome).
+ */
+export declare function detectNewProject(sessionId: string, deps?: NewProjectDetectDeps): Promise<string | null>;
+//# sourceMappingURL=new_project_detect.d.ts.map

package/dist/runtime/hooks/new_project_detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"new_project_detect.d.ts","sourceRoot":"","sources":["../../../src/runtime/hooks/new_project_detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAoBH,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,+CAA+C;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACzD;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,oBAAyB,GAC9B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA4CxB"}

package/dist/runtime/hooks/new_project_detect.js

@@ -0,0 +1,93 @@
+/**
+ * T-CTX-LOOP CTX.4 (2026-05-29) — new-project detector.
+ *
+ * Fires inline at user-prompt-submit. Once per session — controlled by a
+ * marker file at `~/.opensquid/sessions/<sid>/.new-project-checked`. When
+ * the session's recorded cwd does NOT resolve to a known
+ * `~/.claude/projects/<encoded-cwd>/memory/` directory (Claude Code's
+ * per-project memory home), this module emits a one-paragraph
+ * additionalContext line proposing the agent surface the new project +
+ * route through CTX.0's verify-probe-gated `memorize` for global
+ * `~/.claude/CLAUDE.md` mind-map update.
+ *
+ * Per `[[project-opensquid-interconnected-communication-loop]]`: the
+ * cold-start LOAD position depends on the global mind-map's projects-index
+ * being current; CTX.4 closes the new-project edge case.
+ *
+ * Imports from: node:fs/promises, node:os, node:path, ../session_state.js.
+ * Imported by: src/runtime/hooks/user-prompt-submit.ts;
+ *   src/runtime/hooks/new_project_detect.test.ts.
+ */
+import { mkdir, stat, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { OPENSQUID_HOME } from '../paths.js';
+import { readSessionCwd } from '../session_state.js';
+/** Mirror of memory_reconcile.ts:encodeProjectPath — inlined to avoid a
+ *  cross-hook import that would pull memory_reconcile's engine deps. */
+function encodeProjectPath(projectPath) {
+    return projectPath.replace(/\//g, '-');
+}
+/** Per-session once-marker path. */
+function markerPath(sessionId) {
+    return join(OPENSQUID_HOME(), 'sessions', sessionId, '.new-project-checked');
+}
+/**
+ * Returns the additionalContext line to inject when a new project is
+ * detected for THIS session — or `null` when (a) the once-marker exists,
+ * (b) the cwd is unknown, or (c) the project's memory dir already exists.
+ * Always writes the once-marker before returning (so a follow-up call in
+ * the same session no-ops, regardless of outcome).
+ */
+export async function detectNewProject(sessionId, deps = {}) {
+    const marker = markerPath(sessionId);
+    // Once-marker gate — best-effort read; absent → proceed.
+    try {
+        await stat(marker);
+        return null;
+    }
+    catch {
+        // ENOENT → first check this session
+    }
+    const cwd = await (deps.readCwd ?? readSessionCwd)(sessionId);
+    // Cwd not yet recorded (no tool calls before this prompt) — write marker
+    // anyway so we don't re-check every prompt; on next session the check fires
+    // fresh.
+    if (cwd === null) {
+        await writeMarker(marker);
+        return null;
+    }
+    const root = deps.claudeProjectsRoot ?? join(homedir(), '.claude', 'projects');
+    const projectMemoryDir = join(root, encodeProjectPath(cwd), 'memory');
+    let projectExists;
+    try {
+        await stat(projectMemoryDir);
+        projectExists = true;
+    }
+    catch {
+        projectExists = false;
+    }
+    await writeMarker(marker);
+    if (projectExists)
+        return null;
+    // Compose the additionalContext line. Verbatim verify is the agent's
+    // job — the proposal text routes the user through CTX.0's gate.
+    return (`[opensquid CTX.4 — new project detected]\n` +
+        `cwd: ${cwd}\n` +
+        `No memory dir at ${projectMemoryDir} — Claude Code hasn't seen this project before.\n` +
+        `Propose adding to the global mind-map (\`~/.claude/CLAUDE.md\`): ` +
+        `path + 1-line purpose + relationships to known projects. ` +
+        `Route the write through \`mcp__opensquid__memorize\` (verify-probe-gated; user must confirm verbatim).`);
+}
+async function writeMarker(path) {
+    try {
+        await mkdir(join(path, '..'), { recursive: true });
+        await writeFile(path, '', 'utf8');
+    }
+    catch {
+        // marker write is best-effort; a write failure means the next prompt
+        // will re-check — not a correctness problem, just a slightly noisier
+        // session if the underlying issue persists.
+    }
+}
+//# sourceMappingURL=new_project_detect.js.map

package/dist/runtime/hooks/new_project_detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"new_project_detect.js","sourceRoot":"","sources":["../../../src/runtime/hooks/new_project_detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD;wEACwE;AACxE,SAAS,iBAAiB,CAAC,WAAmB;IAC5C,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,oCAAoC;AACpC,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,IAAI,CAAC,cAAc,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,sBAAsB,CAAC,CAAC;AAC/E,CAAC;AASD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,OAA6B,EAAE;IAE/B,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACrC,yDAAyD;IACzD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9D,yEAAyE;IACzE,4EAA4E;IAC5E,SAAS;IACT,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC/E,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IAEtE,IAAI,aAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,GAAG,KAAK,CAAC;IACxB,CAAC;IAED,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAE1B,IAAI,aAAa;QAAE,OAAO,IAAI,CAAC;IAE/B,qEAAqE;IACrE,gEAAgE;IAChE,OAAO,CACL,4CAA4C;QAC5C,QAAQ,GAAG,IAAI;QACf,oBAAoB,gBAAgB,mDAAmD;QACvF,mEAAmE;QACnE,2DAA2D;QAC3D,wGAAwG,CACzG,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,qEAAqE;QACrE,4CAA4C;IAC9C,CAAC;AACH,CAAC"}

package/dist/runtime/hooks/permission_decision.d.ts

@@ -0,0 +1,34 @@
+/**
+ * PreToolUse permission-decision envelope (T-RJ-FOLLOWUPS FU.11).
+ *
+ * A PreToolUse hook signals a block in one of two ways:
+ *   - `exit 2` — the simple path, BUT `--dangerously-skip-permissions`
+ *     (= `bypassPermissions` mode) silently IGNORES it (proven live: a
+ *     `git commit` the gate should block ran anyway).
+ *   - a `permissionDecision: "deny"` JSON envelope on stdout (exit 0) — HONORED
+ *     even under `bypassPermissions` (proven live: the call was denied).
+ *
+ * So opensquid emits the JSON envelope on every block, making drift gates
+ * enforce in BOTH normal and bypass permission modes. Pure builder so the shape
+ * is unit-testable without spawning the hook bin.
+ */
+export interface PreToolUseDeny {
+    hookSpecificOutput: {
+        hookEventName: 'PreToolUse';
+        permissionDecision: 'deny';
+        permissionDecisionReason: string;
+    };
+}
+/**
+ * Every drift/block message opensquid emits to the user carries a leading 🦑 so
+ * it's unmistakably opensquid speaking — NOT the agent's own prose, NOT a chat
+ * message (chat replies via chat_send are deliberately unprefixed). Added HERE at
+ * the hook EMIT boundary (not in the dispatcher/verdict layer) so skill YAML
+ * `message:` fields stay clean and the dispatch internals stay emoji-free.
+ * Idempotent; empty string passes through untouched (nothing to surface).
+ */
+export declare const SQUID = "\uD83E\uDD91";
+export declare function squidPrefix(message: string): string;
+/** Build the deny envelope; falls back to a generic reason when none is given. */
+export declare function buildPreToolUseDeny(reason: string): PreToolUseDeny;
+//# sourceMappingURL=permission_decision.d.ts.map

package/dist/runtime/hooks/permission_decision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission_decision.d.ts","sourceRoot":"","sources":["../../../src/runtime/hooks/permission_decision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,cAAc;IAC7B,kBAAkB,EAAE;QAClB,aAAa,EAAE,YAAY,CAAC;QAC5B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,wBAAwB,EAAE,MAAM,CAAC;KAClC,CAAC;CACH;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,KAAK,iBAAO,CAAC;AAC1B,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGnD;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAUlE"}

package/dist/runtime/hooks/permission_decision.js

@@ -0,0 +1,39 @@
+/**
+ * PreToolUse permission-decision envelope (T-RJ-FOLLOWUPS FU.11).
+ *
+ * A PreToolUse hook signals a block in one of two ways:
+ *   - `exit 2` — the simple path, BUT `--dangerously-skip-permissions`
+ *     (= `bypassPermissions` mode) silently IGNORES it (proven live: a
+ *     `git commit` the gate should block ran anyway).
+ *   - a `permissionDecision: "deny"` JSON envelope on stdout (exit 0) — HONORED
+ *     even under `bypassPermissions` (proven live: the call was denied).
+ *
+ * So opensquid emits the JSON envelope on every block, making drift gates
+ * enforce in BOTH normal and bypass permission modes. Pure builder so the shape
+ * is unit-testable without spawning the hook bin.
+ */
+/**
+ * Every drift/block message opensquid emits to the user carries a leading 🦑 so
+ * it's unmistakably opensquid speaking — NOT the agent's own prose, NOT a chat
+ * message (chat replies via chat_send are deliberately unprefixed). Added HERE at
+ * the hook EMIT boundary (not in the dispatcher/verdict layer) so skill YAML
+ * `message:` fields stay clean and the dispatch internals stay emoji-free.
+ * Idempotent; empty string passes through untouched (nothing to surface).
+ */
+export const SQUID = '🦑';
+export function squidPrefix(message) {
+    if (message.length === 0)
+        return message;
+    return message.trimStart().startsWith(SQUID) ? message : `${SQUID} ${message}`;
+}
+/** Build the deny envelope; falls back to a generic reason when none is given. */
+export function buildPreToolUseDeny(reason) {
+    return {
+        hookSpecificOutput: {
+            hookEventName: 'PreToolUse',
+            permissionDecision: 'deny',
+            permissionDecisionReason: squidPrefix(reason.length > 0 ? reason : 'opensquid: blocked by a drift gate'),
+        },
+    };
+}
+//# sourceMappingURL=permission_decision.js.map

package/dist/runtime/hooks/permission_decision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission_decision.js","sourceRoot":"","sources":["../../../src/runtime/hooks/permission_decision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAUH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC;AAC1B,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,OAAO,OAAO,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC;AACjF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO;QACL,kBAAkB,EAAE;YAClB,aAAa,EAAE,YAAY;YAC3B,kBAAkB,EAAE,MAAM;YAC1B,wBAAwB,EAAE,WAAW,CACnC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oCAAoC,CAClE;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/hooks/post-tool-use.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=post-tool-use.d.ts.map

package/dist/runtime/hooks/post-tool-use.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-tool-use.d.ts","sourceRoot":"","sources":["../../../src/runtime/hooks/post-tool-use.ts"],"names":[],"mappings":""}

package/dist/runtime/hooks/post-tool-use.js

@@ -0,0 +1,97 @@
+#!/usr/bin/env node
+/**
+ * Claude Code `PostToolUse` hook binary (T-POSTPUSH POSTPUSH.1, 2026-05-29).
+ *
+ * Fires AFTER a tool call completes. Mirrors the pre-tool-use bin shape but
+ * carries the tool's exit code so gate skills can react to success/failure
+ * (canonical case = `verify-ci-after-push` fires only on
+ * `^git\s+(?:-[cC]\s+\S+\s+)*push\b` with exit_code === 0).
+ *
+ * Wired in `~/.claude/settings.json`:
+ *
+ *   { "hooks": { "PostToolUse": [{ "matcher": "Bash",
+ *     "hooks": [{ "type": "command",
+ *       "command": "opensquid-hook-posttooluse" }] }] } }
+ *
+ * stdin = Claude Code's post-tool-use JSON (includes `tool_result` with
+ * `exit_code`, `stdout`, `stderr`). exit code 0 = no surface; 2 reserved
+ * for future block-style verdicts (not used today — PostToolUse is too
+ * late to block).
+ *
+ * Payload normalization: Claude Code uses snake_case nested under
+ * `tool_result`; we flatten to the Event schema's top-level
+ * `exit_code` / `stdout` / `stderr`.
+ *
+ * Active-task mirror NOT re-fired from this hook — PreToolUse already
+ * handles that surface; double-firing would duplicate writes.
+ *
+ * Fail-open: any internal crash exits 0 with a stderr message.
+ */
+import { buildRegistry, loadActivePacks } from '../bootstrap.js';
+import { Event } from '../types.js';
+import { dispatchEvent } from './dispatch.js';
+import { extractSessionId } from './session_id.js';
+function parsePayload(raw) {
+    const obj = JSON.parse(raw);
+    // Claude Code nests result fields under `tool_result`; the runtime Event
+    // schema flattens them. Accept either form; prefer `tool_result.*` because
+    // that's the canonical Claude Code shape per the documented PostToolUse
+    // payload (claude-code-guide 2026-05-29 confirmation).
+    const result = obj.tool_result ?? {};
+    return {
+        kind: 'post_tool_call',
+        tool: obj.tool ?? obj.tool_name ?? '',
+        args: obj.args ?? obj.tool_input ?? {},
+        exit_code: result.exit_code ?? obj.exit_code ?? 0,
+        ...(result.stdout !== undefined || obj.stdout !== undefined
+            ? { stdout: result.stdout ?? obj.stdout }
+            : {}),
+        ...(result.stderr !== undefined || obj.stderr !== undefined
+            ? { stderr: result.stderr ?? obj.stderr }
+            : {}),
+        ...(obj.cwd !== undefined ? { cwd: obj.cwd } : {}),
+        ...(result.duration_ms !== undefined || obj.duration_ms !== undefined
+            ? { duration_ms: result.duration_ms ?? obj.duration_ms }
+            : {}),
+    };
+}
+async function readStdin() {
+    let data = '';
+    for await (const chunk of process.stdin)
+        data += chunk;
+    return data;
+}
+async function main() {
+    const raw = await readStdin();
+    if (!raw.trim()) {
+        process.stderr.write('opensquid: empty PostToolUse payload — proceeding\n');
+        process.exit(0);
+    }
+    let normalized;
+    try {
+        normalized = parsePayload(raw);
+    }
+    catch (e) {
+        process.stderr.write(`opensquid: invalid PostToolUse JSON — ${String(e)}\n`);
+        process.exit(0);
+    }
+    const parsed = Event.safeParse(normalized);
+    if (!parsed.success) {
+        process.stderr.write('opensquid: invalid PostToolUse payload schema\n');
+        process.exit(0);
+    }
+    const sessionId = extractSessionId(raw);
+    const packs = await loadActivePacks(sessionId);
+    const registry = await buildRegistry();
+    const { exitCode, stderr } = await dispatchEvent(parsed.data, packs, registry, sessionId);
+    if (stderr)
+        process.stderr.write(stderr + '\n');
+    // PostToolUse is too late to block the tool call (already ran). Treat any
+    // non-zero exit as informational stderr only.
+    process.exit(exitCode === 2 ? 0 : exitCode);
+}
+main().catch((e) => {
+    process.stderr.write(`opensquid hook crash (post-tool-use): ${String(e)}\n`);
+    process.exit(0);
+});
+//# sourceMappingURL=post-tool-use.js.map

package/dist/runtime/hooks/post-tool-use.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-tool-use.js","sourceRoot":"","sources":["../../../src/runtime/hooks/post-tool-use.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAoBnD,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;IAClD,yEAAyE;IACzE,2EAA2E;IAC3E,wEAAwE;IACxE,uDAAuD;IACvD,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IACrC,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE;QACrC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE;QACtC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC;QACjD,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YACzD,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE;YACzC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YACzD,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE;YACzC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;YACnE,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,EAAE;YACxD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,IAAI,IAAI,KAAe,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,UAAmB,CAAC;IACxB,IAAI,CAAC;QACH,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;IACvC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1F,IAAI,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChD,0EAA0E;IAC1E,8CAA8C;IAC9C,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;IAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/runtime/hooks/pre-tool-use.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=pre-tool-use.d.ts.map

package/dist/runtime/hooks/pre-tool-use.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-tool-use.d.ts","sourceRoot":"","sources":["../../../src/runtime/hooks/pre-tool-use.ts"],"names":[],"mappings":""}

package/dist/runtime/hooks/pre-tool-use.js

@@ -0,0 +1,169 @@
+#!/usr/bin/env node
+/**
+ * Claude Code `PreToolUse` hook binary.
+ *
+ * Wired in `~/.claude/settings.json` (or per-project `.claude/settings.json`):
+ *
+ *   { "hooks": { "PreToolUse": [{ "matcher": "Bash",
+ *     "hooks": [{ "type": "command",
+ *       "command": "opensquid-hook-pretooluse" }] }] } }
+ *
+ * stdin = Claude Code's tool-call JSON. stdout = empty. stderr = drift
+ * messages (shown to the user/agent). exit code 0 = allow, 2 = block.
+ *
+ * Payload normalization: Claude Code may use snake_case (`tool_name`,
+ * `tool_input`, `session_id`); the runtime Event schema uses camelCase. We
+ * normalize in `parsePayload` BEFORE handing to Zod so the schema stays pure.
+ *
+ * Fail-open: any internal crash exits 0 with a stderr message. NEVER block
+ * the parent agent because of an opensquid bug. The `main().catch()` at the
+ * bottom is the last line of defense.
+ */
+import { buildRegistry, loadActivePacks } from '../bootstrap.js';
+import { parseApplyPatch } from './apply_patch.js';
+import { appendTool, recordSessionCwd } from '../session_state.js';
+import { Event } from '../types.js';
+import { mirrorActiveTask } from './active_task_mirror.js';
+import { dispatchEvent } from './dispatch.js';
+import { buildPreToolUseDeny, emitDriftStderrAndExit } from './hook_output.js';
+import { extractSessionId } from './session_id.js';
+/** ATM.1: the session transcript path (where THIS CC version stores the task list). */
+function extractTranscriptPath(raw) {
+    try {
+        const obj = JSON.parse(raw);
+        const p = obj.transcript_path ?? obj.transcriptPath;
+        return typeof p === 'string' && p.length > 0 ? p : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function parsePayload(raw) {
+    const obj = JSON.parse(raw);
+    // Claude Code uses snake_case (tool_name / tool_input). Normalize to the
+    // runtime Event shape (tool / args). Either form accepted.
+    return {
+        kind: 'tool_call',
+        tool: obj.tool ?? obj.tool_name ?? '',
+        args: obj.args ?? obj.tool_input ?? {},
+        ...(obj.cwd !== undefined ? { cwd: obj.cwd } : {}),
+    };
+}
+async function readStdin() {
+    let data = '';
+    for await (const chunk of process.stdin)
+        data += chunk;
+    return data;
+}
+async function main() {
+    const raw = await readStdin();
+    if (!raw.trim()) {
+        process.stderr.write('opensquid: empty PreToolUse payload — proceeding\n');
+        process.exit(0);
+    }
+    let normalized;
+    try {
+        normalized = parsePayload(raw);
+    }
+    catch (e) {
+        process.stderr.write(`opensquid: invalid PreToolUse JSON — ${String(e)}\n`);
+        process.exit(0);
+    }
+    const parsed = Event.safeParse(normalized);
+    if (!parsed.success) {
+        process.stderr.write('opensquid: invalid PreToolUse payload schema\n');
+        process.exit(0);
+    }
+    const sessionId = extractSessionId(raw);
+    // G.5 — append this tool name to the session's per-turn ledger BEFORE
+    // dispatching. Best-effort: a ledger-write failure must never block the
+    // pending tool call (fail-open guarantee of the hook bin). The Stop-event
+    // freshness rule reads this ledger via `session_tool_history`.
+    if (parsed.data.kind === 'tool_call') {
+        try {
+            const cmd = parsed.data.args.command;
+            await appendTool(sessionId, parsed.data.tool, typeof cmd === 'string' ? cmd : undefined);
+        }
+        catch (e) {
+            process.stderr.write(`opensquid: tool-ledger append failed — ${String(e)}\n`);
+        }
+        // MAU.3 — record the session cwd so the SessionEnd memory reconcile can
+        // resolve this project's auto-memory dir (SessionEnd carries no cwd).
+        if (parsed.data.cwd !== undefined && parsed.data.cwd !== '') {
+            try {
+                await recordSessionCwd(sessionId, parsed.data.cwd);
+            }
+            catch (e) {
+                process.stderr.write(`opensquid: session-cwd record failed — ${String(e)}\n`);
+            }
+        }
+        // AP.1 — mirror the harness task store into active-task.json (the
+        // tasks-loaded signal the gate-set keys off). Best-effort, like the writes
+        // above: a mirror failure must never block the pending tool call.
+        try {
+            await mirrorActiveTask(sessionId, parsed.data.tool, parsed.data.args ?? {}, undefined, extractTranscriptPath(raw));
+        }
+        catch (e) {
+            process.stderr.write(`opensquid: active-task mirror failed — ${String(e)}\n`);
+        }
+        // Workflow stage advancement is no longer hardcoded here — the opt-in
+        // `coding-flow` pack's scope-lifecycle skill catches these same
+        // milestone writes (research artifact / track spec / TaskCreate provenance)
+        // through the dispatcher and advances its lifecycle FSM. See
+        // T-FSM-UNIFY.
+    }
+    const packs = await loadActivePacks(sessionId);
+    const registry = await buildRegistry();
+    // CHS.2 — codex's file-edit tool is `apply_patch` (patch text in
+    // args.command); no pack rule matches that name. Normalize: ONE
+    // synthesized single-path Write per touched file (every PATH predicate
+    // dialect sees a normal file_path; Add carries TRUE final content,
+    // Update/Delete a labeled hunk diff — never silently-stale). First deny
+    // wins (the FU.11 envelope); all-allow → clean exit. Zero parsed paths →
+    // fall through untouched (fail-open for unknown envelope variants).
+    if (parsed.data.kind === 'tool_call' && parsed.data.tool === 'apply_patch') {
+        const cmd = parsed.data.args.command;
+        const patched = typeof cmd === 'string' ? parseApplyPatch(cmd) : [];
+        if (patched.length > 0) {
+            for (const f of patched) {
+                const synth = {
+                    ...parsed.data,
+                    // Deliberately Write for ALL kinds: effective_content must take
+                    // the args.content branch, never the stale-file Edit branch.
+                    tool: 'Write',
+                    args: { file_path: f.path, content: f.content, apply_patch_command: cmd },
+                };
+                const r = await dispatchEvent(synth, packs, registry, sessionId);
+                if (r.exitCode === 2) {
+                    process.stdout.write(JSON.stringify(buildPreToolUseDeny(r.stderr, '')));
+                    process.exit(0);
+                }
+                if (r.stderr)
+                    process.stderr.write(r.stderr + '\n');
+            }
+            process.exit(0); // every touched path allowed
+        }
+    }
+    const { exitCode, stderr } = await dispatchEvent(parsed.data, packs, registry, sessionId);
+    // T-RJ-FOLLOWUPS FU.11: a block must be signalled as a PreToolUse
+    // `permissionDecision: "deny"` JSON decision, NOT a bare `exit 2`. Proven live:
+    // under `--dangerously-skip-permissions` (= bypassPermissions) Claude Code
+    // IGNORES a hook's `exit 2` (the tool runs anyway), but it HONORS a
+    // `permissionDecision: "deny"` envelope. Emitting the JSON (exit 0) makes drift
+    // gates enforce in BOTH normal and bypass modes. Gated strictly on
+    // `exitCode === 2` so a non-block never accidentally denies the tool.
+    if (exitCode === 2) {
+        // Forward guidance now comes from the blocking gate's own message + the
+        // coding-flow pack's handoff directives (no global chain forward-map).
+        const guidance = '';
+        process.stdout.write(JSON.stringify(buildPreToolUseDeny(stderr, guidance)));
+        process.exit(0);
+    }
+    emitDriftStderrAndExit(exitCode, stderr);
+}
+main().catch((e) => {
+    // Fail-open: never crash the parent agent on opensquid's own bug.
+    process.stderr.write(`opensquid hook crash (pre-tool-use): ${String(e)}\n`);
+    process.exit(0);
+});
+//# sourceMappingURL=pre-tool-use.js.map

package/dist/runtime/hooks/pre-tool-use.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-tool-use.js","sourceRoot":"","sources":["../../../src/runtime/hooks/pre-tool-use.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAYnD,uFAAuF;AACvF,SAAS,qBAAqB,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QACjD,MAAM,CAAC,GAAG,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,cAAc,CAAC;QACpD,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;IACjD,yEAAyE;IACzE,2DAA2D;IAC3D,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE;QACrC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE;QACtC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,IAAI,IAAI,KAAe,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,UAAmB,CAAC;IACxB,IAAI,CAAC;QACH,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,sEAAsE;IACtE,wEAAwE;IACxE,0EAA0E;IAC1E,+DAA+D;IAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAI,MAAM,CAAC,IAAI,CAAC,IAA8B,CAAC,OAAO,CAAC;YAChE,MAAM,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC;QACD,wEAAwE;QACxE,sEAAsE;QACtE,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;YAC5D,IAAI,CAAC;gBACH,MAAM,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QACD,kEAAkE;QAClE,2EAA2E;QAC3E,kEAAkE;QAClE,IAAI,CAAC;YACH,MAAM,gBAAgB,CACpB,SAAS,EACT,MAAM,CAAC,IAAI,CAAC,IAAI,EAChB,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EACtB,SAAS,EACT,qBAAqB,CAAC,GAAG,CAAC,CAC3B,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC;QACD,sEAAsE;QACtE,gEAAgE;QAChE,4EAA4E;QAC5E,6DAA6D;QAC7D,eAAe;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;IAEvC,iEAAiE;IACjE,gEAAgE;IAChE,uEAAuE;IACvE,mEAAmE;IACnE,wEAAwE;IACxE,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3E,MAAM,GAAG,GAAI,MAAM,CAAC,IAAI,CAAC,IAA8B,CAAC,OAAO,CAAC;QAChE,MAAM,OAAO,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG;oBACZ,GAAG,MAAM,CAAC,IAAI;oBACd,gEAAgE;oBAChE,6DAA6D;oBAC7D,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,mBAAmB,EAAE,GAAG,EAAE;iBAC1E,CAAC;gBACF,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACjE,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;oBACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,IAAI,CAAC,CAAC,MAAM;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B;QAChD,CAAC;IACH,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1F,kEAAkE;IAClE,gFAAgF;IAChF,2EAA2E;IAC3E,oEAAoE;IACpE,gFAAgF;IAChF,mEAAmE;IACnE,sEAAsE;IACtE,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,QAAQ,GAAG,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;IAC1B,kEAAkE;IAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}