trace-to-skill 0.1.38 → 0.1.40

package/dist/src/rules.js

@@ -77,6 +77,20 @@ const RULES = [
         ],
         suggestedRule: "Redact secrets in traces and never paste API keys, tokens, or credentials into agent-visible logs or PR comments."
     },
+    {
+        kind: "sensitive_file_access",
+        severity: "high",
+        title: "Sensitive file entered agent context",
+        why: "Agents should not read, attach, diff, or index credential files, private keys, package auth files, local databases, or production secrets unless a maintainer explicitly approved a minimal redacted excerpt.",
+        patterns: [
+            /\b(cat|open|read|view|attach|upload|include|index|scan|copy|less|tail|sed\s+-n)\b.{0,120}(?:^|[\s"'`=:/~])(\.env(?:\.[A-Za-z0-9_-]+)?|id_rsa|id_ed25519|\.npmrc|\.pypirc|\.netrc|\.aws\/credentials|\.ssh\/config|\.kube\/config|\.docker\/config\.json|\.pgpass|\.sentryclirc|\.mobileprovision|\.p12|\.pem|\.key|\.sqlite|\.db|production\.json|secrets?\.ya?ml)\b/i,
+            /\bdiff --git a\/(?:\.env(?:\.[A-Za-z0-9_-]+)?|.*(?:secret|credential|private).*\.(?:json|ya?ml|toml|env)|.*\.(?:pem|key|p12|mobileprovision|sqlite|db))\b/i,
+            /\b(BEGIN (?:OPENSSH|RSA|DSA|EC|PRIVATE) PRIVATE KEY|PRIVATE KEY-----)\b/i,
+            /\b(Codex|agent|assistant)\b.{0,160}\b(read|opened|attached|indexed|uploaded)\b.{0,120}\b(sensitive files?|\.env|private keys?|credentials?|secrets?)\b/i
+        ],
+        suggestedRule: "Before running an agent, exclude sensitive files such as .env, private keys, package auth files, cloud credentials, local databases, and production secret manifests; share only minimal redacted excerpts when maintainer-approved.",
+        suggestedSkill: "sensitive-file-triage"
+    },
     {
         kind: "hidden_unicode",
         severity: "high",
@@ -138,6 +152,143 @@ const RULES = [
         ],
         suggestedRule: "When Codex sandbox or permission setup fails, capture the OS, Codex version, sandbox_mode, approval_policy, exact stderr, workspace ownership/ACL evidence, and whether a clean directory can run a simple command plus apply_patch."
     },
+    {
+        kind: "codex_connectivity",
+        severity: "high",
+        title: "Codex auth or connectivity failure",
+        why: "Codex login, ChatGPT transport, proxy, CA, IPv6, and Cloudflare challenge failures are hard to triage unless traces preserve the exact endpoint, client, network environment, and local certificate/DNS evidence.",
+        patterns: [
+            /\btoken_exchange_failed\b/i,
+            /\bToken exchange (?:failed|error)\b.{0,160}\bauth\.openai\.com\/oauth\/token\b/i,
+            /\bcodex_login::server\b.{0,180}\b(oauth token exchange transport failure|login callback token exchange failed)\b/i,
+            /\bauth\.openai\.com\/api\/accounts\/deviceauth\/usercode\b/i,
+            /\bcf-mitigated:\s*challenge\b/i,
+            /\bCloudflare\b.{0,120}\b(challenge|WAF|mitigated)\b/i,
+            /\bCODEX_CA_CERTIFICATE\b|\bSSL_CERT_FILE\b/i,
+            /\bca-certificates\b|\bupdate-ca-certificates\b/i,
+            /\bIPv6\b.{0,160}\b(auth\.openai\.com|broken|hangs|no fallback|curl -6)\b/i,
+            /\bproxy\b.{0,160}\b(TLS|certificate|MITM|CONNECT|auth\.openai\.com|chatgpt\.com)\b/i,
+            /\bstream disconnected before completion\b.{0,180}\b(chatgpt\.com\/backend-api\/codex\/responses(?!\/compact)|Transport error|error decoding response body|network error)\b/i,
+            /\bReconnecting\.{3}\s*\d+\/\d+\b.{0,160}\b(stream disconnected|chatgpt\.com\/backend-api\/codex\/responses(?!\/compact))\b/i
+        ],
+        suggestedRule: "When Codex auth or connectivity fails, capture the client/app version, OS/container/proxy/VPN state, endpoint URL, exact error, DNS IPv4/IPv6 results, curl -4/-6 checks, CA variables, ca-certificates/update-ca-certificates status, and whether API-key, browser login, and device-auth paths differ.",
+        suggestedSkill: "codex-connectivity-triage"
+    },
+    {
+        kind: "codex_remote_control",
+        severity: "high",
+        title: "Codex remote-control route health failure",
+        why: "Codex mobile, SSH remote, and desktop remote-control failures can look connected while commands route through stale listeners, stale enrollments, missing helper bundles, or mismatched workspace/session state.",
+        patterns: [
+            /\bremote[- ]control\b.{0,180}\b(stale|listener|server_name|enrollment|14567|websocket|waiting for desktop|Directory Unavailable)\b/i,
+            /\bremote[- ]control\b.{0,100}\bconnected\b.{0,100}\b(stale|weak|not enough|cannot|failed|missing)\b/i,
+            /\bWaiting for desktop\b/i,
+            /\bDirectory:\s*Unavailable\b/i,
+            /\b127\.0\.0\.1:14567\b/i,
+            /\bstale\b.{0,120}\b(server_name|listener|remote-control|enrollment|cached binary|cache directory|helper path)\b/i,
+            /\b(cache directory|cached binary|bundle_complete|helper-file completeness)\b.{0,180}\b(codex\.exe|codex-windows-sandbox-setup\.exe|codex-command-runner\.exe|missing|incomplete)\b/i,
+            /\bcodex-windows-sandbox-setup\.exe\b.{0,120}\b(missing|not found|cannot spawn|spawn)\b/i,
+            /\bremoteControl\/status\/read\b/i,
+            /\bbackend environments\b.{0,120}\b(empty|returns empty|unavailable)\b/i,
+            /\bAndroid\b.{0,180}\b(Codex Mobile|Directory Unavailable|does not show|fails to open|re-pairing|revoking)\b/i,
+            /\bmobile\b.{0,180}\b(pairing|fails to connect|waiting for desktop|command id|listener|remote route|session list stays stale)\b/i,
+            /\bapp-server-control\.sock\b.{0,160}\b(remote|SSH|mobile|sshd-session|nc -U)\b/i
+        ],
+        suggestedRule: "When Codex remote-control or mobile routing fails, capture desktop/app/CLI versions, mobile OS/app version, host id, remote-control status, listener pid/executable path, bound port, cache directory id, helper bundle completeness, active server_name/enrollment, workspace root, last mobile command id, and whether re-pairing or restarting the listener changes the route.",
+        suggestedSkill: "codex-remote-control-triage"
+    },
+    {
+        kind: "codex_mcp_runtime",
+        severity: "high",
+        title: "Codex MCP runtime or routing failure",
+        why: "MCP tools can be correctly configured and still fail at runtime because Codex cancels non-interactive approvals, loses tool namespaces, routes to an unsupported callable name, or reuses a closed stdio transport.",
+        patterns: [
+            /\buser cancelled MCP tool call\b/i,
+            /\brequest_user_input is not supported in exec mode\b/i,
+            /\bApprove app tool call\?\b/i,
+            /\btool_call_mcp_elicitation\b.{0,120}\b(true|default-on|stable|enabled)\b/i,
+            /\bmaybe_request_mcp_tool_approval\b/i,
+            /\bunsupported call:\s*mcp__[A-Za-z0-9_-]+__[A-Za-z0-9_-]+\b/i,
+            /\btools\/list\b.{0,160}\b(runtime routes|unsupported call|manual tools\/call success|ToolRouter|canonical_tool_name)\b/i,
+            /\bnamespaced MCP tool calls?\b.{0,180}\b(fail|drops namespace|un-namespaced|deferred tool discovery|replay)\b/i,
+            /\bfunction_call\b.{0,180}\b(namespace|serverName)\b.{0,120}\b(drop|missing|omitted|lost)\b/i,
+            /\btool call failed for `[^`]+`\b.{0,160}\bTransport closed\b/i,
+            /\bTransport closed\b.{0,160}\b(MCP|stdio|rmcp|server exits|stale stdio client|reinitialize|retry)\b/i,
+            /\bStdioServerTransport\b.{0,180}\b(stdin_end|stdin_close|transport_close|parent_gone|stderr backpressure)\b/i
+        ],
+        suggestedRule: "When a Codex MCP tool fails at runtime, capture the Codex version, MCP server name and transport, tool name, exposed callable name, whether tools/list and manual tools/call succeed, approval_policy, sandbox mode, exec/non-interactive mode, elicitation setting, namespace/serverName metadata, exact item.started/item.completed JSONL, stderr/backpressure evidence, and whether restarting or reinitializing the MCP transport changes the result.",
+        suggestedSkill: "codex-mcp-runtime-triage"
+    },
+    {
+        kind: "codex_session_state",
+        severity: "high",
+        title: "Codex session resume or state failure",
+        why: "Large local session histories, resume compression, archived chat loading, and state-store migrations can strand long-running Codex work unless reports preserve the exact session size, state files, latency, and recovery path.",
+        patterns: [
+            /\bcodex resume\b.{0,160}\b(interactive picker|picker)\b.{0,160}\b(hangs?|freezes?|unresponsive|Enter has no effect|works fine)\b/i,
+            /\bcodex resume\s+<?id>?\b.{0,180}\b(works|bypasses|workaround)\b/i,
+            /\brollout[-_].{0,120}\b\d{1,3}(?:\.\d+)?\s*MB\b/i,
+            /\b\d{1,3}(?:,\d{3})+\s+JSONL lines\b/i,
+            /\b(input_image|response_item|event_msg|function_call) records\b.{0,160}\b(thread|rollout|history|session)\b/i,
+            /\bthread\/resume\b.{0,80}\b\d{3,6}\s*ms\b/i,
+            /\bthread\/goal\/get\b.{0,80}\b\d{3,6}\s*ms\b/i,
+            /\bCodex Desktop\b.{0,180}\b(sluggish|freezing-like|extremely slow|unresponsive|high app-server\/renderer CPU|large local thread)\b/i,
+            /\bCould not load archived chats\b/i,
+            /\bcontext compression\b.{0,180}\b(drops recent|last 3-5 turns|recent conversation context|amnesic|cannot continue)\b/i,
+            /\bcodex resume\b.{0,180}\b(drops recent|last 3-5 turns|recent conversation context|cannot continue)\b/i,
+            /\bstate_5\.sqlite\b.{0,180}\b(thread_goals|drop thread goals|no such table|migration)\b/i,
+            /\bgoals_1\.sqlite\b.{0,180}\b(thread_goals|empty|migration)\b/i,
+            /\bno such table:\s*thread_goals\b/i,
+            /\bprojectless-thread-ids\b.{0,180}\b(restored|returned|orphaned|projectless)\b/i,
+            /\bthread-workspace-root-hints\b.{0,180}\b(restored|returned|stale|projectless)\b/i
+        ],
+        suggestedRule: "When Codex session resume or local state fails, capture app/CLI version, OS, session/thread id, rollout JSONL size, line and record counts, largest line size, image/tool-output counts, thread/resume and thread/goal/get timings, renderer/app-server CPU and memory, affected SQLite/global-state files and migration versions, whether codex resume <id> works, whether a new thread works, and any backup or restore steps before editing local state.",
+        suggestedSkill: "codex-session-state-triage"
+    },
+    {
+        kind: "codex_token_burn",
+        severity: "high",
+        title: "Codex token burn or usage-drain loop",
+        why: "Unexpected Codex usage drain can come from background polling, idle app activity, compaction/retry overhead, subagent fan-out, fast-mode drift, or repeated cached-context turns, and reports need attribution evidence instead of only a quota percentage.",
+        patterns: [
+            /\btokens?\b.{0,120}\b(burning|burned|burnt|burn through|burning very fast|draining|drain|usage drop|usage drops)\b/i,
+            /\busage\b.{0,160}\b(burn(?:ing|ed)?|drain(?:ing|ed)?|deplet(?:e|ed|ing)|consum(?:e|ed|ing) (?:very )?fast|drops? by \d{1,3}%|dropped to \d{1,3}%)\b/i,
+            /\bweekly (?:usage|limit|allowance)\b.{0,180}\b(deplet(?:e|ed|ing)|burn(?:ed|ing)?|drain(?:ed|ing)?|exhaust(?:ed|ing)?|almost fully depleted)\b/i,
+            /\b5[- ]?hour\b.{0,160}\b(limit|usage)\b.{0,160}\b(0%|consumed|used all|drain|burn)\b/i,
+            /\b(input|cached input|output|reasoning|total)\s*=\s*[\d,]+\b.{0,160}\b(cached|tokens?|usage|burn|drain)\b/i,
+            /\bwrite_stdin\b.{0,180}\b(empty poll|polling|polls?|full API|full history|complete conversation history|cached tokens?)\b/i,
+            /\bbackground (?:process|task|terminal|command)\b.{0,180}\b(polling|write_stdin|full API|full history|tokens?|usage|wastes?|burns?)\b/i,
+            /\b(no new output|process still running|still waiting)\b.{0,180}\b(model|LLM|API|token|usage|poll|write_stdin|history)\b/i,
+            /\bCodex\b.{0,160}\b(used all|using daily usage|usage even when it is not doing anything|just by being open|idle)\b/i,
+            /\bcompaction\b.{0,180}\b(tax|wastes?|usage|tokens?|drain|loop|failed|restart|re-explain|reconstruct)\b/i,
+            /\b(fast mode|large context window|multi_agent|subagents?|\/review|AGENTS\.md|MCPs?|skills)\b.{0,180}\b(usage|tokens?|burn|drain|higher|expensive)\b/i,
+            /\bcached tokens?\b.{0,160}\b(charg(?:e|ed|ing)|cost|spend|ratio|input|burn|usage)\b/i,
+            /\busage attribution\b.{0,180}\b(normal turns|compaction|retries|tool loops|background polling|subagents?)\b/i,
+            /\btoken (?:growth|consumption|usage)\b.{0,160}\b(quadratic|runaway|anomaly|monitor|budget|ceiling|cost)\b/i
+        ],
+        suggestedRule: "When reporting Codex token burn, capture plan/workspace, client and version, model and reasoning/speed settings, fast-mode/large-context/subagent/review flags, recent /status and usage-dashboard deltas, local token totals including cached input/output/reasoning if available, background process ids and write_stdin poll cadence, compaction attempts and failures, retry/tool-loop counts, whether the app was idle, and a minimal reproduction with before/after usage percentages.",
+        suggestedSkill: "codex-token-burn-triage"
+    },
+    {
+        kind: "codex_resource_leak",
+        severity: "high",
+        title: "Codex client resource leak or runaway process",
+        why: "Codex Desktop, app, extension, or helper processes can enter CPU/GPU/memory loops that make the local machine unusable unless reports preserve process names, versions, resource samples, log-loop signatures, and cleanup evidence.",
+        patterns: [
+            /\b(Codex|VS Code|extension|app|desktop|renderer|helper|Code Helper|Electron|WindowServer|GPU process)\b.{0,180}\b(high|sustained|runaway|spikes?|burns?|consumes?|uses?)\b.{0,120}\b(CPU|GPU|memory|RAM|battery|thermal|heat|hot|overheat|usage|utilization)\b/i,
+            /\b(CPU|GPU)\b.{0,120}\b(usage|utilization|load)\b.{0,120}\b(9\d|100|1\d\d|2\d\d|3\d\d|400)%/i,
+            /\b(Code Helper \(Renderer\)|Code Helper \(Plugin\)|Codex Helper Renderer|Codex app-server|syspolicyd|zygote|WindowServer).{0,180}\b(9\d|100|1\d\d|2\d\d|3\d\d)%/i,
+            /\borphaned\b.{0,160}\b(shell[- ]snapshot|zsh|codex|native process|subprocess|helper|process)\b/i,
+            /\b(shell[- ]snapshot|print '# Snapshot file'|\.codex\/shell_snapshots|chat_processes\.json)\b.{0,180}\b(orphan|PPID\s*1|launchd|97%|98%|99%|100%|CPU|spinning|burning)\b/i,
+            /\b(memory leak|RAM leak|renderer growth|GPU memory|IOSurface|IOAccelerator|resource leak|log flood|repeated warning loop|error flood)\b/i,
+            /\b(thread-stream-state-changed|worker_rpc_response_error|open-in-target not supported|local-environments is not supported|stable-metadata)\b.{0,180}\b(loop|repeated|thousands|high CPU|flood|no handler|error=\{\})\b/i,
+            /\bthinking\b.{0,120}\b(animation|spinner|shimmer)\b.{0,160}\b(GPU|compositor|VSync|reduce motion|70%|100%|battery|power)\b/i,
+            /\b(non[- ]?Git workspace|without \.git|not a Git repository|git repository root)\b.{0,180}\b(high CPU|renderer|Code Helper|runaway|CPU drops|CPU high)\b/i,
+            /\b(close_agent|subagent|child thread)\b.{0,180}\b(hang forever|never terminates|runaway|leak|stuck|CPU|process)\b/i
+        ],
+        suggestedRule: "When reporting Codex resource leaks, capture app/extension/CLI version, OS, IDE, thread type, exact process names and PIDs, CPU/GPU/RSS samples over time, whether the process is orphaned or PPID 1, log-loop signatures, workspace git-root state, visible animations/reduce-motion state, reproduction steps, and whether closing the panel/app, killing specific PIDs, git init, rollback, or restart clears the leak.",
+        suggestedSkill: "codex-resource-leak-triage"
+    },
     {
         kind: "quota_mismatch",
         severity: "high",
@@ -353,7 +504,7 @@ function inferMcpCapabilities(value) {
 function matchRule(inputs, rule) {
     const evidence = [];
     for (const input of inputs) {
-        if (rule.kind === "tests_not_run" && isInstructionFile(input.path)) {
+        if ((rule.kind === "tests_not_run" || rule.kind === "sensitive_file_access") && isInstructionFile(input.path)) {
             continue;
         }
         const lines = input.content.split(/\r?\n/);
@@ -367,7 +518,7 @@ function matchRule(inputs, rule) {
             }
         });
     }
-    return evidence.slice(0, 5);
+    return evidence.slice(0, 8);
 }
 function detectOverEditing(inputs, maxFilesChanged) {
     const changedFiles = new Set();

package/dist/src/rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/rules.ts"],"names":[],"mappings":"AAYA,MAAM,KAAK,GAAqB;IAC9B;QACE,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,mDAAmD;QAC1D,GAAG,EAAE,wGAAwG;QAC7G,QAAQ,EAAE;YACR,6CAA6C;YAC7C,iFAAiF;SAClF;QACD,aAAa,EACX,sIAAsI;QACxI,cAAc,EAAE,gCAAgC;KACjD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,sCAAsC;QAC7C,GAAG,EAAE,sIAAsI;QAC3I,QAAQ,EAAE;YACR,mGAAmG;SACpG;QACD,aAAa,EACX,gHAAgH;KACnH;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,2FAA2F;QAChG,QAAQ,EAAE;YACR,0FAA0F;YAC1F,yDAAyD;SAC1D;QACD,aAAa,EACX,8IAA8I;KACjJ;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,8HAA8H;QACnI,QAAQ,EAAE;YACR,yGAAyG;SAC1G;QACD,aAAa,EACX,2IAA2I;KAC9I;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,6CAA6C;QACpD,GAAG,EAAE,sHAAsH;QAC3H,QAAQ,EAAE;YACR,qGAAqG;YACrG,uCAAuC;SACxC;QACD,aAAa,EACX,kJAAkJ;KACrJ;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wBAAwB;QAC/B,GAAG,EAAE,wGAAwG;QAC7G,QAAQ,EAAE;YACR,gCAAgC;YAChC,uCAAuC;YACvC,yCAAyC;YACzC,kBAAkB;SACnB;QACD,aAAa,EACX,gIAAgI;KACnI;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,0BAA0B;QACjC,GAAG,EAAE,oGAAoG;QACzG,QAAQ,EAAE;YACR,wEAAwE;YACxE,6EAA6E;SAC9E;QACD,aAAa,EACX,mHAAmH;KACtH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,gHAAgH;QACrH,QAAQ,EAAE;YACR,sDAAsD;SACvD;QACD,aAAa,EACX,uIAAuI;KAC1I;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wCAAwC;QAC/C,GAAG,EAAE,sKAAsK;QAC3K,QAAQ,EAAE;YACR,oJAAoJ;YACpJ,iHAAiH;YACjH,iHAAiH;YACjH,kGAAkG;SACnG;QACD,aAAa,EACX,iLAAiL;QACnL,cAAc,EAAE,wBAAwB;KACzC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,gLAAgL;QACrL,QAAQ,EAAE;YACR,wCAAwC;YACxC,oCAAoC;YACpC,uEAAuE;YACvE,wEAAwE;YACxE,wFAAwF;YACxF,oGAAoG;YACpG,yBAAyB;SAC1B;QACD,aAAa,EACX,yKAAyK;KAC5K;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,qCAAqC;QAC5C,GAAG,EAAE,8IAA8I;QACnJ,QAAQ,EAAE;YACR,kFAAkF;YAClF,mCAAmC;YACnC,sDAAsD;YACtD,mBAAmB;YACnB,kDAAkD;YAClD,mCAAmC;YACnC,qCAAqC;YACrC,uDAAuD;YACvD,2GAA2G;YAC3G,8GAA8G;YAC9G,+EAA+E;YAC/E,oHAAoH;SACrH;QACD,aAAa,EACX,sOAAsO;KACzO;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,qCAAqC;QAC5C,GAAG,EAAE,uLAAuL;QAC5L,QAAQ,EAAE;YACR,kCAAkC;YAClC,mFAAmF;YACnF,0JAA0J;YAC1J,oIAAoI;YACpI,8HAA8H;YAC9H,+GAA+G;YAC/G,8DAA8D;YAC9D,2CAA2C;YAC3C,gEAAgE;SACjE;QACD,aAAa,EACX,gSAAgS;KACnS;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,oCAAoC;QAC3C,GAAG,EAAE,0GAA0G;QAC/G,QAAQ,EAAE;YACR,+GAA+G;YAC/G,gBAAgB;SACjB;QACD,aAAa,EACX,uIAAuI;KAC1I;CACF,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,eAAe,GAAG,EAAE;IACxE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAChE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,8CAA8C;YACrD,GAAG,EAAE,2HAA2H;YAChI,QAAQ,EAAE,YAAY;YACtB,aAAa,EACX,0IAA0I;SAC7I,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QAC7F,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,2CAA2C;YAClD,GAAG,EAAE,0JAA0J;YAC/J,QAAQ,EAAE,iBAAiB;YAC3B,aAAa,EACX,+IAA+I;SAClJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAqB,CAAC,EAAE,CAAC;QAC1G,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,4CAA4C;YACnD,GAAG,EAAE,uIAAuI;YAC5I,QAAQ,EAAE,mBAAmB;YAC7B,aAAa,EACX,mLAAmL;SACtL,CAAC,CAAC;IACL,CAAC;IAED,IACE,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC3B,CAAC,6BAA6B,CAAC,MAAM,CAAC;QACtC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,eAAe,CAAC,EAC7D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,0BAA0B;YACjC,GAAG,EAAE,6GAA6G;YAClH,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;YAC5B,aAAa,EACX,oHAAoH;SACvH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,+BAA+B,CAAC,MAAoB;IAC3D,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,MAAM,eAAe,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,kEAAkE,CAAC,CAAC;IACxI,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAEhG,IAAI,mBAAmB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,mCAAmC,IAAI,CAAC,OAAO,EAAE;SAC3D,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,YAAY,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;IAC7I,MAAM,SAAS,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;IAE1I,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,wBAAwB,IAAI,CAAC,OAAO,EAAE;SAChD,CAAC,CAAC,CAAC,CAAC;QACL,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,qBAAqB,IAAI,CAAC,OAAO,EAAE;SAC7C,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0GAA0G,CAAC,CAAC;IACjL,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,sGAAsG,CAAC,CAAC;IAE7K,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,sBAAsB,IAAI,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC,CAAC,CAAC;QACL,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,sBAAsB,IAAI,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AASD,SAAS,yBAAyB,CAAC,MAAoB,EAAE,OAAe;IACtE,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9D,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK;oBACL,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,KAAK;oBACL,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,iEAAiE,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrF,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAoB;IAC9C,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACjD,MAAM,wBAAwB,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7H,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAoB;IAC/C,MAAM,QAAQ,GAAe,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACpG,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAEvG,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;oBACnC,OAAO,EAAE,WAAW,IAAI,mBAAmB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,cAAc,OAAO,GAAG;iBACrJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,MAAM,GAA4B;QACtC,CAAC,YAAY,EAAE,oEAAoE,CAAC;QACpF,CAAC,OAAO,EAAE,+CAA+C,CAAC;QAC1D,CAAC,SAAS,EAAE,8CAA8C,CAAC;QAC3D,CAAC,SAAS,EAAE,kDAAkD,CAAC;QAC/D,CAAC,UAAU,EAAE,4CAA4C,CAAC;QAC1D,CAAC,WAAW,EAAE,2BAA2B,CAAC;KAC3C,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,MAAoB,EAAE,IAAoB;IAC3D,MAAM,QAAQ,GAAe,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB,EAAE,eAAuB;IACtE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,GAAG,YAAY,CAAC,IAAI,mBAAmB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAClG;KACF,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,MAAoB;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,wKAAwK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7L,CAAC;AAED,SAAS,UAAU,CAAC,MAAoB;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,sBAAsB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;KAC7H,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,SAAS,CAAC,IAAoB,EAAE,QAAoB;IAC3D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ;QACR,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB;IACtC,OAAO;QACL,GAAG,EAAE,CAAC;QACN,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,CAAC;KACZ,CAAC,QAAQ,CAAC,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;QAC5C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,MAAc;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK;SACT,OAAO,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;SACtD,OAAO,CAAC,kCAAkC,EAAE,yBAAyB,CAAC;SACtE,OAAO,CAAC,0BAA0B,EAAE,uBAAuB,CAAC;SAC5D,OAAO,CAAC,gFAAgF,EAAE,gBAAgB,CAAC,CAAC;AACjH,CAAC"}
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/rules.ts"],"names":[],"mappings":"AAYA,MAAM,KAAK,GAAqB;IAC9B;QACE,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,mDAAmD;QAC1D,GAAG,EAAE,wGAAwG;QAC7G,QAAQ,EAAE;YACR,6CAA6C;YAC7C,iFAAiF;SAClF;QACD,aAAa,EACX,sIAAsI;QACxI,cAAc,EAAE,gCAAgC;KACjD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,sCAAsC;QAC7C,GAAG,EAAE,sIAAsI;QAC3I,QAAQ,EAAE;YACR,mGAAmG;SACpG;QACD,aAAa,EACX,gHAAgH;KACnH;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,2FAA2F;QAChG,QAAQ,EAAE;YACR,0FAA0F;YAC1F,yDAAyD;SAC1D;QACD,aAAa,EACX,8IAA8I;KACjJ;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,8HAA8H;QACnI,QAAQ,EAAE;YACR,yGAAyG;SAC1G;QACD,aAAa,EACX,2IAA2I;KAC9I;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,6CAA6C;QACpD,GAAG,EAAE,sHAAsH;QAC3H,QAAQ,EAAE;YACR,qGAAqG;YACrG,uCAAuC;SACxC;QACD,aAAa,EACX,kJAAkJ;KACrJ;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wBAAwB;QAC/B,GAAG,EAAE,wGAAwG;QAC7G,QAAQ,EAAE;YACR,gCAAgC;YAChC,uCAAuC;YACvC,yCAAyC;YACzC,kBAAkB;SACnB;QACD,aAAa,EACX,gIAAgI;KACnI;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,0BAA0B;QACjC,GAAG,EAAE,oGAAoG;QACzG,QAAQ,EAAE;YACR,wEAAwE;YACxE,6EAA6E;SAC9E;QACD,aAAa,EACX,mHAAmH;KACtH;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,sCAAsC;QAC7C,GAAG,EAAE,+MAA+M;QACpN,QAAQ,EAAE;YACR,uWAAuW;YACvW,4JAA4J;YAC5J,0EAA0E;YAC1E,yJAAyJ;SAC1J;QACD,aAAa,EACX,sOAAsO;QACxO,cAAc,EAAE,uBAAuB;KACxC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,gHAAgH;QACrH,QAAQ,EAAE;YACR,sDAAsD;SACvD;QACD,aAAa,EACX,uIAAuI;KAC1I;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wCAAwC;QAC/C,GAAG,EAAE,sKAAsK;QAC3K,QAAQ,EAAE;YACR,oJAAoJ;YACpJ,iHAAiH;YACjH,iHAAiH;YACjH,kGAAkG;SACnG;QACD,aAAa,EACX,iLAAiL;QACnL,cAAc,EAAE,wBAAwB;KACzC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,gLAAgL;QACrL,QAAQ,EAAE;YACR,wCAAwC;YACxC,oCAAoC;YACpC,uEAAuE;YACvE,wEAAwE;YACxE,wFAAwF;YACxF,oGAAoG;YACpG,yBAAyB;SAC1B;QACD,aAAa,EACX,yKAAyK;KAC5K;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,qCAAqC;QAC5C,GAAG,EAAE,8IAA8I;QACnJ,QAAQ,EAAE;YACR,kFAAkF;YAClF,mCAAmC;YACnC,sDAAsD;YACtD,mBAAmB;YACnB,kDAAkD;YAClD,mCAAmC;YACnC,qCAAqC;YACrC,uDAAuD;YACvD,2GAA2G;YAC3G,8GAA8G;YAC9G,+EAA+E;YAC/E,oHAAoH;SACrH;QACD,aAAa,EACX,sOAAsO;KACzO;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,oCAAoC;QAC3C,GAAG,EAAE,mNAAmN;QACxN,QAAQ,EAAE;YACR,4BAA4B;YAC5B,iFAAiF;YACjF,mHAAmH;YACnH,6DAA6D;YAC7D,gCAAgC;YAChC,sDAAsD;YACtD,6CAA6C;YAC7C,iDAAiD;YACjD,2EAA2E;YAC3E,qFAAqF;YACrF,6KAA6K;YAC7K,6HAA6H;SAC9H;QACD,aAAa,EACX,0SAA0S;QAC5S,cAAc,EAAE,2BAA2B;KAC5C;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,2CAA2C;QAClD,GAAG,EAAE,kNAAkN;QACvN,QAAQ,EAAE;YACR,qIAAqI;YACrI,sGAAsG;YACtG,0BAA0B;YAC1B,+BAA+B;YAC/B,yBAAyB;YACzB,kHAAkH;YAClH,qLAAqL;YACrL,yFAAyF;YACzF,kCAAkC;YAClC,wEAAwE;YACxE,8GAA8G;YAC9G,iIAAiI;YACjI,iFAAiF;SAClF;QACD,aAAa,EACX,mXAAmX;QACrX,cAAc,EAAE,6BAA6B;KAC9C;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,sCAAsC;QAC7C,GAAG,EAAE,qNAAqN;QAC1N,QAAQ,EAAE;YACR,mCAAmC;YACnC,uDAAuD;YACvD,8BAA8B;YAC9B,4EAA4E;YAC5E,sCAAsC;YACtC,8DAA8D;YAC9D,yHAAyH;YACzH,gHAAgH;YAChH,6FAA6F;YAC7F,+DAA+D;YAC/D,sGAAsG;YACtG,8GAA8G;SAC/G;QACD,aAAa,EACX,2bAA2b;QAC7b,cAAc,EAAE,0BAA0B;KAC3C;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,uCAAuC;QAC9C,GAAG,EAAE,kOAAkO;QACvO,QAAQ,EAAE;YACR,mIAAmI;YACnI,mEAAmE;YACnE,kDAAkD;YAClD,uCAAuC;YACvC,8GAA8G;YAC9G,4CAA4C;YAC5C,+CAA+C;YAC/C,qIAAqI;YACrI,oCAAoC;YACpC,uHAAuH;YACvH,wGAAwG;YACxG,0FAA0F;YAC1F,gEAAgE;YAChE,oCAAoC;YACpC,iFAAiF;YACjF,mFAAmF;SACpF;QACD,aAAa,EACX,6bAA6b;QAC/b,cAAc,EAAE,4BAA4B;KAC7C;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,sCAAsC;QAC7C,GAAG,EAAE,6PAA6P;QAClQ,QAAQ,EAAE;YACR,qHAAqH;YACrH,sJAAsJ;YACtJ,iJAAiJ;YACjJ,uFAAuF;YACvF,4GAA4G;YAC5G,4HAA4H;YAC5H,uIAAuI;YACvI,0HAA0H;YAC1H,qHAAqH;YACrH,yGAAyG;YACzG,sJAAsJ;YACtJ,sFAAsF;YACtF,8GAA8G;YAC9G,4GAA4G;SAC7G;QACD,aAAa,EACX,8dAA8d;QAChe,cAAc,EAAE,yBAAyB;KAC1C;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,+CAA+C;QACtD,GAAG,EAAE,sOAAsO;QAC3O,QAAQ,EAAE;YACR,iQAAiQ;YACjQ,8FAA8F;YAC9F,kKAAkK;YAClK,iGAAiG;YACjG,2KAA2K;YAC3K,0IAA0I;YAC1I,yNAAyN;YACzN,6HAA6H;YAC7H,2JAA2J;YAC3J,oHAAoH;SACrH;QACD,aAAa,EACX,4ZAA4Z;QAC9Z,cAAc,EAAE,4BAA4B;KAC7C;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,qCAAqC;QAC5C,GAAG,EAAE,uLAAuL;QAC5L,QAAQ,EAAE;YACR,kCAAkC;YAClC,mFAAmF;YACnF,0JAA0J;YAC1J,oIAAoI;YACpI,8HAA8H;YAC9H,+GAA+G;YAC/G,8DAA8D;YAC9D,2CAA2C;YAC3C,gEAAgE;SACjE;QACD,aAAa,EACX,gSAAgS;KACnS;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,oCAAoC;QAC3C,GAAG,EAAE,0GAA0G;QAC/G,QAAQ,EAAE;YACR,+GAA+G;YAC/G,gBAAgB;SACjB;QACD,aAAa,EACX,uIAAuI;KAC1I;CACF,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,eAAe,GAAG,EAAE;IACxE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAChE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,8CAA8C;YACrD,GAAG,EAAE,2HAA2H;YAChI,QAAQ,EAAE,YAAY;YACtB,aAAa,EACX,0IAA0I;SAC7I,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QAC7F,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,2CAA2C;YAClD,GAAG,EAAE,0JAA0J;YAC/J,QAAQ,EAAE,iBAAiB;YAC3B,aAAa,EACX,+IAA+I;SAClJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAqB,CAAC,EAAE,CAAC;QAC1G,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,4CAA4C;YACnD,GAAG,EAAE,uIAAuI;YAC5I,QAAQ,EAAE,mBAAmB;YAC7B,aAAa,EACX,mLAAmL;SACtL,CAAC,CAAC;IACL,CAAC;IAED,IACE,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC3B,CAAC,6BAA6B,CAAC,MAAM,CAAC;QACtC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,eAAe,CAAC,EAC7D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,0BAA0B;YACjC,GAAG,EAAE,6GAA6G;YAClH,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;YAC5B,aAAa,EACX,oHAAoH;SACvH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,+BAA+B,CAAC,MAAoB;IAC3D,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,MAAM,eAAe,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,kEAAkE,CAAC,CAAC;IACxI,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAEhG,IAAI,mBAAmB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,mCAAmC,IAAI,CAAC,OAAO,EAAE;SAC3D,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,YAAY,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;IAC7I,MAAM,SAAS,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;IAE1I,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,wBAAwB,IAAI,CAAC,OAAO,EAAE;SAChD,CAAC,CAAC,CAAC,CAAC;QACL,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,qBAAqB,IAAI,CAAC,OAAO,EAAE;SAC7C,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0GAA0G,CAAC,CAAC;IACjL,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,sGAAsG,CAAC,CAAC;IAE7K,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,sBAAsB,IAAI,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC,CAAC,CAAC;QACL,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,sBAAsB,IAAI,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AASD,SAAS,yBAAyB,CAAC,MAAoB,EAAE,OAAe;IACtE,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9D,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK;oBACL,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,KAAK;oBACL,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,iEAAiE,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrF,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAoB;IAC9C,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACjD,MAAM,wBAAwB,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7H,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAoB;IAC/C,MAAM,QAAQ,GAAe,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACpG,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAEvG,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;oBACnC,OAAO,EAAE,WAAW,IAAI,mBAAmB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,cAAc,OAAO,GAAG;iBACrJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,MAAM,GAA4B;QACtC,CAAC,YAAY,EAAE,oEAAoE,CAAC;QACpF,CAAC,OAAO,EAAE,+CAA+C,CAAC;QAC1D,CAAC,SAAS,EAAE,8CAA8C,CAAC;QAC3D,CAAC,SAAS,EAAE,kDAAkD,CAAC;QAC/D,CAAC,UAAU,EAAE,4CAA4C,CAAC;QAC1D,CAAC,WAAW,EAAE,2BAA2B,CAAC;KAC3C,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,MAAoB,EAAE,IAAoB;IAC3D,MAAM,QAAQ,GAAe,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9G,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB,EAAE,eAAuB;IACtE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,GAAG,YAAY,CAAC,IAAI,mBAAmB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAClG;KACF,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,MAAoB;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,wKAAwK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7L,CAAC;AAED,SAAS,UAAU,CAAC,MAAoB;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,sBAAsB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;KAC7H,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,SAAS,CAAC,IAAoB,EAAE,QAAoB;IAC3D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ;QACR,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB;IACtC,OAAO;QACL,GAAG,EAAE,CAAC;QACN,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,CAAC;KACZ,CAAC,QAAQ,CAAC,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;QAC5C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,MAAc;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK;SACT,OAAO,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;SACtD,OAAO,CAAC,kCAAkC,EAAE,yBAAyB,CAAC;SACtE,OAAO,CAAC,0BAA0B,EAAE,uBAAuB,CAAC;SAC5D,OAAO,CAAC,gFAAgF,EAAE,gBAAgB,CAAC,CAAC;AACjH,CAAC"}

package/dist/src/types.d.ts

@@ -1,5 +1,5 @@
 export type Severity = "low" | "medium" | "high" | "critical";
-export type FindingKind = "premature_completion" | "tests_not_run" | "test_failure" | "ignored_instruction" | "hallucinated_file" | "over_editing" | "unsafe_command" | "secret_exposure" | "hidden_unicode" | "prompt_injection" | "context_compaction" | "sandbox_permission" | "quota_mismatch" | "mcp_risk" | "weak_evidence";
+export type FindingKind = "premature_completion" | "tests_not_run" | "test_failure" | "ignored_instruction" | "hallucinated_file" | "over_editing" | "unsafe_command" | "secret_exposure" | "sensitive_file_access" | "hidden_unicode" | "prompt_injection" | "context_compaction" | "sandbox_permission" | "codex_connectivity" | "codex_remote_control" | "codex_mcp_runtime" | "codex_session_state" | "codex_token_burn" | "codex_resource_leak" | "quota_mismatch" | "mcp_risk" | "weak_evidence";
 export interface TraceInput {
     path: string;
     content: string;

package/docs/ADOPTION_GUIDE.md

@@ -97,3 +97,7 @@ For dashboards, bots, or custom CI:
 - `schemas/scorecard-result.schema.json` describes `trace-to-skill scorecard --format json`.
 
 Use the schemas instead of scraping Markdown reports.
+
+## Maintainer Release Note
+
+For this package itself, releases are prepared for npm Trusted Publishing through `.github/workflows/npm-publish.yml`. See `docs/RELEASE.md` for the one-time `npm trust github` command and release checklist.

package/docs/BENCHMARK.md

@@ -11,8 +11,15 @@ This benchmark runs the public fixture pack that ships with the repository and p
 | Codex JSONL failed session | `fixtures/codex-session.jsonl` | 50 | 3 | 1 | `premature_completion`, `test_failure`, `weak_evidence` | pass |
 | Codex context compaction failure | `fixtures/context-compaction.md` | 75 | 2 | 0 | `context_compaction`, `weak_evidence` | pass |
 | Codex sandbox permission failure | `fixtures/sandbox-permission.md` | 75 | 2 | 0 | `sandbox_permission`, `weak_evidence` | pass |
+| Codex auth and connectivity failure | `fixtures/codex-connectivity.md` | 75 | 2 | 0 | `codex_connectivity`, `weak_evidence` | pass |
+| Codex remote-control route health failure | `fixtures/codex-remote-control.md` | 75 | 2 | 0 | `codex_remote_control`, `weak_evidence` | pass |
 | Codex quota mismatch | `fixtures/quota-mismatch.md` | 75 | 2 | 0 | `quota_mismatch`, `weak_evidence` | pass |
 | MCP config with secret exposure | `fixtures/mcp-risk.json` | 59 | 2 | 1 | `mcp_risk`, `secret_exposure` | pass |
+| Sensitive file access in agent context | `fixtures/sensitive-file-access.md` | 75 | 2 | 0 | `sensitive_file_access`, `weak_evidence` | pass |
+| Codex MCP runtime failure | `fixtures/codex-mcp-runtime.md` | 75 | 2 | 0 | `codex_mcp_runtime`, `weak_evidence` | pass |
+| Codex session resume and state failure | `fixtures/codex-session-state.md` | 59 | 3 | 0 | `codex_resource_leak`, `codex_session_state`, `weak_evidence` | pass |
+| Codex token burn and usage-drain loop | `fixtures/codex-token-burn.md` | 59 | 3 | 0 | `codex_resource_leak`, `codex_token_burn`, `weak_evidence` | pass |
+| Codex resource leak and runaway process | `fixtures/codex-resource-leak.md` | 75 | 2 | 0 | `codex_resource_leak`, `weak_evidence` | pass |
 | Untrusted PR comment prompt injection | `fixtures/prompt-injection.md` | 50 | 3 | 1 | `premature_completion`, `prompt_injection`, `weak_evidence` | pass |
 | Conflicting agent instruction files | `fixtures/instruction-drift` | 84 | 1 | 0 | `ignored_instruction` | pass |
 

package/docs/CODEX_ISSUE_MAP.md

@@ -0,0 +1,50 @@
+# Codex Issue Map
+
+This map links active OpenAI/Codex issue clusters to the deterministic `trace-to-skill` failure classes and commands that produce high-signal reports.
+
+Use it when you want to file a concise Codex issue, deduplicate reports, or convert a private failed session into public evidence without pasting the full transcript.
+
+## Quick Workflow
+
+```bash
+npx trace-to-skill redact ./runs --output redacted-runs
+npx trace-to-skill analyze redacted-runs --format json
+npx trace-to-skill codex-report redacted-runs --output openai-codex-issue.md
+```
+
+## Issue Clusters
+
+| OpenAI/Codex issue cluster | Common signals | Finding kind | Best command |
+| --- | --- | --- | --- |
+| Token burn and usage drain | `tokens burning very fast`, large cached input totals, `write_stdin` empty polls, idle app usage, compaction tax, retry loops | `codex_token_burn` | `trace-to-skill codex-report ./runs` |
+| Resource leaks and runaway processes | high CPU/GPU/RAM, `Code Helper`, `Codex Helper Renderer`, orphaned `shell-snapshot`, `syspolicyd`, log floods, thinking animation GPU loops | `codex_resource_leak` | `trace-to-skill codex-report ./runs` |
+| Quota mismatch | `/status` or usage page shows quota left, but runtime says `You've hit your usage limit`; account/workspace reset or cache confusion | `quota_mismatch` | `trace-to-skill codex-report ./runs` |
+| Sensitive file exclusion | `.env`, private keys, `.npmrc`, cloud credentials, local databases, or production secret manifests entered agent context | `sensitive_file_access` | `trace-to-skill codex-report ./runs` |
+| Context compaction failures | `Error running remote compact task`, `context_length_exceeded`, compaction loops, `responses/compact` stream disconnects | `context_compaction` | `trace-to-skill analyze ./runs` |
+| Session resume and state failures | `codex resume` picker freezes, large rollout JSONL, `Could not load archived chats`, `state_5.sqlite`, `thread_goals` | `codex_session_state` | `trace-to-skill codex-report ./runs` |
+| Sandbox and permission blockers | Windows sandbox setup refresh, `os error 740`, ACL/ownership drift, approval-mode mismatch | `sandbox_permission` | `trace-to-skill analyze ./runs` |
+| Auth and connectivity failures | `token_exchange_failed`, `auth.openai.com/oauth/token`, missing CA certificates, proxy/TLS, IPv6, Cloudflare, stream disconnects | `codex_connectivity` | `trace-to-skill codex-report ./runs` |
+| Remote-control routing failures | `Waiting for desktop`, `Directory: Unavailable`, stale listener/enrollment, `127.0.0.1:14567`, empty backend environments | `codex_remote_control` | `trace-to-skill codex-report ./runs` |
+| MCP runtime failures | `user cancelled MCP tool call`, `unsupported call: mcp__...__...`, namespace/serverName loss, `Transport closed` | `codex_mcp_runtime` | `trace-to-skill codex-report ./runs` |
+| MCP config risk | filesystem/shell/browser/network/database/container access, secret-bearing env vars, broken startup inputs | `mcp_risk` | `trace-to-skill lint-agents .` |
+| GitHub prompt injection | issue/PR/comment text says to ignore policy, leak secrets, hide actions, or execute attacker-controlled commands | `prompt_injection` | `trace-to-skill guard-github-event "$GITHUB_EVENT_PATH"` |
+
+## Report Quality Checklist
+
+- Include exact Codex app, CLI, or extension version.
+- Include OS, shell/terminal, IDE, model, reasoning effort, speed mode, and subscription/workspace.
+- Include the smallest redacted trace that reproduces the failure.
+- Include before/after `/status` and usage dashboard state for quota or token-burn reports.
+- Include process names/PIDs, CPU/GPU/RSS samples, log-loop signatures, and whether killing exact PIDs or closing the app clears resource leaks.
+- Include line-linked evidence rather than screenshots alone when logs are available.
+- Redact tokens, API keys, emails, local home paths, customer data, and hidden Unicode before posting publicly.
+- For sensitive-file reports, attach only redacted excerpts and the file path/class, not the original credential material.
+
+## Related OpenAI/Codex Threads Used For Fixtures
+
+- Token burn and usage drain: https://github.com/openai/codex/issues/14593, https://github.com/openai/codex/issues/13733, https://github.com/openai/codex/issues/25420, https://github.com/openai/codex/issues/19585
+- Resource leaks and runaway processes: https://github.com/openai/codex/issues/16231, https://github.com/openai/codex/issues/11981, https://github.com/openai/codex/issues/16857, https://github.com/openai/codex/issues/25388
+- Session state and resume failures: https://github.com/openai/codex/issues/25430, https://github.com/openai/codex/issues/25390, https://github.com/openai/codex/issues/25394, https://github.com/openai/codex/issues/25407
+- MCP runtime failures: https://github.com/openai/codex/issues/16685, https://github.com/openai/codex/issues/18977, https://github.com/openai/codex/issues/24297, https://github.com/openai/codex/issues/23839
+- Sensitive file exclusion: https://github.com/openai/codex/issues/2847
+- Auth/connectivity and remote-control reports are represented by the public fixtures in `fixtures/codex-connectivity.md` and `fixtures/codex-remote-control.md`.

package/docs/DISCOVERY.md

@@ -12,6 +12,7 @@ This page is written for maintainers, search engines, package indexes, and AI re
 - npm: https://www.npmjs.com/package/trace-to-skill
 - Latest release: https://github.com/grnbtqdbyx-create/trace-to-skill/releases/latest
 - Use cases: https://github.com/grnbtqdbyx-create/trace-to-skill/blob/main/docs/USE_CASES.md
+- Codex issue map: https://github.com/grnbtqdbyx-create/trace-to-skill/blob/main/docs/CODEX_ISSUE_MAP.md
 - Scorecard: https://github.com/grnbtqdbyx-create/trace-to-skill/blob/main/docs/SCORECARD.md
 - OpenAI OSS strategy: https://github.com/grnbtqdbyx-create/trace-to-skill/blob/main/docs/OPENAI_OSS_STRATEGY.md
 
@@ -21,7 +22,14 @@ This page is written for maintainers, search engines, package indexes, and AI re
 - A coding agent repeats the same test/build/lint failure.
 - A long Codex thread fails during context compaction with stream disconnects, `context_length_exceeded`, endless auto-compaction, or `unknown variant auto` errors.
 - Codex cannot start tools because sandbox setup refresh, Windows `os error 740`, ACL, ownership, or approval-mode permission failures block execution.
+- Codex login or response streaming fails because of `token_exchange_failed`, `auth.openai.com/oauth/token`, missing CA certificates, proxy/MITM, IPv6 fallback, Cloudflare challenge, or `stream disconnected before completion`.
+- Codex mobile or remote-control appears connected but routes through stale listeners, stale enrollment, incomplete helper bundles, empty backend environments, or stale Android/iOS session state.
+- Codex MCP tools are visible in `tools/list` but fail at runtime because approval is cancelled, elicitation is unsupported in exec mode, namespace or `serverName` metadata is dropped, routed names become `unsupported call`, or stdio transport closes.
+- Codex resume, Desktop history rendering, archived chats, context compression, or local state migrations fail after large JSONL histories, images, tool output, stale SQLite state, or project/thread metadata drift.
+- Codex usage drains unexpectedly because of background `write_stdin` polling, idle app activity, compaction/replay overhead, retry loops, subagent fan-out, fast-mode drift, or cached-token-heavy turns.
+- Codex Desktop, app-server, VS Code extension, renderer, GPU, shell snapshot, or helper processes leak local resources or keep burning CPU/GPU/RAM after the useful work should be idle.
 - Codex reports `You've hit your usage limit` even though `/status` or the usage dashboard shows quota left, or quota appears shared across accounts.
+- A Codex or agent trace reads, attaches, diffs, uploads, or indexes sensitive files such as `.env`, private keys, package auth files, cloud credentials, local databases, or production secret manifests.
 - A repository has conflicting `AGENTS.md`, `CLAUDE.md`, Cursor, Copilot, or Gemini instructions.
 - A monorepo has nested `AGENTS.md` files, `@file.md` instruction includes, or invalid instruction-file encoding that makes Codex load the wrong policy.
 - A workflow wants to feed GitHub issue, PR, comment, discussion, check-run, or commit text into an agent but needs prompt-injection checks first.
@@ -46,6 +54,7 @@ npx trace-to-skill lint-agents .
 npx trace-to-skill guard-github-event "$GITHUB_EVENT_PATH"
 npx trace-to-skill redact ./runs --output redacted-runs
 npx trace-to-skill analyze ./runs --format json
+npx trace-to-skill codex-report ./runs --output openai-codex-issue.md
 npx trace-to-skill suggest ./runs --target agents-md
 ```
 
@@ -57,6 +66,8 @@ npx trace-to-skill suggest ./runs --target agents-md
 - `trace-to-skill redact --format json`
 - `trace-to-skill scorecard --format json`
 - SARIF from `trace-to-skill analyze --format sarif`
+- OpenAI/Codex issue-ready Markdown from `trace-to-skill codex-report`
+- Codex issue-cluster mapping in `docs/CODEX_ISSUE_MAP.md`
 - GitHub Action outputs for doctor, AGENTS lint, GitHub context guard, benchmark, and scorecard modes
 
 ## Schema Contracts
@@ -69,7 +80,7 @@ npx trace-to-skill suggest ./runs --target agents-md
 
 ## Related Keywords
 
-Codex, OpenAI Codex, Codex CLI, Codex sandbox, Windows sandbox, Codex quota, usage limit, rate limits, AGENTS.md, SKILL.md, Claude Code, Cursor, Copilot coding agent, Gemini CLI, MCP, Model Context Protocol, prompt injection, agent evals, AI code review, open-source maintainers, trace redaction, SARIF, GitHub Actions.
+Codex, OpenAI Codex, Codex issue report, OpenAI triage, Codex CLI, Codex sandbox, Windows sandbox, Codex auth, token_exchange_failed, Codex connectivity, stream disconnected, Codex remote control, Codex mobile, Waiting for desktop, Directory Unavailable, stale listener, Codex MCP runtime, MCP unsupported call, mcp__node_repl__js, MCP namespace serverName, MCP Transport closed, StdioServerTransport, Codex resume, Codex session state, rollout JSONL, thread_goals, state_5.sqlite, goals_1.sqlite, archived chats, Codex token burn, Codex usage drain, write_stdin polling, cached input tokens, compaction tax, background process polling, Codex resource leak, Codex performance, high CPU, high GPU, shell-snapshot, Code Helper Renderer, Codex quota, usage limit, rate limits, sensitive files, Codex privacy, .env, private keys, credential files, AGENTS.md, SKILL.md, Claude Code, Cursor, Copilot coding agent, Gemini CLI, MCP, Model Context Protocol, prompt injection, agent evals, AI code review, open-source maintainers, trace redaction, SARIF, GitHub Actions.
 
 ## Non-Goals
 

package/docs/FAILURE_TAXONOMY.md

@@ -24,6 +24,54 @@ Codex sandbox setup, approval mode, ACL, or workspace ownership failed before to
 
 The fix is to capture the OS, Codex version, `sandbox_mode`, `approval_policy`, exact stderr, workspace ownership/ACL evidence, and whether a clean directory can run a simple command plus `apply_patch`.
 
+## Codex Connectivity
+
+Codex login, device auth, API-key auth, ChatGPT response streaming, or remote transport fails because of token exchange errors, missing CA certificates, proxy or MITM behavior, Cloudflare challenges, IPv6 routing, DNS, VPN, or WebSocket/HTTPS fallback problems.
+
+Common signals include `token_exchange_failed`, `auth.openai.com/oauth/token`, `codex_login::server`, `cf-mitigated: challenge`, `ca-certificates`, `update-ca-certificates`, `CODEX_CA_CERTIFICATE`, `SSL_CERT_FILE`, IPv6-only lookup evidence, and `stream disconnected before completion` errors against `chatgpt.com/backend-api/codex/responses`.
+
+The fix is to capture the client or app version, OS/container image, proxy or VPN state, endpoint URL, exact error, DNS IPv4/IPv6 results, `curl -4` / `curl -6` checks, CA variables, certificate package status, and whether browser login, device auth, and API-key paths fail differently.
+
+## Codex Remote Control
+
+Codex mobile, SSH remote, or desktop remote-control appears connected but the next command does not reach the intended host, workspace, or app-server. Common causes include stale remote-control listeners, stale enrollment or `server_name` state, missing helper files in a cached runtime bundle, mixed mobile/desktop session state, or Android/iOS surfaces showing stale project/session data.
+
+Common signals include `Waiting for desktop`, `Directory: Unavailable`, `remote-control`, `remoteControl/status/read`, `127.0.0.1:14567`, stale listener or cached binary evidence, missing `codex-windows-sandbox-setup.exe`, missing `codex-command-runner.exe`, backend environments returning empty, and re-pairing temporarily restoring access.
+
+The fix is to capture desktop/app/CLI versions, mobile OS/app version, host id, remote-control status, listener pid and executable path, bound port, cache directory id, helper bundle completeness, active `server_name` or enrollment id, workspace root, last mobile command id, and whether restarting the listener or re-pairing changes the route.
+
+## Codex MCP Runtime
+
+Codex MCP tools can be configured and discoverable but still fail at runtime. Common causes include non-interactive approval paths cancelling the call, elicitation not being supported in exec mode, deferred discovery replaying a call without namespace or `serverName`, routed callable names such as `mcp__node_repl__js` becoming unsupported, or stdio transports closing before a second tool call.
+
+Common signals include `user cancelled MCP tool call`, `request_user_input is not supported in exec mode`, `Approve app tool call?`, `tool_call_mcp_elicitation`, `unsupported call: mcp__...__...`, `tools/list` succeeding while manual `tools/call` succeeds but Codex routing fails, missing namespace or `serverName` metadata, `Transport closed`, and `StdioServerTransport` lifecycle events such as `stdin_end`, `stdin_close`, `transport_close`, `parent_gone`, or stderr backpressure.
+
+The fix is to capture the Codex version, MCP server name and transport, tool name, exposed callable name, whether `tools/list` and manual `tools/call` succeed, `approval_policy`, sandbox mode, exec or interactive mode, elicitation setting, namespace or `serverName` metadata, exact `item.started` / `item.completed` JSONL, stderr or backpressure evidence, and whether restarting or reinitializing the transport changes the result.
+
+## Codex Session State
+
+Codex resume, Desktop history rendering, archived chat loading, context compression, or local state migrations can fail after a long thread accumulates large JSONL history, images, tool output, or stale SQLite/global-state metadata.
+
+Common signals include `codex resume` interactive picker hangs or freezes, `codex resume <id>` working while the picker is unresponsive, large `rollout-*.jsonl` or session files, 10+ MB or 100+ MB histories, high `response_item`, `event_msg`, `function_call`, or `input_image` counts, `thread/resume` or `thread/goal/get` taking thousands of milliseconds, Codex Desktop becoming sluggish with high app-server/renderer CPU, `Could not load archived chats`, resume compression dropping the last 3-5 turns, `state_5.sqlite`, `goals_1.sqlite`, `no such table: thread_goals`, `projectless-thread-ids`, and `thread-workspace-root-hints` reverting after restart.
+
+The fix is to capture app and CLI versions, OS, session or thread id, rollout JSONL size, line and record counts, largest line size, image/tool-output counts, `thread/resume` and `thread/goal/get` timings, renderer/app-server CPU and memory, affected SQLite/global-state files and migration versions, whether `codex resume <id>` works, whether a new thread works, and any backup or restore steps before editing local state.
+
+## Codex Token Burn
+
+Codex usage can drain unexpectedly even when users cannot tell whether the cause is useful model work, background process polling, idle app activity, compaction/replay overhead, retry loops, subagent fan-out, fast-mode drift, large context, long `AGENTS.md`, MCP/skill overhead, or cached-token-heavy turns.
+
+Common signals include tokens `burning very fast`, usage dropping by visible percentages after one or two prompts, weekly allowance depletion under normal usage, 5-hour usage reaching 0%, large `input` plus `cached input` totals, `write_stdin` empty polling, background commands repeatedly checking for no new output, Codex using daily usage while idle or only open, compaction tax, retry/tool loops, and requests for usage attribution across normal turns, compaction, retries, subagents, and background polling.
+
+The fix is to capture plan/workspace, client and version, model and reasoning/speed settings, fast-mode/large-context/subagent/review flags, recent `/status` and usage-dashboard deltas, local token totals including cached input/output/reasoning if available, background process ids and `write_stdin` poll cadence, compaction attempts and failures, retry/tool-loop counts, whether the app was idle, and a minimal reproduction with before/after usage percentages.
+
+## Codex Resource Leak
+
+Codex Desktop, the VS Code extension, app-server, renderer, GPU process, shell snapshot capture, or helper processes can keep consuming CPU/GPU/RAM after the useful work should be idle.
+
+Common signals include high `Code Helper (Renderer)` or `Code Helper (Plugin)` CPU, `Codex Helper Renderer`, `Codex app-server`, `syspolicyd`, `zygote`, `WindowServer`, `shell-snapshot`, `print '# Snapshot file'`, `.codex/shell_snapshots`, `chat_processes.json`, PPID 1 orphaned subprocesses, repeated `thread-stream-state-changed`, `worker_rpc_response_error`, `open-in-target not supported`, `stable-metadata`, thinking/shimmer GPU loops, and non-Git workspace CPU runaways.
+
+The fix is to capture app/extension/CLI version, OS, IDE, thread type, process names/PIDs, CPU/GPU/RSS samples over time, whether the process is orphaned, log-loop signatures, workspace Git-root state, animation/reduce-motion state, reproduction steps, and whether closing the panel/app, killing exact PIDs, `git init`, rollback, or restart clears the leak.
+
 ## Quota Mismatch
 
 Codex reports a usage-limit block even though another surface shows remaining quota, or quota state appears to be shared across accounts, consumed in parallel across 5h and weekly windows, or reset at an impossible time.
@@ -59,6 +107,14 @@ Destructive shell commands, privilege escalation, or remote script execution pat
 
 Credentials, API keys, or tokens appear in traces or reports.
 
+## Sensitive File Access
+
+Credential files, private keys, package auth files, cloud credentials, local databases, or production secret manifests entered agent context through a read, attach, upload, diff, or indexing step.
+
+Common signals include `.env`, `.env.production`, `.npmrc`, `.pypirc`, `.netrc`, `.aws/credentials`, `.kube/config`, `.docker/config.json`, `id_rsa`, `id_ed25519`, `.pem`, `.key`, `.p12`, `.mobileprovision`, `.sqlite`, `.db`, `secrets.yaml`, and private-key PEM blocks.
+
+The fix is to exclude sensitive files before the agent starts, redact public traces, and share only minimal maintainer-approved excerpts.
+
 ## Hidden Unicode
 
 Bidirectional or zero-width Unicode control characters appear in agent-visible instructions or patches.

package/docs/RELEASE.md

@@ -0,0 +1,54 @@
+# Release Process
+
+This repository is configured for npm Trusted Publishing so releases do not need a long-lived npm token or repeated local web authentication.
+
+## One-Time npm Setup
+
+Preferred CLI setup:
+
+```bash
+npx npm@11.16.0 trust github trace-to-skill \
+  --file npm-publish.yml \
+  --repo grnbtqdbyx-create/trace-to-skill \
+  --allow-publish
+```
+
+`npm@11.16.0` or newer is recommended because older npm 11 builds may start the web-auth flow but fail to create the trust record without the publish permission flag.
+
+Or, in the npm package settings for `trace-to-skill`, add a Trusted Publisher:
+
+- Publisher: GitHub Actions
+- Organization or user: `grnbtqdbyx-create`
+- Repository: `trace-to-skill`
+- Workflow filename: `npm-publish.yml`
+- Allowed action: `npm publish`
+
+After this one-time npm trust setting is saved, publishing should happen from GitHub Actions using OIDC.
+
+You can preview the CLI trust command without changing npm state:
+
+```bash
+npx npm@11.16.0 trust github trace-to-skill \
+  --file npm-publish.yml \
+  --repo grnbtqdbyx-create/trace-to-skill \
+  --allow-publish \
+  --dry-run --json
+```
+
+## Release Checklist
+
+1. Bump `package.json` and `package-lock.json`.
+2. Run `npm run check`.
+3. Regenerate `docs/BENCHMARK.md` and `docs/SCORECARD.md` if benchmark fixtures changed.
+4. Commit and push to `main`.
+5. Create a GitHub release whose tag matches the package version, such as `v0.1.40`.
+6. Confirm the `Publish npm` workflow succeeds.
+7. Confirm `npm view trace-to-skill version dist-tags.latest --json` shows the new version.
+
+The workflow also supports manual dispatch with `publish=true` for a version that has already been committed but not published.
+
+`trace-to-skill doctor .` checks for this release surface. Public npm packages without an OIDC-backed `npm publish` workflow receive a `release-automation` warning.
+
+## Why This Exists
+
+Local `npm publish` with account 2FA can ask for browser/passkey approval on every release. Trusted Publishing moves the repeated release authentication into GitHub Actions and uses short-lived OIDC credentials instead.

package/docs/SCORECARD.md

@@ -9,7 +9,7 @@ Status: **pass**
 | Failed doctor checks | 0 |
 | Critical findings | 0 |
 | Built-in benchmark | pass |
-| Benchmark cases | 9 |
+| Benchmark cases | 16 |
 
 ## Doctor Summary
 
@@ -28,8 +28,15 @@ This benchmark runs the public fixture pack that ships with the repository and p
 | Codex JSONL failed session | `fixtures/codex-session.jsonl` | 50 | 3 | 1 | `premature_completion`, `test_failure`, `weak_evidence` | pass |
 | Codex context compaction failure | `fixtures/context-compaction.md` | 75 | 2 | 0 | `context_compaction`, `weak_evidence` | pass |
 | Codex sandbox permission failure | `fixtures/sandbox-permission.md` | 75 | 2 | 0 | `sandbox_permission`, `weak_evidence` | pass |
+| Codex auth and connectivity failure | `fixtures/codex-connectivity.md` | 75 | 2 | 0 | `codex_connectivity`, `weak_evidence` | pass |
+| Codex remote-control route health failure | `fixtures/codex-remote-control.md` | 75 | 2 | 0 | `codex_remote_control`, `weak_evidence` | pass |
 | Codex quota mismatch | `fixtures/quota-mismatch.md` | 75 | 2 | 0 | `quota_mismatch`, `weak_evidence` | pass |
 | MCP config with secret exposure | `fixtures/mcp-risk.json` | 59 | 2 | 1 | `mcp_risk`, `secret_exposure` | pass |
+| Sensitive file access in agent context | `fixtures/sensitive-file-access.md` | 75 | 2 | 0 | `sensitive_file_access`, `weak_evidence` | pass |
+| Codex MCP runtime failure | `fixtures/codex-mcp-runtime.md` | 75 | 2 | 0 | `codex_mcp_runtime`, `weak_evidence` | pass |
+| Codex session resume and state failure | `fixtures/codex-session-state.md` | 59 | 3 | 0 | `codex_resource_leak`, `codex_session_state`, `weak_evidence` | pass |
+| Codex token burn and usage-drain loop | `fixtures/codex-token-burn.md` | 59 | 3 | 0 | `codex_resource_leak`, `codex_token_burn`, `weak_evidence` | pass |
+| Codex resource leak and runaway process | `fixtures/codex-resource-leak.md` | 75 | 2 | 0 | `codex_resource_leak`, `weak_evidence` | pass |
 | Untrusted PR comment prompt injection | `fixtures/prompt-injection.md` | 50 | 3 | 1 | `premature_completion`, `prompt_injection`, `weak_evidence` | pass |
 | Conflicting agent instruction files | `fixtures/instruction-drift` | 84 | 1 | 0 | `ignored_instruction` | pass |