vibe-checking 1.0.3 → 1.2.1

package/README.md

@@ -1,41 +1,57 @@
 # vibecheck
 
-Security audit for AI-generated codebases. Finds vulnerabilities, then traces them back to the prompt that caused them.
+Security audit for AI-generated codebases.
+
+vibecheck finds security vulnerabilities in your code and traces each one back to the AI prompt that introduced it.
+
+Run it before you deploy, or whenever you want to check what your AI sessions left behind.
 
 No account. No API key. Nothing leaves your machine.
 
 ## Quick start
 
 ```bash
-npx vibe-checking --with-cursor-history
+npx vibe-checking --with-cursor-history --with-claude-history
 ```
 
-Run this from your project directory. The tool scans your code, reads your Cursor session history, and shows which prompts introduced each vulnerability.
+Run this from your project directory. To scan automatically on every push:
+
+```bash
+npx vibe-checking hook install
+```
 
 ## What it checks
 
 - **Secrets** — leaked API keys, tokens, credentials in git history (via gitleaks)
-- **Code vulnerabilities** — injection, XSS, auth gaps, unverified webhooks (via semgrep)
+- **Code vulnerabilities** — injection, XSS, crypto issues, auth gaps (via semgrep)
 - **Supabase RLS** — tables missing Row Level Security in your migrations
 - **Dependencies** — known CVEs in your packages (via npm audit)
 
-gitleaks and semgrep are auto-installed if missing. If installation fails, the tool skips that check and continues.
+gitleaks and semgrep are auto-installed if missing.
 
-## Prompt tracing
+## Vibe coding analysis
 
-This is what makes vibecheck different from a regular scanner.
+When you add `--with-cursor-history` or `--with-claude-history`, vibecheck reads the session files that Cursor and Claude Code store locally on your machine. It performs two analyses:
 
-When you add `--with-cursor-history` or `--with-claude-history`, the tool reads the session files that Cursor and Claude Code store locally on your machine. It matches each finding to the prompt that generated the vulnerable code, and shows how the prompt should have been written.
+**Prompt tracing** — matches each security finding to the AI prompt that generated the vulnerable code. Shows what the prompt asked for, what file was generated, and what security constraints were missing.
 
-Without these flags, you still get the full security scan — just without the prompt correlation.
+**Behavior analysis** — looks at how you interacted with the AI across all sessions:
+- **Blind approval chains** — sequences of 3+ "ok/continue/oui" where code was accepted without review
+- **High-delegation prompts** — short prompts that generated large amounts of code
+- **Files without review** — generated files never mentioned again in the conversation
+- **Security-blind sessions** — sessions where security was never mentioned in any prompt
+
+Without these flags, you still get the full security scan — just without the prompt tracing and behavior analysis.
 
 ## Usage
 
 ```bash
 npx vibe-checking                                             # security scan only
-npx vibe-checking --with-cursor-history                       # scan + trace Cursor prompts
-npx vibe-checking --with-claude-history                       # scan + trace Claude Code prompts
-npx vibe-checking --with-cursor-history --with-claude-history # scan + trace both
+npx vibe-checking --with-cursor-history                       # scan + vibe analysis (Cursor)
+npx vibe-checking --with-claude-history                       # scan + vibe analysis (Claude)
+npx vibe-checking --with-cursor-history --with-claude-history # scan + vibe analysis (both)
+npx vibe-checking hook install                                # add pre-push hook
+npx vibe-checking hook remove                                 # remove pre-push hook
 ```
 
 ## Interactive commands
@@ -44,16 +60,47 @@ Once the scan completes, you get an interactive prompt:
 
 | Command | Action |
 |---------|--------|
-| `1`, `2`, `3`... | Inspect a finding |
-| `fix` | Show the rewritten secure prompt |
+| `1`, `2`, `3`... | Inspect a finding (shows prompt trace + missing constraints) |
+| `solved` | Mark finding as fixed in code |
 | `ignore` | Dismiss the current finding |
 | `next` | Jump to the next open finding |
 | `list` | Reprint the list with updated score |
-| `q` | Save an HTML report and exit |
+| `vibe` | Show vibe coding behavior analysis |
+| `q` | Save statuses and write report |
+
+## Persistent statuses
+
+Findings you mark as `solved` or `ignore` are saved in a `.vibecheck` file at the root of your repo. On the next scan, vibecheck loads these statuses:
+
+- **ignored** findings stay dismissed
+- **solved** findings are re-checked — if the vulnerability is still there, it goes back to open
+
+Commit `.vibecheck` to share decisions with your team. If all findings are handled, the scan passes silently.
+
+## Git hook
+
+`npx vibe-checking hook install` adds a pre-push hook to your repo. Every time you `git push`, vibecheck runs a full scan. If there are open findings, the REPL opens and you need to handle them before the push goes through. If everything is already solved or ignored, the push passes immediately.
+
+If you installed the hook before v1.2.1, remove and reinstall so vibecheck runs before any existing `exit 0` in your hook:
+
+```bash
+npx vibe-checking hook remove
+npx vibe-checking hook install
+```
+
+To skip the hook once: `git push --no-verify`.
+
+## How it works
 
-## Privacy
+Everything runs locally:
+- **gitleaks** and **semgrep** are local binaries that scan your code and git history
+- **RLS analysis** parses your SQL migration files directly
+- **npm audit** checks your lock file against the npm vulnerability database
+- **Prompt history** is read from local files (`~/.claude/projects/` and `~/.cursor/projects/`)
+- **Behavior analysis** is pattern matching on your prompt text and session structure
+- **Statuses** are saved in `.vibecheck` at the root of your repo
 
-Everything runs locally. The scanners are local binaries. The session history is read from local files. The HTML report is saved to your project directory. Nothing is uploaded, no telemetry, no account required.
+No API keys needed. No code uploaded.
 
 ---
 

package/dist/analysis/behavior.d.ts

@@ -0,0 +1,11 @@
+import type { ClaudeSession, Finding } from "../types.js";
+export interface VibeAnalysis {
+    blindChains: number;
+    highDelegationPrompts: number;
+    filesWithoutReview: number;
+    sessionsWithoutSecurityMention: number;
+    totalSessions: number;
+    totalPrompts: number;
+    findingsFromBlindChains: number;
+}
+export declare function analyzeVibePatterns(sessions: ClaudeSession[], findings: Finding[]): VibeAnalysis;

package/dist/analysis/behavior.js

@@ -0,0 +1,105 @@
+const GENERIC_PROMPT_RE = /^(ok|oui|yes|yep|go|continue|next|sure|d'accord|parfait|merci|thanks|good|bien|c'est bon|les autres|et les autres|la suite)/i;
+const SECURITY_KEYWORDS = [
+    "security", "auth", "validation", "rls", "sanitize", "encrypt",
+    "permission", "policy", "access control", "xss", "injection",
+    "csrf", "cors", "secret", "credential", "token verification",
+    "signature", "webhook secret", "row level",
+];
+const BLIND_CHAIN_THRESHOLD = 3;
+const HIGH_DELEGATION_RATIO = 20;
+function isGeneric(text) {
+    const clean = text.replace(/\s+/g, " ").trim();
+    return clean.length < 25 || GENERIC_PROMPT_RE.test(clean);
+}
+function wordCount(text) {
+    return text.trim().split(/\s+/).filter(Boolean).length;
+}
+export function analyzeVibePatterns(sessions, findings) {
+    let blindChains = 0;
+    let highDelegationPrompts = 0;
+    let filesWithoutReview = 0;
+    let sessionsWithoutSecurityMention = 0;
+    let totalPrompts = 0;
+    const blindChainFiles = new Set();
+    for (const session of sessions) {
+        const prompts = session.prompts;
+        totalPrompts += prompts.length;
+        // Signal 1: blind approval chains
+        let consecutiveGeneric = 0;
+        for (const prompt of prompts) {
+            if (isGeneric(prompt.text)) {
+                consecutiveGeneric++;
+                if (consecutiveGeneric >= BLIND_CHAIN_THRESHOLD) {
+                    if (consecutiveGeneric === BLIND_CHAIN_THRESHOLD)
+                        blindChains++;
+                    for (const f of prompt.filesGenerated) {
+                        blindChainFiles.add(f);
+                    }
+                }
+            }
+            else {
+                consecutiveGeneric = 0;
+            }
+        }
+        // Signal 2: high delegation ratio
+        for (const prompt of prompts) {
+            if (prompt.toolCalls.length === 0)
+                continue;
+            const words = wordCount(prompt.text);
+            if (words < 3)
+                continue;
+            let linesGenerated = 0;
+            for (const tc of prompt.toolCalls) {
+                if (tc.content) {
+                    linesGenerated += tc.content.split("\n").length;
+                }
+            }
+            if (linesGenerated > 0 && linesGenerated / words > HIGH_DELEGATION_RATIO) {
+                highDelegationPrompts++;
+            }
+        }
+        // Signal 3: files accepted without review
+        const allGeneratedFiles = new Set();
+        const mentionedInFollowUp = new Set();
+        for (let i = 0; i < prompts.length; i++) {
+            for (const f of prompts[i].filesGenerated) {
+                allGeneratedFiles.add(f);
+            }
+            // Check if later prompts mention any previously generated files
+            if (i > 0) {
+                const promptLower = prompts[i].text.toLowerCase();
+                for (const f of allGeneratedFiles) {
+                    const basename = f.split("/").pop() || f;
+                    if (promptLower.includes(basename.toLowerCase())) {
+                        mentionedInFollowUp.add(f);
+                    }
+                }
+            }
+        }
+        filesWithoutReview += allGeneratedFiles.size - mentionedInFollowUp.size;
+        // Signal 4: no security mention
+        const hasSecurityMention = prompts.some((p) => {
+            const lower = p.text.toLowerCase();
+            return SECURITY_KEYWORDS.some((kw) => lower.includes(kw));
+        });
+        if (!hasSecurityMention) {
+            sessionsWithoutSecurityMention++;
+        }
+    }
+    // Cross-reference: how many findings come from blind chain files
+    const findingsFromBlindChains = findings.filter((f) => {
+        if (!f.trace)
+            return false;
+        return Array.from(blindChainFiles).some((bcf) => bcf.endsWith(f.path) || f.path.endsWith(bcf.split("/").pop() || ""));
+    }).length;
+    return {
+        blindChains,
+        highDelegationPrompts,
+        filesWithoutReview,
+        sessionsWithoutSecurityMention,
+        totalSessions: sessions.length,
+        totalPrompts,
+        findingsFromBlindChains,
+    };
+}
+//# sourceMappingURL=behavior.js.map

package/dist/analysis/behavior.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavior.js","sourceRoot":"","sources":["../../src/analysis/behavior.ts"],"names":[],"mappings":"AAYA,MAAM,iBAAiB,GACrB,8HAA8H,CAAC;AAEjI,MAAM,iBAAiB,GAAG;IACxB,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS;IAC9D,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW;IAC5D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,oBAAoB;IAC5D,WAAW,EAAE,gBAAgB,EAAE,WAAW;CAC3C,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAyB,EACzB,QAAmB;IAEnB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,qBAAqB,GAAG,CAAC,CAAC;IAC9B,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAI,8BAA8B,GAAG,CAAC,CAAC;IACvC,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;QAE/B,kCAAkC;QAClC,IAAI,kBAAkB,GAAG,CAAC,CAAC;QAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,kBAAkB,EAAE,CAAC;gBACrB,IAAI,kBAAkB,IAAI,qBAAqB,EAAE,CAAC;oBAChD,IAAI,kBAAkB,KAAK,qBAAqB;wBAAE,WAAW,EAAE,CAAC;oBAChE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;wBACtC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,kBAAkB,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,KAAK,GAAG,CAAC;gBAAE,SAAS;YAExB,IAAI,cAAc,GAAG,CAAC,CAAC;YACvB,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBAClC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;oBACf,cAAc,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBAClD,CAAC;YACH,CAAC;YAED,IAAI,cAAc,GAAG,CAAC,IAAI,cAAc,GAAG,KAAK,GAAG,qBAAqB,EAAE,CAAC;gBACzE,qBAAqB,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC5C,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;QAE9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;gBAC1C,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;YACD,gEAAgE;YAChE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACV,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClD,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;oBAClC,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBACzC,IAAI,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;wBACjD,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC7B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,kBAAkB,IAAI,iBAAiB,CAAC,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC;QAExE,gCAAgC;QAChC,MAAM,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,8BAA8B,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,MAAM,uBAAuB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACpD,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CACrC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAC7E,CAAC;IACJ,CAAC,CAAC,CAAC,MAAM,CAAC;IAEV,OAAO;QACL,WAAW;QACX,qBAAqB;QACrB,kBAAkB;QAClB,8BAA8B;QAC9B,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,YAAY;QACZ,uBAAuB;KACxB,CAAC;AACJ,CAAC"}

package/dist/claude/correlator.js

@@ -6,7 +6,6 @@ export function correlateFindings(findings, sessions, repoPath) {
         const correlation = findCorrelation(finding, sessions, repoPath);
         if (correlation) {
             finding.trace = correlation.trace;
-            finding.fix = correlation.fix;
         }
         else if (!finding.manual) {
             finding.manual = guessManualNote(finding);
@@ -52,9 +51,8 @@ function findCorrelation(finding, sessions, repoPath) {
                 return false;
             });
             if (matchedFile) {
-                const trace = buildTrace(finding, prompt, session, matchedFile);
-                const fix = generateFix(finding, prompt);
-                return { trace, fix };
+                const trace = buildTrace(finding, prompt, session, matchedFile, repoPath);
+                return { trace };
             }
         }
     }
@@ -71,14 +69,22 @@ function extractFilePath(path) {
     // "supabase/migrations/0007_orgs.sql" or "app/api/upload/route.ts"
     return path;
 }
-function buildTrace(finding, prompt, session, matchedFile) {
+function relativize(filePath, repoPath) {
+    const prefix = repoPath.endsWith("/") ? repoPath : repoPath + "/";
+    if (filePath.startsWith(prefix))
+        return filePath.slice(prefix.length);
+    return filePath;
+}
+function buildTrace(finding, prompt, session, matchedFile, repoPath) {
     const ts = formatTimestamp(prompt.timestamp || session.timestamp);
     const lineCount = estimateLineCount(prompt, matchedFile);
+    const relFile = relativize(matchedFile, repoPath);
     return {
         prompt: `"${truncate(prompt.text, 120)}"`,
         session: `${ts} · claude code`,
-        file: `${matchedFile}${lineCount ? ` (+${lineCount} lines)` : ""}`,
+        file: `${relFile}${lineCount ? ` (+${lineCount} lines)` : ""}`,
         result: inferResult(finding),
+        missingConstraints: detectMissingConstraints(finding, prompt),
     };
 }
 function inferResult(finding) {
@@ -112,67 +118,79 @@ function inferResult(finding) {
     }
     return `The prompt produced this code without the security constraint. The omission led to ${finding.title.toLowerCase()}.`;
 }
-function generateFix(finding, prompt) {
-    const originalPrompt = prompt.text.toLowerCase();
+const CONCERN_MAP = {
+    crypto: [
+        { keywords: ["auth tag", "authentication tag", "gcm tag", "tag verification", "verify tag"], label: "No mention of auth tag verification for GCM mode" },
+        { keywords: ["key derivation", "kdf", "pbkdf", "scrypt", "argon"], label: "No mention of key derivation function" },
+        { keywords: ["tamper", "integrity", "reject ciphertext", "verify integrity"], label: "No mention of tampered ciphertext rejection" },
+        { keywords: ["iv", "nonce", "initialization vector", "random iv"], label: "No mention of IV/nonce management" },
+    ],
+    rls: [
+        { keywords: ["rls", "row level security", "enable rls"], label: "No mention of Row Level Security" },
+        { keywords: ["policy", "policies", "access policy"], label: "No mention of access policy definition" },
+        { keywords: ["anon", "anonymous", "deny anon", "block anon"], label: "No mention of denying anonymous access" },
+    ],
+    injection: [
+        { keywords: ["parameterized", "prepared statement", "bind param", "placeholder"], label: "No mention of parameterized queries" },
+        { keywords: ["validate input", "input validation", "sanitize input"], label: "No mention of input validation" },
+    ],
+    webhook: [
+        { keywords: ["signature", "verify signature", "stripe-signature", "webhook secret"], label: "No mention of signature verification" },
+        { keywords: ["replay", "idempotency", "idempotent"], label: "No mention of replay protection" },
+    ],
+    xss: [
+        { keywords: ["sanitize", "sanitization", "escape", "encoding", "encode"], label: "No mention of output sanitization/encoding" },
+        { keywords: ["csp", "content-security-policy", "content security"], label: "No mention of Content Security Policy" },
+        { keywords: ["innerhtml", "dangerouslysetinnerhtml", "raw html"], label: "No mention of avoiding raw HTML insertion" },
+    ],
+    auth: [
+        { keywords: ["session", "token", "jwt", "verify token", "check session"], label: "No mention of session/token verification" },
+        { keywords: ["access control", "authorization", "permission", "role"], label: "No mention of access control" },
+        { keywords: ["401", "unauthorized", "reject unauthenticated"], label: "No mention of rejecting unauthenticated requests" },
+    ],
+    upload: [
+        { keywords: ["mime", "file type", "content-type", "allowed types"], label: "No mention of MIME type validation" },
+        { keywords: ["size limit", "max size", "file size", "cap size"], label: "No mention of file size limit" },
+        { keywords: ["filename", "sanitize name", "path traversal"], label: "No mention of filename sanitization" },
+    ],
+};
+function categorizeFinding(finding) {
     const title = finding.title.toLowerCase();
-    if (title.includes("rls") || title.includes("row level security")) {
-        return [
-            `"${truncate(prompt.text, 80)}.`,
-            `Enable row level security and add a policy so a user can only select rows`,
-            `for their own records. Deny anon access by default."`,
-        ];
-    }
-    if (title.includes("upload") || title.includes("validation")) {
-        return [
-            `"${truncate(prompt.text, 80)}.`,
-            `Validate MIME type (images only), cap size at 5MB, sanitize the filename`,
-            `against path traversal, require an authenticated session, and enforce an`,
-            `RLS policy so a user can only write to their own folder."`,
-        ];
-    }
-    if (title.includes("injection") || title.includes("interpolat")) {
-        return [
-            `"${truncate(prompt.text, 80)}.`,
-            `Validate the params as ISO dates and use parameterized Supabase filters —`,
-            `never string-concatenate user input into the query."`,
-        ];
-    }
-    if (title.includes("webhook") || title.includes("signature")) {
-        return [
-            `"${truncate(prompt.text, 80)}.`,
-            `Verify the Stripe-Signature header against the webhook secret and reject`,
-            `any event that fails verification."`,
-        ];
-    }
-    if (title.includes("xss") || title.includes("cross-site")) {
-        return [
-            `"${truncate(prompt.text, 80)}.`,
-            `Sanitize all user-provided content before rendering. Use proper encoding`,
-            `and never set innerHTML with unescaped user data."`,
-        ];
-    }
+    const meta = finding.meta.toLowerCase();
+    if (title.includes("rls") || title.includes("row level security"))
+        return "rls";
+    if (title.includes("upload") || title.includes("validation"))
+        return "upload";
+    if (title.includes("injection") || title.includes("interpolat"))
+        return "injection";
+    if (title.includes("webhook") || title.includes("signature"))
+        return "webhook";
+    if (title.includes("xss") || title.includes("cross-site"))
+        return "xss";
     if (title.includes("cipher") || title.includes("crypto") ||
         title.includes("gcm") || title.includes("decipher") ||
-        title.includes("hash") || title.includes("hmac")) {
-        return [
-            `"${truncate(prompt.text, 80)}.`,
-            `Use authenticated encryption (e.g. GCM with auth tag verification),`,
-            `a strong key derivation function, and reject tampered ciphertext."`,
-        ];
-    }
-    if (title.includes("auth") && !title.includes("webhook")) {
-        return [
-            `"${truncate(prompt.text, 80)}.`,
-            `Add authentication middleware that verifies the session token before`,
-            `processing the request. Reject unauthenticated requests with 401."`,
-        ];
-    }
-    // Generic fallback fix
-    return [
-        `"${truncate(prompt.text, 80)}.`,
-        `Add security constraints: validate inputs, enforce authentication,`,
-        `and follow least-privilege defaults."`,
-    ];
+        title.includes("hash") || title.includes("hmac"))
+        return "crypto";
+    if (meta.includes("auth") || title.includes("auth"))
+        return "auth";
+    return null;
+}
+function detectMissingConstraints(finding, prompt) {
+    const category = categorizeFinding(finding);
+    if (!category)
+        return [];
+    const concerns = CONCERN_MAP[category];
+    if (!concerns)
+        return [];
+    const promptText = prompt.text.toLowerCase();
+    const missing = [];
+    for (const concern of concerns) {
+        const mentioned = concern.keywords.some((kw) => promptText.includes(kw));
+        if (!mentioned) {
+            missing.push(concern.label);
+        }
+    }
+    return missing;
 }
 function formatTimestamp(ts) {
     if (!ts)

package/dist/claude/correlator.js.map

@@ -1 +1 @@
-{"version":3,"file":"correlator.js","sourceRoot":"","sources":["../../src/claude/correlator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAa9C,MAAM,UAAU,iBAAiB,CAC/B,QAAmB,EACnB,QAAyB,EACzB,QAAgB;IAEhB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM;YAAE,SAAS;QAE9C,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjE,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;YAClC,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC;QAChC,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,OAAgB,EAChB,QAAyB,EACzB,QAAgB;IAEhB,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,4FAA4F;IAC5F,uFAAuF;IACvF,MAAM,oBAAoB,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAElG,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACnD,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC9D,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAExC,mBAAmB;gBACnB,IACE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;oBAC9B,CAAC,KAAK,WAAW;oBACjB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EACvB,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,iBAAiB;gBACjB,IAAI,YAAY,KAAK,WAAW;oBAAE,OAAO,IAAI,CAAC;gBAE9C,mEAAmE;gBACnE,qEAAqE;gBACrE,oEAAoE;gBACpE,IAAI,WAAW,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;oBACvF,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;oBACrF,IAAI,OAAO,IAAI,oBAAoB,IAAI,OAAO,KAAK,oBAAoB;wBAAE,OAAO,IAAI,CAAC;oBACrF,2EAA2E;oBAC3E,IAAI,OAAO,IAAI,oBAAoB,EAAE,CAAC;wBACpC,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;4BACrF,OAAO,IAAI,CAAC;wBACd,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;gBAChE,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACzC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,gEAAgE;IAChE,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjD,mEAAmE;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CACjB,OAAgB,EAChB,MAAoB,EACpB,OAAsB,EACtB,WAAmB;IAEnB,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEzD,OAAO;QACL,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG;QACzC,OAAO,EAAE,GAAG,EAAE,gBAAgB;QAC9B,IAAI,EAAE,GAAG,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;QAClE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAExC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAClE,OAAO,gFAAgF,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7D,OAAO,sFAAsF,CAAC;IAChG,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,OAAO,8EAA8E,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,OAAO,kFAAkF,CAAC;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1D,OAAO,sFAAsF,CAAC;IAChG,CAAC;IACD,IACE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACpD,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnD,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAChD,CAAC;QACD,OAAO,+HAA+H,CAAC;IACzI,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,OAAO,8EAA8E,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACrE,OAAO,0GAA0G,CAAC;IACpH,CAAC;IAED,OAAO,sFAAsF,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC;AAC9H,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB,EAAE,MAAoB;IACzD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAE1C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAClE,OAAO;YACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;YAChC,2EAA2E;YAC3E,sDAAsD;SACvD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,OAAO;YACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;YAChC,0EAA0E;YAC1E,0EAA0E;YAC1E,2DAA2D;SAC5D,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,OAAO;YACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;YAChC,2EAA2E;YAC3E,sDAAsD;SACvD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,OAAO;YACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;YAChC,0EAA0E;YAC1E,qCAAqC;SACtC,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1D,OAAO;YACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;YAChC,0EAA0E;YAC1E,oDAAoD;SACrD,CAAC;IACJ,CAAC;IAED,IACE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACpD,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnD,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAChD,CAAC;QACD,OAAO;YACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;YAChC,qEAAqE;YACrE,oEAAoE;SACrE,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,OAAO;YACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;YAChC,sEAAsE;YACtE,oEAAoE;SACrE,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,OAAO;QACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;QAChC,oEAAoE;QACpE,uCAAuC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,EAAU;IACjC,IAAI,CAAC,EAAE;QAAE,OAAO,cAAc,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;AACvC,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAoB,EACpB,WAAmB;IAEnB,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,kJAAkJ,CAAC;IAC5J,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,6GAA6G,CAAC;IACvH,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzD,OAAO,gGAAgG,CAAC;IAC1G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"correlator.js","sourceRoot":"","sources":["../../src/claude/correlator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAY9C,MAAM,UAAU,iBAAiB,CAC/B,QAAmB,EACnB,QAAyB,EACzB,QAAgB;IAEhB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM;YAAE,SAAS;QAE9C,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjE,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;QACpC,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,OAAgB,EAChB,QAAyB,EACzB,QAAgB;IAEhB,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,4FAA4F;IAC5F,uFAAuF;IACvF,MAAM,oBAAoB,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAElG,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACnD,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC9D,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAExC,mBAAmB;gBACnB,IACE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;oBAC9B,CAAC,KAAK,WAAW;oBACjB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EACvB,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,iBAAiB;gBACjB,IAAI,YAAY,KAAK,WAAW;oBAAE,OAAO,IAAI,CAAC;gBAE9C,mEAAmE;gBACnE,qEAAqE;gBACrE,oEAAoE;gBACpE,IAAI,WAAW,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;oBACvF,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;oBACrF,IAAI,OAAO,IAAI,oBAAoB,IAAI,OAAO,KAAK,oBAAoB;wBAAE,OAAO,IAAI,CAAC;oBACrF,2EAA2E;oBAC3E,IAAI,OAAO,IAAI,oBAAoB,EAAE,CAAC;wBACpC,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;4BACrF,OAAO,IAAI,CAAC;wBACd,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAC1E,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,gEAAgE;IAChE,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjD,mEAAmE;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,QAAgB;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC;IAClE,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CACjB,OAAgB,EAChB,MAAoB,EACpB,OAAsB,EACtB,WAAmB,EACnB,QAAgB;IAEhB,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAElD,OAAO;QACL,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG;QACzC,OAAO,EAAE,GAAG,EAAE,gBAAgB;QAC9B,IAAI,EAAE,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC;QAC5B,kBAAkB,EAAE,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAExC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAClE,OAAO,gFAAgF,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7D,OAAO,sFAAsF,CAAC;IAChG,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,OAAO,8EAA8E,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,OAAO,kFAAkF,CAAC;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1D,OAAO,sFAAsF,CAAC;IAChG,CAAC;IACD,IACE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACpD,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnD,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAChD,CAAC;QACD,OAAO,+HAA+H,CAAC;IACzI,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,OAAO,8EAA8E,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACrE,OAAO,0GAA0G,CAAC;IACpH,CAAC;IAED,OAAO,sFAAsF,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC;AAC9H,CAAC;AAOD,MAAM,WAAW,GAA8B;IAC7C,MAAM,EAAE;QACN,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,oBAAoB,EAAE,SAAS,EAAE,kBAAkB,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,kDAAkD,EAAE;QACxJ,EAAE,QAAQ,EAAE,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE;QACnH,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE;QACpI,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE;KAChH;IACD,GAAG,EAAE;QACH,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE;QACpG,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE;QACtG,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE;KAChH;IACD,SAAS,EAAE;QACT,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,oBAAoB,EAAE,YAAY,EAAE,aAAa,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE;QAChI,EAAE,QAAQ,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE;KAChH;IACD,OAAO,EAAE;QACP,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE;QACpI,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE;KAChG;IACD,GAAG,EAAE;QACH,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,4CAA4C,EAAE;QAC/H,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,yBAAyB,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE;QACpH,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,yBAAyB,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE;KACvH;IACD,IAAI,EAAE;QACJ,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,eAAe,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE;QAC7H,EAAE,QAAQ,EAAE,CAAC,gBAAgB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE;QAC9G,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,cAAc,EAAE,wBAAwB,CAAC,EAAE,KAAK,EAAE,kDAAkD,EAAE;KAC3H;IACD,MAAM,EAAE;QACN,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE;QACjH,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE;QACzG,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,gBAAgB,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE;KAC5G;CACF,CAAC;AAEF,SAAS,iBAAiB,CAAC,OAAgB;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAExC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9E,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,WAAW,CAAC;IACpF,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/E,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,IACE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACpD,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnD,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAChD,OAAO,QAAQ,CAAC;IAClB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAEnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAgB,EAAE,MAAoB;IACtE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,EAAU;IACjC,IAAI,CAAC,EAAE;QAAE,OAAO,cAAc,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;AACvC,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAoB,EACpB,WAAmB;IAEnB,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,kJAAkJ,CAAC;IAC5J,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,6GAA6G,CAAC;IACvH,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzD,OAAO,gGAAgG,CAAC;IAC1G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/hooks/installer.d.ts

@@ -0,0 +1,3 @@
+export declare function isHookInstalled(repoPath: string): boolean;
+export declare function installHook(repoPath: string): Promise<void>;
+export declare function removeHook(repoPath: string): Promise<void>;

package/dist/hooks/installer.js

@@ -0,0 +1,94 @@
+import { writeFile, unlink, readFile, chmod, mkdir } from "node:fs/promises";
+import { join } from "node:path";
+import { existsSync, readFileSync } from "node:fs";
+import pc from "picocolors";
+const MARKER = "# vibecheck hook";
+const VIBECHECK_BLOCK = `${MARKER}
+npx vibe-checking --with-cursor-history --with-claude-history
+if [ $? -ne 0 ]; then exit 1; fi`;
+const PRE_PUSH_SCRIPT = `#!/bin/sh
+${VIBECHECK_BLOCK}
+`;
+/** Insert vibecheck before the first bare `exit` or `exit 0`, or append if none found. */
+function insertBeforeFirstExit(content, block) {
+    const lines = content.split("\n");
+    const exitPattern = /^\s*exit(\s+0)?\s*(#.*)?$/;
+    for (let i = 0; i < lines.length; i++) {
+        if (exitPattern.test(lines[i])) {
+            const before = lines.slice(0, i);
+            const after = lines.slice(i);
+            return [...before, "", block, "", ...after].join("\n");
+        }
+    }
+    return content.trimEnd() + "\n\n" + block + "\n";
+}
+function hookPath(repoPath) {
+    return join(repoPath, ".git", "hooks", "pre-push");
+}
+export function isHookInstalled(repoPath) {
+    const path = hookPath(repoPath);
+    if (!existsSync(path))
+        return false;
+    try {
+        const content = readFileSync(path, "utf-8");
+        return content.includes(MARKER);
+    }
+    catch {
+        return false;
+    }
+}
+export async function installHook(repoPath) {
+    const hooksDir = join(repoPath, ".git", "hooks");
+    if (!existsSync(join(repoPath, ".git"))) {
+        console.log(pc.red("not a git repository — cannot install hook."));
+        return;
+    }
+    const path = hookPath(repoPath);
+    if (existsSync(path)) {
+        const existing = await readFile(path, "utf-8");
+        if (existing.includes(MARKER)) {
+            console.log(pc.dim("vibecheck hook is already installed."));
+            return;
+        }
+        await writeFile(path, insertBeforeFirstExit(existing, VIBECHECK_BLOCK), "utf-8");
+        console.log(pc.green("✓ vibecheck added to existing pre-push hook."));
+    }
+    else {
+        if (!existsSync(hooksDir)) {
+            await mkdir(hooksDir, { recursive: true });
+        }
+        await writeFile(path, PRE_PUSH_SCRIPT, "utf-8");
+        await chmod(path, 0o755);
+        console.log(pc.green("✓ pre-push hook installed."));
+    }
+    console.log(pc.dim("vibecheck will run automatically on every git push."));
+}
+export async function removeHook(repoPath) {
+    const path = hookPath(repoPath);
+    if (!existsSync(path)) {
+        console.log(pc.dim("no pre-push hook found."));
+        return;
+    }
+    const content = await readFile(path, "utf-8");
+    if (!content.includes(MARKER)) {
+        console.log(pc.dim("pre-push hook exists but was not installed by vibecheck."));
+        return;
+    }
+    // If the hook only contains our script, remove the file
+    const lines = content.split("\n");
+    const otherLines = lines.filter((l) => !l.includes(MARKER) && !l.includes("vibe-checking") && l.trim() !== "#!/bin/sh" && l.trim() !== "");
+    if (otherLines.length === 0) {
+        await unlink(path);
+        console.log(pc.green("✓ pre-push hook removed."));
+    }
+    else {
+        // Remove just our section
+        const cleaned = content
+            .replace(/\n*# vibecheck hook\nnpx vibe-checking[^\n]*\nif \[ \$\? -ne 0 \]; then exit 1; fi/g, "")
+            .replace(/\n*# vibecheck hook\nnpx vibe-checking[^\n]*/g, "")
+            .trimEnd() + "\n";
+        await writeFile(path, cleaned, "utf-8");
+        console.log(pc.green("✓ vibecheck removed from pre-push hook."));
+    }
+}
+//# sourceMappingURL=installer.js.map

package/dist/hooks/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../src/hooks/installer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAElC,MAAM,eAAe,GAAG,GAAG,MAAM;;iCAEA,CAAC;AAElC,MAAM,eAAe,GAAG;EACtB,eAAe;CAChB,CAAC;AAEF,0FAA0F;AAC1F,SAAS,qBAAqB,CAAC,OAAe,EAAE,KAAa;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,2BAA2B,CAAC;IAEhD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7B,OAAO,CAAC,GAAG,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,EAAE,GAAG,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEhC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,MAAM,SAAS,CAAC,IAAI,EAAE,qBAAqB,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,OAAO,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC,CAAC;IACxE,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,SAAS,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEhC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC,CAAC;QAChF,OAAO;IACT,CAAC;IAED,wDAAwD;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAC1G,CAAC;IAEF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,0BAA0B;QAC1B,MAAM,OAAO,GAAG,OAAO;aACpB,OAAO,CACN,qFAAqF,EACrF,EAAE,CACH;aACA,OAAO,CAAC,+CAA+C,EAAE,EAAE,CAAC;aAC5D,OAAO,EAAE,GAAG,IAAI,CAAC;QACpB,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}