@aigne/afs-cli 1.11.0-beta.11 → 1.11.0-beta.12

package/dist/config/loader.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"loader.mjs","names":[],"sources":["../../src/config/loader.ts"],"sourcesContent":["import { access, readFile } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { parse } from \"smol-toml\";\nimport { resolveEnvVarsInObject } from \"./env.js\";\nimport { type AFSConfig, ConfigSchema, type MountConfig, type ServeConfig } from \"./schema.js\";\n\nexport const CONFIG_DIR_NAME = \".afs-config\";\nexport const CONFIG_FILE_NAME = \"config.toml\";\n\nexport interface ConfigLoaderOptions {\n  /** Custom path to user-level config directory (for testing) */\n  userConfigDir?: string;\n}\n\nexport interface LoadWithSourcesResult {\n  config: AFSConfig;\n  /** Map from \"namespace:path\" → config directory that defines this mount */\n  mountSources: Map<string, string>;\n}\n\n/**\n * Environment variable to override user config directory.\n * Useful for testing to isolate from real user config.\n */\nexport const AFS_USER_CONFIG_DIR_ENV = \"AFS_USER_CONFIG_DIR\";\n\n/**\n * Loads and merges AFS configuration from multiple layers\n *\n * Layer priority (lowest to highest):\n * 1. User-level: ~/.afs-config/config.toml\n * 2. All intermediate directories from project root to cwd\n *\n * Example: if cwd is /project/packages/cli, configs are merged from:\n *   ~/.afs-config/config.toml (user)\n *   /project/.afs-config/config.toml (project root, has .git)\n *   /project/packages/.afs-config/config.toml (intermediate)\n *   /project/packages/cli/.afs-config/config.toml (cwd)\n */\nexport class ConfigLoader {\n  private userConfigDir: string;\n\n  constructor(options: ConfigLoaderOptions = {}) {\n    // Priority: options > environment variable > default (~/.afs-config)\n    this.userConfigDir =\n      options.userConfigDir ??\n      process.env[AFS_USER_CONFIG_DIR_ENV] ??\n      join(homedir(), CONFIG_DIR_NAME);\n  }\n\n  /**\n   * Load and merge configuration from all layers\n   *\n   * @param cwd - Current working directory (defaults to process.cwd())\n   * @returns Merged configuration\n   * @throws Error on invalid config, TOML parse error, or duplicate mount paths\n   */\n  async load(cwd: string = process.cwd()): Promise<AFSConfig> {\n    const result = await this.loadWithSources(cwd);\n    return result.config;\n  }\n\n  /**\n   * Load and merge configuration, also returning the config directory for each mount.\n   *\n   * mountSources maps \"namespace:path\" → config directory path (dirname of config file).\n   * Used by credential store to scope credentials per config location.\n   */\n  async loadWithSources(cwd: string = process.cwd()): Promise<LoadWithSourcesResult> {\n    const configPaths = await this.getConfigPaths(cwd);\n    const entries: { config: AFSConfig; configDir: string }[] = [];\n\n    for (const configPath of configPaths) {\n      const config = await this.loadSingleConfig(configPath);\n      entries.push({ config, configDir: dirname(configPath) });\n    }\n\n    return this.mergeConfigsWithSources(entries);\n  }\n\n  /**\n   * Get paths to all existing config files\n   *\n   * Collects configs from:\n   * 1. User-level: ~/.afs-config/config.toml\n   * 2. Project root (or topmost .afs-config dir) to cwd: all .afs-config/config.toml files\n   */\n  async getConfigPaths(cwd: string = process.cwd()): Promise<string[]> {\n    const paths: string[] = [];\n\n    // 1. User-level config\n    const userConfigPath = join(this.userConfigDir, CONFIG_FILE_NAME);\n    if (await this.fileExists(userConfigPath)) {\n      paths.push(userConfigPath);\n    }\n\n    // 2. Find project root (look for .git going up)\n    const projectRoot = await this.findProjectRoot(cwd);\n\n    // 3. Determine start directory\n    // If project root found, use it; otherwise find topmost .afs-config directory\n    const startDir = projectRoot ?? (await this.findTopmostAfsDir(cwd)) ?? cwd;\n\n    // 4. Collect all config files from start to cwd\n    // Exclude user config directory to avoid loading it twice\n    const intermediatePaths = await this.collectConfigsFromTo(startDir, cwd, this.userConfigDir);\n    paths.push(...intermediatePaths);\n\n    return paths;\n  }\n\n  /**\n   * Find the topmost directory containing .afs-config from startDir going up\n   */\n  private async findTopmostAfsDir(startDir: string): Promise<string | null> {\n    let currentDir = startDir;\n    let topmostAfsDir: string | null = null;\n\n    while (true) {\n      if (await this.fileExists(join(currentDir, CONFIG_DIR_NAME))) {\n        topmostAfsDir = currentDir;\n      }\n\n      const parentDir = dirname(currentDir);\n      if (parentDir === currentDir) {\n        // Reached filesystem root\n        break;\n      }\n      currentDir = parentDir;\n    }\n\n    return topmostAfsDir;\n  }\n\n  /**\n   * Collect all config files from startDir to endDir (inclusive)\n   * Returns paths in order from startDir to endDir (parent to child)\n   *\n   * @param excludeConfigDir - Optional config directory to exclude (to avoid duplicates)\n   */\n  private async collectConfigsFromTo(\n    startDir: string,\n    endDir: string,\n    excludeConfigDir?: string,\n  ): Promise<string[]> {\n    const paths: string[] = [];\n\n    // Build list of directories from startDir to endDir\n    const dirs: string[] = [];\n    let current = endDir;\n\n    while (true) {\n      dirs.unshift(current); // prepend to maintain parent-to-child order\n\n      if (current === startDir) {\n        break;\n      }\n\n      const parent = dirname(current);\n      if (parent === current) {\n        // Reached filesystem root without finding startDir\n        // This shouldn't happen if startDir is an ancestor of endDir\n        break;\n      }\n      current = parent;\n    }\n\n    // Check each directory for config file\n    for (const dir of dirs) {\n      const configDir = join(dir, CONFIG_DIR_NAME);\n      // Skip if this is the excluded config directory (e.g., user config already loaded)\n      if (excludeConfigDir && configDir === excludeConfigDir) {\n        continue;\n      }\n      const configPath = join(configDir, CONFIG_FILE_NAME);\n      if (await this.fileExists(configPath)) {\n        paths.push(configPath);\n      }\n    }\n\n    return paths;\n  }\n\n  /**\n   * Load a single config file\n   */\n  private async loadSingleConfig(configPath: string): Promise<AFSConfig> {\n    const content = await readFile(configPath, \"utf-8\");\n\n    let parsed: unknown;\n    try {\n      parsed = parse(content);\n    } catch (error) {\n      throw new Error(\n        `Failed to parse TOML config at ${configPath}: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n\n    // Resolve environment variables with friendly error messages\n    let resolved: unknown;\n    try {\n      resolved = resolveEnvVarsInObject(parsed);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      // Extract variable name from error message like \"Environment variable GITHUB_TOKEN is not defined\"\n      const match = message.match(/Environment variable (\\w+) is not defined/);\n      if (match) {\n        const varName = match[1];\n        throw new Error(\n          `Missing environment variable ${varName} in ${configPath}.\\n` +\n            `  Set it in your shell: export ${varName}=your_value\\n` +\n            `  Or add to .env file: ${varName}=your_value`,\n        );\n      }\n      throw new Error(`Failed to resolve environment variables in ${configPath}: ${message}`);\n    }\n\n    // Validate against schema\n    const result = ConfigSchema.safeParse(resolved);\n    if (!result.success) {\n      const errors = result.error.issues.map((e) => `${e.path.join(\".\")}: ${e.message}`).join(\"; \");\n      throw new Error(`Invalid config at ${configPath}: ${errors}`);\n    }\n\n    return result.data;\n  }\n\n  /**\n   * Create a composite key for namespace+path duplicate detection\n   * Uses empty string for undefined namespace (default namespace)\n   */\n  private makeNamespacePathKey(namespace: string | undefined, path: string): string {\n    return `${namespace ?? \"\"}:${path}`;\n  }\n\n  /**\n   * Merge configs with source tracking.\n   * Returns merged config plus a map of mount key → config directory.\n   */\n  private mergeConfigsWithSources(\n    entries: { config: AFSConfig; configDir: string }[],\n  ): LoadWithSourcesResult {\n    const mountIndexByKey = new Map<string, number>();\n    const allMounts: MountConfig[] = [];\n    const mountSources = new Map<string, string>();\n    let mergedServe: ServeConfig | undefined;\n\n    for (const { config, configDir } of entries) {\n      for (const mount of config.mounts) {\n        const key = this.makeNamespacePathKey(mount.namespace, mount.path);\n        const existingIndex = mountIndexByKey.get(key);\n        if (existingIndex !== undefined) {\n          allMounts[existingIndex] = mount;\n        } else {\n          mountIndexByKey.set(key, allMounts.length);\n          allMounts.push(mount);\n        }\n        // Track source (child overrides parent)\n        mountSources.set(key, configDir);\n      }\n\n      if (config.serve) {\n        mergedServe = mergedServe ? { ...mergedServe, ...config.serve } : config.serve;\n      }\n    }\n\n    return {\n      config: { mounts: allMounts, serve: mergedServe },\n      mountSources,\n    };\n  }\n\n  /**\n   * Find project root by looking for .git\n   * Note: Only .git is used as project root marker, not .afs-config,\n   * because .afs-config can exist at multiple levels for hierarchical config\n   */\n  async findProjectRoot(startDir: string): Promise<string | null> {\n    let currentDir = startDir;\n\n    while (true) {\n      // Check for .git directory\n      if (await this.fileExists(join(currentDir, \".git\"))) {\n        return currentDir;\n      }\n\n      const parentDir = dirname(currentDir);\n      if (parentDir === currentDir) {\n        // Reached filesystem root\n        return null;\n      }\n      currentDir = parentDir;\n    }\n  }\n\n  /**\n   * Check if a file or directory exists\n   */\n  private async fileExists(path: string): Promise<boolean> {\n    try {\n      await access(path);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n}\n\n// Default singleton instance\nexport const configLoader = new ConfigLoader();\n"],"mappings":";;;;;;;;AAOA,MAAa,kBAAkB;AAC/B,MAAa,mBAAmB;;;;;AAiBhC,MAAa,0BAA0B;;;;;;;;;;;;;;AAevC,IAAa,eAAb,MAA0B;CACxB,AAAQ;CAER,YAAY,UAA+B,EAAE,EAAE;AAE7C,OAAK,gBACH,QAAQ,iBACR,QAAQ,IAAI,4BACZ,KAAK,SAAS,EAAE,gBAAgB;;;;;;;;;CAUpC,MAAM,KAAK,MAAc,QAAQ,KAAK,EAAsB;AAE1D,UADe,MAAM,KAAK,gBAAgB,IAAI,EAChC;;;;;;;;CAShB,MAAM,gBAAgB,MAAc,QAAQ,KAAK,EAAkC;EACjF,MAAM,cAAc,MAAM,KAAK,eAAe,IAAI;EAClD,MAAM,UAAsD,EAAE;AAE9D,OAAK,MAAM,cAAc,aAAa;GACpC,MAAM,SAAS,MAAM,KAAK,iBAAiB,WAAW;AACtD,WAAQ,KAAK;IAAE;IAAQ,WAAW,QAAQ,WAAW;IAAE,CAAC;;AAG1D,SAAO,KAAK,wBAAwB,QAAQ;;;;;;;;;CAU9C,MAAM,eAAe,MAAc,QAAQ,KAAK,EAAqB;EACnE,MAAM,QAAkB,EAAE;EAG1B,MAAM,iBAAiB,KAAK,KAAK,eAAe,iBAAiB;AACjE,MAAI,MAAM,KAAK,WAAW,eAAe,CACvC,OAAM,KAAK,eAAe;EAQ5B,MAAM,WAJc,MAAM,KAAK,gBAAgB,IAAI,IAIlB,MAAM,KAAK,kBAAkB,IAAI,IAAK;EAIvE,MAAM,oBAAoB,MAAM,KAAK,qBAAqB,UAAU,KAAK,KAAK,cAAc;AAC5F,QAAM,KAAK,GAAG,kBAAkB;AAEhC,SAAO;;;;;CAMT,MAAc,kBAAkB,UAA0C;EACxE,IAAI,aAAa;EACjB,IAAI,gBAA+B;AAEnC,SAAO,MAAM;AACX,OAAI,MAAM,KAAK,WAAW,KAAK,YAAY,gBAAgB,CAAC,CAC1D,iBAAgB;GAGlB,MAAM,YAAY,QAAQ,WAAW;AACrC,OAAI,cAAc,WAEhB;AAEF,gBAAa;;AAGf,SAAO;;;;;;;;CAST,MAAc,qBACZ,UACA,QACA,kBACmB;EACnB,MAAM,QAAkB,EAAE;EAG1B,MAAM,OAAiB,EAAE;EACzB,IAAI,UAAU;AAEd,SAAO,MAAM;AACX,QAAK,QAAQ,QAAQ;AAErB,OAAI,YAAY,SACd;GAGF,MAAM,SAAS,QAAQ,QAAQ;AAC/B,OAAI,WAAW,QAGb;AAEF,aAAU;;AAIZ,OAAK,MAAM,OAAO,MAAM;GACtB,MAAM,YAAY,KAAK,KAAK,gBAAgB;AAE5C,OAAI,oBAAoB,cAAc,iBACpC;GAEF,MAAM,aAAa,KAAK,WAAW,iBAAiB;AACpD,OAAI,MAAM,KAAK,WAAW,WAAW,CACnC,OAAM,KAAK,WAAW;;AAI1B,SAAO;;;;;CAMT,MAAc,iBAAiB,YAAwC;EACrE,MAAM,UAAU,MAAM,SAAS,YAAY,QAAQ;EAEnD,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,QAAQ;WAChB,OAAO;AACd,SAAM,IAAI,MACR,kCAAkC,WAAW,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GACxG;;EAIH,IAAI;AACJ,MAAI;AACF,cAAW,uBAAuB,OAAO;WAClC,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAEtE,MAAM,QAAQ,QAAQ,MAAM,4CAA4C;AACxE,OAAI,OAAO;IACT,MAAM,UAAU,MAAM;AACtB,UAAM,IAAI,MACR,gCAAgC,QAAQ,MAAM,WAAW,oCACrB,QAAQ,sCAChB,QAAQ,aACrC;;AAEH,SAAM,IAAI,MAAM,8CAA8C,WAAW,IAAI,UAAU;;EAIzF,MAAM,SAAS,aAAa,UAAU,SAAS;AAC/C,MAAI,CAAC,OAAO,SAAS;GACnB,MAAM,SAAS,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,KAAK;AAC7F,SAAM,IAAI,MAAM,qBAAqB,WAAW,IAAI,SAAS;;AAG/D,SAAO,OAAO;;;;;;CAOhB,AAAQ,qBAAqB,WAA+B,MAAsB;AAChF,SAAO,GAAG,aAAa,GAAG,GAAG;;;;;;CAO/B,AAAQ,wBACN,SACuB;EACvB,MAAM,kCAAkB,IAAI,KAAqB;EACjD,MAAM,YAA2B,EAAE;EACnC,MAAM,+BAAe,IAAI,KAAqB;EAC9C,IAAI;AAEJ,OAAK,MAAM,EAAE,QAAQ,eAAe,SAAS;AAC3C,QAAK,MAAM,SAAS,OAAO,QAAQ;IACjC,MAAM,MAAM,KAAK,qBAAqB,MAAM,WAAW,MAAM,KAAK;IAClE,MAAM,gBAAgB,gBAAgB,IAAI,IAAI;AAC9C,QAAI,kBAAkB,OACpB,WAAU,iBAAiB;SACtB;AACL,qBAAgB,IAAI,KAAK,UAAU,OAAO;AAC1C,eAAU,KAAK,MAAM;;AAGvB,iBAAa,IAAI,KAAK,UAAU;;AAGlC,OAAI,OAAO,MACT,eAAc,cAAc;IAAE,GAAG;IAAa,GAAG,OAAO;IAAO,GAAG,OAAO;;AAI7E,SAAO;GACL,QAAQ;IAAE,QAAQ;IAAW,OAAO;IAAa;GACjD;GACD;;;;;;;CAQH,MAAM,gBAAgB,UAA0C;EAC9D,IAAI,aAAa;AAEjB,SAAO,MAAM;AAEX,OAAI,MAAM,KAAK,WAAW,KAAK,YAAY,OAAO,CAAC,CACjD,QAAO;GAGT,MAAM,YAAY,QAAQ,WAAW;AACrC,OAAI,cAAc,WAEhB,QAAO;AAET,gBAAa;;;;;;CAOjB,MAAc,WAAW,MAAgC;AACvD,MAAI;AACF,SAAM,OAAO,KAAK;AAClB,UAAO;UACD;AACN,UAAO;;;;AAMb,MAAa,eAAe,IAAI,cAAc"}
+{"version":3,"file":"loader.mjs","names":[],"sources":["../../src/config/loader.ts"],"sourcesContent":["import { access, readFile } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { parse } from \"smol-toml\";\nimport { resolveEnvVarsInObject } from \"./env.js\";\nimport { type AFSConfig, ConfigSchema, type MountConfig, type ServeConfig } from \"./schema.js\";\n\nexport const CONFIG_DIR_NAME = \".afs-config\";\nexport const CONFIG_FILE_NAME = \"config.toml\";\n\nexport interface ConfigLoaderOptions {\n  /** Custom path to user-level config directory (for testing) */\n  userConfigDir?: string;\n}\n\nexport interface LoadWithSourcesResult {\n  config: AFSConfig;\n  /** Map from \"namespace:path\" → config directory that defines this mount */\n  mountSources: Map<string, string>;\n  /** Config directories in order from outermost to innermost */\n  configDirs: string[];\n}\n\n/**\n * Environment variable to override user config directory.\n * Useful for testing to isolate from real user config.\n */\nexport const AFS_USER_CONFIG_DIR_ENV = \"AFS_USER_CONFIG_DIR\";\n\n/**\n * Loads and merges AFS configuration from multiple layers\n *\n * Layer priority (lowest to highest):\n * 1. User-level: ~/.afs-config/config.toml\n * 2. All intermediate directories from project root to cwd\n *\n * Example: if cwd is /project/packages/cli, configs are merged from:\n *   ~/.afs-config/config.toml (user)\n *   /project/.afs-config/config.toml (project root, has .git)\n *   /project/packages/.afs-config/config.toml (intermediate)\n *   /project/packages/cli/.afs-config/config.toml (cwd)\n */\nexport class ConfigLoader {\n  private userConfigDir: string;\n\n  constructor(options: ConfigLoaderOptions = {}) {\n    // Priority: options > environment variable > default (~/.afs-config)\n    this.userConfigDir =\n      options.userConfigDir ??\n      process.env[AFS_USER_CONFIG_DIR_ENV] ??\n      join(homedir(), CONFIG_DIR_NAME);\n  }\n\n  /**\n   * Load and merge configuration from all layers\n   *\n   * @param cwd - Current working directory (defaults to process.cwd())\n   * @returns Merged configuration\n   * @throws Error on invalid config, TOML parse error, or duplicate mount paths\n   */\n  async load(cwd: string = process.cwd()): Promise<AFSConfig> {\n    const result = await this.loadWithSources(cwd);\n    return result.config;\n  }\n\n  /**\n   * Load and merge configuration, also returning the config directory for each mount.\n   *\n   * mountSources maps \"namespace:path\" → config directory path (dirname of config file).\n   * Used by credential store to scope credentials per config location.\n   */\n  async loadWithSources(cwd: string = process.cwd()): Promise<LoadWithSourcesResult> {\n    const configPaths = await this.getConfigPaths(cwd);\n    const entries: { config: AFSConfig; configDir: string }[] = [];\n\n    for (const configPath of configPaths) {\n      const config = await this.loadSingleConfig(configPath);\n      entries.push({ config, configDir: dirname(configPath) });\n    }\n\n    return this.mergeConfigsWithSources(entries);\n  }\n\n  /**\n   * Get paths to all existing config files\n   *\n   * Collects configs from:\n   * 1. User-level: ~/.afs-config/config.toml\n   * 2. Project root (or topmost .afs-config dir) to cwd: all .afs-config/config.toml files\n   */\n  async getConfigPaths(cwd: string = process.cwd()): Promise<string[]> {\n    const paths: string[] = [];\n\n    // 1. User-level config\n    const userConfigPath = join(this.userConfigDir, CONFIG_FILE_NAME);\n    if (await this.fileExists(userConfigPath)) {\n      paths.push(userConfigPath);\n    }\n\n    // 2. Find project root (look for .git going up)\n    const projectRoot = await this.findProjectRoot(cwd);\n\n    // 3. Determine start directory\n    // If project root found, use it; otherwise find topmost .afs-config directory\n    const startDir = projectRoot ?? (await this.findTopmostAfsDir(cwd)) ?? cwd;\n\n    // 4. Collect all config files from start to cwd\n    // Exclude user config directory to avoid loading it twice\n    const intermediatePaths = await this.collectConfigsFromTo(startDir, cwd, this.userConfigDir);\n    paths.push(...intermediatePaths);\n\n    return paths;\n  }\n\n  /**\n   * Find the topmost directory containing .afs-config from startDir going up\n   */\n  private async findTopmostAfsDir(startDir: string): Promise<string | null> {\n    let currentDir = startDir;\n    let topmostAfsDir: string | null = null;\n\n    while (true) {\n      if (await this.fileExists(join(currentDir, CONFIG_DIR_NAME))) {\n        topmostAfsDir = currentDir;\n      }\n\n      const parentDir = dirname(currentDir);\n      if (parentDir === currentDir) {\n        // Reached filesystem root\n        break;\n      }\n      currentDir = parentDir;\n    }\n\n    return topmostAfsDir;\n  }\n\n  /**\n   * Collect all config files from startDir to endDir (inclusive)\n   * Returns paths in order from startDir to endDir (parent to child)\n   *\n   * @param excludeConfigDir - Optional config directory to exclude (to avoid duplicates)\n   */\n  private async collectConfigsFromTo(\n    startDir: string,\n    endDir: string,\n    excludeConfigDir?: string,\n  ): Promise<string[]> {\n    const paths: string[] = [];\n\n    // Build list of directories from startDir to endDir\n    const dirs: string[] = [];\n    let current = endDir;\n\n    while (true) {\n      dirs.unshift(current); // prepend to maintain parent-to-child order\n\n      if (current === startDir) {\n        break;\n      }\n\n      const parent = dirname(current);\n      if (parent === current) {\n        // Reached filesystem root without finding startDir\n        // This shouldn't happen if startDir is an ancestor of endDir\n        break;\n      }\n      current = parent;\n    }\n\n    // Check each directory for config file\n    for (const dir of dirs) {\n      const configDir = join(dir, CONFIG_DIR_NAME);\n      // Skip if this is the excluded config directory (e.g., user config already loaded)\n      if (excludeConfigDir && configDir === excludeConfigDir) {\n        continue;\n      }\n      const configPath = join(configDir, CONFIG_FILE_NAME);\n      if (await this.fileExists(configPath)) {\n        paths.push(configPath);\n      }\n    }\n\n    return paths;\n  }\n\n  /**\n   * Load a single config file\n   */\n  private async loadSingleConfig(configPath: string): Promise<AFSConfig> {\n    const content = await readFile(configPath, \"utf-8\");\n\n    let parsed: unknown;\n    try {\n      parsed = parse(content);\n    } catch (error) {\n      throw new Error(\n        `Failed to parse TOML config at ${configPath}: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n\n    // Resolve environment variables with friendly error messages\n    let resolved: unknown;\n    try {\n      resolved = resolveEnvVarsInObject(parsed);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      // Extract variable name from error message like \"Environment variable GITHUB_TOKEN is not defined\"\n      const match = message.match(/Environment variable (\\w+) is not defined/);\n      if (match) {\n        const varName = match[1];\n        throw new Error(\n          `Missing environment variable ${varName} in ${configPath}.\\n` +\n            `  Set it in your shell: export ${varName}=your_value\\n` +\n            `  Or add to .env file: ${varName}=your_value`,\n        );\n      }\n      throw new Error(`Failed to resolve environment variables in ${configPath}: ${message}`);\n    }\n\n    // Validate against schema\n    const result = ConfigSchema.safeParse(resolved);\n    if (!result.success) {\n      const errors = result.error.issues.map((e) => `${e.path.join(\".\")}: ${e.message}`).join(\"; \");\n      throw new Error(`Invalid config at ${configPath}: ${errors}`);\n    }\n\n    return result.data;\n  }\n\n  /**\n   * Create a composite key for namespace+path duplicate detection\n   * Uses empty string for undefined namespace (default namespace)\n   */\n  private makeNamespacePathKey(namespace: string | undefined, path: string): string {\n    return `${namespace ?? \"\"}:${path}`;\n  }\n\n  /**\n   * Merge configs with source tracking.\n   * Returns merged config plus a map of mount key → config directory.\n   */\n  private mergeConfigsWithSources(\n    entries: { config: AFSConfig; configDir: string }[],\n  ): LoadWithSourcesResult {\n    const mountIndexByKey = new Map<string, number>();\n    const allMounts: MountConfig[] = [];\n    const mountSources = new Map<string, string>();\n    let mergedServe: ServeConfig | undefined;\n\n    for (const { config, configDir } of entries) {\n      for (const mount of config.mounts) {\n        const key = this.makeNamespacePathKey(mount.namespace, mount.path);\n        const existingIndex = mountIndexByKey.get(key);\n        if (existingIndex !== undefined) {\n          allMounts[existingIndex] = mount;\n        } else {\n          mountIndexByKey.set(key, allMounts.length);\n          allMounts.push(mount);\n        }\n        // Track source (child overrides parent)\n        mountSources.set(key, configDir);\n      }\n\n      if (config.serve) {\n        mergedServe = mergedServe ? { ...mergedServe, ...config.serve } : config.serve;\n      }\n    }\n\n    return {\n      config: { mounts: allMounts, serve: mergedServe },\n      mountSources,\n      configDirs: entries.map((e) => e.configDir),\n    };\n  }\n\n  /**\n   * Find project root by looking for .git\n   * Note: Only .git is used as project root marker, not .afs-config,\n   * because .afs-config can exist at multiple levels for hierarchical config\n   */\n  async findProjectRoot(startDir: string): Promise<string | null> {\n    let currentDir = startDir;\n\n    while (true) {\n      // Check for .git directory\n      if (await this.fileExists(join(currentDir, \".git\"))) {\n        return currentDir;\n      }\n\n      const parentDir = dirname(currentDir);\n      if (parentDir === currentDir) {\n        // Reached filesystem root\n        return null;\n      }\n      currentDir = parentDir;\n    }\n  }\n\n  /**\n   * Check if a file or directory exists\n   */\n  private async fileExists(path: string): Promise<boolean> {\n    try {\n      await access(path);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n}\n\n// Default singleton instance\nexport const configLoader = new ConfigLoader();\n"],"mappings":";;;;;;;;AAOA,MAAa,kBAAkB;AAC/B,MAAa,mBAAmB;;;;;AAmBhC,MAAa,0BAA0B;;;;;;;;;;;;;;AAevC,IAAa,eAAb,MAA0B;CACxB,AAAQ;CAER,YAAY,UAA+B,EAAE,EAAE;AAE7C,OAAK,gBACH,QAAQ,iBACR,QAAQ,IAAI,4BACZ,KAAK,SAAS,EAAE,gBAAgB;;;;;;;;;CAUpC,MAAM,KAAK,MAAc,QAAQ,KAAK,EAAsB;AAE1D,UADe,MAAM,KAAK,gBAAgB,IAAI,EAChC;;;;;;;;CAShB,MAAM,gBAAgB,MAAc,QAAQ,KAAK,EAAkC;EACjF,MAAM,cAAc,MAAM,KAAK,eAAe,IAAI;EAClD,MAAM,UAAsD,EAAE;AAE9D,OAAK,MAAM,cAAc,aAAa;GACpC,MAAM,SAAS,MAAM,KAAK,iBAAiB,WAAW;AACtD,WAAQ,KAAK;IAAE;IAAQ,WAAW,QAAQ,WAAW;IAAE,CAAC;;AAG1D,SAAO,KAAK,wBAAwB,QAAQ;;;;;;;;;CAU9C,MAAM,eAAe,MAAc,QAAQ,KAAK,EAAqB;EACnE,MAAM,QAAkB,EAAE;EAG1B,MAAM,iBAAiB,KAAK,KAAK,eAAe,iBAAiB;AACjE,MAAI,MAAM,KAAK,WAAW,eAAe,CACvC,OAAM,KAAK,eAAe;EAQ5B,MAAM,WAJc,MAAM,KAAK,gBAAgB,IAAI,IAIlB,MAAM,KAAK,kBAAkB,IAAI,IAAK;EAIvE,MAAM,oBAAoB,MAAM,KAAK,qBAAqB,UAAU,KAAK,KAAK,cAAc;AAC5F,QAAM,KAAK,GAAG,kBAAkB;AAEhC,SAAO;;;;;CAMT,MAAc,kBAAkB,UAA0C;EACxE,IAAI,aAAa;EACjB,IAAI,gBAA+B;AAEnC,SAAO,MAAM;AACX,OAAI,MAAM,KAAK,WAAW,KAAK,YAAY,gBAAgB,CAAC,CAC1D,iBAAgB;GAGlB,MAAM,YAAY,QAAQ,WAAW;AACrC,OAAI,cAAc,WAEhB;AAEF,gBAAa;;AAGf,SAAO;;;;;;;;CAST,MAAc,qBACZ,UACA,QACA,kBACmB;EACnB,MAAM,QAAkB,EAAE;EAG1B,MAAM,OAAiB,EAAE;EACzB,IAAI,UAAU;AAEd,SAAO,MAAM;AACX,QAAK,QAAQ,QAAQ;AAErB,OAAI,YAAY,SACd;GAGF,MAAM,SAAS,QAAQ,QAAQ;AAC/B,OAAI,WAAW,QAGb;AAEF,aAAU;;AAIZ,OAAK,MAAM,OAAO,MAAM;GACtB,MAAM,YAAY,KAAK,KAAK,gBAAgB;AAE5C,OAAI,oBAAoB,cAAc,iBACpC;GAEF,MAAM,aAAa,KAAK,WAAW,iBAAiB;AACpD,OAAI,MAAM,KAAK,WAAW,WAAW,CACnC,OAAM,KAAK,WAAW;;AAI1B,SAAO;;;;;CAMT,MAAc,iBAAiB,YAAwC;EACrE,MAAM,UAAU,MAAM,SAAS,YAAY,QAAQ;EAEnD,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,QAAQ;WAChB,OAAO;AACd,SAAM,IAAI,MACR,kCAAkC,WAAW,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GACxG;;EAIH,IAAI;AACJ,MAAI;AACF,cAAW,uBAAuB,OAAO;WAClC,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAEtE,MAAM,QAAQ,QAAQ,MAAM,4CAA4C;AACxE,OAAI,OAAO;IACT,MAAM,UAAU,MAAM;AACtB,UAAM,IAAI,MACR,gCAAgC,QAAQ,MAAM,WAAW,oCACrB,QAAQ,sCAChB,QAAQ,aACrC;;AAEH,SAAM,IAAI,MAAM,8CAA8C,WAAW,IAAI,UAAU;;EAIzF,MAAM,SAAS,aAAa,UAAU,SAAS;AAC/C,MAAI,CAAC,OAAO,SAAS;GACnB,MAAM,SAAS,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,KAAK;AAC7F,SAAM,IAAI,MAAM,qBAAqB,WAAW,IAAI,SAAS;;AAG/D,SAAO,OAAO;;;;;;CAOhB,AAAQ,qBAAqB,WAA+B,MAAsB;AAChF,SAAO,GAAG,aAAa,GAAG,GAAG;;;;;;CAO/B,AAAQ,wBACN,SACuB;EACvB,MAAM,kCAAkB,IAAI,KAAqB;EACjD,MAAM,YAA2B,EAAE;EACnC,MAAM,+BAAe,IAAI,KAAqB;EAC9C,IAAI;AAEJ,OAAK,MAAM,EAAE,QAAQ,eAAe,SAAS;AAC3C,QAAK,MAAM,SAAS,OAAO,QAAQ;IACjC,MAAM,MAAM,KAAK,qBAAqB,MAAM,WAAW,MAAM,KAAK;IAClE,MAAM,gBAAgB,gBAAgB,IAAI,IAAI;AAC9C,QAAI,kBAAkB,OACpB,WAAU,iBAAiB;SACtB;AACL,qBAAgB,IAAI,KAAK,UAAU,OAAO;AAC1C,eAAU,KAAK,MAAM;;AAGvB,iBAAa,IAAI,KAAK,UAAU;;AAGlC,OAAI,OAAO,MACT,eAAc,cAAc;IAAE,GAAG;IAAa,GAAG,OAAO;IAAO,GAAG,OAAO;;AAI7E,SAAO;GACL,QAAQ;IAAE,QAAQ;IAAW,OAAO;IAAa;GACjD;GACA,YAAY,QAAQ,KAAK,MAAM,EAAE,UAAU;GAC5C;;;;;;;CAQH,MAAM,gBAAgB,UAA0C;EAC9D,IAAI,aAAa;AAEjB,SAAO,MAAM;AAEX,OAAI,MAAM,KAAK,WAAW,KAAK,YAAY,OAAO,CAAC,CACjD,QAAO;GAGT,MAAM,YAAY,QAAQ,WAAW;AACrC,OAAI,cAAc,WAEhB,QAAO;AAET,gBAAa;;;;;;CAOjB,MAAc,WAAW,MAAgC;AACvD,MAAI;AACF,SAAM,OAAO,KAAK;AAClB,UAAO;UACD;AACN,UAAO;;;;AAMb,MAAa,eAAe,IAAI,cAAc"}

package/dist/config/program-install.cjs

@@ -0,0 +1,276 @@
+const require_rolldown_runtime = require('../_virtual/rolldown_runtime.cjs');
+const require_loader = require('./loader.cjs');
+const require_mount_commands = require('./mount-commands.cjs');
+let node_child_process = require("node:child_process");
+let node_fs_promises = require("node:fs/promises");
+let node_os = require("node:os");
+let node_path = require("node:path");
+let _aigne_afs = require("@aigne/afs");
+
+//#region src/config/program-install.ts
+/**
+* Program Installation
+*
+* Business logic for installing, listing, and removing AFS programs.
+* Programs are installed to ~/.afs-config/programs/<id>/ and mounted
+* at /programs/<id> in the CWD config (same as `mount add`).
+*/
+/**
+* Get the user config directory.
+*/
+function getUserConfigDir(override) {
+	return override ?? process.env[require_loader.AFS_USER_CONFIG_DIR_ENV] ?? (0, node_path.join)((0, node_os.homedir)(), require_loader.CONFIG_DIR_NAME);
+}
+/**
+* Detect the source type from a source string.
+*/
+function detectSourceType(source) {
+	if (source.endsWith(".zip")) return "zip";
+	if (source.startsWith("https://github.com/") || source.startsWith("http://github.com/") || source.startsWith("github.com/")) return "github";
+	return "local";
+}
+/**
+* Parse a GitHub URL into owner, repo, ref, and optional subdirectory.
+*/
+function parseGitHubURL(url) {
+	let normalized = url;
+	if (normalized.startsWith("github.com/")) normalized = `https://${normalized}`;
+	const match = normalized.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?(?:\/tree\/([^/]+)\/(.+))?$/);
+	if (!match) return { cloneUrl: normalized.replace(/\/+$/, "") };
+	const [, owner, repo, _ref, subdir] = match;
+	return {
+		cloneUrl: `https://github.com/${owner}/${repo}.git`,
+		subdir: subdir || void 0
+	};
+}
+/**
+* Resolve a source to a local directory path containing program.yaml.
+* For github/zip sources, downloads/extracts to a temp directory.
+*
+* Returns [resolvedPath, tempDir?] — tempDir is set if caller should clean up.
+*/
+async function resolveSource(source, type, cwd) {
+	switch (type) {
+		case "local": {
+			const dirPath = (0, node_path.isAbsolute)(source) ? source : (0, node_path.resolve)(cwd, source);
+			try {
+				await (0, node_fs_promises.readdir)(dirPath);
+			} catch {
+				throw new Error(`Source directory does not exist: ${dirPath}`);
+			}
+			return [dirPath, void 0];
+		}
+		case "github": {
+			const { cloneUrl, subdir } = parseGitHubURL(source);
+			const tempDir = (0, node_path.join)((0, node_os.tmpdir)(), `afs-install-${Date.now()}`);
+			await (0, node_fs_promises.mkdir)(tempDir, { recursive: true });
+			try {
+				(0, node_child_process.execSync)(`git clone --depth 1 ${cloneUrl} ${(0, node_path.join)(tempDir, "repo")}`, {
+					stdio: "pipe",
+					timeout: 6e4
+				});
+			} catch (err) {
+				await (0, node_fs_promises.rm)(tempDir, {
+					recursive: true,
+					force: true
+				});
+				const msg = err instanceof Error ? err.message : String(err);
+				throw new Error(`Failed to clone GitHub repository: ${msg}`);
+			}
+			return [subdir ? (0, node_path.join)(tempDir, "repo", subdir) : (0, node_path.join)(tempDir, "repo"), tempDir];
+		}
+		case "zip": {
+			const zipPath = (0, node_path.isAbsolute)(source) ? source : (0, node_path.resolve)(cwd, source);
+			const tempDir = (0, node_path.join)((0, node_os.tmpdir)(), `afs-install-${Date.now()}`);
+			const extractDir = (0, node_path.join)(tempDir, "extracted");
+			await (0, node_fs_promises.mkdir)(extractDir, { recursive: true });
+			try {
+				const lines = (0, node_child_process.execSync)(`unzip -l "${zipPath}"`, {
+					encoding: "utf-8",
+					stdio: [
+						"pipe",
+						"pipe",
+						"pipe"
+					]
+				}).split("\n");
+				for (const line of lines) {
+					const trimmed = line.trim();
+					if (!trimmed || trimmed.startsWith("Archive:") || trimmed.startsWith("Length") || trimmed.startsWith("---")) continue;
+					const parts = trimmed.split(/\s+/);
+					if (parts.length >= 4) {
+						const name = parts.slice(3).join(" ");
+						if (name.includes("..") || name.startsWith("/")) {
+							await (0, node_fs_promises.rm)(tempDir, {
+								recursive: true,
+								force: true
+							});
+							throw new Error(`Zip file contains unsafe path: ${name}. Refusing to extract.`);
+						}
+					}
+				}
+			} catch (err) {
+				if (err instanceof Error && err.message.includes("unsafe path")) throw err;
+				await (0, node_fs_promises.rm)(tempDir, {
+					recursive: true,
+					force: true
+				});
+				const msg = err instanceof Error ? err.message : String(err);
+				throw new Error(`Failed to read zip file: ${msg}`);
+			}
+			try {
+				(0, node_child_process.execSync)(`unzip -o "${zipPath}" -d "${extractDir}"`, {
+					stdio: "pipe",
+					timeout: 3e4
+				});
+			} catch (err) {
+				await (0, node_fs_promises.rm)(tempDir, {
+					recursive: true,
+					force: true
+				});
+				const msg = err instanceof Error ? err.message : String(err);
+				throw new Error(`Failed to extract zip file: ${msg}`);
+			}
+			const entries = await (0, node_fs_promises.readdir)(extractDir);
+			if (entries.includes("program.yaml")) return [extractDir, tempDir];
+			if (entries.length === 1) {
+				const subPath = (0, node_path.join)(extractDir, entries[0]);
+				try {
+					if ((await (0, node_fs_promises.readdir)(subPath)).includes("program.yaml")) return [subPath, tempDir];
+				} catch {}
+			}
+			await (0, node_fs_promises.rm)(tempDir, {
+				recursive: true,
+				force: true
+			});
+			throw new Error("No program.yaml found in zip archive");
+		}
+		default: throw new Error(`Unsupported source type: ${type}`);
+	}
+}
+/**
+* Validate a directory contains a valid program.yaml.
+* Returns the parsed manifest.
+*/
+async function validateProgramDir(dirPath) {
+	const yamlPath = (0, node_path.join)(dirPath, "program.yaml");
+	let content;
+	try {
+		content = await (0, node_fs_promises.readFile)(yamlPath, "utf-8");
+	} catch {
+		throw new Error(`No program.yaml found in ${dirPath}`);
+	}
+	return (0, _aigne_afs.parseProgramManifest)(content);
+}
+/**
+* Install a program from a source (local dir, GitHub URL, or zip file).
+*/
+async function installProgram(source, options) {
+	const userConfigDir = getUserConfigDir(options?.userConfigDir);
+	const cwd = options?.cwd ?? process.cwd();
+	const [resolvedPath, tempDir] = await resolveSource(source, detectSourceType(source), cwd);
+	try {
+		const manifest = await validateProgramDir(resolvedPath);
+		const programsDir = (0, node_path.join)(userConfigDir, "programs");
+		const installPath = (0, node_path.join)(programsDir, manifest.id);
+		const mountPath = `/programs/${manifest.id}`;
+		await (0, node_fs_promises.mkdir)(programsDir, { recursive: true });
+		const tempInstallPath = `${installPath}.installing`;
+		await (0, node_fs_promises.rm)(tempInstallPath, {
+			recursive: true,
+			force: true
+		});
+		await (0, node_fs_promises.cp)(resolvedPath, tempInstallPath, { recursive: true });
+		await (0, node_fs_promises.rm)(installPath, {
+			recursive: true,
+			force: true
+		});
+		await (0, node_fs_promises.rename)(tempInstallPath, installPath);
+		await (0, node_fs_promises.mkdir)((0, node_path.join)(userConfigDir, "data", manifest.id), { recursive: true });
+		await require_mount_commands.persistMount(cwd, {
+			path: mountPath,
+			uri: `fs://${installPath}`
+		});
+		const { notifyDaemonReload } = await Promise.resolve().then(() => require("../program/daemon-integration.cjs"));
+		const { getDaemonStatus } = await Promise.resolve().then(() => require("../daemon/manager.cjs"));
+		await notifyDaemonReload({ getDaemonStatus });
+		return {
+			success: true,
+			programId: manifest.id,
+			programName: manifest.name,
+			installPath,
+			mountPath
+		};
+	} finally {
+		if (tempDir) await (0, node_fs_promises.rm)(tempDir, {
+			recursive: true,
+			force: true
+		});
+	}
+}
+/**
+* List installed programs by scanning ~/.afs-config/programs/.
+*/
+async function listInstalledPrograms(options) {
+	const programsDir = (0, node_path.join)(getUserConfigDir(options?.userConfigDir), "programs");
+	let entries;
+	try {
+		entries = await (0, node_fs_promises.readdir)(programsDir);
+	} catch {
+		return [];
+	}
+	const programs = [];
+	for (const entry of entries) {
+		const dirPath = (0, node_path.join)(programsDir, entry);
+		try {
+			const manifest = await validateProgramDir(dirPath);
+			programs.push({
+				id: manifest.id,
+				name: manifest.name,
+				entrypoint: manifest.entrypoint,
+				installPath: dirPath,
+				mountPath: `/programs/${manifest.id}`
+			});
+		} catch {}
+	}
+	return programs;
+}
+/**
+* Remove an installed program.
+*/
+async function removeProgram(programId, options) {
+	const userConfigDir = getUserConfigDir(options?.userConfigDir);
+	const cwd = options?.cwd ?? process.cwd();
+	const installPath = (0, node_path.join)(userConfigDir, "programs", programId);
+	try {
+		await (0, node_fs_promises.readdir)(installPath);
+	} catch {
+		throw new Error(`Program "${programId}" is not installed`);
+	}
+	await (0, node_fs_promises.rm)(installPath, {
+		recursive: true,
+		force: true
+	});
+	await require_mount_commands.unpersistMount(cwd, `/programs/${programId}`);
+	let purgedData = false;
+	if (options?.purge) {
+		await (0, node_fs_promises.rm)((0, node_path.join)(userConfigDir, "data", programId), {
+			recursive: true,
+			force: true
+		});
+		purgedData = true;
+	}
+	const { notifyDaemonReload } = await Promise.resolve().then(() => require("../program/daemon-integration.cjs"));
+	const { getDaemonStatus } = await Promise.resolve().then(() => require("../daemon/manager.cjs"));
+	await notifyDaemonReload({ getDaemonStatus });
+	return {
+		success: true,
+		programId,
+		purgedData
+	};
+}
+
+//#endregion
+exports.getUserConfigDir = getUserConfigDir;
+exports.installProgram = installProgram;
+exports.listInstalledPrograms = listInstalledPrograms;
+exports.removeProgram = removeProgram;

package/dist/config/program-install.d.mts

@@ -0,0 +1 @@
+import "@aigne/afs";

package/dist/config/program-install.mjs

@@ -0,0 +1,273 @@
+import { AFS_USER_CONFIG_DIR_ENV, CONFIG_DIR_NAME } from "./loader.mjs";
+import { persistMount, unpersistMount } from "./mount-commands.mjs";
+import { execSync } from "node:child_process";
+import { cp, mkdir, readFile, readdir, rename, rm } from "node:fs/promises";
+import { homedir, tmpdir } from "node:os";
+import { isAbsolute, join, resolve } from "node:path";
+import { parseProgramManifest } from "@aigne/afs";
+
+//#region src/config/program-install.ts
+/**
+* Program Installation
+*
+* Business logic for installing, listing, and removing AFS programs.
+* Programs are installed to ~/.afs-config/programs/<id>/ and mounted
+* at /programs/<id> in the CWD config (same as `mount add`).
+*/
+/**
+* Get the user config directory.
+*/
+function getUserConfigDir(override) {
+	return override ?? process.env[AFS_USER_CONFIG_DIR_ENV] ?? join(homedir(), CONFIG_DIR_NAME);
+}
+/**
+* Detect the source type from a source string.
+*/
+function detectSourceType(source) {
+	if (source.endsWith(".zip")) return "zip";
+	if (source.startsWith("https://github.com/") || source.startsWith("http://github.com/") || source.startsWith("github.com/")) return "github";
+	return "local";
+}
+/**
+* Parse a GitHub URL into owner, repo, ref, and optional subdirectory.
+*/
+function parseGitHubURL(url) {
+	let normalized = url;
+	if (normalized.startsWith("github.com/")) normalized = `https://${normalized}`;
+	const match = normalized.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?(?:\/tree\/([^/]+)\/(.+))?$/);
+	if (!match) return { cloneUrl: normalized.replace(/\/+$/, "") };
+	const [, owner, repo, _ref, subdir] = match;
+	return {
+		cloneUrl: `https://github.com/${owner}/${repo}.git`,
+		subdir: subdir || void 0
+	};
+}
+/**
+* Resolve a source to a local directory path containing program.yaml.
+* For github/zip sources, downloads/extracts to a temp directory.
+*
+* Returns [resolvedPath, tempDir?] — tempDir is set if caller should clean up.
+*/
+async function resolveSource(source, type, cwd) {
+	switch (type) {
+		case "local": {
+			const dirPath = isAbsolute(source) ? source : resolve(cwd, source);
+			try {
+				await readdir(dirPath);
+			} catch {
+				throw new Error(`Source directory does not exist: ${dirPath}`);
+			}
+			return [dirPath, void 0];
+		}
+		case "github": {
+			const { cloneUrl, subdir } = parseGitHubURL(source);
+			const tempDir = join(tmpdir(), `afs-install-${Date.now()}`);
+			await mkdir(tempDir, { recursive: true });
+			try {
+				execSync(`git clone --depth 1 ${cloneUrl} ${join(tempDir, "repo")}`, {
+					stdio: "pipe",
+					timeout: 6e4
+				});
+			} catch (err) {
+				await rm(tempDir, {
+					recursive: true,
+					force: true
+				});
+				const msg = err instanceof Error ? err.message : String(err);
+				throw new Error(`Failed to clone GitHub repository: ${msg}`);
+			}
+			return [subdir ? join(tempDir, "repo", subdir) : join(tempDir, "repo"), tempDir];
+		}
+		case "zip": {
+			const zipPath = isAbsolute(source) ? source : resolve(cwd, source);
+			const tempDir = join(tmpdir(), `afs-install-${Date.now()}`);
+			const extractDir = join(tempDir, "extracted");
+			await mkdir(extractDir, { recursive: true });
+			try {
+				const lines = execSync(`unzip -l "${zipPath}"`, {
+					encoding: "utf-8",
+					stdio: [
+						"pipe",
+						"pipe",
+						"pipe"
+					]
+				}).split("\n");
+				for (const line of lines) {
+					const trimmed = line.trim();
+					if (!trimmed || trimmed.startsWith("Archive:") || trimmed.startsWith("Length") || trimmed.startsWith("---")) continue;
+					const parts = trimmed.split(/\s+/);
+					if (parts.length >= 4) {
+						const name = parts.slice(3).join(" ");
+						if (name.includes("..") || name.startsWith("/")) {
+							await rm(tempDir, {
+								recursive: true,
+								force: true
+							});
+							throw new Error(`Zip file contains unsafe path: ${name}. Refusing to extract.`);
+						}
+					}
+				}
+			} catch (err) {
+				if (err instanceof Error && err.message.includes("unsafe path")) throw err;
+				await rm(tempDir, {
+					recursive: true,
+					force: true
+				});
+				const msg = err instanceof Error ? err.message : String(err);
+				throw new Error(`Failed to read zip file: ${msg}`);
+			}
+			try {
+				execSync(`unzip -o "${zipPath}" -d "${extractDir}"`, {
+					stdio: "pipe",
+					timeout: 3e4
+				});
+			} catch (err) {
+				await rm(tempDir, {
+					recursive: true,
+					force: true
+				});
+				const msg = err instanceof Error ? err.message : String(err);
+				throw new Error(`Failed to extract zip file: ${msg}`);
+			}
+			const entries = await readdir(extractDir);
+			if (entries.includes("program.yaml")) return [extractDir, tempDir];
+			if (entries.length === 1) {
+				const subPath = join(extractDir, entries[0]);
+				try {
+					if ((await readdir(subPath)).includes("program.yaml")) return [subPath, tempDir];
+				} catch {}
+			}
+			await rm(tempDir, {
+				recursive: true,
+				force: true
+			});
+			throw new Error("No program.yaml found in zip archive");
+		}
+		default: throw new Error(`Unsupported source type: ${type}`);
+	}
+}
+/**
+* Validate a directory contains a valid program.yaml.
+* Returns the parsed manifest.
+*/
+async function validateProgramDir(dirPath) {
+	const yamlPath = join(dirPath, "program.yaml");
+	let content;
+	try {
+		content = await readFile(yamlPath, "utf-8");
+	} catch {
+		throw new Error(`No program.yaml found in ${dirPath}`);
+	}
+	return parseProgramManifest(content);
+}
+/**
+* Install a program from a source (local dir, GitHub URL, or zip file).
+*/
+async function installProgram(source, options) {
+	const userConfigDir = getUserConfigDir(options?.userConfigDir);
+	const cwd = options?.cwd ?? process.cwd();
+	const [resolvedPath, tempDir] = await resolveSource(source, detectSourceType(source), cwd);
+	try {
+		const manifest = await validateProgramDir(resolvedPath);
+		const programsDir = join(userConfigDir, "programs");
+		const installPath = join(programsDir, manifest.id);
+		const mountPath = `/programs/${manifest.id}`;
+		await mkdir(programsDir, { recursive: true });
+		const tempInstallPath = `${installPath}.installing`;
+		await rm(tempInstallPath, {
+			recursive: true,
+			force: true
+		});
+		await cp(resolvedPath, tempInstallPath, { recursive: true });
+		await rm(installPath, {
+			recursive: true,
+			force: true
+		});
+		await rename(tempInstallPath, installPath);
+		await mkdir(join(userConfigDir, "data", manifest.id), { recursive: true });
+		await persistMount(cwd, {
+			path: mountPath,
+			uri: `fs://${installPath}`
+		});
+		const { notifyDaemonReload } = await import("../program/daemon-integration.mjs");
+		const { getDaemonStatus } = await import("../daemon/manager.mjs");
+		await notifyDaemonReload({ getDaemonStatus });
+		return {
+			success: true,
+			programId: manifest.id,
+			programName: manifest.name,
+			installPath,
+			mountPath
+		};
+	} finally {
+		if (tempDir) await rm(tempDir, {
+			recursive: true,
+			force: true
+		});
+	}
+}
+/**
+* List installed programs by scanning ~/.afs-config/programs/.
+*/
+async function listInstalledPrograms(options) {
+	const programsDir = join(getUserConfigDir(options?.userConfigDir), "programs");
+	let entries;
+	try {
+		entries = await readdir(programsDir);
+	} catch {
+		return [];
+	}
+	const programs = [];
+	for (const entry of entries) {
+		const dirPath = join(programsDir, entry);
+		try {
+			const manifest = await validateProgramDir(dirPath);
+			programs.push({
+				id: manifest.id,
+				name: manifest.name,
+				entrypoint: manifest.entrypoint,
+				installPath: dirPath,
+				mountPath: `/programs/${manifest.id}`
+			});
+		} catch {}
+	}
+	return programs;
+}
+/**
+* Remove an installed program.
+*/
+async function removeProgram(programId, options) {
+	const userConfigDir = getUserConfigDir(options?.userConfigDir);
+	const cwd = options?.cwd ?? process.cwd();
+	const installPath = join(userConfigDir, "programs", programId);
+	try {
+		await readdir(installPath);
+	} catch {
+		throw new Error(`Program "${programId}" is not installed`);
+	}
+	await rm(installPath, {
+		recursive: true,
+		force: true
+	});
+	await unpersistMount(cwd, `/programs/${programId}`);
+	let purgedData = false;
+	if (options?.purge) {
+		await rm(join(userConfigDir, "data", programId), {
+			recursive: true,
+			force: true
+		});
+		purgedData = true;
+	}
+	const { notifyDaemonReload } = await import("../program/daemon-integration.mjs");
+	const { getDaemonStatus } = await import("../daemon/manager.mjs");
+	await notifyDaemonReload({ getDaemonStatus });
+	return {
+		success: true,
+		programId,
+		purgedData
+	};
+}
+
+//#endregion
+export { getUserConfigDir, installProgram, listInstalledPrograms, removeProgram };
+//# sourceMappingURL=program-install.mjs.map

package/dist/config/program-install.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"program-install.mjs","names":[],"sources":["../../src/config/program-install.ts"],"sourcesContent":["/**\n * Program Installation\n *\n * Business logic for installing, listing, and removing AFS programs.\n * Programs are installed to ~/.afs-config/programs/<id>/ and mounted\n * at /programs/<id> in the CWD config (same as `mount add`).\n */\n\nimport { execSync } from \"node:child_process\";\nimport { cp, mkdir, readdir, readFile, rename, rm } from \"node:fs/promises\";\nimport { homedir, tmpdir } from \"node:os\";\nimport { isAbsolute, join, resolve } from \"node:path\";\nimport { type ProgramManifest, parseProgramManifest } from \"@aigne/afs\";\nimport { AFS_USER_CONFIG_DIR_ENV, CONFIG_DIR_NAME } from \"./loader.js\";\nimport { persistMount, unpersistMount } from \"./mount-commands.js\";\n\n// ─── Types ────────────────────────────────────────────────────────────────\n\nexport type SourceType = \"local\" | \"github\" | \"zip\";\n\nexport interface InstallResult {\n  success: boolean;\n  programId: string;\n  programName: string;\n  installPath: string;\n  mountPath: string;\n}\n\nexport interface InstalledProgram {\n  id: string;\n  name: string;\n  entrypoint: string;\n  installPath: string;\n  mountPath: string;\n}\n\nexport interface RemoveResult {\n  success: boolean;\n  programId: string;\n  purgedData: boolean;\n}\n\nexport interface InstallOptions {\n  /** Override user config dir (for testing) */\n  userConfigDir?: string;\n  /** CWD for persistMount (for testing) */\n  cwd?: string;\n}\n\nexport interface RemoveOptions extends InstallOptions {\n  /** Also remove program data directory */\n  purge?: boolean;\n}\n\n// ─── Helpers ──────────────────────────────────────────────────────────────\n\n/**\n * Get the user config directory.\n */\nexport function getUserConfigDir(override?: string): string {\n  return override ?? process.env[AFS_USER_CONFIG_DIR_ENV] ?? join(homedir(), CONFIG_DIR_NAME);\n}\n\n/**\n * Detect the source type from a source string.\n */\nexport function detectSourceType(source: string): SourceType {\n  // ZIP file\n  if (source.endsWith(\".zip\")) {\n    return \"zip\";\n  }\n\n  // GitHub URL patterns\n  if (\n    source.startsWith(\"https://github.com/\") ||\n    source.startsWith(\"http://github.com/\") ||\n    source.startsWith(\"github.com/\")\n  ) {\n    return \"github\";\n  }\n\n  // Default: local directory\n  return \"local\";\n}\n\n/**\n * Parse a GitHub URL into owner, repo, ref, and optional subdirectory.\n */\nexport function parseGitHubURL(url: string): {\n  cloneUrl: string;\n  subdir?: string;\n} {\n  // Normalize: ensure https://\n  let normalized = url;\n  if (normalized.startsWith(\"github.com/\")) {\n    normalized = `https://${normalized}`;\n  }\n\n  // Parse: https://github.com/owner/repo[/tree/ref/subdir]\n  const match = normalized.match(\n    /^https?:\\/\\/github\\.com\\/([^/]+)\\/([^/]+?)(?:\\.git)?(?:\\/tree\\/([^/]+)\\/(.+))?$/,\n  );\n  if (!match) {\n    // Simple case: just owner/repo\n    return { cloneUrl: normalized.replace(/\\/+$/, \"\") };\n  }\n\n  const [, owner, repo, _ref, subdir] = match;\n  const cloneUrl = `https://github.com/${owner}/${repo}.git`;\n\n  return {\n    cloneUrl,\n    subdir: subdir || undefined,\n  };\n}\n\n/**\n * Resolve a source to a local directory path containing program.yaml.\n * For github/zip sources, downloads/extracts to a temp directory.\n *\n * Returns [resolvedPath, tempDir?] — tempDir is set if caller should clean up.\n */\nexport async function resolveSource(\n  source: string,\n  type: SourceType,\n  cwd: string,\n): Promise<[string, string | undefined]> {\n  switch (type) {\n    case \"local\": {\n      const dirPath = isAbsolute(source) ? source : resolve(cwd, source);\n      // Verify it's a directory by trying to read it\n      try {\n        await readdir(dirPath);\n      } catch {\n        throw new Error(`Source directory does not exist: ${dirPath}`);\n      }\n      return [dirPath, undefined];\n    }\n\n    case \"github\": {\n      const { cloneUrl, subdir } = parseGitHubURL(source);\n      const tempDir = join(tmpdir(), `afs-install-${Date.now()}`);\n      await mkdir(tempDir, { recursive: true });\n\n      try {\n        execSync(`git clone --depth 1 ${cloneUrl} ${join(tempDir, \"repo\")}`, {\n          stdio: \"pipe\",\n          timeout: 60000,\n        });\n      } catch (err) {\n        await rm(tempDir, { recursive: true, force: true });\n        const msg = err instanceof Error ? err.message : String(err);\n        throw new Error(`Failed to clone GitHub repository: ${msg}`);\n      }\n\n      const resolvedPath = subdir ? join(tempDir, \"repo\", subdir) : join(tempDir, \"repo\");\n      return [resolvedPath, tempDir];\n    }\n\n    case \"zip\": {\n      const zipPath = isAbsolute(source) ? source : resolve(cwd, source);\n      const tempDir = join(tmpdir(), `afs-install-${Date.now()}`);\n      const extractDir = join(tempDir, \"extracted\");\n      await mkdir(extractDir, { recursive: true });\n\n      // Security: check zip contents for path traversal before extracting\n      try {\n        const listing = execSync(`unzip -l \"${zipPath}\"`, {\n          encoding: \"utf-8\",\n          stdio: [\"pipe\", \"pipe\", \"pipe\"],\n        });\n        // Each line after header has format: \"  length  date  time  name\"\n        const lines = listing.split(\"\\n\");\n        for (const line of lines) {\n          const trimmed = line.trim();\n          // Skip header/footer lines\n          if (\n            !trimmed ||\n            trimmed.startsWith(\"Archive:\") ||\n            trimmed.startsWith(\"Length\") ||\n            trimmed.startsWith(\"---\")\n          )\n            continue;\n          // Extract filename (last column)\n          const parts = trimmed.split(/\\s+/);\n          if (parts.length >= 4) {\n            const name = parts.slice(3).join(\" \");\n            if (name.includes(\"..\") || name.startsWith(\"/\")) {\n              await rm(tempDir, { recursive: true, force: true });\n              throw new Error(`Zip file contains unsafe path: ${name}. Refusing to extract.`);\n            }\n          }\n        }\n      } catch (err) {\n        if (err instanceof Error && err.message.includes(\"unsafe path\")) {\n          throw err;\n        }\n        await rm(tempDir, { recursive: true, force: true });\n        const msg = err instanceof Error ? err.message : String(err);\n        throw new Error(`Failed to read zip file: ${msg}`);\n      }\n\n      // Extract\n      try {\n        execSync(`unzip -o \"${zipPath}\" -d \"${extractDir}\"`, {\n          stdio: \"pipe\",\n          timeout: 30000,\n        });\n      } catch (err) {\n        await rm(tempDir, { recursive: true, force: true });\n        const msg = err instanceof Error ? err.message : String(err);\n        throw new Error(`Failed to extract zip file: ${msg}`);\n      }\n\n      // Find program.yaml: might be at root or in a single subdirectory\n      const entries = await readdir(extractDir);\n      // Check if program.yaml is at extract root\n      if (entries.includes(\"program.yaml\")) {\n        return [extractDir, tempDir];\n      }\n      // Check single subdirectory\n      if (entries.length === 1) {\n        const subPath = join(extractDir, entries[0]!);\n        try {\n          const subEntries = await readdir(subPath);\n          if (subEntries.includes(\"program.yaml\")) {\n            return [subPath, tempDir];\n          }\n        } catch {\n          // not a directory\n        }\n      }\n\n      await rm(tempDir, { recursive: true, force: true });\n      throw new Error(\"No program.yaml found in zip archive\");\n    }\n\n    default:\n      throw new Error(`Unsupported source type: ${type}`);\n  }\n}\n\n/**\n * Validate a directory contains a valid program.yaml.\n * Returns the parsed manifest.\n */\nexport async function validateProgramDir(dirPath: string): Promise<ProgramManifest> {\n  const yamlPath = join(dirPath, \"program.yaml\");\n  let content: string;\n  try {\n    content = await readFile(yamlPath, \"utf-8\");\n  } catch {\n    throw new Error(`No program.yaml found in ${dirPath}`);\n  }\n\n  return parseProgramManifest(content);\n}\n\n// ─── Main Functions ───────────────────────────────────────────────────────\n\n/**\n * Install a program from a source (local dir, GitHub URL, or zip file).\n */\nexport async function installProgram(\n  source: string,\n  options?: InstallOptions,\n): Promise<InstallResult> {\n  const userConfigDir = getUserConfigDir(options?.userConfigDir);\n  const cwd = options?.cwd ?? process.cwd();\n  const type = detectSourceType(source);\n\n  // 1. Resolve source to local directory\n  const [resolvedPath, tempDir] = await resolveSource(source, type, cwd);\n\n  try {\n    // 2. Validate program.yaml\n    const manifest = await validateProgramDir(resolvedPath);\n\n    // 3. Determine install target\n    const programsDir = join(userConfigDir, \"programs\");\n    const installPath = join(programsDir, manifest.id);\n    const mountPath = `/programs/${manifest.id}`;\n\n    // 4. Atomic install: copy to temp location, swap\n    await mkdir(programsDir, { recursive: true });\n    const tempInstallPath = `${installPath}.installing`;\n\n    // Clean up any previous failed install\n    await rm(tempInstallPath, { recursive: true, force: true });\n\n    // Copy program files\n    await cp(resolvedPath, tempInstallPath, { recursive: true });\n\n    // Remove old version if exists, then rename\n    await rm(installPath, { recursive: true, force: true });\n    await rename(tempInstallPath, installPath);\n\n    // 5. Ensure data directory exists\n    const dataDir = join(userConfigDir, \"data\", manifest.id);\n    await mkdir(dataDir, { recursive: true });\n\n    // 6. Persist mount to CWD config (same as mount add)\n    await persistMount(cwd, {\n      path: mountPath,\n      uri: `fs://${installPath}`,\n    });\n\n    // 7. Notify daemon to reload programs (best-effort)\n    const { notifyDaemonReload } = await import(\"../program/daemon-integration.js\");\n    const { getDaemonStatus } = await import(\"../daemon/manager.js\");\n    await notifyDaemonReload({ getDaemonStatus });\n\n    return {\n      success: true,\n      programId: manifest.id,\n      programName: manifest.name,\n      installPath,\n      mountPath,\n    };\n  } finally {\n    // 8. Cleanup temp dir\n    if (tempDir) {\n      await rm(tempDir, { recursive: true, force: true });\n    }\n  }\n}\n\n/**\n * List installed programs by scanning ~/.afs-config/programs/.\n */\nexport async function listInstalledPrograms(options?: InstallOptions): Promise<InstalledProgram[]> {\n  const userConfigDir = getUserConfigDir(options?.userConfigDir);\n  const programsDir = join(userConfigDir, \"programs\");\n\n  let entries: string[];\n  try {\n    entries = await readdir(programsDir);\n  } catch {\n    return []; // programs/ directory doesn't exist yet\n  }\n\n  const programs: InstalledProgram[] = [];\n\n  for (const entry of entries) {\n    const dirPath = join(programsDir, entry);\n    try {\n      const manifest = await validateProgramDir(dirPath);\n      programs.push({\n        id: manifest.id,\n        name: manifest.name,\n        entrypoint: manifest.entrypoint,\n        installPath: dirPath,\n        mountPath: `/programs/${manifest.id}`,\n      });\n    } catch {\n      // Skip directories without valid program.yaml\n    }\n  }\n\n  return programs;\n}\n\n/**\n * Remove an installed program.\n */\nexport async function removeProgram(\n  programId: string,\n  options?: RemoveOptions,\n): Promise<RemoveResult> {\n  const userConfigDir = getUserConfigDir(options?.userConfigDir);\n  const cwd = options?.cwd ?? process.cwd();\n  const installPath = join(userConfigDir, \"programs\", programId);\n\n  // Verify program exists\n  try {\n    await readdir(installPath);\n  } catch {\n    throw new Error(`Program \"${programId}\" is not installed`);\n  }\n\n  // Remove program directory\n  await rm(installPath, { recursive: true, force: true });\n\n  // Remove mount from config (searches cwd → project → user)\n  await unpersistMount(cwd, `/programs/${programId}`);\n\n  // Optionally purge data\n  let purgedData = false;\n  if (options?.purge) {\n    const dataDir = join(userConfigDir, \"data\", programId);\n    await rm(dataDir, { recursive: true, force: true });\n    purgedData = true;\n  }\n\n  // Notify daemon to reload programs (best-effort)\n  const { notifyDaemonReload } = await import(\"../program/daemon-integration.js\");\n  const { getDaemonStatus } = await import(\"../daemon/manager.js\");\n  await notifyDaemonReload({ getDaemonStatus });\n\n  return {\n    success: true,\n    programId,\n    purgedData,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA2DA,SAAgB,iBAAiB,UAA2B;AAC1D,QAAO,YAAY,QAAQ,IAAI,4BAA4B,KAAK,SAAS,EAAE,gBAAgB;;;;;AAM7F,SAAgB,iBAAiB,QAA4B;AAE3D,KAAI,OAAO,SAAS,OAAO,CACzB,QAAO;AAIT,KACE,OAAO,WAAW,sBAAsB,IACxC,OAAO,WAAW,qBAAqB,IACvC,OAAO,WAAW,cAAc,CAEhC,QAAO;AAIT,QAAO;;;;;AAMT,SAAgB,eAAe,KAG7B;CAEA,IAAI,aAAa;AACjB,KAAI,WAAW,WAAW,cAAc,CACtC,cAAa,WAAW;CAI1B,MAAM,QAAQ,WAAW,MACvB,kFACD;AACD,KAAI,CAAC,MAEH,QAAO,EAAE,UAAU,WAAW,QAAQ,QAAQ,GAAG,EAAE;CAGrD,MAAM,GAAG,OAAO,MAAM,MAAM,UAAU;AAGtC,QAAO;EACL,UAHe,sBAAsB,MAAM,GAAG,KAAK;EAInD,QAAQ,UAAU;EACnB;;;;;;;;AASH,eAAsB,cACpB,QACA,MACA,KACuC;AACvC,SAAQ,MAAR;EACE,KAAK,SAAS;GACZ,MAAM,UAAU,WAAW,OAAO,GAAG,SAAS,QAAQ,KAAK,OAAO;AAElE,OAAI;AACF,UAAM,QAAQ,QAAQ;WAChB;AACN,UAAM,IAAI,MAAM,oCAAoC,UAAU;;AAEhE,UAAO,CAAC,SAAS,OAAU;;EAG7B,KAAK,UAAU;GACb,MAAM,EAAE,UAAU,WAAW,eAAe,OAAO;GACnD,MAAM,UAAU,KAAK,QAAQ,EAAE,eAAe,KAAK,KAAK,GAAG;AAC3D,SAAM,MAAM,SAAS,EAAE,WAAW,MAAM,CAAC;AAEzC,OAAI;AACF,aAAS,uBAAuB,SAAS,GAAG,KAAK,SAAS,OAAO,IAAI;KACnE,OAAO;KACP,SAAS;KACV,CAAC;YACK,KAAK;AACZ,UAAM,GAAG,SAAS;KAAE,WAAW;KAAM,OAAO;KAAM,CAAC;IACnD,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,UAAM,IAAI,MAAM,sCAAsC,MAAM;;AAI9D,UAAO,CADc,SAAS,KAAK,SAAS,QAAQ,OAAO,GAAG,KAAK,SAAS,OAAO,EAC7D,QAAQ;;EAGhC,KAAK,OAAO;GACV,MAAM,UAAU,WAAW,OAAO,GAAG,SAAS,QAAQ,KAAK,OAAO;GAClE,MAAM,UAAU,KAAK,QAAQ,EAAE,eAAe,KAAK,KAAK,GAAG;GAC3D,MAAM,aAAa,KAAK,SAAS,YAAY;AAC7C,SAAM,MAAM,YAAY,EAAE,WAAW,MAAM,CAAC;AAG5C,OAAI;IAMF,MAAM,QALU,SAAS,aAAa,QAAQ,IAAI;KAChD,UAAU;KACV,OAAO;MAAC;MAAQ;MAAQ;MAAO;KAChC,CAAC,CAEoB,MAAM,KAAK;AACjC,SAAK,MAAM,QAAQ,OAAO;KACxB,MAAM,UAAU,KAAK,MAAM;AAE3B,SACE,CAAC,WACD,QAAQ,WAAW,WAAW,IAC9B,QAAQ,WAAW,SAAS,IAC5B,QAAQ,WAAW,MAAM,CAEzB;KAEF,MAAM,QAAQ,QAAQ,MAAM,MAAM;AAClC,SAAI,MAAM,UAAU,GAAG;MACrB,MAAM,OAAO,MAAM,MAAM,EAAE,CAAC,KAAK,IAAI;AACrC,UAAI,KAAK,SAAS,KAAK,IAAI,KAAK,WAAW,IAAI,EAAE;AAC/C,aAAM,GAAG,SAAS;QAAE,WAAW;QAAM,OAAO;QAAM,CAAC;AACnD,aAAM,IAAI,MAAM,kCAAkC,KAAK,wBAAwB;;;;YAI9E,KAAK;AACZ,QAAI,eAAe,SAAS,IAAI,QAAQ,SAAS,cAAc,CAC7D,OAAM;AAER,UAAM,GAAG,SAAS;KAAE,WAAW;KAAM,OAAO;KAAM,CAAC;IACnD,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,UAAM,IAAI,MAAM,4BAA4B,MAAM;;AAIpD,OAAI;AACF,aAAS,aAAa,QAAQ,QAAQ,WAAW,IAAI;KACnD,OAAO;KACP,SAAS;KACV,CAAC;YACK,KAAK;AACZ,UAAM,GAAG,SAAS;KAAE,WAAW;KAAM,OAAO;KAAM,CAAC;IACnD,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,UAAM,IAAI,MAAM,+BAA+B,MAAM;;GAIvD,MAAM,UAAU,MAAM,QAAQ,WAAW;AAEzC,OAAI,QAAQ,SAAS,eAAe,CAClC,QAAO,CAAC,YAAY,QAAQ;AAG9B,OAAI,QAAQ,WAAW,GAAG;IACxB,MAAM,UAAU,KAAK,YAAY,QAAQ,GAAI;AAC7C,QAAI;AAEF,UADmB,MAAM,QAAQ,QAAQ,EAC1B,SAAS,eAAe,CACrC,QAAO,CAAC,SAAS,QAAQ;YAErB;;AAKV,SAAM,GAAG,SAAS;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;AACnD,SAAM,IAAI,MAAM,uCAAuC;;EAGzD,QACE,OAAM,IAAI,MAAM,4BAA4B,OAAO;;;;;;;AAQzD,eAAsB,mBAAmB,SAA2C;CAClF,MAAM,WAAW,KAAK,SAAS,eAAe;CAC9C,IAAI;AACJ,KAAI;AACF,YAAU,MAAM,SAAS,UAAU,QAAQ;SACrC;AACN,QAAM,IAAI,MAAM,4BAA4B,UAAU;;AAGxD,QAAO,qBAAqB,QAAQ;;;;;AAQtC,eAAsB,eACpB,QACA,SACwB;CACxB,MAAM,gBAAgB,iBAAiB,SAAS,cAAc;CAC9D,MAAM,MAAM,SAAS,OAAO,QAAQ,KAAK;CAIzC,MAAM,CAAC,cAAc,WAAW,MAAM,cAAc,QAHvC,iBAAiB,OAAO,EAG6B,IAAI;AAEtE,KAAI;EAEF,MAAM,WAAW,MAAM,mBAAmB,aAAa;EAGvD,MAAM,cAAc,KAAK,eAAe,WAAW;EACnD,MAAM,cAAc,KAAK,aAAa,SAAS,GAAG;EAClD,MAAM,YAAY,aAAa,SAAS;AAGxC,QAAM,MAAM,aAAa,EAAE,WAAW,MAAM,CAAC;EAC7C,MAAM,kBAAkB,GAAG,YAAY;AAGvC,QAAM,GAAG,iBAAiB;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;AAG3D,QAAM,GAAG,cAAc,iBAAiB,EAAE,WAAW,MAAM,CAAC;AAG5D,QAAM,GAAG,aAAa;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;AACvD,QAAM,OAAO,iBAAiB,YAAY;AAI1C,QAAM,MADU,KAAK,eAAe,QAAQ,SAAS,GAAG,EACnC,EAAE,WAAW,MAAM,CAAC;AAGzC,QAAM,aAAa,KAAK;GACtB,MAAM;GACN,KAAK,QAAQ;GACd,CAAC;EAGF,MAAM,EAAE,uBAAuB,MAAM,OAAO;EAC5C,MAAM,EAAE,oBAAoB,MAAM,OAAO;AACzC,QAAM,mBAAmB,EAAE,iBAAiB,CAAC;AAE7C,SAAO;GACL,SAAS;GACT,WAAW,SAAS;GACpB,aAAa,SAAS;GACtB;GACA;GACD;WACO;AAER,MAAI,QACF,OAAM,GAAG,SAAS;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;;;;;;AAQzD,eAAsB,sBAAsB,SAAuD;CAEjG,MAAM,cAAc,KADE,iBAAiB,SAAS,cAAc,EACtB,WAAW;CAEnD,IAAI;AACJ,KAAI;AACF,YAAU,MAAM,QAAQ,YAAY;SAC9B;AACN,SAAO,EAAE;;CAGX,MAAM,WAA+B,EAAE;AAEvC,MAAK,MAAM,SAAS,SAAS;EAC3B,MAAM,UAAU,KAAK,aAAa,MAAM;AACxC,MAAI;GACF,MAAM,WAAW,MAAM,mBAAmB,QAAQ;AAClD,YAAS,KAAK;IACZ,IAAI,SAAS;IACb,MAAM,SAAS;IACf,YAAY,SAAS;IACrB,aAAa;IACb,WAAW,aAAa,SAAS;IAClC,CAAC;UACI;;AAKV,QAAO;;;;;AAMT,eAAsB,cACpB,WACA,SACuB;CACvB,MAAM,gBAAgB,iBAAiB,SAAS,cAAc;CAC9D,MAAM,MAAM,SAAS,OAAO,QAAQ,KAAK;CACzC,MAAM,cAAc,KAAK,eAAe,YAAY,UAAU;AAG9D,KAAI;AACF,QAAM,QAAQ,YAAY;SACpB;AACN,QAAM,IAAI,MAAM,YAAY,UAAU,oBAAoB;;AAI5D,OAAM,GAAG,aAAa;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC;AAGvD,OAAM,eAAe,KAAK,aAAa,YAAY;CAGnD,IAAI,aAAa;AACjB,KAAI,SAAS,OAAO;AAElB,QAAM,GADU,KAAK,eAAe,QAAQ,UAAU,EACpC;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;AACnD,eAAa;;CAIf,MAAM,EAAE,uBAAuB,MAAM,OAAO;CAC5C,MAAM,EAAE,oBAAoB,MAAM,OAAO;AACzC,OAAM,mBAAmB,EAAE,iBAAiB,CAAC;AAE7C,QAAO;EACL,SAAS;EACT;EACA;EACD"}