@angelmsger/fx 0.0.0-stage → 0.11.0

package/dist/domain/toolchain/resolve.js

@@ -0,0 +1,90 @@
+// From the merged toolchain to what fx can act on for each tool: inheritance resolved
+// (entry → defaults → built-in), npm specs completed from the scope, and each executable
+// field marked baseline or team patch, which is what decides whether it needs trust.
+import { DEFAULTS_KEY } from '../manifest/overlay.js';
+const FIELD_PATHS = {
+    versionArgs: 'version_args',
+    install: 'install',
+    skill: 'skill',
+    auth: 'auth',
+    setup: 'setup',
+};
+export function resolveTools(toolchain, provenance, declared = []) {
+    const named = new Set(declared);
+    return toolchain.tools.map((tool) => resolveTool(tool, toolchain, provenance, named));
+}
+function resolveTool(tool, toolchain, provenance, declared) {
+    const defaults = toolchain.defaults ?? {};
+    const origin = (field) => {
+        const own = originOf(provenance[tool.name], FIELD_PATHS[field]);
+        const inherited = originOf(provenance[DEFAULTS_KEY], FIELD_PATHS[field]);
+        const ownsField = tool[FIELD_PATHS[field]] !== undefined;
+        return ownsField ? own : inherited;
+    };
+    const binaryOrigin = originOf(provenance[tool.name], tool.binary === undefined ? 'name' : 'binary');
+    const skill = tool.skill ?? defaults.skill;
+    const auth = tool.auth ?? defaults.auth;
+    return {
+        name: tool.name,
+        binary: tool.binary ?? tool.name,
+        ...(tool.desc === undefined ? {} : { desc: tool.desc }),
+        ...(tool.docs === undefined ? {} : { docs: tool.docs }),
+        required: tool.required ?? false,
+        enabled: tool.enabled ?? true,
+        declared: declared.has(tool.name),
+        installOnInit: tool.install_on_init ?? defaults.install_on_init ?? false,
+        ...(tool.min_version === undefined ? {} : { minVersion: tool.min_version }),
+        versionArgs: tool.version_args ?? defaults.version_args ?? ['--version'],
+        install: (tool.install ?? defaults.install ?? []).map((m) => completeSpec(m, tool.name, defaults.npm_scope)),
+        ...(skill === undefined || skill.command.length === 0
+            ? {}
+            : {
+                skill: {
+                    command: skill.command,
+                    ...(skill.agent_flag === undefined ? {} : { agentFlag: skill.agent_flag }),
+                    ...(skill.dir_flag === undefined ? {} : { dirFlag: skill.dir_flag }),
+                },
+            }),
+        ...(auth === undefined || auth.command.length === 0
+            ? {}
+            : {
+                auth: { command: auth.command, ...(auth.docs === undefined ? {} : { docs: auth.docs }) },
+            }),
+        setup: tool.setup ?? [],
+        patchedFields: fieldsWithOrigin(provenance[tool.name], 'patch'),
+        baseFields: fieldsWithOrigin(provenance[tool.name], 'base'),
+        origins: {
+            binary: binaryOrigin,
+            versionArgs: origin('versionArgs'),
+            install: origin('install'),
+            skill: origin('skill'),
+            auth: origin('auth'),
+            setup: origin('setup'),
+        },
+    };
+}
+export function commandOrigin(tool, argumentsFrom) {
+    return tool.origins.binary === 'patch' || tool.origins[argumentsFrom ?? 'binary'] === 'patch'
+        ? 'patch'
+        : 'base';
+}
+function fieldsWithOrigin(fields, origin) {
+    return Object.entries(fields ?? {})
+        .filter(([, o]) => o === origin)
+        .map(([key]) => key)
+        .sort();
+}
+// A field is patch-origin when it, or anything under it, came from the patch.
+function originOf(fields, path) {
+    if (fields === undefined)
+        return 'base';
+    return Object.entries(fields).some(([key, origin]) => origin === 'patch' && (key === path || key.startsWith(`${path}.`)))
+        ? 'patch'
+        : 'base';
+}
+function completeSpec(method, name, scope) {
+    if (method.via !== 'npm' || method.spec !== undefined)
+        return method;
+    return { ...method, spec: scope === undefined ? name : `${scope}/${name}` };
+}
+//# sourceMappingURL=resolve.js.map

package/dist/domain/toolchain/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../src/domain/toolchain/resolve.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,yFAAyF;AACzF,qFAAqF;AAErF,OAAO,EAAE,YAAY,EAAgC,MAAM,wBAAwB,CAAC;AAqCpF,MAAM,WAAW,GAAgC;IAC/C,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;CACf,CAAC;AAEF,MAAM,UAAU,YAAY,CAC1B,SAAoB,EACpB,UAAsB,EACtB,WAA8B,EAAE;IAEhC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,WAAW,CAClB,IAAU,EACV,SAAoB,EACpB,UAAsB,EACtB,QAA6B;IAE7B,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,CAAC,KAAkB,EAAU,EAAE;QAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,MAAM,SAAS,GAAI,IAAgC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,SAAS,CAAC;QACtF,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACrC,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,QAAQ,CAC3B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EACrB,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAC9C,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC;IACxC,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI;QAChC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACvD,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;QAChC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;QAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,aAAa,EAAE,IAAI,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe,IAAI,KAAK;QACxE,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3E,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,YAAY,IAAI,CAAC,WAAW,CAAC;QACxE,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1D,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAC/C;QACD,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YACnD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,EAAE;oBACL,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;oBAC1E,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;iBACrE;aACF,CAAC;QACN,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YACjD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE;aACzF,CAAC;QACN,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;QACvB,aAAa,EAAE,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAC/D,UAAU,EAAE,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAC3D,OAAO,EAAE;YACP,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC;YAClC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC;YAC1B,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;YACtB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;SACvB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAmC,EACnC,aAA+C;IAE/C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,KAAK,OAAO;QAC3F,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAoD,EACpD,MAAc;IAEd,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC;SAC/B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;SACnB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,8EAA8E;AAC9E,SAAS,QAAQ,CAAC,MAAoD,EAAE,IAAY;IAClF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAChC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CACtF;QACC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CACnB,MAAqB,EACrB,IAAY,EACZ,KAAyB;IAEzB,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACrE,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,EAAE,CAAC;AAC9E,CAAC"}

package/dist/domain/toolchain/select.js

@@ -0,0 +1,51 @@
+// Which of the catalog's tools a workspace actually has. fx assumes no tool: a tool is in
+// the toolchain because a bound provider drives it, or because the team's patch named it.
+// Everything else stays in the catalog, known but unselected.
+import { servesCapability, } from '../manifest/providers.js';
+export function keyedBinding(binding) {
+    return { ...binding, key: binding.capability };
+}
+export function keyedPlatform(binding) {
+    return { ...binding, key: `${binding.capability}:${binding.platform}` };
+}
+// The tools each binding needs, keyed by tool name. A provider fx does not know is read as
+// one the manifest defines itself, named after the tool it drives — but only where the team
+// declared that tool, because fx's own catalog names are tools, not provider ids, and an id
+// that merely resembles one is a mistake worth correcting rather than obeying.
+export function providerTools(bindings, providers, declaresTool) {
+    const needed = new Map();
+    for (const binding of bindings) {
+        if (binding.provider === null || binding.source === 'misplaced')
+            continue;
+        const provider = providers.find((candidate) => candidate.id === binding.provider);
+        for (const tool of toolsOf(provider, binding, declaresTool))
+            needed.set(tool, [...(needed.get(tool) ?? []), binding.key]);
+    }
+    return needed;
+}
+function toolsOf(provider, binding, declaresTool) {
+    if (servesCapability(provider, binding.capability))
+        return provider.tools;
+    const own = binding.provider;
+    return provider === undefined && own !== null && declaresTool(own) ? [own] : [];
+}
+export function selectToolchain(resolved, needed) {
+    const sources = new Map();
+    const tools = [];
+    const catalog = [];
+    for (const tool of resolved) {
+        const boundBy = needed.get(tool.name) ?? [];
+        // A tool both bound and declared reads as bound: dropping the declaration would leave
+        // it in the toolchain, so the binding is why it is here.
+        const kind = kindOf(boundBy.length > 0, tool.declared);
+        sources.set(tool.name, { kind, boundBy });
+        (kind === 'catalog' ? catalog : tools).push(tool);
+    }
+    return { tools, catalog, all: resolved, sources };
+}
+function kindOf(bound, declared) {
+    if (bound)
+        return 'binding';
+    return declared ? 'manifest' : 'catalog';
+}
+//# sourceMappingURL=select.js.map

package/dist/domain/toolchain/select.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"select.js","sourceRoot":"","sources":["../../../src/domain/toolchain/select.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,0FAA0F;AAC1F,8DAA8D;AAE9D,OAAO,EACL,gBAAgB,GAKjB,MAAM,0BAA0B,CAAC;AAUlC,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC1E,CAAC;AAmBD,2FAA2F;AAC3F,4FAA4F;AAC5F,4FAA4F;AAC5F,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAC3B,QAAiC,EACjC,SAA0B,EAC1B,YAAuC;IAEvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;YAAE,SAAS;QAC1E,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC;YACzD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CACd,QAAmC,EACnC,OAAqB,EACrB,YAAuC;IAEvC,IAAI,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC7B,OAAO,QAAQ,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,QAAiC,EACjC,MAA8C;IAE9C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5C,sFAAsF;QACtF,yDAAyD;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1C,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,QAAiB;IAC/C,IAAI,KAAK;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC"}

package/dist/domain/toolchain/stderr.js

@@ -0,0 +1,107 @@
+// What a failing tool's stderr means. A family tool writes its `_notice`/`_progress`
+// lines first and its error envelope last, each a JSON object that may be pretty-
+// printed. Any other tool is read by its own words: the message of the error object
+// it printed, or where it failed and why, its first two lines of text once log
+// records and warnings are set aside.
+const REASON_LIMIT = 240;
+const MESSAGE_KEYS = ['message', 'errmsg', 'error'];
+// A log record opens with a timestamp or a logfmt field.
+const ASIDE = /^(?:[IWEF]\d{4} \d{2}:\d{2}|\[?\d{4}-\d{2}-\d{2}[T ]\d{2}:\d{2}|(?:time|ts|level)=|warn(?:ing)?\b)/i;
+export function stderrReason(stderr, code) {
+    const { objects, text } = splitJsonObjects(stderr);
+    const message = errorEnvelopeOf(objects)?.['message'];
+    if (typeof message === 'string')
+        return message;
+    return shorten(statedMessage(objects) ?? textReason(text) ?? `exit ${code}`);
+}
+// A wrapper around a remote API may print that service's error object as it is.
+function statedMessage(objects) {
+    for (const object of [...objects].reverse())
+        for (const key of MESSAGE_KEYS) {
+            const value = object[key];
+            if (typeof value === 'string' && value !== '')
+                return value;
+        }
+    return undefined;
+}
+function textReason(text) {
+    const lines = text
+        .split('\n')
+        .map((line) => line.trim())
+        .filter((line) => line !== '');
+    const stated = lines.filter((line) => !ASIDE.test(line));
+    return stated.length > 0 ? stated.slice(0, 2).join(' ') : lines.at(-1);
+}
+function shorten(reason) {
+    return reason.length > REASON_LIMIT ? `${reason.slice(0, REASON_LIMIT - 1).trimEnd()}…` : reason;
+}
+export function errorEnvelope(stderr) {
+    return errorEnvelopeOf(splitJsonObjects(stderr).objects);
+}
+function errorEnvelopeOf(objects) {
+    for (const object of objects) {
+        const error = object['error'];
+        if (isObject(error))
+            return error;
+    }
+    return undefined;
+}
+// A JSON object begins on a line that opens with `{` and ends where its
+// braces balance, one line or many; a line that opens one but never parses
+// is plain text after all.
+function splitJsonObjects(input) {
+    const lines = input.split('\n');
+    const objects = [];
+    const plain = [];
+    for (let i = 0; i < lines.length; i += 1) {
+        const line = lines[i] ?? '';
+        const end = line.trimStart().startsWith('{') ? closingLine(lines, i) : -1;
+        const parsed = end < 0 ? undefined : parseObject(lines.slice(i, end + 1).join('\n'));
+        if (parsed === undefined)
+            plain.push(line);
+        else {
+            objects.push(parsed);
+            i = end;
+        }
+    }
+    return { objects, text: plain.join('\n') };
+}
+function closingLine(lines, from) {
+    let depth = 0;
+    let inString = false;
+    for (let i = from; i < lines.length; i += 1) {
+        const line = lines[i] ?? '';
+        for (let j = 0; j < line.length; j += 1) {
+            const ch = line[j];
+            if (inString) {
+                if (ch === '\\')
+                    j += 1;
+                else if (ch === '"')
+                    inString = false;
+            }
+            else if (ch === '"')
+                inString = true;
+            else if (ch === '{')
+                depth += 1;
+            else if (ch === '}') {
+                depth -= 1;
+                if (depth === 0)
+                    return i;
+            }
+        }
+    }
+    return -1;
+}
+function parseObject(text) {
+    try {
+        const value = JSON.parse(text);
+        return isObject(value) ? value : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function isObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=stderr.js.map

package/dist/domain/toolchain/stderr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stderr.js","sourceRoot":"","sources":["../../../src/domain/toolchain/stderr.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,kFAAkF;AAClF,oFAAoF;AACpF,+EAA+E;AAC/E,sCAAsC;AAEtC,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACpD,yDAAyD;AACzD,MAAM,KAAK,GACT,qGAAqG,CAAC;AAExG,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,IAAY;IACvD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,IAAI,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,gFAAgF;AAChF,SAAS,aAAa,CAAC,OAA2C;IAChE,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE;QACzC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;gBAAE,OAAO,KAAK,CAAC;QAC9D,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,IAAI;SACf,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,OAAO,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,OAA2C;IAClE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACpC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,wEAAwE;AACxE,2EAA2E;AAC3E,2BAA2B;AAC3B,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,IAAI,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACtC,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC,GAAG,GAAG,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,WAAW,CAAC,KAAwB,EAAE,IAAY;IACzD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,EAAE,KAAK,IAAI;oBAAE,CAAC,IAAI,CAAC,CAAC;qBACnB,IAAI,EAAE,KAAK,GAAG;oBAAE,QAAQ,GAAG,KAAK,CAAC;YACxC,CAAC;iBAAM,IAAI,EAAE,KAAK,GAAG;gBAAE,QAAQ,GAAG,IAAI,CAAC;iBAClC,IAAI,EAAE,KAAK,GAAG;gBAAE,KAAK,IAAI,CAAC,CAAC;iBAC3B,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACpB,KAAK,IAAI,CAAC,CAAC;gBACX,IAAI,KAAK,KAAK,CAAC;oBAAE,OAAO,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/domain/toolchain/trust.js

@@ -0,0 +1,30 @@
+// Trust on first use: a command vector from the manifest is identified by the hash of
+// its exact arguments, so changing one argument is a new vector that has to be confirmed
+// again.
+import { createHash } from 'node:crypto';
+export function fingerprint(vector) {
+    return createHash('sha256').update(JSON.stringify(vector)).digest('hex');
+}
+export function renderVector(vector) {
+    return vector.map((arg) => (/[\s"']/.test(arg) ? JSON.stringify(arg) : arg)).join(' ');
+}
+export function trustFingerprint(input) {
+    if (!input.execution)
+        return fingerprint(input.vector);
+    const { purpose, resource, bindings } = input.execution;
+    return createHash('sha256')
+        .update(JSON.stringify({
+        version: 1,
+        vector: input.vector,
+        purpose,
+        resource,
+        bindings: Object.entries(bindings).sort(([a], [b]) => a.localeCompare(b)),
+    }))
+        .digest('hex');
+}
+export function renderTrustContext(execution) {
+    if (!execution)
+        return '';
+    return `\nContext: ${execution.purpose} ${execution.resource}\nEnvironment references: ${JSON.stringify(execution.bindings)}`;
+}
+//# sourceMappingURL=trust.js.map

package/dist/domain/toolchain/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../../../src/domain/toolchain/trust.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,yFAAyF;AACzF,SAAS;AAET,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,WAAW,CAAC,MAAyB;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAyB;IACpD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzF,CAAC;AAYD,MAAM,UAAU,gBAAgB,CAAC,KAAoB;IACnD,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;IACxD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO;QACP,QAAQ;QACR,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;KAC1E,CAAC,CACH;SACA,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAAqC;IACtE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,cAAc,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,QAAQ,6BAA6B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChI,CAAC"}

package/dist/domain/toolchain/version.js

@@ -0,0 +1,7 @@
+// A tool's version is whatever semver appears first in its `--version`
+// output; the family's four output shapes and git's all reduce to that.
+const SEMVER = /\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?/;
+export function extractSemver(text) {
+    return SEMVER.exec(text)?.[0];
+}
+//# sourceMappingURL=version.js.map

package/dist/domain/toolchain/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../../src/domain/toolchain/version.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,wEAAwE;AAExE,MAAM,MAAM,GAAG,mCAAmC,CAAC;AAEnD,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC"}

package/dist/domain/values.js

@@ -0,0 +1,23 @@
+// Parsing of the scalar spellings people type on a command line or in an
+// environment variable. Anything else is a validation error for the caller.
+const TRUE = new Set(['1', 'true', 'yes', 'on']);
+const FALSE = new Set(['0', 'false', 'no', 'off']);
+export function parseBoolean(text) {
+    const normalized = text?.trim().toLowerCase();
+    if (normalized === undefined || normalized === '')
+        return undefined;
+    if (TRUE.has(normalized))
+        return true;
+    if (FALSE.has(normalized))
+        return false;
+    return undefined;
+}
+export function parseList(text) {
+    if (text === undefined)
+        return undefined;
+    return text
+        .split(',')
+        .map((item) => item.trim())
+        .filter((item) => item.length > 0);
+}
+//# sourceMappingURL=values.js.map

package/dist/domain/values.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"values.js","sourceRoot":"","sources":["../../src/domain/values.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,4EAA4E;AAE5E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AACjD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAEnD,MAAM,UAAU,YAAY,CAAC,IAAwB;IACnD,MAAM,UAAU,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACpE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAwB;IAChD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC"}

package/dist/domain/workspace/checkout.js

@@ -0,0 +1,23 @@
+// Shared checkout paths are forward-slash children of the workspace root.
+// Normalized keys let both manifest layers compare aliases and nesting;
+// native resolution handles absolute personal references.
+import path from 'node:path/posix';
+export function checkoutPathKey(checkout) {
+    return path.normalize(checkout);
+}
+export function isWorkspaceCheckoutPath(checkout) {
+    const key = checkoutPathKey(checkout);
+    return (key !== '.' &&
+        key !== '..' &&
+        !key.startsWith('../') &&
+        !path.isAbsolute(key) &&
+        !checkout.includes('\\') &&
+        !/^[/\\]{2}/.test(checkout) &&
+        !/^[a-z]:/i.test(checkout));
+}
+export function checkoutPathsOverlap(left, right) {
+    const a = checkoutPathKey(left);
+    const b = checkoutPathKey(right);
+    return a === b || a.startsWith(`${b}/`) || b.startsWith(`${a}/`);
+}
+//# sourceMappingURL=checkout.js.map

package/dist/domain/workspace/checkout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout.js","sourceRoot":"","sources":["../../../src/domain/workspace/checkout.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,wEAAwE;AACxE,0DAA0D;AAE1D,OAAO,IAAI,MAAM,iBAAiB,CAAC;AAEnC,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO,CACL,GAAG,KAAK,GAAG;QACX,GAAG,KAAK,IAAI;QACZ,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;QACtB,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxB,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC3B,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,KAAa;IAC9D,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC"}

package/dist/domain/workspace/commits.js

@@ -0,0 +1,7 @@
+// What a code host says about a repository's history, in the host-neutral
+// shape the release check reasons about.
+// How a person names a commit: its first seven hexadecimal digits.
+export function shortSha(sha) {
+    return sha.slice(0, 7);
+}
+//# sourceMappingURL=commits.js.map

package/dist/domain/workspace/commits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commits.js","sourceRoot":"","sources":["../../../src/domain/workspace/commits.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,yCAAyC;AAuBzC,mEAAmE;AACnE,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC"}

package/dist/domain/workspace/go-work.js

@@ -0,0 +1,75 @@
+// The Go workspace file fx keeps at the root when the manifest asks for one: every
+// Go module checked out there, at the newest `go` version any of them requires, so
+// each module builds against its siblings' checkouts. The file announces itself on
+// its first line, so fx can tell its own go.work from a person's and never replace
+// the latter.
+export const GO_WORK = 'go.work';
+export const GO_WORK_SUM = 'go.work.sum';
+const PREFIX = '// fx:derived ';
+export const isDerivedGoWork = (text) => text.startsWith(PREFIX);
+export function goDirective(goMod) {
+    return /^[ \t]*go[ \t]+([^\s/]+)/m.exec(goMod)?.[1];
+}
+// Null when no module is checked out: an empty go.work would only break builds.
+export function renderGoWork(modules) {
+    if (modules.length === 0)
+        return null;
+    const go = modules.reduce((newest, module) => newer(newest, module.go), undefined);
+    const uses = modules.map((module) => `./${module.path}`).sort();
+    return [
+        `${PREFIX}from the checked-out Go modules; regenerated by fx sync, do not edit`,
+        ...(go === undefined ? [] : ['', `go ${go}`]),
+        '',
+        'use (',
+        ...uses.map((use) => `\t${goToken(use)}`),
+        ')',
+        '',
+    ].join('\n');
+}
+// Go reads a token that would split, start a comment or hold an unprintable
+// character only as a quoted string literal, and a JSON string is one.
+function goToken(text) {
+    const bare = !/["'`()[\]{},]|\/\/|\/\*|[^\p{L}\p{M}\p{N}\p{P}\p{S}]/u.test(text);
+    return bare ? text : JSON.stringify(text);
+}
+function newer(a, b) {
+    if (a === undefined)
+        return b;
+    if (b === undefined)
+        return a;
+    return compareGoVersions(a, b) < 0 ? b : a;
+}
+// Go's own order: the language version `1.21` sorts before its release candidate
+// `1.21rc1`, which sorts before the release `1.21.0`. Before 1.21 a missing patch
+// means `.0`. A malformed version sorts before every valid one.
+function compareGoVersions(a, b) {
+    const [x, y] = [parseGoVersion(a), parseGoVersion(b)];
+    for (const field of ['major', 'minor', 'patch']) {
+        const order = compareNumbers(x[field], y[field]);
+        if (order !== 0)
+            return order;
+    }
+    if (x.kind !== y.kind)
+        return x.kind < y.kind ? -1 : 1;
+    return compareNumbers(x.pre, y.pre);
+}
+function parseGoVersion(text) {
+    const number = '(0|[1-9]\\d*)';
+    const match = new RegExp(`^${number}(?:\\.${number}(?:\\.${number}|([a-z]+)${number}?)?)?$`).exec(text);
+    if (match === null)
+        return { major: '', minor: '', patch: '', kind: '', pre: '' };
+    const [, major = '', minor, patch, kind = '', pre = ''] = match;
+    if (minor === undefined)
+        return { major, minor: '0', patch: '0', kind, pre };
+    const defaultPatch = kind === '' && compareNumbers(minor, '21') < 0 ? '0' : '';
+    return { major, minor, patch: patch ?? defaultPatch, kind, pre };
+}
+// Decimal strings without leading zeros; the empty string sorts first.
+function compareNumbers(a, b) {
+    if (a.length !== b.length)
+        return a.length < b.length ? -1 : 1;
+    if (a === b)
+        return 0;
+    return a < b ? -1 : 1;
+}
+//# sourceMappingURL=go-work.js.map

package/dist/domain/workspace/go-work.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"go-work.js","sourceRoot":"","sources":["../../../src/domain/workspace/go-work.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,mFAAmF;AACnF,mFAAmF;AACnF,mFAAmF;AACnF,cAAc;AAEd,MAAM,CAAC,MAAM,OAAO,GAAG,SAAS,CAAC;AACjC,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;AAEzC,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAShC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAElF,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CACvB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,EAC5C,SAAS,CACV,CAAC;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,OAAO;QACL,GAAG,MAAM,sEAAsE;QAC/E,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7C,EAAE;QACF,OAAO;QACP,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,GAAG;QACH,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,4EAA4E;AAC5E,uEAAuE;AACvE,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,IAAI,GAAG,CAAC,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjF,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,KAAK,CAAC,CAAqB,EAAE,CAAqB;IACzD,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAUD,iFAAiF;AACjF,kFAAkF;AAClF,gEAAgE;AAChE,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAChC,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,MAAM,GAAG,eAAe,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,SAAS,MAAM,SAAS,MAAM,YAAY,MAAM,QAAQ,CAAC,CAAC,IAAI,CAC/F,IAAI,CACL,CAAC;IACF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAClF,MAAM,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;IAChE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC7E,MAAM,YAAY,GAAG,IAAI,KAAK,EAAE,IAAI,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACnE,CAAC;AAED,uEAAuE;AACvE,SAAS,cAAc,CAAC,CAAS,EAAE,CAAS;IAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC"}

package/dist/domain/workspace/name.js

@@ -0,0 +1,52 @@
+// A workspace name is a filesystem component under ~/.fx/workspaces and a
+// key in config.yaml. Confining it to a plain identifier is what keeps a
+// crafted profile or --name from writing outside the personal directory.
+import { createHash } from 'node:crypto';
+import path from 'node:path';
+import { DevkitError } from '../errors.js';
+import { windowsPathProblem } from '../path.js';
+const NAME = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+export function defaultWorkspaceName(root, occupied = []) {
+    const basename = path.basename(root);
+    const key = (name) => (path.sep === '\\' ? name.toLowerCase() : name);
+    const used = new Set(occupied.map(key));
+    if (NAME.test(basename) &&
+        !basename.includes('..') &&
+        !windowsPathProblem(basename) &&
+        !used.has(key(basename)))
+        return basename;
+    const stem = basename
+        .normalize('NFKD')
+        .replace(/[^A-Za-z0-9_-]+/g, '-')
+        .replace(/^[-_]+|[-_]+$/g, '')
+        .slice(0, 54) || 'workspace';
+    const digest = createHash('sha256').update(root).digest('hex').slice(0, 8);
+    let name = `${stem}-${digest}`;
+    for (let index = 2; used.has(key(name)); index += 1) {
+        const suffix = `${digest}-${index}`;
+        name = `${stem.slice(0, 63 - suffix.length)}-${suffix}`;
+    }
+    return name;
+}
+export function assertWorkspaceName(name) {
+    const windowsProblem = path.sep === '\\' ? windowsPathProblem(name) : undefined;
+    if (NAME.test(name) && !name.includes('..') && !windowsProblem)
+        return;
+    throw new DevkitError('usage', 'WORKSPACE_NAME_INVALID', `"${name}" is not a usable workspace name`, {
+        hint: 'Letters, digits, dot, dash and underscore, starting with a letter or digit.',
+        nextSteps: ['fx init <dir> --from <source> --name <plain-name>'],
+    });
+}
+export function assertWorkspaceNames(names) {
+    const seen = new Set();
+    for (const name of names) {
+        assertWorkspaceName(name);
+        const key = path.sep === '\\' ? name.toLowerCase() : name;
+        if (seen.has(key))
+            throw new DevkitError('config', 'WORKSPACE_NAME_CONFLICT', `Workspace names alias the same local directory: ${name}`, {
+                nextSteps: ['fx workspace list', `fx workspace unregister ${name}`],
+            });
+        seen.add(key);
+    }
+}
+//# sourceMappingURL=name.js.map

package/dist/domain/workspace/name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"name.js","sourceRoot":"","sources":["../../../src/domain/workspace/name.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,yEAAyE;AACzE,yEAAyE;AAEzE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,IAAI,GAAG,mCAAmC,CAAC;AAEjD,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,WAA8B,EAAE;IACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,IACE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QACnB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxB,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QAC7B,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExB,OAAO,QAAQ,CAAC;IAClB,MAAM,IAAI,GACR,QAAQ;SACL,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC;SAChC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;SAC7B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC;IACjC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3E,IAAI,IAAI,GAAG,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC;QACpC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc;QAAE,OAAO;IACvE,MAAM,IAAI,WAAW,CACnB,OAAO,EACP,wBAAwB,EACxB,IAAI,IAAI,kCAAkC,EAC1C;QACE,IAAI,EAAE,6EAA6E;QACnF,SAAS,EAAE,CAAC,mDAAmD,CAAC;KACjE,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAwB;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YACf,MAAM,IAAI,WAAW,CACnB,QAAQ,EACR,yBAAyB,EACzB,mDAAmD,IAAI,EAAE,EACzD;gBACE,SAAS,EAAE,CAAC,mBAAmB,EAAE,2BAA2B,IAAI,EAAE,CAAC;aACpE,CACF,CAAC;QACJ,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;AACH,CAAC"}