@apicircle/core 1.0.6 → 1.0.8

package/dist/patches-ysO3y8pG.d.cts

@@ -0,0 +1,312 @@
+import { RequestAuth, GlobalSchema, GlobalGraphQL, GlobalFileAsset, Folder, Request, WorkspaceSynced, WorkspaceLocal, Environment, EnvPriorityRef, SecretKeyMeta, Assertion, MockServer, ExecutionPlan, WorkspaceSnapshotTrigger } from '@apicircle/shared';
+
+/**
+ * One credential-bearing field discovered inside an export envelope.
+ *
+ * `id` is a stable composite that survives ordering / re-serialization
+ * — UIs can use it as the React key and as the `include` set member.
+ *
+ * Format:
+ *   - Root folder auth:   `folder:<envelope.source.folderId>.<authType>.<field>`
+ *   - Subfolder auth:     `folder:<subfolder.id>.<authType>.<field>`
+ *   - Request auth:       `request:<request.id>.<authType>.<field>`
+ */
+interface FolderExportCredential {
+    id: string;
+    /** Where the credential lives in the envelope. */
+    scope: 'root-folder' | 'subfolder' | 'request';
+    /** Discriminator of the auth variant that owns the field. */
+    authType: RequestAuth['type'];
+    /** Field name on the auth object (e.g. "token", "password", "clientSecret"). */
+    field: string;
+    /** Human-readable label for the UI ("Bearer · token"). */
+    label: string;
+    /**
+     * Where this credential belongs to. For requests this is the
+     * request name; for folders it's the folder name. UIs use this to
+     * group rows so the user can see which entity is leaking what.
+     */
+    ownerName: string;
+    /** Source-workspace id of the request/folder that owns this field. */
+    ownerId: string;
+}
+/**
+ * Sorted, stable list of every credential-bearing field in the envelope.
+ *
+ * Determinism: rows are ordered by `(scope-rank, ownerName, field)` so
+ * the same envelope always produces the same UI row order. Re-running
+ * the detector after the user toggles include-checkboxes returns the
+ * same list with the same ids — the UI never needs to remap state.
+ *
+ * Pure — does not mutate the envelope.
+ */
+declare function collectFolderExportCredentials(envelope: ApicircleFolderExportV1): FolderExportCredential[];
+/**
+ * Return a new envelope with every credential-bearing field blanked,
+ * except for fields whose `id` appears in `includeIds`. The default
+ * (empty `includeIds`) redacts everything — that's the safe default
+ * the modal uses when the user hasn't explicitly opted any credential
+ * in.
+ *
+ * The redaction shape mirrors `redactForGit`: credential FIELDS go to
+ * `''`, identity fields (`clientId`, `username`, `tokenUrl`, …) stay so
+ * the importer still knows which IdP the request originally talked to.
+ */
+declare function redactFolderExportCredentials(envelope: ApicircleFolderExportV1, includeIds?: ReadonlySet<string>): ApicircleFolderExportV1;
+
+/** Envelope discriminator. Bump the version suffix on a breaking shape change. */
+declare const APICIRCLE_FOLDER_EXPORT_FORMAT = "apicircle.folder/v1";
+interface ApicircleFolderExportV1 {
+    format: typeof APICIRCLE_FOLDER_EXPORT_FORMAT;
+    /** ISO timestamp of when the export was generated. */
+    exportedAt: string;
+    /** App version that produced the export (free-form string). */
+    appVersion: string;
+    /** Loose breadcrumb back to the source — never required by importers. */
+    source: {
+        workspaceId: string;
+        folderId: string;
+        folderName: string;
+    };
+    folder: {
+        /** Display name of the exported root folder. */
+        name: string;
+        /** Folder-level auth, if any was set on the source root folder. */
+        auth?: Folder['auth'];
+        /**
+         * Descendant folders (NOT including the root). `parentId` is the
+         * source workspace's id of the parent — when it equals `source.folderId`
+         * the folder lives directly under the exported root.
+         */
+        subfolders: Folder[];
+        /**
+         * All requests inside the exported subtree. `folderId` is the source
+         * id of the immediate parent folder; the importer remaps it onto the
+         * destination workspace's freshly-minted ids.
+         */
+        requests: Request[];
+    };
+    /**
+     * Captured global-asset dependencies referenced by the exported
+     * requests. Schemas/GraphQL travel embedded; files travel
+     * metadata-only.
+     */
+    dependencies: ApicircleFolderExportDependencies;
+}
+interface ApicircleFolderExportDependencies {
+    schemas: GlobalSchema[];
+    graphql: GlobalGraphQL[];
+    /**
+     * File-asset METADATA only. The `slotId` is preserved so the importer
+     * can correlate against an existing slot on the destination side if
+     * one happens to match; otherwise the user is prompted to re-attach.
+     */
+    files: GlobalFileAsset[];
+}
+/**
+ * Plain-language summary of what the export contains, surfaced inside the
+ * Export Folder modal so the user knows exactly what's leaving the
+ * workspace before they click Download.
+ */
+interface FolderExportReport {
+    folderName: string;
+    requestCount: number;
+    subfolderCount: number;
+    /** Total folder count INCLUDING the exported root. */
+    totalFolderCount: number;
+    dependencies: {
+        schemas: Array<{
+            id: string;
+            name: string;
+        }>;
+        graphql: Array<{
+            id: string;
+            name: string;
+            kind: GlobalGraphQL['kind'];
+        }>;
+        files: Array<{
+            id: string;
+            name: string;
+            filename: string;
+            size: number;
+            mimeType: string;
+        }>;
+    };
+    /** Convenience flag — `true` when any dependency was captured. */
+    hasDependencies: boolean;
+    /**
+     * Every credential-bearing field detected inside the envelope's auth
+     * blocks (root folder, subfolders, requests). Surfaced by the export
+     * modal so the user can opt-in per-field before the file leaves the
+     * workspace. Defaults to "redact everything" — see
+     * `redactFolderExportCredentials`.
+     */
+    credentials: FolderExportCredential[];
+    /** Convenience flag — `true` when any credential was detected. */
+    hasCredentials: boolean;
+}
+interface CollectFolderExportArgs {
+    synced: WorkspaceSynced;
+    folderId: string;
+    /** Defaults to `new Date().toISOString()` — overridable for deterministic tests. */
+    now?: string;
+    /** Defaults to `'apicircle-studio'` — overridable for deterministic tests. */
+    appVersion?: string;
+}
+interface CollectFolderExportResult {
+    envelope: ApicircleFolderExportV1;
+    report: FolderExportReport;
+}
+/**
+ * Walk the subtree rooted at `folderId`, collect its requests + descendant
+ * folders, gather every referenced global-asset dependency, and assemble
+ * a self-describing export envelope.
+ *
+ * Returns `null` when `folderId` doesn't exist — UI callers should treat
+ * that as a no-op (the source folder was deleted between menu open and
+ * click).
+ */
+declare function collectFolderExport(args: CollectFolderExportArgs): CollectFolderExportResult | null;
+/** JSON-stringify an envelope with stable, human-friendly formatting (2-space indent). */
+declare function serializeFolderExport(envelope: ApicircleFolderExportV1): string;
+/** Filename the UI uses for the downloaded file. Slugifies the folder name. */
+declare function suggestFolderExportFilename(envelope: ApicircleFolderExportV1): string;
+
+interface ParsedApicircleFolderExport {
+    /** The exported root folder, already assigned a fresh id. */
+    rootFolder: {
+        id: string;
+        name: string;
+        auth?: Folder['auth'];
+    };
+    /** Descendant folders with fresh ids + remapped parentIds. */
+    subfolders: Folder[];
+    /** Requests with fresh ids + remapped folderIds + remapped asset refs. */
+    requests: Request[];
+    /** Dependencies, ids freshly minted. */
+    dependencies: {
+        schemas: GlobalSchema[];
+        graphql: GlobalGraphQL[];
+        files: GlobalFileAsset[];
+    };
+    /** Source envelope's `source.folderName` — used for display copy. */
+    sourceFolderName: string;
+    /**
+     * Notes the parser surfaced about the import — e.g. a stale dependency
+     * reference that no longer existed in the source envelope. Importers
+     * forward these to the UI as soft warnings.
+     */
+    warnings: string[];
+}
+/** Lightweight discriminator — `true` when `doc.format === 'apicircle.folder/v1'`. */
+declare function isApicircleFolderExport(doc: unknown): doc is ApicircleFolderExportV1;
+/**
+ * Parse + validate a raw JSON string. Throws with a single, user-readable
+ * message when the input is malformed; otherwise returns a parsed shape
+ * ready for the store to graft in.
+ *
+ * `idGenerator` is overridable for deterministic tests; defaults to
+ * `generateId()` from `@apicircle/shared`.
+ */
+declare function parseApicircleFolderExport(input: string, options?: {
+    idGenerator?: () => string;
+}): ParsedApicircleFolderExport;
+/**
+ * Same as `parseApicircleFolderExport` but skips the JSON.parse step —
+ * used by callers that already deserialized the document. Splitting the
+ * entry points keeps the validation logic identical.
+ */
+declare function parseApicircleFolderExportDoc(doc: unknown, options?: {
+    idGenerator?: () => string;
+}): ParsedApicircleFolderExport;
+
+type WorkspacePatch = {
+    kind: 'request.create';
+    request: Request;
+} | {
+    kind: 'request.update';
+    id: string;
+    patch: Partial<Omit<Request, 'id' | 'createdAt'>>;
+} | {
+    kind: 'request.delete';
+    id: string;
+} | {
+    kind: 'folder.create';
+    folder: Folder;
+} | {
+    kind: 'folder.delete';
+    id: string;
+} | {
+    kind: 'folder.move';
+    id: string;
+    newParentId: string | null;
+} | {
+    kind: 'folder.import_apicircle';
+    parsed: ParsedApicircleFolderExport;
+    parentFolderId: string | null;
+} | {
+    kind: 'environment.upsert';
+    environment: Environment;
+} | {
+    kind: 'environment.delete';
+    name: string;
+} | {
+    kind: 'environment.setActive';
+    name: string | null;
+} | {
+    kind: 'environment.setPriority';
+    order: EnvPriorityRef[];
+} | {
+    kind: 'secretKey.upsert';
+    meta: SecretKeyMeta;
+} | {
+    kind: 'assertion.upsert';
+    requestId: string;
+    assertion: Assertion;
+} | {
+    kind: 'assertion.delete';
+    requestId: string;
+    assertionId: string;
+} | {
+    kind: 'mock.upsert';
+    mock: MockServer;
+} | {
+    kind: 'mock.delete';
+    id: string;
+} | {
+    kind: 'plan.upsert';
+    plan: ExecutionPlan;
+} | {
+    kind: 'plan.delete';
+    id: string;
+} | {
+    kind: 'history.delete_run';
+    runId: string;
+} | {
+    kind: 'history.delete_plan_run';
+    planRunId: string;
+} | {
+    kind: 'history.purge';
+    olderThanMs: number;
+} | {
+    kind: 'snapshot.capture';
+    trigger: WorkspaceSnapshotTrigger;
+    note?: string;
+    id?: string;
+} | {
+    kind: 'snapshot.delete';
+    id: string;
+} | {
+    kind: 'snapshot.restore';
+    id: string;
+} | {
+    kind: 'snapshot.set_max_bytes';
+    maxBytes: number;
+};
+type WorkspacePatchKind = WorkspacePatch['kind'];
+interface WorkspaceState {
+    synced: WorkspaceSynced;
+    local: WorkspaceLocal;
+}
+
+export { APICIRCLE_FOLDER_EXPORT_FORMAT as A, type CollectFolderExportArgs as C, type FolderExportCredential as F, type ParsedApicircleFolderExport as P, type WorkspaceState as W, type WorkspacePatch as a, type ApicircleFolderExportDependencies as b, type ApicircleFolderExportV1 as c, type CollectFolderExportResult as d, type FolderExportReport as e, type WorkspacePatchKind as f, collectFolderExport as g, collectFolderExportCredentials as h, isApicircleFolderExport as i, parseApicircleFolderExportDoc as j, suggestFolderExportFilename as k, parseApicircleFolderExport as p, redactFolderExportCredentials as r, serializeFolderExport as s };

package/dist/patches-ysO3y8pG.d.ts

@@ -0,0 +1,312 @@
+import { RequestAuth, GlobalSchema, GlobalGraphQL, GlobalFileAsset, Folder, Request, WorkspaceSynced, WorkspaceLocal, Environment, EnvPriorityRef, SecretKeyMeta, Assertion, MockServer, ExecutionPlan, WorkspaceSnapshotTrigger } from '@apicircle/shared';
+
+/**
+ * One credential-bearing field discovered inside an export envelope.
+ *
+ * `id` is a stable composite that survives ordering / re-serialization
+ * — UIs can use it as the React key and as the `include` set member.
+ *
+ * Format:
+ *   - Root folder auth:   `folder:<envelope.source.folderId>.<authType>.<field>`
+ *   - Subfolder auth:     `folder:<subfolder.id>.<authType>.<field>`
+ *   - Request auth:       `request:<request.id>.<authType>.<field>`
+ */
+interface FolderExportCredential {
+    id: string;
+    /** Where the credential lives in the envelope. */
+    scope: 'root-folder' | 'subfolder' | 'request';
+    /** Discriminator of the auth variant that owns the field. */
+    authType: RequestAuth['type'];
+    /** Field name on the auth object (e.g. "token", "password", "clientSecret"). */
+    field: string;
+    /** Human-readable label for the UI ("Bearer · token"). */
+    label: string;
+    /**
+     * Where this credential belongs to. For requests this is the
+     * request name; for folders it's the folder name. UIs use this to
+     * group rows so the user can see which entity is leaking what.
+     */
+    ownerName: string;
+    /** Source-workspace id of the request/folder that owns this field. */
+    ownerId: string;
+}
+/**
+ * Sorted, stable list of every credential-bearing field in the envelope.
+ *
+ * Determinism: rows are ordered by `(scope-rank, ownerName, field)` so
+ * the same envelope always produces the same UI row order. Re-running
+ * the detector after the user toggles include-checkboxes returns the
+ * same list with the same ids — the UI never needs to remap state.
+ *
+ * Pure — does not mutate the envelope.
+ */
+declare function collectFolderExportCredentials(envelope: ApicircleFolderExportV1): FolderExportCredential[];
+/**
+ * Return a new envelope with every credential-bearing field blanked,
+ * except for fields whose `id` appears in `includeIds`. The default
+ * (empty `includeIds`) redacts everything — that's the safe default
+ * the modal uses when the user hasn't explicitly opted any credential
+ * in.
+ *
+ * The redaction shape mirrors `redactForGit`: credential FIELDS go to
+ * `''`, identity fields (`clientId`, `username`, `tokenUrl`, …) stay so
+ * the importer still knows which IdP the request originally talked to.
+ */
+declare function redactFolderExportCredentials(envelope: ApicircleFolderExportV1, includeIds?: ReadonlySet<string>): ApicircleFolderExportV1;
+
+/** Envelope discriminator. Bump the version suffix on a breaking shape change. */
+declare const APICIRCLE_FOLDER_EXPORT_FORMAT = "apicircle.folder/v1";
+interface ApicircleFolderExportV1 {
+    format: typeof APICIRCLE_FOLDER_EXPORT_FORMAT;
+    /** ISO timestamp of when the export was generated. */
+    exportedAt: string;
+    /** App version that produced the export (free-form string). */
+    appVersion: string;
+    /** Loose breadcrumb back to the source — never required by importers. */
+    source: {
+        workspaceId: string;
+        folderId: string;
+        folderName: string;
+    };
+    folder: {
+        /** Display name of the exported root folder. */
+        name: string;
+        /** Folder-level auth, if any was set on the source root folder. */
+        auth?: Folder['auth'];
+        /**
+         * Descendant folders (NOT including the root). `parentId` is the
+         * source workspace's id of the parent — when it equals `source.folderId`
+         * the folder lives directly under the exported root.
+         */
+        subfolders: Folder[];
+        /**
+         * All requests inside the exported subtree. `folderId` is the source
+         * id of the immediate parent folder; the importer remaps it onto the
+         * destination workspace's freshly-minted ids.
+         */
+        requests: Request[];
+    };
+    /**
+     * Captured global-asset dependencies referenced by the exported
+     * requests. Schemas/GraphQL travel embedded; files travel
+     * metadata-only.
+     */
+    dependencies: ApicircleFolderExportDependencies;
+}
+interface ApicircleFolderExportDependencies {
+    schemas: GlobalSchema[];
+    graphql: GlobalGraphQL[];
+    /**
+     * File-asset METADATA only. The `slotId` is preserved so the importer
+     * can correlate against an existing slot on the destination side if
+     * one happens to match; otherwise the user is prompted to re-attach.
+     */
+    files: GlobalFileAsset[];
+}
+/**
+ * Plain-language summary of what the export contains, surfaced inside the
+ * Export Folder modal so the user knows exactly what's leaving the
+ * workspace before they click Download.
+ */
+interface FolderExportReport {
+    folderName: string;
+    requestCount: number;
+    subfolderCount: number;
+    /** Total folder count INCLUDING the exported root. */
+    totalFolderCount: number;
+    dependencies: {
+        schemas: Array<{
+            id: string;
+            name: string;
+        }>;
+        graphql: Array<{
+            id: string;
+            name: string;
+            kind: GlobalGraphQL['kind'];
+        }>;
+        files: Array<{
+            id: string;
+            name: string;
+            filename: string;
+            size: number;
+            mimeType: string;
+        }>;
+    };
+    /** Convenience flag — `true` when any dependency was captured. */
+    hasDependencies: boolean;
+    /**
+     * Every credential-bearing field detected inside the envelope's auth
+     * blocks (root folder, subfolders, requests). Surfaced by the export
+     * modal so the user can opt-in per-field before the file leaves the
+     * workspace. Defaults to "redact everything" — see
+     * `redactFolderExportCredentials`.
+     */
+    credentials: FolderExportCredential[];
+    /** Convenience flag — `true` when any credential was detected. */
+    hasCredentials: boolean;
+}
+interface CollectFolderExportArgs {
+    synced: WorkspaceSynced;
+    folderId: string;
+    /** Defaults to `new Date().toISOString()` — overridable for deterministic tests. */
+    now?: string;
+    /** Defaults to `'apicircle-studio'` — overridable for deterministic tests. */
+    appVersion?: string;
+}
+interface CollectFolderExportResult {
+    envelope: ApicircleFolderExportV1;
+    report: FolderExportReport;
+}
+/**
+ * Walk the subtree rooted at `folderId`, collect its requests + descendant
+ * folders, gather every referenced global-asset dependency, and assemble
+ * a self-describing export envelope.
+ *
+ * Returns `null` when `folderId` doesn't exist — UI callers should treat
+ * that as a no-op (the source folder was deleted between menu open and
+ * click).
+ */
+declare function collectFolderExport(args: CollectFolderExportArgs): CollectFolderExportResult | null;
+/** JSON-stringify an envelope with stable, human-friendly formatting (2-space indent). */
+declare function serializeFolderExport(envelope: ApicircleFolderExportV1): string;
+/** Filename the UI uses for the downloaded file. Slugifies the folder name. */
+declare function suggestFolderExportFilename(envelope: ApicircleFolderExportV1): string;
+
+interface ParsedApicircleFolderExport {
+    /** The exported root folder, already assigned a fresh id. */
+    rootFolder: {
+        id: string;
+        name: string;
+        auth?: Folder['auth'];
+    };
+    /** Descendant folders with fresh ids + remapped parentIds. */
+    subfolders: Folder[];
+    /** Requests with fresh ids + remapped folderIds + remapped asset refs. */
+    requests: Request[];
+    /** Dependencies, ids freshly minted. */
+    dependencies: {
+        schemas: GlobalSchema[];
+        graphql: GlobalGraphQL[];
+        files: GlobalFileAsset[];
+    };
+    /** Source envelope's `source.folderName` — used for display copy. */
+    sourceFolderName: string;
+    /**
+     * Notes the parser surfaced about the import — e.g. a stale dependency
+     * reference that no longer existed in the source envelope. Importers
+     * forward these to the UI as soft warnings.
+     */
+    warnings: string[];
+}
+/** Lightweight discriminator — `true` when `doc.format === 'apicircle.folder/v1'`. */
+declare function isApicircleFolderExport(doc: unknown): doc is ApicircleFolderExportV1;
+/**
+ * Parse + validate a raw JSON string. Throws with a single, user-readable
+ * message when the input is malformed; otherwise returns a parsed shape
+ * ready for the store to graft in.
+ *
+ * `idGenerator` is overridable for deterministic tests; defaults to
+ * `generateId()` from `@apicircle/shared`.
+ */
+declare function parseApicircleFolderExport(input: string, options?: {
+    idGenerator?: () => string;
+}): ParsedApicircleFolderExport;
+/**
+ * Same as `parseApicircleFolderExport` but skips the JSON.parse step —
+ * used by callers that already deserialized the document. Splitting the
+ * entry points keeps the validation logic identical.
+ */
+declare function parseApicircleFolderExportDoc(doc: unknown, options?: {
+    idGenerator?: () => string;
+}): ParsedApicircleFolderExport;
+
+type WorkspacePatch = {
+    kind: 'request.create';
+    request: Request;
+} | {
+    kind: 'request.update';
+    id: string;
+    patch: Partial<Omit<Request, 'id' | 'createdAt'>>;
+} | {
+    kind: 'request.delete';
+    id: string;
+} | {
+    kind: 'folder.create';
+    folder: Folder;
+} | {
+    kind: 'folder.delete';
+    id: string;
+} | {
+    kind: 'folder.move';
+    id: string;
+    newParentId: string | null;
+} | {
+    kind: 'folder.import_apicircle';
+    parsed: ParsedApicircleFolderExport;
+    parentFolderId: string | null;
+} | {
+    kind: 'environment.upsert';
+    environment: Environment;
+} | {
+    kind: 'environment.delete';
+    name: string;
+} | {
+    kind: 'environment.setActive';
+    name: string | null;
+} | {
+    kind: 'environment.setPriority';
+    order: EnvPriorityRef[];
+} | {
+    kind: 'secretKey.upsert';
+    meta: SecretKeyMeta;
+} | {
+    kind: 'assertion.upsert';
+    requestId: string;
+    assertion: Assertion;
+} | {
+    kind: 'assertion.delete';
+    requestId: string;
+    assertionId: string;
+} | {
+    kind: 'mock.upsert';
+    mock: MockServer;
+} | {
+    kind: 'mock.delete';
+    id: string;
+} | {
+    kind: 'plan.upsert';
+    plan: ExecutionPlan;
+} | {
+    kind: 'plan.delete';
+    id: string;
+} | {
+    kind: 'history.delete_run';
+    runId: string;
+} | {
+    kind: 'history.delete_plan_run';
+    planRunId: string;
+} | {
+    kind: 'history.purge';
+    olderThanMs: number;
+} | {
+    kind: 'snapshot.capture';
+    trigger: WorkspaceSnapshotTrigger;
+    note?: string;
+    id?: string;
+} | {
+    kind: 'snapshot.delete';
+    id: string;
+} | {
+    kind: 'snapshot.restore';
+    id: string;
+} | {
+    kind: 'snapshot.set_max_bytes';
+    maxBytes: number;
+};
+type WorkspacePatchKind = WorkspacePatch['kind'];
+interface WorkspaceState {
+    synced: WorkspaceSynced;
+    local: WorkspaceLocal;
+}
+
+export { APICIRCLE_FOLDER_EXPORT_FORMAT as A, type CollectFolderExportArgs as C, type FolderExportCredential as F, type ParsedApicircleFolderExport as P, type WorkspaceState as W, type WorkspacePatch as a, type ApicircleFolderExportDependencies as b, type ApicircleFolderExportV1 as c, type CollectFolderExportResult as d, type FolderExportReport as e, type WorkspacePatchKind as f, collectFolderExport as g, collectFolderExportCredentials as h, isApicircleFolderExport as i, parseApicircleFolderExportDoc as j, suggestFolderExportFilename as k, parseApicircleFolderExport as p, redactFolderExportCredentials as r, serializeFolderExport as s };

package/dist/workspace/file-backed.cjs

@@ -151,8 +151,8 @@ function createEmptyLocalForSynced(synced) {
     ui: {
       activeRequestId: null,
       sidebarExpandedSections: [],
-      themeId: "command-center",
-      fontId: "cascadia-code",
+      themeId: "one-dark-pro",
+      fontId: "system-sans",
       fontSizePercent: import_shared.FONT_SIZE_PERCENT_DEFAULT
     },
     settings: { validateOnSend: true, monacoConsumesWheel: false },

package/dist/workspace/file-backed.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/workspace/fileBackedWorkspace.ts"],"sourcesContent":["import { promises as fs } from 'node:fs';\nimport * as path from 'node:path';\nimport { FONT_SIZE_PERCENT_DEFAULT } from '@apicircle/shared';\nimport type { WorkspaceLocal, WorkspaceSynced } from '@apicircle/shared';\nimport lockfile from 'proper-lockfile';\nimport type { WorkspaceState } from './patches';\n\n// =============================================================================\n// fileBackedWorkspace — load/save a `{ synced, local }` pair as two JSON\n// files on disk, with a `proper-lockfile` advisory lock so concurrent CLI /\n// MCP writers can't corrupt the document.\n//\n// Layout (relative to the directory passed in):\n//   workspace.synced.json   ← matches WorkspaceSynced exactly, push-to-git target\n//   workspace.local.json    ← WorkspaceLocal, host-private (CLI/MCP doesn't push)\n//\n// The lock is held on `workspace.synced.json` because that's the file the\n// editor races against. Stale locks are released after 30s.\n// =============================================================================\n\nconst SYNCED_FILE = 'workspace.synced.json';\nconst LOCAL_FILE = 'workspace.local.json';\n\nexport interface LoadFromFileOptions {\n  /** When true, return `null` instead of throwing if the synced file is missing. */\n  allowMissing?: boolean;\n}\n\nexport interface SaveToFileOptions {\n  /** Lock timeout (ms). Defaults to 30000. */\n  lockTimeoutMs?: number;\n}\n\n/**\n * Load both workspace documents from `dir`. The synced file is required;\n * the local file is optional and falls back to a minimal empty shape so a\n * CLI on a fresh machine can still operate (it just won't have history /\n * overrides until the desktop app runs once).\n */\nexport async function loadFromFile(\n  dir: string,\n  options: LoadFromFileOptions = {},\n): Promise<WorkspaceState | null> {\n  const syncedPath = path.join(dir, SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n\n  let syncedRaw: string;\n  try {\n    syncedRaw = await fs.readFile(syncedPath, 'utf-8');\n  } catch (err) {\n    if (options.allowMissing && isENOENT(err)) return null;\n    throw err;\n  }\n  const synced = JSON.parse(syncedRaw) as WorkspaceSynced;\n\n  let local: WorkspaceLocal;\n  try {\n    local = JSON.parse(await fs.readFile(localPath, 'utf-8')) as WorkspaceLocal;\n    local = { ...local, attachmentCache: local.attachmentCache ?? {} };\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    local = createEmptyLocalForSynced(synced);\n  }\n\n  return { synced, local };\n}\n\n/**\n * Atomically write both documents back to disk. Acquires an advisory lock\n * on the synced file for the duration of the write so a parallel CLI /\n * MCP / desktop save can't interleave.\n *\n * Both files are written via `<file>.tmp` + rename so a crash mid-write\n * never leaves a partial JSON document on disk.\n */\nexport async function saveToFile(\n  dir: string,\n  state: WorkspaceState,\n  options: SaveToFileOptions = {},\n): Promise<void> {\n  await fs.mkdir(dir, { recursive: true });\n  const syncedPath = path.join(dir, SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n\n  // proper-lockfile requires the target file to exist. Touch it on first save.\n  await ensureFile(syncedPath);\n\n  const release = await lockfile.lock(syncedPath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: options.lockTimeoutMs ?? 30000,\n  });\n  try {\n    await writeJsonAtomic(syncedPath, state.synced);\n    await writeJsonAtomic(localPath, state.local);\n  } finally {\n    await release();\n  }\n}\n\n/**\n * Run a load → mutate → save cycle under one lock so a single mutation\n * can't be clobbered by a racing reader-then-writer.\n */\nexport async function withWorkspace<T>(\n  dir: string,\n  fn: (state: WorkspaceState) => Promise<{ next: WorkspaceState; result?: T }>,\n  options: SaveToFileOptions = {},\n): Promise<T | undefined> {\n  await fs.mkdir(dir, { recursive: true });\n  const syncedPath = path.join(dir, SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n  await ensureFile(syncedPath);\n\n  const release = await lockfile.lock(syncedPath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: options.lockTimeoutMs ?? 30000,\n  });\n  try {\n    const syncedRaw = await fs.readFile(syncedPath, 'utf-8');\n    const synced = JSON.parse(syncedRaw) as WorkspaceSynced;\n    let local: WorkspaceLocal;\n    try {\n      local = JSON.parse(await fs.readFile(localPath, 'utf-8')) as WorkspaceLocal;\n      local = { ...local, attachmentCache: local.attachmentCache ?? {} };\n    } catch (err) {\n      if (!isENOENT(err)) throw err;\n      local = createEmptyLocalForSynced(synced);\n    }\n    const out = await fn({ synced, local });\n    await writeJsonAtomic(syncedPath, out.next.synced);\n    await writeJsonAtomic(localPath, out.next.local);\n    return out.result;\n  } finally {\n    await release();\n  }\n}\n\n// ---------------------------------------------------------------------------\n// internals\n// ---------------------------------------------------------------------------\n\n// File mode for workspace JSON: owner read/write only. Default `fs.writeFile`\n// uses 0o666 minus umask (typically 0o644 — world-readable). The workspace\n// docs carry the synced state (which after redaction is mostly safe to read\n// but still includes per-workspace metadata) and the local state (which\n// holds the encrypted Secret Vault payload table, session metadata, and the\n// vault entries themselves). On multi-user POSIX hosts (CI runners,\n// classroom VMs, shared dev servers) the default would leak both. 0o600\n// keeps the file owner-only. Windows ignores POSIX modes — the inherited\n// per-user ACL under %USERPROFILE% is what protects it there.\nconst WORKSPACE_FILE_MODE = 0o600;\n\nasync function ensureFile(filePath: string): Promise<void> {\n  try {\n    await fs.access(filePath);\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    await fs.writeFile(filePath, '{}', { encoding: 'utf-8', mode: WORKSPACE_FILE_MODE });\n  }\n}\n\nasync function writeJsonAtomic(filePath: string, value: unknown): Promise<void> {\n  const tmp = `${filePath}.tmp`;\n  await fs.writeFile(tmp, JSON.stringify(value, null, 2) + '\\n', {\n    encoding: 'utf-8',\n    mode: WORKSPACE_FILE_MODE,\n  });\n  await fs.rename(tmp, filePath);\n}\n\nfunction isENOENT(err: unknown): boolean {\n  return typeof err === 'object' && err !== null && 'code' in err && err.code === 'ENOENT';\n}\n\nfunction createEmptyLocalForSynced(synced: WorkspaceSynced): WorkspaceLocal {\n  return {\n    schemaVersion: 1,\n    workspaceId: synced.workspaceId,\n    executionPlans: {},\n    history: { requestRuns: [], planRuns: [] },\n    secretIndex: { entries: {} },\n    sessions: { github: { workspace: null, links: {} } },\n    connectedRepo: null,\n    workingBranch: null,\n    seededWorkspaceSha: null,\n    retiredBranch: null,\n    sync: {\n      lastPulledSnapshot: null,\n      lastPulledSha: null,\n      lastPulledAt: null,\n      dirtyKeys: [],\n    },\n    linkedCollections: {},\n    attachmentCache: {},\n    globalContext: {},\n    mockRuntime: { active: {} },\n    ui: {\n      activeRequestId: null,\n      sidebarExpandedSections: [],\n      themeId: 'command-center',\n      fontId: 'cascadia-code',\n      fontSizePercent: FONT_SIZE_PERCENT_DEFAULT,\n    },\n    settings: { validateOnSend: true, monacoConsumesWheel: false },\n    snapshots: { entries: [], maxBytes: 50 * 1024 * 1024 },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAA+B;AAC/B,WAAsB;AACtB,oBAA0C;AAE1C,6BAAqB;AAgBrB,IAAM,cAAc;AACpB,IAAM,aAAa;AAkBnB,eAAsB,aACpB,KACA,UAA+B,CAAC,GACA;AAChC,QAAM,aAAkB,UAAK,KAAK,WAAW;AAC7C,QAAM,YAAiB,UAAK,KAAK,UAAU;AAE3C,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,eAAAA,SAAG,SAAS,YAAY,OAAO;AAAA,EACnD,SAAS,KAAK;AACZ,QAAI,QAAQ,gBAAgB,SAAS,GAAG,EAAG,QAAO;AAClD,UAAM;AAAA,EACR;AACA,QAAM,SAAS,KAAK,MAAM,SAAS;AAEnC,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,MAAM,MAAM,eAAAA,SAAG,SAAS,WAAW,OAAO,CAAC;AACxD,YAAQ,EAAE,GAAG,OAAO,iBAAiB,MAAM,mBAAmB,CAAC,EAAE;AAAA,EACnE,SAAS,KAAK;AACZ,QAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,YAAQ,0BAA0B,MAAM;AAAA,EAC1C;AAEA,SAAO,EAAE,QAAQ,MAAM;AACzB;AAUA,eAAsB,WACpB,KACA,OACA,UAA6B,CAAC,GACf;AACf,QAAM,eAAAA,SAAG,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AACvC,QAAM,aAAkB,UAAK,KAAK,WAAW;AAC7C,QAAM,YAAiB,UAAK,KAAK,UAAU;AAG3C,QAAM,WAAW,UAAU;AAE3B,QAAM,UAAU,MAAM,uBAAAC,QAAS,KAAK,YAAY;AAAA,IAC9C,SAAS,EAAE,SAAS,GAAG,YAAY,IAAI,YAAY,IAAI;AAAA,IACvD,OAAO,QAAQ,iBAAiB;AAAA,EAClC,CAAC;AACD,MAAI;AACF,UAAM,gBAAgB,YAAY,MAAM,MAAM;AAC9C,UAAM,gBAAgB,WAAW,MAAM,KAAK;AAAA,EAC9C,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAMA,eAAsB,cACpB,KACA,IACA,UAA6B,CAAC,GACN;AACxB,QAAM,eAAAD,SAAG,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AACvC,QAAM,aAAkB,UAAK,KAAK,WAAW;AAC7C,QAAM,YAAiB,UAAK,KAAK,UAAU;AAC3C,QAAM,WAAW,UAAU;AAE3B,QAAM,UAAU,MAAM,uBAAAC,QAAS,KAAK,YAAY;AAAA,IAC9C,SAAS,EAAE,SAAS,GAAG,YAAY,IAAI,YAAY,IAAI;AAAA,IACvD,OAAO,QAAQ,iBAAiB;AAAA,EAClC,CAAC;AACD,MAAI;AACF,UAAM,YAAY,MAAM,eAAAD,SAAG,SAAS,YAAY,OAAO;AACvD,UAAM,SAAS,KAAK,MAAM,SAAS;AACnC,QAAI;AACJ,QAAI;AACF,cAAQ,KAAK,MAAM,MAAM,eAAAA,SAAG,SAAS,WAAW,OAAO,CAAC;AACxD,cAAQ,EAAE,GAAG,OAAO,iBAAiB,MAAM,mBAAmB,CAAC,EAAE;AAAA,IACnE,SAAS,KAAK;AACZ,UAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,cAAQ,0BAA0B,MAAM;AAAA,IAC1C;AACA,UAAM,MAAM,MAAM,GAAG,EAAE,QAAQ,MAAM,CAAC;AACtC,UAAM,gBAAgB,YAAY,IAAI,KAAK,MAAM;AACjD,UAAM,gBAAgB,WAAW,IAAI,KAAK,KAAK;AAC/C,WAAO,IAAI;AAAA,EACb,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAeA,IAAM,sBAAsB;AAE5B,eAAe,WAAW,UAAiC;AACzD,MAAI;AACF,UAAM,eAAAA,SAAG,OAAO,QAAQ;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,UAAM,eAAAA,SAAG,UAAU,UAAU,MAAM,EAAE,UAAU,SAAS,MAAM,oBAAoB,CAAC;AAAA,EACrF;AACF;AAEA,eAAe,gBAAgB,UAAkB,OAA+B;AAC9E,QAAM,MAAM,GAAG,QAAQ;AACvB,QAAM,eAAAA,SAAG,UAAU,KAAK,KAAK,UAAU,OAAO,MAAM,CAAC,IAAI,MAAM;AAAA,IAC7D,UAAU;AAAA,IACV,MAAM;AAAA,EACR,CAAC;AACD,QAAM,eAAAA,SAAG,OAAO,KAAK,QAAQ;AAC/B;AAEA,SAAS,SAAS,KAAuB;AACvC,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,UAAU,OAAO,IAAI,SAAS;AAClF;AAEA,SAAS,0BAA0B,QAAyC;AAC1E,SAAO;AAAA,IACL,eAAe;AAAA,IACf,aAAa,OAAO;AAAA,IACpB,gBAAgB,CAAC;AAAA,IACjB,SAAS,EAAE,aAAa,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,IACzC,aAAa,EAAE,SAAS,CAAC,EAAE;AAAA,IAC3B,UAAU,EAAE,QAAQ,EAAE,WAAW,MAAM,OAAO,CAAC,EAAE,EAAE;AAAA,IACnD,eAAe;AAAA,IACf,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,eAAe;AAAA,IACf,MAAM;AAAA,MACJ,oBAAoB;AAAA,MACpB,eAAe;AAAA,MACf,cAAc;AAAA,MACd,WAAW,CAAC;AAAA,IACd;AAAA,IACA,mBAAmB,CAAC;AAAA,IACpB,iBAAiB,CAAC;AAAA,IAClB,eAAe,CAAC;AAAA,IAChB,aAAa,EAAE,QAAQ,CAAC,EAAE;AAAA,IAC1B,IAAI;AAAA,MACF,iBAAiB;AAAA,MACjB,yBAAyB,CAAC;AAAA,MAC1B,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,iBAAiB;AAAA,IACnB;AAAA,IACA,UAAU,EAAE,gBAAgB,MAAM,qBAAqB,MAAM;AAAA,IAC7D,WAAW,EAAE,SAAS,CAAC,GAAG,UAAU,KAAK,OAAO,KAAK;AAAA,EACvD;AACF;","names":["fs","lockfile"]}
+{"version":3,"sources":["../../src/workspace/fileBackedWorkspace.ts"],"sourcesContent":["import { promises as fs } from 'node:fs';\nimport * as path from 'node:path';\nimport { FONT_SIZE_PERCENT_DEFAULT } from '@apicircle/shared';\nimport type { WorkspaceLocal, WorkspaceSynced } from '@apicircle/shared';\nimport lockfile from 'proper-lockfile';\nimport type { WorkspaceState } from './patches';\n\n// =============================================================================\n// fileBackedWorkspace — load/save a `{ synced, local }` pair as two JSON\n// files on disk, with a `proper-lockfile` advisory lock so concurrent CLI /\n// MCP writers can't corrupt the document.\n//\n// Layout (relative to the directory passed in):\n//   workspace.synced.json   ← matches WorkspaceSynced exactly, push-to-git target\n//   workspace.local.json    ← WorkspaceLocal, host-private (CLI/MCP doesn't push)\n//\n// The lock is held on `workspace.synced.json` because that's the file the\n// editor races against. Stale locks are released after 30s.\n// =============================================================================\n\nconst SYNCED_FILE = 'workspace.synced.json';\nconst LOCAL_FILE = 'workspace.local.json';\n\nexport interface LoadFromFileOptions {\n  /** When true, return `null` instead of throwing if the synced file is missing. */\n  allowMissing?: boolean;\n}\n\nexport interface SaveToFileOptions {\n  /** Lock timeout (ms). Defaults to 30000. */\n  lockTimeoutMs?: number;\n}\n\n/**\n * Load both workspace documents from `dir`. The synced file is required;\n * the local file is optional and falls back to a minimal empty shape so a\n * CLI on a fresh machine can still operate (it just won't have history /\n * overrides until the desktop app runs once).\n */\nexport async function loadFromFile(\n  dir: string,\n  options: LoadFromFileOptions = {},\n): Promise<WorkspaceState | null> {\n  const syncedPath = path.join(dir, SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n\n  let syncedRaw: string;\n  try {\n    syncedRaw = await fs.readFile(syncedPath, 'utf-8');\n  } catch (err) {\n    if (options.allowMissing && isENOENT(err)) return null;\n    throw err;\n  }\n  const synced = JSON.parse(syncedRaw) as WorkspaceSynced;\n\n  let local: WorkspaceLocal;\n  try {\n    local = JSON.parse(await fs.readFile(localPath, 'utf-8')) as WorkspaceLocal;\n    local = { ...local, attachmentCache: local.attachmentCache ?? {} };\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    local = createEmptyLocalForSynced(synced);\n  }\n\n  return { synced, local };\n}\n\n/**\n * Atomically write both documents back to disk. Acquires an advisory lock\n * on the synced file for the duration of the write so a parallel CLI /\n * MCP / desktop save can't interleave.\n *\n * Both files are written via `<file>.tmp` + rename so a crash mid-write\n * never leaves a partial JSON document on disk.\n */\nexport async function saveToFile(\n  dir: string,\n  state: WorkspaceState,\n  options: SaveToFileOptions = {},\n): Promise<void> {\n  await fs.mkdir(dir, { recursive: true });\n  const syncedPath = path.join(dir, SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n\n  // proper-lockfile requires the target file to exist. Touch it on first save.\n  await ensureFile(syncedPath);\n\n  const release = await lockfile.lock(syncedPath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: options.lockTimeoutMs ?? 30000,\n  });\n  try {\n    await writeJsonAtomic(syncedPath, state.synced);\n    await writeJsonAtomic(localPath, state.local);\n  } finally {\n    await release();\n  }\n}\n\n/**\n * Run a load → mutate → save cycle under one lock so a single mutation\n * can't be clobbered by a racing reader-then-writer.\n */\nexport async function withWorkspace<T>(\n  dir: string,\n  fn: (state: WorkspaceState) => Promise<{ next: WorkspaceState; result?: T }>,\n  options: SaveToFileOptions = {},\n): Promise<T | undefined> {\n  await fs.mkdir(dir, { recursive: true });\n  const syncedPath = path.join(dir, SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n  await ensureFile(syncedPath);\n\n  const release = await lockfile.lock(syncedPath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: options.lockTimeoutMs ?? 30000,\n  });\n  try {\n    const syncedRaw = await fs.readFile(syncedPath, 'utf-8');\n    const synced = JSON.parse(syncedRaw) as WorkspaceSynced;\n    let local: WorkspaceLocal;\n    try {\n      local = JSON.parse(await fs.readFile(localPath, 'utf-8')) as WorkspaceLocal;\n      local = { ...local, attachmentCache: local.attachmentCache ?? {} };\n    } catch (err) {\n      if (!isENOENT(err)) throw err;\n      local = createEmptyLocalForSynced(synced);\n    }\n    const out = await fn({ synced, local });\n    await writeJsonAtomic(syncedPath, out.next.synced);\n    await writeJsonAtomic(localPath, out.next.local);\n    return out.result;\n  } finally {\n    await release();\n  }\n}\n\n// ---------------------------------------------------------------------------\n// internals\n// ---------------------------------------------------------------------------\n\n// File mode for workspace JSON: owner read/write only. Default `fs.writeFile`\n// uses 0o666 minus umask (typically 0o644 — world-readable). The workspace\n// docs carry the synced state (which after redaction is mostly safe to read\n// but still includes per-workspace metadata) and the local state (which\n// holds the encrypted Secret Vault payload table, session metadata, and the\n// vault entries themselves). On multi-user POSIX hosts (CI runners,\n// classroom VMs, shared dev servers) the default would leak both. 0o600\n// keeps the file owner-only. Windows ignores POSIX modes — the inherited\n// per-user ACL under %USERPROFILE% is what protects it there.\nconst WORKSPACE_FILE_MODE = 0o600;\n\nasync function ensureFile(filePath: string): Promise<void> {\n  try {\n    await fs.access(filePath);\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    await fs.writeFile(filePath, '{}', { encoding: 'utf-8', mode: WORKSPACE_FILE_MODE });\n  }\n}\n\nasync function writeJsonAtomic(filePath: string, value: unknown): Promise<void> {\n  const tmp = `${filePath}.tmp`;\n  await fs.writeFile(tmp, JSON.stringify(value, null, 2) + '\\n', {\n    encoding: 'utf-8',\n    mode: WORKSPACE_FILE_MODE,\n  });\n  await fs.rename(tmp, filePath);\n}\n\nfunction isENOENT(err: unknown): boolean {\n  return typeof err === 'object' && err !== null && 'code' in err && err.code === 'ENOENT';\n}\n\nfunction createEmptyLocalForSynced(synced: WorkspaceSynced): WorkspaceLocal {\n  return {\n    schemaVersion: 1,\n    workspaceId: synced.workspaceId,\n    executionPlans: {},\n    history: { requestRuns: [], planRuns: [] },\n    secretIndex: { entries: {} },\n    sessions: { github: { workspace: null, links: {} } },\n    connectedRepo: null,\n    workingBranch: null,\n    seededWorkspaceSha: null,\n    retiredBranch: null,\n    sync: {\n      lastPulledSnapshot: null,\n      lastPulledSha: null,\n      lastPulledAt: null,\n      dirtyKeys: [],\n    },\n    linkedCollections: {},\n    attachmentCache: {},\n    globalContext: {},\n    mockRuntime: { active: {} },\n    ui: {\n      activeRequestId: null,\n      sidebarExpandedSections: [],\n      themeId: 'one-dark-pro',\n      fontId: 'system-sans',\n      fontSizePercent: FONT_SIZE_PERCENT_DEFAULT,\n    },\n    settings: { validateOnSend: true, monacoConsumesWheel: false },\n    snapshots: { entries: [], maxBytes: 50 * 1024 * 1024 },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAA+B;AAC/B,WAAsB;AACtB,oBAA0C;AAE1C,6BAAqB;AAgBrB,IAAM,cAAc;AACpB,IAAM,aAAa;AAkBnB,eAAsB,aACpB,KACA,UAA+B,CAAC,GACA;AAChC,QAAM,aAAkB,UAAK,KAAK,WAAW;AAC7C,QAAM,YAAiB,UAAK,KAAK,UAAU;AAE3C,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,eAAAA,SAAG,SAAS,YAAY,OAAO;AAAA,EACnD,SAAS,KAAK;AACZ,QAAI,QAAQ,gBAAgB,SAAS,GAAG,EAAG,QAAO;AAClD,UAAM;AAAA,EACR;AACA,QAAM,SAAS,KAAK,MAAM,SAAS;AAEnC,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,MAAM,MAAM,eAAAA,SAAG,SAAS,WAAW,OAAO,CAAC;AACxD,YAAQ,EAAE,GAAG,OAAO,iBAAiB,MAAM,mBAAmB,CAAC,EAAE;AAAA,EACnE,SAAS,KAAK;AACZ,QAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,YAAQ,0BAA0B,MAAM;AAAA,EAC1C;AAEA,SAAO,EAAE,QAAQ,MAAM;AACzB;AAUA,eAAsB,WACpB,KACA,OACA,UAA6B,CAAC,GACf;AACf,QAAM,eAAAA,SAAG,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AACvC,QAAM,aAAkB,UAAK,KAAK,WAAW;AAC7C,QAAM,YAAiB,UAAK,KAAK,UAAU;AAG3C,QAAM,WAAW,UAAU;AAE3B,QAAM,UAAU,MAAM,uBAAAC,QAAS,KAAK,YAAY;AAAA,IAC9C,SAAS,EAAE,SAAS,GAAG,YAAY,IAAI,YAAY,IAAI;AAAA,IACvD,OAAO,QAAQ,iBAAiB;AAAA,EAClC,CAAC;AACD,MAAI;AACF,UAAM,gBAAgB,YAAY,MAAM,MAAM;AAC9C,UAAM,gBAAgB,WAAW,MAAM,KAAK;AAAA,EAC9C,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAMA,eAAsB,cACpB,KACA,IACA,UAA6B,CAAC,GACN;AACxB,QAAM,eAAAD,SAAG,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AACvC,QAAM,aAAkB,UAAK,KAAK,WAAW;AAC7C,QAAM,YAAiB,UAAK,KAAK,UAAU;AAC3C,QAAM,WAAW,UAAU;AAE3B,QAAM,UAAU,MAAM,uBAAAC,QAAS,KAAK,YAAY;AAAA,IAC9C,SAAS,EAAE,SAAS,GAAG,YAAY,IAAI,YAAY,IAAI;AAAA,IACvD,OAAO,QAAQ,iBAAiB;AAAA,EAClC,CAAC;AACD,MAAI;AACF,UAAM,YAAY,MAAM,eAAAD,SAAG,SAAS,YAAY,OAAO;AACvD,UAAM,SAAS,KAAK,MAAM,SAAS;AACnC,QAAI;AACJ,QAAI;AACF,cAAQ,KAAK,MAAM,MAAM,eAAAA,SAAG,SAAS,WAAW,OAAO,CAAC;AACxD,cAAQ,EAAE,GAAG,OAAO,iBAAiB,MAAM,mBAAmB,CAAC,EAAE;AAAA,IACnE,SAAS,KAAK;AACZ,UAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,cAAQ,0BAA0B,MAAM;AAAA,IAC1C;AACA,UAAM,MAAM,MAAM,GAAG,EAAE,QAAQ,MAAM,CAAC;AACtC,UAAM,gBAAgB,YAAY,IAAI,KAAK,MAAM;AACjD,UAAM,gBAAgB,WAAW,IAAI,KAAK,KAAK;AAC/C,WAAO,IAAI;AAAA,EACb,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAeA,IAAM,sBAAsB;AAE5B,eAAe,WAAW,UAAiC;AACzD,MAAI;AACF,UAAM,eAAAA,SAAG,OAAO,QAAQ;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,UAAM,eAAAA,SAAG,UAAU,UAAU,MAAM,EAAE,UAAU,SAAS,MAAM,oBAAoB,CAAC;AAAA,EACrF;AACF;AAEA,eAAe,gBAAgB,UAAkB,OAA+B;AAC9E,QAAM,MAAM,GAAG,QAAQ;AACvB,QAAM,eAAAA,SAAG,UAAU,KAAK,KAAK,UAAU,OAAO,MAAM,CAAC,IAAI,MAAM;AAAA,IAC7D,UAAU;AAAA,IACV,MAAM;AAAA,EACR,CAAC;AACD,QAAM,eAAAA,SAAG,OAAO,KAAK,QAAQ;AAC/B;AAEA,SAAS,SAAS,KAAuB;AACvC,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,UAAU,OAAO,IAAI,SAAS;AAClF;AAEA,SAAS,0BAA0B,QAAyC;AAC1E,SAAO;AAAA,IACL,eAAe;AAAA,IACf,aAAa,OAAO;AAAA,IACpB,gBAAgB,CAAC;AAAA,IACjB,SAAS,EAAE,aAAa,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,IACzC,aAAa,EAAE,SAAS,CAAC,EAAE;AAAA,IAC3B,UAAU,EAAE,QAAQ,EAAE,WAAW,MAAM,OAAO,CAAC,EAAE,EAAE;AAAA,IACnD,eAAe;AAAA,IACf,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,eAAe;AAAA,IACf,MAAM;AAAA,MACJ,oBAAoB;AAAA,MACpB,eAAe;AAAA,MACf,cAAc;AAAA,MACd,WAAW,CAAC;AAAA,IACd;AAAA,IACA,mBAAmB,CAAC;AAAA,IACpB,iBAAiB,CAAC;AAAA,IAClB,eAAe,CAAC;AAAA,IAChB,aAAa,EAAE,QAAQ,CAAC,EAAE;AAAA,IAC1B,IAAI;AAAA,MACF,iBAAiB;AAAA,MACjB,yBAAyB,CAAC;AAAA,MAC1B,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,iBAAiB;AAAA,IACnB;AAAA,IACA,UAAU,EAAE,gBAAgB,MAAM,qBAAqB,MAAM;AAAA,IAC7D,WAAW,EAAE,SAAS,CAAC,GAAG,UAAU,KAAK,OAAO,KAAK;AAAA,EACvD;AACF;","names":["fs","lockfile"]}