@ashlr/hub 2.2.0

package/dist/cli/demo-sandbox.js

@@ -0,0 +1,227 @@
+/**
+ * src/cli/demo-sandbox.ts — H8 shared isolation module for `ashlr demo`.
+ *
+ * MILESTONE H8 "Harden & Prove" (FINAL). This module factors the
+ * DISPOSABLE-repo + ISOLATED-tmp-`~/.ashlr` setup/teardown out of `demo.ts`
+ * (and away from `test/`) so the demo applies the EXACT same isolation discipline
+ * the H1 testkit encodes (`test/helpers/h1-fixture.ts:makeFixture`) — but as a
+ * shippable CLI helper rather than a test-only one. See
+ * docs/contracts/CONTRACT-H8.md (BUILD ITEM 1).
+ *
+ * ───────────────────────────────────────────────────────────────────────────
+ * ABSOLUTE SAFETY RULES (paramount — encoded directly in these helpers):
+ *   - HOME is relocated to a FRESH os.tmpdir() dir so every state read/write
+ *     resolves to an ISOLATED ~/.ashlr — NEVER the real one. The real portfolio
+ *     (~/.ashlr/enrollment.json = { repos: [] }) is NEVER touched. The prior
+ *     HOME + re-entrancy env (ASHLR_IN_DAEMON / ASHLR_IN_SWARM) are snapshotted
+ *     and RESTORED on dispose().
+ *   - A sanity guard asserts homedir() resolves to the tmp HOME before the demo
+ *     proceeds; if relocation did not take effect it RESTORES + ABORTS rather
+ *     than risk mutating the real ~/.ashlr (mirrors makeFixture's guard).
+ *   - The throwaway repo is a real git repo under os.tmpdir(), seeded with a
+ *     `// TODO:` marker so the backlog scan finds work. dispose() unenrolls it,
+ *     sweeps its sandboxes, rm -rf's the repo + the tmp HOME, and restores env.
+ *   - dispose() is IDEMPOTENT and NEVER throws (best-effort teardown), so the
+ *     demo's try/finally + signal handler can always clean up safely.
+ *
+ * IMPLEMENTATION NOTE: this module encodes the SAME disposable-repo + TODO-seed
+ * isolation discipline the H1 testkit (`test/helpers/h1-fixture.ts`) uses, but
+ * SELF-CONTAINED in `src/` — a shipped CLI module cannot import from `test/`
+ * (the build's `rootDir` is `src/`). The handful of git/seed primitives are tiny
+ * and use node builtins + git only, so duplicating them here (rather than
+ * importing a test helper) is the correct seam per docs/contracts/CONTRACT-H8.md ("factors them
+ * out of `test/` into a shippable module"). No new runtime dep is added.
+ */
+import { execFileSync } from 'node:child_process';
+import { existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync, } from 'node:fs';
+import { homedir, tmpdir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { unenroll } from '../core/sandbox/policy.js';
+import { sweepRepoSandboxes } from '../core/sandbox/worktree.js';
+/**
+ * Create an ISOLATED demo context: snapshot + relocate `process.env.HOME` to a
+ * fresh os.tmpdir() dir, clear the re-entrancy env, ASSERT homedir() now
+ * resolves to the tmp HOME (else restore + throw), then create a DISPOSABLE git
+ * repo seeded with a `// TODO:` marker.
+ *
+ * The returned context's `dispose()` performs the guaranteed auto-cleanup. The
+ * caller MUST invoke it in a `try/finally` (and from a SIGINT/SIGTERM handler)
+ * so the tmp state is always reclaimed.
+ *
+ * @throws if HOME relocation does not take effect (isolation broken) — fails
+ *   loudly rather than risk touching the real ~/.ashlr.
+ */
+export function makeDemoContext(opts) {
+    const keep = opts?.keep === true;
+    // 1. Snapshot the prior HOME + re-entrancy env so dispose() can restore them
+    //    EXACTLY as found (an undefined var must be re-deleted, not set to '').
+    const prevHome = process.env.HOME;
+    const prevInDaemon = process.env.ASHLR_IN_DAEMON;
+    const prevInSwarm = process.env.ASHLR_IN_SWARM;
+    // 2. Relocate HOME to a fresh tmp dir; clear the re-entrancy guard so a
+    //    daemon tick is not refused by the recursion check.
+    // PID in the prefix so concurrent processes (e.g. vitest's parallel forks)
+    // never collide in the shared os.tmpdir() and a prefix-scoped sweep can target
+    // only its own process's dirs. Real-world hygiene + race-free test cleanup.
+    const home = mkdtempSync(join(tmpdir(), `ashlr-h8-demo-home-${process.pid}-`));
+    process.env.HOME = home;
+    delete process.env.ASHLR_IN_DAEMON;
+    delete process.env.ASHLR_IN_SWARM;
+    // Restore env to EXACTLY the snapshotted state. Shared by the abort guard and
+    // dispose() so isolation is symmetric and never leaks a cleared var.
+    const restoreEnv = () => {
+        if (prevHome === undefined)
+            delete process.env.HOME;
+        else
+            process.env.HOME = prevHome;
+        if (prevInDaemon === undefined)
+            delete process.env.ASHLR_IN_DAEMON;
+        else
+            process.env.ASHLR_IN_DAEMON = prevInDaemon;
+        if (prevInSwarm === undefined)
+            delete process.env.ASHLR_IN_SWARM;
+        else
+            process.env.ASHLR_IN_SWARM = prevInSwarm;
+    };
+    // 3. SANITY GUARD: homedir() must now resolve to the tmp HOME, otherwise
+    //    isolation is broken on this platform and we MUST NOT proceed (it would
+    //    risk the real ~/.ashlr). Restore env + rm the tmp dir + fail loudly —
+    //    exactly as the H1 fixture's guard does.
+    if (resolve(homedir()) !== resolve(home)) {
+        restoreEnv();
+        try {
+            rmSync(home, { recursive: true, force: true });
+        }
+        catch {
+            /* idempotent — never throw from the abort path */
+        }
+        throw new Error('ashlr demo: HOME relocation did not take effect (homedir() != tmp HOME); ' +
+            'refusing to run to avoid touching the real ~/.ashlr');
+    }
+    // 4. Create a DISPOSABLE git repo seeded with a `// TODO:` marker so the
+    //    backlog scan finds REAL work (same discipline as the H1 testkit's
+    //    makeDisposableRepo/todoSeedFiles, self-contained here).
+    let repoDir;
+    try {
+        repoDir = seedDisposableRepo();
+    }
+    catch (err) {
+        // Repo creation failed (e.g. git missing) — tear the tmp HOME back down and
+        // restore env before re-throwing so we never strand isolated state.
+        restoreEnv();
+        try {
+            rmSync(home, { recursive: true, force: true });
+        }
+        catch {
+            /* idempotent */
+        }
+        throw err;
+    }
+    // Once dispose() restores the REAL HOME, a second dispose() must be a TRUE
+    // no-op — a repeat unenroll()/sweep would write into the REAL ~/.ashlr (policy
+    // emits audit() on every enroll/unenroll since H6). This flag enforces genuine
+    // idempotence so a double-dispose never leaks state to the real home.
+    let disposed = false;
+    const dispose = () => {
+        if (disposed)
+            return;
+        disposed = true;
+        // a. Unenroll the tmp repo + sweep its sandboxes (the rollback) — STILL
+        //    under the isolated HOME, so this writes only into the tmp ~/.ashlr.
+        try {
+            unenroll(repoDir);
+        }
+        catch {
+            /* best-effort — never throw from teardown */
+        }
+        try {
+            sweepRepoSandboxes(repoDir);
+        }
+        catch {
+            /* best-effort */
+        }
+        // b. rm -rf the tmp repo + tmp HOME (unless --no-cleanup keeps them).
+        if (!keep) {
+            try {
+                rmSync(repoDir, { recursive: true, force: true });
+            }
+            catch {
+                /* idempotent */
+            }
+            try {
+                if (existsSync(home))
+                    rmSync(home, { recursive: true, force: true });
+            }
+            catch {
+                /* idempotent */
+            }
+        }
+        // c. Restore HOME + re-entrancy env LAST, so (a)/(b) ran isolated.
+        restoreEnv();
+    };
+    return {
+        home,
+        ashlrDir: join(home, '.ashlr'),
+        repoDir,
+        dispose,
+    };
+}
+// ---------------------------------------------------------------------------
+// seedDisposableRepo — a real git repo under os.tmpdir(), seeded with a
+// `// TODO:` marker + an initial commit so HEAD resolves and the backlog scan
+// finds work. Self-contained (node builtins + git only) — the same discipline
+// the H1 testkit's makeDisposableRepo/todoSeedFiles encode, inlined so a shipped
+// src/ module never imports from test/.
+// ---------------------------------------------------------------------------
+const GIT_TIMEOUT = 30_000;
+// HERMETIC git env: pin global/system config to /dev/null so the disposable
+// repo never inherits the ambient (or the relocated tmp) HOME's `.gitconfig`,
+// and never reads /etc git config. Without this the demo's HOME relocation
+// (process.env.HOME → fresh tmp dir) makes git resolve config against a dir that
+// can differ between back-to-back demo runs in one process, which intermittently
+// breaks repo detection mid-sequence ("fatal: not in a git directory"). Pinning
+// both config sources + an explicit cwd makes seeding fully deterministic and
+// independent of any leaked/relocated git state. Mirrors the H1 testkit.
+const GIT_ENV = {
+    ...process.env,
+    GIT_CONFIG_GLOBAL: '/dev/null',
+    GIT_CONFIG_SYSTEM: '/dev/null',
+    GIT_TERMINAL_PROMPT: '0',
+};
+function git(dir, args) {
+    execFileSync('git', ['-C', dir, ...args], {
+        cwd: dir,
+        env: GIT_ENV,
+        timeout: GIT_TIMEOUT,
+        stdio: 'pipe',
+        encoding: 'utf8',
+    });
+}
+function seedDisposableRepo() {
+    const dir = mkdtempSync(join(tmpdir(), `ashlr-h8-demo-repo-${process.pid}-`));
+    // Self-contained git identity so commits never depend on global config, and
+    // gpgsign off so CI signing config can't interfere (mirrors the H1 testkit).
+    // `--local` pins every write to this repo's own config regardless of ambient
+    // state (the GIT_ENV above already neutralises global/system config).
+    git(dir, ['init', '--initial-branch=main', '.']);
+    git(dir, ['config', '--local', 'user.email', 'demo@ashlr.local']);
+    git(dir, ['config', '--local', 'user.name', 'Ashlr Demo']);
+    git(dir, ['config', '--local', 'commit.gpgsign', 'false']);
+    // A README so HEAD/docs are well-formed + one source file carrying a single
+    // `// TODO:` so `scanTodos` (buildBacklog) discovers exactly one work item.
+    const files = {
+        'README.md': '# disposable demo repo\n',
+        'src/todo-0.ts': 'export function f0(): number {\n' +
+            '  // TODO: implement f0 (deterministic discovery signal)\n' +
+            '  return 0;\n}\n',
+    };
+    for (const [rel, content] of Object.entries(files)) {
+        const full = join(dir, rel);
+        mkdirSync(dirname(full), { recursive: true });
+        writeFileSync(full, content, 'utf8');
+    }
+    git(dir, ['add', '-A']);
+    git(dir, ['commit', '--no-verify', '-m', 'init']);
+    return dir;
+}
+//# sourceMappingURL=demo-sandbox.js.map

package/dist/cli/demo-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demo-sandbox.js","sourceRoot":"","sources":["../../src/cli/demo-sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,UAAU,EACV,SAAS,EACT,WAAW,EACX,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAkCjE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,IAA6B;IAC3D,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;IAEjC,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAClC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAE/C,wEAAwE;IACxE,wDAAwD;IACxD,2EAA2E;IAC3E,+EAA+E;IAC/E,4EAA4E;IAC5E,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACnC,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAElC,8EAA8E;IAC9E,qEAAqE;IACrE,MAAM,UAAU,GAAG,GAAS,EAAE;QAC5B,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;;YAC/C,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QACjC,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;;YAC9D,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,YAAY,CAAC;QAChD,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;;YAC5D,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,WAAW,CAAC;IAChD,CAAC,CAAC;IAEF,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,6CAA6C;IAC7C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,UAAU,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2EAA2E;YACzE,qDAAqD,CACxD,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,uEAAuE;IACvE,6DAA6D;IAC7D,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4EAA4E;QAC5E,oEAAoE;QACpE,UAAU,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB;QAClB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,2EAA2E;IAC3E,+EAA+E;IAC/E,+EAA+E;IAC/E,sEAAsE;IACtE,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAEhB,wEAAwE;QACxE,yEAAyE;QACzE,IAAI,CAAC;YACH,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;QACD,IAAI,CAAC;YACH,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QAED,sEAAsE;QACtE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,IAAI,CAAC;oBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,UAAU,EAAE,CAAC;IACf,CAAC,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC9B,OAAO;QACP,OAAO;KACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAC9E,8EAA8E;AAC9E,iFAAiF;AACjF,wCAAwC;AACxC,8EAA8E;AAE9E,MAAM,WAAW,GAAG,MAAM,CAAC;AAE3B,4EAA4E;AAC5E,8EAA8E;AAC9E,2EAA2E;AAC3E,iFAAiF;AACjF,iFAAiF;AACjF,gFAAgF;AAChF,8EAA8E;AAC9E,yEAAyE;AACzE,MAAM,OAAO,GAAsB;IACjC,GAAG,OAAO,CAAC,GAAG;IACd,iBAAiB,EAAE,WAAW;IAC9B,iBAAiB,EAAE,WAAW;IAC9B,mBAAmB,EAAE,GAAG;CACzB,CAAC;AAEF,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc;IACtC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE;QACxC,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,OAAO;QACZ,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAE9E,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,sEAAsE;IACtE,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAC,CAAC;IACjD,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAClE,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;IAE3D,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,KAAK,GAA2B;QACpC,WAAW,EAAE,0BAA0B;QACvC,eAAe,EACb,kCAAkC;YAClC,4DAA4D;YAC5D,kBAAkB;KACrB,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAElD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/cli/demo.d.ts

@@ -0,0 +1,76 @@
+/**
+ * CLI handler for `ashlr demo` — a WATCHABLE, reproducible run of the FULL
+ * autonomous chain on a DISPOSABLE repo so Mason can SEE it before trusting it.
+ * See docs/contracts/CONTRACT-H8.md (BUILD ITEM 1).
+ *
+ * MILESTONE H8 "Harden & Prove" (FINAL). The demo adds NO new outward
+ * capability: it is the ONLY new runtime surface, and it is
+ * sandboxed/proposal-only/local + DISPOSABLE-repo-only with GUARANTEED
+ * auto-cleanup.
+ *
+ * H8 ABSOLUTE RULES (proven by test/h8.demo.test.ts + test/h8.no-new-outward.test.ts):
+ *  - DEMO-DISPOSABLE-ONLY: the demo runs in an ISOLATED context (its OWN tmp
+ *    ~/.ashlr via a relocated process.env.HOME) and enrolls/works ONLY a
+ *    throwaway git repo under os.tmpdir(). It NEVER enrolls or touches the real
+ *    portfolio or the real ~/.ashlr/enrollment.json ({repos:[]}).
+ *  - DEMO-AUTO-CLEANS: the tmp repo + tmp ~/.ashlr are removed on success, on
+ *    error, AND on interrupt (try/finally + a SIGINT/SIGTERM handler). Cleanup
+ *    is idempotent + never throws. `--no-cleanup` keeps the tmp dir (still under
+ *    os.tmpdir()) for inspection and prints its path.
+ *  - DEMO-NEVER-APPLIES: the demo creates only a PENDING proposal; it NEVER
+ *    approves/applies a proposal, NEVER pushes/PRs/deploys, and NEVER runs
+ *    against a real repo. It imports NO apply/push/PR/deploy primitive — it
+ *    points the human at `ashlr inbox` exactly as the daemon does.
+ *  - DETERMINISTIC, NO LIVE MODEL REQUIRED: the demo works end-to-end with NO
+ *    local model. When a local model IS reachable it MAY run a real sandboxed
+ *    PROPOSAL-ONLY swarm (via the daemon's existing `tick({dryRun:false})`,
+ *    which imports no apply/push/PR/deploy primitive); otherwise it runs the
+ *    daemon tick dry-run + a deterministic stub PENDING proposal so a proposal
+ *    always appears.
+ *  - No new runtime deps; node builtins + existing modules only.
+ *
+ * Wiring: BUILD/INTEGRATION adds `case 'demo'` + a `loadDemoCmd` lazy loader in
+ * src/cli/index.ts + a cmdHelp entry.
+ */
+/**
+ * Print one narrated demo step. Exported so a test can assert the chain narrates
+ * each stage (enroll → backlog → tick → PENDING → inbox → cleanup) in order.
+ */
+export declare function narrateStep(n: number, title: string, detail?: string): void;
+/** @internal options consumed only by tests — see test/h8.demo.test.ts. */
+export interface DemoInternalOptions {
+    /**
+     * Injected just before the inbox-review step (step 7). When provided and it
+     * throws, the demo MUST still run its try/finally cleanup (tmp gone, HOME
+     * restored) — the DEMO-AUTO-CLEANS error-path proof.
+     */
+    beforeInbox?: () => void;
+}
+/**
+ * `ashlr demo` — watch the FULL autonomous chain run, safely.
+ *
+ * Walks + narrates each step on a DISPOSABLE repo inside an ISOLATED tmp
+ * ~/.ashlr (see {@link import('./demo-sandbox.js').makeDemoContext}):
+ *   1. isolate  — relocate HOME to a fresh os.tmpdir() dir (assert it took effect)
+ *   2. seed     — create a throwaway git repo with a `// TODO:` so work exists
+ *   3. enroll   — enroll(tmpRepo)   (the explicit gate — on the DISPOSABLE repo only)
+ *   4. backlog  — buildBacklog({repos:[tmpRepo]})   (narrate the discovered TODO)
+ *   5. tick     — tick(cfg,{dryRun}) [real proposal-only swarm IF a local model is
+ *                 up, else dry-run + a deterministic stub PENDING proposal]
+ *   6. pending  — listProposals({status:'pending'})   (show the proposal — NOT applied)
+ *   7. inbox    — cmdInbox (review only — the human gate; the demo NEVER approves)
+ *   8. rollback — unenroll + sweepRepoSandboxes   (narrated; performed by dispose())
+ *   9. cleanup  — FINALLY: dispose() the tmp context (rm -rf unless --no-cleanup)
+ *
+ * Flags:
+ *   --no-cleanup  keep the tmp dir (still under os.tmpdir()) for inspection.
+ *   --json        emit a structured trace of the steps instead of narration.
+ *
+ * GUARANTEED auto-cleanup: the whole chain runs inside a try/finally that calls
+ * dispose(), and a SIGINT/SIGTERM handler is installed so an interrupt also
+ * cleans up. Returns 0 on success, non-zero on error (after cleanup ran).
+ *
+ * @param args CLI args (`--no-cleanup`, `--json`).
+ * @param internal @internal test-only injection seam (never passed by the CLI).
+ */
+export declare function cmdDemo(args: string[], internal?: DemoInternalOptions): Promise<number>;

package/dist/cli/demo.js

@@ -0,0 +1,285 @@
+/**
+ * CLI handler for `ashlr demo` — a WATCHABLE, reproducible run of the FULL
+ * autonomous chain on a DISPOSABLE repo so Mason can SEE it before trusting it.
+ * See docs/contracts/CONTRACT-H8.md (BUILD ITEM 1).
+ *
+ * MILESTONE H8 "Harden & Prove" (FINAL). The demo adds NO new outward
+ * capability: it is the ONLY new runtime surface, and it is
+ * sandboxed/proposal-only/local + DISPOSABLE-repo-only with GUARANTEED
+ * auto-cleanup.
+ *
+ * H8 ABSOLUTE RULES (proven by test/h8.demo.test.ts + test/h8.no-new-outward.test.ts):
+ *  - DEMO-DISPOSABLE-ONLY: the demo runs in an ISOLATED context (its OWN tmp
+ *    ~/.ashlr via a relocated process.env.HOME) and enrolls/works ONLY a
+ *    throwaway git repo under os.tmpdir(). It NEVER enrolls or touches the real
+ *    portfolio or the real ~/.ashlr/enrollment.json ({repos:[]}).
+ *  - DEMO-AUTO-CLEANS: the tmp repo + tmp ~/.ashlr are removed on success, on
+ *    error, AND on interrupt (try/finally + a SIGINT/SIGTERM handler). Cleanup
+ *    is idempotent + never throws. `--no-cleanup` keeps the tmp dir (still under
+ *    os.tmpdir()) for inspection and prints its path.
+ *  - DEMO-NEVER-APPLIES: the demo creates only a PENDING proposal; it NEVER
+ *    approves/applies a proposal, NEVER pushes/PRs/deploys, and NEVER runs
+ *    against a real repo. It imports NO apply/push/PR/deploy primitive — it
+ *    points the human at `ashlr inbox` exactly as the daemon does.
+ *  - DETERMINISTIC, NO LIVE MODEL REQUIRED: the demo works end-to-end with NO
+ *    local model. When a local model IS reachable it MAY run a real sandboxed
+ *    PROPOSAL-ONLY swarm (via the daemon's existing `tick({dryRun:false})`,
+ *    which imports no apply/push/PR/deploy primitive); otherwise it runs the
+ *    daemon tick dry-run + a deterministic stub PENDING proposal so a proposal
+ *    always appears.
+ *  - No new runtime deps; node builtins + existing modules only.
+ *
+ * Wiring: BUILD/INTEGRATION adds `case 'demo'` + a `loadDemoCmd` lazy loader in
+ * src/cli/index.ts + a cmdHelp entry.
+ */
+import { makeColors, isTty } from './ui.js';
+import { makeDemoContext } from './demo-sandbox.js';
+import { enroll, listEnrolled } from '../core/sandbox/policy.js';
+import { buildBacklog } from '../core/portfolio/backlog.js';
+import { tick } from '../core/daemon/loop.js';
+import { probeEndpoint } from '../core/providers.js';
+import { listProposals, createProposal } from '../core/inbox/store.js';
+import { cmdInbox } from './inbox.js';
+const { bold, dim, red, green, yellow, cyan } = makeColors(isTty());
+// ---------------------------------------------------------------------------
+// Narration helper — every demo step prints a numbered, colorized line so the
+// human can WATCH the chain. Kept tiny + side-effect-only (console.log).
+// ---------------------------------------------------------------------------
+/**
+ * Print one narrated demo step. Exported so a test can assert the chain narrates
+ * each stage (enroll → backlog → tick → PENDING → inbox → cleanup) in order.
+ */
+export function narrateStep(n, title, detail) {
+    const head = `  ${cyan(String(n))}. ${bold(title)}`;
+    console.log(detail ? `${head}  ${dim(detail)}` : head);
+}
+// ---------------------------------------------------------------------------
+// cmdDemo — the dispatcher entry point
+// ---------------------------------------------------------------------------
+/**
+ * `ashlr demo` — watch the FULL autonomous chain run, safely.
+ *
+ * Walks + narrates each step on a DISPOSABLE repo inside an ISOLATED tmp
+ * ~/.ashlr (see {@link import('./demo-sandbox.js').makeDemoContext}):
+ *   1. isolate  — relocate HOME to a fresh os.tmpdir() dir (assert it took effect)
+ *   2. seed     — create a throwaway git repo with a `// TODO:` so work exists
+ *   3. enroll   — enroll(tmpRepo)   (the explicit gate — on the DISPOSABLE repo only)
+ *   4. backlog  — buildBacklog({repos:[tmpRepo]})   (narrate the discovered TODO)
+ *   5. tick     — tick(cfg,{dryRun}) [real proposal-only swarm IF a local model is
+ *                 up, else dry-run + a deterministic stub PENDING proposal]
+ *   6. pending  — listProposals({status:'pending'})   (show the proposal — NOT applied)
+ *   7. inbox    — cmdInbox (review only — the human gate; the demo NEVER approves)
+ *   8. rollback — unenroll + sweepRepoSandboxes   (narrated; performed by dispose())
+ *   9. cleanup  — FINALLY: dispose() the tmp context (rm -rf unless --no-cleanup)
+ *
+ * Flags:
+ *   --no-cleanup  keep the tmp dir (still under os.tmpdir()) for inspection.
+ *   --json        emit a structured trace of the steps instead of narration.
+ *
+ * GUARANTEED auto-cleanup: the whole chain runs inside a try/finally that calls
+ * dispose(), and a SIGINT/SIGTERM handler is installed so an interrupt also
+ * cleans up. Returns 0 on success, non-zero on error (after cleanup ran).
+ *
+ * @param args CLI args (`--no-cleanup`, `--json`).
+ * @param internal @internal test-only injection seam (never passed by the CLI).
+ */
+export async function cmdDemo(args, internal) {
+    const noCleanup = args.includes('--no-cleanup');
+    const asJson = args.includes('--json');
+    const steps = [];
+    let stepNo = 0;
+    // Record + narrate one step. In --json mode we stay quiet on stdout (the
+    // transcript is emitted once at the end) but still track the step.
+    const step = (name, title, detail) => {
+        stepNo += 1;
+        steps.push({ n: stepNo, step: name, detail });
+        if (!asJson)
+            narrateStep(stepNo, title, detail);
+    };
+    if (!asJson) {
+        console.log('');
+        console.log(bold('ashlr demo') +
+            dim(' — watch the full autonomous chain on a DISPOSABLE repo (proposal-only, auto-cleans)'));
+        console.log('');
+    }
+    // ── Step 1: isolate. Relocate HOME to a fresh tmp dir; assert it took effect.
+    //    makeDemoContext throws (after restoring) if isolation did not engage, so
+    //    we NEVER risk the real ~/.ashlr.
+    let ctx;
+    try {
+        ctx = makeDemoContext({ keep: noCleanup });
+    }
+    catch (err) {
+        // Isolation failed BEFORE any state was touched — report + bail (exit 1).
+        if (!asJson) {
+            console.error(red('demo: could not establish an isolated tmp context: ' + String(err)));
+        }
+        else {
+            console.log(JSON.stringify({ ok: false, error: String(err) }));
+        }
+        return 1;
+    }
+    // Install a signal handler so an interrupt (Ctrl-C / SIGTERM) ALSO cleans up.
+    // Declared here so the finally can remove it; INSTALLED inside the try below so
+    // that ANY throw after makeDemoContext() (which has already relocated HOME to
+    // the tmp dir) routes through the dispose() finally and never leaks tmp state.
+    let signalled = false;
+    const onSignal = () => {
+        signalled = true;
+        try {
+            ctx.dispose();
+        }
+        catch {
+            /* dispose is best-effort + idempotent */
+        }
+        // STOP the chain. process.once(...) suppresses Node's default
+        // terminate-on-signal, so we MUST exit ourselves — otherwise the awaited
+        // body would RESUME after dispose() restored the REAL HOME and the remaining
+        // steps (tick / createProposal / inbox / audit) would write into the REAL
+        // ~/.ashlr. Exiting here makes that impossible.
+        process.exit(130);
+    };
+    let liveModel = false;
+    let ok = false;
+    try {
+        // Narrate the first two (already-completed) steps + install the signal
+        // handler INSIDE the try, so any throw from here on — including from these
+        // narration calls or the listener install — routes through the dispose()
+        // finally with HOME still relocated to the tmp dir.
+        step('isolate', 'Isolate', `tmp HOME at ${ctx.home} (NOT your real ~/.ashlr)`);
+        step('seed', 'Seed disposable repo', `${ctx.repoDir} (a throwaway git repo with a // TODO:)`);
+        process.once('SIGINT', onSignal);
+        process.once('SIGTERM', onSignal);
+        // ── Step 3: enroll the DISPOSABLE repo (the explicit gate). Resolves state
+        //    via homedir() at call time, so it writes ONLY into the isolated tmp
+        //    ~/.ashlr and targets ONLY the throwaway repo — never a real path.
+        enroll(ctx.repoDir);
+        step('enroll', 'Enroll', `enrolled 1 disposable repo (${listEnrolled().length} total — NOT your portfolio)`);
+        // ── Step 4: backlog scan. Re-runs the REAL scanners over the tmp repo's
+        //    working tree and finds the seeded // TODO:.
+        const backlog = await buildBacklog({ repos: [ctx.repoDir] });
+        const titles = backlog.items.map((i) => i.title);
+        step('backlog', 'Backlog scan', `discovered ${backlog.items.length} work item(s)` +
+            (titles.length > 0 ? `: ${titles.slice(0, 3).join('; ')}` : ''));
+        // ── Step 5: daemon tick. Determine the path by probing for a LOCAL model.
+        //    probeEndpoint is local-only, 2s, never throws. With a model up we run
+        //    the daemon's existing PROPOSAL-ONLY swarm (tick {dryRun:false}); with
+        //    NO model we run the dry-run tick + synthesize a deterministic stub
+        //    PENDING proposal so a proposal ALWAYS appears (the deterministic path
+        //    the tests force).
+        const cfg = demoCfg();
+        const [lm, ol] = await Promise.all([
+            probeEndpoint('lmstudio', cfg.models.lmstudio),
+            probeEndpoint('ollama', cfg.models.ollama),
+        ]);
+        liveModel = lm.up || ol.up;
+        if (liveModel) {
+            // Real sandboxed PROPOSAL-ONLY swarm — tick imports no apply/push/PR/deploy
+            // primitive (H1/H4 grep-guarded); the most it can do is emit a PENDING
+            // proposal. NEVER applies.
+            await tick(cfg, { dryRun: false });
+            step('tick', 'Daemon tick (LIVE swarm)', `local model reachable (${lm.up ? 'lmstudio' : 'ollama'}) → sandboxed PROPOSAL-ONLY swarm`);
+        }
+        else {
+            // Deterministic no-model path: dry-run tick (touches nothing) + a stub
+            // PENDING proposal so the human still sees the inbox half of the chain.
+            await tick(cfg, { dryRun: true });
+            const seedTitle = titles[0] ?? 'demo: address the seeded TODO';
+            createProposal({
+                repo: ctx.repoDir,
+                origin: 'swarm',
+                kind: 'note',
+                title: `[demo] ${seedTitle}`,
+                summary: 'Deterministic demo stub: no local model was reachable, so the demo ' +
+                    'synthesizes a single PENDING proposal to show the inbox-review + ' +
+                    'rollback half of the chain. It is NEVER applied.',
+            });
+            step('tick', 'Daemon tick (no-model stub)', 'no local model reachable → dry-run tick + a deterministic stub PENDING proposal');
+        }
+        // ── Step 6: show the PENDING proposal — NOT applied.
+        const pending = listProposals({ status: 'pending' });
+        step('pending', 'PENDING proposal', `${pending.length} pending proposal(s) — ` +
+            (pending[0] ? `"${pending[0].title}" ` : '') +
+            green('NOT applied'));
+        // Test seam: inject a failure right before the inbox-review step to prove
+        // the try/finally ALWAYS cleans up. Never set by the CLI.
+        if (internal?.beforeInbox)
+            internal.beforeInbox();
+        // ── Step 7: inbox review (the human gate). cmdInbox renders against the
+        //    ISOLATED inbox; the demo NEVER approves.
+        if (!asJson) {
+            console.log('');
+            console.log('  ' +
+                yellow('This is the human gate.') +
+                dim(' In real use YOU review + approve here. The demo NEVER approves.'));
+            await cmdInbox([]);
+            console.log('');
+        }
+        step('inbox', 'Inbox review', 'the human gate — in real use YOU approve here; the demo NEVER approves/applies');
+        // ── Step 8: narrate the rollback (performed by dispose() in the finally).
+        step('rollback', 'Rollback / cleanup', 'unenroll the tmp repo + sweep its sandboxes, then remove the tmp repo + tmp HOME');
+        ok = true;
+    }
+    finally {
+        // ── Step 9: GUARANTEED auto-cleanup — runs on success, on error, AND on a
+        //    forced mid-run throw. dispose() is idempotent + never throws.
+        process.removeListener('SIGINT', onSignal);
+        process.removeListener('SIGTERM', onSignal);
+        if (!signalled) {
+            try {
+                ctx.dispose();
+            }
+            catch {
+                /* dispose is best-effort + idempotent */
+            }
+        }
+    }
+    // ── Final report.
+    if (asJson) {
+        const transcript = {
+            ok,
+            liveModel,
+            repoDir: ctx.repoDir,
+            kept: noCleanup,
+            steps,
+        };
+        console.log(JSON.stringify(transcript, null, 2));
+    }
+    else {
+        console.log('');
+        if (noCleanup) {
+            console.log('  ' +
+                yellow('--no-cleanup:') +
+                ` kept the tmp dir for inspection (still under os.tmpdir()): ${ctx.repoDir}`);
+            console.log('  ' + dim('(remove it yourself when done — it is a throwaway repo)'));
+        }
+        else {
+            console.log('  ' + green('done') + dim(' — tmp repo + tmp ~/.ashlr removed; your real portfolio was never touched'));
+        }
+        console.log('');
+    }
+    return ok ? 0 : 1;
+}
+// ---------------------------------------------------------------------------
+// demoCfg — a minimal, deterministic in-memory AshlrConfig for the demo tick.
+// Conservative caps; constructed in memory (NOT loadConfig) so it never depends
+// on config.ts's module-load CONFIG_DIR — keeping the demo isolated regardless
+// of import order, exactly like the H1 fixture's makeCfg().
+// ---------------------------------------------------------------------------
+function demoCfg() {
+    return {
+        version: 1,
+        daemon: {
+            dailyBudgetUsd: 0.5,
+            perTickItems: 1,
+            parallel: 1,
+            intervalMs: 100,
+        },
+        models: {
+            lmstudio: 'http://localhost:1234',
+            ollama: 'http://localhost:11434',
+            providerChain: ['lmstudio', 'ollama'],
+        },
+    };
+}
+//# sourceMappingURL=demo.js.map

package/dist/cli/demo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demo.js","sourceRoot":"","sources":["../../src/cli/demo.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAoB,MAAM,mBAAmB,CAAC;AAGtE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;AAEpE,8EAA8E;AAC9E,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,CAAS,EAAE,KAAa,EAAE,MAAe;IACnE,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AA6CD,8EAA8E;AAC9E,uCAAuC;AACvC,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAc,EACd,QAA8B;IAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEvC,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,yEAAyE;IACzE,mEAAmE;IACnE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc,EAAQ,EAAE;QACjE,MAAM,IAAI,CAAC,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,YAAY,CAAC;YAChB,GAAG,CAAC,sFAAsF,CAAC,CAC9F,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,+EAA+E;IAC/E,8EAA8E;IAC9E,sCAAsC;IACtC,IAAI,GAAgB,CAAC;IACrB,IAAI,CAAC;QACH,GAAG,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0EAA0E;QAC1E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,qDAAqD,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1F,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,8EAA8E;IAC9E,gFAAgF;IAChF,8EAA8E;IAC9E,+EAA+E;IAC/E,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,SAAS,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;QACD,8DAA8D;QAC9D,yEAAyE;QACzE,6EAA6E;QAC7E,0EAA0E;QAC1E,gDAAgD;QAChD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC;IAEF,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,EAAE,GAAG,KAAK,CAAC;IAEf,IAAI,CAAC;QACH,uEAAuE;QACvE,2EAA2E;QAC3E,yEAAyE;QACzE,oDAAoD;QACpD,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,GAAG,CAAC,IAAI,2BAA2B,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,EAAE,sBAAsB,EAAE,GAAG,GAAG,CAAC,OAAO,yCAAyC,CAAC,CAAC;QAE9F,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAElC,4EAA4E;QAC5E,yEAAyE;QACzE,uEAAuE;QACvE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CACF,QAAQ,EACR,QAAQ,EACR,+BAA+B,YAAY,EAAE,CAAC,MAAM,8BAA8B,CACnF,CAAC;QAEF,yEAAyE;QACzE,iDAAiD;QACjD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CACF,SAAS,EACT,cAAc,EACd,cAAc,OAAO,CAAC,KAAK,CAAC,MAAM,eAAe;YAC/C,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAClE,CAAC;QAEF,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,2EAA2E;QAC3E,uBAAuB;QACvB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjC,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC9C,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;SAC3C,CAAC,CAAC;QACH,SAAS,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAE3B,IAAI,SAAS,EAAE,CAAC;YACd,4EAA4E;YAC5E,uEAAuE;YACvE,2BAA2B;YAC3B,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACnC,IAAI,CACF,MAAM,EACN,0BAA0B,EAC1B,0BAA0B,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,mCAAmC,CAC3F,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,uEAAuE;YACvE,wEAAwE;YACxE,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,+BAA+B,CAAC;YAC/D,cAAc,CAAC;gBACb,IAAI,EAAE,GAAG,CAAC,OAAO;gBACjB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,UAAU,SAAS,EAAE;gBAC5B,OAAO,EACL,qEAAqE;oBACrE,mEAAmE;oBACnE,kDAAkD;aACrD,CAAC,CAAC;YACH,IAAI,CACF,MAAM,EACN,6BAA6B,EAC7B,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAED,sDAAsD;QACtD,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACrD,IAAI,CACF,SAAS,EACT,kBAAkB,EAClB,GAAG,OAAO,CAAC,MAAM,yBAAyB;YACxC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,KAAK,CAAC,aAAa,CAAC,CACvB,CAAC;QAEF,0EAA0E;QAC1E,0DAA0D;QAC1D,IAAI,QAAQ,EAAE,WAAW;YAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;QAElD,yEAAyE;QACzE,8CAA8C;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,IAAI;gBACF,MAAM,CAAC,yBAAyB,CAAC;gBACjC,GAAG,CAAC,kEAAkE,CAAC,CAC1E,CAAC;YACF,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CACF,OAAO,EACP,cAAc,EACd,gFAAgF,CACjF,CAAC;QAEF,2EAA2E;QAC3E,IAAI,CACF,UAAU,EACV,oBAAoB,EACpB,kFAAkF,CACnF,CAAC;QAEF,EAAE,GAAG,IAAI,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,2EAA2E;QAC3E,mEAAmE;QACnE,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,UAAU,GAAmB;YACjC,EAAE;YACF,SAAS;YACT,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,SAAS;YACf,KAAK;SACN,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CACT,IAAI;gBACF,MAAM,CAAC,eAAe,CAAC;gBACvB,+DAA+D,GAAG,CAAC,OAAO,EAAE,CAC/E,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,yDAAyD,CAAC,CAAC,CAAC;QACrF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,2EAA2E,CAAC,CAAC,CAAC;QACvH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,4DAA4D;AAC5D,8EAA8E;AAE9E,SAAS,OAAO;IACd,OAAO;QACL,OAAO,EAAE,CAAC;QACV,MAAM,EAAE;YACN,cAAc,EAAE,GAAG;YACnB,YAAY,EAAE,CAAC;YACf,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,GAAG;SAChB;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,uBAAuB;YACjC,MAAM,EAAE,wBAAwB;YAChC,aAAa,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;SACtC;KACa,CAAC;AACnB,CAAC"}