@bevel-software/platform-core-backend 0.14.0 → 0.15.1

package/dist/modules/plugins/plugin-links.service.js

@@ -0,0 +1,304 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { DEFAULT_BRANCH, PLUGIN_MANIFEST_FILE, linkedSkillRoots, normalizeSkillRoot, pluginManifestName, renderPluginManifest, skillUnderRoot, withLinkedSkillRoots, } from '@bevel-software/platform-shared';
+import { AccessMutationService, accessMdPathForFolder } from '../access/access-mutation.service.js';
+import { pluginPrincipalKey } from '../access-model/access-grammar.js';
+import { WorkspaceMutex } from '../kb-fs/mutex.js';
+import { linksWorkspaceId } from './plugin-links.js';
+/** A refusal the route passes through: message + HTTP status + a machine-readable kind. */
+export class PluginLinkError extends Error {
+    status;
+    payload;
+    constructor(message, status, payload = {}) {
+        super(message);
+        this.status = status;
+        this.payload = payload;
+        this.name = 'PluginLinkError';
+    }
+}
+/**
+ * Linking shared skills into plugins — the writer behind "add an existing
+ * skill to this plugin".
+ *
+ * A link is TWO edits that only make sense together:
+ *
+ *   1. the skill's root goes into the plugin manifest's
+ *      `extensions["software.bevel.hexis"].skills` list (see
+ *      `HEXIS_LINKED_SKILLS_KEY`), which is what the catalog, the plugin page
+ *      and the compiled distribution read;
+ *   2. the skill folder's own `access.md` grants `read` to
+ *      `plugin/<Name>/read` and `write` to `plugin/<Name>/write`, which is
+ *      what lets the plugin's members actually read it — ownership decides,
+ *      the plugin is a view (see `plugin-principals.ts`).
+ *
+ * Which is why linking needs write on BOTH sides: on the plugin folder (to
+ * edit its manifest) and on the skill's root (to edit its access rules). A
+ * manager who lacks the second gets a 409 the UI turns into "request write
+ * access", not a link that silently shares nothing.
+ *
+ * Unlinking removes the manifest entry, and revokes the two tokens only when
+ * the actor may edit the skill's rules — otherwise the grant stays, and the
+ * skill page says so, for a skill editor to remove.
+ *
+ * Repair re-grants the tokens for a link that exists but whose grant was
+ * hand-removed: the amber dot's one action.
+ *
+ * Every operation is serialised on BOTH sides it writes — the plugin's
+ * manifest slug (the same key provisioning locks on) and the skill root whose
+ * access.md carries the grant — and lands as ordinary default-branch commits
+ * through the pending-commit driver, so the write gate and the per-user push
+ * gate apply exactly as they do to any edit.
+ */
+export class PluginLinksService {
+    workspaceService;
+    commits;
+    accessControl;
+    skillService;
+    links;
+    kbDirName;
+    events;
+    onChanged;
+    locks = new WorkspaceMutex();
+    mutation;
+    constructor(workspaceService, commits, accessControl, skillService, links, kbDirName, events, onChanged) {
+        this.workspaceService = workspaceService;
+        this.commits = commits;
+        this.accessControl = accessControl;
+        this.skillService = skillService;
+        this.links = links;
+        this.kbDirName = kbDirName;
+        this.events = events;
+        this.onChanged = onChanged;
+        this.mutation = new AccessMutationService(workspaceService, accessControl, kbDirName);
+    }
+    async link(user, plugin, rawRoot) {
+        const folder = await this.pluginFolder(plugin);
+        const root = this.rootOrThrow(rawRoot);
+        const wsId = linksWorkspaceId();
+        await this.requirePluginWrite(wsId, user, folder);
+        const skills = await this.resolvedSkills(root);
+        if (skills.length === 0) {
+            throw new PluginLinkError(`"${root}" holds no released skill. Link a skill folder, or a folder that contains skills.`, 422, { kind: 'no-skills', root });
+        }
+        if (!(await this.accessControl.canWrite(wsId, user.email, accessMdPathForFolder(root)))) {
+            // The manager may edit the plugin but not the skill's rules — the link
+            // would share nothing. The UI offers the request path on this shape.
+            throw new PluginLinkError(`You can't change who may read "${root}". Ask its editors for write access first.`, 409, { kind: 'needs-skill-write', root });
+        }
+        return this.locks.runAll(this.lockKeys(folder, root), async () => {
+            const { manifest, manifestRel } = await this.readManifest(wsId, folder);
+            const roots = linkedSkillRoots(manifest);
+            // Manifest FIRST, grant second — two commits, deliberately in this
+            // order. The two files live in different folders and the commit
+            // pipeline is path-scoped, so there is no single commit to be had; what
+            // can be chosen is which half-state a failure leaves. Listed-but-not-
+            // shared is the visible one: the link index reports the missing grant,
+            // the card wears the amber dot, and Repair finishes the job. The other
+            // order would leave shared-but-not-listed — an over-share nothing
+            // surfaces.
+            if (!roots.includes(root)) {
+                await this.workspaceService.writeFile(wsId, manifestRel, `${JSON.stringify(withLinkedSkillRoots(manifest, [...roots, root]), null, 2)}\n`);
+                await this.commits.runPendingCommit(wsId, DEFAULT_BRANCH, manifestRel, user);
+            }
+            await this.grantTokens(wsId, user, folder, root);
+            this.changed(wsId);
+            return { root, skills };
+        });
+    }
+    async unlink(user, plugin, rawRoot) {
+        const folder = await this.pluginFolder(plugin);
+        const root = this.rootOrThrow(rawRoot);
+        const wsId = linksWorkspaceId();
+        await this.requirePluginWrite(wsId, user, folder);
+        return this.locks.runAll(this.lockKeys(folder, root), async () => {
+            const { manifest, manifestRel } = await this.readManifest(wsId, folder);
+            const roots = linkedSkillRoots(manifest);
+            if (!roots.includes(root)) {
+                throw new PluginLinkError(`"${root}" is not linked into ${folder}.`, 404, { kind: 'not-linked', root });
+            }
+            // Revoke FIRST, manifest second — the mirror of `link`'s ordering and
+            // for the same reason: a failure between the two must leave the
+            // visible half-state (listed, no grant → amber dot, Repair), never the
+            // silent one (unlisted, still shared). Revoke only where the actor may
+            // edit the skill's rules; otherwise the grant stays for a skill editor
+            // to remove — never a silent no-op that pretends it happened.
+            let revoked = false;
+            if (await this.accessControl.canWrite(wsId, user.email, accessMdPathForFolder(root))) {
+                let changed = false;
+                for (const principal of this.tokens(folder)) {
+                    const r = await this.mutation.revoke(wsId, 'folder', root, principal, user.email, undefined, {
+                        tokenMatch: 'exact',
+                    });
+                    changed ||= r.changed;
+                }
+                if (changed) {
+                    await this.commits.runPendingCommit(wsId, DEFAULT_BRANCH, `${this.kbDirName}/${accessMdPathForFolder(root)}`, user);
+                }
+                revoked = true;
+            }
+            await this.workspaceService.writeFile(wsId, manifestRel, `${JSON.stringify(withLinkedSkillRoots(manifest, roots.filter((r) => r !== root)), null, 2)}\n`);
+            await this.commits.runPendingCommit(wsId, DEFAULT_BRANCH, manifestRel, user);
+            this.changed(wsId);
+            return { root, revoked };
+        });
+    }
+    async repair(user, plugin, rawRoot) {
+        const folder = await this.pluginFolder(plugin);
+        const root = this.rootOrThrow(rawRoot);
+        const wsId = linksWorkspaceId();
+        // Everything under the lock, the manifest read included: a repair that
+        // checked the link and then waited on an unlink would re-grant a root the
+        // manifest no longer names.
+        return this.locks.runAll(this.lockKeys(folder, root), async () => {
+            const { manifest } = await this.readManifest(wsId, folder);
+            if (!linkedSkillRoots(manifest).includes(root)) {
+                throw new PluginLinkError(`"${root}" is not linked into ${folder}.`, 404, { kind: 'not-linked', root });
+            }
+            if (!(await this.accessControl.canWrite(wsId, user.email, accessMdPathForFolder(root)))) {
+                throw new PluginLinkError(`You can't change who may read "${root}".`, 403, {
+                    kind: 'needs-skill-write',
+                    root,
+                });
+            }
+            // The same retired-skill rule as `link`: a repair re-grants on the root.
+            await this.resolvedSkills(root);
+            await this.grantTokens(wsId, user, folder, root);
+            this.changed(wsId);
+            return { root };
+        });
+    }
+    // --- internal --------------------------------------------------------------
+    /**
+     * ONE reservation for both sides of a link: the plugin's manifest AND the
+     * skill root's access.md. Two plugins linking the same root write the same
+     * file, and serialising on the plugin alone let them interleave, one splice
+     * overwriting the other's grant. `runAll` takes both keys atomically, so
+     * nothing nests and no ordering discipline is needed.
+     */
+    lockKeys(folder, root) {
+        return [`plugin:${pluginManifestName(folder)}`, `root:${root}`];
+    }
+    /**
+     * The two grants a link carries: members read, managers write — written as
+     * the CANONICAL keys (slugged name), the spelling every comparison uses, so
+     * a repeated link finds its grant and an unlink finds what to revoke
+     * whatever the folder is called.
+     */
+    tokens(folder) {
+        const slug = pluginManifestName(folder);
+        return [
+            { kind: 'role', role: pluginPrincipalKey(slug, 'read') },
+            { kind: 'role', role: pluginPrincipalKey(slug, 'write') },
+        ];
+    }
+    async grantTokens(wsId, user, folder, root) {
+        const [read, write] = this.tokens(folder);
+        const a = await this.mutation.grant(wsId, 'folder', root, 'read', read);
+        const b = await this.mutation.grant(wsId, 'folder', root, 'write', write);
+        if (a.changed || b.changed) {
+            await this.commits.runPendingCommit(wsId, DEFAULT_BRANCH, `${this.kbDirName}/${a.editPath}`, user);
+        }
+    }
+    rootOrThrow(raw) {
+        const root = normalizeSkillRoot(raw);
+        if (root === null) {
+            throw new PluginLinkError('A skill path must be a repo-relative folder path.', 422, { kind: 'bad-root' });
+        }
+        return root;
+    }
+    /**
+     * Released skills under the root — the catalog's answer, not the file
+     * system's. A RETIRED skill is kept for its owners and never shared onward:
+     * the grant lands on the ROOT folder, so a root that holds a retired skill
+     * anywhere beneath it cannot be linked at all — the grant would reach the
+     * retired one too. The refusal names them so the manager can link the
+     * active skills individually instead.
+     */
+    async resolvedSkills(root) {
+        const under = (await this.skillService.listSkills(undefined)).filter((s) => skillUnderRoot(s.path, root));
+        const retired = under.filter((s) => s.lifecycle === 'retired').map((s) => s.path);
+        if (retired.length > 0) {
+            throw new PluginLinkError(`"${root}" holds retired skills (${retired.join(', ')}); a retired skill is never shared onward. Link the active skills one by one.`, 422, { kind: 'retired-skills', root, retired });
+        }
+        return under.map((s) => s.path);
+    }
+    /**
+     * The exact on-disk plugin folder for `name`, or 404. Personal folders are
+     * not plugins, but that is the MEMBERSHIP's verdict (discovery marks the
+     * `personal-*` prefix personal only directly under the root), not a rule
+     * on the name — a nested plugin may be called anything.
+     */
+    async pluginFolder(name) {
+        const trimmed = name.trim();
+        if (!trimmed || trimmed.includes('/') || trimmed.includes('\\')) {
+            throw new PluginLinkError('Unknown plugin', 404, { kind: 'unknown-plugin' });
+        }
+        const membership = await this.links.membership();
+        const links = membership.byPlugin.get(trimmed);
+        if (!links) {
+            throw new PluginLinkError('Unknown plugin', 404, { kind: 'unknown-plugin' });
+        }
+        if (!links.linksAreManaged) {
+            // A dialect plugin's links live in a file this platform does not write.
+            throw new PluginLinkError(`${trimmed} is read from an external plugin format; edit its links in that repository.`, 409, { kind: 'read-only-links' });
+        }
+        return trimmed;
+    }
+    /** The repo-relative folder of a known plugin (any depth). */
+    async folderOf(plugin) {
+        const links = (await this.links.membership()).byPlugin.get(plugin);
+        if (!links)
+            throw new PluginLinkError('Unknown plugin', 404, { kind: 'unknown-plugin' });
+        return links.folder;
+    }
+    async requirePluginWrite(wsId, user, plugin) {
+        if (!(await this.accessControl.canWrite(wsId, user.email, await this.folderOf(plugin)))) {
+            // Same answer as an unknown plugin, so probing confirms nothing.
+            throw new PluginLinkError('Unknown plugin', 404, { kind: 'unknown-plugin' });
+        }
+    }
+    async readManifest(wsId, plugin) {
+        const folder = await this.folderOf(plugin);
+        const manifestRel = `${this.kbDirName}/${folder}/${PLUGIN_MANIFEST_FILE}`;
+        const abs = path.join(await this.workspaceService.getWorkspacePath(wsId), manifestRel);
+        let manifest = null;
+        let text = null;
+        try {
+            text = await fs.readFile(abs, 'utf-8');
+        }
+        catch (err) {
+            // Only a PROVEN absence gets the fresh minimal manifest a pre-manifest
+            // folder deserves. Any other failure must surface: the caller writes the
+            // manifest back, and a skeleton over a real one would erase its
+            // version, description and MCP extension block.
+            const code = err?.code;
+            if (code !== 'ENOENT' && code !== 'ENOTDIR')
+                throw err;
+        }
+        if (text !== null) {
+            try {
+                const parsed = JSON.parse(text);
+                if (typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)) {
+                    manifest = parsed;
+                }
+            }
+            catch {
+                /* unparsable */
+            }
+            if (manifest === null) {
+                throw new PluginLinkError(`${manifestRel} is not a JSON object; fix the manifest before changing its links.`, 422, { kind: 'bad-manifest' });
+            }
+        }
+        return {
+            manifest: manifest ?? JSON.parse(renderPluginManifest(path.posix.basename(folder))),
+            manifestRel,
+        };
+    }
+    changed(wsId) {
+        this.links.invalidate();
+        this.accessControl.invalidate(wsId);
+        this.onChanged?.();
+        this.events?.emit({ kind: 'fs-tree-changed', workspaceId: wsId, branch: DEFAULT_BRANCH });
+    }
+}
+//# sourceMappingURL=plugin-links.service.js.map

package/dist/modules/plugins/plugin-links.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-links.service.js","sourceRoot":"","sources":["../../../src/modules/plugins/plugin-links.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,oBAAoB,GAErB,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACpG,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,OAAO,EAAE,gBAAgB,EAAwB,MAAM,mBAAmB,CAAC;AAE3E,2FAA2F;AAC3F,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAG7B;IACA;IAHX,YACE,OAAe,EACN,MAAc,EACd,UAAmC,EAAE;QAE9C,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;QACd,YAAO,GAAP,OAAO,CAA8B;QAG9C,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,OAAO,kBAAkB;IAKV;IACA;IACA;IACA;IACA;IACA;IACA;IAGA;IAbF,KAAK,GAAG,IAAI,cAAc,EAAE,CAAC;IAC7B,QAAQ,CAAwB;IAEjD,YACmB,gBAAkC,EAClC,OAA8B,EAC9B,aAA6B,EAC7B,YAA2B,EAC3B,KAAsB,EACtB,SAAiB,EACjB,MAEhB,EACgB,SAAsB;QATtB,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,YAAO,GAAP,OAAO,CAAuB;QAC9B,kBAAa,GAAb,aAAa,CAAgB;QAC7B,iBAAY,GAAZ,YAAY,CAAe;QAC3B,UAAK,GAAL,KAAK,CAAiB;QACtB,cAAS,GAAT,SAAS,CAAQ;QACjB,WAAM,GAAN,MAAM,CAEtB;QACgB,cAAS,GAAT,SAAS,CAAa;QAEvC,IAAI,CAAC,QAAQ,GAAG,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAc,EAAE,MAAc,EAAE,OAAe;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CACvB,IAAI,IAAI,mFAAmF,EAC3F,GAAG,EACH,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAC5B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,uEAAuE;YACvE,qEAAqE;YACrE,MAAM,IAAI,eAAe,CACvB,kCAAkC,IAAI,4CAA4C,EAClF,GAAG,EACH,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CACpC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACzC,mEAAmE;YACnE,gEAAgE;YAChE,wEAAwE;YACxE,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,kEAAkE;YAClE,YAAY;YACZ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CACnC,IAAI,EACJ,WAAW,EACX,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACjF,CAAC;gBACF,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAc,EAAE,MAAc,EAAE,OAAe;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,eAAe,CAAC,IAAI,IAAI,wBAAwB,MAAM,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1G,CAAC;YAED,sEAAsE;YACtE,gEAAgE;YAChE,uEAAuE;YACvE,uEAAuE;YACvE,uEAAuE;YACvE,8DAA8D;YAC9D,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACrF,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE;wBAC3F,UAAU,EAAE,OAAO;qBACpB,CAAC,CAAC;oBACH,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC;gBACxB,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CACjC,IAAI,EACJ,cAAc,EACd,GAAG,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAClD,IAAI,CACL,CAAC;gBACJ,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CACnC,IAAI,EACJ,WAAW,EACX,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAChG,CAAC;YACF,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;YAC7E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAc,EAAE,MAAc,EAAE,OAAe;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;QAChC,uEAAuE;QACvE,0EAA0E;QAC1E,4BAA4B;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,eAAe,CAAC,IAAI,IAAI,wBAAwB,MAAM,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1G,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,MAAM,IAAI,eAAe,CAAC,kCAAkC,IAAI,IAAI,EAAE,GAAG,EAAE;oBACzE,IAAI,EAAE,mBAAmB;oBACzB,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,yEAAyE;YACzE,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAE9E;;;;;;OAMG;IACK,QAAQ,CAAC,MAAc,EAAE,IAAY;QAC3C,OAAO,CAAC,UAAU,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,MAAc;QAC3B,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO;YACL,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YACxD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;SAC1D,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,IAAc,EAAE,MAAc,EAAE,IAAY;QAClF,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1E,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,GAAW;QAC7B,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CAAC,mDAAmD,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,cAAc,CAAC,IAAY;QACvC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1G,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,eAAe,CACvB,IAAI,IAAI,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,+EAA+E,EACpI,GAAG,EACH,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,CAC1C,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,YAAY,CAAC,IAAY;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YAC3B,wEAAwE;YACxE,MAAM,IAAI,eAAe,CACvB,GAAG,OAAO,6EAA6E,EACvF,GAAG,EACH,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAC5B,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,8DAA8D;IACtD,KAAK,CAAC,QAAQ,CAAC,MAAc;QACnC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzF,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,IAAY,EAAE,IAAc,EAAE,MAAc;QAC3E,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,iEAAiE;YACjE,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,IAAY,EACZ,MAAc;QAEd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,oBAAoB,EAAE,CAAC;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;QACvF,IAAI,QAAQ,GAAmC,IAAI,CAAC;QACpD,IAAI,IAAI,GAAkB,IAAI,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,yEAAyE;YACzE,gEAAgE;YAChE,gDAAgD;YAChD,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;YACtD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,GAAG,CAAC;QACzD,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5E,QAAQ,GAAG,MAAiC,CAAC;gBAC/C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;YACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,IAAI,eAAe,CACvB,GAAG,WAAW,oEAAoE,EAClF,GAAG,EACH,EAAE,IAAI,EAAE,cAAc,EAAE,CACzB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,QAAQ,IAAK,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAA6B;YAChH,WAAW;SACZ,CAAC;IACJ,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC5F,CAAC;CACF"}

package/dist/modules/plugins/plugin-provision.service.d.ts

@@ -30,6 +30,7 @@
  *     body names its owner. Created lazily (ensure semantics) on the first
  *     personal skill.
  */
+import type { PluginSource } from './discovery/plugin-source.js';
 import { type AuthUser } from '@bevel-software/platform-shared';
 import type { WorkspaceService } from '../workspace/workspace.service.js';
 import type { IAccessControl } from '../access/access-control.interface.js';
@@ -42,6 +43,8 @@ export interface ProvisionCommitDriver {
 export interface ProvisionedPlugin {
     /** The folder name under `Plugins/` (not the full path). */
     folder: string;
+    /** The plugin's identity — the manifest name written for it. */
+    name: string;
     /** False when an ensure found the folder already there. */
     created: boolean;
 }
@@ -56,6 +59,8 @@ export declare class PluginProvisionService {
     private readonly accessControl;
     private readonly kbDirName;
     private readonly events?;
+    /** Which names are TAKEN is discovery's answer — the same one every catalog gets. */
+    private readonly source;
     /**
      * Serialises creations and deletions by MANIFEST SLUG
      * (`pluginManifestName(name)`). The wx write arbitrates same-path races,
@@ -71,7 +76,9 @@ export declare class PluginProvisionService {
             workspaceId: string;
             branch: string;
         }): void;
-    } | undefined);
+    } | undefined, 
+    /** Which names are TAKEN is discovery's answer — the same one every catalog gets. */
+    source?: PluginSource);
     /**
      * Create `Plugins/<name>/` for `user`. Throws `PluginProvisionError` 422 on a
      * name the filesystem or the model cannot carry, 409 when the name is taken
@@ -103,10 +110,39 @@ export declare class PluginProvisionService {
      * never interleave with a re-creation of the same name (the key derives
      * from the name, so both spell it identically).
      */
-    deletePlugin(user: AuthUser, rawName: string): Promise<void>;
+    deletePlugin(user: AuthUser, rawFolder: string): Promise<void>;
+    /**
+     * Whether `segments` names a directory below `root` with every component
+     * spelled exactly as on disk — by listing each level, which is the one
+     * question a case-insensitive filesystem answers honestly.
+     */
+    private exactFolderExists;
     /** The taken name (in its on-disk casing) colliding with `name`, or null. */
     private existingFolder;
-    /** An existing PLUGIN FOLDER whose derived manifest name equals `name`'s, or null. */
+    /**
+     * The identity discovery gives the plugin at `folder`, or the folder's own
+     * slug when it lists none there. ONE rule for every write provisioning
+     * makes — create, delete — as for the rename: no write over a discovery
+     * with a hole in it, whether or not the hole is where this plugin lives.
+     * An operation that parks and commits against an identity set it could
+     * not fully see is the class of mistake the rule exists to make impossible.
+     */
+    private discoveredIdentity;
+    /** One discovery over the knowledge base checkout. */
+    private discovered;
+    /**
+     * An existing plugin — at ANY depth, in either file shape — whose identity
+     * folds to the same slug as `name`'s, as its repo-relative folder; or null.
+     * Discovery's answer, so creation and every catalog agree on what is taken:
+     * a nested plugin claims its identity as fully as a top-level one, and a
+     * parked delete (dot-prefixed, invisible to the walk) claims nothing.
+     * Personal folders count — they publish a plugin.json like any plugin
+     * (though the reservation above means a named plugin never reaches this
+     * check with a personal slug). A loose file at the root is not a plugin.
+     *
+     * Refuses on a HOLE: a listing that could not see part of the tree cannot
+     * prove a name free.
+     */
     private manifestNameTwin;
     private provision;
     private readyWorkspaceId;

package/dist/modules/plugins/plugin-provision.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-provision.service.d.ts","sourceRoot":"","sources":["../../../src/modules/plugins/plugin-provision.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,OAAO,EASL,KAAK,QAAQ,EACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAK5E,sFAAsF;AACtF,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,CACd,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,QAAQ,EACd,IAAI,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,GACpC,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,mEAAmE;AACnE,qBAAa,oBAAqB,SAAQ,KAAK;IAG3C,QAAQ,CAAC,MAAM,EAAE,MAAM;gBADvB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM;CAK1B;AAED,qBAAa,sBAAsB;IAY/B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAf1B;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;gBAG/B,gBAAgB,EAAE,gBAAgB,EAClC,OAAO,EAAE,qBAAqB,EAC9B,aAAa,EAAE,cAAc,EAC7B,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,KAAK,EAAE;YAAE,IAAI,EAAE,iBAAiB,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,YAAA;IAGnH;;;;;OAKG;IACG,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAuD/E;;;OAGG;IACG,oBAAoB,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAqBtE;;;;;;;;;;;;;;;;;;OAkBG;IACG,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyDlE,6EAA6E;YAC/D,cAAc;IAa5B,sFAAsF;YACxE,gBAAgB;YA0BhB,SAAS;YA4DT,gBAAgB;CAI/B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAE/E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEjF"}
+{"version":3,"file":"plugin-provision.service.d.ts","sourceRoot":"","sources":["../../../src/modules/plugins/plugin-provision.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,OAAO,KAAK,EAAa,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAG5E,OAAO,EAUL,KAAK,QAAQ,EACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAK5E,sFAAsF;AACtF,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,CACd,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,QAAQ,EACd,IAAI,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,GACpC,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AA+BD,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,mEAAmE;AACnE,qBAAa,oBAAqB,SAAQ,KAAK;IAG3C,QAAQ,CAAC,MAAM,EAAE,MAAM;gBADvB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM;CAK1B;AAED,qBAAa,sBAAsB;IAY/B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,MAAM;IAjBzB;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;gBAG/B,gBAAgB,EAAE,gBAAgB,EAClC,OAAO,EAAE,qBAAqB,EAC9B,aAAa,EAAE,cAAc,EAC7B,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,KAAK,EAAE;YAAE,IAAI,EAAE,iBAAiB,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,YAAA;IACjH,qFAAqF;IACpE,MAAM,GAAE,YAAmC;IAG9D;;;;;OAKG;IACG,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAuD/E;;;OAGG;IACG,oBAAoB,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAqBtE;;;;;;;;;;;;;;;;;;OAkBG;IACG,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4FpE;;;;OAIG;YACW,iBAAiB;IAY/B,6EAA6E;YAC/D,cAAc;IAU5B;;;;;;;OAOG;YACW,kBAAkB;IAWhC,sDAAsD;YACxC,UAAU;IAMxB;;;;;;;;;;;;OAYG;YACW,gBAAgB;YAOhB,SAAS;YA4DT,gBAAgB;CAI/B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAE/E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEjF"}