@bevel-software/platform-core-backend 0.7.5 → 0.9.0

package/dist/modules/workspace/plugins-migration.js

@@ -0,0 +1,379 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { HEXIS_EXTENSION_NS, HEXIS_TOOLS_DIR, LEGACY_GROUPS_DIR, PLUGINS_DIR, PLUGIN_MANIFEST_FILE, PLUGIN_MCP_FILE, PLUGIN_MCP_SCHEMA, PLUGIN_SKILLS_DIR, renderPluginManifest, } from '@bevel-software/platform-shared';
+import { normalizeToolManual } from '../tool-manuals/tool-manuals.service.js';
+import { parseOwnAccessEntries } from '../access/access-control.service.js';
+import { containsVariableReference } from '../../shared/variable-refs.js';
+import { IGNORE_FILENAME } from './bevel-ignore.js';
+// lstat, both helpers: SYMLINKS ARE NOT SUPPORTED IN PLUGINS, anywhere, so a
+// link never counts as the thing it points at — following one here would let
+// a symlinked directory pull files from outside the plugin into the sweep
+// (and delete them from wherever they really live).
+async function exists(p) {
+    try {
+        await fs.lstat(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function isDir(p) {
+    try {
+        return (await fs.lstat(p)).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Move `from` to `to`, creating the parent. Never overwrites: a destination
+ * that already exists means a previous run got there first (or a human did),
+ * and clobbering it would destroy the newer copy.
+ */
+async function moveIfAbsent(from, to) {
+    if (await exists(to))
+        return false;
+    await fs.mkdir(path.dirname(to), { recursive: true });
+    await fs.rename(from, to);
+    return true;
+}
+/**
+ * A header value referencing a vault variable rather than carrying a literal.
+ * The substitutor's own grammar decides (shared/variable-refs.ts): both
+ * spellings it expands — `${VAR}` and bare `$VAR`, digit-leading names
+ * included — count, because either one copied into mcp.json would be
+ * transmitted verbatim by a conformant client. That means a prose `$5` in a
+ * header routes to the non-portable half too: over-classifying costs a header
+ * its portability, under-classifying leaks whatever `$5TOKEN` expands to.
+ */
+const isCredentialReference = containsVariableReference;
+/** Split a manual's headers into what mcp.json may carry and what may not. */
+function splitHeaders(headers) {
+    const literal = {};
+    const credential = {};
+    for (const [k, v] of Object.entries(headers ?? {})) {
+        (isCredentialReference(v) ? credential : literal)[k] = v;
+    }
+    return { literal, credential };
+}
+/** Read+parse a JSON file, or `null` when absent or unparsable. */
+async function readJson(p) {
+    try {
+        const parsed = JSON.parse(await fs.readFile(p, 'utf-8'));
+        return typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)
+            ? parsed
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+async function foldIntoPluginFiles(pluginDir, folderName, manuals, notes) {
+    if (manuals.length === 0)
+        return false;
+    const mcpPath = path.join(pluginDir, PLUGIN_MCP_FILE);
+    const mcp = (await readJson(mcpPath)) ?? { $schema: PLUGIN_MCP_SCHEMA, mcpServers: {} };
+    // An array (or any non-object) here would take property assignments and then
+    // drop them at stringify — normalize to an object before merging into it.
+    if (typeof mcp.mcpServers !== 'object' || mcp.mcpServers === null || Array.isArray(mcp.mcpServers)) {
+        mcp.mcpServers = {};
+    }
+    const servers = mcp.mcpServers;
+    const manifestPath = path.join(pluginDir, PLUGIN_MANIFEST_FILE);
+    const manifest = await readJson(manifestPath);
+    if (manifest === null) {
+        console.warn(`[plugins-migration] ${folderName}/${PLUGIN_MANIFEST_FILE} is missing or unparsable — ` +
+            'mcp manuals convert only when they carry NOTHING for the extensions block; any ' +
+            'non-portable half (auth headers, variables, a description, or the local-only flag) ' +
+            'keeps the manual a `.tool` until the manifest is fixed.');
+    }
+    let wroteMcp = false;
+    let wroteManifest = false;
+    const folded = [];
+    for (const item of manuals.sort((a, b) => a.manual.name.localeCompare(b.manual.name))) {
+        const m = item.manual;
+        const { literal, credential } = splitHeaders(m.headers);
+        // A manual whose non-portable half (auth headers, variables, local flag)
+        // has nowhere to go — the manifest is missing or unparsable — is NOT
+        // converted at all: writing only its portable half and deleting the
+        // source would silently discard the credential wiring. It stays a
+        // `.tool` until the manifest is fixed.
+        const extEntryPreview = {
+            ...(Object.keys(credential).length > 0 ? { headers: credential } : {}),
+            ...(m.variables && m.variables.length > 0 ? { variables: m.variables } : {}),
+            ...(typeof m.description === 'string' ? { description: m.description } : {}),
+            ...(m.remote === false ? { local: true } : {}),
+        };
+        if (manifest === null && Object.keys(extEntryPreview).length > 0) {
+            notes.push(`${folderName}: ${item.note} NOT converted — ${PLUGIN_MANIFEST_FILE} is missing/unparsable ` +
+                'and the manual carries declarations (auth headers, variables, a description, or the ' +
+                'local-only flag) that would be lost; fix the manifest first.');
+            continue;
+        }
+        folded.push(item);
+        // Own-property check: `in` sees `constructor` and friends on the prototype,
+        // which would silently skip a legitimately named server.
+        if (!Object.prototype.hasOwnProperty.call(servers, m.name)) {
+            servers[m.name] = {
+                type: 'streamable-http',
+                url: m.url,
+                ...(Object.keys(literal).length > 0 ? { headers: literal } : {}),
+            };
+            wroteMcp = true;
+            notes.push(`${folderName}: ${m.name} → ${PLUGIN_MCP_FILE}`);
+        }
+        // The non-portable half: auth headers, variable declarations, local-only.
+        const extEntry = extEntryPreview;
+        if (manifest !== null && Object.keys(extEntry).length > 0) {
+            // Normalize each level: a parseable manifest can still carry a string or
+            // array where an object belongs, and mutating that would throw mid-run.
+            if (typeof manifest.extensions !== 'object' || manifest.extensions === null || Array.isArray(manifest.extensions)) {
+                manifest.extensions = {};
+            }
+            const ext = manifest.extensions;
+            if (typeof ext[HEXIS_EXTENSION_NS] !== 'object' || ext[HEXIS_EXTENSION_NS] === null || Array.isArray(ext[HEXIS_EXTENSION_NS])) {
+                ext[HEXIS_EXTENSION_NS] = {};
+            }
+            const ns = ext[HEXIS_EXTENSION_NS];
+            if (typeof ns.mcpServers !== 'object' || ns.mcpServers === null || Array.isArray(ns.mcpServers)) {
+                ns.mcpServers = {};
+            }
+            const extServers = ns.mcpServers;
+            if (!Object.prototype.hasOwnProperty.call(extServers, m.name)) {
+                extServers[m.name] = extEntry;
+                wroteManifest = true;
+            }
+        }
+    }
+    if (wroteMcp)
+        await fs.writeFile(mcpPath, `${JSON.stringify(mcp, null, 2)}\n`, 'utf8');
+    if (wroteManifest) {
+        await fs.writeFile(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`, 'utf8');
+        notes.push(`${folderName}: wrote mcp-server declarations into ${PLUGIN_MANIFEST_FILE}`);
+    }
+    // Sources go LAST, once everything they carried is on disk elsewhere. A
+    // failure anywhere above leaves every `.tool` in place for the next run —
+    // which re-converts idempotently, since the fold never clobbers a key.
+    for (const item of folded) {
+        await fs.rm(item.abs, { force: true });
+        notes.push(`${folderName}: ${item.note} converted to an ${PLUGIN_MCP_FILE} entry`);
+    }
+    return wroteMcp || wroteManifest || folded.length > 0;
+}
+/**
+ * Parse a `.tool`; a convertible MCP manual (has a url) parses to a
+ * descriptor. A non-candidate (other types, a file that will not parse)
+ * is `null` and moves as a plain `.tool`; an MCP manual REFUSED conversion
+ * comes back as the reason string, so the migration log distinguishes a
+ * deliberately-retained integration from one that silently failed — the
+ * same courtesy the manifest-missing refusal already extends.
+ */
+async function asMcpManual(abs, repoRel) {
+    try {
+        const content = await fs.readFile(abs, 'utf-8');
+        const d = normalizeToolManual(path.basename(abs).replace(/\.tool$/i, ''), repoRel, content);
+        // The mcp.json loader accepts only names it can serve as a namespace and
+        // route slug — converting a manual whose id fails that shape would DELETE
+        // a working integration and write an entry discovery then skips. Such a
+        // manual stays a `.tool`.
+        if (d.type !== 'mcp' || !d.url)
+            return null;
+        if (!/^[a-z0-9][a-z0-9_-]*$/.test(d.name)) {
+            return `its id "${d.name}" is not a valid mcp.json server name`;
+        }
+        // Same refusal for the url: the mcp.json loader accepts only a directly
+        // parseable http(s) url, so a templated one (`${BASE}/mcp` — legal in a
+        // `.tool`, where the substitutor expands it) would convert into an entry
+        // discovery then skips, with the source already deleted. And a parseable
+        // url carrying `user:pass@` may not land in the PORTABLE file at all —
+        // stripping it would break the server, so the manual keeps its `.tool`
+        // form, where the credential stays platform-internal.
+        let url;
+        try {
+            url = new URL(d.url);
+        }
+        catch {
+            return 'its url is not directly parseable (a templated url only a .tool can carry)';
+        }
+        if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+            return `its url scheme "${url.protocol}" cannot land in mcp.json (http(s) only)`;
+        }
+        if (url.username || url.password) {
+            return 'its url embeds credentials, which may not land in the portable mcp.json';
+        }
+        // A `.tool` can gate ITSELF with frontmatter access verbs, read by the
+        // access resolver from the file's own path. An mcp.json entry has no
+        // per-server home for those — the file's ACL governs every server in it —
+        // so converting would silently widen who may configure and run the
+        // server. Such a manual stays a `.tool`, verbs and all.
+        if (parseOwnAccessEntries(content) !== null) {
+            return 'it gates itself with frontmatter access verbs, which mcp.json cannot carry';
+        }
+        return d;
+    }
+    catch {
+        return null;
+    }
+}
+/** Reorganise ONE plugin folder in place. Returns notes + whether files changed. */
+async function migratePluginFolder(pluginDir, folderName) {
+    const notes = [];
+    let changed = false;
+    if (!(await exists(path.join(pluginDir, PLUGIN_MANIFEST_FILE)))) {
+        await fs.writeFile(path.join(pluginDir, PLUGIN_MANIFEST_FILE), renderPluginManifest(folderName), 'utf8');
+        notes.push(`${folderName}: wrote ${PLUGIN_MANIFEST_FILE}`);
+        changed = true;
+    }
+    const entries = await fs.readdir(pluginDir, { withFileTypes: true });
+    const converted = [];
+    const convertOrMove = async (abs, name, note) => {
+        const manual = await asMcpManual(abs, `${PLUGINS_DIR}/${folderName}/${name}`);
+        if (manual !== null && typeof manual !== 'string') {
+            // QUEUED for conversion — the `.tool` is deleted only AFTER its entry
+            // has actually landed in the output files (see foldIntoPluginFiles).
+            // Deleting first left a window where a failed fold stranded the
+            // non-portable half (auth headers, variables) with no source to retry
+            // from: the file IS the recovery path until the fold succeeds.
+            converted.push({ manual, abs, note });
+            return;
+        }
+        if (typeof manual === 'string') {
+            // The operator's answer to "why is this integration not in mcp.json":
+            // a refused conversion must read as the deliberate retention it is.
+            notes.push(`${folderName}: ${note} NOT converted — ${manual}; kept as a .tool`);
+        }
+        const dest = path.join(pluginDir, ...HEXIS_TOOLS_DIR.split('/'), path.basename(abs));
+        if (abs !== dest && (await moveIfAbsent(abs, dest))) {
+            notes.push(`${folderName}: ${note} → ${HEXIS_TOOLS_DIR}/${path.basename(abs)}`);
+            changed = true;
+        }
+    };
+    for (const entry of entries) {
+        if (entry.name.startsWith('.'))
+            continue;
+        if (entry.name === PLUGIN_SKILLS_DIR || entry.name === PLUGIN_MANIFEST_FILE)
+            continue;
+        if (entry.name === PLUGIN_MCP_FILE || entry.name === 'access.md')
+            continue;
+        if (entry.name === HEXIS_TOOLS_DIR.split('/')[0])
+            continue;
+        const abs = path.join(pluginDir, entry.name);
+        // A skill is a folder carrying SKILL.md — the same rule the catalog uses.
+        if (entry.isDirectory() && (await exists(path.join(abs, 'SKILL.md')))) {
+            const dest = path.join(pluginDir, PLUGIN_SKILLS_DIR, entry.name);
+            if (await moveIfAbsent(abs, dest)) {
+                notes.push(`${folderName}: ${entry.name}/ → ${PLUGIN_SKILLS_DIR}/${entry.name}/`);
+                changed = true;
+            }
+            continue;
+        }
+        if (entry.isFile() && entry.name.toLowerCase().endsWith('.tool')) {
+            await convertOrMove(abs, entry.name, entry.name);
+        }
+    }
+    // Second sweep: mcp `.tool`s an EARLIER run moved into the extension dir
+    // (when mcp.json was a projection, not the authority). Converting them here
+    // is what makes the migration complete itself rather than strand a twin.
+    // `isDir` is lstat-based, so a SYMLINK planted at this path is not swept:
+    // this sweep DELETES what it converts, and following a link would delete
+    // `.tool` files from wherever the link really points.
+    const extToolsDir = path.join(pluginDir, ...HEXIS_TOOLS_DIR.split('/'));
+    if (await isDir(extToolsDir)) {
+        for (const entry of await fs.readdir(extToolsDir, { withFileTypes: true })) {
+            if (!entry.isFile() || !entry.name.toLowerCase().endsWith('.tool'))
+                continue;
+            const abs = path.join(extToolsDir, entry.name);
+            const manual = await asMcpManual(abs, `${PLUGINS_DIR}/${folderName}/${HEXIS_TOOLS_DIR}/${entry.name}`);
+            // A refusal reason here is a SETTLED resident of the tools dir — it
+            // was named the run it moved in, and this sweep repeats every boot,
+            // so re-noting it would be log spam. Only a convertible manual queues.
+            if (manual !== null && typeof manual !== 'string') {
+                converted.push({ manual, abs, note: `${HEXIS_TOOLS_DIR}/${entry.name}` });
+            }
+        }
+    }
+    changed = (await foldIntoPluginFiles(pluginDir, folderName, converted, notes)) || changed;
+    return { notes, changed };
+}
+/**
+ * Rewrite the KB's `.bevelignore` rule for the renamed root: the exact line
+ * `Groups/` becomes `Plugins/`. Without this a migrated KB is left with a
+ * stale rule for a folder that no longer exists and NO rule for the new one,
+ * so plugin internals start showing up in the file tree and agent view.
+ *
+ * The file is the operator's — this touches ONE line, the one the platform's
+ * own rename invalidated, and only when `Plugins/` is not already listed
+ * (in which case the stale line is harmlessly dead and left alone).
+ */
+async function rewriteIgnoreRootRule(repoDir, notes) {
+    const ignorePath = path.join(repoDir, IGNORE_FILENAME);
+    let current;
+    try {
+        current = await fs.readFile(ignorePath, 'utf-8');
+    }
+    catch {
+        return false; // no ignore file — nothing went stale
+    }
+    const legacyRule = `${LEGACY_GROUPS_DIR}/`;
+    const newRule = `${PLUGINS_DIR}/`;
+    const lines = current.split('\n');
+    if (lines.some((l) => l.trim() === newRule))
+        return false;
+    const idx = lines.findIndex((l) => l.trim() === legacyRule);
+    if (idx === -1)
+        return false;
+    lines[idx] = newRule;
+    await fs.writeFile(ignorePath, lines.join('\n'), 'utf-8');
+    notes.push(`${IGNORE_FILENAME}: ${legacyRule} → ${newRule}`);
+    return true;
+}
+/**
+ * Migrate `repoDir` in place. Safe to call on every top-up.
+ *
+ * Returns `migrated: false` when no FILE changed — which is the steady state,
+ * so the caller commits nothing. Advisory `notes` may still be present (a
+ * manual that refuses to convert reports itself every run) and set nothing.
+ */
+export async function migrateGroupsToPlugins(repoDir) {
+    const legacyDir = path.join(repoDir, LEGACY_GROUPS_DIR);
+    const pluginsDir = path.join(repoDir, PLUGINS_DIR);
+    const notes = [];
+    const hasLegacy = await isDir(legacyDir);
+    const hasPlugins = await isDir(pluginsDir);
+    if (hasLegacy && hasPlugins) {
+        // Both present: somebody is mid-migration by hand, or two branches merged
+        // badly. Merging them here would guess at which copy of a same-named
+        // plugin wins, so we refuse and say so — loudly, because the KB is in a
+        // state a human needs to look at.
+        console.warn(`[plugins-migration] both ${LEGACY_GROUPS_DIR}/ and ${PLUGINS_DIR}/ exist — leaving both alone. ` +
+            `Merge ${LEGACY_GROUPS_DIR}/ into ${PLUGINS_DIR}/ by hand; nothing is being migrated automatically.`);
+        return { migrated: false, renamed: false, ignoreRewritten: false, notes };
+    }
+    let renamed = false;
+    let ignoreRewritten = false;
+    if (hasLegacy) {
+        await fs.rename(legacyDir, pluginsDir);
+        renamed = true;
+        notes.push(`${LEGACY_GROUPS_DIR}/ → ${PLUGINS_DIR}/`);
+        // Rides WITH the rename, not on every run: the rename is what turned the
+        // ignore rule stale, so the run that renames is the run that heals it.
+        ignoreRewritten = await rewriteIgnoreRootRule(repoDir, notes);
+    }
+    else if (!hasPlugins) {
+        return { migrated: false, renamed: false, ignoreRewritten: false, notes };
+    }
+    // Runs whether or not the rename just happened, so a KB already on
+    // `Plugins/` still gets missing manifests and any half-done reorganisation
+    // finished. That is what makes this idempotent rather than once-only.
+    let changed = renamed || ignoreRewritten;
+    for (const entry of await fs.readdir(pluginsDir, { withFileTypes: true })) {
+        if (!entry.isDirectory() || entry.name.startsWith('.'))
+            continue;
+        const folder = await migratePluginFolder(path.join(pluginsDir, entry.name), entry.name);
+        notes.push(...folder.notes);
+        changed = changed || folder.changed;
+    }
+    return { migrated: changed, renamed, ignoreRewritten, notes };
+}
+//# sourceMappingURL=plugins-migration.js.map

package/dist/modules/workspace/plugins-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins-migration.js","sourceRoot":"","sources":["../../../src/modules/workspace/plugins-migration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AA6CpD,6EAA6E;AAC7E,6EAA6E;AAC7E,0EAA0E;AAC1E,oDAAoD;AACpD,KAAK,UAAU,MAAM,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,CAAS;IAC5B,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,EAAU;IAClD,IAAI,MAAM,MAAM,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAExD,8EAA8E;AAC9E,SAAS,YAAY,CAAC,OAA2C;IAI/D,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACnD,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED,mEAAmE;AACnE,KAAK,UAAU,QAAQ,CAAC,CAAS;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAClE,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5E,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAiBD,KAAK,UAAU,mBAAmB,CAChC,SAAiB,EACjB,UAAkB,EAClB,OAA0B,EAC1B,KAAe;IAEf,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACxF,6EAA6E;IAC7E,0EAA0E;IAC1E,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACnG,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,UAAqC,CAAC;IAE1D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CACV,uBAAuB,UAAU,IAAI,oBAAoB,8BAA8B;YACrF,iFAAiF;YACjF,qFAAqF;YACrF,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACtB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACxD,yEAAyE;QACzE,qEAAqE;QACrE,oEAAoE;QACpE,kEAAkE;QAClE,uCAAuC;QACvC,MAAM,eAAe,GAAG;YACtB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC;QACF,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjE,KAAK,CAAC,IAAI,CACR,GAAG,UAAU,KAAK,IAAI,CAAC,IAAI,oBAAoB,oBAAoB,yBAAyB;gBAC1F,sFAAsF;gBACtF,8DAA8D,CACjE,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,4EAA4E;QAC5E,yDAAyD;QACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG;gBAChB,IAAI,EAAE,iBAAiB;gBACvB,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjE,CAAC;YACF,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,KAAK,CAAC,CAAC,IAAI,MAAM,eAAe,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,yEAAyE;YACzE,wEAAwE;YACxE,IAAI,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClH,QAAQ,CAAC,UAAU,GAAG,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAqC,CAAC;YAC3D,IAAI,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,kBAAkB,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;gBAC9H,GAAG,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC;YAC/B,CAAC;YACD,MAAM,EAAE,GAAG,GAAG,CAAC,kBAAkB,CAA4B,CAAC;YAC9D,IAAI,OAAO,EAAE,CAAC,UAAU,KAAK,QAAQ,IAAI,EAAE,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChG,EAAE,CAAC,UAAU,GAAG,EAAE,CAAC;YACrB,CAAC;YACD,MAAM,UAAU,GAAG,EAAE,CAAC,UAAqC,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9D,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;gBAC9B,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,QAAQ;QAAE,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnF,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,wCAAwC,oBAAoB,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,wEAAwE;IACxE,0EAA0E;IAC1E,uEAAuE;IACvE,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,KAAK,IAAI,CAAC,IAAI,oBAAoB,eAAe,QAAQ,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,QAAQ,IAAI,aAAa,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,OAAe;IACrD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5F,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,0BAA0B;QAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,OAAO,WAAW,CAAC,CAAC,IAAI,uCAAuC,CAAC;QAClE,CAAC;QACD,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,sDAAsD;QACtD,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,4EAA4E,CAAC;QACtF,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1D,OAAO,mBAAmB,GAAG,CAAC,QAAQ,0CAA0C,CAAC;QACnF,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjC,OAAO,yEAAyE,CAAC;QACnF,CAAC;QACD,uEAAuE;QACvE,qEAAqE;QACrE,0EAA0E;QAC1E,mEAAmE;QACnE,wDAAwD;QACxD,IAAI,qBAAqB,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,4EAA4E,CAAC;QACtF,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,mBAAmB,CAChC,SAAiB,EACjB,UAAkB;IAElB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAC1C,oBAAoB,CAAC,UAAU,CAAC,EAChC,MAAM,CACP,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,WAAW,oBAAoB,EAAE,CAAC,CAAC;QAC3D,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,SAAS,GAAsB,EAAE,CAAC;IAExC,MAAM,aAAa,GAAG,KAAK,EAAE,GAAW,EAAE,IAAY,EAAE,IAAY,EAAiB,EAAE;QACrF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,WAAW,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9E,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClD,sEAAsE;YACtE,qEAAqE;YACrE,gEAAgE;YAChE,sEAAsE;YACtE,+DAA+D;YAC/D,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,sEAAsE;YACtE,oEAAoE;YACpE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,KAAK,IAAI,oBAAoB,MAAM,mBAAmB,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACrF,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YACpD,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,KAAK,IAAI,MAAM,eAAe,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChF,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;YAAE,SAAS;QACtF,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAE3D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAE7C,0EAA0E;QAC1E,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACjE,IAAI,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,KAAK,KAAK,CAAC,IAAI,OAAO,iBAAiB,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;gBAClF,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjE,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,sDAAsD;IACtD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,WAAW,IAAI,UAAU,IAAI,eAAe,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACvG,oEAAoE;YACpE,oEAAoE;YACpE,uEAAuE;YACvE,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAClD,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,eAAe,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC,MAAM,mBAAmB,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC;IAC1F,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,qBAAqB,CAAC,OAAe,EAAE,KAAe;IACnE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACvD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,sCAAsC;IACtD,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,iBAAiB,GAAG,CAAC;IAC3C,MAAM,OAAO,GAAG,GAAG,WAAW,GAAG,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,CAAC;IAC5D,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IACrB,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,KAAK,UAAU,MAAM,OAAO,EAAE,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAe;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAE3C,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;QAC5B,0EAA0E;QAC1E,qEAAqE;QACrE,wEAAwE;QACxE,kCAAkC;QAClC,OAAO,CAAC,IAAI,CACV,4BAA4B,iBAAiB,SAAS,WAAW,gCAAgC;YAC/F,SAAS,iBAAiB,UAAU,WAAW,qDAAqD,CACvG,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC5E,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACvC,OAAO,GAAG,IAAI,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,GAAG,iBAAiB,OAAO,WAAW,GAAG,CAAC,CAAC;QACtD,yEAAyE;QACzE,uEAAuE;QACvE,eAAe,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;SAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC5E,CAAC;IAED,mEAAmE;IACnE,2EAA2E;IAC3E,sEAAsE;IACtE,IAAI,OAAO,GAAG,OAAO,IAAI,eAAe,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACjE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxF,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,GAAG,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;IACtC,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;AAChE,CAAC"}

package/dist/modules/workspace/startup/kb-git.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The startup phase's own git plumbing — the runner owns every remote and
+ * repository operation of the phase (steps only declare buffered ops), so
+ * this is deliberately small and self-contained rather than borrowed from
+ * the runtime workspace service.
+ */
+/** Fallback committer identity; workflow commits override with `--author`. */
+export declare const BOT_NAME = "Bevel Workflow";
+export declare const BOT_EMAIL = "bevel-workflow@bevel.software";
+/**
+ * Scrub credentials from anything that reaches a log or an error message:
+ * the configured token wherever it appears, and URL userinfo — a remote
+ * spelled `https://user:pass@host` would otherwise leak `pass` verbatim
+ * through every git failure that quotes the URL back.
+ */
+export declare function redactSecret(text: string): string;
+export declare function git(cwd: string, gitUsername: string, args: string[]): Promise<string>;
+export declare function stampIdentity(repo: string, gitUsername: string): Promise<void>;
+/** Branch names present on the remote, from `ls-remote --heads`. */
+export declare function lsRemoteHeads(repoUrl: string, gitUsername: string): Promise<Set<string>>;
+/** A temp dir that is always removed, success or failure. */
+export declare function withTempDir<T>(fn: (dir: string) => Promise<T>): Promise<T>;
+//# sourceMappingURL=kb-git.d.ts.map

package/dist/modules/workspace/startup/kb-git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-git.d.ts","sourceRoot":"","sources":["../../../../src/modules/workspace/startup/kb-git.ts"],"names":[],"mappings":"AAQA;;;;;GAKG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,QAAQ,mBAAmB,CAAC;AACzC,eAAO,MAAM,SAAS,kCAAkC,CAAC;AAEzD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIjD;AAkBD,wBAAsB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoB3F;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGpF;AAED,oEAAoE;AACpE,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAQ9F;AAED,6DAA6D;AAC7D,wBAAsB,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAOhF"}

package/dist/modules/workspace/startup/kb-git.js

@@ -0,0 +1,86 @@
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+/**
+ * The startup phase's own git plumbing — the runner owns every remote and
+ * repository operation of the phase (steps only declare buffered ops), so
+ * this is deliberately small and self-contained rather than borrowed from
+ * the runtime workspace service.
+ */
+/** Fallback committer identity; workflow commits override with `--author`. */
+export const BOT_NAME = 'Bevel Workflow';
+export const BOT_EMAIL = 'bevel-workflow@bevel.software';
+/**
+ * Scrub credentials from anything that reaches a log or an error message:
+ * the configured token wherever it appears, and URL userinfo — a remote
+ * spelled `https://user:pass@host` would otherwise leak `pass` verbatim
+ * through every git failure that quotes the URL back.
+ */
+export function redactSecret(text) {
+    const token = process.env.GITHUB_TOKEN;
+    const scrubbed = token ? text.replaceAll(token, '***') : text;
+    return scrubbed.replace(/:\/\/[^/@\s]+@/g, '://***@');
+}
+/**
+ * Per-invocation `-c` config. Long paths always (Windows checkouts of deep
+ * KB trees); when a token is present, an inline credential helper that reads
+ * it from the environment at call time — the secret never appears in argv.
+ */
+function credArgs(gitUsername) {
+    const args = ['-c', 'core.longpaths=true'];
+    if (process.env.GITHUB_TOKEN) {
+        args.push('-c', `credential.helper=!f() { echo "username=${gitUsername}"; echo "password=$GITHUB_TOKEN"; }; f`);
+    }
+    return args;
+}
+export async function git(cwd, gitUsername, args) {
+    try {
+        const { stdout } = await execFileAsync('git', [...credArgs(gitUsername), ...args], {
+            cwd,
+            // A stalled remote must FAIL the phase, not hang the boot forever —
+            // fail-closed (and KB_SAFE_BOOT's demotion) can only engage on an error
+            // that actually arrives. 10 minutes is generous for the largest clone.
+            timeout: 600_000,
+            // The 1MiB default truncates `ls-remote --heads` on remotes with very
+            // many branches, which would silently drop heads from the phase's view.
+            maxBuffer: 64 * 1024 * 1024,
+            // A credential prompt must fail the phase, not hang the boot forever
+            // waiting on a terminal nobody is watching.
+            env: { ...process.env, GIT_TERMINAL_PROMPT: '0' },
+        });
+        return stdout.toString();
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new Error(redactSecret(`git ${args[0]} failed: ${msg}`));
+    }
+}
+export async function stampIdentity(repo, gitUsername) {
+    await git(repo, gitUsername, ['config', 'user.name', BOT_NAME]);
+    await git(repo, gitUsername, ['config', 'user.email', BOT_EMAIL]);
+}
+/** Branch names present on the remote, from `ls-remote --heads`. */
+export async function lsRemoteHeads(repoUrl, gitUsername) {
+    const out = await git(os.tmpdir(), gitUsername, ['ls-remote', '--heads', repoUrl]);
+    const heads = new Set();
+    for (const line of out.split('\n')) {
+        const m = /\srefs\/heads\/(.+)$/.exec(line.trim());
+        if (m)
+            heads.add(m[1]);
+    }
+    return heads;
+}
+/** A temp dir that is always removed, success or failure. */
+export async function withTempDir(fn) {
+    const dir = await fs.mkdtemp(path.join(os.tmpdir(), 'kb-startup-'));
+    try {
+        return await fn(dir);
+    }
+    finally {
+        await fs.rm(dir, { recursive: true, force: true }).catch(() => { });
+    }
+}
+//# sourceMappingURL=kb-git.js.map

package/dist/modules/workspace/startup/kb-git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-git.js","sourceRoot":"","sources":["../../../../src/modules/workspace/startup/kb-git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C;;;;;GAKG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AACzC,MAAM,CAAC,MAAM,SAAS,GAAG,+BAA+B,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,OAAO,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,WAAmB;IACnC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CACP,IAAI,EACJ,2CAA2C,WAAW,wCAAwC,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,GAAW,EAAE,WAAmB,EAAE,IAAc;IACxE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE;YACjF,GAAG;YACH,oEAAoE;YACpE,wEAAwE;YACxE,uEAAuE;YACvE,OAAO,EAAE,OAAO;YAChB,sEAAsE;YACtE,wEAAwE;YACxE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;YAC3B,qEAAqE;YACrE,4CAA4C;YAC5C,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;SAClD,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,WAAmB;IACnE,MAAM,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChE,MAAM,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,WAAmB;IACtE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAI,EAA+B;IAClE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}

package/dist/modules/workspace/startup/kb-startup-runner.d.ts

@@ -0,0 +1,74 @@
+import type { OnServerStart } from './on-server-start.js';
+/**
+ * The KB startup phase: run every registered {@link OnServerStart} step, in
+ * order, against lazily-cloned branch handles, then land one commit per
+ * dirty branch. Invoked at the deployment's two quiet moments — boot (before
+ * routes mount) and first-time setup completion (the app is gated shut until
+ * then) — and never again while the process serves.
+ *
+ * Fully fail-closed: any failure this phase cannot DECLARE (an unhandled
+ * step throw, an unreachable remote, a clone that will not come down, a
+ * refused write) throws out of `runAll` and stops the boot. The container's
+ * restart policy is the retry — each attempt at boot time on quiet trees —
+ * so an environmental failure converges without a human the moment the
+ * environment returns. The one carve-out: a push rejected because a
+ * concurrent replica won rolls back and continues; the winner already landed
+ * the same idempotent changes, and stopping the loser would make every
+ * multi-replica deploy flappy by design.
+ *
+ * `KB_SAFE_BOOT=1` is the break-glass demotion: on the first failure the
+ * phase resets every uncommitted tree, abandons the rest of the phase, and
+ * lets the server boot UNMAINTAINED so an admin can get in and rescue —
+ * loudly, at boot and in the log, because an env var outlives the emergency.
+ */
+export interface KbStartupRunnerOptions {
+    kbRepoUrl: () => string;
+    gitUsername: () => string;
+    workspacesRoot: string;
+    kbDirName: string;
+    templateDir: string;
+    defaultBranch: () => string;
+    protectedBranches: () => readonly string[];
+    /** Admins written into a freshly-seeded repo's roles.yaml (`ADMIN_EMAIL`). */
+    seedAdminEmails: readonly string[];
+    /** The ordered step chain — core's steps plus whatever the distribution appends. */
+    steps: readonly OnServerStart[];
+    /** The empty-remote seed commit builder (template tree + roles.yaml), injected
+        so the runner stays free of template knowledge. Receives the temp dir to
+        fill; the runner handles init/commit/push around it. Resolves to the
+        repo-relative paths the builder GENERATED itself (rather than copied from
+        the template) — the runner force-adds them after `git add -A`, so a
+        template `.gitignore` rule can never silently drop a required seed file
+        from the commit. */
+    buildSeedTree: (dir: string) => Promise<string[]>;
+}
+export declare class KbStartupRunner {
+    private readonly opts;
+    constructor(opts: KbStartupRunnerOptions);
+    /**
+     * Run the whole phase. Throws to stop the boot; returns normally when the
+     * KB is fully maintained (or safe boot abandoned the phase, loudly).
+     */
+    runAll(): Promise<void>;
+    /**
+     * Remote preparation — runner machinery, not a step, because every remote
+     * failure mode here is the runner's to own: an EMPTY remote gets the full
+     * seed commit pushed to every protected branch; missing protected refs are
+     * created from the best base. Returns the remote's head names (post-seed).
+     */
+    private ensureRemote;
+    private buildContext;
+    /**
+     * The branch's working copy at the runtime layout
+     * (`<workspacesRoot>/<id>/<kbDirName>`), so the workspace service finds it
+     * on disk afterwards. A surviving clone is fast-forwarded to origin when
+     * that is a pure fast-forward; a clone that is AHEAD (a crash before push
+     * left committed work) is left alone — maintenance lands on top and the
+     * push either carries both or rejects and rolls back, and the pending-
+     * commit recovery owns that work, not this phase.
+     */
+    private ensureClone;
+    /** One commit per dirty branch; push; the replica carve-out on rejection. */
+    private finalize;
+}
+//# sourceMappingURL=kb-startup-runner.d.ts.map

package/dist/modules/workspace/startup/kb-startup-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-startup-runner.d.ts","sourceRoot":"","sources":["../../../../src/modules/workspace/startup/kb-startup-runner.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAY,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AAGxF;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,SAAS,MAAM,EAAE,CAAC;IAC3C,8EAA8E;IAC9E,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,oFAAoF;IACpF,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IAChC;;;;;;2BAMuB;IACvB,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACnD;AAED,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,sBAAsB;IAEzD;;;OAGG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IA+G7B;;;;;OAKG;YACW,YAAY;IAyE1B,OAAO,CAAC,YAAY;IAkBpB;;;;;;;;OAQG;YACW,WAAW;IA0BzB,6EAA6E;YAC/D,QAAQ;CAoFvB"}