@claudexor/workspace 1.0.0

package/dist/manager.js

@@ -0,0 +1,398 @@
+import { execFileSync } from "node:child_process";
+import { cpSync, existsSync, mkdtempSync, readdirSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join, sep } from "node:path";
+import { WorkspaceEnvelope as WorkspaceEnvelopeSchema } from "@claudexor/schema";
+import { runCaptureRaw, WorkspaceError } from "@claudexor/core";
+import { ensureDir, newId, nowIso } from "@claudexor/util";
+import { branchDelete, diffStaged, diffTrees, isGitRepo, revParse, snapshotTree, statusPorcelain, stashCreate, worktreeAdd, worktreePrune, worktreeRemove, } from "./git.js";
+import { ensureSelfIgnore } from "./self-ignore.js";
+/**
+ * Manages WorkspaceEnvelopes: an isolated git worktree plus scoped HOME and
+ * per-harness config dirs, and dirty-tree handling. Claudexor owns these
+ * envelopes (it does not rely on a harness's native --worktree).
+ */
+/** `ps` start time for a pid, or null when unavailable. Pid+start-time
+ * equality is the recycling-proof liveness identity for envelope owners
+ * (command names/titles mutate; the kernel start time never does). */
+export function processStartTime(pid) {
+    try {
+        const out = execFileSync("ps", ["-p", String(pid), "-o", "lstart="], { encoding: "utf8" }).trim();
+        return out.length > 0 ? out : null;
+    }
+    catch {
+        return null;
+    }
+}
+export class WorkspaceManager {
+    repoRoot;
+    constructor(repoRoot) {
+        this.repoRoot = repoRoot;
+    }
+    workspacesDir() {
+        return join(this.repoRoot, ".claudexor", "workspaces");
+    }
+    /**
+     * The scoped envelope base for a task/attempt. The sole on-disk root we
+     * delete on dispose — so the ids MUST be path-safe segments and the resolved
+     * base MUST stay inside the workspaces dir (a crafted `../` id could
+     * otherwise turn dispose() into an arbitrary recursive delete).
+     */
+    envelopeBase(taskId, attemptId) {
+        const idPattern = /^[A-Za-z0-9._-]+$/;
+        for (const [label, id] of [["taskId", taskId], ["attemptId", attemptId]]) {
+            if (!idPattern.test(id) || id === "." || id === "..") {
+                throw new WorkspaceError(`${label} '${id}' is not a safe path segment`);
+            }
+        }
+        const base = join(this.workspacesDir(), taskId, attemptId);
+        if (!base.startsWith(this.workspacesDir() + sep)) {
+            throw new WorkspaceError(`envelope base escapes the workspaces dir: ${base}`);
+        }
+        return base;
+    }
+    async create(opts) {
+        // Envelope base holds scoped dirs (HOME + per-harness config) and, for git
+        // mode, the worktree as a subdir — so harness-written HOME state (auth tokens,
+        // caches, plugins, session logs) lives outside the work tree and never lands
+        // in a diff.
+        const base = this.envelopeBase(opts.taskId, opts.attemptId);
+        ensureDir(base);
+        // Self-ignoring runtime dir: a `.gitignore` with `*` INSIDE .claudexor makes
+        // the whole dir invisible to git in PRE-EXISTING repos too (v0.9 widened the
+        // seeded credentials from API keys to subscription OAuth copies; a user's
+        // `git add -A` in their own repo must never capture them). Content-checked
+        // repair lives in the shared ensureSelfIgnore owner.
+        ensureSelfIgnore(join(this.repoRoot, ".claudexor"));
+        const homeDir = join(base, "home");
+        const codexHome = join(homeDir, ".codex");
+        const claudeConfig = join(homeDir, ".claude");
+        const cursorConfig = join(homeDir, ".cursor");
+        const opencodeConfig = join(homeDir, ".config", "opencode");
+        for (const d of [homeDir, codexHome, claudeConfig, cursorConfig, opencodeConfig]) {
+            ensureDir(d);
+        }
+        const harnessConfigDirs = {
+            codex_home: codexHome,
+            claude_config: claudeConfig,
+            cursor_config: cursorConfig,
+            opencode_config: opencodeConfig,
+        };
+        // Liveness marker for crash GC: the sweeper must never dispose an envelope
+        // whose creating process (daemon, CLI, MCP/ACP serve) is still alive —
+        // startup GC's "nothing can own an envelope" premise only holds for
+        // daemon-tracked runs. Pid + ps START TIME form a recycling-proof identity
+        // (command names/titles mutate — vitest, daemons and tools retitle
+        // themselves; the kernel start time never does).
+        writeFileSync(join(base, "owner.json"), JSON.stringify({ pid: process.pid, started: processStartTime(process.pid), created_at: nowIso() }) + "\n");
+        // In-place mode: mutate the live repoRoot directly (no isolated worktree).
+        // Used for thread turns (chat-first: the next turn sees this one's work) and
+        // for stateful external environments where runtime state is the deliverable.
+        // For a git project we record a per-turn snapshot sha so diff() captures only
+        // THIS turn's net change; a non-git folder falls back to a cpSync baseline.
+        if (opts.inPlace) {
+            const gitRepo = await isGitRepo(this.repoRoot);
+            const baseSha = gitRepo ? await snapshotTree(this.repoRoot) : null;
+            if (!gitRepo)
+                this.snapshotBaseline(base);
+            return WorkspaceEnvelopeSchema.parse({
+                id: newId("env"),
+                task_id: opts.taskId,
+                attempt_id: opts.attemptId,
+                repo_root: this.repoRoot,
+                base_ref: opts.baseRef ?? "HEAD",
+                base_sha: baseSha,
+                worktree_path: this.repoRoot,
+                branch_name: "inplace",
+                home_dir: homeDir,
+                harness_config_dirs: harnessConfigDirs,
+                policy_profile: opts.accessProfile ?? "workspace_write",
+                // Record the EFFECTIVE policy, not the ignored request: in-place runs
+                // always fold dirty state into the per-turn base snapshot above.
+                dirty_policy: "snapshot",
+                created_at: nowIso(),
+            });
+        }
+        if (!(await isGitRepo(this.repoRoot))) {
+            throw new WorkspaceError(`not a git repository: ${this.repoRoot}`);
+        }
+        const baseRef = opts.baseRef ?? "HEAD";
+        const dirtyPolicy = opts.dirtyPolicy ?? "refuse";
+        let baseSha = await revParse(this.repoRoot, baseRef);
+        const porcelain = await statusPorcelain(this.repoRoot);
+        const dirty = porcelain.trim().length > 0;
+        if (dirty) {
+            if (dirtyPolicy === "refuse") {
+                throw new WorkspaceError("working tree is dirty; commit/stash or set dirty_policy: snapshot");
+            }
+            // snapshot: a stash-create commit becomes the base SHA without touching
+            // the live tree. (The include/stash aliases and the untested `copy`
+            // variant were retired in the v0.15 triage.)
+            const snap = await stashCreate(this.repoRoot);
+            if (snap)
+                baseSha = snap;
+        }
+        const path = join(base, "tree");
+        const branch = `claudexor/${opts.taskId}/${opts.attemptId}`;
+        await worktreeAdd(this.repoRoot, path, branch, baseSha);
+        return WorkspaceEnvelopeSchema.parse({
+            id: newId("env"),
+            task_id: opts.taskId,
+            attempt_id: opts.attemptId,
+            repo_root: this.repoRoot,
+            base_ref: baseRef,
+            base_sha: baseSha,
+            worktree_path: path,
+            branch_name: branch,
+            home_dir: homeDir,
+            harness_config_dirs: harnessConfigDirs,
+            policy_profile: opts.accessProfile ?? "workspace_write",
+            dirty_policy: dirtyPolicy,
+            created_at: nowIso(),
+        });
+    }
+    /**
+     * Best-effort baseline copy of the live tree for in-place diff(). Copies each
+     * top-level entry individually (skipping heavy/ephemeral dirs, notably `.claudexor`
+     * which holds this base) — this both prunes noise and avoids Node's "cannot copy
+     * a directory into its own subdirectory" guard, since the baseline lives under
+     * `.claudexor`. On any failure the baseline is simply absent and diff() returns
+     * empty; reviewers still read the live tree directly.
+     */
+    snapshotBaseline(base) {
+        const baseline = join(base, "baseline");
+        const skip = new Set([".git", ".claudexor", "node_modules", "__pycache__", ".venv", "venv"]);
+        try {
+            ensureDir(baseline);
+            for (const entry of readdirSync(this.repoRoot)) {
+                if (skip.has(entry))
+                    continue;
+                cpSync(join(this.repoRoot, entry), join(baseline, entry), { recursive: true });
+            }
+        }
+        catch {
+            /* baseline unavailable -> diff() falls back to empty */
+        }
+    }
+    /** Env vars that scope a child harness to this envelope (HOME + per-harness config dirs). */
+    envFor(env) {
+        return {
+            HOME: env.home_dir,
+            CODEX_HOME: env.harness_config_dirs["codex_home"] ?? join(env.home_dir, ".codex"),
+            CLAUDE_CONFIG_DIR: env.harness_config_dirs["claude_config"] ?? join(env.home_dir, ".claude"),
+            // Pin XDG_CONFIG_HOME to the scoped home so an XDG-aware harness
+            // (opencode/cursor) cannot follow an INHERITED XDG_CONFIG_HOME back into the
+            // operator's real ~/.config under `mirror_native` (§6 containment).
+            XDG_CONFIG_HOME: join(env.home_dir, ".config"),
+        };
+    }
+    /**
+     * Provision a SCOPED, worktree-less harness HOME for READ-ONLY routes (plan,
+     * ask, audit, orchestrate, reviewers). Read-only modes build no git worktree,
+     * but a harness still writes native state — claude-code plan files, codex
+     * session rollouts, transcripts — into `$HOME/.claude`, `$CODEX_HOME`, etc.
+     * Without this, those land in the operator's REAL home (a live-caught leak: a
+     * read-only `plan` wrote into `~/.claude/plans`). Same env shape as `envFor`,
+     * so the adapters seed auth (subscription creds / api key) into these scoped
+     * dirs exactly as they do for a write envelope (CLAUDEXOR_BIBLE §6). Caller
+     * disposes when the run ends.
+     */
+    readOnlyHomeEnv() {
+        // A throwaway temp base — never under the project / synthetic repo root, so a
+        // no-project Ask leaves nothing in its cwd (§7) and nothing in any worktree (§6).
+        const base = mkdtempSync(join(tmpdir(), "claudexor-ro-"));
+        const homeDir = join(base, "home");
+        const codexHome = join(homeDir, ".codex");
+        const claudeConfig = join(homeDir, ".claude");
+        const cursorConfig = join(homeDir, ".cursor");
+        const opencodeConfig = join(homeDir, ".config", "opencode");
+        for (const d of [homeDir, codexHome, claudeConfig, cursorConfig, opencodeConfig])
+            ensureDir(d);
+        return {
+            env: { HOME: homeDir, CODEX_HOME: codexHome, CLAUDE_CONFIG_DIR: claudeConfig, XDG_CONFIG_HOME: join(homeDir, ".config") },
+            dispose: () => {
+                try {
+                    rmSync(base, { recursive: true, force: true });
+                }
+                catch {
+                    /* best-effort: a leftover scoped home is harmless and gc-able */
+                }
+            },
+        };
+    }
+    /**
+     * Header-only rewrite of a plain GNU `diff -ruN <baseline> <live>` document:
+     * absolute baseline/live prefixes become git-style `a/<rel>` / `b/<rel>` so
+     * repo-relative protected-path and risk globs see the SAME shape they see
+     * for git diffs. STATEFUL, mirroring the shared plain-diff parser's
+     * structural rules: only the GNU `diff …` command echo, the `--- `/`+++ `
+     * pair of a real file-header triple (`--- ` + `+++ ` + `@@` on consecutive
+     * lines), and structural `Binary files … differ` lines are rewritten.
+     * Hunk CONTENT is never touched — a removed/added content line that merely
+     * starts with `-- `/`++ ` (rendering as `--- `/`+++ ` in the diff) keeps
+     * its bytes, per the diff-fidelity contract (INV-041).
+     */
+    static relativizePlainDiffHeadersFor(text, baselineRoot, liveRoot) {
+        const base = baselineRoot.endsWith("/") ? baselineRoot : `${baselineRoot}/`;
+        const live = liveRoot.endsWith("/") ? liveRoot : `${liveRoot}/`;
+        const swap = (s) => s.split(base).join("a/").split(live).join("b/");
+        const lines = text.split("\n");
+        // Same structural rule as the shared plain-diff parser: INSIDE a hunk the
+        // loose triple can be forged by content (a deleted `-- …` line + an added
+        // `++ …` line + the next `@@`), so a mid-hunk boundary must also carry a
+        // header witness — the GNU tab-separated timestamp (or /dev/null) on both
+        // path lines, which +/- content lines never have.
+        const headerWitness = (l) => l !== undefined && (l.includes("\t") || l.slice(4).trim() === "/dev/null");
+        const isFileHeaderTriple = (idx, midHunk) => {
+            const triple = (lines[idx]?.startsWith("--- ") ?? false) &&
+                (lines[idx + 1]?.startsWith("+++ ") ?? false) &&
+                (lines[idx + 2]?.startsWith("@@") ?? false);
+            if (!triple)
+                return false;
+            return midHunk ? headerWitness(lines[idx]) && headerWitness(lines[idx + 1]) : true;
+        };
+        let inHunk = false;
+        for (let i = 0; i < lines.length; i += 1) {
+            const line = lines[i];
+            if (line.startsWith("diff ")) {
+                // GNU command echo between files: structural, resets hunk state.
+                inHunk = false;
+                lines[i] = swap(line);
+                continue;
+            }
+            if (isFileHeaderTriple(i, inHunk)) {
+                // Real file boundary — same rule as the shared parser (a full triple
+                // opens a file even mid-document without a `diff` echo).
+                lines[i] = swap(line);
+                lines[i + 1] = swap(lines[i + 1]);
+                inHunk = false;
+                i += 1; // the `+++ ` line is handled; `@@` flips state next.
+                continue;
+            }
+            if (line.startsWith("@@")) {
+                inHunk = true;
+                continue;
+            }
+            if (line.startsWith("Binary files ") && line.endsWith(" differ") && !inHunk) {
+                lines[i] = swap(line);
+            }
+        }
+        return lines.join("\n");
+    }
+    async diff(env) {
+        // In-place: there is no isolated worktree. For a git project, diff the
+        // per-turn base snapshot against a fresh end snapshot — net change of THIS
+        // turn only, untracked included, prior dirty state folded into base.
+        if (env.worktree_path === env.repo_root) {
+            if (env.base_sha) {
+                const end = await snapshotTree(env.repo_root);
+                return diffTrees(env.repo_root, env.base_sha, end);
+            }
+            // Non-git fallback: diff the best-effort cpSync baseline against the live
+            // tree; if no baseline was captured, return empty (reviewers read the tree).
+            const baseline = join(this.envelopeBase(env.task_id, env.attempt_id), "baseline");
+            if (!existsSync(baseline))
+                return "";
+            try {
+                const r = await runCaptureRaw("diff", ["-ruN", "-x", ".git", "-x", ".claudexor", "-x", ".claudexor-review-evidence", "-x", "node_modules", "-x", "__pycache__", "-x", ".venv", "-x", "venv", baseline, env.repo_root], { timeoutMs: 120_000 });
+                // Relativize the header paths to the git-style a/<rel> b/<rel> shape.
+                // Downstream consumers (diffstat, protected-path/risk gating) match
+                // REPO-RELATIVE globs like `test/**`; absolute `/…/repo/test/x`
+                // headers would silently bypass every one of them.
+                const relativized = WorkspaceManager.relativizePlainDiffHeadersFor(r.stdout, baseline, env.repo_root);
+                const CAP = 200_000;
+                return relativized.length > CAP ? relativized.slice(0, CAP) + "\n... [diff truncated]\n" : relativized;
+            }
+            catch {
+                // best-effort: if `diff` is unavailable the loop still works (reviewers read the live tree)
+                return "";
+            }
+        }
+        return diffStaged(env.worktree_path, env.base_sha ?? undefined);
+    }
+    async dispose(env) {
+        // In-place envelopes point worktree_path at the live repo root; NEVER remove a
+        // worktree or the tree itself in that case.
+        const inPlace = env.worktree_path === env.repo_root;
+        if (!inPlace) {
+            try {
+                await worktreeRemove(this.repoRoot, env.worktree_path);
+            }
+            catch {
+                /* best-effort */
+            }
+            // Delete the per-attempt branch so re-attempts with the same ids don't
+            // collide on `worktree add -b`, and the user's repo doesn't accumulate
+            // permanent claudexor/<task>/<attempt> branches (the v0.8 leak).
+            if (env.branch_name && env.branch_name !== "inplace") {
+                try {
+                    await branchDelete(this.repoRoot, env.branch_name);
+                }
+                catch {
+                    /* best-effort */
+                }
+            }
+        }
+        // Remove only the scoped envelope base (worktree + scoped home/env/logs/artifacts/
+        // baseline, including any seeded credentials), derived from task/attempt ids.
+        // For git mode this equals dirname(worktree_path); for in-place it is a sibling
+        // under `.claudexor/workspaces`, so deriving from ids is exactly what prevents
+        // dispose() from ever deleting the live tree.
+        try {
+            rmSync(this.envelopeBase(env.task_id, env.attempt_id), { recursive: true, force: true });
+        }
+        catch {
+            /* best-effort */
+        }
+        // Prune the now-empty per-task parent dir (envelopeBase = <task>/<attempt>),
+        // guarded to stay strictly inside the workspaces dir.
+        try {
+            const taskDir = join(this.workspacesDir(), env.task_id);
+            if (taskDir.startsWith(this.workspacesDir() + sep) &&
+                existsSync(taskDir) &&
+                readdirSync(taskDir).length === 0) {
+                rmSync(taskDir, { recursive: true, force: true });
+            }
+        }
+        catch {
+            /* best-effort */
+        }
+        try {
+            await worktreePrune(this.repoRoot);
+        }
+        catch {
+            /* best-effort (repo may not be git in in-place mode) */
+        }
+    }
+    /**
+     * Dispose an ORPHANED envelope by ids alone (crash GC): a daemon
+     * crash leaves envelopes with no live job. Reconstructs the disposal
+     * surface (worktree path, branch name, envelope base) from the same id
+     * derivation create() used, so the safety invariants (id-validated base,
+     * never the live tree) hold without a persisted envelope record.
+     */
+    async disposeOrphan(taskId, attemptId) {
+        const base = this.envelopeBase(taskId, attemptId);
+        await this.dispose(WorkspaceEnvelopeSchema.parse({
+            id: newId("env"),
+            task_id: taskId,
+            attempt_id: attemptId,
+            repo_root: this.repoRoot,
+            base_ref: "HEAD",
+            base_sha: "0000000000000000000000000000000000000000",
+            worktree_path: join(base, "tree"),
+            branch_name: `claudexor/${taskId}/${attemptId}`,
+            home_dir: join(base, "home"),
+            harness_config_dirs: {
+                codex_home: join(base, "home", ".codex"),
+                claude_config: join(base, "home", ".claude"),
+                cursor_config: join(base, "home", ".cursor"),
+                opencode_config: join(base, "home", ".config", "opencode"),
+            },
+            policy_profile: "workspace_write",
+            dirty_policy: "snapshot",
+            created_at: nowIso(),
+        }));
+    }
+}
+//# sourceMappingURL=manager.js.map

package/dist/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../src/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9F,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,iBAAiB,IAAI,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EACL,YAAY,EACZ,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,WAAW,EACX,WAAW,EACX,aAAa,EACb,cAAc,GACf,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAkBpD;;;;GAIG;AACH;;sEAEsE;AACtE,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClG,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAEzC,aAAa;QACnB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACK,YAAY,CAAC,MAAc,EAAE,SAAiB;QACpD,MAAM,SAAS,GAAG,mBAAmB,CAAC;QACtC,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,CAAU,EAAE,CAAC;YAClF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBACrD,MAAM,IAAI,cAAc,CAAC,GAAG,KAAK,KAAK,EAAE,8BAA8B,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,cAAc,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAA2B;QACtC,2EAA2E;QAC3E,+EAA+E;QAC/E,6EAA6E;QAC7E,aAAa;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,6EAA6E;QAC7E,6EAA6E;QAC7E,0EAA0E;QAC1E,2EAA2E;QAC3E,qDAAqD;QACrD,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE,CAAC;YACjF,SAAS,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;QACD,MAAM,iBAAiB,GAAG;YACxB,UAAU,EAAE,SAAS;YACrB,aAAa,EAAE,YAAY;YAC3B,aAAa,EAAE,YAAY;YAC3B,eAAe,EAAE,cAAc;SAChC,CAAC;QACF,2EAA2E;QAC3E,uEAAuE;QACvE,oEAAoE;QACpE,2EAA2E;QAC3E,mEAAmE;QACnE,iDAAiD;QACjD,aAAa,CACX,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EACxB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,CAC1G,CAAC;QAEF,2EAA2E;QAC3E,6EAA6E;QAC7E,6EAA6E;QAC7E,8EAA8E;QAC9E,4EAA4E;QAC5E,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACnE,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC1C,OAAO,uBAAuB,CAAC,KAAK,CAAC;gBACnC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;gBAChB,OAAO,EAAE,IAAI,CAAC,MAAM;gBACpB,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,QAAQ,EAAE,IAAI,CAAC,OAAO,IAAI,MAAM;gBAChC,QAAQ,EAAE,OAAO;gBACjB,aAAa,EAAE,IAAI,CAAC,QAAQ;gBAC5B,WAAW,EAAE,SAAS;gBACtB,QAAQ,EAAE,OAAO;gBACjB,mBAAmB,EAAE,iBAAiB;gBACtC,cAAc,EAAE,IAAI,CAAC,aAAa,IAAI,iBAAiB;gBACvD,sEAAsE;gBACtE,iEAAiE;gBACjE,YAAY,EAAE,UAAU;gBACxB,UAAU,EAAE,MAAM,EAAE;aACrB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,cAAc,CAAC,yBAAyB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC;QACvC,MAAM,WAAW,GAAgB,IAAI,CAAC,WAAW,IAAI,QAAQ,CAAC;QAC9D,IAAI,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAErD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,cAAc,CACtB,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,wEAAwE;YACxE,oEAAoE;YACpE,6CAA6C;YAC7C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;QAC3B,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,aAAa,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAExD,OAAO,uBAAuB,CAAC,KAAK,CAAC;YACnC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;YAChB,OAAO,EAAE,IAAI,CAAC,MAAM;YACpB,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,OAAO;YACjB,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,MAAM;YACnB,QAAQ,EAAE,OAAO;YACjB,mBAAmB,EAAE,iBAAiB;YACtC,cAAc,EAAE,IAAI,CAAC,aAAa,IAAI,iBAAiB;YACvD,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,MAAM,EAAE;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACK,gBAAgB,CAAC,IAAY;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7F,IAAI,CAAC;YACH,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAED,6FAA6F;IAC7F,MAAM,CAAC,GAAsB;QAC3B,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,UAAU,EAAE,GAAG,CAAC,mBAAmB,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC;YACjF,iBAAiB,EAAE,GAAG,CAAC,mBAAmB,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC;YAC5F,iEAAiE;YACjE,6EAA6E;YAC7E,oEAAoE;YACpE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,eAAe;QACb,8EAA8E;QAC9E,kFAAkF;QAClF,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,CAAC;YAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAC/F,OAAO;YACL,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE;YACzH,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC;oBACH,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjD,CAAC;gBAAC,MAAM,CAAC;oBACP,iEAAiE;gBACnE,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACK,MAAM,CAAC,6BAA6B,CAAC,IAAY,EAAE,YAAoB,EAAE,QAAgB;QAC/F,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,GAAG,CAAC;QAC5E,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,CAAC;QAChE,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,kDAAkD;QAClD,MAAM,aAAa,GAAG,CAAC,CAAqB,EAAW,EAAE,CACvD,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,WAAW,CAAC,CAAC;QAC7E,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAE,OAAgB,EAAW,EAAE;YACpE,MAAM,MAAM,GACV,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC;gBACzC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC;gBAC7C,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1B,OAAO,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,CAAC,CAAC;QACF,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;YAChC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,iEAAiE;gBACjE,MAAM,GAAG,KAAK,CAAC;gBACf,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,IAAI,kBAAkB,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;gBAClC,qEAAqE;gBACrE,yDAAyD;gBACzD,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC;gBAC5C,MAAM,GAAG,KAAK,CAAC;gBACf,CAAC,IAAI,CAAC,CAAC,CAAC,qDAAqD;gBAC7D,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,GAAG,IAAI,CAAC;gBACd,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC5E,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAsB;QAC/B,uEAAuE;QACvE,2EAA2E;QAC3E,qEAAqE;QACrE,IAAI,GAAG,CAAC,aAAa,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACjB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC9C,OAAO,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YACD,0EAA0E;YAC1E,6EAA6E;YAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;YAClF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAC3B,MAAM,EACN,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,EAC/K,EAAE,SAAS,EAAE,OAAO,EAAE,CACvB,CAAC;gBACF,sEAAsE;gBACtE,oEAAoE;gBACpE,gEAAgE;gBAChE,mDAAmD;gBACnD,MAAM,WAAW,GAAG,gBAAgB,CAAC,6BAA6B,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;gBACtG,MAAM,GAAG,GAAG,OAAO,CAAC;gBACpB,OAAO,WAAW,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,0BAA0B,CAAC,CAAC,CAAC,WAAW,CAAC;YACzG,CAAC;YAAC,MAAM,CAAC;gBACP,4FAA4F;gBAC5F,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAsB;QAClC,+EAA+E;QAC/E,4CAA4C;QAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,KAAK,GAAG,CAAC,SAAS,CAAC;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;YACD,uEAAuE;YACvE,uEAAuE;YACvE,iEAAiE;YACjE,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACrD,IAAI,CAAC;oBACH,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;QACD,mFAAmF;QACnF,8EAA8E;QAC9E,gFAAgF;QAChF,+EAA+E;QAC/E,8CAA8C;QAC9C,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,6EAA6E;QAC7E,sDAAsD;QACtD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACxD,IACE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,GAAG,CAAC;gBAC9C,UAAU,CAAC,OAAO,CAAC;gBACnB,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EACjC,CAAC;gBACD,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,SAAiB;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,OAAO,CAChB,uBAAuB,CAAC,KAAK,CAAC;YAC5B,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;YAChB,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,0CAA0C;YACpD,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;YACjC,WAAW,EAAE,aAAa,MAAM,IAAI,SAAS,EAAE;YAC/C,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;YAC5B,mBAAmB,EAAE;gBACnB,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC;gBACxC,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC;gBAC5C,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC;gBAC5C,eAAe,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;aAC3D;YACD,cAAc,EAAE,iBAAiB;YACjC,YAAY,EAAE,UAAU;YACxB,UAAU,EAAE,MAAM,EAAE;SACrB,CAAC,CACH,CAAC;IACJ,CAAC;CAEF"}

package/dist/self-ignore.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Ensure `.claudexor/.gitignore` CONTAINS `*` so the runtime dir stays
+ * invisible to the project's git (the git-native trick that avoids mutating
+ * the user's own .gitignore). Content-checked, not just existence-checked:
+ * a user-edited or emptied file would silently re-expose envelopes, thread
+ * worktrees, and seeded credentials to `git add -A`. Shared by the envelope
+ * manager and the thread-worktree creator (single owner of the invariant).
+ */
+export declare function ensureSelfIgnore(claudexorDir: string): void;
+//# sourceMappingURL=self-ignore.d.ts.map

package/dist/self-ignore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-ignore.d.ts","sourceRoot":"","sources":["../src/self-ignore.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAS3D"}

package/dist/self-ignore.js

@@ -0,0 +1,24 @@
+import { readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { ensureDir } from "@claudexor/util";
+/**
+ * Ensure `.claudexor/.gitignore` CONTAINS `*` so the runtime dir stays
+ * invisible to the project's git (the git-native trick that avoids mutating
+ * the user's own .gitignore). Content-checked, not just existence-checked:
+ * a user-edited or emptied file would silently re-expose envelopes, thread
+ * worktrees, and seeded credentials to `git add -A`. Shared by the envelope
+ * manager and the thread-worktree creator (single owner of the invariant).
+ */
+export function ensureSelfIgnore(claudexorDir) {
+    const path = join(claudexorDir, ".gitignore");
+    try {
+        if (readFileSync(path, "utf8").trim() === "*")
+            return;
+    }
+    catch {
+        /* missing/unreadable -> (re)write below */
+    }
+    ensureDir(claudexorDir);
+    writeFileSync(path, "*\n");
+}
+//# sourceMappingURL=self-ignore.js.map

package/dist/self-ignore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-ignore.js","sourceRoot":"","sources":["../src/self-ignore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IACD,SAAS,CAAC,YAAY,CAAC,CAAC;IACxB,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC"}

package/dist/thread-tree.d.ts

@@ -0,0 +1,20 @@
+export interface ThreadWorktreeResult {
+    /** Absolute path to the thread's persistent worktree (the execution root). */
+    path: string;
+    /** Snapshot sha the worktree was branched from (the apply base). */
+    baseSha: string;
+    /** True when the worktree was just created (vs reused). */
+    created: boolean;
+}
+/**
+ * Lazily create (or reuse) the persistent git worktree backing an ISOLATED
+ * thread. Turns run in-place WITHIN this worktree so each sees the previous
+ * one's work; `apply` later diffs the worktree against `baseSha` and delivers
+ * the cumulative patch to the project. Race candidates still branch off the
+ * worktree's current state into throwaway envelopes.
+ *
+ * The worktree lives under the project's self-ignored `.claudexor/`, so the
+ * project's own git never sees it and snapshots exclude it.
+ */
+export declare function ensureThreadWorktree(projectRoot: string, threadId: string): Promise<ThreadWorktreeResult>;
+//# sourceMappingURL=thread-tree.d.ts.map

package/dist/thread-tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-tree.d.ts","sourceRoot":"","sources":["../src/thread-tree.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAiD/G"}

package/dist/thread-tree.js

@@ -0,0 +1,69 @@
+import { existsSync, rmSync } from "node:fs";
+import { join } from "node:path";
+import { WorkspaceError } from "@claudexor/core";
+import { ensureDir } from "@claudexor/util";
+import { branchDelete, isGitRepo, revParse, snapshotTree, worktreeAdd, worktreeAddExisting } from "./git.js";
+import { ensureSelfIgnore } from "./self-ignore.js";
+/**
+ * Lazily create (or reuse) the persistent git worktree backing an ISOLATED
+ * thread. Turns run in-place WITHIN this worktree so each sees the previous
+ * one's work; `apply` later diffs the worktree against `baseSha` and delivers
+ * the cumulative patch to the project. Race candidates still branch off the
+ * worktree's current state into throwaway envelopes.
+ *
+ * The worktree lives under the project's self-ignored `.claudexor/`, so the
+ * project's own git never sees it and snapshots exclude it.
+ */
+export async function ensureThreadWorktree(projectRoot, threadId) {
+    if (!/^[A-Za-z0-9._-]+$/.test(threadId) || threadId === "." || threadId === "..") {
+        throw new WorkspaceError(`threadId '${threadId}' is not a safe path segment`);
+    }
+    if (!(await isGitRepo(projectRoot))) {
+        throw new WorkspaceError(`isolated threads require a git project: ${projectRoot}`);
+    }
+    const path = join(projectRoot, ".claudexor", "threads", threadId, "tree");
+    if (existsSync(join(path, ".git"))) {
+        // Turns never commit on the branch (in-place envelopes leave changes in the
+        // working tree), so HEAD still points at the original base snapshot.
+        return { path, baseSha: await revParse(path, "HEAD"), created: false };
+    }
+    const baseSha = await snapshotTree(projectRoot);
+    const threadDir = join(projectRoot, ".claudexor", "threads", threadId);
+    ensureDir(threadDir);
+    // Self-ignore the project's `.claudexor/` so the user's own `git add -A` never
+    // captures the thread worktree (shared content-checked owner with
+    // WorkspaceManager: a user-edited/emptied file is repaired, not trusted).
+    ensureSelfIgnore(join(projectRoot, ".claudexor"));
+    const branch = `claudexor/thread-${threadId}`;
+    // Thread branches are PERSISTENT live-thread state. When the branch
+    // survives but the worktree directory was lost, RECOVER by recreating the
+    // worktree FROM the branch (its tip is the thread's base — turns never
+    // commit on it) instead of failing `worktree add -b` on the collision.
+    const branchExisted = await revParse(projectRoot, branch)
+        .then(() => true)
+        .catch(() => false);
+    if (branchExisted) {
+        try {
+            await worktreeAddExisting(projectRoot, path, branch);
+        }
+        catch (err) {
+            rmSync(threadDir, { recursive: true, force: true });
+            throw err; // never delete the surviving branch
+        }
+        return { path, baseSha: await revParse(path, "HEAD"), created: true };
+    }
+    try {
+        await worktreeAdd(projectRoot, path, branch, baseSha);
+    }
+    catch (err) {
+        // A failed worktree add must not leave a partial thread dir (whose `.git`
+        // check above would then be false forever) or a stale OWN branch behind
+        // (this call created the branch attempt; a surviving branch is handled
+        // by the recovery path above and never deleted here).
+        rmSync(threadDir, { recursive: true, force: true });
+        await branchDelete(projectRoot, branch).catch(() => { });
+        throw err;
+    }
+    return { path, baseSha, created: true };
+}
+//# sourceMappingURL=thread-tree.js.map

package/dist/thread-tree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-tree.js","sourceRoot":"","sources":["../src/thread-tree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC7G,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAWpD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB,EAAE,QAAgB;IAC9E,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACjF,MAAM,IAAI,cAAc,CAAC,aAAa,QAAQ,8BAA8B,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,cAAc,CAAC,2CAA2C,WAAW,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1E,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACnC,4EAA4E;QAC5E,qEAAqE;QACrE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvE,SAAS,CAAC,SAAS,CAAC,CAAC;IACrB,+EAA+E;IAC/E,kEAAkE;IAClE,0EAA0E;IAC1E,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,oBAAoB,QAAQ,EAAE,CAAC;IAC9C,oEAAoE;IACpE,0EAA0E;IAC1E,uEAAuE;IACvE,uEAAuE;IACvE,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;SACtD,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;SAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,mBAAmB,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,GAAG,CAAC,CAAC,oCAAoC;QACjD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0EAA0E;QAC1E,wEAAwE;QACxE,uEAAuE;QACvE,sDAAsD;QACtD,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@claudexor/workspace",
+  "version": "1.0.0",
+  "license": "MIT",
+  "description": "WorkspaceEnvelope manager: git worktree + scoped HOME/harness-config isolation + dirty policy.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@claudexor/core": "1.0.0",
+    "@claudexor/schema": "1.0.0",
+    "@claudexor/util": "1.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/razzant/claudexor.git",
+    "directory": "packages/workspace"
+  },
+  "homepage": "https://github.com/razzant/claudexor#readme",
+  "bugs": {
+    "url": "https://github.com/razzant/claudexor/issues"
+  },
+  "engines": {
+    "node": ">=20.19"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit"
+  }
+}