@cleocode/core 2026.9.22 → 2026.9.23

package/dist/store/worktree-build-guard.js

@@ -0,0 +1,486 @@
+/**
+ * Worktree-build schema-write guard (T12687).
+ *
+ * A CLI built inside a linked git worktree carries that branch's UNRELEASED
+ * migrations and schema code. Path resolution maps a worktree to its parent
+ * project's store (T12460), so running that build — `cleo check arch`, an
+ * unsandboxed CLI test, a reviewer trying a PR build — changed the schema of
+ * the LIVE main-checkout store. Incident 2026-09-29: cleo-nexus's slice-2
+ * build wrote `__drizzle_migrations` row 114 into the live cleocode store; the
+ * released CLI then deleted the unknown row as an orphan and the next slice-2
+ * open re-ran `ADD COLUMN` and failed.
+ *
+ * ## One decision per store, enforced on the handle
+ *
+ * {@link schemaWriteRefusal} decides, once per store path, whether this build
+ * may change that store's schema. When it may not,
+ * {@link installSchemaWriteGuard} installs a SQLite authorizer on the handle
+ * that DENIES every schema change — `ALTER`, `DROP`, and any `CREATE` of an
+ * object that does not already exist (a `CREATE … IF NOT EXISTS` of an
+ * existing object is a no-op and stays allowed). That covers every DDL site
+ * at once — drizzle migrations, `ensureColumns`, raw `ALTER`s, table
+ * rebuilds, twin collapse, exodus — including sites added later. Migration
+ * sites additionally fail fast with {@link WorktreeBuildSchemaError} when the
+ * build has pending migrations: the store would not match what this build
+ * reads, so it refuses rather than failing later with `no such column`.
+ *
+ * ## Who is a dev build
+ *
+ * The build stamp `dist/build-provenance.json` (written at build time) names
+ * the linked worktree the build was made in, or null for a main checkout / CI
+ * clone — how released packages are built. The stamp travels with the build,
+ * so an `npm pack`ed worktree build installed globally, or a `dist` copied
+ * outside any checkout, is still recognised. Without a stamp (running from
+ * source), the running file's own location decides, and a path under
+ * `node_modules` counts as installed.
+ *
+ * Allowed without an opt-in: stores inside the build's own worktree, and the
+ * test harness (`VITEST`, or a store below a {@link TEST_SANDBOX_MARKER} for CLI
+ * children a test spawns). A temp directory alone is NOT an exemption — a
+ * project cloned under `/tmp` is a real store. Everything else needs
+ * `CLEO_ALLOW_WORKTREE_BUILD_MIGRATIONS=1`.
+ *
+ * @task T12687
+ */
+import { existsSync, readFileSync, realpathSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { ExitCode } from '@cleocode/contracts';
+import { CleoError } from '../errors.js';
+import { isGitLinkedCheckout } from '../project-scope.js';
+/** Opt-in that lets a worktree build change the schema of a store outside its worktree. */
+export const ALLOW_WORKTREE_BUILD_MIGRATIONS_ENV = 'CLEO_ALLOW_WORKTREE_BUILD_MIGRATIONS';
+/**
+ * File the test harness (`vitest.setup.ts`) writes at the root of each fork's
+ * sandbox. A store below it is a fixture — including one opened by a CLI child
+ * process the test spawned: such a child carries `VITEST` only when the test
+ * passes its own environment through, and many build an explicit `env`.
+ * A marker inside a git checkout is ignored: the sandbox is never in one, so a
+ * marker there was committed or planted in a real project.
+ */
+export const TEST_SANDBOX_MARKER = '.cleo-test-sandbox';
+/** Error code of {@link WorktreeBuildSchemaError}. */
+export const E_WORKTREE_BUILD_SCHEMA = 'E_WORKTREE_BUILD_SCHEMA';
+let overrides = null;
+const decisions = new Map();
+/**
+ * Replace the guard's view of the running build (tests only: a test process
+ * runs from source inside the harness, so it cannot be a dev build itself).
+ *
+ * @param next - Partial options, or null to restore the defaults.
+ * @internal
+ */
+export function setWorktreeBuildGuardForTests(next) {
+    overrides = next;
+    decisions.clear();
+}
+function realOrResolved(path) {
+    try {
+        return realpathSync(path);
+    }
+    catch {
+        return resolve(path);
+    }
+}
+function isWithin(root, path) {
+    const local = relative(root, path);
+    return local === '' || (!isAbsolute(local) && local !== '..' && !local.startsWith(`..${sep}`));
+}
+/** Whether `dir` or an ancestor is a git checkout (has `.git`). */
+function insideGitCheckout(dir) {
+    let current = dir;
+    for (;;) {
+        if (existsSync(join(current, '.git')))
+            return true;
+        const parent = dirname(current);
+        if (parent === current)
+            return false;
+        current = parent;
+    }
+}
+/**
+ * Whether a {@link TEST_SANDBOX_MARKER} sits in `path` or an ancestor, outside
+ * any git checkout (a marker inside a checkout is refused).
+ */
+function insideTestSandbox(path) {
+    let dir = dirname(path);
+    for (;;) {
+        if (existsSync(join(dir, TEST_SANDBOX_MARKER)))
+            return !insideGitCheckout(dir);
+        const parent = dirname(dir);
+        if (parent === dir)
+            return false;
+        dir = parent;
+    }
+}
+/**
+ * Root of the linked git worktree containing `path`, or null when the nearest
+ * enclosing checkout is a main checkout (or there is none).
+ *
+ * @param path - Any path.
+ * @returns The linked worktree root, or null.
+ */
+export function linkedWorktreeRootOf(path) {
+    let dir = realOrResolved(path);
+    for (;;) {
+        if (isGitLinkedCheckout(dir))
+            return dir;
+        if (existsSync(join(dir, '.git')))
+            return null; // a main checkout
+        const parent = dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}
+/**
+ * The build stamp beside the running build: the nearest `build-provenance.json`
+ * walking up from `codePath`, stopping at the package root.
+ *
+ * @param codePath - A file of the running build.
+ * @returns The stamp, or null when there is none (running from source).
+ */
+export function readBuildProvenance(codePath) {
+    let dir = dirname(codePath);
+    for (;;) {
+        const stamp = join(dir, 'build-provenance.json');
+        if (existsSync(stamp)) {
+            try {
+                const parsed = JSON.parse(readFileSync(stamp, 'utf8'));
+                if (typeof parsed === 'object' && parsed !== null && 'linkedWorktree' in parsed) {
+                    const value = parsed.linkedWorktree;
+                    // Only an explicit null or a path is trusted; anything else falls back.
+                    if (value === null || typeof value === 'string')
+                        return { linkedWorktree: value };
+                }
+            }
+            catch {
+                // An unreadable stamp decides nothing; fall back to the path.
+            }
+            return null;
+        }
+        if (existsSync(join(dir, 'package.json')))
+            return null;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}
+/**
+ * The linked worktree this build came from, or null for a released build.
+ *
+ * @param options - Injection points; defaults describe this process.
+ * @returns The worktree root, or null.
+ */
+export function devBuildWorktree(options = {}) {
+    const codePath = options.codePath ?? overrides?.codePath ?? fileURLToPath(import.meta.url);
+    const provenance = options.provenance !== undefined
+        ? options.provenance
+        : overrides?.provenance !== undefined
+            ? overrides.provenance
+            : readBuildProvenance(codePath);
+    if (provenance)
+        return provenance.linkedWorktree;
+    if (codePath.split(/[\\/]/).includes('node_modules'))
+        return null;
+    return linkedWorktreeRootOf(codePath);
+}
+/**
+ * Why this build must not change the schema of `dbPath`, or null when it may.
+ *
+ * @param dbPath - Store path.
+ * @param options - Injection points; defaults describe this process.
+ * @returns The refusal naming the build's worktree, the store and the opt-in.
+ * @task T12687
+ */
+export function schemaWriteRefusal(dbPath, options = {}) {
+    const env = options.env ?? overrides?.env ?? process.env;
+    const buildWorktree = devBuildWorktree(options);
+    if (buildWorktree === null)
+        return null;
+    const store = realOrResolved(dbPath);
+    if (isWithin(realOrResolved(buildWorktree), store))
+        return null;
+    if (env['VITEST'])
+        return null; // the test harness owns its fixture stores
+    const honourTestSandbox = options.honourTestSandbox ?? overrides?.honourTestSandbox ?? true;
+    if (honourTestSandbox && insideTestSandbox(store))
+        return null;
+    if (env[ALLOW_WORKTREE_BUILD_MIGRATIONS_ENV] === '1')
+        return null;
+    return (`Refusing to change the schema of ${store}: this CLI was built inside the git worktree ` +
+        `${buildWorktree}, and its schema may be unreleased. Run the released \`cleo\` against this ` +
+        `store, or opt in with ${ALLOW_WORKTREE_BUILD_MIGRATIONS_ENV}=1 (T12687).`);
+}
+/** Backwards-compatible alias of {@link schemaWriteRefusal}. */
+export const worktreeBuildMigrationRefusal = schemaWriteRefusal;
+/**
+ * The per-store decision, memoised for the process (one decision per store).
+ *
+ * @param dbPath - Store path.
+ * @returns The refusal, or null when schema writes are allowed.
+ */
+function decisionFor(dbPath) {
+    const key = realOrResolved(dbPath);
+    if (!decisions.has(key))
+        decisions.set(key, schemaWriteRefusal(key));
+    return decisions.get(key) ?? null;
+}
+/**
+ * Whether this build may change the schema of the store behind `nativeDb`.
+ *
+ * @param nativeDb - Store handle (`location()` is its path; in-memory is always allowed).
+ * @returns `true` when schema writes are allowed.
+ */
+export function schemaWritesAllowed(nativeDb) {
+    const dbPath = nativeDb.location();
+    return !dbPath || decisionFor(dbPath) === null;
+}
+/** Refusal raised when a dev build would change a foreign store's schema (T12687). */
+export class WorktreeBuildSchemaError extends CleoError {
+    constructor(message) {
+        super(ExitCode.CONFIG_ERROR, `${E_WORKTREE_BUILD_SCHEMA}: ${message}`, {
+            fix: 'Use the released `cleo` for this store, run the build against a store inside its own ' +
+                `worktree, or set ${ALLOW_WORKTREE_BUILD_MIGRATIONS_ENV}=1 to accept the schema change.`,
+        });
+    }
+}
+/** Whether `error` is (or wraps) a {@link WorktreeBuildSchemaError}. */
+export function isWorktreeBuildSchemaError(error) {
+    return error instanceof Error && error.message.includes(E_WORKTREE_BUILD_SCHEMA);
+}
+/**
+ * SQLite action codes, loaded on first use: `node:sqlite` must not load at
+ * module-init time (sqlite.ts imports this module; T1331 lazy-init contract).
+ */
+let authorizerCodes;
+function codes() {
+    if (authorizerCodes)
+        return authorizerCodes;
+    const sqlite = createRequire(import.meta.url)('node:sqlite')
+        .constants;
+    authorizerCodes = {
+        sqlite,
+        creates: new Map([
+            [sqlite.SQLITE_CREATE_TABLE, 'table'],
+            [sqlite.SQLITE_CREATE_VTABLE, 'table'],
+            [sqlite.SQLITE_CREATE_INDEX, 'index'],
+            [sqlite.SQLITE_CREATE_TRIGGER, 'trigger'],
+            [sqlite.SQLITE_CREATE_VIEW, 'view'],
+        ]),
+        changes: new Set([
+            sqlite.SQLITE_ALTER_TABLE,
+            sqlite.SQLITE_DROP_TABLE,
+            sqlite.SQLITE_DROP_INDEX,
+            sqlite.SQLITE_DROP_TRIGGER,
+            sqlite.SQLITE_DROP_VIEW,
+            sqlite.SQLITE_DROP_VTABLE,
+        ]),
+    };
+    return authorizerCodes;
+}
+const guards = new WeakMap();
+/** Refusal for an ATTACH whose store this build cannot identify from its name. */
+const UNKNOWN_ATTACH_REFUSAL = 'a store was ATTACHed by a bound, computed or URI filename, so this build cannot tell whose ' +
+    'store it is; schema changes on unmapped schemas are refused until the guard is refreshed';
+/**
+ * The refusal for an ATTACH, judged from the name SQLite's callback reports.
+ *
+ * Only a plain path is judged directly. The callback reports the filename only
+ * when it is a string literal (null otherwise), and a `file:` URI or a name
+ * with a `?` query is not a path: resolved against cwd it lands inside the
+ * worktree and would pass. Those fail closed until a refresh maps the real
+ * path from `PRAGMA database_list`. `''` and `:memory:` open private stores.
+ *
+ * @param name - The ATTACH callback's filename argument.
+ * @returns The refusal, or `null` when the attach is allowed.
+ */
+function attachRefusal(name) {
+    if (name === '' || name === ':memory:')
+        return null;
+    if (typeof name !== 'string' || /^file:/i.test(name) || name.includes('?')) {
+        return UNKNOWN_ATTACH_REFUSAL;
+    }
+    return decisionFor(name);
+}
+function readSchemas(nativeDb) {
+    const schemas = new Map();
+    const list = nativeDb.prepare('PRAGMA database_list').all();
+    for (const { name, file } of list) {
+        if (name === 'temp')
+            continue;
+        const rows = nativeDb
+            .prepare(`SELECT type, name FROM "${name.replaceAll('"', '""')}".sqlite_master`)
+            .all();
+        schemas.set(name.toLowerCase(), {
+            refusal: file ? decisionFor(file) : null, // '' = in-memory
+            objects: new Set(rows.map((r) => `${r.type}:${r.name}`)),
+        });
+    }
+    return schemas;
+}
+let processBuildWorktree;
+/** Whether this process is a dev build outside the test harness (the guard's precondition). */
+function guardActive() {
+    const env = overrides?.env ?? process.env;
+    if (env['VITEST'])
+        return false;
+    if (overrides)
+        return devBuildWorktree() !== null;
+    if (processBuildWorktree === undefined)
+        processBuildWorktree = devBuildWorktree();
+    return processBuildWorktree !== null;
+}
+/**
+ * Install the schema-write guard on a freshly opened writable handle. Call it
+ * right after opening, before any schema code runs.
+ *
+ * Only a dev build (outside the test harness) installs anything; released
+ * builds pay nothing. The authorizer then applies, PER SCHEMA, the decision
+ * for that schema's file: on a refused schema it denies `ALTER`, `DROP` and
+ * any `CREATE` of an object that does not already exist. That covers the main
+ * schema and any store ATTACHed later — an exempt handle (in-memory or inside
+ * the build's own worktree) that attaches a foreign store is guarded on the
+ * attached schema too.
+ *
+ * @param nativeDb - Freshly opened writable handle.
+ * @returns `true` when the main schema itself is refused.
+ * @task T12687
+ */
+export function installSchemaWriteGuard(nativeDb) {
+    if (!guardActive())
+        return false;
+    const location = nativeDb.location();
+    const mainRefusal = location ? decisionFor(location) : null; // in-memory is always allowed
+    if (typeof nativeDb.setAuthorizer !== 'function') {
+        // No authorizer in this Node: refuse a refused store outright rather than
+        // leave schema code unguarded.
+        if (mainRefusal)
+            throw new WorktreeBuildSchemaError(mainRefusal);
+        return false;
+    }
+    const state = {
+        schemas: readSchemas(nativeDb),
+        unmappedAttachRefusal: null,
+        stale: false,
+        lastDenied: null,
+    };
+    guards.set(nativeDb, state);
+    const { sqlite, creates, changes } = codes();
+    nativeDb.setAuthorizer((action, arg1, arg2, dbName) => {
+        if (action === sqlite.SQLITE_ATTACH) {
+            const refusal = attachRefusal(arg1);
+            if (refusal && !state.unmappedAttachRefusal)
+                state.unmappedAttachRefusal = refusal;
+            return sqlite.SQLITE_OK;
+        }
+        if (action === sqlite.SQLITE_DETACH) {
+            state.stale = true;
+            return sqlite.SQLITE_OK;
+        }
+        const createType = creates.get(action);
+        if (createType === undefined && !changes.has(action))
+            return sqlite.SQLITE_OK;
+        // SQLITE_ALTER_TABLE passes (schema, table) in arg1/arg2 and no dbName;
+        // every other action passes the schema as dbName.
+        // Schema names are case-insensitive in SQLite; the map is keyed lower-case.
+        const schema = ((action === sqlite.SQLITE_ALTER_TABLE ? arg1 : dbName) ?? 'main').toLowerCase();
+        if (schema === 'temp')
+            return sqlite.SQLITE_OK;
+        // After a DETACH every schema is unmapped until refresh. Its old refusal
+        // still applies, because the DETACH may have failed after authorization.
+        const mapped = state.schemas.get(schema);
+        const policy = state.stale ? undefined : mapped;
+        const refusal = policy
+            ? policy.refusal
+            : (mapped?.refusal ?? null) || state.unmappedAttachRefusal;
+        if (refusal === null)
+            return sqlite.SQLITE_OK;
+        // CREATE … IF NOT EXISTS of an existing object is a no-op.
+        if (createType !== undefined && policy?.objects.has(`${createType}:${arg1}`)) {
+            return sqlite.SQLITE_OK;
+        }
+        state.lastDenied = {
+            what: createType !== undefined
+                ? `CREATE ${createType} ${schema}.${arg1}`
+                : `schema change on ${schema}.${(action === sqlite.SQLITE_ALTER_TABLE ? arg2 : arg1) ?? ''}`,
+            refusal,
+        };
+        return sqlite.SQLITE_DENY;
+    });
+    return mainRefusal !== null;
+}
+/**
+ * Re-read the schema map after an `ATTACH`, so the attached schema gets its own
+ * decision and no-op `CREATE … IF NOT EXISTS` statements on it stay allowed.
+ *
+ * @param nativeDb - A handle passed to {@link installSchemaWriteGuard}.
+ */
+export function refreshSchemaWriteGuard(nativeDb) {
+    const state = guards.get(nativeDb);
+    if (!state)
+        return;
+    state.schemas = readSchemas(nativeDb);
+    state.unmappedAttachRefusal = null;
+    state.stale = false;
+}
+/**
+ * Turn SQLite's bare `not authorized` from a guarded handle into the refusal
+ * that says why and what to do. Other errors are returned unchanged.
+ *
+ * @param nativeDb - The handle the error came from.
+ * @param error - The caught error.
+ * @returns The error to rethrow.
+ */
+export function explainSchemaWriteDenial(nativeDb, error) {
+    if (!(error instanceof Error) || !/not authorized/i.test(error.message))
+        return error;
+    const denied = guards.get(nativeDb)?.lastDenied;
+    if (!denied)
+        return error;
+    return new WorktreeBuildSchemaError(`${denied.refusal} Denied: ${denied.what}.`);
+}
+/**
+ * Migrations of one lineage that `nativeDb`'s journal does not yet record.
+ *
+ * @param nativeDb - Store handle.
+ * @param migrations - The lineage's local migrations.
+ * @returns Names (or hashes) of the pending migrations; all of them when the
+ *   journal table does not exist yet.
+ */
+export function pendingMigrations(nativeDb, migrations) {
+    const hasJournal = nativeDb
+        .prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = '__drizzle_migrations'")
+        .get();
+    const applied = hasJournal
+        ? new Set(nativeDb.prepare('SELECT hash FROM main."__drizzle_migrations"').all().map((row) => row.hash))
+        : new Set();
+    return migrations.filter((m) => !applied.has(m.hash)).map((m) => m.name ?? m.hash);
+}
+/**
+ * The guard at a migration site: when this build may not change the store's
+ * schema and the lineage has pending migrations, FAIL FAST — the store does
+ * not match what this build reads, so continuing would only fail later with
+ * `no such column`.
+ *
+ * @param nativeDb - Store handle.
+ * @param migrations - The lineage's local migrations.
+ * @throws {WorktreeBuildSchemaError} naming the build worktree, the store,
+ *   the pending migrations and the opt-in.
+ * @task T12687
+ */
+export function assertNoPendingMigrationsForWorktreeBuild(nativeDb, migrations) {
+    const dbPath = nativeDb.location();
+    if (!dbPath)
+        return;
+    const refusal = decisionFor(dbPath);
+    if (refusal === null)
+        return;
+    const pending = pendingMigrations(nativeDb, migrations);
+    if (pending.length === 0)
+        return;
+    throw new WorktreeBuildSchemaError(`${refusal} Pending migrations: ${pending.join(', ')}.`);
+}
+//# sourceMappingURL=worktree-build-guard.js.map

package/dist/store/worktree-build-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-build-guard.js","sourceRoot":"","sources":["../../src/store/worktree-build-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE9E,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,2FAA2F;AAC3F,MAAM,CAAC,MAAM,mCAAmC,GAAG,sCAAsC,CAAC;AAE1F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AAExD,sDAAsD;AACtD,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAwBjE,IAAI,SAAS,GAA8C,IAAI,CAAC;AAChE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAA+C;IAE/C,SAAS,GAAG,IAAI,CAAC;IACjB,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,KAAK,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,mEAAmE;AACnE,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,SAAS,CAAC;QACR,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACrC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,SAAS,CAAC;QACR,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACjC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/B,SAAS,CAAC;QACR,IAAI,mBAAmB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QACzC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,kBAAkB;QAClE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;gBAChE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,gBAAgB,IAAI,MAAM,EAAE,CAAC;oBAChF,MAAM,KAAK,GAAI,MAAsC,CAAC,cAAc,CAAC;oBACrE,wEAAwE;oBACxE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;wBAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;gBACpF,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;YAChE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAA8C,EAAE;IAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE,QAAQ,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3F,MAAM,UAAU,GACd,OAAO,CAAC,UAAU,KAAK,SAAS;QAC9B,CAAC,CAAC,OAAO,CAAC,UAAU;QACpB,CAAC,CAAC,SAAS,EAAE,UAAU,KAAK,SAAS;YACnC,CAAC,CAAC,SAAS,CAAC,UAAU;YACtB,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC,cAAc,CAAC;IACjD,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,UAA8C,EAAE;IAEhD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,SAAS,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACzD,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,IAAI,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,2CAA2C;IAC3E,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,SAAS,EAAE,iBAAiB,IAAI,IAAI,CAAC;IAC5F,IAAI,iBAAiB,IAAI,iBAAiB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,GAAG,CAAC,mCAAmC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAClE,OAAO,CACL,oCAAoC,KAAK,+CAA+C;QACxF,GAAG,aAAa,6EAA6E;QAC7F,yBAAyB,mCAAmC,cAAc,CAC3E,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,6BAA6B,GAAG,kBAAkB,CAAC;AAEhE;;;;;GAKG;AACH,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,OAAO,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAsB;IACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACnC,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;AACjD,CAAC;AAED,sFAAsF;AACtF,MAAM,OAAO,wBAAyB,SAAQ,SAAS;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,uBAAuB,KAAK,OAAO,EAAE,EAAE;YACrE,GAAG,EACD,uFAAuF;gBACvF,oBAAoB,mCAAmC,iCAAiC;SAC3F,CAAC,CAAC;IACL,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;AACnF,CAAC;AAID;;;GAGG;AACH,IAAI,eAMS,CAAC;AAEd,SAAS,KAAK;IACZ,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAC5C,MAAM,MAAM,GAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,CAAkC;SAC3F,SAAS,CAAC;IACb,eAAe,GAAG;QAChB,MAAM;QACN,OAAO,EAAE,IAAI,GAAG,CAAC;YACf,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,CAAC;YACrC,CAAC,MAAM,CAAC,oBAAoB,EAAE,OAAO,CAAC;YACtC,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,CAAC;YACrC,CAAC,MAAM,CAAC,qBAAqB,EAAE,SAAS,CAAC;YACzC,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC;SACpC,CAAC;QACF,OAAO,EAAE,IAAI,GAAG,CAAC;YACf,MAAM,CAAC,kBAAkB;YACzB,MAAM,CAAC,iBAAiB;YACxB,MAAM,CAAC,iBAAiB;YACxB,MAAM,CAAC,mBAAmB;YAC1B,MAAM,CAAC,gBAAgB;YACvB,MAAM,CAAC,kBAAkB;SAC1B,CAAC;KACH,CAAC;IACF,OAAO,eAAe,CAAC;AACzB,CAAC;AA4BD,MAAM,MAAM,GAAG,IAAI,OAAO,EAA6B,CAAC;AAExD,kFAAkF;AAClF,MAAM,sBAAsB,GAC1B,6FAA6F;IAC7F,0FAA0F,CAAC;AAE7F;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CAAC,IAA+B;IACpD,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,QAAsB;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,GAAG,EAGvD,CAAC;IACH,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,MAAM;YAAE,SAAS;QAC9B,MAAM,IAAI,GAAG,QAAQ;aAClB,OAAO,CAAC,2BAA2B,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,iBAAiB,CAAC;aAC/E,GAAG,EAA2C,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE;YAC9B,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,iBAAiB;YAC3D,OAAO,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,IAAI,oBAA+C,CAAC;AAEpD,+FAA+F;AAC/F,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,SAAS,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAC1C,IAAI,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,SAAS;QAAE,OAAO,gBAAgB,EAAE,KAAK,IAAI,CAAC;IAClD,IAAI,oBAAoB,KAAK,SAAS;QAAE,oBAAoB,GAAG,gBAAgB,EAAE,CAAC;IAClF,OAAO,oBAAoB,KAAK,IAAI,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAsB;IAC5D,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,8BAA8B;IAC3F,IAAI,OAAO,QAAQ,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QACjD,0EAA0E;QAC1E,+BAA+B;QAC/B,IAAI,WAAW;YAAE,MAAM,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAgB;QACzB,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC;QAC9B,qBAAqB,EAAE,IAAI;QAC3B,KAAK,EAAE,KAAK;QACZ,UAAU,EAAE,IAAI;KACjB,CAAC;IACF,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;IAC7C,QAAQ,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QACpD,IAAI,MAAM,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,qBAAqB;gBAAE,KAAK,CAAC,qBAAqB,GAAG,OAAO,CAAC;YACnF,OAAO,MAAM,CAAC,SAAS,CAAC;QAC1B,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YACpC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;YACnB,OAAO,MAAM,CAAC,SAAS,CAAC;QAC1B,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC,SAAS,CAAC;QAC9E,wEAAwE;QACxE,kDAAkD;QAClD,4EAA4E;QAC5E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QAChG,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC,SAAS,CAAC;QAC/C,yEAAyE;QACzE,yEAAyE;QACzE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM;YACpB,CAAC,CAAC,MAAM,CAAC,OAAO;YAChB,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC;QAC7D,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,SAAS,CAAC;QAC9C,2DAA2D;QAC3D,IAAI,UAAU,KAAK,SAAS,IAAI,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7E,OAAO,MAAM,CAAC,SAAS,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,UAAU,GAAG;YACjB,IAAI,EACF,UAAU,KAAK,SAAS;gBACtB,CAAC,CAAC,UAAU,UAAU,IAAI,MAAM,IAAI,IAAI,EAAE;gBAC1C,CAAC,CAAC,oBAAoB,MAAM,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE;YAChG,OAAO;SACR,CAAC;QACF,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,OAAO,WAAW,KAAK,IAAI,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAsB;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,KAAK,CAAC,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACtC,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC;IACnC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAsB,EAAE,KAAc;IAC7E,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,IAAI,wBAAwB,CAAC,GAAG,MAAM,CAAC,OAAO,YAAY,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAsB,EACtB,UAAoC;IAEpC,MAAM,UAAU,GAAG,QAAQ;SACxB,OAAO,CAAC,oFAAoF,CAAC;SAC7F,GAAG,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,UAAU;QACxB,CAAC,CAAC,IAAI,GAAG,CAEH,QAAQ,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,EAGrE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CACzB;QACH,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;IACtB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,yCAAyC,CACvD,QAAsB,EACtB,UAAoC;IAEpC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO;IAC7B,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,IAAI,wBAAwB,CAAC,GAAG,OAAO,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9F,CAAC"}

package/dist/store/worktree-isolation-guard.d.ts

@@ -61,4 +61,31 @@ export declare function assertStorePathIsNotWorktreeResident(role: string, dbPat
  * ```
  */
 export declare function assertDbPathIsNotWorktreeResident(role: string, cwd?: string): void;
+/**
+ * Guard a manual restore (`cleo restore backup`, `admin.backup` restore) that
+ * is run from inside a linked git worktree (T12680).
+ *
+ * Path resolution maps a worktree to its owning project, so a restore run in a
+ * worktree overwrites the owning project's LIVE store. That is allowed only
+ * with an explicit confirmation naming it. When the owner cannot hold a
+ * store (not an initialised CLEO project, or a bare repository) the restore
+ * would land in the worktree's own `.cleo/`, which CLEO never reads; that is
+ * refused outright.
+ *
+ * @param storeRoot - Project root whose `.cleo/` the restore writes.
+ * @param opts - `cwd` the restore was invoked from (required: core never
+ *   falls back to `process.cwd()`; the CLI layer supplies it), and
+ *   `confirmOwnerStore` to allow overwriting the owner's live store.
+ * @throws `CleoError` `E_WT_RESTORE_REFUSED` when the owner cannot hold the
+ *   store, or `E_WT_RESTORE_CONFIRM_REQUIRED` when confirmation is missing.
+ * @example
+ * ```ts
+ * assertRestoreTargetConfirmed('/home/u/project', { cwd: '/data/cleo/worktrees/abc/T1' }); // throws
+ * ```
+ * @task T12680
+ */
+export declare function assertRestoreTargetConfirmed(storeRoot: string, opts: {
+    cwd: string;
+    confirmOwnerStore?: boolean | undefined;
+}): void;
 //# sourceMappingURL=worktree-isolation-guard.d.ts.map

package/dist/store/worktree-isolation-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worktree-isolation-guard.d.ts","sourceRoot":"","sources":["../../src/store/worktree-isolation-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAWH;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,oCAAoC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAoBvF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAUlF"}
+{"version":3,"file":"worktree-isolation-guard.d.ts","sourceRoot":"","sources":["../../src/store/worktree-isolation-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAYH;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,oCAAoC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAoBvF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAUlF;AAmBD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAE,GAC7D,IAAI,CA6BN"}

package/dist/store/worktree-isolation-guard.js

@@ -15,7 +15,8 @@
  * @saga T9800
  * @decision D009
  */
-import { basename, dirname, join } from 'node:path';
+import { existsSync } from 'node:fs';
+import { basename, dirname, join, resolve } from 'node:path';
 import { ExitCode } from '@cleocode/contracts';
 import { CleoError } from '../errors.js';
 import { resolveCleoDir } from '../paths.js';
@@ -95,4 +96,69 @@ export function assertDbPathIsNotWorktreeResident(role, cwd) {
     }
     assertStorePathIsNotWorktreeResident(role, join(cleoDir, PROJECT_STORE_FILENAME));
 }
+/**
+ * The root of the git checkout enclosing `dir`: the nearest ancestor (or `dir`
+ * itself) holding a `.git` entry.
+ *
+ * @param dir - Starting directory.
+ * @returns The checkout root, or `null` outside any checkout.
+ */
+function enclosingCheckout(dir) {
+    let current = resolve(dir);
+    for (;;) {
+        if (existsSync(join(current, '.git')))
+            return current;
+        const parent = dirname(current);
+        if (parent === current)
+            return null;
+        current = parent;
+    }
+}
+/**
+ * Guard a manual restore (`cleo restore backup`, `admin.backup` restore) that
+ * is run from inside a linked git worktree (T12680).
+ *
+ * Path resolution maps a worktree to its owning project, so a restore run in a
+ * worktree overwrites the owning project's LIVE store. That is allowed only
+ * with an explicit confirmation naming it. When the owner cannot hold a
+ * store (not an initialised CLEO project, or a bare repository) the restore
+ * would land in the worktree's own `.cleo/`, which CLEO never reads; that is
+ * refused outright.
+ *
+ * @param storeRoot - Project root whose `.cleo/` the restore writes.
+ * @param opts - `cwd` the restore was invoked from (required: core never
+ *   falls back to `process.cwd()`; the CLI layer supplies it), and
+ *   `confirmOwnerStore` to allow overwriting the owner's live store.
+ * @throws `CleoError` `E_WT_RESTORE_REFUSED` when the owner cannot hold the
+ *   store, or `E_WT_RESTORE_CONFIRM_REQUIRED` when confirmation is missing.
+ * @example
+ * ```ts
+ * assertRestoreTargetConfirmed('/home/u/project', { cwd: '/data/cleo/worktrees/abc/T1' }); // throws
+ * ```
+ * @task T12680
+ */
+export function assertRestoreTargetConfirmed(storeRoot, opts) {
+    const checkout = enclosingCheckout(opts.cwd);
+    const worktree = isGitLinkedCheckout(storeRoot)
+        ? storeRoot
+        : checkout !== null && isGitLinkedCheckout(checkout)
+            ? checkout
+            : null;
+    if (worktree === null)
+        return;
+    const owner = describeWorktreeOwner(worktree);
+    const target = join(storeRoot, '.cleo');
+    // The store resolved to the worktree itself: its owner is not an
+    // initialised project or is a bare repository (named in `owner`).
+    if (isGitLinkedCheckout(storeRoot)) {
+        throw new CleoError(ExitCode.CONFIG_ERROR, `E_WT_RESTORE_REFUSED: restore run from git worktree ${worktree} would write ${target}, a store CLEO never reads — ${owner}.`, {
+            fix: 'Run the restore from an initialised CLEO project (see the owning repository above); nothing was written.',
+        });
+    }
+    if (opts.confirmOwnerStore)
+        return;
+    throw new CleoError(ExitCode.CONFIG_ERROR, `E_WT_RESTORE_CONFIRM_REQUIRED: restore run from git worktree ${worktree} would overwrite the LIVE store ${target}; this worktree's ${owner}.`, {
+        fix: `Re-run with --confirm-owner-store to overwrite ${target}, or run the restore from ${storeRoot}. Nothing was written.`,
+    });
+}
 //# sourceMappingURL=worktree-isolation-guard.js.map

package/dist/store/worktree-isolation-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"worktree-isolation-guard.js","sourceRoot":"","sources":["../../src/store/worktree-isolation-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEjF,yEAAyE;AACzE,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,oCAAoC,CAAC,IAAY,EAAE,MAAc;IAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,OAAO;QAAE,OAAO;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC;QAAE,OAAO;IAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,KAAK,GAAG,EAAE,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+BAA+B,IAAI,SAAS,MAAM,2CAA2C,CAC9F,CAAC;QACF,OAAO;IACT,CAAC;IACD,+DAA+D;IAC/D,MAAM,KAAK,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,YAAY,EACrB,kDAAkD,IAAI,WAAW,MAAM,aAAa,WAAW,iCAAiC,KAAK,qDAAqD,EAC1L;QACE,GAAG,EAAE,6QAA6Q;KACnR,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iCAAiC,CAAC,IAAY,EAAE,GAAY;IAC1E,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,uCAAuC;QACvC,OAAO;IACT,CAAC;IACD,oCAAoC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC;AACpF,CAAC"}
+{"version":3,"file":"worktree-isolation-guard.js","sourceRoot":"","sources":["../../src/store/worktree-isolation-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEjF,yEAAyE;AACzE,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,oCAAoC,CAAC,IAAY,EAAE,MAAc;IAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,OAAO;QAAE,OAAO;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC;QAAE,OAAO;IAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,KAAK,GAAG,EAAE,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+BAA+B,IAAI,SAAS,MAAM,2CAA2C,CAC9F,CAAC;QACF,OAAO;IACT,CAAC;IACD,+DAA+D;IAC/D,MAAM,KAAK,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,YAAY,EACrB,kDAAkD,IAAI,WAAW,MAAM,aAAa,WAAW,iCAAiC,KAAK,qDAAqD,EAC1L;QACE,GAAG,EAAE,6QAA6Q;KACnR,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iCAAiC,CAAC,IAAY,EAAE,GAAY;IAC1E,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,uCAAuC;QACvC,OAAO;IACT,CAAC;IACD,oCAAoC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,SAAS,CAAC;QACR,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC;QACtD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACpC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAiB,EACjB,IAA8D;IAE9D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC;QAC7C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,mBAAmB,CAAC,QAAQ,CAAC;YAClD,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO;IAC9B,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACxC,iEAAiE;IACjE,kEAAkE;IAClE,IAAI,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,YAAY,EACrB,uDAAuD,QAAQ,gBAAgB,MAAM,gCAAgC,KAAK,GAAG,EAC7H;YACE,GAAG,EAAE,0GAA0G;SAChH,CACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB;QAAE,OAAO;IACnC,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,YAAY,EACrB,gEAAgE,QAAQ,mCAAmC,MAAM,qBAAqB,KAAK,GAAG,EAC9I;QACE,GAAG,EAAE,kDAAkD,MAAM,6BAA6B,SAAS,wBAAwB;KAC5H,CACF,CAAC;AACJ,CAAC"}

package/dist/store/writer-lease.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"writer-lease.d.ts","sourceRoot":"","sources":["../../src/store/writer-lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAmB1E,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjE;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,OAAO,GAAG,KAAK,GAAG,SAAS,CAAC;AAEnE;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,oGAAoG;IACpG,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB;;;;OAIG;IACH,SAAS,IAAI,IAAI,CAAC;CACnB;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,oHAAoH;IACpH,SAAS,CAAC,EAAE,yBAAyB,CAAC;IACtC,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,uFAAuF;AACvF,eAAO,MAAM,cAAc,QAAS,CAAC;AAKrC,yDAAyD;AACzD,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAkC3C;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,SAAS,CAe5C;AAsBD;;;;;GAKG;AACH,wBAAgB,6BAA6B,IAAI,IAAI,CAOpD;AAID;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAC7B,KAAK,EAAE,UAAU,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,yBAAyB,KAClC,OAAO,CAAC,WAAW,CAAC,CAAC;AAkD1B;;;;;;;;;;;;GAYG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EACJ,CAAC,CACC,KAAK,EAAE,UAAU,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,yBAAyB,KAClC,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC,CAAC,GACzC,SAAS,GACZ,IAAI,CAaN;AAoFD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gGAAgG;IAChG,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,kGAAkG;IAClG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAQ9F;AAiBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAqBlF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,mBAAmB,CAYjE;AAoMD;;;;;GAKG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAG,qBAAqB,CAAU;gBACvC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM;CAO/D;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAG,yBAAyB,CAAU;gBAC3C,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS;CAQ/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAI3F;AA+BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAK/F;AA+ID;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,SAAS,EACf,IAAI,CAAC,EAAE,mBAAmB,GACzB,OAAO,CAAC,WAAW,CAAC,CA0FtB;AAkPD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,eAAe,CAAC,CAAC,EACrC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,SAAS,EACf,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EAClC,IAAI,CAAC,EAAE,mBAAmB,GACzB,OAAO,CAAC,CAAC,CAAC,CAQZ;AA4ED;;;;;;GAMG;AACH,MAAM,WAAW,oBACf,SAAQ,IAAI,CAAC,mBAAmB,EAAE,UAAU,GAAG,OAAO,GAAG,WAAW,CAAC;IACrE,2FAA2F;IAC3F,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;CACxC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,UAAU,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACxC;;;;;;OAMG;IACH,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;CACvD;AA8LD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,YAAY,EACtB,EAAE,EAAE,CAAC,SAAS,EAAE,kBAAkB,KAAK,OAAO,CAAC,CAAC,CAAC,EACjD,IAAI,CAAC,EAAE,oBAAoB,GAC1B,OAAO,CAAC,CAAC,CAAC,CAIZ"}
+{"version":3,"file":"writer-lease.d.ts","sourceRoot":"","sources":["../../src/store/writer-lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAoB1E,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjE;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,OAAO,GAAG,KAAK,GAAG,SAAS,CAAC;AAEnE;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,oGAAoG;IACpG,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB;;;;OAIG;IACH,SAAS,IAAI,IAAI,CAAC;CACnB;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,oHAAoH;IACpH,SAAS,CAAC,EAAE,yBAAyB,CAAC;IACtC,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,uFAAuF;AACvF,eAAO,MAAM,cAAc,QAAS,CAAC;AAKrC,yDAAyD;AACzD,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAkC3C;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,SAAS,CAe5C;AAsBD;;;;;GAKG;AACH,wBAAgB,6BAA6B,IAAI,IAAI,CAOpD;AAID;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAC7B,KAAK,EAAE,UAAU,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,yBAAyB,KAClC,OAAO,CAAC,WAAW,CAAC,CAAC;AAkD1B;;;;;;;;;;;;GAYG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EACJ,CAAC,CACC,KAAK,EAAE,UAAU,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,yBAAyB,KAClC,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC,CAAC,GACzC,SAAS,GACZ,IAAI,CAaN;AAoFD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gGAAgG;IAChG,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,kGAAkG;IAClG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAQ9F;AAiBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAqBlF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,mBAAmB,CAYjE;AAoMD;;;;;GAKG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAG,qBAAqB,CAAU;gBACvC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM;CAO/D;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAG,yBAAyB,CAAU;gBAC3C,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS;CAQ/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAI3F;AA+BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAK/F;AA+ID;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,SAAS,EACf,IAAI,CAAC,EAAE,mBAAmB,GACzB,OAAO,CAAC,WAAW,CAAC,CA0FtB;AAkPD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,eAAe,CAAC,CAAC,EACrC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,SAAS,EACf,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EAClC,IAAI,CAAC,EAAE,mBAAmB,GACzB,OAAO,CAAC,CAAC,CAAC,CAQZ;AA4ED;;;;;;GAMG;AACH,MAAM,WAAW,oBACf,SAAQ,IAAI,CAAC,mBAAmB,EAAE,UAAU,GAAG,OAAO,GAAG,WAAW,CAAC;IACrE,2FAA2F;IAC3F,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;CACxC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,UAAU,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACxC;;;;;;OAMG;IACH,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;CACvD;AA+LD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,YAAY,EACtB,EAAE,EAAE,CAAC,SAAS,EAAE,kBAAkB,KAAK,OAAO,CAAC,CAAC,CAAC,EACjD,IAAI,CAAC,EAAE,oBAAoB,GAC1B,OAAO,CAAC,CAAC,CAAC,CAIZ"}