@clossys/launcher 0.3.1 → 0.4.0

package/dist/apply-plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply-plan.d.ts","sourceRoot":"","sources":["../src/apply-plan.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,CAAA;KAAE,CAAC;IACxF,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,yBAAyB,GAAG,eAAe,CAAC;AAEnI,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IACrH,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3G,QAAQ,CAAC,SAAS,EAAE,SAAS,YAAY,EAAE,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;CAC3C;AAED,MAAM,MAAM,gBAAgB,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAY7G,wHAAwH;AACxH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAkBxE;AAID,2EAA2E;AAC3E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CA0BpE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAIzD;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,aAAa,EACnB,mBAAmB,EAAE,MAAM,EAC3B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,eAAe,EACtB,YAAY,EAAE,MAAM,GACnB,gBAAgB,CAYlB"}
+{"version":3,"file":"apply-plan.d.ts","sourceRoot":"","sources":["../src/apply-plan.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAgB,MAAM,oBAAoB,CAAC;AAErF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAClF,YAAY,EACV,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAC7K,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,GACxD,MAAM,oBAAoB,CAAC;AAoB5B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAOhE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAGzD;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACjF;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,aAAa,EACnB,mBAAmB,EAAE,MAAM,EAC3B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,eAAe,EACtB,YAAY,EAAE,MAAM,GACnB,gBAAgB,CA2BlB"}

package/dist/apply-plan.js

@@ -1,129 +1,144 @@
 // Apply an approved plan (#1178): writes clossys/brief.json into a staffed
-// repository from the exact EngagementBrief shape and plan.json contract
-// recorded on issue #1175 ("Plan file contract", posted 2026-09-22).
+// repository once clossys/advisor/plan.json is approved, both validated
+// against the shared plan and brief contracts (#1175, #1475).
 //
 // SCOPE OF THIS MODULE (see the wave-2 PR body for the full explanation):
 // this lands the mechanical, auditable core the landed contract fully
 // specifies -- reading clossys/advisor/plan.json, confirming it is
 // approved, validating an EngagementBrief, and writing clossys/brief.json
-// byte-identically. Multi-repository orchestration (branch creation, exact
-// package installs, Starter's caller workflow, opening one pull request
-// per repository) is deferred: the landed contract does not yet specify
-// how a plan's approved roles map to inventory repository ids or to
-// install/remove/relocate work items, and building that mapping now would
-// mean inventing an interface Advisor's still-open PR (#1193) might define
-// differently.
+// byte-identically. The plan contract now says which roles work in which
+// inventory repository (`staffing`) and which exact package acts are
+// authorized (`packages`), and approvedSubject() below says what an
+// approval binds (#1178). Multi-repository orchestration (computing each
+// repository's change, branch creation, exact package installs, Starter's
+// caller workflow, opening one pull request per repository) is not built
+// yet, and this module does not act on those fields.
 //
 // clossys/brief.json's shape is NOT re-derived here -- @clossys/advisor's
-// EngagementBrief export (landing in #1193) is the one owner of that
-// computation. This module receives an already-computed brief (as a file
-// path today; a direct call once #1193 lands and a caller can import the
-// package) and only validates its shape and writes it, exactly the split
-// #1187's governing principle draws between package-owned definition and
-// judgment versus Launcher's deterministic mechanics.
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function nonEmptyString(value) {
-    return typeof value === "string" && value.trim() !== "";
-}
-function stringArray(value) {
-    return Array.isArray(value) && value.every((item) => typeof item === "string");
-}
-/** Validates an EngagementBrief's shape exactly against the #1175 contract. Never mutates, never re-derives content. */
-export function validateEngagementBrief(value) {
-    if (!isRecord(value))
-        return { valid: false, reason: "brief must be an object" };
-    if (value.schemaVersion !== 1)
-        return { valid: false, reason: "brief.schemaVersion must be 1" };
-    if (!nonEmptyString(value.problem))
-        return { valid: false, reason: "brief.problem must be a non-empty string" };
-    if (!Array.isArray(value.roles) || value.roles.length === 0)
-        return { valid: false, reason: "brief.roles must be a non-empty array" };
-    for (const [index, role] of value.roles.entries()) {
-        if (!isRecord(role))
-            return { valid: false, reason: `brief.roles[${index}] must be an object` };
-        if (!nonEmptyString(role.role))
-            return { valid: false, reason: `brief.roles[${index}].role must be a non-empty string` };
-        if (!nonEmptyString(role.why))
-            return { valid: false, reason: `brief.roles[${index}].why must be a non-empty string` };
-        if (!isRecord(role.goal) || !nonEmptyString(role.goal.metric) || (role.goal.direction !== "increase" && role.goal.direction !== "decrease")) {
-            return { valid: false, reason: `brief.roles[${index}].goal must have a metric and a direction of increase or decrease` };
-        }
-        if (!stringArray(role.inputsFrom))
-            return { valid: false, reason: `brief.roles[${index}].inputsFrom must be a string array` };
-        if (!stringArray(role.outputsTo))
-            return { valid: false, reason: `brief.roles[${index}].outputsTo must be a string array` };
-    }
-    if (!stringArray(value.sequence) || value.sequence.length === 0)
-        return { valid: false, reason: "brief.sequence must be a non-empty string array" };
-    if (!stringArray(value.deliverables))
-        return { valid: false, reason: "brief.deliverables must be a string array" };
-    return { valid: true };
+// toEngagementBrief() is the one owner of that computation. This module
+// receives an already-computed brief and only validates it and writes it,
+// exactly the split #1187's governing principle draws between
+// package-owned definition and judgment versus Launcher's deterministic
+// mechanics.
+//
+// VALIDATION (issue #1475): see plan-contract.ts. There is no second,
+// hand-written shape check here to drift from Advisor's: a plan or brief
+// Advisor accepts, Launcher accepts, and every object in them is closed, so
+// an unknown field is refused. This package still has no runtime
+// dependency on @clossys/advisor.
+import { validateAdvisorPlan, validateEngagementBrief } from "./plan-contract.js";
+import { planDigest } from "./plan-digest.js";
+export { validateAdvisorPlan, validateEngagementBrief } from "./plan-contract.js";
+/**
+ * The decisions made at the latest instant, by `at` -- never by array
+ * position -- or null when there are none, or when any decision's `at` does
+ * not parse to a finite time (the plan contract already refuses one; this
+ * does not rely on that), because then time cannot say which is latest.
+ */
+function latestDecisions(plan) {
+    if (plan.decisions.length === 0)
+        return null;
+    const times = plan.decisions.map((decision) => Date.parse(decision.at));
+    if (!times.every(Number.isFinite))
+        return null;
+    // A reduce, not Math.max(...times): spreading a very long list into
+    // arguments throws a RangeError.
+    const latest = times.reduce((highest, time) => (time > highest ? time : highest), Number.NEGATIVE_INFINITY);
+    return plan.decisions.filter((_, index) => times[index] === latest);
 }
-const BLOCKER_KINDS = new Set(["missing-input", "missing-authority", "failing-evidence", "unavailable-environment", "contradiction"]);
-/** Validates an AdvisorPlan's shape exactly against the #1175 contract. */
-export function validateAdvisorPlan(value) {
-    if (!isRecord(value))
-        return { valid: false, reason: "plan must be an object" };
-    if (value.schemaVersion !== 1)
-        return { valid: false, reason: "plan.schemaVersion must be 1" };
-    if (!nonEmptyString(value.asOf))
-        return { valid: false, reason: "plan.asOf must be a non-empty string" };
-    if (!isRecord(value.mandate) || !nonEmptyString(value.mandate.problem) || !nonEmptyString(value.mandate.primaryProblemId) || !stringArray(value.mandate.roles)) {
-        return { valid: false, reason: "plan.mandate must have problem, primaryProblemId, and a roles string array" };
-    }
-    if (!stringArray(value.whereWeAre))
-        return { valid: false, reason: "plan.whereWeAre must be a string array" };
-    if (value.recommendedNext !== null) {
-        if (!isRecord(value.recommendedNext) || !nonEmptyString(value.recommendedNext.action) || !nonEmptyString(value.recommendedNext.owner) || !nonEmptyString(value.recommendedNext.due)) {
-            return { valid: false, reason: "plan.recommendedNext must be null or have action, owner, and due" };
-        }
-    }
-    if (!Array.isArray(value.decisions))
-        return { valid: false, reason: "plan.decisions must be an array" };
-    for (const [index, decision] of value.decisions.entries()) {
-        if (!isRecord(decision) || !nonEmptyString(decision.at) || !nonEmptyString(decision.recommended) || !nonEmptyString(decision.chosen) || !nonEmptyString(decision.by)) {
-            return { valid: false, reason: `plan.decisions[${index}] must have at, recommended, chosen, and by` };
-        }
-    }
-    if (!Array.isArray(value.blockers))
-        return { valid: false, reason: "plan.blockers must be an array" };
-    for (const [index, blocker] of value.blockers.entries()) {
-        if (!isRecord(blocker) || !BLOCKER_KINDS.has(blocker.kind) || !nonEmptyString(blocker.description) || !nonEmptyString(blocker.owner)) {
-            return { valid: false, reason: `plan.blockers[${index}] must have a valid kind, description, and owner` };
-        }
-    }
-    return { valid: true };
+const SUBJECT_DIGEST = /^sha256:[0-9a-f]{64}$/;
+/**
+ * What an approval binds (#1178): the `subjectDigest` of the plan's latest
+ * decision, by `at`, when that decision has chosen "approved" -- the digest of
+ * the exact change the approver was shown. Otherwise null, and null binds
+ * nothing. Fails closed:
+ *
+ * - a plan that does not validate against the plan contract, rules
+ *   included: null. It checks this itself rather than trusting its caller,
+ *   because on an unchecked plan a time with no offset parses as local time,
+ *   so the machine's time zone could decide which decision is latest;
+ * - no decisions, or any decision time that does not parse: null;
+ * - a latest decision that is not "approved": null;
+ * - an approval with no `subjectDigest`, or one that is not a sha256 digest:
+ *   null -- an approval that names no bytes approves no bytes;
+ * - several decisions at the latest instant: their subject only when every
+ *   one of them is "approved" with the same `subjectDigest`, else null.
+ *
+ * It says what was approved, not whether that is what is about to be applied:
+ * the caller recomputes the digest of the change it holds and refuses unless
+ * the two are equal.
+ */
+export function approvedSubject(plan) {
+    if (!validateAdvisorPlan(plan).valid)
+        return null;
+    const latest = latestDecisions(plan);
+    if (latest === null || !latest.every((decision) => decision.chosen === "approved"))
+        return null;
+    const subject = latest[0].subjectDigest;
+    if (typeof subject !== "string" || !SUBJECT_DIGEST.test(subject))
+        return null;
+    return latest.every((decision) => decision.subjectDigest === subject) ? subject : null;
 }
 /**
  * The plan is approved when its most recent decision (by `at`) records
  * chosen === "approved". No decisions, or a most-recent decision that
  * isn't "approved", is not approved -- this never assumes approval from
- * absence.
+ * absence. Fails closed on anything that would let array order decide
+ * instead of time: a decision whose `at` does not parse to a finite time
+ * (the plan contract already refuses one; this does not rely on that), or
+ * two decisions at the same latest instant that do not all say "approved".
+ *
+ * It binds no bytes (#1178): it does not look at `subjectDigest`, so it is
+ * true for an approval that names no change at all. It says only that the
+ * latest decision is an approval. Anything that applies a plan must use
+ * `approvedSubject()` instead, and compare the subject it returns with the
+ * digest of the change it holds. The one stated exception is the legacy
+ * brief-only path, `applyEngagementBrief()`, which predates the binding.
  */
 export function isPlanApproved(plan) {
-    if (plan.decisions.length === 0)
-        return false;
-    const mostRecent = [...plan.decisions].sort((left, right) => Date.parse(left.at) - Date.parse(right.at)).at(-1);
-    return mostRecent?.chosen === "approved";
+    const latest = latestDecisions(plan);
+    return latest !== null && latest.every((decision) => decision.chosen === "approved");
 }
 /**
  * Writes clossys/brief.json into `repositoryDirectory`, byte-identically
  * from the validated brief -- never re-authors its prose. Refuses (does
- * not write) unless both the plan is approved and the brief validates.
+ * not write) unless the plan validates and is approved and the brief,
+ * including its context snapshot, validates. Reports the canonical digest
+ * of the plan it applied.
+ *
+ * LEGACY (#1178): this path predates the approval binding. It accepts an
+ * approval whether or not it carries a `subjectDigest` and checks no
+ * binding (it uses `isPlanApproved()`), exactly as before; it is kept
+ * working, not extended. Anything that must know what an approval binds uses
+ * `approvedSubject()`.
  */
 export function applyEngagementBrief(host, repositoryDirectory, plan, brief, briefRelPath) {
+    const planValidation = validateAdvisorPlan(plan);
+    if (!planValidation.valid) {
+        return { state: "refused", reason: `plan does not validate: ${planValidation.reason}` };
+    }
     if (!isPlanApproved(plan)) {
-        return { state: "refused", reason: "the plan's most recent decision is not \"approved\"" };
+        return { state: "refused", reason: "the plan's most recent decision is not \"approved\", or decisions made at that same time disagree" };
     }
     const validation = validateEngagementBrief(brief);
     if (!validation.valid) {
         return { state: "refused", reason: `brief does not validate: ${validation.reason}` };
     }
+    // Everything that can refuse runs before the first write, so a refusal
+    // never leaves a brief behind. A plan that validates always has a digest
+    // (the contract refuses what canonical JSON cannot carry); this catch is
+    // the backstop that keeps that a refusal rather than a throw after writing.
+    let digest;
+    try {
+        digest = planDigest(plan);
+    }
+    catch (cause) {
+        return { state: "refused", reason: `plan has no canonical digest: ${cause instanceof Error ? cause.message : String(cause)}` };
+    }
+    const contents = `${JSON.stringify(brief, null, 2)}\n`;
     const path = `${repositoryDirectory}/${briefRelPath}`;
     host.mkdirp(path.slice(0, path.lastIndexOf("/")));
-    host.writeText(path, `${JSON.stringify(brief, null, 2)}\n`);
-    return { state: "applied", path };
+    host.writeText(path, contents);
+    return { state: "applied", path, planDigest: digest };
 }
 //# sourceMappingURL=apply-plan.js.map

package/dist/apply-plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"apply-plan.js","sourceRoot":"","sources":["../src/apply-plan.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,yEAAyE;AACzE,qEAAqE;AACrE,EAAE;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,mEAAmE;AACnE,0EAA0E;AAC1E,2EAA2E;AAC3E,wEAAwE;AACxE,wEAAwE;AACxE,oEAAoE;AACpE,0EAA0E;AAC1E,2EAA2E;AAC3E,eAAe;AACf,EAAE;AACF,0EAA0E;AAC1E,qEAAqE;AACrE,yEAAyE;AACzE,yEAAyE;AACzE,yEAAyE;AACzE,yEAAyE;AACzE,sDAAsD;AAgDtD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AACD,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAC1D,CAAC;AACD,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AACjF,CAAC;AAED,wHAAwH;AACxH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IACjF,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAChG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IAChH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IACtI,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,KAAK,qBAAqB,EAAE,CAAC;QAChG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,KAAK,mCAAmC,EAAE,CAAC;QACzH,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,KAAK,kCAAkC,EAAE,CAAC;QACvH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,UAAU,CAAC,EAAE,CAAC;YAC5I,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,KAAK,mEAAmE,EAAE,CAAC;QAC3H,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,KAAK,qCAAqC,EAAE,CAAC;QAC9H,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,KAAK,oCAAoC,EAAE,CAAC;IAC9H,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;IACpJ,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IACnH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAc,CAAC,eAAe,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,eAAe,CAAC,CAAC,CAAC;AAEnJ,2EAA2E;AAC3E,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAChF,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC/F,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACzG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/J,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4EAA4E,EAAE,CAAC;IAChH,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IAC9G,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YACpL,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kEAAkE,EAAE,CAAC;QACtG,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACxG,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACrK,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,KAAK,6CAA6C,EAAE,CAAC;QACxG,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACtG,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACpJ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,KAAK,kDAAkD,EAAE,CAAC;QAC5G,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAiB;IAC9C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChH,OAAO,UAAU,EAAE,MAAM,KAAK,UAAU,CAAC;AAC3C,CAAC;AAMD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAmB,EACnB,mBAA2B,EAC3B,IAAiB,EACjB,KAAsB,EACtB,YAAoB;IAEpB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;IAC7F,CAAC;IACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,mBAAmB,IAAI,YAAY,EAAE,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACpC,CAAC"}
+{"version":3,"file":"apply-plan.js","sourceRoot":"","sources":["../src/apply-plan.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,wEAAwE;AACxE,8DAA8D;AAC9D,EAAE;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,mEAAmE;AACnE,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,oEAAoE;AACpE,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,qDAAqD;AACrD,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,0EAA0E;AAC1E,8DAA8D;AAC9D,wEAAwE;AACxE,aAAa;AACb,EAAE;AACF,sEAAsE;AACtE,yEAAyE;AACzE,4EAA4E;AAC5E,iEAAiE;AACjE,kCAAkC;AAElC,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAMlF;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAiB;IACxC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,oEAAoE;IACpE,iCAAiC;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC5G,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,eAAe,CAAC,IAAiB;IAC/C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAChG,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,aAAa,CAAC;IACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACzF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAAC,IAAiB;IAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;AACvF,CAAC;AAMD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAmB,EACnB,mBAA2B,EAC3B,IAAiB,EACjB,KAAsB,EACtB,YAAoB;IAEpB,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,2BAA2B,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,mGAAmG,EAAE,CAAC;IAC3I,CAAC;IACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,iCAAiC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACjI,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACvD,MAAM,IAAI,GAAG,GAAG,mBAAmB,IAAI,YAAY,EAAE,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACxD,CAAC"}

package/dist/apply-step-fixture.d.ts

@@ -0,0 +1,87 @@
+import { reseal } from "./admission-fixture.js";
+import type { HubOptions, World, WorldOptions } from "./admission-fixture.js";
+import type { ApplyBundle, RepositoryChangeSet } from "./change-set-contract.js";
+import type { LockfileSpawn } from "./lockfile-regen.js";
+import type { AdvisorPlan } from "./plan-contract.js";
+export { reseal };
+type Loose = Record<string, any>;
+export interface MaterializedFixtureOptions {
+    /** Overrides for the hub: options, or a function of what the fixture built (its plan, its approved bundle and its set). */
+    readonly hub?: Partial<HubOptions> | ((built: {
+        plan: AdvisorPlan;
+        bundle: ApplyBundle;
+        set: RepositoryChangeSet;
+    }) => Partial<HubOptions>);
+    /** Store the set, with its whole-file texts, in the hub's change-set store, where the command line finds it. Default false. */
+    readonly storeSet?: boolean;
+}
+/**
+ * A setup change set whose whole-file bytes are known, with the pin already
+ * satisfied and no lockfile to regenerate, checked out from a local clone, and
+ * a hub that approved it: a git repository whose HEAD holds a plan (its latest
+ * decision approves the bundle that holds the set) and an execution
+ * authorization, with the bundle stored and the hub's readiness executable
+ * installed. `binding` is the binding admission is expected to compute; it is
+ * never an input to materialize or verify.
+ */
+export declare function buildMaterializedFixture(roots: string[], options?: MaterializedFixtureOptions): {
+    clone: string;
+    hub: string;
+    set: RepositoryChangeSet;
+    texts: Record<string, string>;
+    binding: {
+        kind: "approved";
+        subjectDigest: string;
+    };
+    planPackages: {
+        planItem: string;
+        act: "install" | "pin-starter";
+        name: string;
+        version: string;
+        integrity: string;
+        placement: "dependencies" | "devDependencies";
+    }[];
+    plan: AdvisorPlan;
+    bundle: ApplyBundle;
+    origin: string;
+};
+export interface AdmittedFixtureOptions {
+    readonly world?: WorldOptions;
+    readonly hub?: Partial<HubOptions> | ((world: World) => Partial<HubOptions>);
+    /** How the setup set reached the default branch. Default `squash`: no ancestor of the setup branch. */
+    readonly mergeStyle?: "direct" | "squash";
+    /** Edits the base tree before it is committed. */
+    readonly tree?: (tree: World["tree"]) => void;
+    /** Store the apply set in the hub too. Default false. */
+    readonly storeApplySet?: boolean;
+}
+/**
+ * The two phases of one plan. The setup set was approved (the plan's latest
+ * decision approves the bundle that holds it), materialized and merged into
+ * the clone's default branch (by squash by default), and the apply set was
+ * then computed against the merged base and is held by a later run's bundle,
+ * which the hub stores. `spawn` stands in for the package manager: it
+ * regenerates the lockfile the apply set's installs write.
+ */
+export declare function buildAdmittedFixture(roots: string[], options?: AdmittedFixtureOptions): {
+    world: World;
+    hub: string;
+    clone: string;
+    baseCommit: string;
+    sideTip: string | null;
+    set: RepositoryChangeSet;
+    setup: RepositoryChangeSet;
+    texts: Record<string, string>;
+    spawn: LockfileSpawn;
+};
+/**
+ * Everything a refused materialize must leave alone: the clone's refs, HEAD,
+ * index, status and every file outside .git, and every file the hub keeps
+ * under clossys/.state. Two snapshots are equal only when nothing moved.
+ */
+export declare function writeSnapshot(clone: string, hub: string): string;
+/** Whether the clone holds a local branch of this name. */
+export declare function branchExists(clone: string, branch: string): boolean;
+/** The ledger a clone holds at clossys/.state/installed.json, parsed, or null when it holds none. */
+export declare function readCloneLedger(clone: string): Loose | null;
+//# sourceMappingURL=apply-step-fixture.d.ts.map

package/dist/apply-step-fixture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-step-fixture.d.ts","sourceRoot":"","sources":["../src/apply-step-fixture.ts"],"names":[],"mappings":"AAKA,OAAO,EASL,MAAM,EAEP,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE9E,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,MAAM,EAAE,CAAC;AAKlB,KAAK,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAsBjC,MAAM,WAAW,0BAA0B;IACzC,2HAA2H;IAC3H,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,MAAM,EAAE,WAAW,CAAC;QAAC,GAAG,EAAE,mBAAmB,CAAA;KAAE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5I,+HAA+H;IAC/H,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,0BAA+B;;;;;;;;;;;;;;;;;;;;EAuDjG;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7E,uGAAuG;IACvG,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1C,kDAAkD;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAC9C,yDAAyD;IACzD,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,sBAA2B;;;;;;;;;;EAsCzF;AAmBD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAchE;AAED,2DAA2D;AAC3D,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAOnE;AAED,qGAAqG;AACrG,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CAG3D"}

package/dist/apply-step-fixture.js

@@ -0,0 +1,199 @@
+import { execFileSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import { existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, readlinkSync, realpathSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join } from "node:path";
+import { SITE_ID, approvedPlan, basePlan, buildWorld, bundleOf, committedPlanPackages, hubRepo, lockfileText, reseal, siteRepo, } from "./admission-fixture.js";
+import { contentDigest, discoveryLinkRole, discoveryLinkTarget } from "./change-set-contract.js";
+import { planDigest } from "./plan-digest.js";
+export { reseal };
+const REPO = new URL("../../../", import.meta.url);
+const read = (path) => readFileSync(new URL(path, REPO), "utf8");
+const gitEnv = {
+    ...process.env,
+    PATH: process.env.PATH ?? "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
+    GIT_CONFIG_GLOBAL: "/dev/null",
+    GIT_CONFIG_NOSYSTEM: "1",
+    GIT_AUTHOR_NAME: "Example Author",
+    GIT_AUTHOR_EMAIL: "author@example.com",
+    GIT_COMMITTER_NAME: "Example Author",
+    GIT_COMMITTER_EMAIL: "author@example.com",
+};
+function git(cwd, ...args) {
+    return execFileSync("git", ["-c", "commit.gpgsign=false", "-c", "core.hooksPath=/dev/null", ...args], {
+        cwd,
+        env: gitEnv,
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+}
+/**
+ * A setup change set whose whole-file bytes are known, with the pin already
+ * satisfied and no lockfile to regenerate, checked out from a local clone, and
+ * a hub that approved it: a git repository whose HEAD holds a plan (its latest
+ * decision approves the bundle that holds the set) and an execution
+ * authorization, with the bundle stored and the hub's readiness executable
+ * installed. `binding` is the binding admission is expected to compute; it is
+ * never an input to materialize or verify.
+ */
+export function buildMaterializedFixture(roots, options = {}) {
+    const parent = mkdtempSync(join(tmpdir(), "launcher-apply-step-"));
+    roots.push(parent);
+    const origin = join(parent, "origin.git");
+    const clone = join(parent, "site");
+    mkdirSync(clone, { recursive: true });
+    git(clone, "init", "-b", "main");
+    git(clone, "config", "core.autocrlf", "false");
+    writeFileSync(join(clone, "README.md"), "# Site\n");
+    git(clone, "add", "README.md");
+    git(clone, "commit", "-m", "init");
+    execFileSync("git", ["init", "--bare", origin], { env: gitEnv, stdio: "ignore" });
+    git(clone, "remote", "add", "origin", origin);
+    git(clone, "push", "-u", "origin", "HEAD");
+    const baseCommit = git(clone, "rev-parse", "HEAD").trim();
+    const corpus = JSON.parse(read("docs/contracts/apply-change-set-digest.fixture.json"));
+    const set = structuredClone(corpus.changeSets.find((entry) => entry.name === "setup-site").changeSet);
+    set.repository.baseCommit = baseCommit;
+    set.keys = [];
+    set.deferred = [];
+    set.files = set.files.filter((file) => file.path !== "package-lock.json");
+    for (const item of set.items) {
+        if (item.act === "pin-starter" || item.act === "install")
+            item.satisfiedInBase = true;
+    }
+    const plan0 = basePlan();
+    set.planDigest = planDigest(plan0);
+    const texts = {};
+    for (const file of set.files) {
+        if (file.derived === true)
+            continue;
+        if (file.mode === "120000") {
+            const role = discoveryLinkRole(file.path);
+            const target = discoveryLinkTarget(role);
+            texts[file.path] = target;
+            file.before = null;
+            file.after = contentDigest(target);
+        }
+        else {
+            const text = `fixture ${file.path}\n`;
+            texts[file.path] = text;
+            file.before = null;
+            file.after = contentDigest(text);
+        }
+    }
+    const sealed = reseal(set);
+    const bundle = bundleOf(plan0, [{ id: SITE_ID, set: sealed }]);
+    const built = { ...sealed, bundle: bundle.bundleDigest };
+    const plan = approvedPlan(bundle.bundleDigest, plan0);
+    const override = typeof options.hub === "function" ? options.hub({ plan, bundle, set: built }) : (options.hub ?? {});
+    // What the planner stores carries the whole-file texts, so the command line can write from the store alone.
+    const stored = { ...built, texts: Object.entries(texts).map(([path, text]) => ({ path, text })).sort((left, right) => left.path.localeCompare(right.path)) };
+    const hub = hubRepo(roots, { plans: [plan], sets: options.storeSet === true ? [stored] : [], bundles: [bundle], ...override });
+    const binding = { kind: "approved", subjectDigest: bundle.bundleDigest };
+    return { clone: realpathSync(clone), hub: hub.hub, set: built, texts, binding, planPackages: committedPlanPackages(plan, SITE_ID), plan, bundle, origin };
+}
+/**
+ * The two phases of one plan. The setup set was approved (the plan's latest
+ * decision approves the bundle that holds it), materialized and merged into
+ * the clone's default branch (by squash by default), and the apply set was
+ * then computed against the merged base and is held by a later run's bundle,
+ * which the hub stores. `spawn` stands in for the package manager: it
+ * regenerates the lockfile the apply set's installs write.
+ */
+export function buildAdmittedFixture(roots, options = {}) {
+    let site;
+    const world = buildWorld({
+        ...options.world,
+        commitBase: (tree) => {
+            options.tree?.(tree);
+            site = siteRepo(roots, tree, { mergeStyle: options.mergeStyle ?? "squash" });
+            const origin = join(dirname(site.clone), "origin.git");
+            execFileSync("git", ["init", "--bare", origin], { env: gitEnv, stdio: "ignore" });
+            git(site.clone, "remote", "add", "origin", origin);
+            git(site.clone, "push", "-u", "origin", "main");
+            return site.baseCommit;
+        },
+    });
+    const override = typeof options.hub === "function" ? options.hub(world) : (options.hub ?? {});
+    const hub = hubRepo(roots, {
+        plans: [world.plan],
+        sets: options.storeApplySet === true ? [world.setup, world.apply] : [world.setup],
+        bundles: [world.approvedBundle, world.applyBundle],
+        ...override,
+    });
+    const packages = committedPlanPackages(world.plan, SITE_ID);
+    const spawn = async (request) => {
+        if (request.args.includes("--version"))
+            return { status: 0, stdout: "10.9.0\n", stderr: "" };
+        writeFileSync(join(request.cwd, "package-lock.json"), lockfileText(packages));
+        return { status: 0, stdout: "", stderr: "" };
+    };
+    return {
+        world,
+        hub: hub.hub,
+        clone: site.clone,
+        baseCommit: site.baseCommit,
+        sideTip: site.sideTip,
+        set: world.apply,
+        setup: world.setup,
+        texts: world.texts,
+        spawn,
+    };
+}
+function walk(root, skip, into, relative = "") {
+    let names;
+    try {
+        names = readdirSync(join(root, relative)).sort();
+    }
+    catch {
+        return;
+    }
+    for (const name of names) {
+        const path = relative === "" ? name : `${relative}/${name}`;
+        if (skip(path))
+            continue;
+        const stat = lstatSync(join(root, path));
+        if (stat.isDirectory())
+            walk(root, skip, into, path);
+        else if (stat.isSymbolicLink())
+            into.push(`${path} -> ${readlinkSync(join(root, path))}`);
+        else
+            into.push(`${path} ${createHash("sha256").update(readFileSync(join(root, path))).digest("hex")} ${stat.mode & 0o777}`);
+    }
+}
+/**
+ * Everything a refused materialize must leave alone: the clone's refs, HEAD,
+ * index, status and every file outside .git, and every file the hub keeps
+ * under clossys/.state. Two snapshots are equal only when nothing moved.
+ */
+export function writeSnapshot(clone, hub) {
+    const files = [];
+    walk(clone, (path) => path === ".git", files);
+    const hubFiles = [];
+    walk(join(hub, "clossys", ".state"), () => false, hubFiles);
+    return JSON.stringify({
+        refs: git(clone, "for-each-ref").trim(),
+        head: git(clone, "rev-parse", "HEAD").trim(),
+        branch: git(clone, "rev-parse", "--abbrev-ref", "HEAD").trim(),
+        index: git(clone, "ls-files", "-s").trim(),
+        status: git(clone, "status", "--porcelain", "--untracked-files=all").trim(),
+        files,
+        hub: hubFiles,
+    });
+}
+/** Whether the clone holds a local branch of this name. */
+export function branchExists(clone, branch) {
+    try {
+        git(clone, "show-ref", "--verify", "--quiet", `refs/heads/${branch}`);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** The ledger a clone holds at clossys/.state/installed.json, parsed, or null when it holds none. */
+export function readCloneLedger(clone) {
+    const path = join(clone, "clossys/.state/installed.json");
+    return existsSync(path) ? JSON.parse(readFileSync(path, "utf8")) : null;
+}
+//# sourceMappingURL=apply-step-fixture.js.map

package/dist/apply-step-fixture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-step-fixture.js","sourceRoot":"","sources":["../src/apply-step-fixture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9I,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,qBAAqB,EACrB,OAAO,EACP,YAAY,EACZ,MAAM,EACN,QAAQ,GACT,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAIjG,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,MAAM,EAAE,CAAC;AAElB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AAIjF,MAAM,MAAM,GAAG;IACb,GAAG,OAAO,CAAC,GAAG;IACd,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,8DAA8D;IACxF,iBAAiB,EAAE,WAAW;IAC9B,mBAAmB,EAAE,GAAG;IACxB,eAAe,EAAE,gBAAgB;IACjC,gBAAgB,EAAE,oBAAoB;IACtC,kBAAkB,EAAE,gBAAgB;IACpC,mBAAmB,EAAE,oBAAoB;CAC1C,CAAC;AAEF,SAAS,GAAG,CAAC,GAAW,EAAE,GAAG,IAAc;IACzC,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,0BAA0B,EAAE,GAAG,IAAI,CAAC,EAAE;QACpG,GAAG;QACH,GAAG,EAAE,MAAM;QACX,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAe,EAAE,UAAsC,EAAE;IAChG,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACnE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IAC/C,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,UAAU,CAAC,CAAC;IACpD,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC/B,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClF,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAEpF,CAAC;IACF,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,CAAE,CAAC,SAAS,CAAqB,CAAC;IAC3H,GAAG,CAAC,UAAU,CAAC,UAAU,GAAG,UAAU,CAAC;IACvC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;IAClB,GAAG,CAAC,KAAK,GAAI,GAAG,CAAC,KAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;IACvF,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAgB,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,KAAK,aAAa,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;YAAE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;IACxF,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,EAA4B,CAAC;IACnD,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAgB,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,SAAS;QACpC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAK,CAAC,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,IAAc,CAAC,GAAG,MAAM,CAAC;YACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,WAAW,IAAI,CAAC,IAAI,IAAI,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,IAAc,CAAC,GAAG,IAAI,CAAC;YAClC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,EAAyB,CAAC;IAChF,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACrH,4GAA4G;IAC5G,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IAC7J,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;IAC/H,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,UAAmB,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;IAClF,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5J,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAe,EAAE,UAAkC,EAAE;IACxF,IAAI,IAA6C,CAAC;IAClD,MAAM,KAAK,GAAG,UAAU,CAAC;QACvB,GAAG,OAAO,CAAC,KAAK;QAChB,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;YACnB,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;YACrB,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC;YACvD,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClF,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,UAAU,CAAC;QACzB,CAAC;KACF,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE;QACzB,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;QACjF,OAAO,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC;QAClD,GAAG,QAAQ;KACZ,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAkB,KAAK,EAAE,OAAO,EAAE,EAAE;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC7F,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9E,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC/C,CAAC,CAAC;IACF,OAAO;QACL,KAAK;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,KAAK,EAAE,IAAK,CAAC,KAAK;QAClB,UAAU,EAAE,IAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,IAAK,CAAC,OAAO;QACtB,GAAG,EAAE,KAAK,CAAC,KAAK;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,IAAmC,EAAE,IAAc,EAAE,QAAQ,GAAG,EAAE;IAC5F,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACzB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;aAChD,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;;YACrF,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;IAC9H,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,GAAW;IACtD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,IAAI,EAAE;QACvC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE;QAC5C,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE;QAC9D,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE;QAC1C,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,uBAAuB,CAAC,CAAC,IAAI,EAAE;QAC3E,KAAK;QACL,GAAG,EAAE,QAAQ;KACd,CAAC,CAAC;AACL,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,MAAc;IACxD,IAAI,CAAC;QACH,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,MAAM,EAAE,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IAC1D,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AACrF,CAAC"}