@dsh-enhanced/plugin-control-plane 0.1.32 → 0.1.34

package/lib/source-workspace.js

@@ -0,0 +1,458 @@
+import { createHash } from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { constants as fsConstants } from 'node:fs';
+import { lstat, mkdir, mkdtemp, open, realpath, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { delimiter, dirname, isAbsolute, join, relative, resolve } from 'node:path';
+import { ControlPlaneCliError } from './errors.js';
+// 工程层、非真实供应商证据：本模块产出的 prepared evidence 只来自隔离
+// worktree 内实际执行的 frozen 构建命令与 git 快照摘要；假 pnpm 壳仅可在
+// 测试中经 PATH 注入，测试名与注释须标注工程层用途。
+const pluginCatalogScope = 'plugins/README.md';
+/**
+ * Modify plans in these statuses still own a prepared worktree that nobody else
+ * can act on; once their TTL expires the worktree is garbage. Plans in any
+ * later status (ready-for-human-review and beyond) are left for the owner's
+ * release workflow regardless of TTL.
+ */
+const GC_ELIGIBLE_SOURCE_STATUSES = new Set(['pending-approval', 'approved', 'expired']);
+const MAX_PREPARED_FILES = 64;
+const MAX_PREPARED_FILE_BYTES = 65_536;
+const MAX_PREPARED_TOTAL_BYTES = 262_144;
+const MAX_COMMAND_OUTPUT_BYTES = 8_388_608;
+const COMMAND_TAIL_BYTES = 4_096;
+/**
+ * T3 安全根插件绝不允许经成长执行体的隔离区窄口改写——即使产物只是待批
+ * pending plan。命中即拒绝，不进入 worktree 流程。
+ */
+export const PROTECTED_PLUGIN_DENYLIST = new Set([
+    'assistant-policy', // 策略规则、授权寿命、急停根
+    'credentials-keychain', // 凭据根
+    'assistant-evaluation', // 评测答案根
+    'assistant-verifier', // 验证/私钥评测根
+    'assistant-deepseek-budget', // 预算上限根
+    'assistant-super-relay-budget', // 预算上限根
+    'assistant-skills', // sealed holdout 私钥与 holdout 数据集
+    'assistant-isolation', // 隔离沙箱机制本身
+    'assistant-web-owner', // owner 安全控制台
+    'plugin-control-plane', // 审批/激活控制面本身（自举提权面）
+]);
+export function assertPluginModificationAllowed(name) {
+    if (PROTECTED_PLUGIN_DENYLIST.has(name)) {
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', `plugin ${JSON.stringify(name)} is a protected safety root and cannot be modified by growth proposals`);
+    }
+}
+export async function resolveLocalExecutable(command, environment) {
+    const candidates = command === 'git' ? ['/usr/bin/git', '/bin/git'] : [join(dirname(process.execPath), 'pnpm'),
+        ...(environment.PATH ?? '').split(delimiter).filter(isAbsolute).map(directory => join(directory, 'pnpm'))];
+    const uid = process.getuid?.();
+    for (const candidate of candidates) {
+        try {
+            const canonical = await realpath(candidate);
+            const value = await lstat(canonical);
+            const directory = await lstat(dirname(canonical));
+            if (value.isFile() && !value.isSymbolicLink() && (value.mode & 0o111) !== 0 && (value.mode & 0o022) === 0
+                && (uid === undefined || value.uid === 0 || value.uid === uid) && directory.isDirectory() && (directory.mode & 0o002) === 0)
+                return canonical;
+        }
+        catch { /* next candidate */ }
+    }
+    throw new ControlPlaneCliError('SOURCE_BOUNDARY', `registered local ${command} executable is unavailable`);
+}
+const DEFAULT_COMMAND_TIMEOUT_MS = 60_000;
+const DEFAULT_COMMAND_OUTPUT_BYTES = 65_536;
+async function runLocalBounded(command, args, cwd, environment, options = {}) {
+    const executable = await resolveLocalExecutable(command, environment);
+    const capture = options.capture ?? false;
+    const maximumOutput = options.maximumOutput ?? DEFAULT_COMMAND_OUTPUT_BYTES;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_COMMAND_TIMEOUT_MS;
+    return new Promise((resolvePromise, reject) => {
+        options.signal?.throwIfAborted();
+        const child = spawn(executable, args, { cwd, env: environment, stdio: ['ignore', 'pipe', 'pipe'], shell: false });
+        const stdout = [];
+        const stderrChunks = [];
+        let stdoutBytes = 0;
+        let stderrBytes = 0;
+        let outputLimit = false;
+        let timedOut = false;
+        child.stdout.on('data', (chunk) => {
+            if (!capture)
+                return; // drain only: uncaptured output must never bound or kill (legacy localCommand semantics)
+            stdoutBytes += chunk.length;
+            if (stdoutBytes > maximumOutput) {
+                if (!outputLimit) {
+                    outputLimit = true;
+                    child.kill('SIGKILL');
+                }
+            }
+            else
+                stdout.push(chunk);
+        });
+        child.stderr.on('data', (chunk) => {
+            // Keep only a bounded sliding tail of stderr; it exists purely for the
+            // diagnostic suffix and the content-free log digest.
+            stderrBytes += chunk.length;
+            stderrChunks.push(chunk);
+            while (stderrChunks.length > 1 && stderrBytes - stderrChunks[0].length >= COMMAND_TAIL_BYTES) {
+                stderrBytes -= stderrChunks[0].length;
+                stderrChunks.shift();
+            }
+        });
+        const started = Date.now();
+        const cancel = () => { child.kill('SIGKILL'); };
+        const timer = setTimeout(() => { timedOut = true; cancel(); }, timeoutMs);
+        options.signal?.addEventListener('abort', cancel, { once: true });
+        child.once('error', () => { clearTimeout(timer); options.signal?.removeEventListener('abort', cancel); reject(new ControlPlaneCliError('EXECUTOR_FAILED', `local ${command} could not start`)); });
+        child.once('close', code => {
+            clearTimeout(timer);
+            options.signal?.removeEventListener('abort', cancel);
+            const durationMs = Date.now() - started;
+            const stdoutBuffer = Buffer.concat(stdout);
+            const stdoutText = stdoutBuffer.toString('utf8');
+            const stderrTail = Buffer.concat(stderrChunks).toString('utf8').slice(-COMMAND_TAIL_BYTES);
+            const logDigest = createHash('sha256').update(stdoutText).update('\0').update(stderrTail).digest('hex');
+            if (options.signal?.aborted) {
+                reject(options.signal.reason);
+                return;
+            }
+            if (timedOut) {
+                reject(new ControlPlaneCliError('EXECUTOR_TIMEOUT', `local ${command} ${JSON.stringify(args[0] ?? '')} exceeded its ${timeoutMs}ms deadline (log ${logDigest})`));
+                return;
+            }
+            if (outputLimit) {
+                reject(new ControlPlaneCliError('EXECUTOR_OUTPUT_LIMIT', `local ${command} ${JSON.stringify(args[0] ?? '')} exceeded the ${maximumOutput}-byte output bound (log ${logDigest})`));
+                return;
+            }
+            if (code !== 0) {
+                reject(new ControlPlaneCliError('EXECUTOR_FAILED', `local ${command} ${JSON.stringify(args[0] ?? '')} exited ${code} (log ${logDigest})${stderrTail === '' ? '' : `: ${stderrTail.trimEnd()}`}`));
+                return;
+            }
+            resolvePromise({ stdout: stdoutText, stdoutBuffer, stderrTail, durationMs, logDigest });
+        });
+    });
+}
+export async function runLocalBuffer(command, args, cwd, environment, options = {}) {
+    return (await runLocalBounded(command, args, cwd, environment, { ...options, capture: true })).stdoutBuffer;
+}
+export async function runLocalCommand(command, args, cwd, environment, options = {}) {
+    const result = await runLocalBounded(command, args, cwd, environment, options);
+    return options.capture === true ? result.stdout : '';
+}
+export async function changedSourcePaths(worktree, baseCommit, environment, signal) {
+    const tracked = await runLocalCommand('git', ['--literal-pathspecs', '-c', 'core.quotepath=false', 'diff', '--no-renames',
+        '--name-only', '-z', baseCommit, '--'], worktree, environment, { capture: true, maximumOutput: MAX_COMMAND_OUTPUT_BYTES, ...(signal ? { signal } : {}) });
+    const untracked = await runLocalCommand('git', ['--literal-pathspecs', '-c', 'core.quotepath=false', 'ls-files', '--others',
+        '--exclude-standard', '-z'], worktree, environment, { capture: true, maximumOutput: MAX_COMMAND_OUTPUT_BYTES, ...(signal ? { signal } : {}) });
+    return [...new Set(`${tracked}${untracked}`.split('\0').filter(Boolean))].sort();
+}
+export function sourcePathAllowed(path, name, mode = 'modify') {
+    const pluginRoot = `plugins/${name}`;
+    const withinPluginTree = path === pluginRoot || path.startsWith(`${pluginRoot}/`);
+    return mode === 'create' ? (withinPluginTree || path === pluginCatalogScope) : withinPluginTree;
+}
+export async function checkedSourceSnapshot(worktree, baseCommit, scopeInput, environment, preparedTree, signal) {
+    const temporary = await mkdtemp(join(tmpdir(), 'dsh-plugin-control-index-'));
+    try {
+        const scope = [...new Set(scopeInput.map(value => value.normalize('NFC').trim()))].sort();
+        if (scope.length === 0 || scope.some(value => value === ''))
+            throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'checked source scope is invalid');
+        const snapshotEnvironment = { ...environment, GIT_INDEX_FILE: join(temporary, 'index') };
+        await runLocalCommand('git', ['read-tree', preparedTree ?? baseCommit], worktree, snapshotEnvironment, signal ? { signal } : {});
+        if (preparedTree === undefined)
+            await runLocalCommand('git', ['--literal-pathspecs', 'add', '--all', '--', ...scope], worktree, snapshotEnvironment, signal ? { signal } : {});
+        const tree = await runLocalCommand('git', ['--literal-pathspecs', '-c', 'core.quotepath=false', 'ls-files', '--stage', '-z',
+            '--', ...scope], worktree, snapshotEnvironment, { capture: true, maximumOutput: MAX_COMMAND_OUTPUT_BYTES, ...(signal ? { signal } : {}) });
+        const patch = await runLocalCommand('git', ['--literal-pathspecs', '-c', 'core.quotepath=false', 'diff', '--cached', '--binary',
+            '--full-index', '--no-color', baseCommit, '--', ...scope], worktree, snapshotEnvironment, { capture: true, maximumOutput: MAX_COMMAND_OUTPUT_BYTES, ...(signal ? { signal } : {}) });
+        const binding = `${baseCommit}\0${JSON.stringify(scope)}\0`;
+        return {
+            checkedTreeDigest: createHash('sha256').update('dsh-source-tree-v2\0').update(binding).update(tree).digest('hex'),
+            checkedPatchDigest: createHash('sha256').update('dsh-source-patch-v2\0').update(binding).update(patch).digest('hex'),
+        };
+    }
+    finally {
+        await rm(temporary, { recursive: true, force: true });
+    }
+}
+/** Recheck the immutable prepared tree without rebuilding or executing candidate code. */
+export async function verifyPreparedSourceWorktree(plan, environment, signal) {
+    signal?.throwIfAborted();
+    if (plan.mode !== 'modify' || !plan.sourceCheck || plan.scope.length !== 1 || plan.scope[0] !== `plugins/${plan.name}`
+        || await realpath(plan.repository) !== plan.repository || await realpath(plan.worktree) !== plan.worktree) {
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'prepared source paths or scope changed');
+    }
+    if ((await runLocalCommand('git', ['rev-parse', 'HEAD'], plan.worktree, environment, { capture: true, ...(signal ? { signal } : {}) })).trim() !== plan.baseCommit) {
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'prepared worktree HEAD changed');
+    }
+    const changes = await changedSourcePaths(plan.worktree, plan.baseCommit, environment, signal);
+    if (changes.some(path => !sourcePathAllowed(path, plan.name, plan.mode))) {
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'prepared modification is outside its approved scope');
+    }
+    const checked = await checkedSourceSnapshot(plan.worktree, plan.baseCommit, plan.scope, environment, undefined, signal);
+    signal?.throwIfAborted();
+    if (checked.checkedTreeDigest !== plan.sourceCheck.treeDigest || checked.checkedPatchDigest !== plan.sourceCheck.patchDigest) {
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'prepared source digests changed');
+    }
+    return checked;
+}
+async function assertOwnerDirectory(path) {
+    const metadata = await lstat(path);
+    const uid = process.getuid?.();
+    if (metadata.isSymbolicLink() || !metadata.isDirectory()
+        || (uid !== undefined && metadata.uid !== 0 && metadata.uid !== uid)
+        || (metadata.mode & 0o022) !== 0) {
+        throw new ControlPlaneCliError('FILESYSTEM_STATE', `source state directory ${JSON.stringify(path)} is not an owner-owned non-symlink directory`);
+    }
+}
+/**
+ * Create a throwaway linked git worktree under the control-plane state root,
+ * detached at exactly baseCommit. Removal prunes the worktree registration and
+ * falls back to deleting the directory.
+ */
+export async function createIsolatedWorktree(input) {
+    if (!/^[a-f0-9]{40}$/u.test(input.baseCommit))
+        throw new ControlPlaneCliError('INVALID_ARGUMENT', 'base commit must be a 40-hex commit id');
+    await mkdir(input.stateRoot, { recursive: true, mode: 0o700 });
+    await assertOwnerDirectory(input.stateRoot);
+    const repository = await realpath(input.repository);
+    if (resolve(repository) !== repository)
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'repository path must be canonical');
+    const verified = (await runLocalCommand('git', ['rev-parse', '--verify', `${input.baseCommit}^{commit}`], repository, input.environment, { capture: true })).trim();
+    if (verified !== input.baseCommit)
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'base commit did not resolve to itself');
+    if (input.worktreeName !== undefined && !/^worktree-job-[a-f0-9]{64}$/u.test(input.worktreeName))
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'invalid durable worktree name');
+    const worktree = input.worktreeName === undefined
+        ? await mkdtemp(join(input.stateRoot, 'worktree-')) : join(input.stateRoot, input.worktreeName);
+    // Exclusive creation: a crash residue never becomes a fresh build workspace.
+    if (input.worktreeName !== undefined)
+        await mkdir(worktree, { mode: 0o700 });
+    try {
+        await runLocalCommand('git', ['worktree', 'add', '--detach', worktree, input.baseCommit], repository, input.environment);
+    }
+    catch (error) {
+        if (input.worktreeName === undefined)
+            await rm(worktree, { recursive: true, force: true });
+        // Durable acquisition failures retain ambiguous residue for explicit
+        // reconciliation; its persisted job remains unknown and occupies capacity.
+        throw error;
+    }
+    let removed = false;
+    const remove = async () => {
+        if (removed)
+            return;
+        if (input.worktreeName !== undefined) {
+            await removeSourceJobWorktree({ ...input, repository, worktree });
+            removed = true;
+            return;
+        }
+        removed = true;
+        try {
+            await runLocalCommand('git', ['worktree', 'remove', '--force', worktree], repository, input.environment);
+            await runLocalCommand('git', ['worktree', 'prune'], repository, input.environment).catch(() => undefined);
+        }
+        catch {
+            await rm(worktree, { recursive: true, force: true });
+            await runLocalCommand('git', ['worktree', 'prune'], repository, input.environment).catch(() => undefined);
+        }
+    };
+    return { worktree: await realpath(worktree), remove };
+}
+/** Host-only reconciliation of the exact durable resource; never rebuilds it. */
+export async function removeSourceJobWorktree(input) {
+    if (dirname(input.worktree) !== resolve(input.stateRoot)
+        || !/^worktree-job-[a-f0-9]{64}$/u.test(input.worktree.slice(input.stateRoot.length + 1))) {
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'durable worktree is outside its private root');
+    }
+    await mkdir(input.stateRoot, { recursive: true, mode: 0o700 });
+    await assertOwnerDirectory(input.stateRoot);
+    const metadata = await lstat(input.worktree).catch((error) => {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    });
+    if (metadata !== undefined) {
+        await assertOwnerDirectory(input.worktree);
+        const listing = await runLocalCommand('git', ['worktree', 'list', '--porcelain', '-z'], input.repository, input.environment, { capture: true });
+        const registration = listing.split('\0\0').find(entry => entry.split('\0')[0] === `worktree ${input.worktree}`);
+        if (registration === undefined) {
+            throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'durable worktree registration is unproven; operator inspection required');
+        }
+        else {
+            if (!registration.split('\0').includes(`HEAD ${input.baseCommit}`))
+                throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'durable worktree base identity changed');
+            const common = async (cwd) => (await runLocalCommand('git', ['rev-parse', '--path-format=absolute', '--git-common-dir'], cwd, input.environment, { capture: true })).trim();
+            const top = (await runLocalCommand('git', ['rev-parse', '--show-toplevel'], input.worktree, input.environment, { capture: true })).trim();
+            if (top !== input.worktree || await common(input.worktree) !== await common(input.repository))
+                throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'durable worktree repository identity changed');
+            await runLocalCommand('git', ['worktree', 'remove', '--force', input.worktree], input.repository, input.environment);
+        }
+    }
+    await runLocalCommand('git', ['worktree', 'prune'], input.repository, input.environment);
+    const listing = await runLocalCommand('git', ['worktree', 'list', '--porcelain', '-z'], input.repository, input.environment, { capture: true });
+    const remains = await lstat(input.worktree).then(() => true, (error) => {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    });
+    if (remains || listing.split('\0').includes(`worktree ${input.worktree}`))
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'durable worktree cleanup is unproven');
+}
+/**
+ * Write a bounded set of plugin files through O_NOFOLLOW handles. Every path is
+ * constrained to plugins/<name>/; the plugin root must already exist at the
+ * base commit (modify never creates a plugin root, and never touches
+ * plugins/README.md).
+ */
+export async function writeScopedPluginFiles(input) {
+    const { worktree, name, files } = input;
+    validateScopedPluginFiles(files);
+    await writeValidatedPluginFiles(worktree, name, files);
+}
+/** Validate bytes and paths before persisting a durable source job. */
+export function validateScopedPluginFiles(files) {
+    if (!Array.isArray(files))
+        throw new ControlPlaneCliError('INVALID_ARGUMENT', 'prepared files must be an array');
+    if (files.length < 1 || files.length > MAX_PREPARED_FILES) {
+        throw new ControlPlaneCliError('INVALID_ARGUMENT', `a prepared modification must carry 1..${MAX_PREPARED_FILES} files`);
+    }
+    const seen = new Set();
+    let totalBytes = 0;
+    for (const file of files) {
+        if (file === null || typeof file !== 'object' || typeof file.path !== 'string' || typeof file.content !== 'string')
+            throw new ControlPlaneCliError('INVALID_ARGUMENT', 'prepared file must contain text path and content');
+        const normalized = file.path.normalize('NFC');
+        if (normalized === '' || isAbsolute(normalized) || normalized.includes('\\')
+            || normalized.split('/').some(segment => segment === '' || segment === '.' || segment === '..')) {
+            throw new ControlPlaneCliError('SOURCE_BOUNDARY', `prepared file path escapes the plugin tree: ${JSON.stringify(file.path)}`);
+        }
+        if (normalized.split('/').some(segment => segment === '.gitattributes' || segment === '.gitmodules' || segment === '.git')) {
+            throw new ControlPlaneCliError('SOURCE_BOUNDARY', `prepared file changes Git archive control data: ${JSON.stringify(file.path)}`);
+        }
+        if (seen.has(normalized))
+            throw new ControlPlaneCliError('INVALID_ARGUMENT', `duplicate prepared file path: ${JSON.stringify(normalized)}`);
+        seen.add(normalized);
+        const bytes = Buffer.byteLength(file.content, 'utf8');
+        if (bytes > MAX_PREPARED_FILE_BYTES)
+            throw new ControlPlaneCliError('INVALID_ARGUMENT', `prepared file ${JSON.stringify(normalized)} exceeds the ${MAX_PREPARED_FILE_BYTES}-byte bound`);
+        totalBytes += bytes;
+        if (totalBytes > MAX_PREPARED_TOTAL_BYTES)
+            throw new ControlPlaneCliError('INVALID_ARGUMENT', `prepared files exceed the ${MAX_PREPARED_TOTAL_BYTES}-byte total bound`);
+    }
+}
+async function writeValidatedPluginFiles(worktree, name, files) {
+    const pluginRoot = resolve(worktree, 'plugins', name);
+    const rootMetadata = await lstat(pluginRoot).catch((error) => {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    });
+    if (rootMetadata === undefined || rootMetadata.isSymbolicLink() || !rootMetadata.isDirectory()) {
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', `plugin ${JSON.stringify(name)} root must already exist in the base commit; prepared modifications cannot create a plugin`);
+    }
+    for (const file of files) {
+        const normalized = file.path.normalize('NFC');
+        const segments = normalized.split('/');
+        // Every parent segment must be an existing non-symlink directory at the
+        // base commit; modify never creates directories.
+        let parent = pluginRoot;
+        for (const segment of segments.slice(0, -1)) {
+            parent = join(parent, segment);
+            const metadata = await lstat(parent).catch((error) => {
+                if (error.code === 'ENOENT')
+                    return undefined;
+                throw error;
+            });
+            if (metadata === undefined || metadata.isSymbolicLink() || !metadata.isDirectory()) {
+                throw new ControlPlaneCliError('SOURCE_BOUNDARY', `prepared file parent directory must already exist and must not be a symlink: ${JSON.stringify(normalized)}`);
+            }
+        }
+        const target = join(parent, segments[segments.length - 1]);
+        const outside = relative(pluginRoot, target);
+        if (outside === '' || outside.startsWith('..') || isAbsolute(outside)) {
+            throw new ControlPlaneCliError('SOURCE_BOUNDARY', `prepared file path escapes the plugin tree: ${JSON.stringify(file.path)}`);
+        }
+        const targetMetadata = await lstat(target).catch((error) => {
+            if (error.code === 'ENOENT')
+                return undefined;
+            throw error;
+        });
+        if (targetMetadata !== undefined && targetMetadata.isSymbolicLink()) {
+            throw new ControlPlaneCliError('SOURCE_BOUNDARY', `symlinked source path is forbidden: ${JSON.stringify(normalized)}`);
+        }
+        let handle;
+        try {
+            handle = await open(target, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_TRUNC | fsConstants.O_NOFOLLOW, 0o644);
+        }
+        catch (error) {
+            // O_NOFOLLOW reports a trailing symlink as ELOOP.
+            if (error.code === 'ELOOP') {
+                throw new ControlPlaneCliError('SOURCE_BOUNDARY', `symlinked source path is forbidden: ${JSON.stringify(normalized)}`);
+            }
+            throw error;
+        }
+        try {
+            await handle.truncate(0);
+            await handle.writeFile(file.content, 'utf8');
+        }
+        finally {
+            await handle.close();
+        }
+    }
+}
+/**
+ * A prepared modify worktree is garbage only while its plan is still waiting on
+ * the owner (pending/approved) and the plan's TTL has elapsed. Plans that
+ * reached ready-for-human-review or a release phase are retained for the
+ * owner's release workflow.
+ */
+export function preparedWorktreeIsGarbage(plan, now) {
+    return GC_ELIGIBLE_SOURCE_STATUSES.has(plan.status) && plan.expiresAt < now;
+}
+/** Parse `git worktree list --porcelain` into canonical linked-worktree paths. */
+export async function linkedWorktrees(repository, environment) {
+    const porcelain = await runLocalCommand('git', ['worktree', 'list', '--porcelain'], repository, environment, { capture: true, maximumOutput: MAX_COMMAND_OUTPUT_BYTES });
+    return porcelain.split('\n').filter(line => line.startsWith('worktree ')).map(line => resolve(line.slice('worktree '.length)));
+}
+/**
+ * Remove a prepared worktree registered against `repository`. Idempotent: an
+ * already-unregistered or missing directory resolves successfully after
+ * pruning. The caller is responsible for proving the path is still inside the
+ * control-plane state root.
+ */
+export async function pruneRegisteredWorktree(input) {
+    try {
+        await runLocalCommand('git', ['worktree', 'remove', '--force', input.worktree], input.repository, input.environment);
+    }
+    catch {
+        await rm(input.worktree, { recursive: true, force: true });
+    }
+    await runLocalCommand('git', ['worktree', 'prune'], input.repository, input.environment).catch(() => undefined);
+}
+/**
+ * Remove prepared modify worktrees whose plans expired while still waiting on
+ * the owner. Every removed path must (1) belong to a modify plan, (2) be a
+ * descendant of the control-plane state root and (3) still be a linked
+ * worktree of the plan's repository; anything outside those proofs is left
+ * untouched. Idempotent. Shared by the service and the owner CLI.
+ */
+export async function gcPreparedModifyWorktrees(input) {
+    const stateRoot = resolve(join(input.statePath, 'source-worktrees'));
+    const removed = [];
+    for (const plan of input.store.listModifySourcePlans()) {
+        if (!preparedWorktreeIsGarbage(plan, input.now))
+            continue;
+        const worktree = resolve(plan.worktree);
+        const inside = relative(stateRoot, worktree);
+        if (inside === '' || inside.startsWith('..') || isAbsolute(inside))
+            continue;
+        const linked = await linkedWorktrees(plan.repository, input.environment).catch(() => []);
+        if (!linked.includes(worktree))
+            continue;
+        input.store.expirePreparedSourcePlan({ planId: plan.id, expectedRevision: plan.revision, now: input.now });
+        await pruneRegisteredWorktree({ repository: plan.repository, worktree, environment: input.environment });
+        removed.push(worktree);
+    }
+    return Object.freeze({ removed: Object.freeze(removed) });
+}
+//# sourceMappingURL=source-workspace.js.map

package/lib/source-workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-workspace.js","sourceRoot":"","sources":["../src/source-workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAIlD,8CAA8C;AAC9C,oDAAoD;AACpD,+BAA+B;AAE/B,MAAM,kBAAkB,GAAG,mBAAmB,CAAA;AAE9C;;;;;GAKG;AACH,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;AAC7G,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAC7B,MAAM,uBAAuB,GAAG,MAAM,CAAA;AACtC,MAAM,wBAAwB,GAAG,OAAO,CAAA;AACxC,MAAM,wBAAwB,GAAG,SAAS,CAAA;AAC1C,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAEhC;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IACpE,kBAAkB,EAAE,gBAAgB;IACpC,sBAAsB,EAAE,MAAM;IAC9B,sBAAsB,EAAE,QAAQ;IAChC,oBAAoB,EAAE,WAAW;IACjC,2BAA2B,EAAE,QAAQ;IACrC,8BAA8B,EAAE,QAAQ;IACxC,kBAAkB,EAAE,iCAAiC;IACrD,qBAAqB,EAAE,WAAW;IAClC,qBAAqB,EAAE,cAAc;IACrC,sBAAsB,EAAE,oBAAoB;CAC7C,CAAC,CAAA;AAaF,MAAM,UAAU,+BAA+B,CAAC,IAAY;IAC1D,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAA;IAC3J,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAuB,EAAE,WAA8B;IAClG,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC5G,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;IAC5G,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC9B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;YACpI,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;mBACpG,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAA;QACjJ,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,oBAAoB,OAAO,4BAA4B,CAAC,CAAA;AAC5G,CAAC;AAED,MAAM,0BAA0B,GAAG,MAAM,CAAA;AACzC,MAAM,4BAA4B,GAAG,MAAM,CAAA;AAkB3C,KAAK,UAAU,eAAe,CAAC,OAAuB,EAAE,IAAuB,EAAE,GAAW,EAC1F,WAA8B,EAAE,UAA2B,EAAE;IAC7D,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAA;IACxC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,4BAA4B,CAAA;IAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,0BAA0B,CAAA;IACjE,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC5C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QACjH,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,MAAM,YAAY,GAAa,EAAE,CAAA;QACjC,IAAI,WAAW,GAAG,CAAC,CAAC;QAAC,IAAI,WAAW,GAAG,CAAC,CAAC;QAAC,IAAI,WAAW,GAAG,KAAK,CAAC;QAAC,IAAI,QAAQ,GAAG,KAAK,CAAA;QACvF,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,CAAC,OAAO;gBAAE,OAAM,CAAC,yFAAyF;YAC9G,WAAW,IAAI,KAAK,CAAC,MAAM,CAAA;YAC3B,IAAI,WAAW,GAAG,aAAa,EAAE,CAAC;gBAAC,IAAI,CAAC,WAAW,EAAE,CAAC;oBAAC,WAAW,GAAG,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBAAC,CAAC;YAAC,CAAC;;gBAC/F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,uEAAuE;YACvE,qDAAqD;YACrD,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACrD,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC;gBAC9F,WAAW,IAAI,YAAY,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;gBAAC,YAAY,CAAC,KAAK,EAAE,CAAA;YAC9D,CAAC;QACH,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC1B,MAAM,MAAM,GAAG,GAAS,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC,CAAA;QACpD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;QACxE,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,SAAS,OAAO,kBAAkB,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QACjM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACzE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAA;YACvC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAC,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YAC5F,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAA;YAC1F,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACvG,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YACtE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,SAAS,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,iBAAiB,SAAS,oBAAoB,SAAS,GAAG,CAAC,CAAC,CAAA;gBACjK,OAAM;YACR,CAAC;YACD,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,oBAAoB,CAAC,uBAAuB,EAAE,SAAS,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,iBAAiB,aAAa,2BAA2B,SAAS,GAAG,CAAC,CAAC,CAAA;gBACjL,OAAM;YACR,CAAC;YACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,oBAAoB,CAAC,iBAAiB,EAC/C,SAAS,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,IAAI,SAAS,SAAS,IAAI,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;gBAChJ,OAAM;YACR,CAAC;YACD,cAAc,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAA;QACzF,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB,EAAE,IAAuB,EAAE,GAAW,EAChG,WAA8B,EAAE,UAA2B,EAAE;IAC7D,OAAO,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,YAAY,CAAA;AAC7G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAuB,EAAE,IAAuB,EAAE,GAAW,EACjG,WAA8B,EAAE,UAA2B,EAAE;IAC7D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IAC9E,OAAO,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,UAAkB,EAAE,WAA8B,EAAE,MAAoB;IACjI,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,cAAc;QACvH,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,wBAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC3J,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,UAAU;QACzH,oBAAoB,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,wBAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAChJ,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,OAAO,GAAG,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AAClF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAY,EAAE,OAA4B,QAAQ;IAChG,MAAM,UAAU,GAAG,WAAW,IAAI,EAAE,CAAA;IACpC,MAAM,gBAAgB,GAAG,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAA;IACjF,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,gBAAgB,IAAI,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAA;AACjG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAAgB,EAAE,UAAkB,EAAE,UAA6B,EAC7G,WAA8B,EAAE,YAAqB,EAAE,MAAoB;IAC3E,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAA;IAC5E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACzF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAA;QACjJ,MAAM,mBAAmB,GAAG,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAA;QACxF,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,IAAI,UAAU,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAChI,IAAI,YAAY,KAAK,SAAS;YAAE,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAC9K,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI;YACzH,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,wBAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC5I,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU;YAC7H,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EACxF,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,wBAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC5F,MAAM,OAAO,GAAG,GAAG,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAA;QAC3D,OAAO;YACL,iBAAiB,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACjH,kBAAkB,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SACrH,CAAA;IACH,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAAC,CAAC;AACrE,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IAAsB,EAAE,WAA8B,EACvG,MAAoB;IACpB,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,CAAC,IAAI,EAAE;WACjH,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,UAAU,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5G,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,wCAAwC,CAAC,CAAA;IAC7F,CAAC;IACD,IAAI,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QACnK,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;IAC7F,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,qDAAqD,CAAC,CAAA;IAC1G,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IACvH,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,IAAI,OAAO,CAAC,iBAAiB,KAAK,IAAI,CAAC,WAAW,CAAC,UAAU,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QAC7H,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAA;IACtF,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAY;IAC9C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC9B,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;WACnD,CAAC,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,CAAC,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG,CAAC;WACjE,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,0BAA0B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAA;IAClJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAE5C;IACC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,wCAAwC,CAAC,CAAA;IAC3I,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9D,MAAM,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAC3C,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACnD,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,UAAU;QAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAA;IAC9H,MAAM,QAAQ,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,UAAU,WAAW,CAAC,EAAE,UAAU,EAClH,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC/C,IAAI,QAAQ,KAAK,KAAK,CAAC,UAAU;QAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,uCAAuC,CAAC,CAAA;IAC7H,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,+BAA+B,CAAC,CAAA;IACpL,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,KAAK,SAAS;QAC/C,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,CAAA;IACjG,6EAA6E;IAC7E,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5E,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;IAC1H,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;YAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1F,qEAAqE;QACrE,2EAA2E;QAC3E,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACvC,IAAI,OAAO;YAAE,OAAM;QACnB,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,uBAAuB,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;YACjE,OAAO,GAAG,IAAI,CAAA;YACd,OAAM;QACR,CAAC;QACD,OAAO,GAAG,IAAI,CAAA;QACd,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YACxG,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC3G,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACpD,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC3G,CAAC;IACH,CAAC,CAAA;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;AACvD,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAE7C;IACC,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;WACnD,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,8CAA8C,CAAC,CAAA;IACnG,CAAC;IACD,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9D,MAAM,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAC3C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QAClF,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QAC7C,MAAM,KAAK,CAAA;IACb,CAAC,CAAC,CAAA;IACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC1C,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/I,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC/G,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,yEAAyE,CAAC,CAAA;QAC9H,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,KAAK,CAAC,UAAU,EAAE,CAAC;gBAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,wCAAwC,CAAC,CAAA;YAC/J,MAAM,MAAM,GAAG,KAAK,EAAE,GAAW,EAAmB,EAAE,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YACpM,MAAM,GAAG,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YACzI,IAAI,GAAG,KAAK,KAAK,CAAC,QAAQ,IAAI,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,8CAA8C,CAAC,CAAA;YAChM,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QACtH,CAAC;IACH,CAAC;IACD,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;IACxF,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/I,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,KAA4B,EAAE,EAAE;QAC5F,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACzC,MAAM,KAAK,CAAA;IACb,CAAC,CAAC,CAAA;IACF,IAAI,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,KAAK,CAAC,QAAQ,EAAE,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAA;AACtK,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAE5C;IACC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;IACvC,yBAAyB,CAAC,KAAK,CAAC,CAAA;IAChC,MAAM,yBAAyB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;AACxD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,yBAAyB,CAAC,KAAkC;IAC1E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAA;IAChH,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QAC1D,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,yCAAyC,kBAAkB,QAAQ,CAAC,CAAA;IACzH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,kDAAkD,CAAC,CAAA;QAC1N,MAAM,UAAU,GAAW,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACrD,IAAI,UAAU,KAAK,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;eACvE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;YAClG,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,+CAA+C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC/H,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,gBAAgB,IAAI,OAAO,KAAK,aAAa,IAAI,OAAO,KAAK,MAAM,CAAC,EAAE,CAAC;YAC3H,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,mDAAmD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACnI,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,iCAAiC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAC3I,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACrD,IAAI,KAAK,GAAG,uBAAuB;YAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,iBAAiB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,gBAAgB,uBAAuB,aAAa,CAAC,CAAA;QACxL,UAAU,IAAI,KAAK,CAAA;QACnB,IAAI,UAAU,GAAG,wBAAwB;YAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,6BAA6B,wBAAwB,mBAAmB,CAAC,CAAA;IACzK,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,QAAgB,EAAE,IAAY,EAAE,KAAkC;IACzG,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;IACrD,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QAClF,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QAC7C,MAAM,KAAK,CAAA;IACb,CAAC,CAAC,CAAA;IACF,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/F,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4FAA4F,CAAC,CAAA;IAC/K,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACtC,wEAAwE;QACxE,iDAAiD;QACjD,IAAI,MAAM,GAAG,UAAU,CAAA;QACvB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YAC9B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;gBAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAA;gBAC7C,MAAM,KAAK,CAAA;YACb,CAAC,CAAC,CAAA;YACF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBACnF,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,gFAAgF,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;YACjK,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAA;QAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QAC5C,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,+CAA+C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC/H,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;YAChF,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YAC7C,MAAM,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;QACF,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,CAAC,cAAc,EAAE,EAAE,CAAC;YACpE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,uCAAuC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QACxH,CAAC;QACD,IAAI,MAAM,CAAA;QACV,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EACxB,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QACrG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACtD,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,uCAAuC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;YACxH,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;QACD,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IACjH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAA2C,EAAE,GAAW;IAChG,OAAO,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,GAAG,CAAA;AAC7E,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,WAA8B;IACtF,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,UAAU,EAC5F,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,wBAAwB,EAAE,CAAC,CAAA;IAC1E,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AAChI,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAE7C;IACC,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;IACtH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;AACjH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAK/C;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAA;IACpE,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,qBAAqB,EAAwB,EAAE,CAAC;QAC7E,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;YAAE,SAAQ;QACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QAC5C,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,SAAQ;QAC5E,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAsB,EAAE,CAAC,EAAE,CAAC,CAAA;QAC3G,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAQ;QACxC,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;QAC1G,MAAM,uBAAuB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;QACxG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;AAC3D,CAAC"}

package/lib/sqlite.d.ts

@@ -1,5 +1,5 @@
 import { DatabaseSync } from 'node:sqlite';
-export declare const controlPlaneSchemaVersion = 11;
+export declare const controlPlaneSchemaVersion = 23;
 export declare function controlPlaneOperationReceiptDigest(idempotencyKey: string, operation: string, inputDigest: string, resultJson: string, createdAt: number): string;
 export declare class ControlPlaneDatabaseError extends Error {
     readonly code: 'invalid-path' | 'schema-too-new' | 'unsafe-file';

package/lib/sqlite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../src/sqlite.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,eAAO,MAAM,yBAAyB,KAAK,CAAA;AAE3C,wBAAgB,kCAAkC,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAC/G,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,aAAa;gBAAvD,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,aAAa,EAAE,OAAO,EAAE,MAAM;CAI9F;AAmoBD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CA0BnE"}
+{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../src/sqlite.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,eAAO,MAAM,yBAAyB,KAAK,CAAA;AAyC3C,wBAAgB,kCAAkC,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAC/G,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,aAAa;gBAAvD,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,aAAa,EAAE,OAAO,EAAE,MAAM;CAI9F;AAmjCD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAoDnE"}