@endora-commerce/cli 0.100.0

package/dist/new-instance/modules.d.ts

@@ -0,0 +1,188 @@
+import { type EnvironmentInput } from '@endora-commerce/contracts';
+import { type ResolvedPackage } from './host.js';
+/** One module package, as this command needs it. */
+export interface ModuleCandidate {
+    readonly id: string;
+    readonly packageName: string;
+    /**
+     * The version **this package** declares about itself, and the source of the
+     * `^` range the instance's manifest carries for it.
+     *
+     * It was read here and dropped on the way to the template, which had the
+     * platform's version in scope and wrote that onto every module. That is
+     * correct only while a release moves every package together, and a release
+     * does not — see {@link PlannedModulePackage} in `template.ts`.
+     */
+    readonly version: string;
+    /** The manifest's own `dependencies`, which the closure walks. */
+    readonly dependencies: readonly string[];
+    /**
+     * The module ids of the manifest's `acknowledgedDependencies`, which the
+     * closure walks **exactly as** `dependencies` — because the platform does.
+     *
+     * The two spellings differ in one thing only: `acknowledgedDependencies`
+     * withdraws the *install ordering* a `dependencies` entry claims, for an edge
+     * whose ordering would close a cycle. `carts` names `promotions` there for
+     * that reason and no other, and its own manifest says the edge *"is a real
+     * bind: a cart that cannot resolve its discount must not quote a figure it
+     * cannot justify"*. `assertLockedModulesPresent` agrees and makes no
+     * distinction: a module named in **either** array that the deployment does
+     * not ship is `ReducedDeploymentError`, thrown out of `loadModulePresence`
+     * before anything listens.
+     *
+     * So a set derived over `dependencies` alone is a set the platform refuses
+     * to boot, and that is not a hypothesis — it is what the instance acceptance
+     * criterion's A4 and A15 were, measured on 2026-09-14 with a registry
+     * install's discovery shape: *"promotions — not shipped by this deployment,
+     * and it is needed: carts — acknowledgedDependencies, port
+     * `promotionService`"*. Both assertions are the same failure, because
+     * `pnpm run start` and the instance's own `admin:create` both compose.
+     *
+     * **Why it was invisible until an instance installed from a registry.** The
+     * criterion's `tarball` mode pins every auto-installed peer as a real
+     * dependency of the instance — `mod-promotions` among them, because
+     * `mod-carts` peer-depends on it — which puts it at the top level of
+     * `node_modules`, where the platform's package discovery looks. A registry
+     * install leaves it inside `.pnpm`, where that walk deliberately does not.
+     * The tarball tree was therefore wider than any client's, and it was the only
+     * tree this had ever been measured on. **Since 2026-09-15 it is not**: the
+     * criterion still has to pin those peers for the install to resolve at all,
+     * and it takes the module packages among them back off the top level once it
+     * has, so the tree it measures is the tree a registry install produces. Its
+     * A16 is the assertion over that, in either supply mode.
+     *
+     * It stays a separate field rather than being folded into `dependencies` so
+     * the ordering the manifest withdrew is still withdrawn here, and so the F2
+     * refusal can keep naming the module that asked.
+     */
+    readonly acknowledged: readonly string[];
+    /** `activation.nonDeactivatable` — the required predicate's subject. */
+    readonly required: boolean;
+    /** The manifest's `activation.reason`, which the refusal prints (§3.3). */
+    readonly reason: string | undefined;
+    /**
+     * The `license` the **package** declares, verbatim — or, for a module the
+     * platform carries ({@link carriedByHost}), the platform's own.
+     *
+     * The install verb's default set excludes a separately licensed module
+     * ({@link separatelyLicensed}, D-270), and a package's licence is a fact about
+     * the package rather than about the manifest inside it — the convention
+     * `check-release-intent`'s header states for a paid package. Absent when the
+     * package declares none, which is not a claim of separate terms.
+     */
+    readonly license?: string | undefined;
+    /**
+     * True when the **platform package itself** carries this module.
+     *
+     * `_lifecycle` is the one today (D-160.11: *"it is the one module the
+     * packaging sweep does not turn into a package"*), and §3.2 counts it that
+     * way — *"25 are packages and `_lifecycle` arrives with the platform"*. Such
+     * a module is in the set and gets **no `dependencies` entry**: an instance
+     * that named it would be asking a registry for a package nobody publishes.
+     *
+     * Derived, never a list: it is a module the platform's **own `exports` map**
+     * publishes a manifest through, so a second host-carried module needs no edit
+     * here and one that becomes a package stops being carried in the same run.
+     */
+    readonly carriedByHost: boolean;
+    /**
+     * The manifest's own `env` — what this module reads from the environment.
+     *
+     * Read here because this is the one place in the run where the **installed**
+     * manifests are in hand, and a module's declaration reaches a client's
+     * `.env.example` only through them (`specs/123-oss-install-experience/` T3-B).
+     * A manifest whose `env` is not a declaration contributes nothing rather than
+     * refusing the run: it is a published artefact of another version of the
+     * platform, and this file already reads one loosely for that reason.
+     */
+    readonly env: readonly EnvironmentInput[];
+}
+/**
+ * Is this licence one of **separate terms** — the paid tier's convention?
+ *
+ * The `SEE LICENSE IN <file>` form and `UNLICENSED`: the two npm spellings of
+ * "these terms are not an open-source licence", and the ones D-270 names. Any
+ * other value, and no value at all, is not: the open core's packages declare
+ * `MIT`, and a package that declares nothing has claimed no terms of its own.
+ */
+export declare function separatelyLicensed(license: string | undefined): boolean;
+/**
+ * Which modules a default is seeded with when no `--module` was given.
+ *
+ * - `required` — `instance-tree.md` R3.2's smallest set that composes: the
+ *   modules declaring `activation.nonDeactivatable`. `endora new instance`'s.
+ * - `available` — every module the run resolved whose package is not
+ *   {@link separatelyLicensed}: the install verb's (D-270). The required set is
+ *   the floor either way; the closure and its refusals are the same code.
+ *
+ * A policy rather than a list, so the install verb names no module (125 FR-143)
+ * and the population moves with the packages resolved (D-100).
+ */
+export type ModuleSeedPolicy = 'required' | 'available';
+/** What a resolution decided, before a single file is planned. */
+export interface ModuleSetResolution {
+    /** Every id in the set, sorted, so the manifest a run writes is reproducible. */
+    readonly ids: readonly string[];
+    /** The ids the operator asked for, before the closure. Empty for the default. */
+    readonly requested: readonly string[];
+    /** The ids the closure added on top of `requested` (or of the required set). */
+    readonly closure: readonly string[];
+    /**
+     * True when no `--module` was given and a default was written — §3.2's
+     * smallest set, or the install verb's `available` seed (D-270).
+     */
+    readonly defaulted: boolean;
+    readonly candidates: ReadonlyMap<string, ModuleCandidate>;
+}
+/**
+ * The required set — the predicate `requiredModulesFrom` implements.
+ *
+ * See the file header: this is the one derived fact this file states a second
+ * time, and T134 replaces it with the platform's own function.
+ */
+export declare function requiredModuleIds(candidates: ReadonlyMap<string, ModuleCandidate>): readonly string[];
+/** What one resolution read off the packages installed beside the target. */
+export interface LoadedCandidates {
+    readonly candidates: ReadonlyMap<string, ModuleCandidate>;
+    /**
+     * The platform's own environment-input declaration, or empty.
+     *
+     * It comes back beside the candidates because it is read in the same pass
+     * over the same entry points ({@link HostDeclarations}), and because the two
+     * are the two halves of one answer: what a scaffolded instance reads from its
+     * environment is the platform's declaration unioned with the manifests of the
+     * modules it installed, and a caller holding one half without the other would
+     * write a file that is short by the other.
+     */
+    readonly platformEnv: readonly EnvironmentInput[];
+}
+/**
+ * Every module package this run resolved, with its own manifest read.
+ *
+ * A package whose manifest cannot be imported, or whose manifest declares no
+ * `id`, is **F7** and never a skip: a module set short by however many
+ * manifests failed to load is a manifest the client installs and a set the
+ * platform then composes differently, with nothing in either tree to say so.
+ */
+export declare function loadModuleCandidates(packages: ReadonlyMap<string, ResolvedPackage>, host?: ResolvedPackage | undefined): Promise<LoadedCandidates>;
+/**
+ * What a scaffolded instance reads from its environment — the whole population,
+ * derived and never listed (`specs/123-oss-install-experience/` FR-010).
+ *
+ * The platform's declaration first, then each **installed** module's, in module
+ * order, so a name that has migrated between the two carries the platform's
+ * sentence (`unionEnvironmentInputs`). The set of modules is this run's, so a
+ * different `--module` set is a different population with nothing here edited.
+ */
+export declare function instanceEnvironmentInputs(platformEnv: readonly EnvironmentInput[], modules: readonly ModuleCandidate[]): readonly EnvironmentInput[];
+/**
+ * The set, closed and refused (§3.1, §3.2, §3.4).
+ *
+ * Pure over its two inputs, so its proofs enter at the top of the analysis
+ * (issue #130) — a fixture supplies candidates and a request, never a
+ * pre-computed set.
+ */
+export declare function resolveModuleSet(requested: readonly string[], candidates: ReadonlyMap<string, ModuleCandidate>, options?: {
+    readonly seed?: ModuleSeedPolicy | undefined;
+}): ModuleSetResolution;
+//# sourceMappingURL=modules.d.ts.map

package/dist/new-instance/modules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.d.ts","sourceRoot":"","sources":["../../src/new-instance/modules.ts"],"names":[],"mappings":"AA2CA,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAyC,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAExF,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kEAAkE;IAClE,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;;;;;;;;OASG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC;;;;;;;;;OASG;IACH,QAAQ,CAAC,GAAG,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAIvE;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,WAAW,CAAC;AAExD,kEAAkE;AAClE,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,QAAQ,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAC3D;AAoCD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/C,SAAS,MAAM,EAAE,CAEnB;AA6KD,6EAA6E;AAC7E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC1D;;;;;;;;;OASG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACnD;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,EAC9C,IAAI,CAAC,EAAE,eAAe,GAAG,SAAS,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAqD3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,SAAS,gBAAgB,EAAE,EACxC,OAAO,EAAE,SAAS,eAAe,EAAE,GAClC,SAAS,gBAAgB,EAAE,CAK7B;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,EAChD,OAAO,GAAE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAA;CAAO,GAC7D,mBAAmB,CA6IrB"}

package/dist/new-instance/modules.js

@@ -0,0 +1,392 @@
+/**
+ * The module set an instance installs — derived, closed, and refused before
+ * anything is written (`contracts/instance-tree.md` §3).
+ *
+ * ## It is never a list
+ *
+ * §3.2: with no `--module` the command writes **the smallest set that
+ * composes** — the modules declaring `activation.nonDeactivatable`, closed over
+ * the manifests' `dependencies` **and their `acknowledgedDependencies`**, which
+ * bind exactly as hard and which {@link ModuleCandidate.acknowledged} explains.
+ * The number is derived on every run and appears in no source file (D-100):
+ * un-locking a module changes the default in the same run, and nothing here has
+ * to be edited for it.
+ *
+ * That is `endora new instance`'s default. `endora install`'s is wider (D-270):
+ * every module package the run resolved that is not separately licensed,
+ * closed the same way. Both are {@link resolveModuleSet} with a
+ * {@link ModuleSeedPolicy}, so there is one derivation and not two.
+ *
+ * ## Where the manifests come from
+ *
+ * §3.4: from the packages the command **resolved** — a module package publishes
+ * its manifest as its root export (`"." -> ./dist/manifest.js`), so the
+ * declaration this reads is the one the platform will read when it composes
+ * that same install. It is imported through the package's own `exports` map
+ * rather than by a path into it, so a package that lays its build out
+ * differently is followed rather than missed.
+ *
+ * ## The required predicate, and the one thing this file owes T134
+ *
+ * {@link requiredModuleIds} is the predicate `requiredModulesFrom` implements
+ * in `@endora-commerce/platform/composition` — *a manifest whose `activation`
+ * carries `nonDeactivatable`* — and it is written here rather than imported
+ * because this package depends on `@endora-commerce/contracts` and not on the
+ * platform. **That is a second copy of a derived fact and it is exactly what
+ * T134 closes** (`tasks.md` Phase 4: *"using `requiredModulesFrom(manifests)`
+ * and the platform's own message. Never a second list (D-100)"*). It is
+ * confined to one four-line function, with the reason on it, so the replacement
+ * is a deletion rather than a search.
+ */
+import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { EnvironmentInputsSchema, unionEnvironmentInputs, } from '@endora-commerce/contracts';
+import { InstanceHostError, InstanceInputError } from './host.js';
+/**
+ * Is this licence one of **separate terms** — the paid tier's convention?
+ *
+ * The `SEE LICENSE IN <file>` form and `UNLICENSED`: the two npm spellings of
+ * "these terms are not an open-source licence", and the ones D-270 names. Any
+ * other value, and no value at all, is not: the open core's packages declare
+ * `MIT`, and a package that declares nothing has claimed no terms of its own.
+ */
+export function separatelyLicensed(license) {
+    if (license === undefined)
+        return false;
+    const value = license.trim();
+    return /^SEE LICENSE IN\b/i.test(value) || value === 'UNLICENSED';
+}
+/**
+ * The environment inputs a manifest declares, or none.
+ *
+ * Parsed rather than trusted, and a declaration this build cannot read is
+ * **dropped rather than refused** — see {@link RawManifest}. The consequence of
+ * dropping one is a name missing from a client's `.env.example`, which is the
+ * defect this feature closes; the consequence of refusing would be an instance
+ * that cannot be scaffolded at all because one installed package ships a field
+ * shape from a newer platform. The second is worse, and `check:env-inputs`
+ * refuses a malformed declaration in the tree that authored it, which is where
+ * the finding belongs.
+ */
+function environmentInputsOf(value) {
+    if (!Array.isArray(value))
+        return [];
+    const parsed = EnvironmentInputsSchema.safeParse(value);
+    return parsed.success ? parsed.data : [];
+}
+/**
+ * The required set — the predicate `requiredModulesFrom` implements.
+ *
+ * See the file header: this is the one derived fact this file states a second
+ * time, and T134 replaces it with the platform's own function.
+ */
+export function requiredModuleIds(candidates) {
+    return [...candidates.values()].filter((entry) => entry.required).map((entry) => entry.id);
+}
+/**
+ * The file a package's **own `exports` map** publishes as its root export.
+ *
+ * Derived from the package's declaration rather than guessed at, for the reason
+ * feature 080's T041a gives about specifiers: nothing in the tree spells
+ * `dist/manifest.js`, and a package that lays its build out differently is
+ * followed rather than missed. A package that publishes no root export is F7 —
+ * its manifest is not reachable by name, which is how the platform will reach
+ * it too.
+ */
+function conditionTarget(entry) {
+    if (typeof entry === 'string')
+        return entry;
+    if (entry === null || typeof entry !== 'object')
+        return undefined;
+    const record = entry;
+    const candidate = record['import'] ?? record['default'] ?? record['node'];
+    return typeof candidate === 'string' ? candidate : undefined;
+}
+function rootEntryOf(pkg) {
+    const exports = pkg.manifest['exports'];
+    const root = typeof exports === 'string'
+        ? exports
+        : exports !== null && typeof exports === 'object'
+            ? exports['.']
+            : undefined;
+    const target = conditionTarget(root) ?? conditionTarget(pkg.manifest['main']);
+    if (target === undefined) {
+        throw new InstanceHostError('F7', `${pkg.name} publishes no root export, so its manifest — the \`dependencies\` the ` +
+            `module set is closed over and the \`activation\` the required set is derived from — ` +
+            `cannot be read by name. Nothing is written.`);
+    }
+    return join(pkg.dir, target);
+}
+/**
+ * Every JavaScript entry point a package's own `exports` map publishes.
+ *
+ * Used to ask the **host** which modules it carries: a subpath is a candidate
+ * because the package declares it, never because a name was written here. A
+ * wildcard subpath and a non-`.js` target (`./theme.css`, `./package.json`) are
+ * outside the question by construction — neither can carry a manifest.
+ */
+function exportedEntriesOf(pkg) {
+    const exports = pkg.manifest['exports'];
+    if (exports === null || typeof exports !== 'object')
+        return [];
+    const entries = [];
+    for (const [subpath, entry] of Object.entries(exports)) {
+        if (subpath.includes('*'))
+            continue;
+        const target = conditionTarget(entry);
+        if (target === undefined || !target.endsWith('.js'))
+            continue;
+        entries.push([subpath, join(pkg.dir, target)]);
+    }
+    return entries;
+}
+/**
+ * What the **host package itself** declares, off its own `exports` map.
+ *
+ * See {@link ModuleCandidate.carriedByHost}. An entry point that will not
+ * import is **F7** and never a skip: a host-carried module the run could not
+ * see is a required module the set will then be missing, and the operator would
+ * be sent to install a package that does not exist.
+ *
+ * One pass, two answers: every entry point is imported exactly once, and both
+ * the carried manifests and the platform's environment declaration are taken
+ * from it. Two loops would import the same modules twice.
+ */
+async function hostDeclarations(host) {
+    const carried = [];
+    let env = [];
+    for (const [subpath, file] of exportedEntriesOf(host)) {
+        let loaded;
+        try {
+            loaded = (await import(pathToFileURL(file).href));
+        }
+        catch (error) {
+            throw new InstanceHostError('F7', `${host.name}${subpath.slice(1)} could not be imported ` +
+                `(${error instanceof Error ? error.message : String(error)}), so this run cannot say ` +
+                `which modules the platform itself carries. One of them is required by every ` +
+                `instance, so a run that guessed would write a module set the platform then refuses ` +
+                `to compose. Nothing is written; rebuild the platform package and try again.`);
+        }
+        const manifest = loaded.manifest;
+        if (manifest !== undefined && typeof manifest.id === 'string' && manifest.id.length > 0) {
+            carried.push([manifest.id, manifest]);
+        }
+        if (env.length === 0)
+            env = environmentInputsOf(loaded.PLATFORM_ENVIRONMENT_INPUTS);
+    }
+    return { carried, env };
+}
+/** One candidate, from a manifest and the package it came out of. */
+function candidateFrom(id, manifest, packageName, version, carriedByHost, license) {
+    const activation = manifest.activation;
+    return {
+        id,
+        packageName,
+        version,
+        dependencies: Array.isArray(manifest.dependencies)
+            ? manifest.dependencies.filter((entry) => typeof entry === 'string')
+            : [],
+        // Read as loosely as everything else here: this manifest is a published
+        // artefact of another version of the platform, and an entry whose shape
+        // this build cannot read is dropped rather than refused (see
+        // {@link RawManifest}). One id per entry, de-duplicated, because `carts`
+        // names `promotions` once per port.
+        acknowledged: Array.isArray(manifest.acknowledgedDependencies)
+            ? [
+                ...new Set(manifest.acknowledgedDependencies
+                    .map((entry) => typeof entry === 'object' && entry !== null
+                    ? entry.moduleId
+                    : undefined)
+                    .filter((id) => typeof id === 'string')),
+            ]
+            : [],
+        env: environmentInputsOf(manifest.env),
+        required: activation !== undefined &&
+            typeof activation === 'object' &&
+            'nonDeactivatable' in activation,
+        reason: typeof activation?.reason === 'string' ? activation.reason : undefined,
+        carriedByHost,
+        license: typeof license === 'string' ? license : undefined,
+    };
+}
+/**
+ * Every module package this run resolved, with its own manifest read.
+ *
+ * A package whose manifest cannot be imported, or whose manifest declares no
+ * `id`, is **F7** and never a skip: a module set short by however many
+ * manifests failed to load is a manifest the client installs and a set the
+ * platform then composes differently, with nothing in either tree to say so.
+ */
+export async function loadModuleCandidates(packages, host) {
+    const candidates = new Map();
+    for (const pkg of [...packages.values()].sort((a, b) => a.name.localeCompare(b.name))) {
+        if (pkg.endora?.type !== 'module')
+            continue;
+        const declaredId = pkg.endora.id;
+        if (typeof declaredId !== 'string' || declaredId.length === 0) {
+            throw new InstanceHostError('F7', `${pkg.name} declares \`endora.type: "module"\` and no \`endora.id\`, so this run ` +
+                `cannot say which module it is. Nothing is written.`);
+        }
+        // Resolved outside the `try` deliberately: its own F7 says the package
+        // publishes no root export, which is a different finding from a root export
+        // that failed to load, and a `catch` here would report the first as the
+        // second.
+        const entry = rootEntryOf(pkg);
+        let manifest;
+        try {
+            const loaded = (await import(pathToFileURL(entry).href));
+            manifest = (loaded.manifest ?? {});
+        }
+        catch (error) {
+            throw new InstanceHostError('F7', `${pkg.name}'s manifest could not be read from ${pkg.dir} ` +
+                `(${error instanceof Error ? error.message : String(error)}). Its \`dependencies\` ` +
+                `are what the module set is closed over, so a run that skipped it would write a set ` +
+                `that is short by whatever that module needs. Nothing is written; build or reinstall ` +
+                `the package and try again.`);
+        }
+        candidates.set(declaredId, candidateFrom(declaredId, manifest, pkg.name, pkg.version, false, pkg.manifest['license']));
+    }
+    // The host's own, last: a package that has been extracted out of the platform
+    // wins over the copy still inside it, which is the direction that follows a
+    // module *leaving* the host rather than the one that pins it there.
+    if (host === undefined)
+        return { candidates, platformEnv: [] };
+    const declarations = await hostDeclarations(host);
+    for (const [id, manifest] of declarations.carried) {
+        if (candidates.has(id))
+            continue;
+        // A module the platform carries is published under the platform's terms.
+        candidates.set(id, candidateFrom(id, manifest, host.name, host.version, true, host.manifest['license']));
+    }
+    return { candidates, platformEnv: declarations.env };
+}
+/**
+ * What a scaffolded instance reads from its environment — the whole population,
+ * derived and never listed (`specs/123-oss-install-experience/` FR-010).
+ *
+ * The platform's declaration first, then each **installed** module's, in module
+ * order, so a name that has migrated between the two carries the platform's
+ * sentence (`unionEnvironmentInputs`). The set of modules is this run's, so a
+ * different `--module` set is a different population with nothing here edited.
+ */
+export function instanceEnvironmentInputs(platformEnv, modules) {
+    return unionEnvironmentInputs([
+        platformEnv,
+        ...[...modules].sort((a, b) => a.id.localeCompare(b.id)).map((module) => module.env),
+    ]);
+}
+/**
+ * The set, closed and refused (§3.1, §3.2, §3.4).
+ *
+ * Pure over its two inputs, so its proofs enter at the top of the analysis
+ * (issue #130) — a fixture supplies candidates and a request, never a
+ * pre-computed set.
+ */
+export function resolveModuleSet(requested, candidates, options = {}) {
+    const policy = options.seed ?? 'required';
+    const asked = [...new Set(requested.map((entry) => entry.trim()).filter((e) => e.length > 0))];
+    // F3 — an id no resolvable package declares. Named before the closure, so
+    // the operator sees their own typo rather than a dependency that "cannot be
+    // satisfied" three modules downstream.
+    const unknown = asked.filter((id) => !candidates.has(id));
+    if (unknown.length > 0) {
+        throw new InstanceInputError('F3', `\`--module\` names ${unknown.join(', ')}, which no package resolvable from here ` +
+            `declares. This run resolved ${String(candidates.size)} module ` +
+            `${candidates.size === 1 ? 'package' : 'packages'}; install the one you meant beside ` +
+            `the target directory, or drop the name. Nothing is written.`);
+    }
+    const defaulted = asked.length === 0;
+    // Only a default is licence-filtered: a module the operator named is theirs
+    // to name, which is `--module` unchanged (D-270 clause 1).
+    const licenceFiltered = defaulted && policy === 'available';
+    const seed = !defaulted
+        ? asked
+        : policy === 'available'
+            ? [...candidates.values()]
+                .filter((entry) => !separatelyLicensed(entry.license))
+                .map((entry) => entry.id)
+                .sort()
+            : requiredModuleIds(candidates);
+    if (seed.length === 0) {
+        throw new InstanceInputError('F2', `no module set could be derived: no \`--module\` was given and ` +
+            (policy === 'available'
+                ? `every resolvable module package is separately licensed, so there is no set of `
+                : `no resolvable package declares \`activation.nonDeactivatable\`, so there is no ` +
+                    `smallest set that composes `) +
+            `to fall back to. Name the modules with \`--module <id>\` (repeatable, ` +
+            `comma-splittable). Nothing is written.`);
+    }
+    // The closure over the manifests' own `dependencies` **and**
+    // `acknowledgedDependencies` — see {@link ModuleCandidate.acknowledged} for
+    // why the two are one population here and for the boot this walk used to
+    // write a set the platform refused. The F2 refusal for an edge nothing
+    // satisfies is unchanged. Breadth-first so the refusal can name the module
+    // that asked, which is the fact the operator can act on.
+    const chosen = new Set();
+    const queue = [...seed];
+    const unsatisfied = [];
+    const licensed = [];
+    while (queue.length > 0) {
+        const id = queue.shift();
+        if (chosen.has(id))
+            continue;
+        chosen.add(id);
+        const candidate = candidates.get(id);
+        for (const dependency of [...candidate.dependencies, ...candidate.acknowledged]) {
+            if (chosen.has(dependency))
+                continue;
+            if (!candidates.has(dependency)) {
+                unsatisfied.push({ from: id, to: dependency });
+                continue;
+            }
+            // D-270 clause 4 — a default never installs paid code by way of an
+            // edge: a free module that needs a separately licensed one is a defect in
+            // the free module (D-265 clause 3), so it is named rather than followed.
+            if (licenceFiltered && separatelyLicensed(candidates.get(dependency).license)) {
+                licensed.push({ from: id, to: dependency });
+                continue;
+            }
+            queue.push(dependency);
+        }
+    }
+    if (licensed.length > 0) {
+        const lines = [
+            'the default module set cannot be written, so nothing was written.',
+            '',
+        ];
+        for (const edge of licensed) {
+            lines.push(`  ${edge.from} declares a dependency on ${edge.to}, which is separately licensed.`);
+        }
+        lines.push('', 'With no `--module`, this command installs every module that is not separately', 'licensed, and a module in that set may not need one that is — the edge is a defect', 'in the module that declares it, and installing the other module to satisfy it would', 'put code under separate terms into an instance nobody chose it for.', 'remedy: name the modules you want with `--module <id>` (repeatable), and report the', 'edge to the maintainers of the module that declares it.');
+        throw new InstanceInputError('F2', lines.join('\n'));
+    }
+    // F2 — the required half, which is R5.6's and whose message T134 replaces
+    // with the platform's own. It is asked after the closure because a required
+    // module is very often already pulled in by one the operator named.
+    const missingRequired = requiredModuleIds(candidates).filter((id) => !chosen.has(id));
+    if (unsatisfied.length > 0 || missingRequired.length > 0) {
+        const lines = [
+            `the module set you asked for cannot compose, so nothing was written.`,
+            '',
+        ];
+        for (const edge of unsatisfied) {
+            lines.push(`  ${edge.from} declares a dependency on ${edge.to}, and no package resolvable from`, `      here declares that module.`, `      remedy: install it beside the target directory, or drop --module ${edge.from}.`, '');
+        }
+        for (const id of missingRequired) {
+            const candidate = candidates.get(id);
+            lines.push(`  ${id} is missing, and the platform cannot run without it:`, `      ${candidate.reason ?? 'its manifest declares `activation.nonDeactivatable`.'}`, `      remedy: --module ${id}`, '');
+        }
+        lines.push('A module whose manifest declares `activation.nonDeactivatable` is required to be', 'present, not merely un-switch-off-able. An instance written without one does not', 'degrade: it exits, in the boot hook of whichever module happens to need it first.');
+        throw new InstanceInputError('F2', lines.join('\n'));
+    }
+    const ids = [...chosen].sort();
+    const seeded = new Set(seed);
+    return {
+        ids,
+        requested: defaulted ? [] : asked,
+        closure: ids.filter((id) => !seeded.has(id)),
+        defaulted,
+        candidates,
+    };
+}
+//# sourceMappingURL=modules.js.map

package/dist/new-instance/modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.js","sourceRoot":"","sources":["../../src/new-instance/modules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GAEvB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAwB,MAAM,WAAW,CAAC;AAoGxF;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA2B;IAC5D,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,YAAY,CAAC;AACpE,CAAC;AAgDD;;;;;;;;;;;GAWG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAgD;IAEhD,OAAO,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1E,OAAO,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,SAAS,WAAW,CAAC,GAAoB;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,IAAI,GACR,OAAO,OAAO,KAAK,QAAQ;QACzB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAC/C,CAAC,CAAE,OAAmC,CAAC,GAAG,CAAC;YAC3C,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAiB,CACzB,IAAI,EACJ,GAAG,GAAG,CAAC,IAAI,wEAAwE;YACjF,sFAAsF;YACtF,6CAA6C,CAChD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,GAAoB;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC/D,MAAM,OAAO,GAAkC,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAkC,CAAC,EAAE,CAAC;QAClF,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAyBD;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAAqB;IACnD,MAAM,OAAO,GAAuC,EAAE,CAAC;IACvD,IAAI,GAAG,GAAgC,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,MAAqE,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAG/C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,iBAAiB,CACzB,IAAI,EACJ,GAAG,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB;gBACtD,IAAI,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B;gBACtF,8EAA8E;gBAC9E,qFAAqF;gBACrF,6EAA6E,CAChF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAmC,CAAC;QAC5D,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxF,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,qEAAqE;AACrE,SAAS,aAAa,CACpB,EAAU,EACV,QAAqB,EACrB,WAAmB,EACnB,OAAe,EACf,aAAsB,EACtB,OAAgB;IAEhB,MAAM,UAAU,GAAG,QAAQ,CAAC,UAEf,CAAC;IACd,OAAO;QACL,EAAE;QACF,WAAW;QACX,OAAO;QACP,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAChD,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YACrF,CAAC,CAAC,EAAE;QACN,wEAAwE;QACxE,wEAAwE;QACxE,6DAA6D;QAC7D,yEAAyE;QACzE,oCAAoC;QACpC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YAC5D,CAAC,CAAC;gBACE,GAAG,IAAI,GAAG,CACR,QAAQ,CAAC,wBAAwB;qBAC9B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;oBACzC,CAAC,CAAE,KAAyC,CAAC,QAAQ;oBACrD,CAAC,CAAC,SAAS,CACd;qBACA,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CACxD;aACF;YACH,CAAC,CAAC,EAAE;QACN,GAAG,EAAE,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtC,QAAQ,EACN,UAAU,KAAK,SAAS;YACxB,OAAO,UAAU,KAAK,QAAQ;YAC9B,kBAAkB,IAAI,UAAU;QAClC,MAAM,EAAE,OAAO,UAAU,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC9E,aAAa;QACb,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;KAC3D,CAAC;AACJ,CAAC;AAkBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAA8C,EAC9C,IAAkC;IAElC,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACtF,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ;YAAE,SAAS;QAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,iBAAiB,CACzB,IAAI,EACJ,GAAG,GAAG,CAAC,IAAI,wEAAwE;gBACjF,oDAAoD,CACvD,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,4EAA4E;QAC5E,wEAAwE;QACxE,UAAU;QACV,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,QAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAEtD,CAAC;YACF,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAgB,CAAC;QACpD,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,iBAAiB,CACzB,IAAI,EACJ,GAAG,GAAG,CAAC,IAAI,sCAAsC,GAAG,CAAC,GAAG,GAAG;gBACzD,IAAI,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B;gBACpF,qFAAqF;gBACrF,sFAAsF;gBACtF,4BAA4B,CAC/B,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,GAAG,CACZ,UAAU,EACV,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAC3F,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC/D,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAClD,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;QAClD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QACjC,yEAAyE;QACzE,UAAU,CAAC,GAAG,CACZ,EAAE,EACF,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,WAAwC,EACxC,OAAmC;IAEnC,OAAO,sBAAsB,CAAC;QAC5B,WAAW;QACX,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;KACrF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAA4B,EAC5B,UAAgD,EAChD,UAA4D,EAAE;IAE9D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/F,0EAA0E;IAC1E,4EAA4E;IAC5E,uCAAuC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,kBAAkB,CAC1B,IAAI,EACJ,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C;YAChF,+BAA+B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU;YAChE,GAAG,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,qCAAqC;YACtF,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IACrC,4EAA4E;IAC5E,2DAA2D;IAC3D,MAAM,eAAe,GAAG,SAAS,IAAI,MAAM,KAAK,WAAW,CAAC;IAC5D,MAAM,IAAI,GAAG,CAAC,SAAS;QACrB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,MAAM,KAAK,WAAW;YACtB,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;iBACrB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;iBACrD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;iBACxB,IAAI,EAAE;YACX,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,kBAAkB,CAC1B,IAAI,EACJ,gEAAgE;YAC9D,CAAC,MAAM,KAAK,WAAW;gBACrB,CAAC,CAAC,gFAAgF;gBAClF,CAAC,CAAC,iFAAiF;oBACjF,6BAA6B,CAAC;YAClC,wEAAwE;YACxE,wCAAwC,CAC3C,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,4EAA4E;IAC5E,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,yDAAyD;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACxB,MAAM,WAAW,GAAqD,EAAE,CAAC;IACzE,MAAM,QAAQ,GAAqD,EAAE,CAAC;IACtE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC1B,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC7B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACf,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QACtC,KAAK,MAAM,UAAU,IAAI,CAAC,GAAG,SAAS,CAAC,YAAY,EAAE,GAAG,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YAChF,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,SAAS;YACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC/C,SAAS;YACX,CAAC;YACD,mEAAmE;YACnE,0EAA0E;YAC1E,yEAAyE;YACzE,IAAI,eAAe,IAAI,kBAAkB,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/E,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC5C,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAa;YACtB,mEAAmE;YACnE,EAAE;SACH,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,CAAC,IAAI,6BAA6B,IAAI,CAAC,EAAE,iCAAiC,CACpF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,+EAA+E,EAC/E,oFAAoF,EACpF,qFAAqF,EACrF,qEAAqE,EACrE,qFAAqF,EACrF,yDAAyD,CAC1D,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,eAAe,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAEtF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,KAAK,GAAa;YACtB,sEAAsE;YACtE,EAAE;SACH,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,CAAC,IAAI,6BAA6B,IAAI,CAAC,EAAE,kCAAkC,EACpF,kCAAkC,EAClC,0EAA0E,IAAI,CAAC,IAAI,GAAG,EACtF,EAAE,CACH,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CACR,KAAK,EAAE,sDAAsD,EAC7D,SAAS,SAAS,CAAC,MAAM,IAAI,sDAAsD,EAAE,EACrF,0BAA0B,EAAE,EAAE,EAC9B,EAAE,CACH,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CACR,kFAAkF,EAClF,kFAAkF,EAClF,mFAAmF,CACpF,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO;QACL,GAAG;QACH,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK;QACjC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,SAAS;QACT,UAAU;KACX,CAAC;AACJ,CAAC"}