@gate-forge/pack-playwright 0.7.1 → 0.8.0

package/dist/discovery/trusted-config.d.ts

@@ -13,7 +13,23 @@
  *   (from the planned expected set), or the runner default when the
  *   caller selected nothing;
  * - projects: bare names carried as data (identity only — per-project
- *   code options are NOT honored);
+ *   code options are NOT honored), each with the files the plan
+ *   attributed to it, the dependency EDGES the enumeration captured
+ *   (names only), and the `use.storageState` PATH the enumeration
+ *   captured for that project. The edges are what makes a `setup`-project
+ *   config order correctly: Playwright runs a dependency project's tests
+ *   before the dependent project, which is the only way the dependent
+ *   test can read the artifact the setup test produced — and the state
+ *   is what hands that project the session the setup test saved, while
+ *   the setup project itself keeps running unauthenticated;
+ * - storage states: a declared path is resolved from the NATIVE CONFIG
+ *   DIRECTORY the runner child runs from (so the dependent project reads
+ *   the very file its own setup project wrote from that same cwd) and is
+ *   honored only while it lands INSIDE the candidate root, which stays
+ *   the containment boundary for a nested project too; an
+ *   operator-provided whole-run state still outranks every project
+ *   declaration and keeps its own candidate-root meaning (see
+ *   {@link resolveProjectStorageState});
  * - reporter: the engine's own reporter entry forced by absolute path
  *   with run-state paths as CONSTRUCTOR OPTIONS (never env — worker
  *   processes must not learn the spool/outcomes locations);
@@ -36,8 +52,21 @@
  *
  * Compatibility limits (honest, not transparent):
  * - consumer `globalSetup`/`globalTeardown` are NOT executed;
- * - consumer reporters, `webServer`, per-project `use` options,
- *   `testDir`/`testIgnore` scoping, and sharding are NOT honored;
+ * - consumer reporters, `webServer`, per-project `use` options other
+ *   than the captured `storageState` PATH, `testDir`/`testIgnore`
+ *   scoping, and sharding are NOT honored;
+ * - consumer `testMatch` scoping is NOT honored as CONSUMER CODE. What IS
+ *   honored is the SUPERVISOR'S OWN per-project file selection
+ *   (`projectScopes`): project identity is the join key the whole pipeline
+ *   speaks — catalog rows, the registered expected set, session opens, and
+ *   the execution trace — so file scoping must be per project too. A single
+ *   global `testMatch` collects every selected file under EVERY project,
+ *   which is how a `setup`-dependency config (`{ name: 'setup', testMatch:
+ *   /.*\.setup\.ts/ }` plus a dependent project) ran the whole suite once
+ *   per project: identities the registered expected set never bound, so
+ *   their sessions were refused and they lost every piece of evidence.
+ * - per-project `teardown` is NOT honored; only `dependencies` is, as
+ *   ordering data (names only).
  * - tests must be self-contained (app provided externally via the
  *   app-base env, as the fixture already requires).
  */
@@ -55,11 +84,44 @@ export interface TrustedReporterOptions {
     outcomesPath: string;
     /** Absolute obligations document path (reporter ledger; empty when none). */
     obligationsPath: string;
+    /**
+     * Absolute CANDIDATE ROOT the reporter anchors every file identity
+     * to. Handed as trusted CONSTRUCTOR DATA (never worker env): the
+     * runner child runs from the native config directory, while every
+     * identity the supervisor registered is repo-relative — the reporter
+     * must therefore relativize against the root, not against the cwd it
+     * happens to run in.
+     */
+    candidateRoot: string;
+    /**
+     * ABSOLUTE path of the engine's own generated preparation-freeze
+     * controller spec, when this run armed the global native freeze.
+     *
+     * The controller is a real Playwright test inside the runner, so the
+     * reporter would otherwise report it as a native case: it would append
+     * a lifecycle event (opening a witness session for a test the
+     * registered expected set never contained), record an outcome row (so
+     * the run's native count carries a non-native case), and collect its
+     * claims. The exclusion is therefore by ABSOLUTE FILE IDENTITY — the
+     * exact control bytes the trusted CLI pinned — never by title, never
+     * by a project-name prefix, and never by anything the candidate
+     * controls.
+     */
+    controlSpecPath?: string;
 }
 /** Inputs for one trusted config synthesis. */
 export interface TrustedConfigInput {
-    /** Absolute repo root (the runner's testDir). */
+    /** Absolute repo root (the runner's testDir, and the identity root). */
     cwd: string;
+    /**
+     * Absolute native config directory — the directory the runner child
+     * runs from (the same one `listNativePlaywrightTests` enumerates
+     * from). Relative per-project {@link ProjectScope.storageState}
+     * declarations resolve from here, because that is the cwd the
+     * project's own setup test wrote the file from. Undefined = the repo
+     * root, which is exactly the config directory of a root-level config.
+     */
+    nativeConfigDir?: string;
     /** Absolute run-state dir (receives the synthesized config). */
     stateDir: string;
     /** The run identity. */
@@ -68,15 +130,126 @@ export interface TrustedConfigInput {
     reporterEntry: string;
     /** Trusted operator-provided app proxy URL for relative browser navigation. */
     appBaseUrl?: string;
-    /** Operator-provided browser storage state, embedded only in trusted config. */
+    /**
+     * Operator-provided browser storage state, embedded only in trusted
+     * config. This is the WHOLE-RUN state: when it is set it applies to
+     * every project and outranks each project's declared
+     * {@link ProjectScope.storageState}, exactly as it always has. A
+     * relative value keeps its CANDIDATE-ROOT meaning — it is resolved
+     * against {@link TrustedConfigInput.cwd} here, so moving the native
+     * child's cwd can never re-point an operator's path.
+     */
     storageState?: string;
     /** Exact repo-relative posix test files to run (undefined = default). */
     testFiles?: readonly string[];
     /** Bare project names to run (undefined = no project filter). */
     projects?: readonly string[];
+    /**
+     * The supervisor's OWN per-project file selection: each named project
+     * carries exactly the files the plan attributed to it. A project with no
+     * files is omitted (it would execute nothing). Files no project scope
+     * claims (a project-less plan row) stay in the global `testMatch`, so
+     * they still run. Empty = one global `testMatch` over `testFiles`, which
+     * is byte-identical to the pre-scope behavior for a single-project run.
+     */
+    projectScopes?: readonly ProjectScope[];
+    /**
+     * ABSOLUTE path of the generated preparation-freeze controller spec,
+     * when this run armed the global native freeze. It crosses to the
+     * engine reporter as TRUSTED CONSTRUCTOR DATA (never env, never a
+     * candidate-relative path) so the reporter can exclude exactly that one
+     * file from its outcome rows, claims and lifecycle events. Unarmed, the
+     * field is absent and the reporter records every test, exactly as
+     * before.
+     */
+    controlSpecPath?: string;
     /** Per-test timeout ms (default 60_000). */
     testTimeoutMs?: number;
 }
+/** One named project and the repo-relative files the plan attributed to it. */
+export interface ProjectScope {
+    /** The project name — identity only; no consumer code options. */
+    name: string;
+    /** Repo-relative posix test files this project runs. */
+    files: readonly string[];
+    /**
+     * Project names this project depends on, as the runner resolved them
+     * (names only — never the consumer's per-project options). The
+     * synthesized config emits them so Playwright runs a `setup` project's
+     * tests BEFORE the dependent project that reads their artifact; an
+     * edge naming a project the synthesized config omits is dropped,
+     * because Playwright refuses to load such a config at all.
+     */
+    dependencies?: readonly string[];
+    /**
+     * The `use.storageState` PATH this project declared, as the runner
+     * resolved it (data, never consumer code). The synthesized config
+     * hands it to THIS project only, which is what lets a `setup` project
+     * sign in and save `playwright/.auth/user.json` for the dependent
+     * project that reads it while the setup project itself stays logged
+     * out. Relative paths resolve against the RUNNER's cwd — the native
+     * config directory the child runs from — exactly like the setup
+     * test's own relative write, which is the very cwd that write is
+     * resolved from. Containment stays the WHOLE candidate root, so a
+     * valid `../shared/state.json` that lands back inside the candidate
+     * is honored while anything reaching outside it is refused (see
+     * {@link resolveProjectStorageState}).
+     *
+     * An operator-provided whole-run state (GATEFORGE_SESSION_STATE)
+     * outranks every project declaration, so this field is not emitted at
+     * all in that case.
+     */
+    storageState?: string;
+    /**
+     * This project's OWN `testDir` (absolute), when it collects files from
+     * somewhere other than the config's `testDir`. Only the engine's freeze
+     * controller uses it: its spec is GENERATED code in a private per-run
+     * directory OUTSIDE the repository, which the config's own repo-root
+     * `testDir` never covers and the consumer's own configuration can
+     * never collect. A consumer project never gets one — the files it runs
+     * are always repo-relative to the identity root.
+     */
+    testDir?: string;
+}
+/** Thrown when a project-declared browser state may not be read. */
+export declare class ProjectStorageStateError extends Error {
+    constructor(message: string);
+}
+/**
+ * Resolves one project-declared `use.storageState` and refuses anything
+ * a supervised run must not read.
+ *
+ * A relative path is resolved against the NATIVE CONFIG DIRECTORY —
+ * the directory the runner child runs from, exactly the directory
+ * `listNativePlaywrightTests` enumerated the suite from: the worker
+ * reads the file relative to the process it runs in, which is that very
+ * cwd, which is also where the project's own setup test wrote it from.
+ * The file itself need not exist yet — the setup project writes it
+ * during this run.
+ *
+ * Containment is the WHOLE CANDIDATE ROOT, not the config directory,
+ * and it is PHYSICAL rather than lexical: a symlink inside the
+ * candidate that points outside it is refused too, so the check follows
+ * the real filesystem from the nearest existing ancestor. A nested
+ * project's `../shared/state.json` therefore stays valid whenever it
+ * lands back inside the candidate.
+ *
+ * @param value: the `use.storageState` string the runner resolved.
+ * @param root: the candidate root (the containment boundary).
+ * @param project: the declaring project, named in the error.
+ * @param baseDir: the directory a relative declaration resolves from —
+ *   the native config directory the runner child runs from.
+ *
+ * @returns
+ *   string: the absolute path the declared state resolves to.
+ *
+ * @throws
+ *   ProjectStorageStateError: when the value is empty, names a URL, or
+ *   resolves outside the candidate root either directly or through a
+ *   link. A requested state is never silently dropped — that would
+ *   degrade into a logged-out run that looks green.
+ */
+export declare function resolveProjectStorageState(value: string, root: string, project: string, baseDir: string): string;
 /**
  * Resolves the engine reporter entry the trusted config forces: the
  * pack's own BUILT reporter (the same class the consumer config would
@@ -94,7 +267,8 @@ export declare function trustedReporterEntry(fromModule?: string): string;
  * Synthesizes the trusted Playwright config into the run-state dir.
  *
  * Args:
- *   input: repo root, run state, reporter entry, file/project selection.
+ *   input: repo root, native config directory, run state, reporter
+ *     entry, file/project selection, and the operator's whole-run state.
  *
  * Returns:
  *   { configPath, reporterOptions }: absolute config path for

package/dist/discovery/trusted-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trusted-config.d.ts","sourceRoot":"","sources":["../../src/discovery/trusted-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAMH,4EAA4E;AAC5E,eAAO,MAAM,mBAAmB,kCAAkC,CAAC;AAEnE,4EAA4E;AAC5E,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAE7E,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,yEAAyE;IACzE,QAAQ,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,YAAY,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,aAAa,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,4CAA4C;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,GAAE,MAAwB,GAAG,MAAM,CAKjF;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,GAAG;IAClE,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,sBAAsB,CAAC;CACzC,CA8CA"}
+{"version":3,"file":"trusted-config.d.ts","sourceRoot":"","sources":["../../src/discovery/trusted-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAQH,4EAA4E;AAC5E,eAAO,MAAM,mBAAmB,kCAAkC,CAAC;AAEnE,4EAA4E;AAC5E,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAE7E,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,yEAAyE;IACzE,QAAQ,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,YAAY,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,aAAa,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4CAA4C;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;;;;;;;;;;;;;;;OAiBG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,oEAAoE;AACpE,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI5B;AAoBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAiDhH;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,GAAE,MAAwB,GAAG,MAAM,CAKjF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,GAAG;IAClE,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,sBAAsB,CAAC;CACzC,CA+KA"}

package/dist/discovery/trusted-config.js

@@ -13,7 +13,23 @@
  *   (from the planned expected set), or the runner default when the
  *   caller selected nothing;
  * - projects: bare names carried as data (identity only — per-project
- *   code options are NOT honored);
+ *   code options are NOT honored), each with the files the plan
+ *   attributed to it, the dependency EDGES the enumeration captured
+ *   (names only), and the `use.storageState` PATH the enumeration
+ *   captured for that project. The edges are what makes a `setup`-project
+ *   config order correctly: Playwright runs a dependency project's tests
+ *   before the dependent project, which is the only way the dependent
+ *   test can read the artifact the setup test produced — and the state
+ *   is what hands that project the session the setup test saved, while
+ *   the setup project itself keeps running unauthenticated;
+ * - storage states: a declared path is resolved from the NATIVE CONFIG
+ *   DIRECTORY the runner child runs from (so the dependent project reads
+ *   the very file its own setup project wrote from that same cwd) and is
+ *   honored only while it lands INSIDE the candidate root, which stays
+ *   the containment boundary for a nested project too; an
+ *   operator-provided whole-run state still outranks every project
+ *   declaration and keeps its own candidate-root meaning (see
+ *   {@link resolveProjectStorageState});
  * - reporter: the engine's own reporter entry forced by absolute path
  *   with run-state paths as CONSTRUCTOR OPTIONS (never env — worker
  *   processes must not learn the spool/outcomes locations);
@@ -36,18 +52,143 @@
  *
  * Compatibility limits (honest, not transparent):
  * - consumer `globalSetup`/`globalTeardown` are NOT executed;
- * - consumer reporters, `webServer`, per-project `use` options,
- *   `testDir`/`testIgnore` scoping, and sharding are NOT honored;
+ * - consumer reporters, `webServer`, per-project `use` options other
+ *   than the captured `storageState` PATH, `testDir`/`testIgnore`
+ *   scoping, and sharding are NOT honored;
+ * - consumer `testMatch` scoping is NOT honored as CONSUMER CODE. What IS
+ *   honored is the SUPERVISOR'S OWN per-project file selection
+ *   (`projectScopes`): project identity is the join key the whole pipeline
+ *   speaks — catalog rows, the registered expected set, session opens, and
+ *   the execution trace — so file scoping must be per project too. A single
+ *   global `testMatch` collects every selected file under EVERY project,
+ *   which is how a `setup`-dependency config (`{ name: 'setup', testMatch:
+ *   /.*\.setup\.ts/ }` plus a dependent project) ran the whole suite once
+ *   per project: identities the registered expected set never bound, so
+ *   their sessions were refused and they lost every piece of evidence.
+ * - per-project `teardown` is NOT honored; only `dependencies` is, as
+ *   ordering data (names only).
  * - tests must be self-contained (app provided externally via the
  *   app-base env, as the fixture already requires).
  */
-import { mkdirSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
+import { lstatSync, mkdirSync, realpathSync, writeFileSync } from 'node:fs';
+import { dirname, join, relative, resolve, sep } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { FREEZE_CONTROLLER_PROJECT } from './prepare-barrier.js';
 /** File name of the synthesized trusted config inside the run-state dir. */
 export const TRUSTED_CONFIG_FILE = 'trusted.playwright.config.mjs';
 /** File name of the forced reporter options (diagnostic mirror of argv). */
 export const TRUSTED_REPORTER_OPTIONS_FILE = 'trusted-reporter-options.json';
+/** Thrown when a project-declared browser state may not be read. */
+export class ProjectStorageStateError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ProjectStorageStateError';
+    }
+}
+/** A declared state that names a URL scheme rather than a file path. */
+const URL_LIKE = /^[a-zA-Z][a-zA-Z\d+.-]*:/;
+/**
+ * True when a path exists as a directory entry — a file, a directory, or
+ * a symlink of its own, including one that leads nowhere. Deliberately
+ * not `existsSync`, which follows links and would report a dangling one
+ * as absent.
+ */
+function isDirectoryEntry(path) {
+    try {
+        lstatSync(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Resolves one project-declared `use.storageState` and refuses anything
+ * a supervised run must not read.
+ *
+ * A relative path is resolved against the NATIVE CONFIG DIRECTORY —
+ * the directory the runner child runs from, exactly the directory
+ * `listNativePlaywrightTests` enumerated the suite from: the worker
+ * reads the file relative to the process it runs in, which is that very
+ * cwd, which is also where the project's own setup test wrote it from.
+ * The file itself need not exist yet — the setup project writes it
+ * during this run.
+ *
+ * Containment is the WHOLE CANDIDATE ROOT, not the config directory,
+ * and it is PHYSICAL rather than lexical: a symlink inside the
+ * candidate that points outside it is refused too, so the check follows
+ * the real filesystem from the nearest existing ancestor. A nested
+ * project's `../shared/state.json` therefore stays valid whenever it
+ * lands back inside the candidate.
+ *
+ * @param value: the `use.storageState` string the runner resolved.
+ * @param root: the candidate root (the containment boundary).
+ * @param project: the declaring project, named in the error.
+ * @param baseDir: the directory a relative declaration resolves from —
+ *   the native config directory the runner child runs from.
+ *
+ * @returns
+ *   string: the absolute path the declared state resolves to.
+ *
+ * @throws
+ *   ProjectStorageStateError: when the value is empty, names a URL, or
+ *   resolves outside the candidate root either directly or through a
+ *   link. A requested state is never silently dropped — that would
+ *   degrade into a logged-out run that looks green.
+ */
+export function resolveProjectStorageState(value, root, project, baseDir) {
+    const base = resolve(root);
+    const from = resolve(base, baseDir);
+    const refuse = (why) => {
+        throw new ProjectStorageStateError(`project '${project}' declares use.storageState '${value}', which ${why}. A supervised run reads a ` +
+            `browser state only from inside the candidate (root '${base}'), resolving relative paths from the ` +
+            `project's config directory '${from}': point the project at a path under the candidate — the ` +
+            `standard pattern writes 'playwright/.auth/user.json' from its own setup project — or set ` +
+            `GATEFORGE_SESSION_STATE to a whole-run state instead.`);
+    };
+    if (value.length === 0)
+        return refuse('is empty');
+    if (URL_LIKE.test(value))
+        return refuse('is a URL, not a file path');
+    const resolvedPath = resolve(from, value);
+    if (resolvedPath !== base && !resolvedPath.startsWith(base + sep)) {
+        return refuse(`resolves outside the candidate root ('${resolvedPath}')`);
+    }
+    // A path that only LOOKS contained is not contained: a symlink inside
+    // the candidate can point anywhere on the host, and the worker would
+    // follow it. So the check follows the real filesystem from the nearest
+    // existing ancestor — the state file itself need not exist yet, the
+    // setup project writes it during this run — and compares against the
+    // real candidate root. Ancestor lookup uses lstat, NOT existsSync: a
+    // link that leads nowhere must be FOUND here and refused below, never
+    // stepped over as if it were absent.
+    let probe = resolvedPath;
+    while (!isDirectoryEntry(probe)) {
+        const parent = dirname(probe);
+        if (parent === probe)
+            return refuse('names no path this host can resolve');
+        probe = parent;
+    }
+    let realBase;
+    try {
+        realBase = realpathSync(base);
+    }
+    catch {
+        return refuse('cannot be resolved against this host\'s filesystem');
+    }
+    let realProbe;
+    try {
+        realProbe = realpathSync(probe);
+    }
+    catch {
+        return refuse('is a link this host cannot resolve');
+    }
+    const physical = resolve(realProbe, relative(probe, resolvedPath));
+    if (physical !== realBase && !physical.startsWith(realBase + sep)) {
+        return refuse(`reaches outside the candidate through a link ('${physical}')`);
+    }
+    return resolvedPath;
+}
 /**
  * Resolves the engine reporter entry the trusted config forces: the
  * pack's own BUILT reporter (the same class the consumer config would
@@ -70,7 +211,8 @@ export function trustedReporterEntry(fromModule = import.meta.url) {
  * Synthesizes the trusted Playwright config into the run-state dir.
  *
  * Args:
- *   input: repo root, run state, reporter entry, file/project selection.
+ *   input: repo root, native config directory, run state, reporter
+ *     entry, file/project selection, and the operator's whole-run state.
  *
  * Returns:
  *   { configPath, reporterOptions }: absolute config path for
@@ -82,9 +224,123 @@ export function synthesizeTrustedConfig(input) {
         runId: input.runId,
         outcomesPath: join(input.stateDir, 'runner-outcomes.json'),
         obligationsPath: join(input.stateDir, 'obligations.json'),
+        candidateRoot: input.cwd,
+        // The engine's own freeze controller is excluded by ABSOLUTE FILE
+        // IDENTITY, handed here as trusted constructor data. Unarmed, the
+        // field is absent and the reporter records every test as before.
+        ...(input.controlSpecPath !== undefined ? { controlSpecPath: input.controlSpecPath } : {}),
     };
     const testFiles = [...new Set(input.testFiles ?? [])].sort();
     const projects = [...new Set(input.projects ?? [])].sort();
+    // An operator's whole-run state is resolved HERE, against the candidate
+    // root, and emitted absolute: a relative operator path keeps the
+    // candidate-root meaning it always had, whatever cwd the native child
+    // runs from. (An absolute value passes through unchanged — the
+    // operator's own path, never re-anchored.)
+    const operatorState = input.storageState === undefined ? undefined : resolve(input.cwd, input.storageState);
+    // Every project-declared storage state is resolved and checked BEFORE
+    // anything is written: a state a supervised run may not read refuses
+    // the run outright, because silently dropping it would leave the
+    // project logged out and still call the run green. Relative
+    // declarations resolve from the NATIVE CONFIG DIRECTORY (the child's
+    // cwd, where the setup test wrote the file), while containment stays
+    // the whole candidate root. Under an operator's whole-run state the
+    // declarations are not used at all, so they are neither read nor
+    // checked — precedence means the losing value never reaches the
+    // filesystem.
+    if (operatorState === undefined) {
+        for (const scope of input.projectScopes ?? []) {
+            if (scope.storageState !== undefined) {
+                resolveProjectStorageState(scope.storageState, input.cwd, scope.name, input.nativeConfigDir ?? input.cwd);
+            }
+        }
+    }
+    // Per-project file selection. Each project carries exactly the files the
+    // plan attributed to it, so a project-scoped consumer config (the standard
+    // `setup`-project auth pattern) does not have every selected file collected
+    // under every project. Files no project scope claims stay in the global
+    // `testMatch` — a project-less plan row must still execute. Scoping only
+    // changes what runs when TWO or more projects share the config: with one
+    // project the global `testMatch` selects the identical set, so a
+    // single-project run keeps exactly the old one-global-`testMatch` config.
+    // A project's declared state travels with it — except under an
+    // operator-provided WHOLE-RUN state, which has always outranked
+    // everything the config declared and keeps doing so: that state is
+    // emitted once as the global `use`, and no per-project state is emitted
+    // beside it. A project that declares nothing keeps no `use` at all and
+    // therefore runs logged out, which is exactly what the `setup` project
+    // of the standard pattern needs.
+    const scopedProjects = (input.projectScopes ?? [])
+        .map((scope) => ({
+        name: scope.name,
+        files: [...new Set(scope.files)].sort(),
+        // Carried through so the synthesized project can actually collect
+        // from it; a dropped field would make the engine's freeze controller
+        // look for its spec under the repo root and find nothing.
+        ...(scope.testDir === undefined ? {} : { testDir: scope.testDir }),
+        dependencies: scope.dependencies ?? [],
+        ...(operatorState === undefined && scope.storageState !== undefined
+            ? { storageState: scope.storageState }
+            : {}),
+    }))
+        .filter((scope) => scope.name.length > 0 && scope.files.length > 0)
+        .sort((left, right) => (left.name < right.name ? -1 : left.name > right.name ? 1 : 0));
+    const projectScopes = scopedProjects.length >= 2 ? scopedProjects : [];
+    // One surviving scope runs its files under that project alone — a named
+    // project that owns no file must not collect them a second time. Its
+    // declared state still rides along: that path emits no per-project
+    // `testMatch`, and dropping the state with it would log out the very
+    // project a narrowed run kept.
+    const loneScope = scopedProjects.length === 1 ? scopedProjects[0] : undefined;
+    const plainProjects = loneScope !== undefined ? [loneScope.name] : projects;
+    const scopedFiles = new Set(projectScopes.flatMap((scope) => scope.files));
+    const unscopedFiles = testFiles.filter((file) => !scopedFiles.has(file));
+    // Dependency edges are carried as the runner resolved them (names
+    // only) and filtered to the projects this config actually defines:
+    // Playwright REFUSES to load a config whose `dependencies` names a
+    // project it does not declare, so a dangling edge would fail the whole
+    // run instead of merely losing an ordering. An edge to a project with
+    // no files is dropped with it, for the same reason. Projects with no
+    // edges at all emit no `dependencies` key, so a single-project run
+    // stays byte-identical.
+    const scopedNames = new Set(projectScopes.map((scope) => scope.name));
+    // Whether this config carries the engine's preparation-freeze
+    // controller. Its presence is what makes the dependency emission below
+    // order-aware; every config without it emits exactly what it always did.
+    const freezeArmed = projectScopes.some((scope) => scope.name === FREEZE_CONTROLLER_PROJECT);
+    const synthesizedProjects = projectScopes.map((scope) => {
+        const captured = [
+            ...new Set(scope.dependencies.filter((name) => scopedNames.has(name) && name !== scope.name)),
+        ].sort();
+        // ARMED (the global preparation freeze is in this config): the
+        // controller is emitted FIRST, explicitly, and the project's own
+        // captured edges follow in their existing sorted order. Sorting the
+        // whole array instead would silently move the controller behind any
+        // prerequisite that sorts before it, and the extra-environment union
+        // the native scheduler builds over `project.deps` is positional with
+        // later entries winning — so where the controller lands decides which
+        // environment a body actually starts with. UNARMED keeps the exact
+        // pre-existing emission, so every run without the barrier stays
+        // byte-identical.
+        const edges = freezeArmed
+            ? captured.includes(FREEZE_CONTROLLER_PROJECT)
+                ? [FREEZE_CONTROLLER_PROJECT, ...captured.filter((name) => name !== FREEZE_CONTROLLER_PROJECT)]
+                : captured
+            : captured;
+        return {
+            name: scope.name,
+            testMatch: scope.files,
+            // A project with its OWN `testDir` (the engine's freeze controller)
+            // collects from there; every consumer project stays on the config's
+            // repo-root `testDir`, exactly as before.
+            ...(scope.testDir === undefined ? {} : { testDir: scope.testDir }),
+            ...(edges.length > 0 ? { dependencies: edges } : {}),
+            // The declared state, for THIS project only. It rides in `use`
+            // rather than at the top level so the `setup` project that writes
+            // the file keeps running with no session at all.
+            ...(scope.storageState === undefined ? {} : { use: { storageState: scope.storageState } }),
+        };
+    });
     const lines = [
         '// GENERATED by gateforge trusted supervision — do not edit. The',
         '// consumer config file is NEVER loaded for supervised runs: it is',
@@ -92,8 +348,21 @@ export function synthesizeTrustedConfig(input) {
         '// spool and outcomes document this reporter writes.',
         'export default {',
         `  testDir: ${JSON.stringify(input.cwd)},`,
-        ...(testFiles.length > 0 ? [`  testMatch: ${JSON.stringify(testFiles)},`] : []),
-        ...(projects.length > 0 ? [`  projects: ${JSON.stringify(projects.map((name) => ({ name })))},`] : []),
+        ...(unscopedFiles.length > 0 ? [`  testMatch: ${JSON.stringify(unscopedFiles)},`] : []),
+        ...(projectScopes.length > 0
+            ? [
+                `  projects: ${JSON.stringify(synthesizedProjects)},`,
+            ]
+            : plainProjects.length > 0
+                ? [
+                    `  projects: ${JSON.stringify(plainProjects.map((name) => ({
+                        name,
+                        ...(loneScope?.name === name && loneScope.storageState !== undefined
+                            ? { use: { storageState: loneScope.storageState } }
+                            : {}),
+                    })))},`,
+                ]
+                : []),
         '  workers: 1,',
         '  fullyParallel: false,',
         '  retries: 0,',
@@ -107,7 +376,7 @@ export function synthesizeTrustedConfig(input) {
             headless: true,
             trace: 'off',
             ...(input.appBaseUrl !== undefined ? { baseURL: input.appBaseUrl } : {}),
-            ...(input.storageState !== undefined ? { storageState: input.storageState } : {}),
+            ...(operatorState !== undefined ? { storageState: operatorState } : {}),
         })},`,
         `  outputDir: ${JSON.stringify(join(input.stateDir, 'playwright-artifacts'))},`,
         '};',
@@ -116,7 +385,7 @@ export function synthesizeTrustedConfig(input) {
     mkdirSync(input.stateDir, { recursive: true });
     const configPath = join(input.stateDir, TRUSTED_CONFIG_FILE);
     writeFileSync(configPath, `${lines.join('\n')}`, 'utf8');
-    writeFileSync(join(input.stateDir, TRUSTED_REPORTER_OPTIONS_FILE), `${JSON.stringify({ configPath, reporterEntry: input.reporterEntry, reporterOptions, testFiles, projects }, null, 2)}\n`, 'utf8');
+    writeFileSync(join(input.stateDir, TRUSTED_REPORTER_OPTIONS_FILE), `${JSON.stringify({ configPath, reporterEntry: input.reporterEntry, reporterOptions, testFiles, projects, projectScopes }, null, 2)}\n`, 'utf8');
     return { configPath, reporterOptions };
 }
 //# sourceMappingURL=trusted-config.js.map

package/dist/discovery/trusted-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"trusted-config.js","sourceRoot":"","sources":["../../src/discovery/trusted-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AAEnE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAoC7E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,aAAqB,MAAM,CAAC,IAAI,CAAC,GAAG;IACvE,qEAAqE;IACrE,sEAAsE;IACtE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAyB;IAI/D,MAAM,eAAe,GAA2B;QAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC;QAC1D,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC;KAC1D,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG;QACZ,kEAAkE;QAClE,oEAAoE;QACpE,mEAAmE;QACnE,sDAAsD;QACtD,kBAAkB;QAClB,cAAc,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG;QAC1C,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,eAAe;QACf,yBAAyB;QACzB,eAAe;QACf,qBAAqB;QACrB,cAAc,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,MAAM,CAAC,GAAG;QACtD,eAAe;QACf,eAAe;QACf,QAAQ,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI;QACnF,MAAM;QACN,UAAU,IAAI,CAAC,SAAS,CAAC;YACvB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,KAAK;YACZ,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClF,CAAC,GAAG;QACL,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC,GAAG;QAC/E,IAAI;QACJ,EAAE;KACH,CAAC;IACF,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC7D,aAAa,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACzD,aAAa,CACX,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,6BAA6B,CAAC,EACnD,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACxH,MAAM,CACP,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AACzC,CAAC"}
+{"version":3,"file":"trusted-config.js","sourceRoot":"","sources":["../../src/discovery/trusted-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AAEnE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AA+I7E,oEAAoE;AACpE,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAE5C;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAa,EAAE,IAAY,EAAE,OAAe,EAAE,OAAe;IACtG,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,GAAW,EAAS,EAAE;QACpC,MAAM,IAAI,wBAAwB,CAChC,YAAY,OAAO,gCAAgC,KAAK,YAAY,GAAG,6BAA6B;YAClG,uDAAuD,IAAI,wCAAwC;YACnG,+BAA+B,IAAI,2DAA2D;YAC9F,2FAA2F;YAC3F,uDAAuD,CAC1D,CAAC;IACJ,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,YAAY,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,MAAM,CAAC,yCAAyC,YAAY,IAAI,CAAC,CAAC;IAC3E,CAAC;IACD,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,oEAAoE;IACpE,qEAAqE;IACrE,qEAAqE;IACrE,sEAAsE;IACtE,qCAAqC;IACrC,IAAI,KAAK,GAAG,YAAY,CAAC;IACzB,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAC3E,KAAK,GAAG,MAAM,CAAC;IACjB,CAAC;IACD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,oDAAoD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,oCAAoC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,MAAM,CAAC,kDAAkD,QAAQ,IAAI,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,aAAqB,MAAM,CAAC,IAAI,CAAC,GAAG;IACvE,qEAAqE;IACrE,sEAAsE;IACtE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAyB;IAI/D,MAAM,eAAe,GAA2B;QAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC;QAC1D,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC;QACzD,aAAa,EAAE,KAAK,CAAC,GAAG;QACxB,kEAAkE;QAClE,kEAAkE;QAClE,iEAAiE;QACjE,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,wEAAwE;IACxE,iEAAiE;IACjE,sEAAsE;IACtE,+DAA+D;IAC/D,2CAA2C;IAC3C,MAAM,aAAa,GAAG,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5G,sEAAsE;IACtE,qEAAqE;IACrE,iEAAiE;IACjE,4DAA4D;IAC5D,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,iEAAiE;IACjE,gEAAgE;IAChE,cAAc;IACd,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACrC,0BAA0B,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5G,CAAC;QACH,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,iEAAiE;IACjE,0EAA0E;IAC1E,+DAA+D;IAC/D,gEAAgE;IAChE,mEAAmE;IACnE,wEAAwE;IACxE,uEAAuE;IACvE,uEAAuE;IACvE,iCAAiC;IACjC,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;SAC/C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QACvC,kEAAkE;QAClE,qEAAqE;QACrE,0DAA0D;QAC1D,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAClE,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;QACtC,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;YACjE,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;YACtC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SAClE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,wEAAwE;IACxE,qEAAqE;IACrE,mEAAmE;IACnE,qEAAqE;IACrE,+BAA+B;IAC/B,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,aAAa,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,kEAAkE;IAClE,mEAAmE;IACnE,mEAAmE;IACnE,uEAAuE;IACvE,sEAAsE;IACtE,qEAAqE;IACrE,mEAAmE;IACnE,wBAAwB;IACxB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,8DAA8D;IAC9D,uEAAuE;IACvE,yEAAyE;IACzE,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC;IAC5F,MAAM,mBAAmB,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACtD,MAAM,QAAQ,GAAG;YACf,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;SAC9F,CAAC,IAAI,EAAE,CAAC;QACT,+DAA+D;QAC/D,iEAAiE;QACjE,oEAAoE;QACpE,oEAAoE;QACpE,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,mEAAmE;QACnE,gEAAgE;QAChE,kBAAkB;QAClB,MAAM,KAAK,GAAG,WAAW;YACvB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,yBAAyB,CAAC;gBAC5C,CAAC,CAAC,CAAC,yBAAyB,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC;gBAC/F,CAAC,CAAC,QAAQ;YACZ,CAAC,CAAC,QAAQ,CAAC;QACb,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,KAAK;YACtB,oEAAoE;YACpE,oEAAoE;YACpE,0CAA0C;YAC1C,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,+DAA+D;YAC/D,kEAAkE;YAClE,iDAAiD;YACjD,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;SAC3F,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG;QACZ,kEAAkE;QAClE,oEAAoE;QACpE,mEAAmE;QACnE,sDAAsD;QACtD,kBAAkB;QAClB,cAAc,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG;QAC1C,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YAC1B,CAAC,CAAC;gBACE,eAAe,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,GAAG;aACtD;YACH,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;gBACxB,CAAC,CAAC;oBACE,eAAe,IAAI,CAAC,SAAS,CAC3B,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;wBAC3B,IAAI;wBACJ,GAAG,CAAC,SAAS,EAAE,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS;4BAClE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE;4BACnD,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC,CAAC,CACJ,GAAG;iBACL;gBACH,CAAC,CAAC,EAAE,CAAC;QACT,eAAe;QACf,yBAAyB;QACzB,eAAe;QACf,qBAAqB;QACrB,cAAc,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,MAAM,CAAC,GAAG;QACtD,eAAe;QACf,eAAe;QACf,QAAQ,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI;QACnF,MAAM;QACN,UAAU,IAAI,CAAC,SAAS,CAAC;YACvB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,KAAK;YACZ,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC,GAAG;QACL,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC,GAAG;QAC/E,IAAI;QACJ,EAAE;KACH,CAAC;IACF,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC7D,aAAa,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACzD,aAAa,CACX,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,6BAA6B,CAAC,EACnD,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACvI,MAAM,CACP,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AACzC,CAAC"}