@indigoai-us/hq-cloud 6.18.44-alpha.48 → 6.18.44-alpha.49

package/dist/cli/rescue-drop-dir-symlink.test.js

@@ -0,0 +1,255 @@
+/**
+ * Regressions for rescue actions that drop symlinks without following their
+ * targets in src/cli/rescue-core.ts.
+ *
+ * The bug: the apply step removed a reindex overlay symlink with
+ * `fs.rmSync(localPath, { force: true })`. `rmSync` stat-FOLLOWS on some
+ * platforms (notably macOS), so a symlink whose target is a directory — e.g.
+ * core/knowledge/ad-creative-engine -> personal/knowledge/ad-creative-engine —
+ * is seen as a directory and, with `recursive` unset, throws `EISDIR`
+ * ("Path is a directory"). During a rescue apply that abort rolls back the
+ * whole update, so /update-hq fails on any install carrying a directory-target
+ * overlay symlink. The fix removes the link with lstat + unlink semantics
+ * (`fs.unlinkSync`), which drops the link itself regardless of what it points
+ * at and never recurses into the target.
+ *
+ * Conflict artifacts need the same protection: their names are recognized
+ * before the generic symlink classifier, so a `.conflict-*` link reaches the
+ * conflict-drop action rather than the reindex-symlink action. That action must
+ * unlink files and links while leaving real directories untouched.
+ *
+ * The macOS `rmSync` follow-behavior is not reproducible with a plain path on
+ * Linux CI, so we reproduce it deterministically: `fs` is mocked so `rmSync`
+ * throws `EISDIR` on exactly a directory-target symlink (every other call is
+ * delegated to the real implementation). Under that fault the OLD code aborts
+ * the apply and rolls the whole update back; the fixed code drops the link with
+ * `unlinkSync` and the rescue still succeeds.
+ *
+ * Mirrors rescue-mtime-preserve.test.ts: shim `git clone` to a local fixture
+ * and run the real rescue (non-dry-run, --no-backup) so the overlay lays files
+ * down and the symlink-drop action really runs.
+ */
+import { describe, it, expect, beforeAll, afterAll, vi } from "vitest";
+import { execFileSync } from "child_process";
+import * as fs from "fs";
+import * as os from "os";
+import * as path from "path";
+import { runRescue } from "./rescue-core.js";
+// Simulate the reporter's platform (macOS): fs.rmSync stat-follows a
+// symlink-to-directory and throws EISDIR ("Path is a directory"). Only the
+// dir-target symlink trips this; every other rmSync call — and every other fs
+// function — is the real implementation, so clone/overlay/backup all work.
+vi.mock("fs", async (importOriginal) => {
+    const real = await importOriginal();
+    const patchedRmSync = ((p, opts) => {
+        try {
+            const lst = real.lstatSync(p);
+            if (lst.isSymbolicLink() && real.statSync(p).isDirectory()) {
+                const err = new Error(`EISDIR: illegal operation on a directory, Path is a directory: ${String(p)}`);
+                err.code = "ERR_FS_EISDIR";
+                throw err;
+            }
+        }
+        catch (e) {
+            if (e.code === "ERR_FS_EISDIR")
+                throw e;
+            // lstat/stat failed (missing path / broken link) — fall through to real rm.
+        }
+        return real.rmSync(p, opts);
+    });
+    return { ...real, rmSync: patchedRmSync };
+});
+function has(bin, ...args) {
+    try {
+        execFileSync(bin, args, { stdio: "ignore" });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+const toolsAvailable = has("git", "--version") && has("rsync", "--version");
+const EPOCH = 1609459200; // 2021-01-01T00:00:00Z
+/** Run the rescue in-process, capturing its stdout/stderr. */
+function runRescueCapture(argv, env) {
+    let stdout = "";
+    let stderr = "";
+    const origOut = process.stdout.write.bind(process.stdout);
+    const origErr = process.stderr.write.bind(process.stderr);
+    process.stdout.write = ((chunk) => {
+        stdout += String(chunk);
+        return true;
+    });
+    process.stderr.write = ((chunk) => {
+        stderr += String(chunk);
+        return true;
+    });
+    let status;
+    try {
+        status = runRescue(argv, { env }).status;
+    }
+    finally {
+        process.stdout.write = origOut;
+        process.stderr.write = origErr;
+    }
+    return { status, stdout, stderr };
+}
+describe.skipIf(!toolsAvailable)("rescue drops directory-target symlinks", () => {
+    let workDir;
+    let upstream;
+    let shimDir;
+    let floorSha;
+    let env;
+    const gitAt = (cwd, ...args) => execFileSync("git", args, {
+        cwd,
+        stdio: ["ignore", "pipe", "pipe"],
+        env: {
+            ...process.env,
+            GIT_AUTHOR_NAME: "t",
+            GIT_AUTHOR_EMAIL: "t@t",
+            GIT_COMMITTER_NAME: "t",
+            GIT_COMMITTER_EMAIL: "t@t",
+            GIT_AUTHOR_DATE: `${EPOCH} +0000`,
+            GIT_COMMITTER_DATE: `${EPOCH} +0000`,
+        },
+    })
+        .toString()
+        .trim();
+    beforeAll(() => {
+        workDir = fs.mkdtempSync(path.join(os.tmpdir(), "hq-rescue-dirsymlink-"));
+        // --- "upstream" repo: a single core/ file so the wipe set includes core/ --
+        upstream = path.join(workDir, "upstream");
+        fs.mkdirSync(path.join(upstream, "core/knowledge"), { recursive: true });
+        gitAt(workDir, "init", "-b", "main", "upstream");
+        fs.writeFileSync(path.join(upstream, "core/knowledge/README.md"), "shipped\n");
+        gitAt(upstream, "add", "-A");
+        gitAt(upstream, "commit", "-m", "floor");
+        floorSha = gitAt(upstream, "rev-parse", "HEAD");
+        // --- git shim: redirect `git clone <github-url>` to the local fixture -----
+        const gitName = process.platform === "win32" ? "git.exe" : "git";
+        const realGit = (process.env.PATH ?? "")
+            .split(path.delimiter)
+            .map((dir) => path.join(dir, gitName))
+            .find((candidate) => fs.existsSync(candidate)) ?? gitName;
+        shimDir = path.join(workDir, "shim");
+        fs.mkdirSync(shimDir, { recursive: true });
+        const shim = `#!/usr/bin/env bash
+if [ "$1" = "clone" ] || [ "$1" = "ls-remote" ]; then
+  args=()
+  for a in "$@"; do
+    case "$a" in
+      https://github.com/*) a=${JSON.stringify(upstream)} ;;
+    esac
+    args+=("$a")
+  done
+  exec ${JSON.stringify(realGit)} "\${args[@]}"
+fi
+exec ${JSON.stringify(realGit)} "$@"
+`;
+        fs.writeFileSync(path.join(shimDir, "git"), shim, { mode: 0o755 });
+        env = { ...process.env, PATH: `${shimDir}:${process.env.PATH ?? ""}` };
+    });
+    afterAll(() => {
+        if (workDir)
+            fs.rmSync(workDir, { recursive: true, force: true });
+    });
+    /**
+     * Build a fresh local HQ root carrying a directory-target reindex symlink
+     * (core/knowledge/ad-creative-engine -> <hqRoot>/personal/knowledge/ad-creative-engine),
+     * whose target directory holds a sentinel file that must survive the drop.
+     */
+    function makeHqRoot() {
+        const hqRoot = fs.mkdtempSync(path.join(workDir, "hq-"));
+        // HQ-root shape check: companies/ + one of .claude/|core/|personal/.
+        fs.mkdirSync(path.join(hqRoot, "companies"), { recursive: true });
+        fs.mkdirSync(path.join(hqRoot, "core/knowledge"), { recursive: true });
+        // Unchanged vs upstream so the overlay is a no-op for it.
+        fs.writeFileSync(path.join(hqRoot, "core/knowledge/README.md"), "shipped\n");
+        const targetDir = path.join(hqRoot, "personal/knowledge/ad-creative-engine");
+        fs.mkdirSync(targetDir, { recursive: true });
+        const sentinel = path.join(targetDir, "brief.md");
+        fs.writeFileSync(sentinel, "authored locally\n");
+        const link = path.join(hqRoot, "core/knowledge/ad-creative-engine");
+        // Absolute target that includes "/personal/" — matches the overlay
+        // convention masterSyncSymlinkTarget() recognizes.
+        fs.symlinkSync(targetDir, link);
+        return { hqRoot, link, targetDir, sentinel };
+    }
+    function makeConflictArtifactHqRoot() {
+        const hqRoot = fs.mkdtempSync(path.join(workDir, "hq-conflict-"));
+        fs.mkdirSync(path.join(hqRoot, "companies"), { recursive: true });
+        fs.mkdirSync(path.join(hqRoot, "core/knowledge"), { recursive: true });
+        fs.writeFileSync(path.join(hqRoot, "core/knowledge/README.md"), "shipped\n");
+        const targetDir = path.join(hqRoot, "personal/knowledge/conflict-target");
+        fs.mkdirSync(targetDir, { recursive: true });
+        const targetSentinel = path.join(targetDir, "keep.md");
+        fs.writeFileSync(targetSentinel, "linked target stays\n");
+        const link = path.join(hqRoot, "core/knowledge/notes.conflict-2026-08-22T00-00-00Z-peer.md");
+        fs.symlinkSync(targetDir, link);
+        const regularArtifact = path.join(hqRoot, "core/knowledge/regular.conflict-2026-08-22T00-00-00Z-peer.md");
+        fs.writeFileSync(regularArtifact, "remove me\n");
+        const realDirectory = path.join(hqRoot, "core/knowledge/folder.conflict-2026-08-22T00-00-00Z-peer.md");
+        fs.mkdirSync(realDirectory);
+        const directorySentinel = path.join(realDirectory, "keep.md");
+        fs.writeFileSync(directorySentinel, "real directory stays\n");
+        return {
+            hqRoot,
+            link,
+            targetDir,
+            targetSentinel,
+            regularArtifact,
+            realDirectory,
+            directorySentinel,
+        };
+    }
+    function rescueArgs(hqRoot) {
+        return [
+            "--hq-root", hqRoot,
+            "--source", "test/repo",
+            "--ref", "main",
+            "--floor-sha", floorSha,
+            "--yes",
+            "--no-backup",
+        ];
+    }
+    it("sanity: the mocked rmSync reproduces the macOS EISDIR on a dir-target symlink", () => {
+        const { link, targetDir, sentinel } = makeHqRoot();
+        // The old apply path used exactly this call — it must throw under the fault.
+        expect(() => fs.rmSync(link, { force: true })).toThrow(/Path is a directory/);
+        // ...and the fixed path (unlink) removes the link while sparing the target.
+        fs.unlinkSync(link);
+        expect(fs.existsSync(link)).toBe(false);
+        expect(fs.existsSync(targetDir)).toBe(true);
+        expect(fs.readFileSync(sentinel, "utf-8")).toBe("authored locally\n");
+    });
+    it("does not abort the apply on a directory-target symlink (drops it, spares the target)", () => {
+        const { hqRoot, link, targetDir, sentinel } = makeHqRoot();
+        const r = runRescueCapture(rescueArgs(hqRoot), env);
+        // The apply must survive the simulated-macOS rmSync fault: the fix removes
+        // the link with unlink semantics, so the whole update no longer rolls back.
+        // (The old rmSync-based drop throws EISDIR here → non-zero + rollback.)
+        if (r.status !== 0) {
+            throw new Error(`rescue aborted on the dir-target symlink (${r.status}):\n${r.stdout}\n${r.stderr}`);
+        }
+        // The link itself is gone (reindex.sh re-lays it later)...
+        expect(fs.existsSync(link)).toBe(false);
+        // ...but the target directory and its contents are untouched — the drop
+        // must never follow/recurse into the target.
+        expect(fs.existsSync(targetDir)).toBe(true);
+        expect(fs.readFileSync(sentinel, "utf-8")).toBe("authored locally\n");
+    });
+    it("drops a directory-target conflict symlink without touching its target or real directories", () => {
+        const { hqRoot, link, targetDir, targetSentinel, regularArtifact, realDirectory, directorySentinel, } = makeConflictArtifactHqRoot();
+        const r = runRescueCapture(rescueArgs(hqRoot), env);
+        if (r.status !== 0) {
+            throw new Error(`rescue aborted on the conflict dir-symlink (${r.status}):\n${r.stdout}\n${r.stderr}`);
+        }
+        expect(fs.existsSync(link)).toBe(false);
+        expect(fs.existsSync(targetDir)).toBe(true);
+        expect(fs.readFileSync(targetSentinel, "utf-8")).toBe("linked target stays\n");
+        expect(fs.existsSync(regularArtifact)).toBe(false);
+        expect(fs.existsSync(realDirectory)).toBe(true);
+        expect(fs.readFileSync(directorySentinel, "utf-8")).toBe("real directory stays\n");
+    });
+});
+//# sourceMappingURL=rescue-drop-dir-symlink.test.js.map

package/dist/cli/rescue-drop-dir-symlink.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rescue-drop-dir-symlink.test.js","sourceRoot":"","sources":["../../src/cli/rescue-drop-dir-symlink.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,qEAAqE;AACrE,2EAA2E;AAC3E,8EAA8E;AAC9E,2EAA2E;AAC3E,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,IAAI,GAAG,MAAM,cAAc,EAAuB,CAAC;IACzD,MAAM,aAAa,GAAuB,CAAC,CAAC,CAAc,EAAE,IAAmB,EAAE,EAAE;QACjF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAgB,CAAC,CAAC;YAC7C,IAAI,GAAG,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAgB,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC1E,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,kEAAkE,MAAM,CAAC,CAAC,CAAC,EAAE,CACrD,CAAC;gBAC3B,GAAG,CAAC,IAAI,GAAG,eAAe,CAAC;gBAC3B,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,CAAC,IAAI,KAAK,eAAe;gBAAE,MAAM,CAAC,CAAC;YACnE,4EAA4E;QAC9E,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAuB,CAAC;IACzB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,SAAS,GAAG,CAAC,GAAW,EAAE,GAAG,IAAc;IACzC,IAAI,CAAC;QACH,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AACD,MAAM,cAAc,GAAG,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAE5E,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,uBAAuB;AAEjD,8DAA8D;AAC9D,SAAS,gBAAgB,CAAC,IAAc,EAAE,GAAsB;IAC9D,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE;QACzC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC,CAAgC,CAAC;IAClC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE;QACzC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC,CAAgC,CAAC;IAClC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED,QAAQ,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC,wCAAwC,EAAE,GAAG,EAAE;IAC9E,IAAI,OAAe,CAAC;IACpB,IAAI,QAAgB,CAAC;IACrB,IAAI,OAAe,CAAC;IACpB,IAAI,QAAgB,CAAC;IACrB,IAAI,GAAsB,CAAC;IAE3B,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,GAAG,IAAc,EAAE,EAAE,CAC/C,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;QACxB,GAAG;QACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,eAAe,EAAE,GAAG;YACpB,gBAAgB,EAAE,KAAK;YACvB,kBAAkB,EAAE,GAAG;YACvB,mBAAmB,EAAE,KAAK;YAC1B,eAAe,EAAE,GAAG,KAAK,QAAQ;YACjC,kBAAkB,EAAE,GAAG,KAAK,QAAQ;SACrC;KACF,CAAC;SACC,QAAQ,EAAE;SACV,IAAI,EAAE,CAAC;IAEZ,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAE1E,6EAA6E;QAC7E,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC1C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACjD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,0BAA0B,CAAC,EAAE,WAAW,CAAC,CAAC;QAC/E,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7B,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAEhD,6EAA6E;QAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;QACjE,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aACrC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;aACrB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;aACrC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,OAAO,CAAC;QAC5D,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG;;;;;gCAKe,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;;;;SAI/C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;OAEzB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;CAC7B,CAAC;QACE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE;QACZ,IAAI,OAAO;YAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,SAAS,UAAU;QACjB,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QACzD,qEAAqE;QACrE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,0DAA0D;QAC1D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,EAAE,WAAW,CAAC,CAAC;QAE7E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,uCAAuC,CAAC,CAAC;QAC7E,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAClD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC;QACpE,mEAAmE;QACnE,mDAAmD;QACnD,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEhC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC;IAED,SAAS,0BAA0B;QASjC,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;QAClE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,EAAE,WAAW,CAAC,CAAC;QAE7E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC;QAC1E,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACvD,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;QAE1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CACpB,MAAM,EACN,4DAA4D,CAC7D,CAAC;QACF,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEhC,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAC/B,MAAM,EACN,8DAA8D,CAC/D,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QAEjD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAC7B,MAAM,EACN,6DAA6D,CAC9D,CAAC;QACF,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC5B,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC9D,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;QAE9D,OAAO;YACL,MAAM;YACN,IAAI;YACJ,SAAS;YACT,cAAc;YACd,eAAe;YACf,aAAa;YACb,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,SAAS,UAAU,CAAC,MAAc;QAChC,OAAO;YACL,WAAW,EAAE,MAAM;YACnB,UAAU,EAAE,WAAW;YACvB,OAAO,EAAE,MAAM;YACf,aAAa,EAAE,QAAQ;YACvB,OAAO;YACP,aAAa;SACd,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,CAAC;QACnD,6EAA6E;QAC7E,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC9E,4EAA4E;QAC5E,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,CAAC;QAE3D,MAAM,CAAC,GAAG,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QAEpD,2EAA2E;QAC3E,4EAA4E;QAC5E,wEAAwE;QACxE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACvG,CAAC;QAED,2DAA2D;QAC3D,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,wEAAwE;QACxE,6CAA6C;QAC7C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;QACnG,MAAM,EACJ,MAAM,EACN,IAAI,EACJ,SAAS,EACT,cAAc,EACd,eAAe,EACf,aAAa,EACb,iBAAiB,GAClB,GAAG,0BAA0B,EAAE,CAAC;QAEjC,MAAM,CAAC,GAAG,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QAEpD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,+CAA+C,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC/E,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cli/rescue-exec-bit-preserve.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rescue-exec-bit-preserve.test.d.ts.map

package/dist/cli/rescue-exec-bit-preserve.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rescue-exec-bit-preserve.test.d.ts","sourceRoot":"","sources":["../../src/cli/rescue-exec-bit-preserve.test.ts"],"names":[],"mappings":""}

package/dist/cli/rescue-exec-bit-preserve.test.js

@@ -0,0 +1,177 @@
+/**
+ * Regression for the rescue executable-bit guarantee in src/cli/rescue-core.ts
+ * (restoreShebangExecBits).
+ *
+ * rescue rebuilds the tree with `git clone` + `rsync -a`, which faithfully
+ * propagates the upstream git tree mode. So a script committed upstream WITHOUT
+ * its executable bit (a `.sh` checked in as 100644) is delivered non-executable
+ * to every machine -- and a hook the runtime exec's directly then fails with
+ * "Permission denied". After the overlay, rescue restores +x on any shipped
+ * file that begins with a `#!` shebang (and leaves non-shebang files alone).
+ *
+ * Mirrors rescue-mtime-preserve.test.ts: shim `git clone` to a local fixture
+ * and run the real rescue (non-dry-run, --no-backup) so the overlay lays files
+ * down for real.
+ */
+import { describe, it, expect, beforeAll, afterAll } from "vitest";
+import { execFileSync } from "child_process";
+import * as fs from "fs";
+import * as os from "os";
+import * as path from "path";
+import { runRescue } from "./rescue-core.js";
+function has(bin, ...args) {
+    try {
+        execFileSync(bin, args, { stdio: "ignore" });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+const toolsAvailable = has("git", "--version") && has("rsync", "--version");
+const FLOOR_EPOCH = 1577836800; // 2020-01-01
+const HEAD_EPOCH = 1609459200; // 2021-01-01
+function runRescueCapture(argv, env) {
+    let stdout = "";
+    let stderr = "";
+    const origOut = process.stdout.write.bind(process.stdout);
+    const origErr = process.stderr.write.bind(process.stderr);
+    process.stdout.write = ((chunk) => {
+        stdout += String(chunk);
+        return true;
+    });
+    process.stderr.write = ((chunk) => {
+        stderr += String(chunk);
+        return true;
+    });
+    let status;
+    try {
+        status = runRescue(argv, { env }).status;
+    }
+    finally {
+        process.stdout.write = origOut;
+        process.stderr.write = origErr;
+    }
+    return { status, stdout, stderr };
+}
+describe.skipIf(!toolsAvailable)("rescue restores +x on shipped shebang scripts", () => {
+    let workDir;
+    let upstream;
+    let hqRoot;
+    let shimDir;
+    let floorSha;
+    let env;
+    let previousUmask;
+    const gitAt = (cwd, epoch, ...args) => execFileSync("git", args, {
+        cwd,
+        stdio: ["ignore", "pipe", "pipe"],
+        env: {
+            ...process.env,
+            GIT_AUTHOR_NAME: "t",
+            GIT_AUTHOR_EMAIL: "t@t",
+            GIT_COMMITTER_NAME: "t",
+            GIT_COMMITTER_EMAIL: "t@t",
+            GIT_AUTHOR_DATE: `${epoch} +0000`,
+            GIT_COMMITTER_DATE: `${epoch} +0000`,
+        },
+    })
+        .toString()
+        .trim();
+    const isExec = (p) => (fs.statSync(p).mode & 0o111) !== 0;
+    const mode = (p) => fs.statSync(p).mode & 0o777;
+    beforeAll(() => {
+        // git checkout of 100644 respects process umask. Hosts with umask 0077
+        // materialize 0600, and restoreShebangExecBits then yields 0700 — still
+        // correct +x, but not the 0755 this regression pins. Pin a conventional
+        // 0022 umask for the fixture so the exact mode assertion is stable.
+        previousUmask = process.umask(0o022);
+        workDir = fs.mkdtempSync(path.join(os.tmpdir(), "hq-rescue-exec-"));
+        // --- "upstream" repo ----------------------------------------------------
+        upstream = path.join(workDir, "upstream");
+        fs.mkdirSync(path.join(upstream, "core/scripts"), { recursive: true });
+        fs.mkdirSync(path.join(upstream, "core/docs"), { recursive: true });
+        gitAt(workDir, FLOOR_EPOCH, "init", "-b", "main", "upstream");
+        // Shebang script committed WITHOUT +x (the bug: arrives non-executable).
+        const needs = path.join(upstream, "core/scripts/needs-exec.sh");
+        fs.writeFileSync(needs, "#!/bin/bash\necho needs\n", { mode: 0o644 });
+        fs.chmodSync(needs, 0o644);
+        // Shebang script committed WITH +x (control: rsync -a already preserves it).
+        const already = path.join(upstream, "core/scripts/already-exec.sh");
+        fs.writeFileSync(already, "#!/bin/bash\necho already\n");
+        fs.chmodSync(already, 0o755);
+        // Non-shebang data file (control: must NOT be made executable).
+        fs.writeFileSync(path.join(upstream, "core/docs/note.md"), "# note\n", { mode: 0o644 });
+        gitAt(upstream, FLOOR_EPOCH, "add", "-A");
+        gitAt(upstream, FLOOR_EPOCH, "commit", "-m", "floor");
+        floorSha = gitAt(upstream, FLOOR_EPOCH, "rev-parse", "HEAD");
+        // A second commit so floor != HEAD (mirrors the mtime fixture).
+        fs.writeFileSync(path.join(upstream, "core/docs/head.md"), "head\n");
+        gitAt(upstream, HEAD_EPOCH, "add", "-A");
+        gitAt(upstream, HEAD_EPOCH, "commit", "-m", "head");
+        // Confirm the fixture actually stored the intended tree modes.
+        const lsFloor = gitAt(upstream, HEAD_EPOCH, "ls-tree", "-r", "HEAD");
+        if (!/100644\s+blob\s+\S+\s+core\/scripts\/needs-exec\.sh/.test(lsFloor)) {
+            throw new Error(`fixture needs-exec.sh not stored as 100644:\n${lsFloor}`);
+        }
+        if (!/100755\s+blob\s+\S+\s+core\/scripts\/already-exec\.sh/.test(lsFloor)) {
+            throw new Error(`fixture already-exec.sh not stored as 100755:\n${lsFloor}`);
+        }
+        // --- local HQ root being rescued (fresh; upstream files are brand-new) --
+        hqRoot = path.join(workDir, "hq");
+        fs.mkdirSync(path.join(hqRoot, "core"), { recursive: true });
+        fs.mkdirSync(path.join(hqRoot, "personal"), { recursive: true });
+        fs.mkdirSync(path.join(hqRoot, "companies"), { recursive: true });
+        // --- git shim: redirect `git clone <github-url>` to the local fixture ---
+        const realGit = execFileSync("bash", ["-lc", "command -v git"]).toString().trim() || "/usr/bin/git";
+        shimDir = path.join(workDir, "shim");
+        fs.mkdirSync(shimDir, { recursive: true });
+        const shim = `#!/usr/bin/env bash
+if [ "$1" = "clone" ] || [ "$1" = "ls-remote" ]; then
+  args=()
+  for a in "$@"; do
+    case "$a" in
+      https://github.com/*) a=${JSON.stringify(upstream)} ;;
+    esac
+    args+=("$a")
+  done
+  exec ${JSON.stringify(realGit)} "\${args[@]}"
+fi
+exec ${JSON.stringify(realGit)} "$@"
+`;
+        fs.writeFileSync(path.join(shimDir, "git"), shim, { mode: 0o755 });
+        env = { ...process.env, PATH: `${shimDir}:${process.env.PATH ?? ""}` };
+        const r = runRescueCapture([
+            "--hq-root", hqRoot,
+            "--source", "test/repo",
+            "--ref", "main",
+            "--floor-sha", floorSha,
+            "--yes",
+            "--no-backup",
+        ], env);
+        if (r.status !== 0) {
+            throw new Error(`rescue failed (${r.status}):\n${r.stdout}\n${r.stderr}`);
+        }
+    });
+    afterAll(() => {
+        if (workDir)
+            fs.rmSync(workDir, { recursive: true, force: true });
+        if (previousUmask !== undefined)
+            process.umask(previousUmask);
+    });
+    it("restores +x on a shebang script shipped as 0644 (the bug)", () => {
+        const f = path.join(hqRoot, "core/scripts/needs-exec.sh");
+        expect(fs.readFileSync(f, "utf-8")).toBe("#!/bin/bash\necho needs\n");
+        expect(isExec(f)).toBe(true);
+        expect(mode(f)).toBe(0o755); // 0644 + (read-bits -> exec-bits)
+    });
+    it("leaves an already-executable shebang script executable", () => {
+        const f = path.join(hqRoot, "core/scripts/already-exec.sh");
+        expect(isExec(f)).toBe(true);
+    });
+    it("never makes a non-shebang data file executable", () => {
+        const f = path.join(hqRoot, "core/docs/note.md");
+        expect(fs.existsSync(f)).toBe(true);
+        expect(isExec(f)).toBe(false);
+    });
+});
+//# sourceMappingURL=rescue-exec-bit-preserve.test.js.map

package/dist/cli/rescue-exec-bit-preserve.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rescue-exec-bit-preserve.test.js","sourceRoot":"","sources":["../../src/cli/rescue-exec-bit-preserve.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,SAAS,GAAG,CAAC,GAAW,EAAE,GAAG,IAAc;IACzC,IAAI,CAAC;QACH,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AACD,MAAM,cAAc,GAAG,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAE5E,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,aAAa;AAC7C,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,aAAa;AAE5C,SAAS,gBAAgB,CAAC,IAAc,EAAE,GAAsB;IAC9D,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE;QACzC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC,CAAgC,CAAC;IAClC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE;QACzC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC,CAAgC,CAAC;IAClC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED,QAAQ,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACrF,IAAI,OAAe,CAAC;IACpB,IAAI,QAAgB,CAAC;IACrB,IAAI,MAAc,CAAC;IACnB,IAAI,OAAe,CAAC;IACpB,IAAI,QAAgB,CAAC;IACrB,IAAI,GAAsB,CAAC;IAC3B,IAAI,aAAiC,CAAC;IAEtC,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,GAAG,IAAc,EAAE,EAAE,CAC9D,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;QACxB,GAAG;QACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,eAAe,EAAE,GAAG;YACpB,gBAAgB,EAAE,KAAK;YACvB,kBAAkB,EAAE,GAAG;YACvB,mBAAmB,EAAE,KAAK;YAC1B,eAAe,EAAE,GAAG,KAAK,QAAQ;YACjC,kBAAkB,EAAE,GAAG,KAAK,QAAQ;SACrC;KACF,CAAC;SACC,QAAQ,EAAE;SACV,IAAI,EAAE,CAAC;IAEZ,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;IAExD,SAAS,CAAC,GAAG,EAAE;QACb,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,oEAAoE;QACpE,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAEpE,2EAA2E;QAC3E,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC1C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAE9D,yEAAyE;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QAChE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3B,6EAA6E;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAC;QACpE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QACzD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,gEAAgE;QAChE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAExF,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1C,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAC7D,gEAAgE;QAChE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrE,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACzC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAEpD,+DAA+D;QAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,gDAAgD,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,uDAAuD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,2EAA2E;QAC3E,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAElE,2EAA2E;QAC3E,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,cAAc,CAAC;QACpG,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG;;;;;gCAKe,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;;;;SAI/C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;OAEzB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;CAC7B,CAAC;QACE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC;QAEvE,MAAM,CAAC,GAAG,gBAAgB,CACxB;YACE,WAAW,EAAE,MAAM;YACnB,UAAU,EAAE,WAAW;YACvB,OAAO,EAAE,MAAM;YACf,aAAa,EAAE,QAAQ;YACvB,OAAO;YACP,aAAa;SACd,EACD,GAAG,CACJ,CAAC;QACF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE;QACZ,IAAI,OAAO;YAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,aAAa,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;QAC1D,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,kCAAkC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cli/rescue-hq-root-guard.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rescue-hq-root-guard.test.d.ts.map

package/dist/cli/rescue-hq-root-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rescue-hq-root-guard.test.d.ts","sourceRoot":"","sources":["../../src/cli/rescue-hq-root-guard.test.ts"],"names":[],"mappings":""}