@juangadm/pre-post 1.0.0 → 1.1.0

package/README.md

@@ -1,9 +1,35 @@
 # pre-post
 
 Before/after screenshots for pull requests. One command detects the routes your branch
-changed, captures them on production ("Pre") and on your dev server ("Post"), pixel-diffs
-them, uploads the images to GitHub, and posts a single comment on the PR that a reviewer
-can judge at a glance.
+changed, captures each one before and after, uploads the images to GitHub, and puts them at
+the top of the PR description where a reviewer can judge them at a glance.
+
+It works out both sides itself, cheapest option first:
+
+| | Pre (the baseline) | Post (this branch) |
+|---|---|---|
+| 1 | `--before` | `--after` |
+| 2 | `before` in `.pre-post.json` | the preview deployment for this commit |
+| 3 | the production deployment for the base commit | a local dev server |
+| 4 | whatever is on production now | |
+| 5 | the base commit, served locally | |
+
+Rows 2 to 4 need no dev environment at all, which is the point: a preview deployment and a
+production URL are enough for anyone who can open the PR. Deployments come from the GitHub
+Deployments API, so Vercel, Cloudflare Pages, Netlify and Render all work with no extra
+token and nothing to configure; a host that records only a commit status is read from the
+deployment bot's own PR comment instead. Row 4 covers repositories that do not deploy every
+push to their default branch, so nothing is deployed at the fork point — it prints which
+commit Pre actually came from rather than implying the base.
+
+pre-post never guesses a baseline. If no deployment can be found it says so and tells you
+the one flag that fixes it, because a baseline that is quietly the wrong site reads as 100%
+changed on every route and looks exactly like a real result.
+
+The last baseline needs no network at all: it checks the base commit into a throwaway
+worktree and boots its dev script. That keeps pre-post working inside a sandboxed agent
+container, a CI job, or behind an egress allowlist — and it compares against exactly what
+the branch forked from, rendered in the same browser as the Post side.
 
 > Originally forked from [before-and-after](https://github.com/vercel-labs/before-and-after) by James Clements / Vercel Labs.
 
@@ -19,34 +45,62 @@ Capturing 8 screenshots (2 route(s) × 2 viewport(s)) ...
   same     / @ mobile (0.00%, 1990ms)
   same     / @ desktop (0.00%, 2211ms)
 Publishing 10 image(s) to acme/web@pre-post-assets ...
-Updated PR comment: https://github.com/acme/web/pull/42#issuecomment-1
+Updated PR description: https://github.com/acme/web/pull/42
 pre-post · PR #42 · 2 route(s) · 2 viewport(s) · 6.8s
   /         desktop  no change
   /         mobile   no change
   /pricing  desktop  0.64% changed
   /pricing  mobile   1.4% changed
-Comment: https://github.com/acme/web/pull/42#issuecomment-1
+Comment: https://github.com/acme/web/pull/42
 ```
 
 ## How it works
 
-1. **Routes.** Diffs the branch against the merge base with `main`, then follows the import
+1. **Routes.** Diffs the branch against the merge base with `main` — fetching that branch
+   first when the checkout does not have it, which is the normal shape in CI and in the
+   web/sandbox editors. When no shared history can be established it stops with one
+   sentence rather than reporting an empty diff, and `--base <ref>` names the commit
+   directly. Then it follows the import
    graph: a change to `components/ui/button.tsx` marks every page that imports it. Next.js
    App Router and Pages Router, Vite apps (React Router, file-based `src/pages`), and a
    generic fallback. Monorepos are handled by picking the app that owns the changed files.
-2. **Capture.** Playwright + Chromium headless shell. Fixed clock, reduced motion,
-   animations finished, caret hidden, fonts and images settled, layout stable across frames,
-   lazy content primed. 2x device scale, full page (capped at 2400 CSS px), desktop + mobile.
+2. **Capture.** Playwright + Chromium headless shell. The page's own clock is held
+   still while it loads and then run forward by a fixed budget, so a page that animates
+   on a timer is photographed at the same frame on both sides however fast each host
+   answered. Reduced motion, animations finished, caret hidden, fonts and images settled,
+   layout stable, lazy content primed. 2x device scale, full page (capped at 2400 CSS
+   px), desktop (add mobile with `-r`).
    All routes and viewports run concurrently.
 3. **Diff.** Pure-JS pixel comparison in worker threads. Reports the percentage changed,
-   the bounding box, a red-highlight image, and a tight crop of the changed region.
-4. **Publish.** Images go to a `pre-post-assets` branch in the same repository via the GitHub
+   the bounding box, and a tight crop of the changed region. A route counts as changed when
+   the painted difference covers at least `minChangedArea` CSS pixels² (default 100, roughly
+   a third of a 16px icon) or at least `threshold` of the canvas — the first rule is what
+   decides on a page, the second on a small image.
+4. **Layout shift.** A padding change near the top of a page moves everything below it, and
+   pixel diffing counts every moved pixel as changed: a change a designer would call
+   "slightly roomier" reads as most of the page repainted, and the crop is suppressed just
+   when it would be most useful. So the two sides are checked for a single vertical offset
+   first — how far the content moved, and from which row. When one is found, Pre is re-spaced
+   into Post's layout and the two are compared there: the crop comes from that pair, and the
+   comment says `Content shifted down 48px` instead of quoting a percentage. Rows Post gained
+   are left as background rather than skipped, so content inserted above the shift — the
+   banner that caused it — still reads as new rather than as nothing. The offset is only
+   accepted when it accounts for most of the difference across the rows both sides share.
+   The raw numbers are left alone: a move is a visual change, and reporting less of one would
+   hide it. Reflow, where content moves both across and down, has no single offset to find,
+   so it is reported the way it always was.
+5. **Publish.** Images go to a `pre-post-assets` branch in the same repository via the GitHub
    API, as one commit per run. Nothing is committed to the PR branch, no CI is triggered,
-   and the blob URLs render on private repos. `pre-post prune` removes images for PRs
-   closed more than 90 days ago.
-5. **Comment.** One sticky comment per PR, updated in place on every run. Changed routes show
-   a Pre/Post crop with the full page and diff collapsed underneath; unchanged routes fold
-   into a single line.
+   and the blob URLs render on private repos — a screenshot is visible to exactly whoever
+   can see the repository. `pre-post prune` removes images for PRs closed more than 90 days
+   ago, but note that it commits a deletion rather than rewriting history: the older commits
+   still hold the blobs, so a link handed out earlier keeps working. Treat anything captured
+   as permanent, and think twice before pointing pre-post at a preview holding real data.
+6. **Describe.** The images go in a delimited block at the top of the PR description,
+   replaced in place on every run and leaving your own text untouched. Changed routes show
+   a Pre/Post crop with the full page collapsed underneath; unchanged routes fold into a
+   single line. If the PR cannot be edited — a fork, a read-only token — it falls back to
+   one sticky comment.
 
 ## Install
 
@@ -66,7 +120,8 @@ Then say `/pre-post` after making UI changes.
 
 ```bash
 pre-post pr                                  # everything, on the current branch's PR
-pre-post pr --before https://acme.com        # first run in a repo (saved to .pre-post.json)
+pre-post pr --before https://acme.com        # pin the baseline (saved to .pre-post.json)
+pre-post pr --no-local-baseline              # never build the base commit locally
 pre-post pr --routes /pricing,/docs          # explicit routes
 pre-post pr --viewports desktop,1440x900     # custom viewports
 pre-post pr --dry-run                        # capture + diff locally, post nothing
@@ -83,6 +138,24 @@ pre-post doctor                              # browser, token, dev server, confi
 When something needs a human, the CLI exits with code 3 and one sentence saying what to do
 (log in, start the dev server, pass `--before`). Re-running picks up where it left off.
 
+Exit codes, so a script or an agent can branch on them:
+
+| code | meaning |
+|---|---|
+| 0 | done; for `doctor`, `pre-post pr` can run |
+| 1 | the run failed — every capture errored, or an unexpected error; for `doctor`, a required check failed |
+| 2 | the arguments could not be parsed |
+| 3 | something needs a human; the message says what |
+
+`doctor` marks a check **FAIL** only when `pre-post pr` has no way to proceed without it —
+the browser, a GitHub token, and being inside a git repository. Everything else prints as
+**note**: no dev server running, or no `--before` saved, narrows *which* strategy a run
+picks rather than stopping it, so those never change the exit code.
+
+Results go into a delimited block at the top of the PR description, which re-runs replace in
+place, leaving your own text untouched. If the PR cannot be edited — a fork, a read-only
+token — it falls back to a single sticky comment.
+
 ## Configuration
 
 Optional `.pre-post.json` in the repo root:
@@ -92,12 +165,12 @@ Optional `.pre-post.json` in the repo root:
   "before": "https://acme.com",
   "routes": ["/"],
   "samples": { "/blog/[slug]": "/blog/hello-world" },
-  "viewports": ["desktop", "mobile"],
+  "viewports": ["desktop"],
   "fullPage": true,
   "maxHeight": 2400,
   "scale": 2,
   "threshold": 0.001,
-  "minChangedPixels": 40,
+  "minChangedArea": 100,
   "maxRoutes": 6,
   "ignore": ["apps/docs"],
   "headers": {},
@@ -110,7 +183,7 @@ Environment:
 | Variable | Purpose |
 |---|---|
 | `GH_TOKEN` / `GITHUB_TOKEN` | GitHub token (default: `gh auth token`) |
-| `VERCEL_AUTOMATION_BYPASS_SECRET` | Bypass Vercel Deployment Protection on the production URL |
+| `VERCEL_AUTOMATION_BYPASS_SECRET` | Bypass Vercel Deployment Protection on preview and production URLs |
 | `PRE_POST_CONCURRENCY` | Parallel pages (default 6) |
 | `PLAYWRIGHT_CHROMIUM_EXECUTABLE_PATH` | Use a specific Chromium binary |
 | `GH_REPO` | `owner/repo` when the remote URL cannot be parsed |
@@ -130,6 +203,12 @@ pnpm test:unit
 TEST_BROWSER=true pnpm test        # needs a Chromium; npx playwright-core install chromium-headless-shell
 ```
 
+pnpm and npm cannot share a `node_modules`. pnpm builds a symlinked tree that npm
+cannot read, so `npm install` over it fails with `Cannot read properties of null
+(reading 'edgesOut')`, which names none of that. Run `rm -rf node_modules
+site/node_modules` before switching either way. npm also installs the CLI only —
+`site/` is a pnpm workspace member, so use pnpm to work on the site.
+
 ## License
 
 MIT

package/dist/baseline.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Serve the PR's base commit locally, as the "Pre" side.
+ *
+ * This is the baseline that always works: it needs no deployment, no
+ * production URL and no network, so it is what keeps pre-post usable inside a
+ * sandbox — a cloud agent container, a CI job, or any box behind an egress
+ * allowlist. It is also the most honest comparison available, because both
+ * sides then render in the same environment with the same fonts and the same
+ * browser, leaving the diff as the only variable.
+ *
+ * The cost is time: a checkout, an install and a dev-server boot. So callers
+ * reach for it after a reachable deployment, not before one.
+ */
+export interface LocalBaseline {
+    url: string;
+    /** Stop the dev server and delete the worktree. Safe to call twice. */
+    stop: () => Promise<void>;
+}
+interface PackageManager {
+    bin: string;
+    install: string[];
+    /** Build `run <script>` argv, appending extra args the way this manager wants. */
+    run: (script: string, args: string[]) => string[];
+}
+/**
+ * Which package manager this tree *declares*, from its `packageManager` field
+ * or its lockfile. Defaults to npm.
+ *
+ * The field wins over the lockfile because it is the deliberate statement: a
+ * repository mid-migration can carry two lockfiles, but it names one manager.
+ */
+export declare function detectPackageManager(dir: string, repoRoot?: string): PackageManager;
+/**
+ * Is `bin` runnable here?
+ *
+ * A PATH scan rather than a `--version` subprocess: this answers before every
+ * local baseline, and spawning a process to learn that a process cannot be
+ * spawned is the wrong shape.
+ */
+export declare function onPath(bin: string, env?: NodeJS.ProcessEnv): boolean;
+export interface ManagerChoice {
+    /** The manager to run, or null when neither it nor npm is installed here. */
+    pm: PackageManager | null;
+    /** What the repository declares. Differs from `pm` when we fell back. */
+    declared: PackageManager;
+}
+/**
+ * The manager to actually run: what the repository declares, if it is installed.
+ *
+ * Declaring pnpm does not put pnpm on PATH. On a real machine it was not there,
+ * and the local baseline — the fallback that exists for when nothing is
+ * deployed — died on `pnpm install` with no hint that the missing piece was
+ * pnpm itself. The same shell could still build the CLI, so the tool ran while
+ * its last resort could not.
+ *
+ * npm ships with Node, so it is the fallback with the best odds of being
+ * present. It will not honour a pnpm or yarn lockfile, so the baseline it
+ * installs can drift from the locked versions — worth saying out loud, and
+ * still far better than no baseline at all.
+ */
+export declare function resolvePackageManager(dir: string, repoRoot?: string, has?: (bin: string) => boolean): ManagerChoice;
+/**
+ * The directory to actually serve.
+ *
+ * The app root is detected from the files a branch changed, which answers
+ * "which routes moved" — not "which package can be served". A PR touching only
+ * the CLI resolves to the repo root, which has no dev script even though the
+ * site next door does. So prefer the detected directory and otherwise take the
+ * nearest package that can start a server.
+ */
+export declare function servableDir(treeRoot: string, appPrefix?: string): {
+    dir: string;
+    script: string;
+} | null;
+/**
+ * Copy the working checkout's local env files into a throwaway worktree.
+ *
+ * .env files are gitignored, so a fresh worktree of the base commit has none.
+ * An app that needs one to boot then either never starts or serves an error
+ * page — and an error page diffed against the real branch reports a wall of
+ * changes the PR never made, which is worse than reporting no baseline at all.
+ *
+ * Only ever writes inside `to`, and returns names, never values: these files
+ * are exactly the ones that hold secrets.
+ */
+export declare function copyEnvFiles(from: string, to: string, appPrefix?: string): string[];
+/** An OS-assigned free port. */
+export declare function freePort(): Promise<number>;
+export interface BaselineOptions {
+    repoRoot: string;
+    /** Commit to serve. Omit to serve the working tree as it stands. */
+    sha?: string;
+    /** Directory holding the app's package.json, relative to the repo root. */
+    appPrefix?: string;
+    /** Budget for install + boot. */
+    timeoutMs?: number;
+    /** Injectable for tests; defaults to a real PATH scan. */
+    pathHas?: (bin: string) => boolean;
+    log?: (msg: string) => void;
+}
+/**
+ * Check out `sha` into a throwaway worktree, install, and start its dev server.
+ *
+ * Returns null when this repo cannot be served this way (no dev script, no
+ * install, server never came up). Callers treat that as "try the next option",
+ * so every failure path cleans up after itself and stays quiet.
+ */
+export declare function serveBaseCommit(opts: BaselineOptions): Promise<LocalBaseline | null>;
+/**
+ * Boot this repository's dev server without one already running.
+ *
+ * The working tree is what the author is looking at, uncommitted edits and all,
+ * so it is the honest "Post" when nothing is deployed. Serving it needs no
+ * worktree and usually no install, which is why it is cheaper than the base
+ * side it gets paired with.
+ */
+export declare function serveWorkingTree(opts: Omit<BaselineOptions, 'sha'>): Promise<LocalBaseline | null>;
+export {};
+//# sourceMappingURL=baseline.d.ts.map

package/dist/baseline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.d.ts","sourceRoot":"","sources":["../src/baseline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAGD,UAAU,cAAc;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,kFAAkF;IAClF,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC;CACnD;AAgBD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,cAAc,CAUnF;AAED;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAUjF;AAED,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,EAAE,EAAE,cAAc,GAAG,IAAI,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,CAAC,EAAE,MAAM,EACjB,GAAG,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAgB,GACrC,aAAa,CAIf;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAUxG;AAKD;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAkBnF;AAED,gCAAgC;AAChC,wBAAgB,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAS1C;AAgBD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACnC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAE1F;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAExG"}

package/dist/baseline.js

@@ -0,0 +1,316 @@
+/**
+ * Serve the PR's base commit locally, as the "Pre" side.
+ *
+ * This is the baseline that always works: it needs no deployment, no
+ * production URL and no network, so it is what keeps pre-post usable inside a
+ * sandbox — a cloud agent container, a CI job, or any box behind an egress
+ * allowlist. It is also the most honest comparison available, because both
+ * sides then render in the same environment with the same fonts and the same
+ * browser, leaving the diff as the only variable.
+ *
+ * The cost is time: a checkout, an install and a dev-server boot. So callers
+ * reach for it after a reachable deployment, not before one.
+ */
+import { spawn, execFileSync } from 'child_process';
+import fs from 'fs';
+import net from 'net';
+import os from 'os';
+import path from 'path';
+import { devScript, readPackage } from './pkg.js';
+import { findAppRoots } from './routes.js';
+const NPM = { bin: 'npm', install: ['install'], run: (s, a) => ['run', s, '--', ...a] };
+const PNPM = { bin: 'pnpm', install: ['install', '--prefer-offline'], run: (s, a) => ['run', s, ...a] };
+const YARN = { bin: 'yarn', install: ['install'], run: (s, a) => ['run', s, ...a] };
+const BUN = { bin: 'bun', install: ['install'], run: (s, a) => ['run', s, ...a] };
+const MANAGERS = [
+    { lockfile: 'pnpm-lock.yaml', pm: PNPM },
+    { lockfile: 'yarn.lock', pm: YARN },
+    { lockfile: 'bun.lockb', pm: BUN },
+    { lockfile: 'package-lock.json', pm: NPM },
+];
+const BY_NAME = { npm: NPM, pnpm: PNPM, yarn: YARN, bun: BUN };
+/**
+ * Which package manager this tree *declares*, from its `packageManager` field
+ * or its lockfile. Defaults to npm.
+ *
+ * The field wins over the lockfile because it is the deliberate statement: a
+ * repository mid-migration can carry two lockfiles, but it names one manager.
+ */
+export function detectPackageManager(dir, repoRoot) {
+    for (const candidate of [dir, repoRoot].filter(Boolean)) {
+        const field = readPackage(candidate)?.packageManager;
+        const named = typeof field === 'string' ? BY_NAME[field.split('@')[0].trim()] : undefined;
+        if (named)
+            return named;
+        for (const { lockfile, pm } of MANAGERS) {
+            if (fs.existsSync(path.join(candidate, lockfile)))
+                return pm;
+        }
+    }
+    return NPM;
+}
+/**
+ * Is `bin` runnable here?
+ *
+ * A PATH scan rather than a `--version` subprocess: this answers before every
+ * local baseline, and spawning a process to learn that a process cannot be
+ * spawned is the wrong shape.
+ */
+export function onPath(bin, env = process.env) {
+    const dirs = (env.PATH ?? '').split(path.delimiter).filter(Boolean);
+    const exts = process.platform === 'win32'
+        ? (env.PATHEXT ?? '.COM;.EXE;.BAT;.CMD').split(';').filter(Boolean)
+        : [''];
+    return dirs.some(dir => exts.some(ext => {
+        // throwIfNoEntry keeps the common case (a miss) from constructing an
+        // exception; the catch stays for the rarer EACCES/ELOOP.
+        try {
+            return fs.statSync(path.join(dir, bin + ext), { throwIfNoEntry: false })?.isFile() ?? false;
+        }
+        catch {
+            return false;
+        }
+    }));
+}
+/**
+ * The manager to actually run: what the repository declares, if it is installed.
+ *
+ * Declaring pnpm does not put pnpm on PATH. On a real machine it was not there,
+ * and the local baseline — the fallback that exists for when nothing is
+ * deployed — died on `pnpm install` with no hint that the missing piece was
+ * pnpm itself. The same shell could still build the CLI, so the tool ran while
+ * its last resort could not.
+ *
+ * npm ships with Node, so it is the fallback with the best odds of being
+ * present. It will not honour a pnpm or yarn lockfile, so the baseline it
+ * installs can drift from the locked versions — worth saying out loud, and
+ * still far better than no baseline at all.
+ */
+export function resolvePackageManager(dir, repoRoot, has = onPath) {
+    const declared = detectPackageManager(dir, repoRoot);
+    if (has(declared.bin))
+        return { pm: declared, declared };
+    return { pm: has(NPM.bin) ? NPM : null, declared };
+}
+/**
+ * The directory to actually serve.
+ *
+ * The app root is detected from the files a branch changed, which answers
+ * "which routes moved" — not "which package can be served". A PR touching only
+ * the CLI resolves to the repo root, which has no dev script even though the
+ * site next door does. So prefer the detected directory and otherwise take the
+ * nearest package that can start a server.
+ */
+export function servableDir(treeRoot, appPrefix) {
+    const preferred = appPrefix ? path.join(treeRoot, appPrefix) : treeRoot;
+    const preferredScript = devScript(preferred);
+    if (preferredScript)
+        return { dir: preferred, script: preferredScript };
+    // Deepest first: a workspace app beats the repo root that merely contains it.
+    for (const dir of findAppRoots(treeRoot).sort((a, b) => b.length - a.length)) {
+        const script = devScript(dir);
+        if (script)
+            return { dir, script };
+    }
+    return null;
+}
+/** Local env files, in the order a framework would layer them. */
+const ENV_FILES = ['.env', '.env.local', '.env.development', '.env.development.local'];
+/**
+ * Copy the working checkout's local env files into a throwaway worktree.
+ *
+ * .env files are gitignored, so a fresh worktree of the base commit has none.
+ * An app that needs one to boot then either never starts or serves an error
+ * page — and an error page diffed against the real branch reports a wall of
+ * changes the PR never made, which is worse than reporting no baseline at all.
+ *
+ * Only ever writes inside `to`, and returns names, never values: these files
+ * are exactly the ones that hold secrets.
+ */
+export function copyEnvFiles(from, to, appPrefix) {
+    const copied = [];
+    const root = path.resolve(to);
+    for (const dir of appPrefix ? ['', appPrefix] : ['']) {
+        for (const name of ENV_FILES) {
+            const src = path.join(from, dir, name);
+            const dest = path.resolve(root, dir, name);
+            // The worktree is the only place this may write.
+            if (dest !== root && !dest.startsWith(root + path.sep))
+                continue;
+            if (!fs.existsSync(src) || fs.existsSync(dest))
+                continue;
+            try {
+                fs.mkdirSync(path.dirname(dest), { recursive: true });
+                fs.copyFileSync(src, dest);
+                copied.push(path.posix.join(dir, name));
+            }
+            catch { /* best effort: a missing env file is not fatal on its own */ }
+        }
+    }
+    return copied;
+}
+/** An OS-assigned free port. */
+export function freePort() {
+    return new Promise((resolve, reject) => {
+        const srv = net.createServer();
+        srv.once('error', reject);
+        srv.listen(0, '127.0.0.1', () => {
+            const port = srv.address().port;
+            srv.close(() => resolve(port));
+        });
+    });
+}
+async function waitForServer(url, timeoutMs, alive) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        if (!alive())
+            return false;
+        try {
+            await fetch(url, { signal: AbortSignal.timeout(2000) });
+            return true;
+        }
+        catch {
+            await new Promise(r => setTimeout(r, 500));
+        }
+    }
+    return false;
+}
+/**
+ * Check out `sha` into a throwaway worktree, install, and start its dev server.
+ *
+ * Returns null when this repo cannot be served this way (no dev script, no
+ * install, server never came up). Callers treat that as "try the next option",
+ * so every failure path cleans up after itself and stays quiet.
+ */
+export async function serveBaseCommit(opts) {
+    return serveLocally(opts);
+}
+/**
+ * Boot this repository's dev server without one already running.
+ *
+ * The working tree is what the author is looking at, uncommitted edits and all,
+ * so it is the honest "Post" when nothing is deployed. Serving it needs no
+ * worktree and usually no install, which is why it is cheaper than the base
+ * side it gets paired with.
+ */
+export async function serveWorkingTree(opts) {
+    return serveLocally({ ...opts, sha: undefined });
+}
+async function serveLocally(opts) {
+    const log = opts.log ?? (() => undefined);
+    const what = opts.sha ? `base commit ${opts.sha.slice(0, 7)}` : 'the working tree';
+    /** Every caller treats null as "try the next option", so say why before returning it. */
+    const skip = (detail) => {
+        log(`Could not serve ${what}: ${detail}`);
+        return null;
+    };
+    const timeoutMs = opts.timeoutMs ?? 300_000;
+    const deadline = Date.now() + timeoutMs;
+    const worktree = opts.sha ? fs.mkdtempSync(path.join(os.tmpdir(), 'pre-post-base-')) : opts.repoRoot;
+    let child = null;
+    let stopped = false;
+    // A detached dev server survives Ctrl-C and keeps its port, so tear it down
+    // on the signals that end the run as well as on the normal path.
+    const onSignal = () => { void cleanup(); };
+    const untrap = () => {
+        process.off('SIGINT', onSignal);
+        process.off('SIGTERM', onSignal);
+        process.off('exit', onSignal);
+    };
+    const cleanup = async () => {
+        if (stopped)
+            return;
+        stopped = true;
+        untrap();
+        if (child && child.exitCode === null) {
+            try {
+                process.kill(-child.pid, 'SIGTERM');
+            }
+            catch { /* already gone */ }
+        }
+        // Guard on the thing that actually matters: only a throwaway worktree may be
+        // removed. Checking `opts.sha` instead would let any future caller that
+        // points `worktree` at a real checkout delete uncommitted work.
+        if (worktree === opts.repoRoot)
+            return;
+        try {
+            execFileSync('git', ['worktree', 'remove', '--force', worktree], { cwd: opts.repoRoot, stdio: 'ignore' });
+        }
+        catch {
+            fs.rmSync(worktree, { recursive: true, force: true });
+        }
+    };
+    if (opts.sha) {
+        try {
+            execFileSync('git', ['worktree', 'add', '--detach', '--force', worktree, opts.sha], { cwd: opts.repoRoot, stdio: 'ignore' });
+        }
+        catch {
+            await cleanup();
+            return skip('the worktree checkout failed.');
+        }
+        const copied = copyEnvFiles(opts.repoRoot, worktree, opts.appPrefix);
+        if (copied.length)
+            log(`Using local env file(s) for the baseline: ${copied.join(', ')}`);
+    }
+    const app = servableDir(worktree, opts.appPrefix);
+    if (!app) {
+        await cleanup();
+        return skip('no package with a dev, serve or start script was found.');
+    }
+    const { dir: appDir, script } = app;
+    const { pm, declared } = resolvePackageManager(appDir, worktree, opts.pathHas);
+    const rel = path.relative(worktree, appDir);
+    // The worktree is a throwaway that cleanup deletes on the way out, so every
+    // "run it by hand" below names the same directory in the caller's own
+    // checkout instead — the one that will still be there to run it in.
+    const appIn = path.join(opts.repoRoot, rel);
+    const where = rel || 'the repository';
+    if (!pm) {
+        await cleanup();
+        return skip(`neither ${declared.bin} nor npm is on PATH, so nothing can install ${where}.`);
+    }
+    const install = !fs.existsSync(path.join(appDir, 'node_modules'));
+    // Substituting npm for the declared manager is safe in a throwaway worktree
+    // and not in the caller's own checkout: npm cannot share a node_modules with
+    // pnpm, so installing over their tree leaves the working copy broken — the
+    // state the README tells people to `rm -rf node_modules` out of. Taking
+    // screenshots must not cost someone their install, so this stops instead.
+    // Only the install is dangerous; running a script against a tree that is
+    // already installed is not, which is why this asks about both.
+    if (pm !== declared && install && worktree === opts.repoRoot) {
+        await cleanup();
+        return skip(`${declared.bin} is not on PATH, and installing ${where} with npm instead would leave a node_modules your ${declared.bin} cannot use. Install ${declared.bin}, or run \`${declared.bin} install\` in ${appIn}.`);
+    }
+    if (pm !== declared) {
+        log(`${declared.bin} is not on PATH; installing the baseline with ${pm.bin} instead (it will not honour the ${declared.bin} lockfile).`);
+    }
+    log(`Starting a dev server for ${what} (${pm.bin} ${script}) ...`);
+    if (install) {
+        try {
+            execFileSync(pm.bin, pm.install, { cwd: appDir, stdio: 'ignore', timeout: Math.max(1, deadline - Date.now()) });
+        }
+        catch {
+            await cleanup();
+            return skip(`\`${pm.bin} ${pm.install.join(' ')}\` failed. Run it in ${appIn} to see why.`);
+        }
+    }
+    const port = await freePort();
+    const url = `http://localhost:${port}`;
+    child = spawn(pm.bin, pm.run(script, ['--port', String(port)]), {
+        cwd: appDir,
+        stdio: 'ignore',
+        detached: true,
+        env: { ...process.env, PORT: String(port), BROWSER: 'none' },
+    });
+    child.unref();
+    const ready = await waitForServer(url, Math.max(1, deadline - Date.now()), () => !!child && child.exitCode === null);
+    if (!ready) {
+        await cleanup();
+        return skip(`${pm.bin} ${script} did not start serving within ${Math.round(timeoutMs / 1000)}s (missing env vars are the usual cause).`);
+    }
+    process.once('SIGINT', onSignal);
+    process.once('SIGTERM', onSignal);
+    process.once('exit', onSignal);
+    return { url, stop: cleanup };
+}
+//# sourceMappingURL=baseline.js.map

package/dist/baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.js","sourceRoot":"","sources":["../src/baseline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,EAAgB,YAAY,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAgB3C,MAAM,GAAG,GAAmB,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;AACxG,MAAM,IAAI,GAAmB,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;AACxH,MAAM,IAAI,GAAmB,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;AACpG,MAAM,GAAG,GAAmB,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;AAElG,MAAM,QAAQ,GAAoD;IAChE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,EAAE,IAAI,EAAE;IACxC,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE;IACnC,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE;IAClC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,EAAE,GAAG,EAAE;CAC3C,CAAC;AAEF,MAAM,OAAO,GAAmC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE/F;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,QAAiB;IACjE,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC;QACrD,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,KAAK,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,QAAQ,EAAE,CAAC;YACxC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,MAAyB,OAAO,CAAC,GAAG;IACtE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QACvC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACnE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACT,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACtC,qEAAqE;QACrE,yDAAyD;QACzD,IAAI,CAAC;YAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC9H,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,QAAiB,EACjB,MAAgC,MAAM;IAEtC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACzD,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,SAAkB;IAC9D,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxE,MAAM,eAAe,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,eAAe;QAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACxE,8EAA8E;IAC9E,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7E,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,MAAM;YAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kEAAkE;AAClE,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,wBAAwB,CAAC,CAAC;AAEvF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,EAAU,EAAE,SAAkB;IACvE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACrD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3C,iDAAiD;YACjD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YACzD,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC,CAAC,6DAA6D,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,QAAQ;IACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAC9B,MAAM,IAAI,GAAI,GAAG,CAAC,OAAO,EAAsB,CAAC,IAAI,CAAC;YACrD,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,SAAiB,EAAE,KAAoB;IAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAeD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAqB;IACzD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAkC;IACvE,OAAO,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAqB;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACnF,yFAAyF;IACzF,MAAM,IAAI,GAAG,CAAC,MAAc,EAAQ,EAAE;QACpC,GAAG,CAAC,mBAAmB,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IACrG,IAAI,KAAK,GAAwB,IAAI,CAAC;IACtC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,EAAE,CAAC;QACT,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACrC,IAAI,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAI,EAAE,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC5E,CAAC;QACD,6EAA6E;QAC7E,wEAAwE;QACxE,gEAAgE;QAChE,IAAI,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAAE,OAAO;QACvC,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5G,CAAC;QAAC,MAAM,CAAC;YACP,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/H,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,MAAM;YAAE,GAAG,CAAC,6CAA6C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAEpC,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,qBAAqB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,4EAA4E;IAC5E,sEAAsE;IACtE,oEAAoE;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,IAAI,gBAAgB,CAAC;IACtC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,OAAO,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,WAAW,QAAQ,CAAC,GAAG,+CAA+C,KAAK,GAAG,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IAClE,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,+DAA+D;IAC/D,IAAI,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7D,MAAM,OAAO,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,mCAAmC,KAAK,qDAAqD,QAAQ,CAAC,GAAG,wBAAwB,QAAQ,CAAC,GAAG,cAAc,QAAQ,CAAC,GAAG,iBAAiB,KAAK,GAAG,CAAC,CAAC;IAC/N,CAAC;IACD,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpB,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,iDAAiD,EAAE,CAAC,GAAG,oCAAoC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC;IAC3I,CAAC;IACD,GAAG,CAAC,6BAA6B,IAAI,KAAK,EAAE,CAAC,GAAG,IAAI,MAAM,OAAO,CAAC,CAAC;IACnE,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAClH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,wBAAwB,KAAK,cAAc,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,oBAAoB,IAAI,EAAE,CAAC;IACvC,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAC9D,GAAG,EAAE,MAAM;QACX,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,IAAI;QACd,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;KAC7D,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IACrH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,OAAO,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,MAAM,iCAAiC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC3I,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC"}