@kaitranntt/ccs 8.2.0 → 8.3.0-dev.1

package/dist/commands/bar/install-subcommand.js

@@ -0,0 +1,605 @@
+"use strict";
+/**
+ * `ccs bar install` — download the CCS Bar app from the floating
+ * `ccs-bar-latest` GitHub release tag and install to ~/Applications.
+ *
+ * Intentionally uses a FLOATING tag (not the exact CLI version) so the
+ * Swift app can be rebuilt and published independently. After extraction,
+ * the real app version is read from the bundle's Contents/Info.plist
+ * (CFBundleShortVersionString) and pinned to ~/.ccs/bar/.version.
+ *
+ * Post-install compat check: single GET {baseUrl}/api/bar/summary.
+ * 200 = server serves the bar API (compatible).
+ * 404 = server too old (actionable warning).
+ * Other / unreachable = soft-warn, never hard-fail install.
+ *
+ * Mirrors the download/version-pin pattern in src/cliproxy/binary-manager.ts.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleBarInstall = exports.validateDownloadUrl = void 0;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const config_loader_facade_1 = require("../../config/config-loader-facade");
+const arg_extractor_1 = require("../arg-extractor");
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** Floating release tag — never pin to exact CLI semver. */
+const BAR_RELEASE_TAG = 'ccs-bar-latest';
+const BAR_APP_NAME = 'CCS Bar.app';
+const BAR_ASSET_NAME = 'CCS-Bar.app.zip';
+const BAR_GITHUB_REPO = 'kaitranntt/ccs';
+/**
+ * Allowlist of hostnames from which we will accept asset downloads.
+ * GitHub releases redirect from github.com to objects.githubusercontent.com.
+ *
+ * TODO(checksum-v2): once release assets ship a checksums.txt/.sha256 file,
+ * wire SHA-256 verification here. The download URL is already validated for
+ * host+HTTPS as a v1 minimum guard. The verifier hook below is the intended
+ * extension point.
+ */
+const DOWNLOAD_HOST_ALLOWLIST = [
+    'github.com',
+    'objects.githubusercontent.com',
+];
+// ---------------------------------------------------------------------------
+// Host allowlist validation (Finding #9)
+// ---------------------------------------------------------------------------
+/**
+ * Validate that a download URL is https and its hostname is in the allowlist
+ * (exact match or *.githubusercontent.com wildcard).
+ * Throws a descriptive Error if validation fails.
+ */
+function validateDownloadUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new Error(`Download URL is not a valid URL: ${url}`);
+    }
+    if (parsed.protocol !== 'https:') {
+        throw new Error(`Download URL must use HTTPS, got: ${parsed.protocol} for ${url}`);
+    }
+    const host = parsed.hostname.toLowerCase();
+    const allowed = DOWNLOAD_HOST_ALLOWLIST.includes(host) || host.endsWith('.githubusercontent.com');
+    if (!allowed) {
+        throw new Error(`Download URL hostname "${host}" is not in the trusted allowlist ` +
+            `(${DOWNLOAD_HOST_ALLOWLIST.join(', ')}, *.githubusercontent.com). ` +
+            `Refusing to download from untrusted host.`);
+    }
+}
+exports.validateDownloadUrl = validateDownloadUrl;
+// ---------------------------------------------------------------------------
+// Production implementation helpers
+// ---------------------------------------------------------------------------
+async function defaultFetchReleaseAsset(tag, asset) {
+    const { request } = await Promise.resolve().then(() => __importStar(require('undici')));
+    const apiUrl = `https://api.github.com/repos/${BAR_GITHUB_REPO}/releases/tags/${tag}`;
+    const { statusCode, body } = await request(apiUrl, {
+        headers: {
+            'User-Agent': 'ccs-cli',
+            Accept: 'application/vnd.github+json',
+        },
+    });
+    if (statusCode !== 200) {
+        throw new Error(`GitHub API returned ${statusCode} for tag ${tag}`);
+    }
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const release = (await body.json());
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const found = release.assets.find((a) => a.name === asset);
+    if (!found) {
+        throw new Error(`Asset "${asset}" not found in release ${tag}`);
+    }
+    return { downloadUrl: found.browser_download_url };
+}
+/**
+ * Download a zip from `url` (following up to 5 GitHub 302 redirects, re-validating
+ * each hop's Location hostname) and extract its contents into `dest`.
+ *
+ * Fixes applied:
+ * - Fix #6: maxRedirections:0 + manual redirect following so every hop's Location
+ *   header is passed through validateDownloadUrl before following it.
+ *   The previous maxRedirections:5 let undici follow redirects to ANY host unchecked.
+ * - Fix #14: list zip entries with `unzip -l` before extracting; reject the archive
+ *   if any entry path contains ".." or starts with "/" (zip-slip guard).
+ * - Finding #11: check `statusCode` and throw a descriptive error before streaming.
+ * - Finding #9: validate host+HTTPS before making the first request.
+ */
+async function defaultDownloadAndExtract(url, dest) {
+    const { request } = await Promise.resolve().then(() => __importStar(require('undici')));
+    const { createWriteStream, mkdirSync } = fs;
+    const { promisify } = await Promise.resolve().then(() => __importStar(require('util')));
+    const { pipeline } = await Promise.resolve().then(() => __importStar(require('stream')));
+    const streamPipeline = promisify(pipeline);
+    const { execFile } = await Promise.resolve().then(() => __importStar(require('child_process')));
+    const execFileAsync = promisify(execFile);
+    // Validate initial URL (Finding #9)
+    validateDownloadUrl(url);
+    mkdirSync(dest, { recursive: true });
+    // Fix #6: follow redirects manually so each hop is re-validated.
+    const MAX_REDIRECTS = 5;
+    let currentUrl = url;
+    let redirectsFollowed = 0;
+    while (true) {
+        const { statusCode, headers, body } = await request(currentUrl, {
+            maxRedirections: 0, // disable undici's auto-follow; we follow manually
+        });
+        if (statusCode >= 300 && statusCode < 400) {
+            const location = Array.isArray(headers['location'])
+                ? headers['location'][0]
+                : headers['location'];
+            if (!location) {
+                throw new Error(`Redirect (HTTP ${statusCode}) from ${currentUrl} has no Location header`);
+            }
+            // Resolve relative redirects against the current URL
+            const resolved = new URL(location, currentUrl).toString();
+            // Re-validate the redirect target — this is the key fix for #6
+            validateDownloadUrl(resolved);
+            if (redirectsFollowed >= MAX_REDIRECTS) {
+                throw new Error(`Too many redirects (>${MAX_REDIRECTS}) while downloading ${url}`);
+            }
+            // Drain the body to free the socket before following the redirect
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            await body.dump?.();
+            currentUrl = resolved;
+            redirectsFollowed++;
+            continue;
+        }
+        if (statusCode !== 200) {
+            throw new Error(`Download failed: HTTP ${statusCode} for ${currentUrl}`);
+        }
+        const tmpZip = path.join(os.tmpdir(), `ccs-bar-${Date.now()}.zip`);
+        // Stream body to tmpZip
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        await streamPipeline(body, createWriteStream(tmpZip));
+        // Fix #14: zip-slip guard — inspect entries before extraction.
+        // `unzip -l` lists entries in a machine-readable format; we scan for ".." or
+        // absolute paths that would escape the destination directory.
+        try {
+            const { stdout: listing } = await execFileAsync('unzip', ['-l', tmpZip]);
+            const lines = listing.split('\n');
+            for (const line of lines) {
+                // Entry lines look like: "  <size>  <date> <time>  <path>"
+                // We extract the path from the last whitespace-delimited field.
+                const match = /^\s+\d+\s+[\d-]+\s+[\d:]+\s+(.+)$/.exec(line);
+                if (!match || !match[1])
+                    continue;
+                const entryPath = match[1].trim();
+                if (!entryPath || entryPath.endsWith('/'))
+                    continue; // skip directory entries
+                // Reject absolute paths and paths with traversal components
+                if (path.isAbsolute(entryPath) || entryPath.includes('..')) {
+                    try {
+                        fs.unlinkSync(tmpZip);
+                    }
+                    catch {
+                        /* ignore */
+                    }
+                    throw new Error(`Zip-slip detected: archive entry "${entryPath}" contains a path traversal ` +
+                        `component. Refusing to extract.`);
+                }
+            }
+        }
+        catch (err) {
+            // If the guard itself throws (e.g. zip-slip detected above), propagate it.
+            // If it's a system error (unzip not available), let extraction proceed and
+            // surface the issue then.
+            if (err.message?.includes('Zip-slip'))
+                throw err;
+            // Warn but continue — extraction will likely also fail if unzip is missing
+            console.error(`[!] Zip entry scan failed (will attempt extraction): ${err.message}`);
+        }
+        // Extract the zip into dest
+        await execFileAsync('unzip', ['-o', tmpZip, '-d', dest]);
+        // Clean up the temp archive
+        try {
+            fs.unlinkSync(tmpZip);
+        }
+        catch {
+            /* ignore */
+        }
+        break;
+    }
+}
+/**
+ * Single-request capability handshake: GET {baseUrl}/api/bar/summary.
+ * 200 → server serves the bar API (compatible).
+ * 404 → server is too old and does not serve the bar API.
+ * Any other status or network error → soft-warn (unreachable).
+ *
+ * The route is loopback-gated server-side; install-time baseUrl is always
+ * loopback (bar.json baseUrl or http://127.0.0.1:3000), so the gate passes.
+ */
+async function defaultVerifyCompat(baseUrl) {
+    try {
+        const { request } = await Promise.resolve().then(() => __importStar(require('undici')));
+        const { statusCode, body } = await request(`${baseUrl}/api/bar/summary`, {
+            headers: { 'User-Agent': 'ccs-cli' },
+        });
+        // Drain the body regardless of status to free the socket.
+        try {
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            await body.dump?.();
+        }
+        catch {
+            /* ignore drain errors */
+        }
+        if (statusCode === 200) {
+            return { compatible: true, reason: 'ok' };
+        }
+        if (statusCode === 404) {
+            return { compatible: false, reason: 'no-bar-api' };
+        }
+        return { compatible: false, reason: 'unreachable' };
+    }
+    catch {
+        // Network error or server not running.
+        return { compatible: false, reason: 'unreachable' };
+    }
+}
+/**
+ * Read CFBundleShortVersionString from {appPath}/Contents/Info.plist.
+ * The plist is XML text post-codesign (verified on the installed app).
+ * Returns null on any error (missing file, binary plist, parse failure).
+ */
+function defaultReadAppBundleVersion(appPath) {
+    try {
+        const plistPath = path.join(appPath, 'Contents', 'Info.plist');
+        const contents = fs.readFileSync(plistPath, 'utf8');
+        const match = /<key>CFBundleShortVersionString<\/key>\s*<string>([^<]+)<\/string>/.exec(contents);
+        if (!match || !match[1])
+            return null;
+        const v = match[1].trim();
+        return v || null;
+    }
+    catch {
+        return null;
+    }
+}
+function defaultGetCcsDir() {
+    return (0, config_loader_facade_1.getCcsDir)();
+}
+function defaultGetAppsDir() {
+    return path.join(os.homedir(), 'Applications');
+}
+/**
+ * Clear the macOS Gatekeeper quarantine attribute from the installed app.
+ * Uses absolute path `/usr/bin/xattr` to avoid PATH hijacking.
+ * Runs `/usr/bin/xattr -dr com.apple.quarantine <appPath>` via execFile (not shell-string)
+ * so the path is passed as an argument, not interpolated into a shell command.
+ * Returns true on success, false on any error (non-fatal — install already succeeded).
+ */
+async function defaultClearQuarantine(appPath) {
+    try {
+        const { execFile } = await Promise.resolve().then(() => __importStar(require('child_process')));
+        const { promisify } = await Promise.resolve().then(() => __importStar(require('util')));
+        const execFileAsync = promisify(execFile);
+        await execFileAsync('/usr/bin/xattr', ['-dr', 'com.apple.quarantine', appPath]);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function defaultRemoveExistingApp(appPath) {
+    fs.rmSync(appPath, { recursive: true, force: true });
+}
+async function defaultLaunchBar(args) {
+    const { handleBarLaunch } = await Promise.resolve().then(() => __importStar(require('./launch-subcommand')));
+    await handleBarLaunch(args);
+}
+/**
+ * Detect whether CCS Bar is already running using `/usr/bin/pgrep -x CCSBar`.
+ * pgrep exits 0 when a match is found (running), 1 when no match (not running).
+ * execFile surfaces exit code 1 as an error, so we catch and return false.
+ * Any other error (pgrep unavailable, permission denied) is also treated as not running.
+ */
+async function defaultIsBarRunning() {
+    try {
+        const { execFile } = await Promise.resolve().then(() => __importStar(require('child_process')));
+        const { promisify } = await Promise.resolve().then(() => __importStar(require('util')));
+        const execFileAsync = promisify(execFile);
+        await execFileAsync('/usr/bin/pgrep', ['-x', 'CCSBar']);
+        return true;
+    }
+    catch {
+        // pgrep exits 1 when no match found; execFile throws for non-zero exit codes.
+        return false;
+    }
+}
+/**
+ * Ask the user whether to launch CCS Bar now.
+ * Only prompts when stdin is a TTY — stdin is what the prompt actually reads.
+ * Non-TTY stdin: return false (caller prints guidance).
+ * Default answer is yes (Enter = launch).
+ */
+async function defaultPromptLaunch() {
+    if (!process.stdin.isTTY) {
+        return false;
+    }
+    const readline = await Promise.resolve().then(() => __importStar(require('readline')));
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+        terminal: true,
+    });
+    return new Promise((resolve) => {
+        rl.question('Launch CCS Bar now? [Y/n] ', (answer) => {
+            rl.close();
+            const normalized = answer.trim().toLowerCase();
+            // Empty (Enter) or 'y'/'yes' → launch
+            resolve(normalized === '' || normalized === 'y' || normalized === 'yes');
+        });
+    });
+}
+// ---------------------------------------------------------------------------
+// Version pin helpers
+// ---------------------------------------------------------------------------
+function getBarVersionFilePath(ccsDir) {
+    return path.join(ccsDir, 'bar', '.version');
+}
+function pinBarVersion(ccsDir, version) {
+    const versionFile = getBarVersionFilePath(ccsDir);
+    fs.mkdirSync(path.dirname(versionFile), { recursive: true });
+    fs.writeFileSync(versionFile, version);
+}
+// ---------------------------------------------------------------------------
+// Implementation
+// ---------------------------------------------------------------------------
+async function handleBarInstall(args, deps = {}) {
+    // Parse --launch / --no-launch flags before delegating to deps.
+    const forceLaunch = (0, arg_extractor_1.hasAnyFlag)(args, ['--launch']);
+    const noLaunch = (0, arg_extractor_1.hasAnyFlag)(args, ['--no-launch']);
+    const fetchReleaseAsset = deps.fetchReleaseAsset ?? defaultFetchReleaseAsset;
+    const downloadAndExtract = deps.downloadAndExtract ?? defaultDownloadAndExtract;
+    const verifyCompat = deps.verifyCompat ?? defaultVerifyCompat;
+    const readAppBundleVersion = deps.readAppBundleVersion ?? defaultReadAppBundleVersion;
+    const clearQuarantine = deps.clearQuarantine ?? defaultClearQuarantine;
+    const launchBar = deps.launchBar ?? defaultLaunchBar;
+    const promptLaunch = deps.promptLaunch ?? defaultPromptLaunch;
+    const isBarRunning = deps.isBarRunning ?? defaultIsBarRunning;
+    const removeExistingApp = deps.removeExistingApp ?? defaultRemoveExistingApp;
+    const ccsDir = (deps.getCcsDir ?? defaultGetCcsDir)();
+    const appsDir = (deps.getAppsDir ?? defaultGetAppsDir)();
+    // 0. Already-installed detection: show the current version before proceeding.
+    const appPath = path.join(appsDir, BAR_APP_NAME);
+    if (fs.existsSync(appPath)) {
+        const existingVersion = readAppBundleVersion(appPath);
+        if (existingVersion !== null) {
+            console.log(`[i] CCS Bar v${existingVersion} is already installed. Reinstalling...`);
+        }
+        else {
+            console.log('[i] CCS Bar is already installed. Reinstalling...');
+        }
+    }
+    else {
+        console.log('[i] Fetching CCS Bar release info...');
+    }
+    // 1. Resolve the floating tag → download URL.
+    let releaseInfo;
+    try {
+        releaseInfo = await fetchReleaseAsset(BAR_RELEASE_TAG, BAR_ASSET_NAME);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[X] Failed to fetch release asset: ${msg}`);
+        console.error('[i] Check your network connection and try again.');
+        return;
+    }
+    const { downloadUrl } = releaseInfo;
+    console.log(`[i] Installing CCS Bar from ${BAR_RELEASE_TAG}...`);
+    // 1b. Stage-then-swap: extract into a hidden staging dir on the same filesystem
+    //     so the rename to appPath is atomic-ish. The old bundle is only removed
+    //     AFTER the new one is verified in staging — a transient download/extraction
+    //     failure during reinstall therefore leaves the previous working install intact.
+    fs.mkdirSync(appsDir, { recursive: true });
+    let stagingDir;
+    try {
+        stagingDir = fs.mkdtempSync(path.join(appsDir, '.ccs-bar-staging-'));
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[X] Could not create staging directory in ${appsDir}: ${msg}`);
+        return;
+    }
+    // Helper: remove staging dir, ignoring errors (best-effort cleanup).
+    function cleanupStaging() {
+        try {
+            fs.rmSync(stagingDir, { recursive: true, force: true });
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    // 2. Download and extract into staging, NOT appsDir.
+    try {
+        await downloadAndExtract(downloadUrl, stagingDir);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[X] Download or extraction failed: ${msg}`);
+        cleanupStaging();
+        return;
+    }
+    // 3. Finding #12: assert that the expected .app bundle was actually extracted
+    //    into the staging dir before touching the old install.
+    const stagedApp = path.join(stagingDir, BAR_APP_NAME);
+    if (!fs.existsSync(stagedApp)) {
+        // Report what was actually extracted to help diagnose archive issues.
+        let extracted = [];
+        try {
+            extracted = fs.readdirSync(stagingDir);
+        }
+        catch {
+            /* ignore */
+        }
+        const found = extracted.length > 0 ? extracted.join(', ') : '(none)';
+        console.error(`[X] Extraction succeeded but "${BAR_APP_NAME}" was not found in staging.`);
+        console.error(`[i] Files found in staging: ${found}`);
+        cleanupStaging();
+        return;
+    }
+    // 3b. New bundle verified in staging — now safe to remove the old install.
+    if (fs.existsSync(appPath)) {
+        try {
+            removeExistingApp(appPath);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(`[X] Could not remove the existing CCS Bar.app: ${msg}`);
+            console.error('[i] Close any running instance and try again.');
+            cleanupStaging();
+            return;
+        }
+    }
+    // 3c. Atomic-ish rename: move staged bundle into the final location.
+    try {
+        fs.renameSync(stagedApp, appPath);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[X] Could not move staged app into place: ${msg}`);
+        cleanupStaging();
+        return;
+    }
+    // Staging dir is now empty (bundle was moved out); remove it.
+    cleanupStaging();
+    // 4. Read the real version from the extracted bundle's Info.plist.
+    const installedVersion = readAppBundleVersion(appPath);
+    if (installedVersion !== null) {
+        // Pin the real version string.
+        try {
+            pinBarVersion(ccsDir, installedVersion);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(`[!] Could not write version pin: ${msg}`);
+            // Non-fatal — continue.
+        }
+        console.log(`[OK] CCS Bar v${installedVersion} installed to ${appsDir}/${BAR_APP_NAME}`);
+    }
+    else {
+        // Info.plist unreadable — best-effort remove any stale version pin from a previous install,
+        // so `ccs bar version` does not show an outdated version string.
+        try {
+            fs.rmSync(path.join(ccsDir, 'bar', '.version'), { force: true });
+        }
+        catch {
+            /* non-fatal — ignore */
+        }
+        // No pin written; ASCII notice; no crash.
+        console.log(`[OK] CCS Bar installed to ${appsDir}/${BAR_APP_NAME}`);
+        console.log('[!] Could not read app version from Info.plist.');
+    }
+    // 5. Capability handshake via GET /api/bar/summary.
+    //    Runs BEFORE the quarantine-clear + launch handoff because it is a server-side
+    //    check unrelated to Gatekeeper. A failed quarantine clear must not prevent the
+    //    compat result from being shown to the user.
+    //    Read bar.json for baseUrl if present; otherwise fall back to localhost:3000.
+    const barJsonPath = path.join(ccsDir, 'bar.json');
+    let baseUrl = 'http://127.0.0.1:3000';
+    try {
+        const raw = fs.readFileSync(barJsonPath, 'utf8');
+        const parsed = JSON.parse(raw);
+        if (parsed.baseUrl)
+            baseUrl = parsed.baseUrl;
+    }
+    catch {
+        /* bar.json absent — use fallback */
+    }
+    try {
+        const compat = await verifyCompat(baseUrl);
+        if (compat.reason === 'ok') {
+            console.log('[OK] Server bar API reachable.');
+        }
+        else if (compat.reason === 'no-bar-api') {
+            console.log('[!] CCS server does not serve the bar API (/api/bar/summary returned 404).' +
+                ' Update CCS, then restart `ccs bar`.');
+        }
+        else {
+            // unreachable — soft-warn
+            console.log('[!] Could not verify server compatibility (server may not be running).');
+            console.log('[i] Run `ccs bar` to start the server and recheck.');
+        }
+    }
+    catch {
+        console.log('[!] Could not verify server compatibility (server may not be running).');
+        console.log('[i] Run `ccs bar` to start the server and recheck.');
+    }
+    // 6. Quarantine handling: run `xattr -dr com.apple.quarantine` automatically.
+    //    This clears the Gatekeeper quarantine flag that ad-hoc builds receive on download.
+    //    On success: print [OK] confirmation. On failure: fall back to printed guidance and
+    //    SKIP the launch handoff entirely — launching a still-quarantined app hits the
+    //    Gatekeeper block, so the user must clear quarantine manually first.
+    const quarantineCleared = await clearQuarantine(appPath);
+    if (quarantineCleared) {
+        console.log('[OK] Cleared Gatekeeper quarantine.');
+    }
+    else {
+        console.log('[i] Gatekeeper note (ad-hoc build):');
+        console.log('    If macOS says the app is "damaged" or "unverified", run:');
+        console.log(`      xattr -dr com.apple.quarantine "${appPath}"`);
+        console.log('    Or right-click the app and select Open.');
+        console.log('[i] After clearing quarantine, run `ccs bar` to launch.');
+        return;
+    }
+    // 7. Launch handoff.
+    //    Already-running check: if CCS Bar is running after a (re)install, skip the
+    //    prompt entirely and print a restart hint (the user needs to quit and reopen
+    //    to pick up the new version). --launch with the app already running still
+    //    proceeds — the launch flow opens/activates the app, which is harmless.
+    //
+    //    --launch: skip prompt and launch immediately.
+    //    --no-launch: skip prompt, print guidance.
+    //    stdin-TTY: ask interactively (default yes).
+    //    Non-TTY stdin: print guidance, no prompt.
+    const barIsRunning = await isBarRunning();
+    if (barIsRunning && !forceLaunch) {
+        console.log('[!] CCS Bar is currently running an older build. Quit it from the menu bar, then run `ccs bar` to relaunch the updated app.');
+    }
+    else if (forceLaunch) {
+        await launchBar([]);
+    }
+    else if (noLaunch) {
+        console.log('[i] Run `ccs bar` to launch.');
+    }
+    else {
+        const shouldLaunch = await promptLaunch();
+        if (shouldLaunch) {
+            await launchBar([]);
+        }
+        else {
+            // User declined or non-TTY stdin — always print guidance so the user
+            // knows how to start the app after install.
+            console.log('[i] Run `ccs bar` to launch later.');
+        }
+    }
+}
+exports.handleBarInstall = handleBarInstall;
+//# sourceMappingURL=install-subcommand.js.map

package/dist/commands/bar/install-subcommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-subcommand.js","sourceRoot":"","sources":["../../../src/commands/bar/install-subcommand.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,4EAA8D;AAC9D,oDAA8C;AAE9C,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,4DAA4D;AAC5D,MAAM,eAAe,GAAG,gBAAgB,CAAC;AACzC,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEzC;;;;;;;;GAQG;AACH,MAAM,uBAAuB,GAA0B;IACrD,YAAY;IACZ,+BAA+B;CAChC,CAAC;AA6EF,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAE9E;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,QAAQ,QAAQ,GAAG,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GACV,uBAAoC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAElG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,oCAAoC;YAChE,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B;YACpE,2CAA2C,CAC9C,CAAC;IACJ,CAAC;AACH,CAAC;AAvBD,kDAuBC;AAED,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,KAAK,UAAU,wBAAwB,CAAC,GAAW,EAAE,KAAa;IAChE,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,gCAAgC,eAAe,kBAAkB,GAAG,EAAE,CAAC;IACtF,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE;QACjD,OAAO,EAAE;YACP,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,6BAA6B;SACtC;KACF,CAAC,CAAC;IAEH,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,uBAAuB,UAAU,YAAY,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,8DAA8D;IAC9D,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAQ,CAAC;IAE3C,8DAA8D;IAC9D,MAAM,KAAK,GAAI,OAAO,CAAC,MAAgB,CAAC,IAAI,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IACxF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,0BAA0B,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,oBAA8B,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,yBAAyB,CAAC,GAAW,EAAE,IAAY;IAChE,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;IAC3C,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,MAAM,GAAC,CAAC;IAC3C,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,eAAe,GAAC,CAAC;IACnD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE1C,oCAAoC;IACpC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAEzB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAErC,iEAAiE;IACjE,MAAM,aAAa,GAAG,CAAC,CAAC;IACxB,IAAI,UAAU,GAAG,GAAG,CAAC;IACrB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE;YAC9D,eAAe,EAAE,CAAC,EAAE,mDAAmD;SACxE,CAAC,CAAC;QAEH,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACjD,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACxB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAExB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,kBAAkB,UAAU,UAAU,UAAU,yBAAyB,CAAC,CAAC;YAC7F,CAAC;YAED,qDAAqD;YACrD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;YAE1D,+DAA+D;YAC/D,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAE9B,IAAI,iBAAiB,IAAI,aAAa,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,wBAAwB,aAAa,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACrF,CAAC;YAED,kEAAkE;YAClE,8DAA8D;YAC9D,MAAO,IAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7B,UAAU,GAAG,QAAQ,CAAC;YACtB,iBAAiB,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,QAAQ,UAAU,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEnE,wBAAwB;QACxB,8DAA8D;QAC9D,MAAM,cAAc,CAAC,IAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAE7D,+DAA+D;QAC/D,6EAA6E;QAC7E,8DAA8D;QAC9D,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,2DAA2D;gBAC3D,gEAAgE;gBAChE,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7D,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBAAE,SAAS;gBAClC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAClC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,yBAAyB;gBAE9E,4DAA4D;gBAC5D,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3D,IAAI,CAAC;wBACH,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;oBACxB,CAAC;oBAAC,MAAM,CAAC;wBACP,YAAY;oBACd,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,qCAAqC,SAAS,8BAA8B;wBAC1E,iCAAiC,CACpC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2EAA2E;YAC3E,2EAA2E;YAC3E,0BAA0B;YAC1B,IAAK,GAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC5D,2EAA2E;YAC3E,OAAO,CAAC,KAAK,CACX,wDAAyD,GAAa,CAAC,OAAO,EAAE,CACjF,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAEzD,4BAA4B;QAC5B,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QAED,MAAM;IACR,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,mBAAmB,CAAC,OAAe;IAChD,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;QAC3C,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,kBAAkB,EAAE;YACvE,OAAO,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE;SACrC,CAAC,CAAC;QAEH,0DAA0D;QAC1D,IAAI,CAAC;YACH,8DAA8D;YAC9D,MAAO,IAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;QAED,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QACD,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;QACvC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,2BAA2B,CAAC,OAAe;IAClD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,oEAAoE,CAAC,IAAI,CACrF,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,IAAI,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAA,gCAAS,GAAE,CAAC;AACrB,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,sBAAsB,CAAC,OAAe;IACnD,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,eAAe,GAAC,CAAC;QACnD,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,MAAM,GAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,aAAa,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAC/C,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAc;IAC5C,MAAM,EAAE,eAAe,EAAE,GAAG,wDAAa,qBAAqB,GAAC,CAAC;IAChE,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,eAAe,GAAC,CAAC;QACnD,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,MAAM,GAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,aAAa,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB;IAChC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,wDAAa,UAAU,GAAC,CAAC;IAC1C,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IACH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,4BAA4B,EAAE,CAAC,MAAc,EAAE,EAAE;YAC3D,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/C,sCAAsC;YACtC,OAAO,CAAC,UAAU,KAAK,EAAE,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,KAAK,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,SAAS,qBAAqB,CAAC,MAAc;IAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,OAAe;IACpD,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAClD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAEvE,KAAK,UAAU,gBAAgB,CACpC,IAAc,EACd,OAA6B,EAAE;IAE/B,gEAAgE;IAChE,MAAM,WAAW,GAAG,IAAA,0BAAU,EAAC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAA,0BAAU,EAAC,IAAI,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAEnD,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,wBAAwB,CAAC;IAC7E,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,yBAAyB,CAAC;IAChF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAC9D,MAAM,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,IAAI,2BAA2B,CAAC;IACtF,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,sBAAsB,CAAC;IACvE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAC9D,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,wBAAwB,CAAC;IAC7E,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC,EAAE,CAAC;IAEzD,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACjD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,eAAe,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,gBAAgB,eAAe,wCAAwC,CAAC,CAAC;QACvF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IACtD,CAAC;IAED,8CAA8C;IAC9C,IAAI,WAA+B,CAAC;IACpC,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,+BAA+B,eAAe,KAAK,CAAC,CAAC;IAEjE,gFAAgF;IAChF,6EAA6E;IAC7E,iFAAiF;IACjF,qFAAqF;IACrF,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,6CAA6C,OAAO,KAAK,GAAG,EAAE,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IAED,qEAAqE;IACrE,SAAS,cAAc;QACrB,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;QAC3D,cAAc,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,sEAAsE;QACtE,IAAI,SAAS,GAAa,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrE,OAAO,CAAC,KAAK,CAAC,iCAAiC,YAAY,6BAA6B,CAAC,CAAC;QAC1F,OAAO,CAAC,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;QACtD,cAAc,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,2EAA2E;IAC3E,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,kDAAkD,GAAG,EAAE,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAC/D,cAAc,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,6CAA6C,GAAG,EAAE,CAAC,CAAC;QAClE,cAAc,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,8DAA8D;IAC9D,cAAc,EAAE,CAAC;IAEjB,mEAAmE;IACnE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAEvD,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,+BAA+B;QAC/B,IAAI,CAAC;YACH,aAAa,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;YACzD,wBAAwB;QAC1B,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,iBAAiB,gBAAgB,iBAAiB,OAAO,IAAI,YAAY,EAAE,CAAC,CAAC;IAC3F,CAAC;SAAM,CAAC;QACN,4FAA4F;QAC5F,iEAAiE;QACjE,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;QACD,0CAA0C;QAC1C,OAAO,CAAC,GAAG,CAAC,6BAA6B,OAAO,IAAI,YAAY,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;IAED,oDAAoD;IACpD,mFAAmF;IACnF,mFAAmF;IACnF,iDAAiD;IACjD,kFAAkF;IAClF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClD,IAAI,OAAO,GAAG,uBAAuB,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACvD,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CACT,4EAA4E;gBAC1E,sCAAsC,CACzC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,0BAA0B;YAC1B,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;YACtF,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IACpE,CAAC;IAED,8EAA8E;IAC9E,wFAAwF;IACxF,wFAAwF;IACxF,mFAAmF;IACnF,yEAAyE;IACzE,MAAM,iBAAiB,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,yCAAyC,OAAO,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IAED,qBAAqB;IACrB,gFAAgF;IAChF,iFAAiF;IACjF,8EAA8E;IAC9E,4EAA4E;IAC5E,EAAE;IACF,mDAAmD;IACnD,+CAA+C;IAC/C,iDAAiD;IACjD,+CAA+C;IAC/C,MAAM,YAAY,GAAG,MAAM,YAAY,EAAE,CAAC;IAE1C,IAAI,YAAY,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CACT,6HAA6H,CAC9H,CAAC;IACJ,CAAC;SAAM,IAAI,WAAW,EAAE,CAAC;QACvB,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;SAAM,IAAI,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,GAAG,MAAM,YAAY,EAAE,CAAC;QAC1C,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,4CAA4C;YAC5C,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;AACH,CAAC;AAvOD,4CAuOC"}