@mawesome/npm-vm 0.0.0-alpha.0 → 0.1.0

package/dist/internal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.js","names":["forget","run","describe"],"sources":["../src/setup/shims.ts","../src/setup/shell.ts","../src/state/meta.ts","../src/state/journal.ts","../src/state/lock.ts","../src/commands/cache.ts","../src/commands/context.ts","../src/setup/link.ts","../src/setup/layout.ts","../src/setup/profile.ts","../src/setup/windows.ts","../src/commands/doctor.ts","../src/commands/pin.ts","../src/install/provenance.ts","../src/commands/self-update.ts","../src/commands/setup.ts","../src/commands/uninstall.ts","../src/commands/dispatch.ts"],"sourcesContent":["import { existsSync, readFileSync } from 'node:fs';\nimport { join, posix, win32 } from 'node:path';\nimport { EXIT, NpmVmError } from '../errors.ts';\n\n/** The launcher ABI the shims carry; a runtime declares the ABI it needs (spec RUN-2). */\nexport const SHIM_ABI = 1;\n\nexport const SHIM_DIR = 'shims';\nexport const LAUNCHERS_DIR = 'launchers';\nexport const SELECTORS = ['npm', 'npx', 'npm-vm'] as const;\nexport type ShimName = (typeof SELECTORS)[number];\n\nexport interface ShimFile {\n\t/** File name inside `shims/`, with the Windows extension where there is one. */\n\tname: string;\n\tcontent: string;\n\tmode: number;\n}\n\nconst UNSAFE = /[\\n\\r\"'`$%!]/;\n\n/** Refuses a home no quoting makes safe in all four shells and cmd (spec SET-2, M-HOMEPATH). */\nexport function assertSafeHome(home: string): void {\n\tconst match = UNSAFE.exec(home);\n\tif (match !== null) {\n\t\tconst shown = match[0] === '\\n' || match[0] === '\\r' ? 'a line break' : `\"${match[0]}\"`;\n\t\tthrow new NpmVmError(\n\t\t\t'M-HOMEPATH',\n\t\t\tEXIT.usage,\n\t\t\t`The npm-vm home ${home} contains ${shown}, which cannot be quoted safely in every shell. Set NPM_VM_HOME to a plain path and run setup again.`,\n\t\t);\n\t}\n}\n\nfunction selectorOf(name: ShimName): 'npm' | 'npx' | 'cli' {\n\treturn name === 'npm-vm' ? 'cli' : name;\n}\n\n/**\n * The launcher templates shipped beside this code: `src/launchers/` from source, `dist/runtime/launchers/`\n * from the bin, and `launchers/` beside an installed `runtime.cjs`.\n */\nexport function templatesDir(): string {\n\tconst here = import.meta.dirname;\n\tfor (const candidate of [\n\t\tjoin(here, LAUNCHERS_DIR),\n\t\tjoin(here, '..', LAUNCHERS_DIR),\n\t\tjoin(here, 'runtime', LAUNCHERS_DIR),\n\t]) {\n\t\tif (existsSync(join(candidate, 'sh.tmpl'))) {\n\t\t\treturn candidate;\n\t\t}\n\t}\n\tthrow new Error(`npm-vm launcher templates not found near ${here}`);\n}\n\nexport type TemplateKind = 'sh' | 'cmd' | 'ps1';\n\nexport function readTemplate(dir: string, kind: TemplateKind): string {\n\t// cmd and ps1 keep their CRLF; an autocrlf checkout must not hand the sh shim CRLF.\n\tconst text = readFileSync(join(dir, `${kind}.tmpl`), 'utf8');\n\treturn kind === 'sh' ? text.replace(/\\r\\n/g, '\\n') : text;\n}\n\n/** Fills one launcher template; the ABI comes from the launcher generation the templates belong to. */\nexport function renderTemplate(\n\ttemplate: string,\n\tvalues: { bootstrap: string; selector: string; abi: number },\n): string {\n\treturn template\n\t\t.replace(/\\{\\{ABI\\}\\}/g, String(values.abi))\n\t\t.replace(/\\{\\{BOOTSTRAP\\}\\}/g, values.bootstrap)\n\t\t.replace(/\\{\\{SELECTOR\\}\\}/g, values.selector);\n}\n\n/** The POSIX shim: `sh` on every OS, so Git Bash and MSYS on Windows get one too. */\nexport function posixShim(\n\thome: string,\n\tname: ShimName,\n\ttemplates: string = templatesDir(),\n\tabi: number = SHIM_ABI,\n\tplatform: NodeJS.Platform = process.platform,\n): string {\n\t// Git Bash passes a backslash path through to node; everywhere else the shim must keep forward slashes.\n\tconst { join: joinPath } = platform === 'win32' ? win32 : posix;\n\treturn renderTemplate(readTemplate(templates, 'sh'), {\n\t\tbootstrap: joinPath(home, 'bootstrap.cjs'),\n\t\tselector: selectorOf(name),\n\t\tabi,\n\t});\n}\n\n/**\n * The cmd shim resolves node.exe through PATH only (`%~$PATH:i`): cmd would otherwise run a `node.exe`\n * committed to the current directory. One command line, so `%*` keeps its quoting.\n */\nexport function cmdShim(\n\thome: string,\n\tname: ShimName,\n\ttemplates: string = templatesDir(),\n\tabi: number = SHIM_ABI,\n): string {\n\treturn renderTemplate(readTemplate(templates, 'cmd'), {\n\t\tbootstrap: win32.join(home, 'bootstrap.cjs'),\n\t\tselector: selectorOf(name),\n\t\tabi,\n\t});\n}\n\n/** PowerShell never searches the current directory for a command, so `Get-Command` is enough. */\nexport function powershellShim(\n\thome: string,\n\tname: ShimName,\n\ttemplates: string = templatesDir(),\n\tabi: number = SHIM_ABI,\n): string {\n\treturn renderTemplate(readTemplate(templates, 'ps1'), {\n\t\tbootstrap: win32.join(home, 'bootstrap.cjs'),\n\t\tselector: selectorOf(name),\n\t\tabi,\n\t});\n}\n\nexport interface RenderOptions {\n\tpowershell?: boolean;\n\ttemplates?: string;\n\tabi?: number;\n}\n\n/** Every shim file for the platform (spec SET-2); `.ps1` files are included only when the policy allows them (WIN-2). */\nexport function renderShims(\n\thome: string,\n\tplatform: NodeJS.Platform,\n\toptions: RenderOptions = {},\n): ShimFile[] {\n\tassertSafeHome(home);\n\tconst templates = options.templates ?? templatesDir();\n\tconst abi = options.abi ?? SHIM_ABI;\n\tconst files: ShimFile[] = [];\n\tfor (const name of SELECTORS) {\n\t\tfiles.push({ name, content: posixShim(home, name, templates, abi, platform), mode: 0o755 });\n\t\tif (platform === 'win32') {\n\t\t\tfiles.push({\n\t\t\t\tname: `${name}.cmd`,\n\t\t\t\tcontent: cmdShim(home, name, templates, abi),\n\t\t\t\tmode: 0o644,\n\t\t\t});\n\t\t\tif (options.powershell !== false) {\n\t\t\t\tfiles.push({\n\t\t\t\t\tname: `${name}.ps1`,\n\t\t\t\t\tcontent: powershellShim(home, name, templates, abi),\n\t\t\t\t\tmode: 0o644,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n\treturn files;\n}\n\n/** The ABI a shim or bootstrap file declares, or null when the file is not ours. */\nexport function shimAbi(content: string): number | null {\n\tconst match = /npm-vm launcher abi=(\\d+)|LAUNCHER_ABI = (\\d+)/.exec(content);\n\treturn match === null ? null : Number(match[1] ?? match[2]);\n}\n\nexport function shimDir(home: string): string {\n\treturn join(home, SHIM_DIR);\n}\n\n/** Our `.ps1` shims left from a permissive policy; PowerShell would still prefer them over `.cmd` (WIN-2). */\nexport function stalePowershellShims(home: string): string[] {\n\treturn SELECTORS.map((name) => join(shimDir(home), `${name}.ps1`)).filter((file) => {\n\t\ttry {\n\t\t\treturn shimAbi(readFileSync(file, 'utf8')) !== null;\n\t\t} catch {\n\t\t\treturn false;\n\t\t}\n\t});\n}\n","import { win32 } from 'node:path';\nimport { assertSafeHome, SHIM_DIR, shimDir } from './shims.ts';\n\nexport const SHELLS = ['zsh', 'bash', 'fish', 'powershell'] as const;\nexport type Shell = (typeof SHELLS)[number];\n\nexport function isShell(value: string): value is Shell {\n\treturn (SHELLS as readonly string[]).includes(value);\n}\n\nexport const BLOCK_START = '# >>> npm-vm >>>';\nexport const BLOCK_END = '# <<< npm-vm <<<';\n\n/** Escapes a path for use inside a bash or zsh `${var//pattern/}` pattern, where `/` and glob characters are special. */\nfunction patternOf(path: string): string {\n\treturn path.replace(/[\\\\/*?[\\]]/g, (char) => `\\\\${char}`);\n}\n\n/** Adds `shims/` to the front of PATH when absent; sourcing it twice changes nothing (spec SH-1). */\nfunction shimsFor(shell: Shell, home: string): string {\n\tif (shell === 'powershell') {\n\t\treturn win32.join(home, SHIM_DIR);\n\t}\n\t// POSIX shells on Windows (Git Bash, MSYS) take forward slashes; a backslash would escape.\n\treturn process.platform === 'win32' ? shimDir(home).replace(/\\\\/g, '/') : shimDir(home);\n}\n\nexport function pathSnippet(shell: Shell, home: string): string {\n\tassertSafeHome(home);\n\tconst shims = shimsFor(shell, home);\n\tswitch (shell) {\n\t\tcase 'zsh':\n\t\tcase 'bash':\n\t\t\treturn [\n\t\t\t\t`case \":$PATH:\" in`,\n\t\t\t\t`  *\":${shims}:\"*) ;;`,\n\t\t\t\t`  *) export PATH=\"${shims}:$PATH\" ;;`,\n\t\t\t\t'esac',\n\t\t\t\t'',\n\t\t\t].join('\\n');\n\t\tcase 'fish':\n\t\t\treturn [\n\t\t\t\t`if not contains -- \"${shims}\" $PATH`,\n\t\t\t\t`    set -gx PATH \"${shims}\" $PATH`,\n\t\t\t\t'end',\n\t\t\t\t'',\n\t\t\t].join('\\n');\n\t\tcase 'powershell':\n\t\t\treturn [\n\t\t\t\t`if (($env:Path -split [IO.Path]::PathSeparator) -notcontains '${shims}') {`,\n\t\t\t\t`    $env:Path = '${shims}' + [IO.Path]::PathSeparator + $env:Path`,\n\t\t\t\t'}',\n\t\t\t\t'',\n\t\t\t].join('\\n');\n\t}\n}\n\n/**\n * The prompt hook (spec SH-2): moves `shims/` back to the front when something prepended over it,\n * with parameter expansion only, keeping `$?` and chaining whatever hook was there.\n */\nexport function hookSnippet(shell: Shell, home: string): string {\n\tassertSafeHome(home);\n\tconst shims = shimsFor(shell, home);\n\tswitch (shell) {\n\t\tcase 'zsh':\n\t\t\treturn [\n\t\t\t\t'_npm_vm_guard() {',\n\t\t\t\t'  local ret=$?',\n\t\t\t\t`  if [[ \"$path[1]\" != \"${shims}\" ]]; then`,\n\t\t\t\t`    path=(\"${shims}\" \\${path:#${shims}})`,\n\t\t\t\t'  fi',\n\t\t\t\t'  return $ret',\n\t\t\t\t'}',\n\t\t\t\t'if [[ -z \"${precmd_functions[(r)_npm_vm_guard]}\" ]]; then',\n\t\t\t\t'  precmd_functions+=(_npm_vm_guard)',\n\t\t\t\t'fi',\n\t\t\t\t'',\n\t\t\t].join('\\n');\n\t\tcase 'bash':\n\t\t\treturn [\n\t\t\t\t'_npm_vm_guard() {',\n\t\t\t\t'  local ret=$?',\n\t\t\t\t`  case \":$PATH:\" in`,\n\t\t\t\t`    \":${shims}:\"*) ;;`,\n\t\t\t\t'    *)',\n\t\t\t\t'      local rest=\":$PATH:\"',\n\t\t\t\t`      rest=\"\\${rest//:${patternOf(shims)}:/:}\"`,\n\t\t\t\t'      rest=\"${rest#:}\"',\n\t\t\t\t'      rest=\"${rest%:}\"',\n\t\t\t\t`      PATH=\"${shims}\\${rest:+:$rest}\"`,\n\t\t\t\t'      ;;',\n\t\t\t\t'  esac',\n\t\t\t\t'  return $ret',\n\t\t\t\t'}',\n\t\t\t\t'case \";${PROMPT_COMMAND};\" in',\n\t\t\t\t'  *\";_npm_vm_guard;\"*) ;;',\n\t\t\t\t'  *) PROMPT_COMMAND=\"_npm_vm_guard${PROMPT_COMMAND:+;$PROMPT_COMMAND}\" ;;',\n\t\t\t\t'esac',\n\t\t\t\t'',\n\t\t\t].join('\\n');\n\t\tcase 'fish':\n\t\t\treturn [\n\t\t\t\t'if status is-interactive',\n\t\t\t\t'    function _npm_vm_guard --on-event fish_prompt',\n\t\t\t\t`        if test \"$PATH[1]\" != \"${shims}\"`,\n\t\t\t\t`            set -l found (contains -i -- \"${shims}\" $PATH)`,\n\t\t\t\t'            if test -n \"$found\"',\n\t\t\t\t'                set -e PATH[$found]',\n\t\t\t\t'            end',\n\t\t\t\t`            set -gx PATH \"${shims}\" $PATH`,\n\t\t\t\t'        end',\n\t\t\t\t'    end',\n\t\t\t\t'end',\n\t\t\t\t'',\n\t\t\t].join('\\n');\n\t\tcase 'powershell':\n\t\t\treturn [\n\t\t\t\t'if (-not (Test-Path Function:\\\\global:_npm_vm_original_prompt)) {',\n\t\t\t\t'    $prev = Get-Item Function:\\\\prompt -ErrorAction SilentlyContinue',\n\t\t\t\t'    if ($prev) { Set-Item Function:\\\\global:_npm_vm_original_prompt $prev.ScriptBlock }',\n\t\t\t\t'    else { function global:_npm_vm_original_prompt { \"PS $($executionContext.SessionState.Path.CurrentLocation)$(\\'>\\' * ($nestedPromptLevel + 1)) \" } }',\n\t\t\t\t'    function global:prompt {',\n\t\t\t\t'        $ok = $?',\n\t\t\t\t'        $exit = $global:LASTEXITCODE',\n\t\t\t\t`        $shims = '${shims}'`,\n\t\t\t\t'        $parts = @($env:Path -split [IO.Path]::PathSeparator)',\n\t\t\t\t'        if ($parts.Length -eq 0 -or $parts[0] -ne $shims) {',\n\t\t\t\t'            $env:Path = (@($shims) + @($parts | Where-Object { $_ -ne $shims })) -join [IO.Path]::PathSeparator',\n\t\t\t\t'        }',\n\t\t\t\t'        $out = & $function:global:_npm_vm_original_prompt',\n\t\t\t\t'        $global:LASTEXITCODE = $exit',\n\t\t\t\t'        $out',\n\t\t\t\t\"        if (-not $ok) { Write-Error 'npm-vm: preserving $?' -ErrorAction SilentlyContinue }\",\n\t\t\t\t'    }',\n\t\t\t\t'}',\n\t\t\t\t'',\n\t\t\t].join('\\n');\n\t}\n}\n\n/** Both snippets inside the marked block `setup` writes and `uninstall` removes (spec SH-4). */\nexport function profileBlock(\n\tshell: Shell,\n\thome: string,\n\tparts: { path: boolean; hook: boolean },\n): string {\n\tconst body = [\n\t\tparts.path ? pathSnippet(shell, home) : '',\n\t\tparts.hook ? hookSnippet(shell, home) : '',\n\t]\n\t\t.filter((text) => text !== '')\n\t\t.join('');\n\treturn `${BLOCK_START}\\n${body}${BLOCK_END}\\n`;\n}\n","import { createHash } from 'node:crypto';\nimport { lstatSync, readFileSync, readlinkSync } from 'node:fs';\n\nexport type FileType = 'file' | 'directory' | 'symlink' | 'other' | 'missing';\nexport type LineEndings = 'lf' | 'crlf' | 'mixed' | 'none';\n\n/** What a target looked like at one moment (spec MUT-4), enough to tell our write from someone else's. */\nexport interface Meta {\n\ttype: FileType;\n\t/** POSIX permission bits; Windows ACLs are left to the OS and recorded as 0. */\n\tmode: number;\n\tsha256: string | null;\n\tencoding: 'utf8' | 'binary' | null;\n\tlineEndings: LineEndings | null;\n\tsymlinkTarget: string | null;\n}\n\nexport function sha256(content: Buffer | string): string {\n\treturn createHash('sha256').update(content).digest('hex');\n}\n\nfunction isUtf8(content: Buffer): boolean {\n\treturn !content.includes(0) && Buffer.from(content.toString('utf8'), 'utf8').equals(content);\n}\n\nexport function lineEndingsOf(text: string): LineEndings {\n\tconst crlf = (text.match(/\\r\\n/g) ?? []).length;\n\tconst lf = (text.match(/\\n/g) ?? []).length - crlf;\n\tif (crlf === 0 && lf === 0) {\n\t\treturn 'none';\n\t}\n\tif (crlf > 0 && lf > 0) {\n\t\treturn 'mixed';\n\t}\n\treturn crlf > 0 ? 'crlf' : 'lf';\n}\n\nexport const MISSING: Meta = {\n\ttype: 'missing',\n\tmode: 0,\n\tsha256: null,\n\tencoding: null,\n\tlineEndings: null,\n\tsymlinkTarget: null,\n};\n\n/** Captures `path` without following symlinks; a missing path is a valid state, not an error. */\nexport function captureMeta(path: string): Meta {\n\tlet stat;\n\ttry {\n\t\tstat = lstatSync(path);\n\t} catch {\n\t\treturn MISSING;\n\t}\n\tconst mode = process.platform === 'win32' ? 0 : stat.mode & 0o7777;\n\tif (stat.isSymbolicLink()) {\n\t\treturn {\n\t\t\ttype: 'symlink',\n\t\t\tmode,\n\t\t\tsha256: null,\n\t\t\tencoding: null,\n\t\t\tlineEndings: null,\n\t\t\tsymlinkTarget: readlinkSync(path),\n\t\t};\n\t}\n\tif (stat.isDirectory()) {\n\t\treturn {\n\t\t\ttype: 'directory',\n\t\t\tmode,\n\t\t\tsha256: null,\n\t\t\tencoding: null,\n\t\t\tlineEndings: null,\n\t\t\tsymlinkTarget: null,\n\t\t};\n\t}\n\tif (!stat.isFile()) {\n\t\treturn {\n\t\t\ttype: 'other',\n\t\t\tmode,\n\t\t\tsha256: null,\n\t\t\tencoding: null,\n\t\t\tlineEndings: null,\n\t\t\tsymlinkTarget: null,\n\t\t};\n\t}\n\tconst content = readFileSync(path);\n\tconst utf8 = isUtf8(content);\n\treturn {\n\t\ttype: 'file',\n\t\tmode,\n\t\tsha256: sha256(content),\n\t\tencoding: utf8 ? 'utf8' : 'binary',\n\t\tlineEndings: utf8 ? lineEndingsOf(content.toString('utf8')) : null,\n\t\tsymlinkTarget: null,\n\t};\n}\n\n/** Whether the path still holds exactly what `meta` recorded (spec MUT-5): same type, same bytes or link target. */\nexport function metaMatches(path: string, meta: Meta): boolean {\n\tconst now = captureMeta(path);\n\treturn (\n\t\tnow.type === meta.type && now.sha256 === meta.sha256 && now.symlinkTarget === meta.symlinkTarget\n\t);\n}\n","import {\n\tcopyFileSync,\n\texistsSync,\n\tmkdirSync,\n\treaddirSync,\n\treadFileSync,\n\trmSync,\n\tunlinkSync,\n} from 'node:fs';\nimport { join } from 'node:path';\nimport { atomicWrite, removeWithRetry, withSharingRetry } from './atomic.ts';\nimport { newToken, type OwnerRecord } from './lease.ts';\nimport { captureMeta, metaMatches, sha256, type Meta } from './meta.ts';\nimport { isLive } from './proc.ts';\n\nexport type JournalKind = 'launcher' | 'profile' | 'link' | 'home' | 'project';\n\n/** A pending change to one file (spec MUT-2): enough to finish it or undo it after a crash. */\nexport interface Journal {\n\tid: string;\n\tkind: JournalKind;\n\towner: OwnerRecord;\n\ttarget: string;\n\toriginal: Meta;\n\t/** The sha256 the target will have, or null when the change deletes it. */\n\tintended: string | null;\n\t/** Staged copy of the new content, beside the journal. */\n\tstaged: string | null;\n\t/** Backup of the original content, beside the journal; null when there was none. */\n\tbackup: string | null;\n\tmode: number;\n\tcreatedAt: string;\n}\n\nexport interface RecoveryReport {\n\tfinished: string[];\n\treplayed: string[];\n\trolledBack: string[];\n\tchanged: string[];\n\tskipped: string[];\n}\n\nexport function journalPath(journalDir: string, id: string): string {\n\treturn join(journalDir, `${id}.json`);\n}\n\nexport function readJournal(file: string): Journal | null {\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(file, 'utf8')) as Journal;\n\t\treturn typeof parsed.id === 'string' && typeof parsed.target === 'string' ? parsed : null;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nexport function listJournals(journalDir: string): Journal[] {\n\tlet names: string[];\n\ttry {\n\t\tnames = readdirSync(journalDir);\n\t} catch {\n\t\treturn [];\n\t}\n\treturn names\n\t\t.filter((name) => name.endsWith('.json'))\n\t\t.map((name) => readJournal(join(journalDir, name)))\n\t\t.filter((journal): journal is Journal => journal !== null);\n}\n\nexport function hasJournals(journalDir: string): boolean {\n\treturn listJournals(journalDir).length > 0;\n}\n\n/**\n * Applies one file change under a journal: backup and staged copy first, the journal, then the write.\n * The journal and its sidecars disappear only after the target holds the intended bytes.\n */\nexport function mutateFile(\n\tjournalDir: string,\n\tkind: JournalKind,\n\towner: OwnerRecord,\n\ttarget: string,\n\tcontent: Buffer | null,\n\tmode = 0o644,\n): void {\n\tmkdirSync(journalDir, { recursive: true, mode: 0o700 });\n\tconst id = `${kind}-${newToken()}`;\n\tconst original = captureMeta(target);\n\tlet backup: string | null = null;\n\tif (original.type === 'file') {\n\t\tbackup = join(journalDir, `${id}.bak`);\n\t\tcopyFileSync(target, backup);\n\t}\n\tlet staged: string | null = null;\n\tif (content !== null) {\n\t\tstaged = join(journalDir, `${id}.new`);\n\t\tatomicWrite(staged, content, 0o600);\n\t}\n\tconst journal: Journal = {\n\t\tid,\n\t\tkind,\n\t\towner,\n\t\ttarget,\n\t\toriginal,\n\t\tintended: content === null ? null : sha256(content),\n\t\tstaged,\n\t\tbackup,\n\t\tmode,\n\t\tcreatedAt: new Date().toISOString(),\n\t};\n\tatomicWrite(journalPath(journalDir, id), JSON.stringify(journal), 0o600);\n\tapply(journal, content);\n\tdiscard(journalDir, journal);\n}\n\nfunction apply(journal: Journal, content: Buffer | null): void {\n\tif (content === null) {\n\t\twithSharingRetry(() => {\n\t\t\tif (existsSync(journal.target)) {\n\t\t\t\tunlinkSync(journal.target);\n\t\t\t}\n\t\t});\n\t\treturn;\n\t}\n\tatomicWrite(journal.target, content, journal.mode);\n}\n\nfunction discard(journalDir: string, journal: Journal): void {\n\tfor (const sidecar of [journal.backup, journal.staged]) {\n\t\tif (sidecar !== null) {\n\t\t\trmSync(sidecar, { force: true });\n\t\t}\n\t}\n\trmSync(journalPath(journalDir, journal.id), { force: true });\n}\n\nfunction targetSha(target: string): string | null {\n\tconst meta = captureMeta(target);\n\treturn meta.type === 'file' ? meta.sha256 : null;\n}\n\n/**\n * Finishes one journal (spec MUT-2): a target already at the intended bytes is done; one still at the\n * original is replayed from the staged copy; anything else is left alone and reported as changed (MUT-5).\n */\nexport function recoverJournal(journalDir: string, journal: Journal, report: RecoveryReport): void {\n\tconst current = targetSha(journal.target);\n\tconst exists = captureMeta(journal.target).type !== 'missing';\n\tif (journal.intended === null ? !exists : current === journal.intended) {\n\t\tdiscard(journalDir, journal);\n\t\treport.finished.push(journal.id);\n\t\treturn;\n\t}\n\tif (metaMatches(journal.target, journal.original)) {\n\t\tif (journal.intended === null) {\n\t\t\tapply(journal, null);\n\t\t\treport.replayed.push(journal.id);\n\t\t} else if (\n\t\t\tjournal.staged !== null &&\n\t\t\texistsSync(journal.staged) &&\n\t\t\tsha256(readFileSync(journal.staged)) === journal.intended\n\t\t) {\n\t\t\tapply(journal, readFileSync(journal.staged));\n\t\t\treport.replayed.push(journal.id);\n\t\t} else {\n\t\t\t// Nothing to replay from, and the target is untouched: the change simply never happened.\n\t\t\treport.rolledBack.push(journal.id);\n\t\t}\n\t\tdiscard(journalDir, journal);\n\t\treturn;\n\t}\n\t// Writes are atomic renames, so a target matching neither side was changed by someone else: leave it.\n\treport.changed.push(journal.target);\n\tdiscard(journalDir, journal);\n}\n\n/** Recovers every journal whose owner is dead on this machine; foreign and live ones are skipped. */\nexport function recoverDeadJournals(\n\tjournalDir: string,\n\tmachineId: string,\n\tkinds?: readonly JournalKind[],\n): RecoveryReport {\n\tconst report: RecoveryReport = {\n\t\tfinished: [],\n\t\treplayed: [],\n\t\trolledBack: [],\n\t\tchanged: [],\n\t\tskipped: [],\n\t};\n\tfor (const journal of listJournals(journalDir)) {\n\t\tif (kinds !== undefined && !kinds.includes(journal.kind)) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (journal.owner.machineId !== machineId || isLive(journal.owner)) {\n\t\t\treport.skipped.push(journal.id);\n\t\t\tcontinue;\n\t\t}\n\t\trecoverJournal(journalDir, journal, report);\n\t}\n\treturn report;\n}\n\n/** Recovers one journal the operator vouched for, whatever machine owns it (the `recover` command). */\nexport function recoverForeignJournal(\n\tjournalDir: string,\n\tid: string,\n\tconfirmedMachineId: string,\n): RecoveryReport {\n\tconst report: RecoveryReport = {\n\t\tfinished: [],\n\t\treplayed: [],\n\t\trolledBack: [],\n\t\tchanged: [],\n\t\tskipped: [],\n\t};\n\tconst journal = readJournal(journalPath(journalDir, id));\n\tif (journal === null) {\n\t\tthrow new Error(`no journal ${id} in ${journalDir}`);\n\t}\n\tif (journal.owner.machineId !== confirmedMachineId) {\n\t\tthrow new Error(\n\t\t\t`journal ${id} belongs to machine ${journal.owner.machineId}, not ${confirmedMachineId}`,\n\t\t);\n\t}\n\trecoverJournal(journalDir, journal, report);\n\treturn report;\n}\n\nexport function removeJournalDir(journalDir: string): void {\n\tremoveWithRetry(journalDir);\n}\n","import { mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';\nimport { join } from 'node:path';\nimport { EXIT, NpmVmError } from '../errors.ts';\nimport { lockedMessage } from '../messages.ts';\nimport { newToken, type OwnerRecord } from './lease.ts';\nimport { isLive } from './proc.ts';\n\nexport const LOCK_FILE = 'lock';\nconst WAIT_LIMIT_MS = 10_000;\n\n/** What the lock file records: the owner plus a token only the owner knows, so only it can release. */\nexport interface LockRecord extends OwnerRecord {\n\ttoken: string;\n}\n\nexport interface Lock {\n\tpath: string;\n\trelease(): void;\n}\n\nexport function lockPath(stateDir: string): string {\n\treturn join(stateDir, LOCK_FILE);\n}\n\nexport function readLock(stateDir: string): LockRecord | null {\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(lockPath(stateDir), 'utf8')) as Partial<LockRecord>;\n\t\tif (typeof parsed.pid !== 'number' || typeof parsed.token !== 'string') {\n\t\t\treturn null;\n\t\t}\n\t\treturn {\n\t\t\tpid: parsed.pid,\n\t\t\tstart: typeof parsed.start === 'string' ? parsed.start : null,\n\t\t\thost: typeof parsed.host === 'string' ? parsed.host : '?',\n\t\t\tmachineId: typeof parsed.machineId === 'string' ? parsed.machineId : '?',\n\t\t\tcreatedAt: typeof parsed.createdAt === 'string' ? parsed.createdAt : '',\n\t\t\ttoken: parsed.token,\n\t\t};\n\t} catch {\n\t\treturn null;\n\t}\n}\n\n/** Whether the lock owner can be shown to be dead: only on this machine, and only by PROC-1. */\nexport function lockOwnerLive(record: LockRecord | null, machineId: string): boolean {\n\tif (record === null) {\n\t\treturn true;\n\t}\n\tif (record.machineId !== machineId) {\n\t\treturn true;\n\t}\n\treturn isLive(record);\n}\n\nfunction tryCreate(path: string, record: LockRecord): boolean {\n\ttry {\n\t\twriteFileSync(path, JSON.stringify(record), { flag: 'wx', mode: 0o600 });\n\t} catch (error) {\n\t\tif ((error as NodeJS.ErrnoException).code === 'EEXIST') {\n\t\t\treturn false;\n\t\t}\n\t\t// A half-written lock would block everyone with no owner to release it.\n\t\trmSync(path, { force: true });\n\t\tthrow error;\n\t}\n\treturn true;\n}\n\nfunction sleep(ms: number): Promise<void> {\n\treturn new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/**\n * Takes the exclusive lock (spec MUT-1): created with O_EXCL, released only by its owner, never reclaimed.\n * Waits with backoff for up to 10 s, then fails with M-LOCKED naming the file and whether the owner is live.\n */\nexport async function acquireLock(\n\tstateDir: string,\n\towner: OwnerRecord,\n\toptions: { waitMs?: number } = {},\n): Promise<Lock> {\n\tmkdirSync(stateDir, { recursive: true, mode: 0o700 });\n\tconst path = lockPath(stateDir);\n\tconst record: LockRecord = { ...owner, token: newToken() };\n\tconst deadline = Date.now() + (options.waitMs ?? WAIT_LIMIT_MS);\n\tlet delay = 50;\n\tfor (;;) {\n\t\tif (tryCreate(path, record)) {\n\t\t\treturn {\n\t\t\t\tpath,\n\t\t\t\trelease() {\n\t\t\t\t\t// Only the owner removes the lock, and only while the file still carries its token.\n\t\t\t\t\tif (readLock(stateDir)?.token === record.token) {\n\t\t\t\t\t\trmSync(path, { force: true });\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\t\tif (Date.now() + delay > deadline) {\n\t\t\tconst holder = readLock(stateDir);\n\t\t\tconst foreign = holder !== null && holder.machineId !== owner.machineId;\n\t\t\tconst live = lockOwnerLive(holder, owner.machineId);\n\t\t\tthrow new NpmVmError('M-LOCKED', EXIT.problems, lockedMessage(path, holder, live, foreign));\n\t\t}\n\t\tawait sleep(delay);\n\t\tdelay = Math.min(delay * 2, 1000);\n\t}\n}\n\n/** One attempt, no waiting; for the launcher's recovery check, which must never delay npm. */\nexport function tryLock(stateDir: string, owner: OwnerRecord): Lock | null {\n\tmkdirSync(stateDir, { recursive: true, mode: 0o700 });\n\tconst path = lockPath(stateDir);\n\tconst record: LockRecord = { ...owner, token: newToken() };\n\tif (!tryCreate(path, record)) {\n\t\treturn null;\n\t}\n\treturn {\n\t\tpath,\n\t\trelease() {\n\t\t\tif (readLock(stateDir)?.token === record.token) {\n\t\t\t\trmSync(path, { force: true });\n\t\t\t}\n\t\t},\n\t};\n}\n","import { EXIT, NpmVmError } from '../errors.ts';\nimport { resolveNpmWith } from '../index.ts';\nimport { listEntries } from '../install/cache.ts';\nimport { createContext, createInstaller } from '../install/index.ts';\nimport { readVerified } from '../install/verify.ts';\nimport { listJournals, recoverDeadJournals, recoverForeignJournal } from '../state/journal.ts';\nimport { listLeases, ownerLive } from '../state/lease.ts';\nimport { acquireLock } from '../state/lock.ts';\nimport { isLive } from '../state/proc.ts';\nimport { lastUsed, pruneCache, type PruneReport } from '../state/prune.ts';\nimport type { CommandContext } from './context.ts';\n\nconst DAY_MS = 86_400_000;\nexport const DEFAULT_PRUNE_DAYS = 90;\n\n/** `install [<spec>]`: fetches and verifies the project's npm, or the given spec, into the cache. */\nexport async function install(\n\tcontext: CommandContext,\n\tspec: string | undefined,\n\tcwd: string = process.cwd(),\n): Promise<number> {\n\tconst env = spec === undefined ? context.env : { ...context.env, NPM_VM_VERSION: spec };\n\tconst installer = createInstaller(createContext(env, context.dirs.home));\n\tconst result = await resolveNpmWith([], cwd, { env }, installer);\n\tif (result.selection === null) {\n\t\tcontext.io.out(\n\t\t\tcontext.json\n\t\t\t\t? JSON.stringify(result)\n\t\t\t\t: `Node's own npm ${result.version} satisfies the requirement; nothing to download.`,\n\t\t);\n\t\treturn EXIT.ok;\n\t}\n\tconst ensured = await installer.ensure(result.selection);\n\tensured.lease.release();\n\tcontext.io.out(\n\t\tcontext.json\n\t\t\t? JSON.stringify({ ...result, entryPath: ensured.entryPath })\n\t\t\t: `npm ${result.version} is ready in ${ensured.entryPath}`,\n\t);\n\treturn EXIT.ok;\n}\n\nexport interface CacheEntryView {\n\tversion: string;\n\tintegrity: string;\n\tpath: string;\n\tlastUsed: string | null;\n\tliveLeases: number;\n\tverifiedAt: string;\n}\n\nexport function cacheList(context: CommandContext): number {\n\tconst entries: CacheEntryView[] = listEntries(context.dirs.cache).map((entry) => {\n\t\tconst used = lastUsed(entry.entryPath as string);\n\t\treturn {\n\t\t\tversion: entry.version,\n\t\t\tintegrity: entry.integrity,\n\t\t\tpath: entry.entryPath as string,\n\t\t\tlastUsed: used === null ? null : new Date(used).toISOString(),\n\t\t\tliveLeases: listLeases(entry.entryPath as string).filter((lease) => ownerLive(lease)).length,\n\t\t\tverifiedAt: readVerified(entry.entryPath as string)?.verifiedAt ?? '',\n\t\t};\n\t});\n\tif (context.json) {\n\t\tcontext.io.out(JSON.stringify({ cache: context.dirs.cache, entries }, null, 2));\n\t} else {\n\t\tconst lines = [`${context.dirs.cache}`];\n\t\tfor (const entry of entries) {\n\t\t\tlines.push(\n\t\t\t\t`  npm ${entry.version}  ${entry.path}  last used ${entry.lastUsed ?? 'never'}${entry.liveLeases > 0 ? `  in use by ${entry.liveLeases}` : ''}`,\n\t\t\t);\n\t\t}\n\t\tif (entries.length === 0) {\n\t\t\tlines.push('  (empty)');\n\t\t}\n\t\tcontext.io.out(lines.join('\\n'));\n\t}\n\treturn EXIT.ok;\n}\n\nexport async function cachePrune(\n\tcontext: CommandContext,\n\tolderThanDays: number = DEFAULT_PRUNE_DAYS,\n): Promise<number> {\n\tif (!Number.isFinite(olderThanDays) || olderThanDays < 0) {\n\t\tthrow new NpmVmError(\n\t\t\t'M-NOMATCH',\n\t\t\tEXIT.usage,\n\t\t\t'--older-than needs a non-negative number of days.',\n\t\t);\n\t}\n\tconst lock = await acquireLock(context.dirs.state, context.owner);\n\ttry {\n\t\trecoverDeadJournals(context.dirs.journal, context.dirs.machine.id);\n\t\t// Homes differ, the per-machine cache does not: a lock inside the cache keeps two homes from pruning at once.\n\t\tconst cacheLock = await acquireLock(context.dirs.cache, context.owner);\n\t\tlet report: PruneReport;\n\t\ttry {\n\t\t\treport = pruneCache(context.dirs.cache, context.owner, {\n\t\t\t\tmaxAgeMs: olderThanDays * DAY_MS,\n\t\t\t});\n\t\t} finally {\n\t\t\tcacheLock.release();\n\t\t}\n\t\tcontext.io.out(\n\t\t\tcontext.json\n\t\t\t\t? JSON.stringify(report, null, 2)\n\t\t\t\t: `Removed ${report.removed.length}, kept ${report.kept.length}, skipped ${report.skipped.length} (in use).`,\n\t\t);\n\t} finally {\n\t\tlock.release();\n\t}\n\treturn EXIT.ok;\n}\n\n/** `recover --journal <id> --confirm-dead-machine <machine-id>` (spec PROC-1, CLI). */\nexport async function recover(\n\tcontext: CommandContext,\n\tjournalId: string,\n\tconfirmedMachine: string,\n): Promise<number> {\n\tconst journal = listJournals(context.dirs.journal).find((entry) => entry.id === journalId);\n\tif (journal === undefined) {\n\t\tthrow new NpmVmError(\n\t\t\t'M-NOMATCH',\n\t\t\tEXIT.usage,\n\t\t\t`No journal ${journalId} under ${context.dirs.journal}.`,\n\t\t);\n\t}\n\tif (journal.owner.machineId !== confirmedMachine) {\n\t\tthrow new NpmVmError(\n\t\t\t'M-NOMATCH',\n\t\t\tEXIT.usage,\n\t\t\t`Journal ${journalId} belongs to machine ${journal.owner.machineId}, not ${confirmedMachine}.`,\n\t\t);\n\t}\n\tif (journal.owner.machineId === context.dirs.machine.id && isLive(journal.owner)) {\n\t\tthrow new NpmVmError(\n\t\t\t'M-LOCKED',\n\t\t\tEXIT.problems,\n\t\t\t`Journal ${journalId} belongs to PID ${journal.owner.pid} on this machine, which is still running.`,\n\t\t);\n\t}\n\tconst lock = await acquireLock(context.dirs.state, context.owner);\n\ttry {\n\t\tconst report = recoverForeignJournal(context.dirs.journal, journalId, confirmedMachine);\n\t\tcontext.io.out(\n\t\t\tcontext.json ? JSON.stringify(report) : `Recovered ${journalId}: ${describeReport(report)}`,\n\t\t);\n\t} finally {\n\t\tlock.release();\n\t}\n\treturn EXIT.ok;\n}\n\nfunction describeReport(report: {\n\tfinished: string[];\n\treplayed: string[];\n\trolledBack: string[];\n\tchanged: string[];\n}): string {\n\tif (report.replayed.length > 0) {\n\t\treturn 'replayed';\n\t}\n\tif (report.rolledBack.length > 0) {\n\t\treturn 'rolled back';\n\t}\n\tif (report.changed.length > 0) {\n\t\treturn 'target changed since, left untouched';\n\t}\n\treturn 'already finished';\n}\n","import { createInterface } from 'node:readline/promises';\nimport { resolveDirs, type Dirs } from '../setup/home.ts';\nimport { ownerRecord, type OwnerRecord } from '../state/lease.ts';\n\nexport interface CommandIo {\n\tout(text: string): void;\n\terr(text: string): void;\n\t/** Asks a yes/no question; a non-interactive session answers no. */\n\tconfirm(question: string): Promise<boolean>;\n\tinteractive: boolean;\n}\n\nexport interface CommandContext {\n\tdirs: Dirs;\n\tenv: NodeJS.ProcessEnv;\n\tplatform: NodeJS.Platform;\n\towner: OwnerRecord;\n\tio: CommandIo;\n\tjson: boolean;\n\tversion: string;\n}\n\nexport interface ContextOptions {\n\thome?: string;\n\tenv?: NodeJS.ProcessEnv;\n\tjson?: boolean;\n\tio?: CommandIo;\n\tversion: string;\n}\n\nexport function terminalIo(): CommandIo {\n\tconst interactive = Boolean(process.stdin.isTTY && process.stdout.isTTY);\n\treturn {\n\t\tout: (text) => process.stdout.write(`${text}\\n`),\n\t\terr: (text) => process.stderr.write(`${text}\\n`),\n\t\tinteractive,\n\t\tasync confirm(question) {\n\t\t\tif (!interactive) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tconst rl = createInterface({ input: process.stdin, output: process.stdout });\n\t\t\ttry {\n\t\t\t\tconst answer = await rl.question(`${question} [y/N] `);\n\t\t\t\treturn /^y(es)?$/i.test(answer.trim());\n\t\t\t} finally {\n\t\t\t\trl.close();\n\t\t\t}\n\t\t},\n\t};\n}\n\nexport function createCommandContext(options: ContextOptions): CommandContext {\n\tconst env = options.env ?? process.env;\n\tconst dirs = resolveDirs(env, options.home);\n\treturn {\n\t\tdirs,\n\t\tenv,\n\t\tplatform: process.platform,\n\t\towner: ownerRecord(dirs.machine.id),\n\t\tio: options.io ?? terminalIo(),\n\t\tjson: options.json ?? false,\n\t\tversion: options.version,\n\t};\n}\n","import {\n\tcopyFileSync,\n\texistsSync,\n\tlstatSync,\n\treaddirSync,\n\treadFileSync,\n\treadlinkSync,\n\trealpathSync,\n\trenameSync,\n\trmSync,\n\tsymlinkSync,\n} from 'node:fs';\nimport { homedir } from 'node:os';\nimport { basename, dirname, join } from 'node:path';\nimport { atomicWrite, withSharingRetry } from '../state/atomic.ts';\nimport { mutateFile } from '../state/journal.ts';\nimport type { OwnerRecord } from '../state/lease.ts';\nimport { captureMeta, metaMatches, MISSING, type Meta } from '../state/meta.ts';\nimport type { Dirs } from './home.ts';\nimport { cmdShim, posixShim, powershellShim, type ShimName } from './shims.ts';\n\nexport type NodeManager = 'nvm' | 'fnm' | 'nvm-windows';\n\n/** One Node install whose `npm` and `npx` entry points `--link` replaces (spec LNK-1). */\nexport interface NodeInstall {\n\tmanager: NodeManager;\n\tversion: string;\n\tbinDir: string;\n}\n\nexport const ORIGINAL_SUFFIX = '.npm-vm-original';\nexport const LINKS_FILE = 'links.json';\n\nexport interface LinkRecord {\n\tbinDir: string;\n\t/** The entry point we replaced, e.g. `npm` or `npm.cmd`. */\n\tname: string;\n\ttarget: string;\n\toriginalPath: string | null;\n\toriginal: Meta;\n\tshim: Meta;\n\tlinkedAt: string;\n}\n\nexport interface LinksFile {\n\tversion: 1;\n\tentries: LinkRecord[];\n}\n\nfunction versionsUnder(dir: string): string[] {\n\ttry {\n\t\treturn readdirSync(dir).filter((name) => /^v?\\d+\\.\\d+\\.\\d+$/.test(name));\n\t} catch {\n\t\treturn [];\n\t}\n}\n\nfunction fnmDir(env: NodeJS.ProcessEnv, platform: NodeJS.Platform, home: string): string {\n\tif (env['FNM_DIR']) {\n\t\treturn env['FNM_DIR'];\n\t}\n\tif (platform === 'win32') {\n\t\treturn join(env['APPDATA'] ?? join(home, 'AppData', 'Roaming'), 'fnm');\n\t}\n\tif (platform === 'darwin') {\n\t\treturn join(home, 'Library', 'Application Support', 'fnm');\n\t}\n\treturn join(env['XDG_DATA_HOME'] || join(home, '.local', 'share'), 'fnm');\n}\n\n/** The root nvm-windows keeps its versions in, from its settings.txt (spec LNK-1). */\nfunction nvmWindowsRoot(env: NodeJS.ProcessEnv): string | null {\n\tconst nvmHome = env['NVM_HOME'];\n\tif (!nvmHome) {\n\t\treturn null;\n\t}\n\ttry {\n\t\tconst settings = readFileSync(join(nvmHome, 'settings.txt'), 'utf8');\n\t\tconst root = /^root:\\s*(.+)$/m.exec(settings)?.[1]?.trim();\n\t\treturn root ?? nvmHome;\n\t} catch {\n\t\treturn nvmHome;\n\t}\n}\n\n/** Windows paths resolved through junctions and compared without case, so one install is never linked twice (LNK-4). */\nexport function installKey(binDir: string, platform: NodeJS.Platform): string {\n\tlet real = binDir;\n\ttry {\n\t\treal = realpathSync(binDir);\n\t} catch {\n\t\t// A missing dir is listed as given and skipped as unwritable later.\n\t}\n\treturn platform === 'win32' ? real.toLowerCase() : real;\n}\n\nexport function findNodeInstalls(\n\tenv: NodeJS.ProcessEnv = process.env,\n\tplatform: NodeJS.Platform = process.platform,\n\thome: string = env['HOME'] || homedir(),\n): NodeInstall[] {\n\tconst installs: NodeInstall[] = [];\n\tconst seen = new Set<string>();\n\tconst add = (install: NodeInstall): void => {\n\t\tconst key = installKey(install.binDir, platform);\n\t\tif (!seen.has(key) && existsSync(install.binDir)) {\n\t\t\tseen.add(key);\n\t\t\tinstalls.push(install);\n\t\t}\n\t};\n\tconst nvmDir = env['NVM_DIR'] || join(home, '.nvm');\n\tfor (const version of versionsUnder(join(nvmDir, 'versions', 'node'))) {\n\t\tadd({\n\t\t\tmanager: 'nvm',\n\t\t\tversion: version.replace(/^v/, ''),\n\t\t\tbinDir: join(nvmDir, 'versions', 'node', version, 'bin'),\n\t\t});\n\t}\n\tconst fnm = join(fnmDir(env, platform, home), 'node-versions');\n\tfor (const version of versionsUnder(fnm)) {\n\t\tconst installation = join(fnm, version, 'installation');\n\t\tadd({\n\t\t\tmanager: 'fnm',\n\t\t\tversion: version.replace(/^v/, ''),\n\t\t\tbinDir: platform === 'win32' ? installation : join(installation, 'bin'),\n\t\t});\n\t}\n\tif (platform === 'win32') {\n\t\tconst root = nvmWindowsRoot(env);\n\t\tif (root !== null) {\n\t\t\tfor (const version of versionsUnder(root)) {\n\t\t\t\tadd({\n\t\t\t\t\tmanager: 'nvm-windows',\n\t\t\t\t\tversion: version.replace(/^v/, ''),\n\t\t\t\t\tbinDir: join(root, version),\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n\treturn installs;\n}\n\n/** A file `--link` touches in one install: a shim to write, or `content: null` for a file to move aside (WIN-2). */\nexport interface LinkTarget {\n\tname: string;\n\tcontent: string | null;\n\tmode: number;\n}\n\n/** The files `--link` replaces in one install; blocked `.ps1` files are moved aside so `.cmd` wins. */\nexport function linkTargets(\n\thome: string,\n\tplatform: NodeJS.Platform,\n\tpowershell: boolean,\n): LinkTarget[] {\n\tconst targets: LinkTarget[] = [];\n\tfor (const name of ['npm', 'npx'] as const satisfies readonly ShimName[]) {\n\t\ttargets.push({ name, content: posixShim(home, name), mode: 0o755 });\n\t\tif (platform === 'win32') {\n\t\t\ttargets.push({ name: `${name}.cmd`, content: cmdShim(home, name), mode: 0o644 });\n\t\t\ttargets.push({\n\t\t\t\tname: `${name}.ps1`,\n\t\t\t\tcontent: powershell ? powershellShim(home, name) : null,\n\t\t\t\tmode: 0o644,\n\t\t\t});\n\t\t}\n\t}\n\treturn targets;\n}\n\nexport type LinkOutcome = 'linked' | 'already' | 'foreign' | 'unwritable' | 'missing';\n\nexport interface LinkResult {\n\ttarget: string;\n\toutcome: LinkOutcome;\n\tdetail?: string;\n}\n\n/** Keeps a copy of the original beside the target; a symlink is copied as a symlink. */\nfunction preserveOriginal(path: string, originalPath: string, meta: Meta): void {\n\tif (meta.type === 'symlink') {\n\t\tsymlinkSync(readlinkSync(path), originalPath);\n\t} else {\n\t\tcopyFileSync(path, originalPath);\n\t}\n}\n\n/** Puts the preserved original back in place of whatever is (or is not) at the target. */\nfunction restoreOriginal(dirs: Dirs, owner: OwnerRecord, entry: LinkRecord): void {\n\tconst originalPath = entry.originalPath as string;\n\tif (entry.original.type === 'symlink') {\n\t\tmutateFile(dirs.journal, 'link', owner, entry.target, null);\n\t\twithSharingRetry(() => renameSync(originalPath, entry.target));\n\t\treturn;\n\t}\n\tmutateFile(\n\t\tdirs.journal,\n\t\t'link',\n\t\towner,\n\t\tentry.target,\n\t\treadFileSync(originalPath),\n\t\tentry.original.mode || 0o755,\n\t);\n\trmSync(originalPath, { force: true });\n}\n\n/**\n * Replaces one entry point with a shim (spec LNK-2, LNK-3). The original is copied beside the target and\n * recorded before the journaled write, so a crash at any step leaves either a restorable original or the shim.\n * A file matching neither our shim nor the recorded original is reported and left alone.\n */\nexport function linkOne(\n\tdirs: Dirs,\n\towner: OwnerRecord,\n\tbinDir: string,\n\ttarget: LinkTarget,\n): LinkResult {\n\tconst path = join(binDir, target.name);\n\tconst originalPath = `${path}${ORIGINAL_SUFFIX}`;\n\tconst known = readLinks(dirs).entries.find((entry) => entry.target === path);\n\tlet current = captureMeta(path);\n\tif (\n\t\tcurrent.type === 'missing' &&\n\t\tknown !== undefined &&\n\t\tknown.shim.type !== 'missing' &&\n\t\tknown.originalPath !== null &&\n\t\texistsSync(known.originalPath)\n\t) {\n\t\t// A crash between moving the original aside and writing the shim: put the original back first.\n\t\trestoreOriginal(dirs, owner, known);\n\t\tforget(dirs, known);\n\t\tcurrent = captureMeta(path);\n\t}\n\tif (target.content === null) {\n\t\treturn moveAside(dirs, owner, binDir, target.name, known);\n\t}\n\tif (\n\t\tcurrent.type === 'missing' &&\n\t\tknown !== undefined &&\n\t\tknown.shim.type === 'missing' &&\n\t\tknown.originalPath !== null &&\n\t\tmetaMatches(known.originalPath, known.original)\n\t) {\n\t\t// Moved aside under a restrictive policy that is permissive again: the shim goes in, the original stays aside.\n\t\tmutateFile(dirs.journal, 'link', owner, path, Buffer.from(target.content, 'utf8'), target.mode);\n\t\trecord(dirs, { ...known, shim: captureMeta(path), linkedAt: new Date().toISOString() });\n\t\treturn { target: path, outcome: 'linked' };\n\t}\n\tif (current.type === 'missing') {\n\t\treturn { target: path, outcome: 'missing' };\n\t}\n\tif (current.type === 'file' && readFileSync(path, 'utf8') === target.content) {\n\t\tif (known === undefined) {\n\t\t\trecord(dirs, {\n\t\t\t\tbinDir,\n\t\t\t\tname: target.name,\n\t\t\t\ttarget: path,\n\t\t\t\toriginalPath: existsSync(originalPath) ? originalPath : null,\n\t\t\t\toriginal: captureMeta(originalPath),\n\t\t\t\tshim: current,\n\t\t\t\tlinkedAt: new Date().toISOString(),\n\t\t\t});\n\t\t} else if (known.shim.type === 'missing') {\n\t\t\t// A crash between writing the shim and recording it: the file is ours, the record catches up.\n\t\t\trecord(dirs, { ...known, shim: current, linkedAt: new Date().toISOString() });\n\t\t}\n\t\treturn { target: path, outcome: 'already' };\n\t}\n\tif (known !== undefined && metaMatches(path, known.shim)) {\n\t\t// Still our shim, only the template changed: rewrite it in place and keep the original where it is.\n\t\tmutateFile(dirs.journal, 'link', owner, path, Buffer.from(target.content, 'utf8'), target.mode);\n\t\trecord(dirs, { ...known, shim: captureMeta(path), linkedAt: new Date().toISOString() });\n\t\treturn { target: path, outcome: 'linked' };\n\t}\n\tif (known !== undefined && !metaMatches(path, known.original)) {\n\t\treturn { target: path, outcome: 'foreign', detail: 'changed since npm-vm linked it' };\n\t}\n\tif (existsSync(originalPath) && !metaMatches(originalPath, current)) {\n\t\treturn { target: path, outcome: 'foreign', detail: `${originalPath} already exists` };\n\t}\n\ttry {\n\t\tif (!existsSync(originalPath)) {\n\t\t\tpreserveOriginal(path, originalPath, current);\n\t\t}\n\t} catch (error) {\n\t\treturn { target: path, outcome: 'unwritable', detail: (error as Error).message };\n\t}\n\tconst entry: LinkRecord = {\n\t\tbinDir,\n\t\tname: target.name,\n\t\ttarget: path,\n\t\toriginalPath,\n\t\toriginal: current,\n\t\tshim: MISSING,\n\t\tlinkedAt: new Date().toISOString(),\n\t};\n\trecord(dirs, entry);\n\ttry {\n\t\tmutateFile(dirs.journal, 'link', owner, path, Buffer.from(target.content, 'utf8'), target.mode);\n\t} catch (error) {\n\t\treturn { target: path, outcome: 'unwritable', detail: (error as Error).message };\n\t}\n\trecord(dirs, { ...entry, shim: captureMeta(path) });\n\treturn { target: path, outcome: 'linked' };\n}\n\n/** Moves a file aside without a replacement, for Node's `.ps1` entry points when scripts are blocked. */\nfunction moveAside(\n\tdirs: Dirs,\n\towner: OwnerRecord,\n\tbinDir: string,\n\tname: string,\n\tknown: LinkRecord | undefined,\n): LinkResult {\n\tconst path = join(binDir, name);\n\tconst originalPath = `${path}${ORIGINAL_SUFFIX}`;\n\tconst current = captureMeta(path);\n\tif (known !== undefined && known.shim.type !== 'missing' && metaMatches(path, known.shim)) {\n\t\t// The policy turned restrictive after a link: drop our shim and keep the preserved original aside.\n\t\tmutateFile(dirs.journal, 'link', owner, path, null);\n\t\trecord(dirs, { ...known, shim: MISSING, linkedAt: new Date().toISOString() });\n\t\treturn { target: path, outcome: 'linked' };\n\t}\n\tif (current.type === 'missing') {\n\t\tif (known === undefined && existsSync(originalPath)) {\n\t\t\t// A crash after the rename and before the record: adopt the aside copy so unlink can restore it.\n\t\t\trecord(dirs, {\n\t\t\t\tbinDir,\n\t\t\t\tname,\n\t\t\t\ttarget: path,\n\t\t\t\toriginalPath,\n\t\t\t\toriginal: captureMeta(originalPath),\n\t\t\t\tshim: MISSING,\n\t\t\t\tlinkedAt: new Date().toISOString(),\n\t\t\t});\n\t\t\treturn { target: path, outcome: 'already' };\n\t\t}\n\t\treturn {\n\t\t\ttarget: path,\n\t\t\toutcome: known !== undefined && existsSync(originalPath) ? 'already' : 'missing',\n\t\t};\n\t}\n\tif (known !== undefined && !metaMatches(path, known.original)) {\n\t\treturn { target: path, outcome: 'foreign', detail: 'changed since npm-vm linked it' };\n\t}\n\tif (existsSync(originalPath) && !metaMatches(originalPath, current)) {\n\t\treturn { target: path, outcome: 'foreign', detail: `${originalPath} already exists` };\n\t}\n\ttry {\n\t\twithSharingRetry(() => renameSync(path, originalPath));\n\t} catch (error) {\n\t\treturn { target: path, outcome: 'unwritable', detail: (error as Error).message };\n\t}\n\trecord(dirs, {\n\t\tbinDir,\n\t\tname,\n\t\ttarget: path,\n\t\toriginalPath,\n\t\toriginal: current,\n\t\tshim: MISSING,\n\t\tlinkedAt: new Date().toISOString(),\n\t});\n\tvoid owner;\n\treturn { target: path, outcome: 'linked' };\n}\n\nexport type UnlinkOutcome = 'restored' | 'changed' | 'missing';\n\n/** Puts the original back only when the shim is still ours (spec MUT-5); a replaced file is left as is. */\nexport function unlinkOne(dirs: Dirs, owner: OwnerRecord, entry: LinkRecord): UnlinkOutcome {\n\tconst current = captureMeta(entry.target);\n\tconst hasOriginal = entry.originalPath !== null && existsSync(entry.originalPath);\n\tif (current.type === 'missing') {\n\t\tif (hasOriginal && metaMatches(entry.originalPath as string, entry.original)) {\n\t\t\trestoreOriginal(dirs, owner, entry);\n\t\t\tforget(dirs, entry);\n\t\t\treturn 'restored';\n\t\t}\n\t\tif (hasOriginal) {\n\t\t\treturn 'changed';\n\t\t}\n\t\tforget(dirs, entry);\n\t\treturn 'missing';\n\t}\n\tif (entry.shim.type === 'missing') {\n\t\t// The file was only moved aside; something else put a file back, which is not ours to replace.\n\t\treturn 'changed';\n\t}\n\tif (!metaMatches(entry.target, entry.shim)) {\n\t\treturn 'changed';\n\t}\n\tif (hasOriginal) {\n\t\trestoreOriginal(dirs, owner, entry);\n\t} else {\n\t\tmutateFile(dirs.journal, 'link', owner, entry.target, null);\n\t}\n\tforget(dirs, entry);\n\treturn 'restored';\n}\n\nfunction record(dirs: Dirs, entry: LinkRecord): void {\n\tconst links = readLinks(dirs);\n\tlinks.entries = [...links.entries.filter((item) => item.target !== entry.target), entry];\n\twriteLinks(dirs, links);\n}\n\nfunction forget(dirs: Dirs, entry: LinkRecord): void {\n\tconst links = readLinks(dirs);\n\tlinks.entries = links.entries.filter((item) => item.target !== entry.target);\n\twriteLinks(dirs, links);\n}\n\nexport function readLinks(dirs: Dirs): LinksFile {\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(join(dirs.state, LINKS_FILE), 'utf8')) as LinksFile;\n\t\treturn Array.isArray(parsed.entries) ? parsed : { version: 1, entries: [] };\n\t} catch {\n\t\treturn { version: 1, entries: [] };\n\t}\n}\n\nexport function writeLinks(dirs: Dirs, links: LinksFile): void {\n\tatomicWrite(join(dirs.state, LINKS_FILE), JSON.stringify(links, null, '\\t'), 0o600);\n}\n\n/** Whether a recorded link still holds our shim, for `doctor` (spec CLI). */\nexport function linkState(entry: LinkRecord): 'intact' | 'changed' | 'missing' {\n\tconst type = captureMeta(entry.target).type;\n\tif (entry.shim.type === 'missing') {\n\t\t// Moved aside on purpose (WIN-2): intact while nothing took its place and the preserved copy is still there.\n\t\tconst preserved =\n\t\t\tentry.originalPath !== null && metaMatches(entry.originalPath, entry.original);\n\t\treturn type === 'missing' ? (preserved ? 'intact' : 'missing') : 'changed';\n\t}\n\tif (type === 'missing') {\n\t\treturn 'missing';\n\t}\n\treturn metaMatches(entry.target, entry.shim) ? 'intact' : 'changed';\n}\n\nexport function describeInstall(install: NodeInstall): string {\n\treturn `${install.manager} ${install.version} (${install.binDir})`;\n}\n\nexport function isSymlinkTo(path: string, suffix: string): boolean {\n\ttry {\n\t\treturn lstatSync(path).isSymbolicLink() && basename(dirname(path)) === suffix;\n\t} catch {\n\t\treturn false;\n\t}\n}\n","import {\n\tcopyFileSync,\n\texistsSync,\n\tmkdirSync,\n\treaddirSync,\n\treadFileSync,\n\trmSync,\n\tstatSync,\n\twriteFileSync,\n} from 'node:fs';\nimport { join } from 'node:path';\nimport { atomicRename, removeWithRetry } from '../state/atomic.ts';\n\nexport const BOOTSTRAP_FILE = 'bootstrap.cjs';\nexport const RUNTIME_FILE = 'runtime.cjs';\nexport const CURRENT_FILE = 'current';\nexport const PREVIOUS_FILE = 'previous';\nexport const MANIFEST_FILE = 'manifest.json';\nexport const VERSIONS_DIR = 'versions';\n\nexport interface VersionManifest {\n\tversion: string;\n\tabi: number;\n\tfiles: string[];\n}\n\n/**\n * Where this code's runtime build lives: beside an installed `runtime.cjs`, under `dist/runtime/` for the\n * bin, or `../../dist/runtime/` when running from source. Null when nothing has been built.\n */\nexport function runtimeDistDir(): string | null {\n\tconst here = import.meta.dirname;\n\tconst candidates = [\n\t\there,\n\t\tjoin(here, 'runtime'),\n\t\tjoin(here, '..', 'dist', 'runtime'),\n\t\tjoin(here, '..', '..', 'dist', 'runtime'),\n\t];\n\tfor (const candidate of candidates) {\n\t\tif (existsSync(join(candidate, RUNTIME_FILE)) && existsSync(join(candidate, BOOTSTRAP_FILE))) {\n\t\t\treturn candidate;\n\t\t}\n\t}\n\treturn null;\n}\n\nexport function versionDir(home: string, version: string): string {\n\treturn join(home, VERSIONS_DIR, version);\n}\n\nfunction copyTree(from: string, to: string, files: string[], prefix = ''): void {\n\tmkdirSync(to, { recursive: true, mode: 0o755 });\n\tfor (const name of readdirSync(from)) {\n\t\tconst source = join(from, name);\n\t\tconst target = join(to, name);\n\t\tif (statSync(source).isDirectory()) {\n\t\t\tcopyTree(source, target, files, `${prefix}${name}/`);\n\t\t} else {\n\t\t\tcopyFileSync(source, target);\n\t\t\tfiles.push(`${prefix}${name}`);\n\t\t}\n\t}\n}\n\n/**\n * Installs one runtime version under `versions/<version>/` atomically (spec SET-1): copied into a\n * temp dir beside it and renamed into place, so a crash never leaves a half-written version.\n */\nexport function installVersion(\n\thome: string,\n\tversion: string,\n\tdistDir: string,\n\tabi: number,\n): string {\n\tconst versions = join(home, VERSIONS_DIR);\n\tmkdirSync(versions, { recursive: true, mode: 0o755 });\n\tconst target = versionDir(home, version);\n\tconst staging = join(versions, `.${version}.${process.pid}.${Date.now()}`);\n\trmSync(staging, { recursive: true, force: true });\n\tconst files: string[] = [];\n\tcopyTree(distDir, staging, files);\n\tconst manifest: VersionManifest = { version, abi, files: files.toSorted() };\n\twriteFileSync(join(staging, MANIFEST_FILE), JSON.stringify(manifest, null, '\\t'));\n\t// The old copy moves aside and the new one moves in: two renames, no window where the version is deleted.\n\tconst replaced = join(versions, `.${version}.replaced.${process.pid}.${Date.now()}`);\n\tif (existsSync(target)) {\n\t\tatomicRename(target, replaced);\n\t}\n\ttry {\n\t\tatomicRename(staging, target);\n\t} catch (error) {\n\t\tif (existsSync(replaced)) {\n\t\t\tatomicRename(replaced, target);\n\t\t}\n\t\tthrow error;\n\t}\n\tremoveWithRetry(replaced);\n\treturn target;\n}\n\n/** Points `current` at an installed version; the write is atomic so a launcher never reads a partial file. */\nexport function setCurrent(home: string, version: string): void {\n\tconst temp = join(home, `.current.${process.pid}.${Date.now()}`);\n\twriteFileSync(temp, `${version}\\n`);\n\tatomicRename(temp, join(home, CURRENT_FILE));\n}\n\nexport function readCurrent(home: string): string | null {\n\ttry {\n\t\treturn readFileSync(join(home, CURRENT_FILE), 'utf8').trim();\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nexport function readPrevious(home: string): string | null {\n\ttry {\n\t\treturn readFileSync(join(home, PREVIOUS_FILE), 'utf8').trim();\n\t} catch {\n\t\treturn null;\n\t}\n}\n\n/** Copies the launcher entry of an installed version to the home root, where the shims point. */\nexport function installBootstrap(home: string, version: string): void {\n\tconst source = join(versionDir(home, version), BOOTSTRAP_FILE);\n\tconst temp = join(home, `.${BOOTSTRAP_FILE}.${process.pid}.${Date.now()}`);\n\tcopyFileSync(source, temp);\n\tatomicRename(temp, join(home, BOOTSTRAP_FILE));\n}\n\nexport function readManifest(home: string, version: string): VersionManifest | null {\n\ttry {\n\t\treturn JSON.parse(\n\t\t\treadFileSync(join(versionDir(home, version), MANIFEST_FILE), 'utf8'),\n\t\t) as VersionManifest;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\n/** Removes copies a crashed reinstall moved aside; the launcher only reads them while `versions/<v>` is missing. */\nexport function sweepReplaced(home: string): void {\n\tlet names: string[];\n\ttry {\n\t\tnames = readdirSync(join(home, VERSIONS_DIR));\n\t} catch {\n\t\treturn;\n\t}\n\tfor (const name of names) {\n\t\tconst match = /^\\.(.+)\\.replaced\\./.exec(name);\n\t\tif (match !== null && existsSync(join(home, VERSIONS_DIR, match[1] as string, RUNTIME_FILE))) {\n\t\t\tremoveWithRetry(join(home, VERSIONS_DIR, name));\n\t\t}\n\t}\n}\n\nexport function installedVersions(home: string): string[] {\n\ttry {\n\t\treturn readdirSync(join(home, VERSIONS_DIR)).filter((name) => /^\\d+\\.\\d+\\.\\d+/.test(name));\n\t} catch {\n\t\treturn [];\n\t}\n}\n\n/** The ABI an installed runtime declares, read from its manifest. */\nexport function runtimeAbi(home: string, version: string): number | null {\n\treturn readManifest(home, version)?.abi ?? null;\n}\n","import { execFileSync } from 'node:child_process';\nimport { accessSync, constants, existsSync, lstatSync, readFileSync, realpathSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { basename, dirname, join } from 'node:path';\nimport { atomicWrite } from '../state/atomic.ts';\nimport { mutateFile } from '../state/journal.ts';\nimport type { OwnerRecord } from '../state/lease.ts';\nimport { captureMeta, sha256 } from '../state/meta.ts';\nimport { powershellPath, shellBinary } from '../state/proc.ts';\nimport type { Dirs } from './home.ts';\nimport { BLOCK_END, BLOCK_START, profileBlock, type Shell } from './shell.ts';\n\nexport interface ProfileParts {\n\tpath: boolean;\n\thook: boolean;\n}\n\n/** One file `setup` would edit for one shell (spec SH-3). */\nexport interface ProfileTarget {\n\tshell: Shell;\n\tfile: string;\n\tparts: ProfileParts;\n}\n\nexport interface ProfileRecord {\n\tfile: string;\n\tshell: Shell;\n\tparts: ProfileParts;\n\t/** sha256 of the whole file as written, so `uninstall` can tell a later edit (spec MUT-5). */\n\twrittenSha256: string;\n\tbackup: string | null;\n\tupdatedAt: string;\n}\n\nexport interface ProfilesFile {\n\tversion: 1;\n\tentries: ProfileRecord[];\n}\n\nexport const PROFILES_FILE = 'profiles.json';\n\nconst BLOCK_RE = /^# >>> npm-vm >>>\\n[\\s\\S]*?^# <<< npm-vm <<<\\n?/m;\n\nfunction bashLoginFile(home: string): string {\n\tfor (const name of ['.bash_profile', '.bash_login', '.profile']) {\n\t\tif (existsSync(join(home, name))) {\n\t\t\treturn join(home, name);\n\t\t}\n\t}\n\treturn join(home, '.bash_profile');\n}\n\n/** The user profile of one PowerShell host, asked with `-NoProfile` so nothing of the user's runs (spec SEC-8). */\nexport function powershellProfile(\n\thost: 'powershell' | 'pwsh',\n\tenv: NodeJS.ProcessEnv,\n\tplatform: NodeJS.Platform = process.platform,\n): string | null {\n\tconst bin =\n\t\thost === 'powershell' ? powershellPath(env) : shellBinary('powershell', env, platform);\n\tif (bin === null) {\n\t\treturn null;\n\t}\n\ttry {\n\t\tconst out = execFileSync(\n\t\t\tbin,\n\t\t\t['-NoProfile', '-NonInteractive', '-Command', '$PROFILE.CurrentUserAllHosts'],\n\t\t\t{\n\t\t\t\tencoding: 'utf8',\n\t\t\t\tenv,\n\t\t\t\twindowsHide: true,\n\t\t\t\tstdio: ['ignore', 'pipe', 'ignore'],\n\t\t\t},\n\t\t).trim();\n\t\treturn out === '' ? null : out;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\n/** The files to edit for `shells` (spec SH-3); PowerShell hosts that are not installed yield nothing. */\nexport function profileTargets(\n\tshells: readonly Shell[],\n\tenv: NodeJS.ProcessEnv = process.env,\n\tplatform: NodeJS.Platform = process.platform,\n\thome: string = env['HOME'] || homedir(),\n): ProfileTarget[] {\n\tconst targets: ProfileTarget[] = [];\n\tfor (const shell of shells) {\n\t\tswitch (shell) {\n\t\t\tcase 'zsh': {\n\t\t\t\tconst zdot = env['ZDOTDIR'] || home;\n\t\t\t\ttargets.push({ shell, file: join(zdot, '.zshenv'), parts: { path: true, hook: false } });\n\t\t\t\ttargets.push({ shell, file: join(zdot, '.zshrc'), parts: { path: false, hook: true } });\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase 'bash': {\n\t\t\t\ttargets.push({ shell, file: join(home, '.bashrc'), parts: { path: true, hook: true } });\n\t\t\t\tconst login = bashLoginFile(home);\n\t\t\t\tif (login !== join(home, '.bashrc')) {\n\t\t\t\t\ttargets.push({ shell, file: login, parts: { path: true, hook: false } });\n\t\t\t\t}\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase 'fish': {\n\t\t\t\tconst config = env['XDG_CONFIG_HOME'] || join(home, '.config');\n\t\t\t\ttargets.push({\n\t\t\t\t\tshell,\n\t\t\t\t\tfile: join(config, 'fish', 'conf.d', 'npm-vm.fish'),\n\t\t\t\t\tparts: { path: true, hook: true },\n\t\t\t\t});\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase 'powershell': {\n\t\t\t\tconst hosts: Array<'powershell' | 'pwsh'> =\n\t\t\t\t\tplatform === 'win32' ? ['powershell', 'pwsh'] : ['pwsh'];\n\t\t\t\tfor (const host of hosts) {\n\t\t\t\t\tconst file = powershellProfile(host, env, platform);\n\t\t\t\t\tif (file !== null && !targets.some((target) => target.file === file)) {\n\t\t\t\t\t\ttargets.push({ shell, file, parts: { path: true, hook: true } });\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tbreak;\n\t\t\t}\n\t\t}\n\t}\n\treturn targets;\n}\n\n/** Why a profile is printed instead of edited (spec SH-5), or null when editing it is fine. */\nexport function profileGuard(\n\tfile: string,\n\tenv: NodeJS.ProcessEnv = process.env,\n\tplatform: NodeJS.Platform = process.platform,\n): string | null {\n\tlet stat;\n\ttry {\n\t\tstat = lstatSync(file);\n\t} catch {\n\t\tstat = null;\n\t}\n\tif (stat !== null && stat.isSymbolicLink()) {\n\t\treturn 'it is a symlink, so a dotfile manager probably owns it';\n\t}\n\tlet probe = stat === null ? dirname(file) : file;\n\twhile (!existsSync(probe) && dirname(probe) !== probe) {\n\t\tprobe = dirname(probe);\n\t}\n\ttry {\n\t\taccessSync(probe, constants.W_OK);\n\t} catch {\n\t\treturn 'it is not writable';\n\t}\n\ttry {\n\t\tif (realpathSync(probe).startsWith('/nix/store')) {\n\t\t\treturn 'it lives in the Nix store (home-manager)';\n\t\t}\n\t} catch {\n\t\t// An unresolvable path is handled by the write itself.\n\t}\n\tconst chezmoi = join(env['HOME'] || homedir(), '.local', 'share', 'chezmoi');\n\tif (existsSync(join(chezmoi, `dot_${basename(file).replace(/^\\./, '')}`))) {\n\t\treturn 'chezmoi manages it';\n\t}\n\tif (platform === 'win32' && stat !== null && file.endsWith('.ps1')) {\n\t\tconst content = readFileSync(file, 'utf8');\n\t\tif (content.includes('# SIG # Begin signature block') && executionPolicy(env) === 'AllSigned') {\n\t\t\treturn 'it is signed and the execution policy is AllSigned';\n\t\t}\n\t}\n\treturn null;\n}\n\n/** The effective PowerShell execution policy, asked without a profile (spec WIN-2). */\nexport function executionPolicy(env: NodeJS.ProcessEnv = process.env): string | null {\n\ttry {\n\t\treturn execFileSync(\n\t\t\tpowershellPath(env),\n\t\t\t['-NoProfile', '-NonInteractive', '-Command', 'Get-ExecutionPolicy'],\n\t\t\t{\n\t\t\t\tencoding: 'utf8',\n\t\t\t\twindowsHide: true,\n\t\t\t\tstdio: ['ignore', 'pipe', 'ignore'],\n\t\t\t},\n\t\t).trim();\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nexport interface ProfileEdit {\n\ttarget: ProfileTarget;\n\tbefore: string | null;\n\tafter: string;\n\t/** A diff of the block the edit adds or replaces, for the consent prompt. */\n\tdiff: string;\n}\n\n/** The content with our block replaced or appended; a trailing newline is guaranteed before the block. */\nexport function withBlock(content: string | null, block: string): string {\n\tconst text = content ?? '';\n\tif (BLOCK_RE.test(text)) {\n\t\treturn text.replace(BLOCK_RE, block);\n\t}\n\tconst separator = text === '' || text.endsWith('\\n') ? '' : '\\n';\n\treturn `${text}${separator}${text === '' ? '' : '\\n'}${block}`;\n}\n\n/** The content without our block and the blank line that separated it; nothing else moves. */\nexport function withoutBlock(content: string): string {\n\tconst match = BLOCK_RE.exec(content);\n\tif (match === null) {\n\t\treturn content;\n\t}\n\tlet before = content.slice(0, match.index).replace(/\\n+$/, '\\n');\n\tif (before === '\\n') {\n\t\tbefore = '';\n\t}\n\tconst after = content.slice(match.index + match[0].length);\n\treturn before !== '' && after !== '' ? `${before}\\n${after}` : `${before}${after}`;\n}\n\nexport function currentBlock(content: string): string | null {\n\tconst match = BLOCK_RE.exec(content);\n\treturn match === null ? null : match[0];\n}\n\nfunction renderDiff(file: string, before: string | null, after: string): string {\n\tconst oldBlock = before === null ? null : currentBlock(before);\n\tconst newBlock = currentBlock(after) ?? '';\n\tconst lines = [`--- ${file}`, `+++ ${file}`];\n\tif (oldBlock !== null) {\n\t\tlines.push(\n\t\t\t...oldBlock\n\t\t\t\t.trimEnd()\n\t\t\t\t.split('\\n')\n\t\t\t\t.map((line) => `-${line}`),\n\t\t);\n\t}\n\tlines.push(\n\t\t...newBlock\n\t\t\t.trimEnd()\n\t\t\t.split('\\n')\n\t\t\t.map((line) => `+${line}`),\n\t);\n\treturn `${lines.join('\\n')}\\n`;\n}\n\n/** What `setup` would write for `target`, or null when the file already holds exactly this block. */\nexport function planProfileEdit(target: ProfileTarget, home: string): ProfileEdit | null {\n\tconst before = existsSync(target.file) ? readFileSync(target.file, 'utf8') : null;\n\tconst block = profileBlock(target.shell, home, target.parts);\n\tconst after = withBlock(before, block);\n\tif (before === after) {\n\t\treturn null;\n\t}\n\treturn { target, before, after, diff: renderDiff(target.file, before, after) };\n}\n\nfunction uniqueBackup(file: string): string {\n\tconst stamp = new Date().toISOString().replace(/[:.]/g, '-');\n\tlet candidate = `${file}.npm-vm-backup-${stamp}`;\n\tlet counter = 1;\n\twhile (existsSync(candidate)) {\n\t\tcandidate = `${file}.npm-vm-backup-${stamp}-${counter}`;\n\t\tcounter += 1;\n\t}\n\treturn candidate;\n}\n\n/** Applies one consented edit under a journal and a unique backup, and records it (spec SH-4). */\nexport function applyProfileEdit(dirs: Dirs, owner: OwnerRecord, edit: ProfileEdit): ProfileRecord {\n\tlet backup: string | null = null;\n\tif (edit.before !== null) {\n\t\tbackup = uniqueBackup(edit.target.file);\n\t\tatomicWrite(backup, edit.before, 0o600);\n\t}\n\tconst mode = edit.before === null ? 0o644 : captureMeta(edit.target.file).mode || 0o644;\n\tmutateFile(\n\t\tdirs.journal,\n\t\t'profile',\n\t\towner,\n\t\tedit.target.file,\n\t\tBuffer.from(edit.after, 'utf8'),\n\t\tmode,\n\t);\n\tconst record: ProfileRecord = {\n\t\tfile: edit.target.file,\n\t\tshell: edit.target.shell,\n\t\tparts: edit.target.parts,\n\t\twrittenSha256: sha256(edit.after),\n\t\tbackup,\n\t\tupdatedAt: new Date().toISOString(),\n\t};\n\tconst profiles = readProfiles(dirs);\n\tprofiles.entries = [...profiles.entries.filter((entry) => entry.file !== record.file), record];\n\twriteProfiles(dirs, profiles);\n\treturn record;\n}\n\nexport type RemoveOutcome = 'removed' | 'changed' | 'missing';\n\n/** Removes our block only when the file is still what we wrote (spec MUT-5); otherwise it is left alone. */\nexport function removeProfileBlock(\n\tdirs: Dirs,\n\towner: OwnerRecord,\n\trecord: ProfileRecord,\n): RemoveOutcome {\n\tif (!existsSync(record.file)) {\n\t\tforget(dirs, record);\n\t\treturn 'missing';\n\t}\n\tconst content = readFileSync(record.file, 'utf8');\n\tif (sha256(content) !== record.writtenSha256) {\n\t\treturn 'changed';\n\t}\n\tconst after = withoutBlock(content);\n\tmutateFile(\n\t\tdirs.journal,\n\t\t'profile',\n\t\towner,\n\t\trecord.file,\n\t\tafter.trim() === '' ? null : Buffer.from(after, 'utf8'),\n\t\tcaptureMeta(record.file).mode || 0o644,\n\t);\n\tforget(dirs, record);\n\treturn 'removed';\n}\n\nfunction forget(dirs: Dirs, record: ProfileRecord): void {\n\tconst profiles = readProfiles(dirs);\n\tprofiles.entries = profiles.entries.filter((entry) => entry.file !== record.file);\n\twriteProfiles(dirs, profiles);\n}\n\nexport function readProfiles(dirs: Dirs): ProfilesFile {\n\ttry {\n\t\tconst parsed = JSON.parse(\n\t\t\treadFileSync(join(dirs.state, PROFILES_FILE), 'utf8'),\n\t\t) as ProfilesFile;\n\t\treturn Array.isArray(parsed.entries) ? parsed : { version: 1, entries: [] };\n\t} catch {\n\t\treturn { version: 1, entries: [] };\n\t}\n}\n\nexport function writeProfiles(dirs: Dirs, profiles: ProfilesFile): void {\n\tatomicWrite(join(dirs.state, PROFILES_FILE), JSON.stringify(profiles, null, '\\t'), 0o600);\n}\n\nexport { BLOCK_END, BLOCK_START };\n","import { execFileSync } from 'node:child_process';\nimport { join } from 'node:path';\nimport { powershellPath } from '../state/proc.ts';\n\n/*\n * Windows integration (spec WIN-1 to WIN-3). Every helper runs by absolute path with no profile (SEC-8).\n * `[Environment]::SetEnvironmentVariable(..., 'User')` writes HKCU\\Environment and broadcasts WM_SETTINGCHANGE, so no setx.\n */\n\nfunction powershell(env: NodeJS.ProcessEnv, command: string): string {\n\treturn execFileSync(powershellPath(env), ['-NoProfile', '-NonInteractive', '-Command', command], {\n\t\tencoding: 'utf8',\n\t\tenv,\n\t\twindowsHide: true,\n\t\tstdio: ['ignore', 'pipe', 'pipe'],\n\t}).trim();\n}\n\nfunction regExe(env: NodeJS.ProcessEnv): string {\n\treturn join(env['SystemRoot'] ?? 'C:\\\\Windows', 'System32', 'reg.exe');\n}\n\nfunction quote(value: string): string {\n\treturn `'${value.replace(/'/g, \"''\")}'`;\n}\n\nexport function readUserPath(env: NodeJS.ProcessEnv): string {\n\treturn powershell(env, \"[Environment]::GetEnvironmentVariable('Path', 'User')\");\n}\n\nexport function writeUserPath(env: NodeJS.ProcessEnv, value: string): void {\n\tpowershell(env, `[Environment]::SetEnvironmentVariable('Path', ${quote(value)}, 'User')`);\n}\n\nfunction sameDir(a: string, b: string): boolean {\n\treturn a.replace(/[\\\\/]+$/, '').toLowerCase() === b.replace(/[\\\\/]+$/, '').toLowerCase();\n}\n\n/** Prepends `dir` to the user PATH unless present; returns whether anything changed. */\nexport function addToUserPath(env: NodeJS.ProcessEnv, dir: string): boolean {\n\tconst current = readUserPath(env);\n\tconst parts = current.split(';').filter((part) => part !== '');\n\tif (parts.some((part) => sameDir(part, dir))) {\n\t\treturn false;\n\t}\n\twriteUserPath(env, [dir, ...parts].join(';'));\n\treturn true;\n}\n\nexport function removeFromUserPath(env: NodeJS.ProcessEnv, dir: string): boolean {\n\tconst current = readUserPath(env);\n\tconst parts = current.split(';').filter((part) => part !== '');\n\tconst kept = parts.filter((part) => !sameDir(part, dir));\n\tif (kept.length === parts.length) {\n\t\treturn false;\n\t}\n\twriteUserPath(env, kept.join(';'));\n\treturn true;\n}\n\nconst AUTORUN_KEY = 'HKCU\\\\Software\\\\Microsoft\\\\Command Processor';\nconst AUTORUN_MARK = 'npm-vm';\n\nexport function readCmdAutoRun(env: NodeJS.ProcessEnv): string | null {\n\ttry {\n\t\tconst out = execFileSync(regExe(env), ['query', AUTORUN_KEY, '/v', 'AutoRun'], {\n\t\t\tencoding: 'utf8',\n\t\t\twindowsHide: true,\n\t\t\tstdio: ['ignore', 'pipe', 'ignore'],\n\t\t});\n\t\treturn /AutoRun\\s+REG_(?:EXPAND_)?SZ\\s+(.*)$/m.exec(out)?.[1]?.trim() ?? null;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\n/** The cmd AutoRun entry that puts shims first in every cmd session; only with `--cmd-autorun` (WIN-3). */\nexport function autoRunCommand(shimsDir: string): string {\n\treturn `set \"PATH=${shimsDir};%PATH%\" & rem ${AUTORUN_MARK}`;\n}\n\n/** `value` without the fragment `autoRunCommand` generated, whatever home it named; the user's own commands stay. */\nexport function withoutAutoRunCommand(value: string | null): string {\n\tif (value === null) {\n\t\treturn '';\n\t}\n\treturn value.replace(/^set \"PATH=[^\"]*;%PATH%\" & rem npm-vm(?: & )?/, '').trim();\n}\n\nexport function setCmdAutoRun(env: NodeJS.ProcessEnv, shimsDir: string): void {\n\tconst ours = autoRunCommand(shimsDir);\n\tconst kept = withoutAutoRunCommand(readCmdAutoRun(env));\n\tconst value = kept === '' ? ours : `${ours} & ${kept}`;\n\texecFileSync(\n\t\tregExe(env),\n\t\t['add', AUTORUN_KEY, '/v', 'AutoRun', '/t', 'REG_SZ', '/d', value, '/f'],\n\t\t{\n\t\t\twindowsHide: true,\n\t\t\tstdio: 'ignore',\n\t\t},\n\t);\n}\n\nexport function clearCmdAutoRun(env: NodeJS.ProcessEnv): boolean {\n\tconst existing = readCmdAutoRun(env);\n\tif (existing === null || !existing.includes(`rem ${AUTORUN_MARK}`)) {\n\t\treturn false;\n\t}\n\tconst rest = withoutAutoRunCommand(existing);\n\tif (rest === '') {\n\t\texecFileSync(regExe(env), ['delete', AUTORUN_KEY, '/v', 'AutoRun', '/f'], {\n\t\t\twindowsHide: true,\n\t\t\tstdio: 'ignore',\n\t\t});\n\t} else {\n\t\texecFileSync(\n\t\t\tregExe(env),\n\t\t\t['add', AUTORUN_KEY, '/v', 'AutoRun', '/t', 'REG_SZ', '/d', rest, '/f'],\n\t\t\t{\n\t\t\t\twindowsHide: true,\n\t\t\t\tstdio: 'ignore',\n\t\t\t},\n\t\t);\n\t}\n\treturn true;\n}\n\n/** Whether the effective execution policy lets our unsigned `.ps1` shims run (spec WIN-2). */\nexport function powershellAllowsScripts(policy: string | null): boolean {\n\treturn policy !== null && !['Restricted', 'AllSigned', 'Undefined'].includes(policy);\n}\n\n/** Which `npm` each Windows context resolves first, for `doctor`. */\nexport function windowsWinners(\n\tenv: NodeJS.ProcessEnv,\n): Array<{ context: string; path: string | null }> {\n\tconst results: Array<{ context: string; path: string | null }> = [];\n\ttry {\n\t\tconst out = execFileSync(\n\t\t\tjoin(env['SystemRoot'] ?? 'C:\\\\Windows', 'System32', 'where.exe'),\n\t\t\t['npm'],\n\t\t\t{\n\t\t\t\tencoding: 'utf8',\n\t\t\t\tenv,\n\t\t\t\twindowsHide: true,\n\t\t\t\tstdio: ['ignore', 'pipe', 'ignore'],\n\t\t\t},\n\t\t);\n\t\tresults.push({ context: 'cmd', path: out.split(/\\r?\\n/)[0] ?? null });\n\t} catch {\n\t\tresults.push({ context: 'cmd', path: null });\n\t}\n\ttry {\n\t\tresults.push({\n\t\t\tcontext: 'PowerShell',\n\t\t\tpath: powershell(env, '(Get-Command npm -All | Select-Object -First 1).Source') || null,\n\t\t});\n\t} catch {\n\t\tresults.push({ context: 'PowerShell', path: null });\n\t}\n\treturn results;\n}\n","import { execFileSync } from 'node:child_process';\nimport { existsSync, readFileSync, realpathSync } from 'node:fs';\nimport { basename, join } from 'node:path';\nimport { EXIT } from '../errors.ts';\nimport { findProject } from '../project.ts';\nimport { listJournals } from '../state/journal.ts';\nimport { lockOwnerLive, lockPath, readLock } from '../state/lock.ts';\nimport { shellBinary } from '../state/proc.ts';\nimport { findNodeInstalls, linkState, readLinks } from '../setup/link.ts';\nimport { BOOTSTRAP_FILE, readCurrent, readManifest, versionDir } from '../setup/layout.ts';\nimport { readProfiles } from '../setup/profile.ts';\nimport { BLOCK_START, isShell, type Shell } from '../setup/shell.ts';\nimport { SELECTORS, SHIM_ABI, shimAbi, shimDir } from '../setup/shims.ts';\nimport { windowsWinners } from '../setup/windows.ts';\nimport type { CommandContext } from './context.ts';\n\nexport interface Problem {\n\tcheck: string;\n\tdetail: string;\n\tfix: string;\n}\n\nexport interface DoctorReport {\n\thome: string;\n\tversion: string | null;\n\tproblems: Problem[];\n\tnotes: string[];\n}\n\nconst PROBE_TIMEOUT_MS = 5000;\n\n/** The `npm` an interactive login shell resolves, by asking that shell (its profiles decide the PATH). */\nfunction shellWinner(shell: Shell, env: NodeJS.ProcessEnv): string | null {\n\tconst bin = shellBinary(shell, env);\n\tif (bin === null) {\n\t\treturn null;\n\t}\n\t/* `-c` never reaches a prompt, so the hooks run by hand first: on macOS, /etc/zprofile reorders PATH after .zshenv. */\n\tconst args =\n\t\tshell === 'fish'\n\t\t\t? ['-l', '-i', '-c', 'emit fish_prompt; command -v npm']\n\t\t\t: shell === 'powershell'\n\t\t\t\t? ['-NoProfile', '-Command', '(Get-Command npm).Source']\n\t\t\t\t: shell === 'zsh'\n\t\t\t\t\t? ['-l', '-i', '-c', 'for f in $precmd_functions; do \"$f\"; done; command -v npm']\n\t\t\t\t\t: ['-l', '-i', '-c', 'eval \"$PROMPT_COMMAND\"; command -v npm'];\n\ttry {\n\t\tconst out = execFileSync(bin, args, {\n\t\t\tencoding: 'utf8',\n\t\t\tenv,\n\t\t\ttimeout: PROBE_TIMEOUT_MS,\n\t\t\tstdio: ['ignore', 'pipe', 'ignore'],\n\t\t})\n\t\t\t.trim()\n\t\t\t.split('\\n')\n\t\t\t.pop();\n\t\treturn out === undefined || out === '' ? null : out;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\n/** A Windows path for comparison: `where` answers with the long name, the home may carry an 8.3 short name. */\nfunction canonical(path: string): string {\n\ttry {\n\t\treturn realpathSync.native(path).toLowerCase();\n\t} catch {\n\t\treturn path.toLowerCase();\n\t}\n}\n\n/** What `command -v npm` printed: an alias or a function wins over PATH, so no PATH fix can help. */\nexport function winnerKind(winner: string): 'alias' | 'function' | 'path' {\n\tif (winner.startsWith('alias ')) {\n\t\treturn 'alias';\n\t}\n\treturn winner === 'npm' ? 'function' : 'path';\n}\n\nfunction samePath(a: string, b: string, platform: NodeJS.Platform): boolean {\n\treturn platform === 'win32' ? a.toLowerCase() === b.toLowerCase() : a === b;\n}\n\nexport async function collect(context: CommandContext): Promise<DoctorReport> {\n\tconst { dirs, env, platform } = context;\n\tconst report: DoctorReport = {\n\t\thome: dirs.home,\n\t\tversion: readCurrent(dirs.home),\n\t\tproblems: [],\n\t\tnotes: [],\n\t};\n\tconst setupHint = 'Run `npx --prefix ~ -y @mawesome/npm-vm setup`.';\n\tconst problem = (check: string, detail: string, fix: string): void => {\n\t\treport.problems.push({ check, detail, fix });\n\t};\n\n\tif (report.version === null || readManifest(dirs.home, report.version) === null) {\n\t\tproblem('runtime', `no runtime is installed under ${dirs.home}`, setupHint);\n\t} else {\n\t\tconst root = join(dirs.home, BOOTSTRAP_FILE);\n\t\tconst shipped = join(versionDir(dirs.home, report.version), BOOTSTRAP_FILE);\n\t\tif (!existsSync(root) || !readFileSync(root).equals(readFileSync(shipped))) {\n\t\t\tproblem('launcher', `${root} differs from the installed version's launcher`, setupHint);\n\t\t}\n\t}\n\tfor (const name of SELECTORS) {\n\t\tconst file = join(shimDir(dirs.home), name);\n\t\tconst abi = existsSync(file) ? shimAbi(readFileSync(file, 'utf8')) : null;\n\t\tif (abi === null) {\n\t\t\tproblem('shims', `${file} is missing or not an npm-vm shim`, setupHint);\n\t\t} else if (abi !== SHIM_ABI) {\n\t\t\tproblem(\n\t\t\t\t'shims',\n\t\t\t\t`${file} declares launcher ABI ${abi}, this version needs ${SHIM_ABI}`,\n\t\t\t\tsetupHint,\n\t\t\t);\n\t\t}\n\t}\n\tif (dirs.machine.fallback) {\n\t\treport.notes.push(\n\t\t\t'The machine id falls back to the hostname; cloned machines or containers sharing this home could collide in the cache.',\n\t\t);\n\t}\n\tconst lock = readLock(dirs.state);\n\tif (lock !== null && !lockOwnerLive(lock, dirs.machine.id)) {\n\t\tproblem(\n\t\t\t'lock',\n\t\t\t`${lockPath(dirs.state)} is held by PID ${lock.pid}, which no longer runs`,\n\t\t\t`Delete ${lockPath(dirs.state)}.`,\n\t\t);\n\t}\n\tfor (const journal of listJournals(dirs.journal)) {\n\t\tconst foreign = journal.owner.machineId !== dirs.machine.id;\n\t\tproblem(\n\t\t\t'journal',\n\t\t\t`${journal.id} (${journal.kind}) for ${journal.target} was left by ${foreign ? `another machine (${journal.owner.host})` : `PID ${journal.owner.pid}`}`,\n\t\t\tforeign\n\t\t\t\t? `Confirm no npm-vm runs on ${journal.owner.host}, then run \\`npm-vm recover --journal ${journal.id} --confirm-dead-machine ${journal.owner.machineId}\\`.`\n\t\t\t\t: 'Run any npm-vm command; dead owners are recovered automatically.',\n\t\t);\n\t}\n\n\tconst profiles = readProfiles(dirs);\n\tfor (const entry of profiles.entries) {\n\t\tif (!existsSync(entry.file) || !readFileSync(entry.file, 'utf8').includes(BLOCK_START)) {\n\t\t\tproblem(\n\t\t\t\t'profile',\n\t\t\t\t`${entry.file} no longer holds the npm-vm block`,\n\t\t\t\t`Run \\`npm-vm init ${entry.shell}\\` and add the block, or run setup again.`,\n\t\t\t);\n\t\t}\n\t}\n\tconst shimsDir = shimDir(dirs.home);\n\tif (platform === 'win32') {\n\t\tconst shimsCanonical = canonical(shimsDir);\n\t\tfor (const winner of windowsWinners(env)) {\n\t\t\tif (winner.path === null || !canonical(winner.path).startsWith(shimsCanonical)) {\n\t\t\t\tproblem(\n\t\t\t\t\t'path',\n\t\t\t\t\t`${winner.context} resolves npm to ${winner.path ?? 'nothing'}`,\n\t\t\t\t\t'Run setup again, then restart the terminal (M-RESTART).',\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t} else {\n\t\tconst login = basename(env['SHELL'] ?? '');\n\t\tconst shells = new Set<Shell>([\n\t\t\t...profiles.entries.map((entry) => entry.shell),\n\t\t\t...(isShell(login) ? [login] : []),\n\t\t]);\n\t\tfor (const shell of shells) {\n\t\t\tif (shell === 'powershell') {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst winner = shellWinner(shell, env);\n\t\t\tif (winner === null) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst kind = winnerKind(winner);\n\t\t\tif (kind !== 'path') {\n\t\t\t\tproblem(\n\t\t\t\t\t'path',\n\t\t\t\t\t`${shell} resolves npm to a shell ${kind}: ${winner}`,\n\t\t\t\t\t`A shell ${kind} wins over PATH. Remove it from your ${shell} profile, or make it run ${join(shimsDir, 'npm')}.`,\n\t\t\t\t);\n\t\t\t} else if (!samePath(winner, join(shimsDir, 'npm'), platform)) {\n\t\t\t\tconst corepack = winner.includes('corepack') ? ' (a Corepack shim)' : '';\n\t\t\t\tproblem(\n\t\t\t\t\t'path',\n\t\t\t\t\t`${shell} resolves npm to ${winner}${corepack}`,\n\t\t\t\t\t`Add the snippet from \\`npm-vm init ${shell}\\` after your Node manager's init line, or run setup with --link.`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\n\tconst links = readLinks(dirs);\n\tif (links.entries.length > 0) {\n\t\tfor (const entry of links.entries) {\n\t\t\tconst state = linkState(entry);\n\t\t\tif (state !== 'intact') {\n\t\t\t\tproblem(\n\t\t\t\t\t'link',\n\t\t\t\t\t`${entry.target} is ${state === 'missing' ? 'missing' : 'no longer the npm-vm shim'}`,\n\t\t\t\t\t'Run `npm-vm setup --link` to relink, or `npm-vm uninstall` to stop linking.',\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t\tconst linked = new Set(links.entries.map((entry) => entry.binDir));\n\t\tfor (const install of findNodeInstalls(env, platform)) {\n\t\t\tif (!linked.has(install.binDir)) {\n\t\t\t\tproblem(\n\t\t\t\t\t'link',\n\t\t\t\t\t`${install.manager} ${install.version} at ${install.binDir} is not linked`,\n\t\t\t\t\t'Run `npm-vm setup --link`.',\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\treport.notes.push(\n\t\t...findNodeInstalls(env, platform).map(\n\t\t\t(install) => `Found ${install.manager} ${install.version} at ${install.binDir}`,\n\t\t),\n\t);\n\n\tconst project = findProject([], process.cwd(), env);\n\tif (existsSync(join(project.root, 'node_modules', '.bin', 'npm'))) {\n\t\treport.notes.push(\n\t\t\t`${project.root}/node_modules/.bin/npm exists; npm scripts in this project run it instead of the shim.`,\n\t\t);\n\t}\n\treturn report;\n}\n\nexport async function doctor(\n\tcontext: CommandContext,\n\toptions: { quiet?: boolean } = {},\n): Promise<number> {\n\tconst report = await collect(context);\n\tif (options.quiet) {\n\t\treturn report.problems.length === 0 ? EXIT.ok : EXIT.problems;\n\t}\n\tif (context.json) {\n\t\tcontext.io.out(JSON.stringify(report, null, 2));\n\t} else {\n\t\tconst lines = [`npm-vm ${report.version ?? '(not installed)'} in ${report.home}`];\n\t\tfor (const problem of report.problems) {\n\t\t\tlines.push(`  problem [${problem.check}]: ${problem.detail}`, `    fix: ${problem.fix}`);\n\t\t}\n\t\tfor (const note of report.notes) {\n\t\t\tlines.push(`  note: ${note}`);\n\t\t}\n\t\tlines.push(\n\t\t\treport.problems.length === 0 ? '  healthy' : `  ${report.problems.length} problem(s)`,\n\t\t);\n\t\tcontext.io.out(lines.join('\\n'));\n\t}\n\treturn report.problems.length === 0 ? EXIT.ok : EXIT.problems;\n}\n","import { existsSync, readFileSync, statSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport semver from 'semver';\nimport { EXIT, NpmVmError } from '../errors.ts';\nimport { createContext, createInstaller } from '../install/index.ts';\nimport { findProject } from '../project.ts';\nimport { parseVersionSpec } from '../spec.ts';\nimport { mutateFile, recoverDeadJournals } from '../state/journal.ts';\nimport { acquireLock } from '../state/lock.ts';\nimport type { CommandContext } from './context.ts';\n\n/** The indentation and newline a JSON file uses, so the rewrite keeps its shape. */\nexport function detectFormat(text: string): {\n\tindent: string;\n\tnewline: '\\n' | '\\r\\n';\n\ttrailingNewline: boolean;\n} {\n\tconst indent = /^[ \\t]+(?=\")/m.exec(text)?.[0] ?? '  ';\n\treturn {\n\t\tindent,\n\t\tnewline: text.includes('\\r\\n') ? '\\r\\n' : '\\n',\n\t\ttrailingNewline: text.endsWith('\\n'),\n\t};\n}\n\n/** `devEngines.packageManager` with one npm entry, keeping other managers and the field's shape. */\nexport function pinnedManifest(\n\tpkg: Record<string, unknown>,\n\tversion: string,\n): Record<string, unknown> {\n\tconst entry = { name: 'npm', version, onFail: 'error' };\n\tconst devEngines =\n\t\ttypeof pkg['devEngines'] === 'object' && pkg['devEngines'] !== null\n\t\t\t? { ...(pkg['devEngines'] as Record<string, unknown>) }\n\t\t\t: {};\n\tconst existing = devEngines['packageManager'];\n\tif (Array.isArray(existing)) {\n\t\tconst others = existing.filter(\n\t\t\t(item) =>\n\t\t\t\t!(typeof item === 'object' && item !== null && (item as { name?: unknown }).name === 'npm'),\n\t\t);\n\t\tdevEngines['packageManager'] = [...others, entry];\n\t} else if (\n\t\ttypeof existing === 'object' &&\n\t\texisting !== null &&\n\t\t(existing as { name?: unknown }).name !== 'npm'\n\t) {\n\t\tdevEngines['packageManager'] = [existing, entry];\n\t} else {\n\t\tdevEngines['packageManager'] = entry;\n\t}\n\treturn { ...pkg, devEngines };\n}\n\nfunction nearestManifestDir(cwd: string): string | null {\n\tlet dir = cwd;\n\tfor (;;) {\n\t\tif (existsSync(join(dir, 'package.json'))) {\n\t\t\treturn dir;\n\t\t}\n\t\tconst parent = dirname(dir);\n\t\tif (parent === dir) {\n\t\t\treturn null;\n\t\t}\n\t\tdir = parent;\n\t}\n}\n\n/** `^<latest npm whose engines accept the active Node>`, asked from the registry. */\nasync function defaultRange(context: CommandContext): Promise<string> {\n\tconst installer = createInstaller(createContext(context.env, context.dirs.home));\n\tconst candidates = await installer.registry([parseVersionSpec('>=8', 'pin')]);\n\tconst usable = candidates.filter(\n\t\t(candidate) =>\n\t\t\tcandidate.enginesNode === null ||\n\t\t\tsemver.satisfies(process.version, candidate.enginesNode, { includePrerelease: true }),\n\t);\n\tconst latest = usable.map((candidate) => candidate.version).toSorted(semver.rcompare)[0];\n\tif (latest === undefined) {\n\t\tthrow new NpmVmError(\n\t\t\t'M-NOMATCH',\n\t\t\tEXIT.resolution,\n\t\t\t`No npm release supports Node ${process.version}.`,\n\t\t);\n\t}\n\treturn `^${latest}`;\n}\n\nexport async function pin(\n\tcontext: CommandContext,\n\trange: string | undefined,\n\tcwd: string = process.cwd(),\n): Promise<number> {\n\tconst project = findProject([], cwd, context.env);\n\tconst nearest = nearestManifestDir(cwd);\n\tif (nearest !== null && nearest !== project.root) {\n\t\tthrow new NpmVmError(\n\t\t\t'M-NOMATCH',\n\t\t\tEXIT.usage,\n\t\t\t`${nearest} is a workspace of ${project.root}; npm reads devEngines from the root. Run pin from ${project.root} to pin it there.`,\n\t\t);\n\t}\n\tconst file = join(project.root, 'package.json');\n\tif (!existsSync(file)) {\n\t\tthrow new NpmVmError('M-NOMATCH', EXIT.usage, `No package.json in ${project.root}.`);\n\t}\n\tconst version = range ?? (await defaultRange(context));\n\ttry {\n\t\tparseVersionSpec(version, 'pin');\n\t} catch (error) {\n\t\tthrow new NpmVmError('M-NOMATCH', EXIT.usage, (error as Error).message);\n\t}\n\t// The manifest is read and rewritten under the exclusive lock (spec MUT-1), like every other mutation.\n\tconst lock = await acquireLock(context.dirs.state, context.owner);\n\ttry {\n\t\trecoverDeadJournals(context.dirs.journal, context.dirs.machine.id);\n\t\tconst text = readFileSync(file, 'utf8');\n\t\tlet pkg: Record<string, unknown>;\n\t\ttry {\n\t\t\tpkg = JSON.parse(text) as Record<string, unknown>;\n\t\t} catch (error) {\n\t\t\tthrow new NpmVmError(\n\t\t\t\t'M-NOMATCH',\n\t\t\t\tEXIT.usage,\n\t\t\t\t`${file} is not valid JSON: ${(error as Error).message}`,\n\t\t\t);\n\t\t}\n\t\tconst format = detectFormat(text);\n\t\tconst body = JSON.stringify(pinnedManifest(pkg, version), null, format.indent).replace(\n\t\t\t/\\n/g,\n\t\t\tformat.newline,\n\t\t);\n\t\tconst output = `${body}${format.trailingNewline ? format.newline : ''}`;\n\t\tif (output !== text) {\n\t\t\tconst mode = process.platform === 'win32' ? 0o644 : statSync(file).mode & 0o7777;\n\t\t\tmutateFile(\n\t\t\t\tcontext.dirs.journal,\n\t\t\t\t'project',\n\t\t\t\tcontext.owner,\n\t\t\t\tfile,\n\t\t\t\tBuffer.from(output, 'utf8'),\n\t\t\t\tmode,\n\t\t\t);\n\t\t}\n\t} finally {\n\t\tlock.release();\n\t}\n\tcontext.io.out(\n\t\tcontext.json ? JSON.stringify({ file, version }) : `Pinned npm ${version} in ${file}`,\n\t);\n\treturn EXIT.ok;\n}\n","import { execFile } from 'node:child_process';\nimport { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';\nimport { join } from 'node:path';\nimport { Agent, ProxyAgent, request, type Dispatcher } from 'undici';\nimport { EXIT, NpmVmError } from '../errors.ts';\nimport { provenanceMessage, redactUrls } from '../messages.ts';\nimport type { NpmConfigView } from './config.ts';\n\n/** What the attestation must say about this repository's release workflow (spec SUP-2). */\nexport const PROVENANCE_ISSUER = 'https://token.actions.githubusercontent.com';\nexport const PROVENANCE_IDENTITY =\n\t'https://github.com/mawesomedev/mawesome/.github/workflows/release.yml@refs/heads/main';\nexport const SLSA_PREDICATE = 'https://slsa.dev/provenance/v1';\n\nexport interface ProvenanceInput {\n\tname: string;\n\tversion: string;\n\t/** Hex sha512 of the tarball being installed. */\n\tsha512hex: string;\n\t/** `dist.attestations.url` from the packument; only its path is used (SUP-2). */\n\tattestationsUrl: string | null;\n\tconfig: NpmConfigView;\n\tstateDir: string;\n}\n\nexport interface Attestation {\n\tpredicateType: string;\n\tbundle: unknown;\n}\n\nexport type AttestationFetcher = (url: URL, config: NpmConfigView) => Promise<Attestation[]>;\nexport type BundleVerifier = (\n\tbundle: unknown,\n\toptions: { tufCachePath: string; config: NpmConfigView; env: NodeJS.ProcessEnv },\n) => Promise<void>;\n\nfunction failure(name: string, version: string, detail: string): NpmVmError {\n\treturn new NpmVmError(\n\t\t'M-PROVENANCE',\n\t\tEXIT.verification,\n\t\tprovenanceMessage(name, version, detail),\n\t);\n}\n\n/** Resolves the attestation path against the configured registry: never another origin (spec SUP-2). */\nexport function attestationUrl(\n\tinput: Pick<ProvenanceInput, 'name' | 'version' | 'attestationsUrl'>,\n\tregistry: string,\n): URL {\n\tconst base = new URL(registry);\n\tconst url = new URL(base);\n\tif (input.attestationsUrl !== null) {\n\t\t// Assigned, not re-parsed: a pathname starting with `//host` would otherwise become another origin.\n\t\tconst given = new URL(input.attestationsUrl, base);\n\t\turl.pathname = given.pathname;\n\t\turl.search = given.search;\n\t} else {\n\t\turl.pathname = `${base.pathname.replace(/\\/$/, '')}/-/npm/v1/attestations/${encodeURIComponent(input.name)}@${input.version}`;\n\t\turl.search = '';\n\t}\n\turl.hash = '';\n\t// Credentials travel in the Authorization header, never inline in the URL.\n\turl.username = '';\n\turl.password = '';\n\tif (url.origin !== base.origin) {\n\t\tthrow new Error(\n\t\t\t`attestation URL ${redactUrls(url.href)} leaves the registry origin ${base.origin}`,\n\t\t);\n\t}\n\treturn url;\n}\n\n/** TLS settings npm itself would use: `ca` and `cafile`, `strict-ssl`, and the registry's client certificate (spec DL-2). */\nexport function tlsOptions(config: NpmConfigView): {\n\trejectUnauthorized: boolean;\n\tca?: string[];\n\tcert?: string;\n\tkey?: string;\n} {\n\tconst ca = [...(config.ca ?? [])];\n\tif (config.cafile !== null) {\n\t\tca.push(readFileSync(config.cafile, 'utf8'));\n\t}\n\tconst { certfile, keyfile } = config.credentials;\n\treturn {\n\t\trejectUnauthorized: config.strictSsl,\n\t\t...(ca.length === 0 ? {} : { ca }),\n\t\t...(certfile !== undefined && keyfile !== undefined\n\t\t\t? { cert: readFileSync(certfile, 'utf8'), key: readFileSync(keyfile, 'utf8') }\n\t\t\t: {}),\n\t};\n}\n\n/** `noproxy` the way @npmcli/agent reads it: comma or space separated, `*` for all, `host[:port]`, leading dots and `*.`. */\nexport function noProxyMatches(noproxy: string | null, url: URL): boolean {\n\tconst port = url.port || (url.protocol === 'https:' ? '443' : '80');\n\treturn (noproxy ?? '')\n\t\t.split(/[\\s,]+/)\n\t\t.map((item) => item.trim().toLowerCase())\n\t\t.filter((item) => item !== '')\n\t\t.some((item) => {\n\t\t\tif (item === '*') {\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tconst [host, itemPort] = item.split(':') as [string, string | undefined];\n\t\t\tif (itemPort !== undefined && itemPort !== port) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tconst bare = host.replace(/^\\*?\\./, '');\n\t\t\treturn url.hostname === bare || url.hostname.endsWith(`.${bare}`);\n\t\t});\n}\n\nfunction dispatcherFor(config: NpmConfigView, url: URL): Dispatcher {\n\tconst proxy = url.protocol === 'https:' ? (config.httpsProxy ?? config.proxy) : config.proxy;\n\tconst bypass = noProxyMatches(config.noproxy, url);\n\tconst tls = tlsOptions(config);\n\tif (proxy !== null && !bypass) {\n\t\treturn new ProxyAgent({ uri: proxy, requestTls: tls });\n\t}\n\treturn new Agent({ connect: tls });\n}\n\nfunction authHeader(config: NpmConfigView): Record<string, string> {\n\tconst { token, username, password, auth } = config.credentials;\n\tif (token !== undefined) {\n\t\treturn { authorization: `Bearer ${token}` };\n\t}\n\tif (auth !== undefined) {\n\t\treturn { authorization: `Basic ${auth}` };\n\t}\n\tif (username !== undefined && password !== undefined) {\n\t\treturn { authorization: `Basic ${Buffer.from(`${username}:${password}`).toString('base64')}` };\n\t}\n\treturn {};\n}\n\n/** Fetches the attestations with the user's registry credentials, sent to that origin only (spec DL-2). */\nexport const fetchAttestations: AttestationFetcher = async (url, config) => {\n\tconst dispatcher = dispatcherFor(config, url);\n\ttry {\n\t\tconst response = await request(url, {\n\t\t\tdispatcher,\n\t\t\theaders: { accept: 'application/json', ...authHeader(config) },\n\t\t});\n\t\tif (response.statusCode !== 200) {\n\t\t\tawait response.body.dump();\n\t\t\tthrow new Error(`registry answered ${response.statusCode} for ${url.pathname}`);\n\t\t}\n\t\tconst body = (await response.body.json()) as { attestations?: unknown };\n\t\tconst list = Array.isArray(body.attestations) ? body.attestations : [];\n\t\treturn list.filter(\n\t\t\t(item): item is Attestation =>\n\t\t\t\ttypeof item === 'object' &&\n\t\t\t\titem !== null &&\n\t\t\t\ttypeof (item as Attestation).predicateType === 'string' &&\n\t\t\t\t'bundle' in item,\n\t\t);\n\t} finally {\n\t\tawait dispatcher.close();\n\t}\n};\n\n/** sigstore's verifier with this repository's identity pinned; the TUF cache lives under the state dir. */\n/** sigstore matches the identity as an unanchored regular expression, so the exact SAN is escaped and anchored. */\nexport function identityPattern(identity: string = PROVENANCE_IDENTITY): string {\n\treturn `^${identity.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')}$`;\n}\n\n/** The in-process verifier, run by the `verify-attestation` child command. */\nexport async function verifyBundleHere(bundle: unknown, tufCachePath: string): Promise<void> {\n\tconst sigstore = await import('sigstore');\n\tawait sigstore.verify(bundle as Parameters<typeof sigstore.verify>[0], {\n\t\tcertificateIssuer: PROVENANCE_ISSUER,\n\t\tcertificateIdentityURI: identityPattern(),\n\t\ttufCachePath,\n\t});\n}\n\n/** How to reach this program again from a child process: the entry argv plus the `cli` selector under the launcher. */\nexport function selfCommand(): string[] {\n\tconst entry = process.argv[1] ?? '';\n\treturn entry.endsWith('bootstrap.cjs') ? [entry, 'cli'] : [entry];\n}\n\n/**\n * Runs the verifier in a child Node (spec DL-2): sigstore reaches TUF through make-fetch-happen, which reads\n * proxies from the env, and Node reads NODE_EXTRA_CA_CERTS only at start. The child's env carries nothing else.\n */\nexport const verifyBundle: BundleVerifier = async (bundle, options) => {\n\tconst dir = mkdtempSync(join(options.tufCachePath, 'bundle-'));\n\tconst file = join(dir, 'bundle.json');\n\twriteFileSync(file, JSON.stringify(bundle), { mode: 0o600 });\n\tconst { args, env } = verifierLaunch(file, options, dir);\n\ttry {\n\t\tawait new Promise<void>((resolve, reject) => {\n\t\t\texecFile(\n\t\t\t\tprocess.execPath,\n\t\t\t\targs,\n\t\t\t\t{ env, encoding: 'utf8', timeout: 300_000, windowsHide: true },\n\t\t\t\t(error, stdout, stderr) => {\n\t\t\t\t\tif (error === null) {\n\t\t\t\t\t\tresolve();\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\treject(\n\t\t\t\t\t\tnew Error(\n\t\t\t\t\t\t\t`${stderr.trim() || stdout.trim() || error.message}`.replace(/^npm-vm: /, ''),\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\t} finally {\n\t\trmSync(dir, { recursive: true, force: true });\n\t}\n};\n\n/** The verifier child's argv and env for one bundle file; `dir` is private to this run and holds any CA bundle. */\nexport function verifierLaunch(\n\tfile: string,\n\toptions: Parameters<BundleVerifier>[1],\n\tdir: string,\n): { args: string[]; env: NodeJS.ProcessEnv } {\n\tconst [entry, ...prefix] = selfCommand();\n\treturn {\n\t\targs: [\n\t\t\tentry as string,\n\t\t\t...prefix,\n\t\t\t'verify-attestation',\n\t\t\t'--bundle',\n\t\t\tfile,\n\t\t\t'--tuf-cache',\n\t\t\toptions.tufCachePath,\n\t\t],\n\t\tenv: childEnv(options.config, options.env, dir),\n\t};\n}\n\nconst PROXY_KEYS = /^(https?_proxy|all_proxy|no_proxy|proxy|node_extra_ca_certs|node_options)$/i;\n\n/** The child's env: the parent's minus every proxy and Node override, plus only what the npm config says. */\nexport function childEnv(\n\tconfig: NpmConfigView,\n\tenv: NodeJS.ProcessEnv,\n\tbundleDir: string | null = null,\n): NodeJS.ProcessEnv {\n\tconst child: NodeJS.ProcessEnv = {};\n\tfor (const [key, value] of Object.entries(env)) {\n\t\tif (!PROXY_KEYS.test(key) && !/^npm_config_/i.test(key)) {\n\t\t\tchild[key] = value;\n\t\t}\n\t}\n\tconst httpsProxy = config.httpsProxy ?? config.proxy;\n\tif (httpsProxy !== null) {\n\t\tchild['https_proxy'] = httpsProxy;\n\t}\n\tif (config.proxy !== null) {\n\t\tchild['http_proxy'] = config.proxy;\n\t}\n\tif (config.noproxy !== null) {\n\t\tchild['no_proxy'] = config.noproxy;\n\t}\n\t// Inline `ca` has no file for NODE_EXTRA_CA_CERTS to point at; the child gets a private bundle of both.\n\tif (config.ca !== null && config.ca.length > 0 && bundleDir !== null) {\n\t\tconst bundle = join(bundleDir, 'ca-bundle.pem');\n\t\tconst parts = [...config.ca];\n\t\tif (config.cafile !== null) {\n\t\t\tparts.push(readFileSync(config.cafile, 'utf8'));\n\t\t}\n\t\twriteFileSync(bundle, `${parts.map((part) => part.trim()).join('\\n')}\\n`, { mode: 0o600 });\n\t\tchild['NODE_EXTRA_CA_CERTS'] = bundle;\n\t} else if (config.cafile !== null) {\n\t\tchild['NODE_EXTRA_CA_CERTS'] = config.cafile;\n\t}\n\treturn child;\n}\n\ninterface Statement {\n\tsubject: Array<{ name: string; digest: Record<string, string> }>;\n\tpredicateType: string;\n}\n\nfunction isSubject(value: unknown): value is Statement['subject'][number] {\n\tif (typeof value !== 'object' || value === null) {\n\t\treturn false;\n\t}\n\tconst { name, digest } = value as { name?: unknown; digest?: unknown };\n\treturn (\n\t\ttypeof name === 'string' &&\n\t\ttypeof digest === 'object' &&\n\t\tdigest !== null &&\n\t\t!Array.isArray(digest)\n\t);\n}\n\nfunction statementOf(bundle: unknown): Statement | null {\n\tconst payload = (bundle as { dsseEnvelope?: { payload?: unknown } }).dsseEnvelope?.payload;\n\tif (typeof payload !== 'string') {\n\t\treturn null;\n\t}\n\ttry {\n\t\tconst parsed = JSON.parse(\n\t\t\tBuffer.from(payload, 'base64').toString('utf8'),\n\t\t) as Partial<Statement>;\n\t\tif (typeof parsed !== 'object' || parsed === null || !Array.isArray(parsed.subject)) {\n\t\t\treturn null;\n\t\t}\n\t\treturn {\n\t\t\tpredicateType: typeof parsed.predicateType === 'string' ? parsed.predicateType : '',\n\t\t\tsubject: parsed.subject.filter(isSubject).map((subject) => ({\n\t\t\t\tname: subject.name,\n\t\t\t\tdigest: Object.fromEntries(\n\t\t\t\t\tObject.entries(subject.digest).filter(([, value]) => typeof value === 'string'),\n\t\t\t\t) as Record<string, string>,\n\t\t\t})),\n\t\t};\n\t} catch {\n\t\treturn null;\n\t}\n}\n\n/**\n * Verifies the SLSA provenance of a release (spec SUP-2): fetched from the registry origin, signed by this\n * repository's release workflow on main, and naming exactly this package version and tarball digest.\n */\nexport async function verifyProvenance(\n\tinput: ProvenanceInput,\n\tdeps: { fetch?: AttestationFetcher; verify?: BundleVerifier; env?: NodeJS.ProcessEnv } = {},\n): Promise<void> {\n\tconst { name, version } = input;\n\tlet url: URL;\n\ttry {\n\t\turl = attestationUrl(input, input.config.registry);\n\t} catch (error) {\n\t\tthrow failure(name, version, `bad attestation URL: ${redactUrls((error as Error).message)}`);\n\t}\n\tlet attestations: Attestation[];\n\ttry {\n\t\tattestations = await (deps.fetch ?? fetchAttestations)(url, input.config);\n\t} catch (error) {\n\t\tthrow failure(\n\t\t\tname,\n\t\t\tversion,\n\t\t\t`cannot fetch attestations: ${redactUrls((error as Error).message)}`,\n\t\t);\n\t}\n\tconst provenance = attestations.find((item) => item.predicateType === SLSA_PREDICATE);\n\tif (provenance === undefined) {\n\t\tthrow failure(name, version, 'the registry holds no SLSA provenance attestation for it');\n\t}\n\tconst statement = statementOf(provenance.bundle);\n\tif (statement === null) {\n\t\tthrow failure(name, version, 'the attestation bundle carries no readable in-toto statement');\n\t}\n\t// The registry's label is unsigned; the statement inside the envelope is what the signature covers.\n\tif (statement.predicateType !== SLSA_PREDICATE) {\n\t\tthrow failure(\n\t\t\tname,\n\t\t\tversion,\n\t\t\t`the signed statement is ${statement.predicateType}, not SLSA provenance`,\n\t\t);\n\t}\n\t// npm's provenance encodes the scope marker only: `pkg:npm/%40scope/name@version`.\n\tconst expectedSubject = `pkg:npm/${name.replace(/^@/, '%40')}@${version}`;\n\tconst subject = statement.subject.find((item) => item.name === expectedSubject);\n\tif (subject === undefined) {\n\t\tthrow failure(\n\t\t\tname,\n\t\t\tversion,\n\t\t\t`the attestation names ${statement.subject.map((item) => item.name).join(', ') || 'nothing'}, not ${expectedSubject}`,\n\t\t);\n\t}\n\tif (subject.digest['sha512'] !== input.sha512hex) {\n\t\tthrow failure(name, version, 'the attested tarball digest differs from the downloaded tarball');\n\t}\n\tconst tufCachePath = join(input.stateDir, 'sigstore');\n\tmkdirSync(tufCachePath, { recursive: true, mode: 0o700 });\n\ttry {\n\t\tawait (deps.verify ?? verifyBundle)(provenance.bundle, {\n\t\t\ttufCachePath,\n\t\t\tconfig: input.config,\n\t\t\tenv: deps.env ?? process.env,\n\t\t});\n\t} catch (error) {\n\t\tthrow failure(\n\t\t\tname,\n\t\t\tversion,\n\t\t\t`signature verification failed: ${redactUrls((error as Error).message)}`,\n\t\t);\n\t}\n}\n","import { execFile } from 'node:child_process';\nimport { existsSync, mkdirSync, readFileSync, rmSync } from 'node:fs';\nimport { join } from 'node:path';\nimport semver from 'semver';\nimport { EXIT, NpmVmError } from '../errors.ts';\nimport { abiMessage } from '../messages.ts';\nimport { loadNpmConfig } from '../install/config.ts';\nimport { newWorkDir, Transport, transportUsable } from '../install/fetch.ts';\nimport { loadKeyring } from '../install/keys.ts';\nimport {\n\tverifyProvenance,\n\ttype AttestationFetcher,\n\ttype BundleVerifier,\n} from '../install/provenance.ts';\nimport { fileDigests, safeExtract, verifySignatures } from '../install/verify.ts';\nimport { findOwnNpm } from '../own-npm.ts';\nimport { transportMessage } from '../messages.ts';\nimport { atomicWrite } from '../state/atomic.ts';\nimport { mutateFile, recoverDeadJournals } from '../state/journal.ts';\nimport { acquireLock } from '../state/lock.ts';\nimport {\n\tBOOTSTRAP_FILE,\n\tinstallVersion,\n\tPREVIOUS_FILE,\n\treadCurrent,\n\treadPrevious,\n\truntimeAbi,\n\tversionDir,\n} from '../setup/layout.ts';\nimport { executionPolicy } from '../setup/profile.ts';\nimport {\n\tLAUNCHERS_DIR,\n\trenderShims,\n\tshimAbi,\n\tshimDir,\n\tstalePowershellShims,\n} from '../setup/shims.ts';\nimport { powershellAllowsScripts } from '../setup/windows.ts';\nimport type { CommandContext } from './context.ts';\n\nexport const PACKAGE_NAME = '@mawesome/npm-vm';\n\nexport interface SelfUpdateDeps {\n\tfetchAttestations?: AttestationFetcher;\n\tverifyBundle?: BundleVerifier;\n}\n\nexport interface SelfUpdateOptions {\n\trollback: boolean;\n}\n\nfunction run(\n\tfile: string,\n\targs: string[],\n): Promise<{ code: number | null; stdout: string; stderr: string }> {\n\treturn new Promise((resolve) => {\n\t\texecFile(\n\t\t\tprocess.execPath,\n\t\t\t[file, ...args],\n\t\t\t{ encoding: 'utf8', timeout: 60_000, windowsHide: true },\n\t\t\t(error, stdout, stderr) => {\n\t\t\t\tresolve({\n\t\t\t\t\tcode:\n\t\t\t\t\t\terror === null\n\t\t\t\t\t\t\t? 0\n\t\t\t\t\t\t\t: (((error as { code?: number | string }).code as number | null) ?? 1),\n\t\t\t\t\tstdout,\n\t\t\t\t\tstderr,\n\t\t\t\t});\n\t\t\t},\n\t\t);\n\t});\n}\n\n/** The launcher generation a bootstrap file belongs to, read from its `LAUNCHER_ABI` constant. */\nexport function launcherAbiOf(bootstrapFile: string): number {\n\tconst abi = shimAbi(readFileSync(bootstrapFile, 'utf8'));\n\tif (abi === null) {\n\t\tthrow new NpmVmError(\n\t\t\t'M-ABI',\n\t\t\tEXIT.abi,\n\t\t\tabiMessage(`${bootstrapFile} declares no launcher ABI`),\n\t\t);\n\t}\n\treturn abi;\n}\n\n/**\n * Replaces the home's launcher files with those of `version` (spec SUP-3): the bootstrap at the root and\n * every shim, rendered from that version's templates, each under a journal.\n */\nexport function installLaunchers(context: CommandContext, version: string): void {\n\tconst { dirs, platform, env } = context;\n\tconst dir = versionDir(dirs.home, version);\n\tconst bootstrap = join(dir, BOOTSTRAP_FILE);\n\tconst abi = launcherAbiOf(bootstrap);\n\tmutateFile(\n\t\tdirs.journal,\n\t\t'launcher',\n\t\tcontext.owner,\n\t\tjoin(dirs.home, BOOTSTRAP_FILE),\n\t\treadFileSync(bootstrap),\n\t\t0o644,\n\t);\n\tconst powershell = platform !== 'win32' || powershellAllowsScripts(executionPolicy(env));\n\tmkdirSync(shimDir(dirs.home), { recursive: true, mode: 0o755 });\n\tfor (const file of renderShims(dirs.home, platform, {\n\t\tpowershell,\n\t\ttemplates: join(dir, LAUNCHERS_DIR),\n\t\tabi,\n\t})) {\n\t\tmutateFile(\n\t\t\tdirs.journal,\n\t\t\t'launcher',\n\t\t\tcontext.owner,\n\t\t\tjoin(shimDir(dirs.home), file.name),\n\t\t\tBuffer.from(file.content),\n\t\t\tfile.mode,\n\t\t);\n\t}\n\tif (platform === 'win32' && !powershell) {\n\t\tfor (const stale of stalePowershellShims(dirs.home)) {\n\t\t\tmutateFile(dirs.journal, 'launcher', context.owner, stale, null);\n\t\t}\n\t}\n}\n\nexport function currentLauncherAbi(context: CommandContext): number | null {\n\tconst file = join(context.dirs.home, BOOTSTRAP_FILE);\n\treturn existsSync(file) ? shimAbi(readFileSync(file, 'utf8')) : null;\n}\n\nexport async function selfUpdate(\n\tcontext: CommandContext,\n\toptions: SelfUpdateOptions,\n\tdeps: SelfUpdateDeps = {},\n): Promise<number> {\n\tconst lock = await acquireLock(context.dirs.state, context.owner);\n\ttry {\n\t\trecoverDeadJournals(context.dirs.journal, context.dirs.machine.id);\n\t\treturn options.rollback ? rollback(context) : await update(context, deps);\n\t} finally {\n\t\tlock.release();\n\t}\n}\n\n/** `self-update --rollback` (spec SUP-4): offline, swaps `current` back and restores the previous launchers if the ABI differs. */\nfunction rollback(context: CommandContext): number {\n\tconst { dirs, io } = context;\n\tconst current = readCurrent(dirs.home);\n\tconst previous = readPrevious(dirs.home);\n\tif (previous === null || !existsSync(versionDir(dirs.home, previous)) || current === null) {\n\t\tthrow new NpmVmError('M-ABI', EXIT.usage, 'No previous version to roll back to.');\n\t}\n\t// The newer launcher still runs the previous runtime, so `current` moves first; the older launcher could not run the newer runtime.\n\tmutateFile(\n\t\tdirs.journal,\n\t\t'launcher',\n\t\tcontext.owner,\n\t\tjoin(dirs.home, 'current'),\n\t\tBuffer.from(`${previous}\\n`),\n\t);\n\tif (\n\t\tlauncherAbiOf(join(versionDir(dirs.home, previous), BOOTSTRAP_FILE)) !==\n\t\tcurrentLauncherAbi(context)\n\t) {\n\t\tinstallLaunchers(context, previous);\n\t}\n\tatomicWrite(join(dirs.home, PREVIOUS_FILE), `${current}\\n`);\n\tio.out(\n\t\tcontext.json\n\t\t\t? JSON.stringify({ current: previous, previous: current })\n\t\t\t: `Rolled back to npm-vm ${previous} (from ${current}).`,\n\t);\n\treturn EXIT.ok;\n}\n\nasync function update(context: CommandContext, deps: SelfUpdateDeps): Promise<number> {\n\tconst { dirs, env, io } = context;\n\tconst installed = readCurrent(dirs.home) ?? context.version;\n\tconst own = findOwnNpm();\n\tconst found = own?.version ?? null;\n\tif (!transportUsable(own)) {\n\t\tthrow new NpmVmError(\n\t\t\t'M-TRANSPORT',\n\t\t\tEXIT.transport,\n\t\t\ttransportMessage(found, 'too old or missing'),\n\t\t);\n\t}\n\tconst work = newWorkDir(dirs.tmp);\n\ttry {\n\t\tconst config = await loadNpmConfig(own, env, work);\n\t\tconst transport = new Transport(own, config, env, dirs.tmp);\n\t\tconst latest = (await transport.viewPackage(PACKAGE_NAME, 'latest'))[0];\n\t\tif (latest === undefined) {\n\t\t\tthrow new NpmVmError(\n\t\t\t\t'M-TRANSPORT',\n\t\t\t\tEXIT.transport,\n\t\t\t\ttransportMessage(own.version, `${PACKAGE_NAME}@latest is not published`),\n\t\t\t);\n\t\t}\n\t\t// Forward-only (SUP-1): a registry that serves an older \"latest\" cannot move the install back.\n\t\tif (!semver.gt(latest.version, installed)) {\n\t\t\tio.out(\n\t\t\t\tcontext.json\n\t\t\t\t\t? JSON.stringify({ current: installed, latest: latest.version, updated: false })\n\t\t\t\t\t: `npm-vm ${installed} is up to date (latest is ${latest.version}).`,\n\t\t\t);\n\t\t\treturn EXIT.ok;\n\t\t}\n\t\tconst packed = await transport.packPackage(PACKAGE_NAME, latest.version, work);\n\t\tconst digests = await fileDigests(packed.file);\n\t\tif (digests.sha512 !== latest.integrity) {\n\t\t\tthrow new NpmVmError(\n\t\t\t\t'M-INTEGRITY',\n\t\t\t\tEXIT.verification,\n\t\t\t\t`${PACKAGE_NAME}@${latest.version}: tarball does not match the registry integrity.`,\n\t\t\t);\n\t\t}\n\t\tawait verifySignatures({\n\t\t\tname: PACKAGE_NAME,\n\t\t\tversion: latest.version,\n\t\t\tintegrity: latest.integrity,\n\t\t\tsignatures: latest.signatures,\n\t\t\tpublishedAt: async () => null,\n\t\t\tkeys: loadKeyring(dirs.state),\n\t\t\tregistry: config.registry,\n\t\t\tpinned: false,\n\t\t});\n\t\tawait verifyProvenance(\n\t\t\t{\n\t\t\t\tname: PACKAGE_NAME,\n\t\t\t\tversion: latest.version,\n\t\t\t\tsha512hex: digests.sha512hex,\n\t\t\t\tattestationsUrl: latest.attestationsUrl,\n\t\t\t\tconfig,\n\t\t\t\tstateDir: dirs.state,\n\t\t\t},\n\t\t\t{\n\t\t\t\t...(deps.fetchAttestations === undefined ? {} : { fetch: deps.fetchAttestations }),\n\t\t\t\t...(deps.verifyBundle === undefined ? {} : { verify: deps.verifyBundle }),\n\t\t\t\tenv,\n\t\t\t},\n\t\t);\n\t\tconst extracted = join(work, 'package');\n\t\tmkdirSync(extracted, { mode: 0o700 });\n\t\tawait safeExtract(packed.file, extracted);\n\t\tconst runtimeSource = join(extracted, 'dist', 'runtime');\n\t\tif (\n\t\t\t!existsSync(join(runtimeSource, 'runtime.cjs')) ||\n\t\t\t!existsSync(join(runtimeSource, BOOTSTRAP_FILE))\n\t\t) {\n\t\t\tthrow new NpmVmError(\n\t\t\t\t'M-INTEGRITY',\n\t\t\t\tEXIT.verification,\n\t\t\t\t`${PACKAGE_NAME}@${latest.version} ships no runtime build.`,\n\t\t\t);\n\t\t}\n\t\tconst candidateAbi = launcherAbiOf(join(runtimeSource, BOOTSTRAP_FILE));\n\t\tconst installedRuntimeAbi =\n\t\t\truntimeAbi(dirs.home, installed) ?? currentLauncherAbi(context) ?? candidateAbi;\n\t\tif (installedRuntimeAbi < candidateAbi - 1) {\n\t\t\tthrow new NpmVmError(\n\t\t\t\t'M-ABI',\n\t\t\t\tEXIT.abi,\n\t\t\t\tabiMessage(\n\t\t\t\t\t`npm-vm ${latest.version} skips launcher generations (${installedRuntimeAbi} to ${candidateAbi})`,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\t// The launcher is swapped before `current`: one older than the installed runtime would break every shim meanwhile.\n\t\tif (candidateAbi < installedRuntimeAbi) {\n\t\t\tthrow new NpmVmError(\n\t\t\t\t'M-ABI',\n\t\t\t\tEXIT.abi,\n\t\t\t\tabiMessage(\n\t\t\t\t\t`npm-vm ${latest.version} ships launcher ABI ${candidateAbi}, older than the installed runtime's ${installedRuntimeAbi}`,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tconst target = installVersion(dirs.home, latest.version, runtimeSource, candidateAbi);\n\t\tconst health = await run(join(target, BOOTSTRAP_FILE), ['--candidate', 'cli', '--version']);\n\t\tif (health.code !== 0 || health.stdout.trim() !== latest.version) {\n\t\t\trmSync(target, { recursive: true, force: true });\n\t\t\tthrow new NpmVmError(\n\t\t\t\t'M-ABI',\n\t\t\t\tEXIT.abi,\n\t\t\t\tabiMessage(\n\t\t\t\t\t`the downloaded runtime failed its health check: ${health.stderr.trim() || health.stdout.trim() || `exit ${health.code}`}`,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tif (candidateAbi !== currentLauncherAbi(context)) {\n\t\t\tinstallLaunchers(context, latest.version);\n\t\t}\n\t\tatomicWrite(join(dirs.home, PREVIOUS_FILE), `${installed}\\n`);\n\t\tmutateFile(\n\t\t\tdirs.journal,\n\t\t\t'launcher',\n\t\t\tcontext.owner,\n\t\t\tjoin(dirs.home, 'current'),\n\t\t\tBuffer.from(`${latest.version}\\n`),\n\t\t);\n\t\tio.out(\n\t\t\tcontext.json\n\t\t\t\t? JSON.stringify({ current: latest.version, previous: installed, updated: true })\n\t\t\t\t: `Updated npm-vm ${installed} to ${latest.version}.`,\n\t\t);\n\t\treturn EXIT.ok;\n\t} finally {\n\t\trmSync(work, { recursive: true, force: true });\n\t}\n}\n","import { chmodSync, existsSync, mkdirSync, readFileSync, statSync } from 'node:fs';\nimport { basename, join } from 'node:path';\nimport { EXIT, NpmVmError } from '../errors.ts';\nimport { dirPermsMessage, restartMessage } from '../messages.ts';\nimport { recoverDeadJournals, mutateFile } from '../state/journal.ts';\nimport { acquireLock } from '../state/lock.ts';\nimport { findNodeInstalls, linkOne, linkTargets, type LinkResult } from '../setup/link.ts';\nimport {\n\tBOOTSTRAP_FILE,\n\tinstallBootstrap,\n\tinstallVersion,\n\treadCurrent,\n\treadManifest,\n\truntimeDistDir,\n\tsetCurrent,\n\tsweepReplaced,\n\tversionDir,\n} from '../setup/layout.ts';\nimport {\n\tapplyProfileEdit,\n\texecutionPolicy,\n\tplanProfileEdit,\n\tprofileGuard,\n\tprofileTargets,\n\ttype ProfileTarget,\n} from '../setup/profile.ts';\nimport { isShell, profileBlock, type Shell } from '../setup/shell.ts';\nimport {\n\tassertSafeHome,\n\trenderShims,\n\tSHIM_ABI,\n\tshimDir,\n\tstalePowershellShims,\n} from '../setup/shims.ts';\nimport { addToUserPath, powershellAllowsScripts, setCmdAutoRun } from '../setup/windows.ts';\nimport type { CommandContext } from './context.ts';\nimport { doctor } from './doctor.ts';\n\nexport interface SetupOptions {\n\tlink: boolean;\n\tshells: Shell[] | null;\n\tyes: boolean;\n\tdryRun: boolean;\n\tmodifyProfile: boolean;\n\tcmdAutorun: boolean;\n\tstrict: boolean;\n\t/** Write the Windows user PATH and AutoRun; the Action turns this off and relies on GITHUB_PATH. */\n\tuserPath: boolean;\n}\n\nexport interface SetupReport {\n\thome: string;\n\tversion: string;\n\tprofiles: Array<{\n\t\tfile: string;\n\t\toutcome: 'written' | 'unchanged' | 'printed' | 'declined' | 'changed' | 'dry-run';\n\t\treason?: string;\n\t}>;\n\tlinks: LinkResult[];\n\tskipped: number;\n}\n\n/** Refuses a home or cache another user could write to (spec SEC-9). */\nexport function assertPrivateDir(dir: string, platform: NodeJS.Platform): void {\n\tif (platform === 'win32') {\n\t\treturn;\n\t}\n\tconst stat = statSync(dir);\n\tif (process.getuid !== undefined && stat.uid !== process.getuid()) {\n\t\tthrow new NpmVmError(\n\t\t\t'M-DIRPERMS',\n\t\t\tEXIT.problems,\n\t\t\tdirPermsMessage(dir, 'is not owned by you', `chown $(id -u) ${dir}`),\n\t\t);\n\t}\n\tif ((stat.mode & 0o022) !== 0) {\n\t\tthrow new NpmVmError(\n\t\t\t'M-DIRPERMS',\n\t\t\tEXIT.problems,\n\t\t\tdirPermsMessage(dir, 'is writable by other users', `chmod go-w ${dir}`),\n\t\t);\n\t}\n}\n\nfunction ensurePrivateDir(dir: string, platform: NodeJS.Platform): void {\n\tif (!existsSync(dir)) {\n\t\tmkdirSync(dir, { recursive: true, mode: 0o700 });\n\t\tif (platform !== 'win32') {\n\t\t\tchmodSync(dir, 0o700);\n\t\t}\n\t}\n\tassertPrivateDir(dir, platform);\n}\n\n/** The shells to configure: `--shell` values, else the login shell, plus PowerShell on Windows. */\nexport function defaultShells(env: NodeJS.ProcessEnv, platform: NodeJS.Platform): Shell[] {\n\tif (platform === 'win32') {\n\t\treturn ['powershell'];\n\t}\n\tconst login = basename(env['SHELL'] ?? '');\n\treturn isShell(login) ? [login] : ['bash'];\n}\n\nfunction sameFiles(home: string, version: string, distDir: string): boolean {\n\tconst manifest = readManifest(home, version);\n\tif (manifest === null) {\n\t\treturn false;\n\t}\n\treturn manifest.files.every((file) => {\n\t\ttry {\n\t\t\treturn readFileSync(join(distDir, file)).equals(\n\t\t\t\treadFileSync(join(versionDir(home, version), file)),\n\t\t\t);\n\t\t} catch {\n\t\t\treturn false;\n\t\t}\n\t});\n}\n\nexport async function setup(context: CommandContext, options: SetupOptions): Promise<number> {\n\tconst { dirs, env, platform, io } = context;\n\tassertSafeHome(dirs.home);\n\tconst distDir = runtimeDistDir();\n\tif (distDir === null) {\n\t\tthrow new NpmVmError(\n\t\t\t'M-ABI',\n\t\t\tEXIT.problems,\n\t\t\t'This npm-vm installation ships no runtime build; reinstall the package.',\n\t\t);\n\t}\n\tfor (const dir of [dirs.home, dirs.state, dirs.cache]) {\n\t\tif (options.dryRun) {\n\t\t\tif (existsSync(dir)) {\n\t\t\t\tassertPrivateDir(dir, platform);\n\t\t\t}\n\t\t} else {\n\t\t\tensurePrivateDir(dir, platform);\n\t\t}\n\t}\n\tconst report: SetupReport = {\n\t\thome: dirs.home,\n\t\tversion: context.version,\n\t\tprofiles: [],\n\t\tlinks: [],\n\t\tskipped: 0,\n\t};\n\tconst shells = options.shells ?? defaultShells(env, platform);\n\tconst targets = options.modifyProfile ? profileTargets(shells, env, platform) : [];\n\tconst policy = platform === 'win32' ? executionPolicy(env) : null;\n\tconst powershell = platform !== 'win32' || powershellAllowsScripts(policy);\n\n\t// Every target is examined before anything is written, so a refusal costs nothing.\n\tconst plans = targets.map((target) => ({\n\t\ttarget,\n\t\tguard: profileGuard(target.file, env, platform),\n\t\tedit: planProfileEdit(target, dirs.home),\n\t}));\n\n\t// A dry run writes nothing, not even the lock, so the home stays absent when it did not exist.\n\tconst lock = options.dryRun ? null : await acquireLock(dirs.state, context.owner);\n\ttry {\n\t\tif (lock !== null) {\n\t\t\trecoverDeadJournals(dirs.journal, dirs.machine.id);\n\t\t}\n\t\tif (!options.dryRun) {\n\t\t\tinstallRuntime(context, distDir);\n\t\t\tmkdirSync(shimDir(dirs.home), { recursive: true, mode: 0o755 });\n\t\t\tfor (const file of renderShims(dirs.home, platform, { powershell })) {\n\t\t\t\tmutateFile(\n\t\t\t\t\tdirs.journal,\n\t\t\t\t\t'launcher',\n\t\t\t\t\tcontext.owner,\n\t\t\t\t\tjoin(shimDir(dirs.home), file.name),\n\t\t\t\t\tBuffer.from(file.content),\n\t\t\t\t\tfile.mode,\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (platform === 'win32' && !powershell) {\n\t\t\t\tfor (const stale of stalePowershellShims(dirs.home)) {\n\t\t\t\t\tmutateFile(dirs.journal, 'launcher', context.owner, stale, null);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tfor (const plan of plans) {\n\t\t\treport.profiles.push(await applyPlan(context, options, plan));\n\t\t}\n\t\tif (options.link) {\n\t\t\tfor (const install of findNodeInstalls(env, platform)) {\n\t\t\t\tfor (const target of linkTargets(dirs.home, platform, powershell)) {\n\t\t\t\t\tif (options.dryRun) {\n\t\t\t\t\t\treport.links.push({\n\t\t\t\t\t\t\ttarget: join(install.binDir, target.name),\n\t\t\t\t\t\t\toutcome: 'linked',\n\t\t\t\t\t\t\tdetail: 'dry run',\n\t\t\t\t\t\t});\n\t\t\t\t\t} else {\n\t\t\t\t\t\treport.links.push(linkOne(dirs, context.owner, install.binDir, target));\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tif (platform === 'win32' && !options.dryRun && options.userPath) {\n\t\t\tif (addToUserPath(env, shimDir(dirs.home))) {\n\t\t\t\tenv['Path'] = `${shimDir(dirs.home)};${env['Path'] ?? ''}`;\n\t\t\t\tio.err(restartMessage());\n\t\t\t}\n\t\t\tif (options.cmdAutorun) {\n\t\t\t\tsetCmdAutoRun(env, shimDir(dirs.home));\n\t\t\t}\n\t\t\tif (!powershell) {\n\t\t\t\tio.err(\n\t\t\t\t\t`PowerShell's execution policy (${policy ?? 'unknown'}) blocks unsigned scripts, so no .ps1 shims were installed; cmd shims take over.`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t} finally {\n\t\tlock?.release();\n\t}\n\treport.skipped =\n\t\treport.profiles.filter(\n\t\t\t(entry) =>\n\t\t\t\tentry.outcome === 'printed' || entry.outcome === 'declined' || entry.outcome === 'changed',\n\t\t).length +\n\t\treport.links.filter((link) => ['foreign', 'unwritable', 'missing'].includes(link.outcome))\n\t\t\t.length;\n\tif (context.json) {\n\t\tio.out(JSON.stringify(report, null, 2));\n\t} else {\n\t\tio.out(describe(report));\n\t}\n\tif (!options.dryRun) {\n\t\t// With --json the setup report is the only document on stdout; doctor still decides --strict.\n\t\tconst health = await doctor(context, { quiet: context.json });\n\t\tif (health !== EXIT.ok && options.strict) {\n\t\t\treturn EXIT.partial;\n\t\t}\n\t}\n\treturn options.strict && report.skipped > 0 ? EXIT.partial : EXIT.ok;\n}\n\n/** Installs this version's runtime and launcher unless the identical files are already in place. */\nfunction installRuntime(context: CommandContext, distDir: string): void {\n\tconst { dirs, version } = context;\n\tif (!sameFiles(dirs.home, version, distDir)) {\n\t\tinstallVersion(dirs.home, version, distDir, SHIM_ABI);\n\t}\n\tsweepReplaced(dirs.home);\n\tif (readCurrent(dirs.home) !== version) {\n\t\tmutateFile(\n\t\t\tdirs.journal,\n\t\t\t'launcher',\n\t\t\tcontext.owner,\n\t\t\tjoin(dirs.home, 'current'),\n\t\t\tBuffer.from(`${version}\\n`),\n\t\t);\n\t}\n\tconst bootstrap = readFileSync(join(versionDir(dirs.home, version), BOOTSTRAP_FILE));\n\tconst installed = existsSync(join(dirs.home, BOOTSTRAP_FILE))\n\t\t? readFileSync(join(dirs.home, BOOTSTRAP_FILE))\n\t\t: null;\n\tif (installed === null || !installed.equals(bootstrap)) {\n\t\tmutateFile(\n\t\t\tdirs.journal,\n\t\t\t'launcher',\n\t\t\tcontext.owner,\n\t\t\tjoin(dirs.home, BOOTSTRAP_FILE),\n\t\t\tbootstrap,\n\t\t\t0o644,\n\t\t);\n\t}\n\tvoid setCurrent;\n\tvoid installBootstrap;\n}\n\nasync function applyPlan(\n\tcontext: CommandContext,\n\toptions: SetupOptions,\n\tplan: { target: ProfileTarget; guard: string | null; edit: ReturnType<typeof planProfileEdit> },\n): Promise<SetupReport['profiles'][number]> {\n\tconst { io, dirs } = context;\n\tconst { target } = plan;\n\tif (plan.guard !== null) {\n\t\tio.out(\n\t\t\t`Not editing ${target.file}: ${plan.guard}. Add this yourself:\\n${profileBlock(target.shell, dirs.home, target.parts)}`,\n\t\t);\n\t\treturn { file: target.file, outcome: 'printed', reason: plan.guard };\n\t}\n\tif (plan.edit === null) {\n\t\treturn { file: target.file, outcome: 'unchanged' };\n\t}\n\tif (options.dryRun) {\n\t\tio.out(`Would edit ${target.file}:\\n${plan.edit.diff}`);\n\t\treturn { file: target.file, outcome: 'dry-run' };\n\t}\n\tif (!options.yes) {\n\t\tio.out(plan.edit.diff);\n\t\tconst agreed = await io.confirm(`Apply this change to ${target.file}?`);\n\t\tif (!agreed) {\n\t\t\tio.out(\n\t\t\t\t`Skipped ${target.file}. Add this yourself:\\n${profileBlock(target.shell, dirs.home, target.parts)}`,\n\t\t\t);\n\t\t\treturn { file: target.file, outcome: 'declined' };\n\t\t}\n\t}\n\t/* The file may have changed while the prompt was open: guard and plan again, and never write over what was not shown.\n\t * The guard runs again because a swap for a symlink keeps the content equal (spec SH-5). */\n\tconst guard = profileGuard(target.file, context.env, context.platform);\n\tconst fresh = planProfileEdit(target, dirs.home);\n\tif (fresh === null) {\n\t\treturn { file: target.file, outcome: 'unchanged' };\n\t}\n\tif (guard !== null || (fresh.before !== plan.edit.before && !options.yes)) {\n\t\tio.out(\n\t\t\t`${target.file} changed while the prompt was open; run setup again to review the new change.`,\n\t\t);\n\t\treturn { file: target.file, outcome: 'changed' };\n\t}\n\tapplyProfileEdit(dirs, context.owner, fresh);\n\treturn { file: target.file, outcome: 'written' };\n}\n\nfunction describe(report: SetupReport): string {\n\tconst lines = [`npm-vm ${report.version} installed in ${report.home}`];\n\tfor (const profile of report.profiles) {\n\t\tlines.push(\n\t\t\t`  ${profile.file}: ${profile.outcome}${profile.reason ? ` (${profile.reason})` : ''}`,\n\t\t);\n\t}\n\tfor (const link of report.links) {\n\t\tlines.push(`  ${link.target}: ${link.outcome}${link.detail ? ` (${link.detail})` : ''}`);\n\t}\n\treturn lines.join('\\n');\n}\n","import { rmdirSync } from 'node:fs';\nimport { join } from 'node:path';\nimport { atomicRename, removeWithRetry } from '../state/atomic.ts';\nimport { EXIT } from '../errors.ts';\nimport { ENTRIES_DIR, stagingDir } from '../install/cache.ts';\nimport { changedMessage } from '../messages.ts';\nimport { recoverDeadJournals } from '../state/journal.ts';\nimport { acquireLock } from '../state/lock.ts';\nimport { pruneCache } from '../state/prune.ts';\nimport { readLinks, unlinkOne } from '../setup/link.ts';\nimport { readProfiles, removeProfileBlock } from '../setup/profile.ts';\nimport { shimDir } from '../setup/shims.ts';\nimport { clearCmdAutoRun, removeFromUserPath } from '../setup/windows.ts';\nimport type { CommandContext } from './context.ts';\n\nexport interface UninstallOptions {\n\tyes: boolean;\n\tpurgeCache: boolean;\n}\n\nexport interface UninstallReport {\n\tprofiles: Array<{ file: string; outcome: string }>;\n\tlinks: Array<{ target: string; outcome: string }>;\n\thomeRemoved: boolean;\n\tcacheRemoved: boolean;\n\t/** Entries `--purge-cache` left because a running npm holds them. */\n\tcacheKept: string[];\n}\n\n/** Removes the cache's directories only while empty: an npm publishing right now keeps its entry. */\nfunction removeEmptyTree(cache: string): void {\n\tfor (const dir of [join(cache, ENTRIES_DIR), stagingDir(cache), cache]) {\n\t\ttry {\n\t\t\trmdirSync(dir);\n\t\t} catch {\n\t\t\t// Not empty or already gone; either way it stays as it is.\n\t\t}\n\t}\n}\n\nexport async function uninstall(\n\tcontext: CommandContext,\n\toptions: UninstallOptions,\n): Promise<number> {\n\tconst { dirs, env, platform, io } = context;\n\tif (!options.yes) {\n\t\tconst agreed = await io.confirm(\n\t\t\t`Remove npm-vm from ${dirs.home}, its profile blocks and links${options.purgeCache ? ', and the cache' : ''}?`,\n\t\t);\n\t\tif (!agreed) {\n\t\t\tio.out('Nothing removed.');\n\t\t\treturn EXIT.ok;\n\t\t}\n\t}\n\tconst report: UninstallReport = {\n\t\tprofiles: [],\n\t\tlinks: [],\n\t\thomeRemoved: false,\n\t\tcacheRemoved: false,\n\t\tcacheKept: [],\n\t};\n\tconst lock = await acquireLock(dirs.state, context.owner);\n\tlet clean = true;\n\ttry {\n\t\trecoverDeadJournals(dirs.journal, dirs.machine.id);\n\t\tfor (const entry of readProfiles(dirs).entries) {\n\t\t\tconst outcome = removeProfileBlock(dirs, context.owner, entry);\n\t\t\treport.profiles.push({ file: entry.file, outcome });\n\t\t\tif (outcome === 'changed') {\n\t\t\t\tclean = false;\n\t\t\t\tio.err(changedMessage(entry.file, 'npm-vm block'));\n\t\t\t}\n\t\t}\n\t\tfor (const entry of readLinks(dirs).entries) {\n\t\t\tconst outcome = unlinkOne(dirs, context.owner, entry);\n\t\t\treport.links.push({ target: entry.target, outcome });\n\t\t\tif (outcome === 'changed') {\n\t\t\t\tclean = false;\n\t\t\t\tio.err(changedMessage(entry.target, 'shim'));\n\t\t\t}\n\t\t}\n\t\tif (platform === 'win32') {\n\t\t\tremoveFromUserPath(env, shimDir(dirs.home));\n\t\t\tclearCmdAutoRun(env);\n\t\t}\n\t\tif (options.purgeCache) {\n\t\t\t// Through the gate and lease protocol, under the home lock and the cache's own lock, which other homes share.\n\t\t\tconst cacheLock = await acquireLock(dirs.cache, context.owner);\n\t\t\ttry {\n\t\t\t\tconst pruned = pruneCache(dirs.cache, context.owner, { maxAgeMs: 0 });\n\t\t\t\treport.cacheKept = pruned.kept.concat(pruned.skipped);\n\t\t\t\tif (report.cacheKept.length === 0) {\n\t\t\t\t\tremoveEmptyTree(dirs.cache);\n\t\t\t\t\treport.cacheRemoved = true;\n\t\t\t\t}\n\t\t\t} finally {\n\t\t\t\tcacheLock.release();\n\t\t\t}\n\t\t\tif (report.cacheRemoved) {\n\t\t\t\t// The lock file itself kept the root; now it can go too.\n\t\t\t\tremoveEmptyTree(dirs.cache);\n\t\t\t}\n\t\t\tif (report.cacheKept.length > 0) {\n\t\t\t\tclean = false;\n\t\t\t\tio.err(\n\t\t\t\t\t`Cache kept: ${report.cacheKept.join(', ')} ${report.cacheKept.length === 1 ? 'is' : 'are'} in use by a running npm.`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t\t// Under the lock the home moves aside in one rename, so a setup that follows never writes into a dir being deleted.\n\t\tconst tombstone = `${dirs.home}.removing.${process.pid}.${Date.now()}`;\n\t\tatomicRename(dirs.home, tombstone);\n\t\tremoveWithRetry(tombstone);\n\t\treport.homeRemoved = true;\n\t} finally {\n\t\tlock.release();\n\t}\n\tio.out(context.json ? JSON.stringify(report, null, 2) : describe(report, dirs.cache));\n\treturn clean ? EXIT.ok : EXIT.problems;\n}\n\nfunction describe(report: UninstallReport, cache: string): string {\n\tconst lines = ['npm-vm removed.'];\n\tfor (const profile of report.profiles) {\n\t\tlines.push(`  ${profile.file}: ${profile.outcome}`);\n\t}\n\tfor (const link of report.links) {\n\t\tlines.push(`  ${link.target}: ${link.outcome}`);\n\t}\n\tif (report.cacheRemoved) {\n\t\tlines.push(`  cache removed (${cache})`);\n\t} else if (report.cacheKept.length > 0) {\n\t\tlines.push(`  cache kept at ${cache}: ${report.cacheKept.join(', ')} in use by a running npm`);\n\t} else {\n\t\tlines.push(`  cache kept at ${cache}; add --purge-cache to remove it`);\n\t}\n\treturn lines.join('\\n');\n}\n","import { readFileSync } from 'node:fs';\nimport { parseArgs } from 'node:util';\nimport { EXIT, isNpmVmError } from '../errors.ts';\nimport { resolveNpm, type ResolveResult } from '../index.ts';\nimport { isShell, profileBlock, SHELLS, type Shell } from '../setup/shell.ts';\nimport { cacheList, cachePrune, DEFAULT_PRUNE_DAYS, install, recover } from './cache.ts';\nimport { createCommandContext, type CommandContext, type CommandIo } from './context.ts';\nimport { doctor } from './doctor.ts';\nimport { pin } from './pin.ts';\nimport { selfUpdate } from './self-update.ts';\nimport { setup } from './setup.ts';\nimport { uninstall } from './uninstall.ts';\n\nconst VERSION = readSelfVersion();\n\nconst USAGE = `npm-vm v${VERSION}: run the npm version a project declares in devEngines\n\nUsage:\n  npm-vm <command> [options]\n\nCommands:\n  setup                  Install the launcher, shims and shell snippets; --link also replaces npm\n                         inside every nvm/fnm Node. --shell <s> (repeatable), --yes, --dry-run,\n                         --no-modify-profile, --cmd-autorun and --no-user-path (Windows), --strict (exit 2 on skips).\n  init <shell>           Print the snippet for zsh, bash, fish or powershell (--path, --hook; default both).\n  doctor                 Check the installation; exit 1 when something needs fixing.\n  which                  Print the npm that would run for the current directory.\n  pin [<range>]          Write devEngines.packageManager for npm into the project's package.json.\n  install [<spec>]       Download and verify the project's npm, or <spec>, into the cache.\n  cache list             List cached npm versions.\n  cache prune            Remove unused entries; --older-than <days> (default ${DEFAULT_PRUNE_DAYS}).\n  self-update            Update npm-vm with provenance verification; --rollback restores the previous version.\n  recover                Finish a journal left by another machine: --journal <id> --confirm-dead-machine <id>.\n  uninstall              Remove npm-vm (--yes to skip the prompt, --purge-cache to drop the cache too).\n\nGlobal options:\n  --json                 Machine-readable output where a command offers it.\n  --version, -v          Print the version.\n  --help, -h             Print this help.\n\nEnvironment:\n  NPM_VM_VERSION        Use this range or version instead of the project's.\n  NPM_VM_DISABLE        Any value: always run Node's own npm.\n  NPM_VM_OFFLINE        Any value: never contact the registry.\n  NPM_VM_HOME           The home directory (setup only).\n\nExit codes: 0 ok, 1 problems found, 2 partial setup under --strict, 3 resolution failed, 4 transport\nunavailable, 5 verification failed, 6 launcher mismatch, 64 usage error.`;\n\nexport interface DispatchOptions {\n\t/** The home the launcher runs from; the bin entry leaves it to the env and defaults. */\n\thome?: string;\n\tio?: CommandIo;\n\tenv?: NodeJS.ProcessEnv;\n}\n\nfunction parse(argv: string[]) {\n\treturn parseArgs({\n\t\targs: argv,\n\t\tallowPositionals: true,\n\t\tallowNegative: true,\n\t\toptions: {\n\t\t\tjson: { type: 'boolean' },\n\t\t\tpath: { type: 'boolean' },\n\t\t\thook: { type: 'boolean' },\n\t\t\tlink: { type: 'boolean' },\n\t\t\tshell: { type: 'string', multiple: true },\n\t\t\tyes: { type: 'boolean' },\n\t\t\t'dry-run': { type: 'boolean' },\n\t\t\t'modify-profile': { type: 'boolean' },\n\t\t\t'cmd-autorun': { type: 'boolean' },\n\t\t\t'user-path': { type: 'boolean' },\n\t\t\tstrict: { type: 'boolean' },\n\t\t\t'older-than': { type: 'string' },\n\t\t\trollback: { type: 'boolean' },\n\t\t\tjournal: { type: 'string' },\n\t\t\t'confirm-dead-machine': { type: 'string' },\n\t\t\t'purge-cache': { type: 'boolean' },\n\t\t\tbundle: { type: 'string' },\n\t\t\t'tuf-cache': { type: 'string' },\n\t\t\tversion: { type: 'boolean', short: 'v' },\n\t\t\thelp: { type: 'boolean', short: 'h' },\n\t\t},\n\t});\n}\n\ntype Values = ReturnType<typeof parse>['values'];\n\n/** Command-specific options, so a flag meant for another command is an error rather than silently ignored. */\nconst COMMAND_OPTIONS: Record<string, readonly (keyof Values)[]> = {\n\tsetup: [\n\t\t'link',\n\t\t'shell',\n\t\t'yes',\n\t\t'dry-run',\n\t\t'modify-profile',\n\t\t'cmd-autorun',\n\t\t'user-path',\n\t\t'strict',\n\t],\n\tinit: ['path', 'hook'],\n\tdoctor: [],\n\twhich: [],\n\tpin: [],\n\tinstall: [],\n\tcache: ['older-than'],\n\t'self-update': ['rollback'],\n\trecover: ['journal', 'confirm-dead-machine'],\n\tuninstall: ['yes', 'purge-cache'],\n\t'verify-attestation': ['bundle', 'tuf-cache'],\n};\n\nfunction misplacedOptions(command: string, values: Values): string[] {\n\tconst allowed = new Set<keyof Values>(COMMAND_OPTIONS[command] ?? []);\n\treturn Object.values(COMMAND_OPTIONS)\n\t\t.flat()\n\t\t.filter((option) => !allowed.has(option) && values[option] !== undefined)\n\t\t.map((option) => `--${option}`);\n}\n\nexport async function run(argv: string[], options: DispatchOptions): Promise<number> {\n\tlet parsed: ReturnType<typeof parse>;\n\ttry {\n\t\tparsed = parse(argv);\n\t} catch (error) {\n\t\tconsole.error((error as Error).message);\n\t\tconsole.error(USAGE);\n\t\treturn EXIT.usage;\n\t}\n\tconst { values, positionals } = parsed;\n\tif (values.version) {\n\t\tconsole.log(VERSION);\n\t\treturn EXIT.ok;\n\t}\n\tconst command = positionals[0];\n\tif (values.help || command === undefined) {\n\t\tconsole.log(USAGE);\n\t\treturn command === undefined && !values.help ? EXIT.usage : EXIT.ok;\n\t}\n\tif (COMMAND_OPTIONS[command] === undefined) {\n\t\tconsole.error(`Unknown command: ${command}`);\n\t\tconsole.error(USAGE);\n\t\treturn EXIT.usage;\n\t}\n\tconst misplaced = misplacedOptions(command, values);\n\tif (misplaced.length > 0) {\n\t\tconsole.error(`${misplaced.join(', ')} cannot be used with ${command}`);\n\t\treturn EXIT.usage;\n\t}\n\tconst context = createCommandContext({\n\t\t...(options.home === undefined ? {} : { home: options.home }),\n\t\t...(options.env === undefined ? {} : { env: options.env }),\n\t\t...(options.io === undefined ? {} : { io: options.io }),\n\t\tjson: values.json ?? false,\n\t\tversion: VERSION,\n\t});\n\ttry {\n\t\treturn await dispatch(command, positionals.slice(1), values, context, options);\n\t} catch (error) {\n\t\treturn reportError(error, context);\n\t}\n}\n\nasync function dispatch(\n\tcommand: string,\n\trest: string[],\n\tvalues: Values,\n\tcontext: CommandContext,\n\toptions: DispatchOptions,\n): Promise<number> {\n\tswitch (command) {\n\t\tcase 'setup': {\n\t\t\tconst shells = values.shell ?? null;\n\t\t\tconst bad = shells?.filter((shell) => !isShell(shell)) ?? [];\n\t\t\tif (bad.length > 0) {\n\t\t\t\tcontext.io.err(`--shell needs one of: ${SHELLS.join(', ')} (got ${bad.join(', ')})`);\n\t\t\t\treturn EXIT.usage;\n\t\t\t}\n\t\t\treturn setup(context, {\n\t\t\t\tlink: values.link ?? false,\n\t\t\t\tshells: shells as Shell[] | null,\n\t\t\t\tyes: values.yes ?? false,\n\t\t\t\tdryRun: values['dry-run'] ?? false,\n\t\t\t\tmodifyProfile: values['modify-profile'] ?? true,\n\t\t\t\tcmdAutorun: values['cmd-autorun'] ?? false,\n\t\t\t\tstrict: values.strict ?? false,\n\t\t\t\tuserPath: values['user-path'] ?? true,\n\t\t\t});\n\t\t}\n\t\tcase 'init': {\n\t\t\tconst shell = rest[0];\n\t\t\tif (shell === undefined || !isShell(shell)) {\n\t\t\t\tcontext.io.err(`init needs one of: ${SHELLS.join(', ')}`);\n\t\t\t\treturn EXIT.usage;\n\t\t\t}\n\t\t\tconst both = values.path !== true && values.hook !== true;\n\t\t\tprocess.stdout.write(\n\t\t\t\tprofileBlock(shell, context.dirs.home, {\n\t\t\t\t\tpath: both || values.path === true,\n\t\t\t\t\thook: both || values.hook === true,\n\t\t\t\t}),\n\t\t\t);\n\t\t\treturn EXIT.ok;\n\t\t}\n\t\tcase 'doctor':\n\t\t\treturn doctor(context);\n\t\tcase 'which': {\n\t\t\tconst result = await resolveNpm([], process.cwd(), {\n\t\t\t\thome: context.dirs.home,\n\t\t\t\t...(options.env === undefined ? {} : { env: options.env }),\n\t\t\t});\n\t\t\tcontext.io.out(context.json ? JSON.stringify(result, null, 2) : describeWhich(result));\n\t\t\treturn EXIT.ok;\n\t\t}\n\t\tcase 'pin':\n\t\t\treturn pin(context, rest[0]);\n\t\tcase 'install':\n\t\t\treturn install(context, rest[0]);\n\t\tcase 'cache': {\n\t\t\tif (rest[0] === 'list') {\n\t\t\t\treturn cacheList(context);\n\t\t\t}\n\t\t\tif (rest[0] === 'prune') {\n\t\t\t\treturn cachePrune(\n\t\t\t\t\tcontext,\n\t\t\t\t\tvalues['older-than'] === undefined ? DEFAULT_PRUNE_DAYS : Number(values['older-than']),\n\t\t\t\t);\n\t\t\t}\n\t\t\tcontext.io.err('cache needs list or prune');\n\t\t\treturn EXIT.usage;\n\t\t}\n\t\tcase 'self-update':\n\t\t\treturn selfUpdate(context, { rollback: values.rollback ?? false });\n\t\tcase 'recover': {\n\t\t\tif (values.journal === undefined || values['confirm-dead-machine'] === undefined) {\n\t\t\t\tcontext.io.err('recover needs --journal <id> and --confirm-dead-machine <machine-id>');\n\t\t\t\treturn EXIT.usage;\n\t\t\t}\n\t\t\treturn recover(context, values.journal, values['confirm-dead-machine']);\n\t\t}\n\t\tcase 'verify-attestation': {\n\t\t\t// Internal: self-update runs it in a child Node whose env carries the proxy and CA settings.\n\t\t\tif (values.bundle === undefined || values['tuf-cache'] === undefined) {\n\t\t\t\treturn EXIT.usage;\n\t\t\t}\n\t\t\tconst { verifyBundleHere } = await import('../install/provenance.ts');\n\t\t\tawait verifyBundleHere(JSON.parse(readFileSync(values.bundle, 'utf8')), values['tuf-cache']);\n\t\t\treturn EXIT.ok;\n\t\t}\n\t\tcase 'uninstall':\n\t\t\treturn uninstall(context, {\n\t\t\t\tyes: values.yes ?? false,\n\t\t\t\tpurgeCache: values['purge-cache'] ?? false,\n\t\t\t});\n\t\tdefault:\n\t\t\treturn EXIT.usage;\n\t}\n}\n\nfunction describeWhich(result: ResolveResult): string {\n\tconst where =\n\t\tresult.kind === 'own' ? \"Node's own npm\" : result.kind === 'cached' ? 'cached' : 'to download';\n\tconst from =\n\t\tresult.source === null\n\t\t\t? 'no project requirement'\n\t\t\t: `${result.source.field} in ${result.source.file}`;\n\tconst lines = [`npm ${result.version} (${where}): ${result.cliPath}`, `Source: ${from}`];\n\tif (result.warning !== null) {\n\t\tlines.push(`Warning: ${result.warning}`);\n\t}\n\treturn lines.join('\\n');\n}\n\nfunction reportError(error: unknown, context: CommandContext): number {\n\tif (isNpmVmError(error)) {\n\t\tcontext.io.err(`npm-vm: ${error.message}`);\n\t\treturn error.exitCode;\n\t}\n\tcontext.io.err(\n\t\t`npm-vm: ${error instanceof Error ? (error.stack ?? error.message) : String(error)}`,\n\t);\n\treturn EXIT.problems;\n}\n\ndeclare const NPM_VM_BUILD_VERSION: string | undefined;\n\n/** The build injects the package version; running from source reads the manifest instead. */\nfunction readSelfVersion(): string {\n\tif (typeof NPM_VM_BUILD_VERSION === 'string') {\n\t\treturn NPM_VM_BUILD_VERSION;\n\t}\n\ttry {\n\t\tconst manifest = JSON.parse(\n\t\t\treadFileSync(new URL('../../package.json', import.meta.url), 'utf8'),\n\t\t) as { version?: string };\n\t\treturn manifest.version ?? '0.0.0';\n\t} catch {\n\t\treturn '0.0.0';\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAOA,MAAa,WAAW;AACxB,MAAa,gBAAgB;AAC7B,MAAa,YAAY;CAAC;CAAO;CAAO;AAAQ;AAUhD,MAAM,SAAS;;AAGf,SAAgB,eAAe,MAAoB;CAClD,MAAM,QAAQ,OAAO,KAAK,IAAI;CAC9B,IAAI,UAAU,MAAM;EACnB,MAAM,QAAQ,MAAM,OAAO,QAAQ,MAAM,OAAO,OAAO,iBAAiB,IAAI,MAAM,GAAG;EACrF,MAAM,IAAI,WACT,cACA,KAAK,OACL,mBAAmB,KAAK,YAAY,MAAM,qGAC3C;CACD;AACD;AAEA,SAAS,WAAW,MAAuC;CAC1D,OAAO,SAAS,WAAW,QAAQ;AACpC;;;;;AAMA,SAAgB,eAAuB;CACtC,MAAM,OAAO,YAAY;CACzB,KAAK,MAAM,aAAa;EACvB,KAAK,MAAM,aAAa;EACxB,KAAK,MAAM,MAAM,aAAa;EAC9B,KAAK,MAAM,WAAW,aAAa;CACpC,GACC,IAAI,WAAW,KAAK,WAAW,SAAS,CAAC,GACxC,OAAO;CAGT,MAAM,IAAI,MAAM,4CAA4C,MAAM;AACnE;AAIA,SAAgB,aAAa,KAAa,MAA4B;CAErE,MAAM,OAAO,aAAa,KAAK,KAAK,GAAG,KAAK,MAAM,GAAG,MAAM;CAC3D,OAAO,SAAS,OAAO,KAAK,QAAQ,SAAS,IAAI,IAAI;AACtD;;AAGA,SAAgB,eACf,UACA,QACS;CACT,OAAO,SACL,QAAQ,gBAAgB,OAAO,OAAO,GAAG,CAAC,CAAC,CAC3C,QAAQ,sBAAsB,OAAO,SAAS,CAAC,CAC/C,QAAQ,qBAAqB,OAAO,QAAQ;AAC/C;;AAGA,SAAgB,UACf,MACA,MACA,YAAoB,aAAa,GACjC,MAAA,GACA,WAA4B,QAAQ,UAC3B;CAET,MAAM,EAAE,MAAM,aAAa,aAAa,UAAU,QAAQ;CAC1D,OAAO,eAAe,aAAa,WAAW,IAAI,GAAG;EACpD,WAAW,SAAS,MAAM,eAAe;EACzC,UAAU,WAAW,IAAI;EACzB;CACD,CAAC;AACF;;;;;AAMA,SAAgB,QACf,MACA,MACA,YAAoB,aAAa,GACjC,MAAA,GACS;CACT,OAAO,eAAe,aAAa,WAAW,KAAK,GAAG;EACrD,WAAW,MAAM,KAAK,MAAM,eAAe;EAC3C,UAAU,WAAW,IAAI;EACzB;CACD,CAAC;AACF;;AAGA,SAAgB,eACf,MACA,MACA,YAAoB,aAAa,GACjC,MAAA,GACS;CACT,OAAO,eAAe,aAAa,WAAW,KAAK,GAAG;EACrD,WAAW,MAAM,KAAK,MAAM,eAAe;EAC3C,UAAU,WAAW,IAAI;EACzB;CACD,CAAC;AACF;;AASA,SAAgB,YACf,MACA,UACA,UAAyB,CAAC,GACb;CACb,eAAe,IAAI;CACnB,MAAM,YAAY,QAAQ,aAAa,aAAa;CACpD,MAAM,MAAM,QAAQ,OAAA;CACpB,MAAM,QAAoB,CAAC;CAC3B,KAAK,MAAM,QAAQ,WAAW;EAC7B,MAAM,KAAK;GAAE;GAAM,SAAS,UAAU,MAAM,MAAM,WAAW,KAAK,QAAQ;GAAG,MAAM;EAAM,CAAC;EAC1F,IAAI,aAAa,SAAS;GACzB,MAAM,KAAK;IACV,MAAM,GAAG,KAAK;IACd,SAAS,QAAQ,MAAM,MAAM,WAAW,GAAG;IAC3C,MAAM;GACP,CAAC;GACD,IAAI,QAAQ,eAAe,OAC1B,MAAM,KAAK;IACV,MAAM,GAAG,KAAK;IACd,SAAS,eAAe,MAAM,MAAM,WAAW,GAAG;IAClD,MAAM;GACP,CAAC;EAEH;CACD;CACA,OAAO;AACR;;AAGA,SAAgB,QAAQ,SAAgC;CACvD,MAAM,QAAQ,iDAAiD,KAAK,OAAO;CAC3E,OAAO,UAAU,OAAO,OAAO,OAAO,MAAM,MAAM,MAAM,EAAE;AAC3D;AAEA,SAAgB,QAAQ,MAAsB;CAC7C,OAAO,KAAK,MAAM,QAAQ;AAC3B;;AAGA,SAAgB,qBAAqB,MAAwB;CAC5D,OAAO,UAAU,KAAK,SAAS,KAAK,QAAQ,IAAI,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,SAAS;EACnF,IAAI;GACH,OAAO,QAAQ,aAAa,MAAM,MAAM,CAAC,MAAM;EAChD,QAAQ;GACP,OAAO;EACR;CACD,CAAC;AACF;;;AC/KA,MAAa,SAAS;CAAC;CAAO;CAAQ;CAAQ;AAAY;AAG1D,SAAgB,QAAQ,OAA+B;CACtD,OAAQ,OAA6B,SAAS,KAAK;AACpD;AAEA,MAAa,cAAc;AAC3B,MAAa,YAAY;;AAGzB,SAAS,UAAU,MAAsB;CACxC,OAAO,KAAK,QAAQ,gBAAgB,SAAS,KAAK,MAAM;AACzD;;AAGA,SAAS,SAAS,OAAc,MAAsB;CACrD,IAAI,UAAU,cACb,OAAO,MAAM,KAAK,MAAM,QAAQ;CAGjC,OAAO,QAAQ,aAAa,UAAU,QAAQ,IAAI,CAAC,CAAC,QAAQ,OAAO,GAAG,IAAI,QAAQ,IAAI;AACvF;AAEA,SAAgB,YAAY,OAAc,MAAsB;CAC/D,eAAe,IAAI;CACnB,MAAM,QAAQ,SAAS,OAAO,IAAI;CAClC,QAAQ,OAAR;EACC,KAAK;EACL,KAAK,QACJ,OAAO;GACN;GACA,QAAQ,MAAM;GACd,qBAAqB,MAAM;GAC3B;GACA;EACD,CAAC,CAAC,KAAK,IAAI;EACZ,KAAK,QACJ,OAAO;GACN,uBAAuB,MAAM;GAC7B,qBAAqB,MAAM;GAC3B;GACA;EACD,CAAC,CAAC,KAAK,IAAI;EACZ,KAAK,cACJ,OAAO;GACN,iEAAiE,MAAM;GACvE,oBAAoB,MAAM;GAC1B;GACA;EACD,CAAC,CAAC,KAAK,IAAI;CACb;AACD;;;;;AAMA,SAAgB,YAAY,OAAc,MAAsB;CAC/D,eAAe,IAAI;CACnB,MAAM,QAAQ,SAAS,OAAO,IAAI;CAClC,QAAQ,OAAR;EACC,KAAK,OACJ,OAAO;GACN;GACA;GACA,0BAA0B,MAAM;GAChC,cAAc,MAAM,aAAa,MAAM;GACvC;GACA;GACA;GACA;GACA;GACA;GACA;EACD,CAAC,CAAC,KAAK,IAAI;EACZ,KAAK,QACJ,OAAO;GACN;GACA;GACA;GACA,SAAS,MAAM;GACf;GACA;GACA,yBAAyB,UAAU,KAAK,EAAE;GAC1C;GACA;GACA,eAAe,MAAM;GACrB;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACD,CAAC,CAAC,KAAK,IAAI;EACZ,KAAK,QACJ,OAAO;GACN;GACA;GACA,kCAAkC,MAAM;GACxC,6CAA6C,MAAM;GACnD;GACA;GACA;GACA,6BAA6B,MAAM;GACnC;GACA;GACA;GACA;EACD,CAAC,CAAC,KAAK,IAAI;EACZ,KAAK,cACJ,OAAO;GACN;GACA;GACA;GACA;GACA;GACA;GACA;GACA,qBAAqB,MAAM;GAC3B;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACD,CAAC,CAAC,KAAK,IAAI;CACb;AACD;;AAGA,SAAgB,aACf,OACA,MACA,OACS;CACT,MAAM,OAAO,CACZ,MAAM,OAAO,YAAY,OAAO,IAAI,IAAI,IACxC,MAAM,OAAO,YAAY,OAAO,IAAI,IAAI,EACzC,CAAC,CACC,QAAQ,SAAS,SAAS,EAAE,CAAC,CAC7B,KAAK,EAAE;CACT,OAAO,GAAG,YAAY,IAAI,OAAO,UAAU;AAC5C;;;ACzIA,SAAgB,OAAO,SAAkC;CACxD,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK;AACzD;AAEA,SAAS,OAAO,SAA0B;CACzC,OAAO,CAAC,QAAQ,SAAS,CAAC,KAAK,OAAO,KAAK,QAAQ,SAAS,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,OAAO;AAC5F;AAEA,SAAgB,cAAc,MAA2B;CACxD,MAAM,QAAQ,KAAK,MAAM,OAAO,KAAK,CAAC,EAAA,CAAG;CACzC,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,CAAC,EAAA,CAAG,SAAS;CAC9C,IAAI,SAAS,KAAK,OAAO,GACxB,OAAO;CAER,IAAI,OAAO,KAAK,KAAK,GACpB,OAAO;CAER,OAAO,OAAO,IAAI,SAAS;AAC5B;AAEA,MAAa,UAAgB;CAC5B,MAAM;CACN,MAAM;CACN,QAAQ;CACR,UAAU;CACV,aAAa;CACb,eAAe;AAChB;;AAGA,SAAgB,YAAY,MAAoB;CAC/C,IAAI;CACJ,IAAI;EACH,OAAO,UAAU,IAAI;CACtB,QAAQ;EACP,OAAO;CACR;CACA,MAAM,OAAO,QAAQ,aAAa,UAAU,IAAI,KAAK,OAAO;CAC5D,IAAI,KAAK,eAAe,GACvB,OAAO;EACN,MAAM;EACN;EACA,QAAQ;EACR,UAAU;EACV,aAAa;EACb,eAAe,aAAa,IAAI;CACjC;CAED,IAAI,KAAK,YAAY,GACpB,OAAO;EACN,MAAM;EACN;EACA,QAAQ;EACR,UAAU;EACV,aAAa;EACb,eAAe;CAChB;CAED,IAAI,CAAC,KAAK,OAAO,GAChB,OAAO;EACN,MAAM;EACN;EACA,QAAQ;EACR,UAAU;EACV,aAAa;EACb,eAAe;CAChB;CAED,MAAM,UAAU,aAAa,IAAI;CACjC,MAAM,OAAO,OAAO,OAAO;CAC3B,OAAO;EACN,MAAM;EACN;EACA,QAAQ,OAAO,OAAO;EACtB,UAAU,OAAO,SAAS;EAC1B,aAAa,OAAO,cAAc,QAAQ,SAAS,MAAM,CAAC,IAAI;EAC9D,eAAe;CAChB;AACD;;AAGA,SAAgB,YAAY,MAAc,MAAqB;CAC9D,MAAM,MAAM,YAAY,IAAI;CAC5B,OACC,IAAI,SAAS,KAAK,QAAQ,IAAI,WAAW,KAAK,UAAU,IAAI,kBAAkB,KAAK;AAErF;;;AC7DA,SAAgB,YAAY,YAAoB,IAAoB;CACnE,OAAO,KAAK,YAAY,GAAG,GAAG,MAAM;AACrC;AAEA,SAAgB,YAAY,MAA8B;CACzD,IAAI;EACH,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;EACpD,OAAO,OAAO,OAAO,OAAO,YAAY,OAAO,OAAO,WAAW,WAAW,SAAS;CACtF,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAgB,aAAa,YAA+B;CAC3D,IAAI;CACJ,IAAI;EACH,QAAQ,YAAY,UAAU;CAC/B,QAAQ;EACP,OAAO,CAAC;CACT;CACA,OAAO,MACL,QAAQ,SAAS,KAAK,SAAS,OAAO,CAAC,CAAC,CACxC,KAAK,SAAS,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,CAClD,QAAQ,YAAgC,YAAY,IAAI;AAC3D;;;;;AAUA,SAAgB,WACf,YACA,MACA,OACA,QACA,SACA,OAAO,KACA;CACP,UAAU,YAAY;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACtD,MAAM,KAAK,GAAG,KAAK,GAAG,SAAS;CAC/B,MAAM,WAAW,YAAY,MAAM;CACnC,IAAI,SAAwB;CAC5B,IAAI,SAAS,SAAS,QAAQ;EAC7B,SAAS,KAAK,YAAY,GAAG,GAAG,KAAK;EACrC,aAAa,QAAQ,MAAM;CAC5B;CACA,IAAI,SAAwB;CAC5B,IAAI,YAAY,MAAM;EACrB,SAAS,KAAK,YAAY,GAAG,GAAG,KAAK;EACrC,YAAY,QAAQ,SAAS,GAAK;CACnC;CACA,MAAM,UAAmB;EACxB;EACA;EACA;EACA;EACA;EACA,UAAU,YAAY,OAAO,OAAO,OAAO,OAAO;EAClD;EACA;EACA;EACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;CACnC;CACA,YAAY,YAAY,YAAY,EAAE,GAAG,KAAK,UAAU,OAAO,GAAG,GAAK;CACvE,MAAM,SAAS,OAAO;CACtB,QAAQ,YAAY,OAAO;AAC5B;AAEA,SAAS,MAAM,SAAkB,SAA8B;CAC9D,IAAI,YAAY,MAAM;EACrB,uBAAuB;GACtB,IAAI,WAAW,QAAQ,MAAM,GAC5B,WAAW,QAAQ,MAAM;EAE3B,CAAC;EACD;CACD;CACA,YAAY,QAAQ,QAAQ,SAAS,QAAQ,IAAI;AAClD;AAEA,SAAS,QAAQ,YAAoB,SAAwB;CAC5D,KAAK,MAAM,WAAW,CAAC,QAAQ,QAAQ,QAAQ,MAAM,GACpD,IAAI,YAAY,MACf,OAAO,SAAS,EAAE,OAAO,KAAK,CAAC;CAGjC,OAAO,YAAY,YAAY,QAAQ,EAAE,GAAG,EAAE,OAAO,KAAK,CAAC;AAC5D;AAEA,SAAS,UAAU,QAA+B;CACjD,MAAM,OAAO,YAAY,MAAM;CAC/B,OAAO,KAAK,SAAS,SAAS,KAAK,SAAS;AAC7C;;;;;AAMA,SAAgB,eAAe,YAAoB,SAAkB,QAA8B;CAClG,MAAM,UAAU,UAAU,QAAQ,MAAM;CACxC,MAAM,SAAS,YAAY,QAAQ,MAAM,CAAC,CAAC,SAAS;CACpD,IAAI,QAAQ,aAAa,OAAO,CAAC,SAAS,YAAY,QAAQ,UAAU;EACvE,QAAQ,YAAY,OAAO;EAC3B,OAAO,SAAS,KAAK,QAAQ,EAAE;EAC/B;CACD;CACA,IAAI,YAAY,QAAQ,QAAQ,QAAQ,QAAQ,GAAG;EAClD,IAAI,QAAQ,aAAa,MAAM;GAC9B,MAAM,SAAS,IAAI;GACnB,OAAO,SAAS,KAAK,QAAQ,EAAE;EAChC,OAAO,IACN,QAAQ,WAAW,QACnB,WAAW,QAAQ,MAAM,KACzB,OAAO,aAAa,QAAQ,MAAM,CAAC,MAAM,QAAQ,UAChD;GACD,MAAM,SAAS,aAAa,QAAQ,MAAM,CAAC;GAC3C,OAAO,SAAS,KAAK,QAAQ,EAAE;EAChC,OAEC,OAAO,WAAW,KAAK,QAAQ,EAAE;EAElC,QAAQ,YAAY,OAAO;EAC3B;CACD;CAEA,OAAO,QAAQ,KAAK,QAAQ,MAAM;CAClC,QAAQ,YAAY,OAAO;AAC5B;;AAGA,SAAgB,oBACf,YACA,WACA,OACiB;CACjB,MAAM,SAAyB;EAC9B,UAAU,CAAC;EACX,UAAU,CAAC;EACX,YAAY,CAAC;EACb,SAAS,CAAC;EACV,SAAS,CAAC;CACX;CACA,KAAK,MAAM,WAAW,aAAa,UAAU,GAAG;EAC/C,IAAI,UAAU,KAAA,KAAa,CAAC,MAAM,SAAS,QAAQ,IAAI,GACtD;EAED,IAAI,QAAQ,MAAM,cAAc,aAAa,OAAO,QAAQ,KAAK,GAAG;GACnE,OAAO,QAAQ,KAAK,QAAQ,EAAE;GAC9B;EACD;EACA,eAAe,YAAY,SAAS,MAAM;CAC3C;CACA,OAAO;AACR;;AAGA,SAAgB,sBACf,YACA,IACA,oBACiB;CACjB,MAAM,SAAyB;EAC9B,UAAU,CAAC;EACX,UAAU,CAAC;EACX,YAAY,CAAC;EACb,SAAS,CAAC;EACV,SAAS,CAAC;CACX;CACA,MAAM,UAAU,YAAY,YAAY,YAAY,EAAE,CAAC;CACvD,IAAI,YAAY,MACf,MAAM,IAAI,MAAM,cAAc,GAAG,MAAM,YAAY;CAEpD,IAAI,QAAQ,MAAM,cAAc,oBAC/B,MAAM,IAAI,MACT,WAAW,GAAG,sBAAsB,QAAQ,MAAM,UAAU,QAAQ,oBACrE;CAED,eAAe,YAAY,SAAS,MAAM;CAC1C,OAAO;AACR;;;AC1NA,MAAa,YAAY;AACzB,MAAM,gBAAgB;AAYtB,SAAgB,SAAS,UAA0B;CAClD,OAAO,KAAK,UAAU,SAAS;AAChC;AAEA,SAAgB,SAAS,UAAqC;CAC7D,IAAI;EACH,MAAM,SAAS,KAAK,MAAM,aAAa,SAAS,QAAQ,GAAG,MAAM,CAAC;EAClE,IAAI,OAAO,OAAO,QAAQ,YAAY,OAAO,OAAO,UAAU,UAC7D,OAAO;EAER,OAAO;GACN,KAAK,OAAO;GACZ,OAAO,OAAO,OAAO,UAAU,WAAW,OAAO,QAAQ;GACzD,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;GACtD,WAAW,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;GACrE,WAAW,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;GACrE,OAAO,OAAO;EACf;CACD,QAAQ;EACP,OAAO;CACR;AACD;;AAGA,SAAgB,cAAc,QAA2B,WAA4B;CACpF,IAAI,WAAW,MACd,OAAO;CAER,IAAI,OAAO,cAAc,WACxB,OAAO;CAER,OAAO,OAAO,MAAM;AACrB;AAEA,SAAS,UAAU,MAAc,QAA6B;CAC7D,IAAI;EACH,cAAc,MAAM,KAAK,UAAU,MAAM,GAAG;GAAE,MAAM;GAAM,MAAM;EAAM,CAAC;CACxE,SAAS,OAAO;EACf,IAAK,MAAgC,SAAS,UAC7C,OAAO;EAGR,OAAO,MAAM,EAAE,OAAO,KAAK,CAAC;EAC5B,MAAM;CACP;CACA,OAAO;AACR;AAEA,SAAS,MAAM,IAA2B;CACzC,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;AACxD;;;;;AAMA,eAAsB,YACrB,UACA,OACA,UAA+B,CAAC,GAChB;CAChB,UAAU,UAAU;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACpD,MAAM,OAAO,SAAS,QAAQ;CAC9B,MAAM,SAAqB;EAAE,GAAG;EAAO,OAAO,SAAS;CAAE;CACzD,MAAM,WAAW,KAAK,IAAI,KAAK,QAAQ,UAAU;CACjD,IAAI,QAAQ;CACZ,SAAS;EACR,IAAI,UAAU,MAAM,MAAM,GACzB,OAAO;GACN;GACA,UAAU;IAET,IAAI,SAAS,QAAQ,CAAC,EAAE,UAAU,OAAO,OACxC,OAAO,MAAM,EAAE,OAAO,KAAK,CAAC;GAE9B;EACD;EAED,IAAI,KAAK,IAAI,IAAI,QAAQ,UAAU;GAClC,MAAM,SAAS,SAAS,QAAQ;GAChC,MAAM,UAAU,WAAW,QAAQ,OAAO,cAAc,MAAM;GAC9D,MAAM,OAAO,cAAc,QAAQ,MAAM,SAAS;GAClD,MAAM,IAAI,WAAW,YAAY,KAAK,UAAU,cAAc,MAAM,QAAQ,MAAM,OAAO,CAAC;EAC3F;EACA,MAAM,MAAM,KAAK;EACjB,QAAQ,KAAK,IAAI,QAAQ,GAAG,GAAI;CACjC;AACD;;;AC/FA,MAAM,SAAS;;AAIf,eAAsB,QACrB,SACA,MACA,MAAc,QAAQ,IAAI,GACR;CAClB,MAAM,MAAM,SAAS,KAAA,IAAY,QAAQ,MAAM;EAAE,GAAG,QAAQ;EAAK,gBAAgB;CAAK;CACtF,MAAM,YAAY,gBAAgB,cAAc,KAAK,QAAQ,KAAK,IAAI,CAAC;CACvE,MAAM,SAAS,MAAM,eAAe,CAAC,GAAG,KAAK,EAAE,IAAI,GAAG,SAAS;CAC/D,IAAI,OAAO,cAAc,MAAM;EAC9B,QAAQ,GAAG,IACV,QAAQ,OACL,KAAK,UAAU,MAAM,IACrB,kBAAkB,OAAO,QAAQ,iDACrC;EACA,OAAO,KAAK;CACb;CACA,MAAM,UAAU,MAAM,UAAU,OAAO,OAAO,SAAS;CACvD,QAAQ,MAAM,QAAQ;CACtB,QAAQ,GAAG,IACV,QAAQ,OACL,KAAK,UAAU;EAAE,GAAG;EAAQ,WAAW,QAAQ;CAAU,CAAC,IAC1D,OAAO,OAAO,QAAQ,eAAe,QAAQ,WACjD;CACA,OAAO,KAAK;AACb;AAWA,SAAgB,UAAU,SAAiC;CAC1D,MAAM,UAA4B,YAAY,QAAQ,KAAK,KAAK,CAAC,CAAC,KAAK,UAAU;EAChF,MAAM,OAAO,SAAS,MAAM,SAAmB;EAC/C,OAAO;GACN,SAAS,MAAM;GACf,WAAW,MAAM;GACjB,MAAM,MAAM;GACZ,UAAU,SAAS,OAAO,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,YAAY;GAC5D,YAAY,WAAW,MAAM,SAAmB,CAAC,CAAC,QAAQ,UAAU,UAAU,KAAK,CAAC,CAAC,CAAC;GACtF,YAAY,aAAa,MAAM,SAAmB,CAAC,EAAE,cAAc;EACpE;CACD,CAAC;CACD,IAAI,QAAQ,MACX,QAAQ,GAAG,IAAI,KAAK,UAAU;EAAE,OAAO,QAAQ,KAAK;EAAO;CAAQ,GAAG,MAAM,CAAC,CAAC;MACxE;EACN,MAAM,QAAQ,CAAC,GAAG,QAAQ,KAAK,OAAO;EACtC,KAAK,MAAM,SAAS,SACnB,MAAM,KACL,SAAS,MAAM,QAAQ,IAAI,MAAM,KAAK,cAAc,MAAM,YAAY,UAAU,MAAM,aAAa,IAAI,eAAe,MAAM,eAAe,IAC5I;EAED,IAAI,QAAQ,WAAW,GACtB,MAAM,KAAK,WAAW;EAEvB,QAAQ,GAAG,IAAI,MAAM,KAAK,IAAI,CAAC;CAChC;CACA,OAAO,KAAK;AACb;AAEA,eAAsB,WACrB,SACA,gBAAA,IACkB;CAClB,IAAI,CAAC,OAAO,SAAS,aAAa,KAAK,gBAAgB,GACtD,MAAM,IAAI,WACT,aACA,KAAK,OACL,mDACD;CAED,MAAM,OAAO,MAAM,YAAY,QAAQ,KAAK,OAAO,QAAQ,KAAK;CAChE,IAAI;EACH,oBAAoB,QAAQ,KAAK,SAAS,QAAQ,KAAK,QAAQ,EAAE;EAEjE,MAAM,YAAY,MAAM,YAAY,QAAQ,KAAK,OAAO,QAAQ,KAAK;EACrE,IAAI;EACJ,IAAI;GACH,SAAS,WAAW,QAAQ,KAAK,OAAO,QAAQ,OAAO,EACtD,UAAU,gBAAgB,OAC3B,CAAC;EACF,UAAU;GACT,UAAU,QAAQ;EACnB;EACA,QAAQ,GAAG,IACV,QAAQ,OACL,KAAK,UAAU,QAAQ,MAAM,CAAC,IAC9B,WAAW,OAAO,QAAQ,OAAO,SAAS,OAAO,KAAK,OAAO,YAAY,OAAO,QAAQ,OAAO,WACnG;CACD,UAAU;EACT,KAAK,QAAQ;CACd;CACA,OAAO,KAAK;AACb;;AAGA,eAAsB,QACrB,SACA,WACA,kBACkB;CAClB,MAAM,UAAU,aAAa,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,UAAU,MAAM,OAAO,SAAS;CACzF,IAAI,YAAY,KAAA,GACf,MAAM,IAAI,WACT,aACA,KAAK,OACL,cAAc,UAAU,SAAS,QAAQ,KAAK,QAAQ,EACvD;CAED,IAAI,QAAQ,MAAM,cAAc,kBAC/B,MAAM,IAAI,WACT,aACA,KAAK,OACL,WAAW,UAAU,sBAAsB,QAAQ,MAAM,UAAU,QAAQ,iBAAiB,EAC7F;CAED,IAAI,QAAQ,MAAM,cAAc,QAAQ,KAAK,QAAQ,MAAM,OAAO,QAAQ,KAAK,GAC9E,MAAM,IAAI,WACT,YACA,KAAK,UACL,WAAW,UAAU,kBAAkB,QAAQ,MAAM,IAAI,0CAC1D;CAED,MAAM,OAAO,MAAM,YAAY,QAAQ,KAAK,OAAO,QAAQ,KAAK;CAChE,IAAI;EACH,MAAM,SAAS,sBAAsB,QAAQ,KAAK,SAAS,WAAW,gBAAgB;EACtF,QAAQ,GAAG,IACV,QAAQ,OAAO,KAAK,UAAU,MAAM,IAAI,aAAa,UAAU,IAAI,eAAe,MAAM,GACzF;CACD,UAAU;EACT,KAAK,QAAQ;CACd;CACA,OAAO,KAAK;AACb;AAEA,SAAS,eAAe,QAKb;CACV,IAAI,OAAO,SAAS,SAAS,GAC5B,OAAO;CAER,IAAI,OAAO,WAAW,SAAS,GAC9B,OAAO;CAER,IAAI,OAAO,QAAQ,SAAS,GAC3B,OAAO;CAER,OAAO;AACR;;;AC7IA,SAAgB,aAAwB;CACvC,MAAM,cAAc,QAAQ,QAAQ,MAAM,SAAS,QAAQ,OAAO,KAAK;CACvE,OAAO;EACN,MAAM,SAAS,QAAQ,OAAO,MAAM,GAAG,KAAK,GAAG;EAC/C,MAAM,SAAS,QAAQ,OAAO,MAAM,GAAG,KAAK,GAAG;EAC/C;EACA,MAAM,QAAQ,UAAU;GACvB,IAAI,CAAC,aACJ,OAAO;GAER,MAAM,KAAK,gBAAgB;IAAE,OAAO,QAAQ;IAAO,QAAQ,QAAQ;GAAO,CAAC;GAC3E,IAAI;IACH,MAAM,SAAS,MAAM,GAAG,SAAS,GAAG,SAAS,QAAQ;IACrD,OAAO,YAAY,KAAK,OAAO,KAAK,CAAC;GACtC,UAAU;IACT,GAAG,MAAM;GACV;EACD;CACD;AACD;AAEA,SAAgB,qBAAqB,SAAyC;CAC7E,MAAM,MAAM,QAAQ,OAAO,QAAQ;CACnC,MAAM,OAAO,YAAY,KAAK,QAAQ,IAAI;CAC1C,OAAO;EACN;EACA;EACA,UAAU,QAAQ;EAClB,OAAO,YAAY,KAAK,QAAQ,EAAE;EAClC,IAAI,QAAQ,MAAM,WAAW;EAC7B,MAAM,QAAQ,QAAQ;EACtB,SAAS,QAAQ;CAClB;AACD;;;ACjCA,MAAa,kBAAkB;AAC/B,MAAa,aAAa;AAkB1B,SAAS,cAAc,KAAuB;CAC7C,IAAI;EACH,OAAO,YAAY,GAAG,CAAC,CAAC,QAAQ,SAAS,oBAAoB,KAAK,IAAI,CAAC;CACxE,QAAQ;EACP,OAAO,CAAC;CACT;AACD;AAEA,SAAS,OAAO,KAAwB,UAA2B,MAAsB;CACxF,IAAI,IAAI,YACP,OAAO,IAAI;CAEZ,IAAI,aAAa,SAChB,OAAO,KAAK,IAAI,cAAc,KAAK,MAAM,WAAW,SAAS,GAAG,KAAK;CAEtE,IAAI,aAAa,UAChB,OAAO,KAAK,MAAM,WAAW,uBAAuB,KAAK;CAE1D,OAAO,KAAK,IAAI,oBAAoB,KAAK,MAAM,UAAU,OAAO,GAAG,KAAK;AACzE;;AAGA,SAAS,eAAe,KAAuC;CAC9D,MAAM,UAAU,IAAI;CACpB,IAAI,CAAC,SACJ,OAAO;CAER,IAAI;EACH,MAAM,WAAW,aAAa,KAAK,SAAS,cAAc,GAAG,MAAM;EAEnE,OADa,kBAAkB,KAAK,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,KAC1C;CAChB,QAAQ;EACP,OAAO;CACR;AACD;;AAGA,SAAgB,WAAW,QAAgB,UAAmC;CAC7E,IAAI,OAAO;CACX,IAAI;EACH,OAAO,aAAa,MAAM;CAC3B,QAAQ,CAER;CACA,OAAO,aAAa,UAAU,KAAK,YAAY,IAAI;AACpD;AAEA,SAAgB,iBACf,MAAyB,QAAQ,KACjC,WAA4B,QAAQ,UACpC,OAAe,IAAI,WAAW,QAAQ,GACtB;CAChB,MAAM,WAA0B,CAAC;CACjC,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,OAAO,YAA+B;EAC3C,MAAM,MAAM,WAAW,QAAQ,QAAQ,QAAQ;EAC/C,IAAI,CAAC,KAAK,IAAI,GAAG,KAAK,WAAW,QAAQ,MAAM,GAAG;GACjD,KAAK,IAAI,GAAG;GACZ,SAAS,KAAK,OAAO;EACtB;CACD;CACA,MAAM,SAAS,IAAI,cAAc,KAAK,MAAM,MAAM;CAClD,KAAK,MAAM,WAAW,cAAc,KAAK,QAAQ,YAAY,MAAM,CAAC,GACnE,IAAI;EACH,SAAS;EACT,SAAS,QAAQ,QAAQ,MAAM,EAAE;EACjC,QAAQ,KAAK,QAAQ,YAAY,QAAQ,SAAS,KAAK;CACxD,CAAC;CAEF,MAAM,MAAM,KAAK,OAAO,KAAK,UAAU,IAAI,GAAG,eAAe;CAC7D,KAAK,MAAM,WAAW,cAAc,GAAG,GAAG;EACzC,MAAM,eAAe,KAAK,KAAK,SAAS,cAAc;EACtD,IAAI;GACH,SAAS;GACT,SAAS,QAAQ,QAAQ,MAAM,EAAE;GACjC,QAAQ,aAAa,UAAU,eAAe,KAAK,cAAc,KAAK;EACvE,CAAC;CACF;CACA,IAAI,aAAa,SAAS;EACzB,MAAM,OAAO,eAAe,GAAG;EAC/B,IAAI,SAAS,MACZ,KAAK,MAAM,WAAW,cAAc,IAAI,GACvC,IAAI;GACH,SAAS;GACT,SAAS,QAAQ,QAAQ,MAAM,EAAE;GACjC,QAAQ,KAAK,MAAM,OAAO;EAC3B,CAAC;CAGJ;CACA,OAAO;AACR;;AAUA,SAAgB,YACf,MACA,UACA,YACe;CACf,MAAM,UAAwB,CAAC;CAC/B,KAAK,MAAM,QAAQ,CAAC,OAAO,KAAK,GAA0C;EACzE,QAAQ,KAAK;GAAE;GAAM,SAAS,UAAU,MAAM,IAAI;GAAG,MAAM;EAAM,CAAC;EAClE,IAAI,aAAa,SAAS;GACzB,QAAQ,KAAK;IAAE,MAAM,GAAG,KAAK;IAAO,SAAS,QAAQ,MAAM,IAAI;IAAG,MAAM;GAAM,CAAC;GAC/E,QAAQ,KAAK;IACZ,MAAM,GAAG,KAAK;IACd,SAAS,aAAa,eAAe,MAAM,IAAI,IAAI;IACnD,MAAM;GACP,CAAC;EACF;CACD;CACA,OAAO;AACR;;AAWA,SAAS,iBAAiB,MAAc,cAAsB,MAAkB;CAC/E,IAAI,KAAK,SAAS,WACjB,YAAY,aAAa,IAAI,GAAG,YAAY;MAE5C,aAAa,MAAM,YAAY;AAEjC;;AAGA,SAAS,gBAAgB,MAAY,OAAoB,OAAyB;CACjF,MAAM,eAAe,MAAM;CAC3B,IAAI,MAAM,SAAS,SAAS,WAAW;EACtC,WAAW,KAAK,SAAS,QAAQ,OAAO,MAAM,QAAQ,IAAI;EAC1D,uBAAuB,WAAW,cAAc,MAAM,MAAM,CAAC;EAC7D;CACD;CACA,WACC,KAAK,SACL,QACA,OACA,MAAM,QACN,aAAa,YAAY,GACzB,MAAM,SAAS,QAAQ,GACxB;CACA,OAAO,cAAc,EAAE,OAAO,KAAK,CAAC;AACrC;;;;;;AAOA,SAAgB,QACf,MACA,OACA,QACA,QACa;CACb,MAAM,OAAO,KAAK,QAAQ,OAAO,IAAI;CACrC,MAAM,eAAe,GAAG,OAAO;CAC/B,MAAM,QAAQ,UAAU,IAAI,CAAC,CAAC,QAAQ,MAAM,UAAU,MAAM,WAAW,IAAI;CAC3E,IAAI,UAAU,YAAY,IAAI;CAC9B,IACC,QAAQ,SAAS,aACjB,UAAU,KAAA,KACV,MAAM,KAAK,SAAS,aACpB,MAAM,iBAAiB,QACvB,WAAW,MAAM,YAAY,GAC5B;EAED,gBAAgB,MAAM,OAAO,KAAK;EAClC,SAAO,MAAM,KAAK;EAClB,UAAU,YAAY,IAAI;CAC3B;CACA,IAAI,OAAO,YAAY,MACtB,OAAO,UAAU,MAAM,OAAO,QAAQ,OAAO,MAAM,KAAK;CAEzD,IACC,QAAQ,SAAS,aACjB,UAAU,KAAA,KACV,MAAM,KAAK,SAAS,aACpB,MAAM,iBAAiB,QACvB,YAAY,MAAM,cAAc,MAAM,QAAQ,GAC7C;EAED,WAAW,KAAK,SAAS,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO,SAAS,MAAM,GAAG,OAAO,IAAI;EAC9F,OAAO,MAAM;GAAE,GAAG;GAAO,MAAM,YAAY,IAAI;GAAG,2BAAU,IAAI,KAAK,EAAA,CAAE,YAAY;EAAE,CAAC;EACtF,OAAO;GAAE,QAAQ;GAAM,SAAS;EAAS;CAC1C;CACA,IAAI,QAAQ,SAAS,WACpB,OAAO;EAAE,QAAQ;EAAM,SAAS;CAAU;CAE3C,IAAI,QAAQ,SAAS,UAAU,aAAa,MAAM,MAAM,MAAM,OAAO,SAAS;EAC7E,IAAI,UAAU,KAAA,GACb,OAAO,MAAM;GACZ;GACA,MAAM,OAAO;GACb,QAAQ;GACR,cAAc,WAAW,YAAY,IAAI,eAAe;GACxD,UAAU,YAAY,YAAY;GAClC,MAAM;GACN,2BAAU,IAAI,KAAK,EAAA,CAAE,YAAY;EAClC,CAAC;OACK,IAAI,MAAM,KAAK,SAAS,WAE9B,OAAO,MAAM;GAAE,GAAG;GAAO,MAAM;GAAS,2BAAU,IAAI,KAAK,EAAA,CAAE,YAAY;EAAE,CAAC;EAE7E,OAAO;GAAE,QAAQ;GAAM,SAAS;EAAU;CAC3C;CACA,IAAI,UAAU,KAAA,KAAa,YAAY,MAAM,MAAM,IAAI,GAAG;EAEzD,WAAW,KAAK,SAAS,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO,SAAS,MAAM,GAAG,OAAO,IAAI;EAC9F,OAAO,MAAM;GAAE,GAAG;GAAO,MAAM,YAAY,IAAI;GAAG,2BAAU,IAAI,KAAK,EAAA,CAAE,YAAY;EAAE,CAAC;EACtF,OAAO;GAAE,QAAQ;GAAM,SAAS;EAAS;CAC1C;CACA,IAAI,UAAU,KAAA,KAAa,CAAC,YAAY,MAAM,MAAM,QAAQ,GAC3D,OAAO;EAAE,QAAQ;EAAM,SAAS;EAAW,QAAQ;CAAiC;CAErF,IAAI,WAAW,YAAY,KAAK,CAAC,YAAY,cAAc,OAAO,GACjE,OAAO;EAAE,QAAQ;EAAM,SAAS;EAAW,QAAQ,GAAG,aAAa;CAAiB;CAErF,IAAI;EACH,IAAI,CAAC,WAAW,YAAY,GAC3B,iBAAiB,MAAM,cAAc,OAAO;CAE9C,SAAS,OAAO;EACf,OAAO;GAAE,QAAQ;GAAM,SAAS;GAAc,QAAS,MAAgB;EAAQ;CAChF;CACA,MAAM,QAAoB;EACzB;EACA,MAAM,OAAO;EACb,QAAQ;EACR;EACA,UAAU;EACV,MAAM;EACN,2BAAU,IAAI,KAAK,EAAA,CAAE,YAAY;CAClC;CACA,OAAO,MAAM,KAAK;CAClB,IAAI;EACH,WAAW,KAAK,SAAS,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO,SAAS,MAAM,GAAG,OAAO,IAAI;CAC/F,SAAS,OAAO;EACf,OAAO;GAAE,QAAQ;GAAM,SAAS;GAAc,QAAS,MAAgB;EAAQ;CAChF;CACA,OAAO,MAAM;EAAE,GAAG;EAAO,MAAM,YAAY,IAAI;CAAE,CAAC;CAClD,OAAO;EAAE,QAAQ;EAAM,SAAS;CAAS;AAC1C;;AAGA,SAAS,UACR,MACA,OACA,QACA,MACA,OACa;CACb,MAAM,OAAO,KAAK,QAAQ,IAAI;CAC9B,MAAM,eAAe,GAAG,OAAO;CAC/B,MAAM,UAAU,YAAY,IAAI;CAChC,IAAI,UAAU,KAAA,KAAa,MAAM,KAAK,SAAS,aAAa,YAAY,MAAM,MAAM,IAAI,GAAG;EAE1F,WAAW,KAAK,SAAS,QAAQ,OAAO,MAAM,IAAI;EAClD,OAAO,MAAM;GAAE,GAAG;GAAO,MAAM;GAAS,2BAAU,IAAI,KAAK,EAAA,CAAE,YAAY;EAAE,CAAC;EAC5E,OAAO;GAAE,QAAQ;GAAM,SAAS;EAAS;CAC1C;CACA,IAAI,QAAQ,SAAS,WAAW;EAC/B,IAAI,UAAU,KAAA,KAAa,WAAW,YAAY,GAAG;GAEpD,OAAO,MAAM;IACZ;IACA;IACA,QAAQ;IACR;IACA,UAAU,YAAY,YAAY;IAClC,MAAM;IACN,2BAAU,IAAI,KAAK,EAAA,CAAE,YAAY;GAClC,CAAC;GACD,OAAO;IAAE,QAAQ;IAAM,SAAS;GAAU;EAC3C;EACA,OAAO;GACN,QAAQ;GACR,SAAS,UAAU,KAAA,KAAa,WAAW,YAAY,IAAI,YAAY;EACxE;CACD;CACA,IAAI,UAAU,KAAA,KAAa,CAAC,YAAY,MAAM,MAAM,QAAQ,GAC3D,OAAO;EAAE,QAAQ;EAAM,SAAS;EAAW,QAAQ;CAAiC;CAErF,IAAI,WAAW,YAAY,KAAK,CAAC,YAAY,cAAc,OAAO,GACjE,OAAO;EAAE,QAAQ;EAAM,SAAS;EAAW,QAAQ,GAAG,aAAa;CAAiB;CAErF,IAAI;EACH,uBAAuB,WAAW,MAAM,YAAY,CAAC;CACtD,SAAS,OAAO;EACf,OAAO;GAAE,QAAQ;GAAM,SAAS;GAAc,QAAS,MAAgB;EAAQ;CAChF;CACA,OAAO,MAAM;EACZ;EACA;EACA,QAAQ;EACR;EACA,UAAU;EACV,MAAM;EACN,2BAAU,IAAI,KAAK,EAAA,CAAE,YAAY;CAClC,CAAC;CAED,OAAO;EAAE,QAAQ;EAAM,SAAS;CAAS;AAC1C;;AAKA,SAAgB,UAAU,MAAY,OAAoB,OAAkC;CAC3F,MAAM,UAAU,YAAY,MAAM,MAAM;CACxC,MAAM,cAAc,MAAM,iBAAiB,QAAQ,WAAW,MAAM,YAAY;CAChF,IAAI,QAAQ,SAAS,WAAW;EAC/B,IAAI,eAAe,YAAY,MAAM,cAAwB,MAAM,QAAQ,GAAG;GAC7E,gBAAgB,MAAM,OAAO,KAAK;GAClC,SAAO,MAAM,KAAK;GAClB,OAAO;EACR;EACA,IAAI,aACH,OAAO;EAER,SAAO,MAAM,KAAK;EAClB,OAAO;CACR;CACA,IAAI,MAAM,KAAK,SAAS,WAEvB,OAAO;CAER,IAAI,CAAC,YAAY,MAAM,QAAQ,MAAM,IAAI,GACxC,OAAO;CAER,IAAI,aACH,gBAAgB,MAAM,OAAO,KAAK;MAElC,WAAW,KAAK,SAAS,QAAQ,OAAO,MAAM,QAAQ,IAAI;CAE3D,SAAO,MAAM,KAAK;CAClB,OAAO;AACR;AAEA,SAAS,OAAO,MAAY,OAAyB;CACpD,MAAM,QAAQ,UAAU,IAAI;CAC5B,MAAM,UAAU,CAAC,GAAG,MAAM,QAAQ,QAAQ,SAAS,KAAK,WAAW,MAAM,MAAM,GAAG,KAAK;CACvF,WAAW,MAAM,KAAK;AACvB;AAEA,SAASA,SAAO,MAAY,OAAyB;CACpD,MAAM,QAAQ,UAAU,IAAI;CAC5B,MAAM,UAAU,MAAM,QAAQ,QAAQ,SAAS,KAAK,WAAW,MAAM,MAAM;CAC3E,WAAW,MAAM,KAAK;AACvB;AAEA,SAAgB,UAAU,MAAuB;CAChD,IAAI;EACH,MAAM,SAAS,KAAK,MAAM,aAAa,KAAK,KAAK,OAAO,UAAU,GAAG,MAAM,CAAC;EAC5E,OAAO,MAAM,QAAQ,OAAO,OAAO,IAAI,SAAS;GAAE,SAAS;GAAG,SAAS,CAAC;EAAE;CAC3E,QAAQ;EACP,OAAO;GAAE,SAAS;GAAG,SAAS,CAAC;EAAE;CAClC;AACD;AAEA,SAAgB,WAAW,MAAY,OAAwB;CAC9D,YAAY,KAAK,KAAK,OAAO,UAAU,GAAG,KAAK,UAAU,OAAO,MAAM,GAAI,GAAG,GAAK;AACnF;;AAGA,SAAgB,UAAU,OAAqD;CAC9E,MAAM,OAAO,YAAY,MAAM,MAAM,CAAC,CAAC;CACvC,IAAI,MAAM,KAAK,SAAS,WAAW;EAElC,MAAM,YACL,MAAM,iBAAiB,QAAQ,YAAY,MAAM,cAAc,MAAM,QAAQ;EAC9E,OAAO,SAAS,YAAa,YAAY,WAAW,YAAa;CAClE;CACA,IAAI,SAAS,WACZ,OAAO;CAER,OAAO,YAAY,MAAM,QAAQ,MAAM,IAAI,IAAI,WAAW;AAC3D;;;ACzaA,MAAa,iBAAiB;AAE9B,MAAa,eAAe;AAC5B,MAAa,gBAAgB;AAC7B,MAAa,gBAAgB;AAC7B,MAAa,eAAe;;;;;AAY5B,SAAgB,iBAAgC;CAC/C,MAAM,OAAO,YAAY;CACzB,MAAM,aAAa;EAClB;EACA,KAAK,MAAM,SAAS;EACpB,KAAK,MAAM,MAAM,QAAQ,SAAS;EAClC,KAAK,MAAM,MAAM,MAAM,QAAQ,SAAS;CACzC;CACA,KAAK,MAAM,aAAa,YACvB,IAAI,WAAW,KAAK,WAAA,aAAuB,CAAC,KAAK,WAAW,KAAK,WAAA,eAAyB,CAAC,GAC1F,OAAO;CAGT,OAAO;AACR;AAEA,SAAgB,WAAW,MAAc,SAAyB;CACjE,OAAO,KAAK,MAAM,cAAc,OAAO;AACxC;AAEA,SAAS,SAAS,MAAc,IAAY,OAAiB,SAAS,IAAU;CAC/E,UAAU,IAAI;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CAC9C,KAAK,MAAM,QAAQ,YAAY,IAAI,GAAG;EACrC,MAAM,SAAS,KAAK,MAAM,IAAI;EAC9B,MAAM,SAAS,KAAK,IAAI,IAAI;EAC5B,IAAI,SAAS,MAAM,CAAC,CAAC,YAAY,GAChC,SAAS,QAAQ,QAAQ,OAAO,GAAG,SAAS,KAAK,EAAE;OAC7C;GACN,aAAa,QAAQ,MAAM;GAC3B,MAAM,KAAK,GAAG,SAAS,MAAM;EAC9B;CACD;AACD;;;;;AAMA,SAAgB,eACf,MACA,SACA,SACA,KACS;CACT,MAAM,WAAW,KAAK,MAAM,YAAY;CACxC,UAAU,UAAU;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACpD,MAAM,SAAS,WAAW,MAAM,OAAO;CACvC,MAAM,UAAU,KAAK,UAAU,IAAI,QAAQ,GAAG,QAAQ,IAAI,GAAG,KAAK,IAAI,GAAG;CACzE,OAAO,SAAS;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAChD,MAAM,QAAkB,CAAC;CACzB,SAAS,SAAS,SAAS,KAAK;CAChC,MAAM,WAA4B;EAAE;EAAS;EAAK,OAAO,MAAM,SAAS;CAAE;CAC1E,cAAc,KAAK,SAAS,aAAa,GAAG,KAAK,UAAU,UAAU,MAAM,GAAI,CAAC;CAEhF,MAAM,WAAW,KAAK,UAAU,IAAI,QAAQ,YAAY,QAAQ,IAAI,GAAG,KAAK,IAAI,GAAG;CACnF,IAAI,WAAW,MAAM,GACpB,aAAa,QAAQ,QAAQ;CAE9B,IAAI;EACH,aAAa,SAAS,MAAM;CAC7B,SAAS,OAAO;EACf,IAAI,WAAW,QAAQ,GACtB,aAAa,UAAU,MAAM;EAE9B,MAAM;CACP;CACA,gBAAgB,QAAQ;CACxB,OAAO;AACR;AASA,SAAgB,YAAY,MAA6B;CACxD,IAAI;EACH,OAAO,aAAa,KAAK,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,KAAK;CAC5D,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAgB,aAAa,MAA6B;CACzD,IAAI;EACH,OAAO,aAAa,KAAK,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,KAAK;CAC7D,QAAQ;EACP,OAAO;CACR;AACD;AAUA,SAAgB,aAAa,MAAc,SAAyC;CACnF,IAAI;EACH,OAAO,KAAK,MACX,aAAa,KAAK,WAAW,MAAM,OAAO,GAAG,aAAa,GAAG,MAAM,CACpE;CACD,QAAQ;EACP,OAAO;CACR;AACD;;AAGA,SAAgB,cAAc,MAAoB;CACjD,IAAI;CACJ,IAAI;EACH,QAAQ,YAAY,KAAK,MAAM,YAAY,CAAC;CAC7C,QAAQ;EACP;CACD;CACA,KAAK,MAAM,QAAQ,OAAO;EACzB,MAAM,QAAQ,sBAAsB,KAAK,IAAI;EAC7C,IAAI,UAAU,QAAQ,WAAW,KAAK,MAAA,YAAoB,MAAM,IAAA,aAA0B,CAAC,GAC1F,gBAAgB,KAAK,MAAM,cAAc,IAAI,CAAC;CAEhD;AACD;;AAWA,SAAgB,WAAW,MAAc,SAAgC;CACxE,OAAO,aAAa,MAAM,OAAO,CAAC,EAAE,OAAO;AAC5C;;;ACjIA,MAAa,gBAAgB;AAE7B,MAAM,WAAW;AAEjB,SAAS,cAAc,MAAsB;CAC5C,KAAK,MAAM,QAAQ;EAAC;EAAiB;EAAe;CAAU,GAC7D,IAAI,WAAW,KAAK,MAAM,IAAI,CAAC,GAC9B,OAAO,KAAK,MAAM,IAAI;CAGxB,OAAO,KAAK,MAAM,eAAe;AAClC;;AAGA,SAAgB,kBACf,MACA,KACA,WAA4B,QAAQ,UACpB;CAChB,MAAM,MACL,SAAS,eAAe,eAAe,GAAG,IAAI,YAAY,cAAc,KAAK,QAAQ;CACtF,IAAI,QAAQ,MACX,OAAO;CAER,IAAI;EACH,MAAM,MAAM,aACX,KACA;GAAC;GAAc;GAAmB;GAAY;EAA8B,GAC5E;GACC,UAAU;GACV;GACA,aAAa;GACb,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACnC,CACD,CAAC,CAAC,KAAK;EACP,OAAO,QAAQ,KAAK,OAAO;CAC5B,QAAQ;EACP,OAAO;CACR;AACD;;AAGA,SAAgB,eACf,QACA,MAAyB,QAAQ,KACjC,WAA4B,QAAQ,UACpC,OAAe,IAAI,WAAW,QAAQ,GACpB;CAClB,MAAM,UAA2B,CAAC;CAClC,KAAK,MAAM,SAAS,QACnB,QAAQ,OAAR;EACC,KAAK,OAAO;GACX,MAAM,OAAO,IAAI,cAAc;GAC/B,QAAQ,KAAK;IAAE;IAAO,MAAM,KAAK,MAAM,SAAS;IAAG,OAAO;KAAE,MAAM;KAAM,MAAM;IAAM;GAAE,CAAC;GACvF,QAAQ,KAAK;IAAE;IAAO,MAAM,KAAK,MAAM,QAAQ;IAAG,OAAO;KAAE,MAAM;KAAO,MAAM;IAAK;GAAE,CAAC;GACtF;EACD;EACA,KAAK,QAAQ;GACZ,QAAQ,KAAK;IAAE;IAAO,MAAM,KAAK,MAAM,SAAS;IAAG,OAAO;KAAE,MAAM;KAAM,MAAM;IAAK;GAAE,CAAC;GACtF,MAAM,QAAQ,cAAc,IAAI;GAChC,IAAI,UAAU,KAAK,MAAM,SAAS,GACjC,QAAQ,KAAK;IAAE;IAAO,MAAM;IAAO,OAAO;KAAE,MAAM;KAAM,MAAM;IAAM;GAAE,CAAC;GAExE;EACD;EACA,KAAK,QAAQ;GACZ,MAAM,SAAS,IAAI,sBAAsB,KAAK,MAAM,SAAS;GAC7D,QAAQ,KAAK;IACZ;IACA,MAAM,KAAK,QAAQ,QAAQ,UAAU,aAAa;IAClD,OAAO;KAAE,MAAM;KAAM,MAAM;IAAK;GACjC,CAAC;GACD;EACD;EACA,KAAK,cAAc;GAClB,MAAM,QACL,aAAa,UAAU,CAAC,cAAc,MAAM,IAAI,CAAC,MAAM;GACxD,KAAK,MAAM,QAAQ,OAAO;IACzB,MAAM,OAAO,kBAAkB,MAAM,KAAK,QAAQ;IAClD,IAAI,SAAS,QAAQ,CAAC,QAAQ,MAAM,WAAW,OAAO,SAAS,IAAI,GAClE,QAAQ,KAAK;KAAE;KAAO;KAAM,OAAO;MAAE,MAAM;MAAM,MAAM;KAAK;IAAE,CAAC;GAEjE;GACA;EACD;CACD;CAED,OAAO;AACR;;AAGA,SAAgB,aACf,MACA,MAAyB,QAAQ,KACjC,WAA4B,QAAQ,UACpB;CAChB,IAAI;CACJ,IAAI;EACH,OAAO,UAAU,IAAI;CACtB,QAAQ;EACP,OAAO;CACR;CACA,IAAI,SAAS,QAAQ,KAAK,eAAe,GACxC,OAAO;CAER,IAAI,QAAQ,SAAS,OAAO,QAAQ,IAAI,IAAI;CAC5C,OAAO,CAAC,WAAW,KAAK,KAAK,QAAQ,KAAK,MAAM,OAC/C,QAAQ,QAAQ,KAAK;CAEtB,IAAI;EACH,WAAW,OAAO,UAAU,IAAI;CACjC,QAAQ;EACP,OAAO;CACR;CACA,IAAI;EACH,IAAI,aAAa,KAAK,CAAC,CAAC,WAAW,YAAY,GAC9C,OAAO;CAET,QAAQ,CAER;CACA,MAAM,UAAU,KAAK,IAAI,WAAW,QAAQ,GAAG,UAAU,SAAS,SAAS;CAC3E,IAAI,WAAW,KAAK,SAAS,OAAO,SAAS,IAAI,CAAC,CAAC,QAAQ,OAAO,EAAE,GAAG,CAAC,GACvE,OAAO;CAER,IAAI,aAAa,WAAW,SAAS,QAAQ,KAAK,SAAS,MAAM,GAChD;MAAA,aAAa,MAAM,MACzB,CAAC,CAAC,SAAS,+BAA+B,KAAK,gBAAgB,GAAG,MAAM,aACjF,OAAO;CAAA;CAGT,OAAO;AACR;;AAGA,SAAgB,gBAAgB,MAAyB,QAAQ,KAAoB;CACpF,IAAI;EACH,OAAO,aACN,eAAe,GAAG,GAClB;GAAC;GAAc;GAAmB;GAAY;EAAqB,GACnE;GACC,UAAU;GACV,aAAa;GACb,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACnC,CACD,CAAC,CAAC,KAAK;CACR,QAAQ;EACP,OAAO;CACR;AACD;;AAWA,SAAgB,UAAU,SAAwB,OAAuB;CACxE,MAAM,OAAO,WAAW;CACxB,IAAI,SAAS,KAAK,IAAI,GACrB,OAAO,KAAK,QAAQ,UAAU,KAAK;CAGpC,OAAO,GAAG,OADQ,SAAS,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,OAC/B,SAAS,KAAK,KAAK,OAAO;AACxD;;AAGA,SAAgB,aAAa,SAAyB;CACrD,MAAM,QAAQ,SAAS,KAAK,OAAO;CACnC,IAAI,UAAU,MACb,OAAO;CAER,IAAI,SAAS,QAAQ,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,QAAQ,QAAQ,IAAI;CAC/D,IAAI,WAAW,MACd,SAAS;CAEV,MAAM,QAAQ,QAAQ,MAAM,MAAM,QAAQ,MAAM,EAAE,CAAC,MAAM;CACzD,OAAO,WAAW,MAAM,UAAU,KAAK,GAAG,OAAO,IAAI,UAAU,GAAG,SAAS;AAC5E;AAEA,SAAgB,aAAa,SAAgC;CAC5D,MAAM,QAAQ,SAAS,KAAK,OAAO;CACnC,OAAO,UAAU,OAAO,OAAO,MAAM;AACtC;AAEA,SAAS,WAAW,MAAc,QAAuB,OAAuB;CAC/E,MAAM,WAAW,WAAW,OAAO,OAAO,aAAa,MAAM;CAC7D,MAAM,WAAW,aAAa,KAAK,KAAK;CACxC,MAAM,QAAQ,CAAC,OAAO,QAAQ,OAAO,MAAM;CAC3C,IAAI,aAAa,MAChB,MAAM,KACL,GAAG,SACD,QAAQ,CAAC,CACT,MAAM,IAAI,CAAC,CACX,KAAK,SAAS,IAAI,MAAM,CAC3B;CAED,MAAM,KACL,GAAG,SACD,QAAQ,CAAC,CACT,MAAM,IAAI,CAAC,CACX,KAAK,SAAS,IAAI,MAAM,CAC3B;CACA,OAAO,GAAG,MAAM,KAAK,IAAI,EAAE;AAC5B;;AAGA,SAAgB,gBAAgB,QAAuB,MAAkC;CACxF,MAAM,SAAS,WAAW,OAAO,IAAI,IAAI,aAAa,OAAO,MAAM,MAAM,IAAI;CAE7E,MAAM,QAAQ,UAAU,QADV,aAAa,OAAO,OAAO,MAAM,OAAO,KAClB,CAAC;CACrC,IAAI,WAAW,OACd,OAAO;CAER,OAAO;EAAE;EAAQ;EAAQ;EAAO,MAAM,WAAW,OAAO,MAAM,QAAQ,KAAK;CAAE;AAC9E;AAEA,SAAS,aAAa,MAAsB;CAC3C,MAAM,yBAAQ,IAAI,KAAK,EAAA,CAAE,YAAY,CAAC,CAAC,QAAQ,SAAS,GAAG;CAC3D,IAAI,YAAY,GAAG,KAAK,iBAAiB;CACzC,IAAI,UAAU;CACd,OAAO,WAAW,SAAS,GAAG;EAC7B,YAAY,GAAG,KAAK,iBAAiB,MAAM,GAAG;EAC9C,WAAW;CACZ;CACA,OAAO;AACR;;AAGA,SAAgB,iBAAiB,MAAY,OAAoB,MAAkC;CAClG,IAAI,SAAwB;CAC5B,IAAI,KAAK,WAAW,MAAM;EACzB,SAAS,aAAa,KAAK,OAAO,IAAI;EACtC,YAAY,QAAQ,KAAK,QAAQ,GAAK;CACvC;CACA,MAAM,OAAO,KAAK,WAAW,OAAO,MAAQ,YAAY,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ;CAClF,WACC,KAAK,SACL,WACA,OACA,KAAK,OAAO,MACZ,OAAO,KAAK,KAAK,OAAO,MAAM,GAC9B,IACD;CACA,MAAM,SAAwB;EAC7B,MAAM,KAAK,OAAO;EAClB,OAAO,KAAK,OAAO;EACnB,OAAO,KAAK,OAAO;EACnB,eAAe,OAAO,KAAK,KAAK;EAChC;EACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;CACnC;CACA,MAAM,WAAW,aAAa,IAAI;CAClC,SAAS,UAAU,CAAC,GAAG,SAAS,QAAQ,QAAQ,UAAU,MAAM,SAAS,OAAO,IAAI,GAAG,MAAM;CAC7F,cAAc,MAAM,QAAQ;CAC5B,OAAO;AACR;;AAKA,SAAgB,mBACf,MACA,OACA,QACgB;CAChB,IAAI,CAAC,WAAW,OAAO,IAAI,GAAG;EAC7B,OAAO,MAAM,MAAM;EACnB,OAAO;CACR;CACA,MAAM,UAAU,aAAa,OAAO,MAAM,MAAM;CAChD,IAAI,OAAO,OAAO,MAAM,OAAO,eAC9B,OAAO;CAER,MAAM,QAAQ,aAAa,OAAO;CAClC,WACC,KAAK,SACL,WACA,OACA,OAAO,MACP,MAAM,KAAK,MAAM,KAAK,OAAO,OAAO,KAAK,OAAO,MAAM,GACtD,YAAY,OAAO,IAAI,CAAC,CAAC,QAAQ,GAClC;CACA,OAAO,MAAM,MAAM;CACnB,OAAO;AACR;AAEA,SAAS,OAAO,MAAY,QAA6B;CACxD,MAAM,WAAW,aAAa,IAAI;CAClC,SAAS,UAAU,SAAS,QAAQ,QAAQ,UAAU,MAAM,SAAS,OAAO,IAAI;CAChF,cAAc,MAAM,QAAQ;AAC7B;AAEA,SAAgB,aAAa,MAA0B;CACtD,IAAI;EACH,MAAM,SAAS,KAAK,MACnB,aAAa,KAAK,KAAK,OAAO,aAAa,GAAG,MAAM,CACrD;EACA,OAAO,MAAM,QAAQ,OAAO,OAAO,IAAI,SAAS;GAAE,SAAS;GAAG,SAAS,CAAC;EAAE;CAC3E,QAAQ;EACP,OAAO;GAAE,SAAS;GAAG,SAAS,CAAC;EAAE;CAClC;AACD;AAEA,SAAgB,cAAc,MAAY,UAA8B;CACvE,YAAY,KAAK,KAAK,OAAO,aAAa,GAAG,KAAK,UAAU,UAAU,MAAM,GAAI,GAAG,GAAK;AACzF;;;ACnVA,SAAS,WAAW,KAAwB,SAAyB;CACpE,OAAO,aAAa,eAAe,GAAG,GAAG;EAAC;EAAc;EAAmB;EAAY;CAAO,GAAG;EAChG,UAAU;EACV;EACA,aAAa;EACb,OAAO;GAAC;GAAU;GAAQ;EAAM;CACjC,CAAC,CAAC,CAAC,KAAK;AACT;AAEA,SAAS,OAAO,KAAgC;CAC/C,OAAO,KAAK,IAAI,iBAAiB,eAAe,YAAY,SAAS;AACtE;AAEA,SAAS,MAAM,OAAuB;CACrC,OAAO,IAAI,MAAM,QAAQ,MAAM,IAAI,EAAE;AACtC;AAEA,SAAgB,aAAa,KAAgC;CAC5D,OAAO,WAAW,KAAK,uDAAuD;AAC/E;AAEA,SAAgB,cAAc,KAAwB,OAAqB;CAC1E,WAAW,KAAK,iDAAiD,MAAM,KAAK,EAAE,UAAU;AACzF;AAEA,SAAS,QAAQ,GAAW,GAAoB;CAC/C,OAAO,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC,YAAY;AACxF;;AAGA,SAAgB,cAAc,KAAwB,KAAsB;CAE3E,MAAM,QADU,aAAa,GACT,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,SAAS,SAAS,EAAE;CAC7D,IAAI,MAAM,MAAM,SAAS,QAAQ,MAAM,GAAG,CAAC,GAC1C,OAAO;CAER,cAAc,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC;CAC5C,OAAO;AACR;AAEA,SAAgB,mBAAmB,KAAwB,KAAsB;CAEhF,MAAM,QADU,aAAa,GACT,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,SAAS,SAAS,EAAE;CAC7D,MAAM,OAAO,MAAM,QAAQ,SAAS,CAAC,QAAQ,MAAM,GAAG,CAAC;CACvD,IAAI,KAAK,WAAW,MAAM,QACzB,OAAO;CAER,cAAc,KAAK,KAAK,KAAK,GAAG,CAAC;CACjC,OAAO;AACR;AAEA,MAAM,cAAc;AACpB,MAAM,eAAe;AAErB,SAAgB,eAAe,KAAuC;CACrE,IAAI;EACH,MAAM,MAAM,aAAa,OAAO,GAAG,GAAG;GAAC;GAAS;GAAa;GAAM;EAAS,GAAG;GAC9E,UAAU;GACV,aAAa;GACb,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACnC,CAAC;EACD,OAAO,wCAAwC,KAAK,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,KAAK;CAC1E,QAAQ;EACP,OAAO;CACR;AACD;;AAGA,SAAgB,eAAe,UAA0B;CACxD,OAAO,aAAa,SAAS,iBAAiB;AAC/C;;AAGA,SAAgB,sBAAsB,OAA8B;CACnE,IAAI,UAAU,MACb,OAAO;CAER,OAAO,MAAM,QAAQ,iDAAiD,EAAE,CAAC,CAAC,KAAK;AAChF;AAEA,SAAgB,cAAc,KAAwB,UAAwB;CAC7E,MAAM,OAAO,eAAe,QAAQ;CACpC,MAAM,OAAO,sBAAsB,eAAe,GAAG,CAAC;CACtD,MAAM,QAAQ,SAAS,KAAK,OAAO,GAAG,KAAK,KAAK;CAChD,aACC,OAAO,GAAG,GACV;EAAC;EAAO;EAAa;EAAM;EAAW;EAAM;EAAU;EAAM;EAAO;CAAI,GACvE;EACC,aAAa;EACb,OAAO;CACR,CACD;AACD;AAEA,SAAgB,gBAAgB,KAAiC;CAChE,MAAM,WAAW,eAAe,GAAG;CACnC,IAAI,aAAa,QAAQ,CAAC,SAAS,SAAS,OAAO,cAAc,GAChE,OAAO;CAER,MAAM,OAAO,sBAAsB,QAAQ;CAC3C,IAAI,SAAS,IACZ,aAAa,OAAO,GAAG,GAAG;EAAC;EAAU;EAAa;EAAM;EAAW;CAAI,GAAG;EACzE,aAAa;EACb,OAAO;CACR,CAAC;MAED,aACC,OAAO,GAAG,GACV;EAAC;EAAO;EAAa;EAAM;EAAW;EAAM;EAAU;EAAM;EAAM;CAAI,GACtE;EACC,aAAa;EACb,OAAO;CACR,CACD;CAED,OAAO;AACR;;AAGA,SAAgB,wBAAwB,QAAgC;CACvE,OAAO,WAAW,QAAQ,CAAC;EAAC;EAAc;EAAa;CAAW,CAAC,CAAC,SAAS,MAAM;AACpF;;AAGA,SAAgB,eACf,KACkD;CAClD,MAAM,UAA2D,CAAC;CAClE,IAAI;EACH,MAAM,MAAM,aACX,KAAK,IAAI,iBAAiB,eAAe,YAAY,WAAW,GAChE,CAAC,KAAK,GACN;GACC,UAAU;GACV;GACA,aAAa;GACb,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACnC,CACD;EACA,QAAQ,KAAK;GAAE,SAAS;GAAO,MAAM,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM;EAAK,CAAC;CACrE,QAAQ;EACP,QAAQ,KAAK;GAAE,SAAS;GAAO,MAAM;EAAK,CAAC;CAC5C;CACA,IAAI;EACH,QAAQ,KAAK;GACZ,SAAS;GACT,MAAM,WAAW,KAAK,wDAAwD,KAAK;EACpF,CAAC;CACF,QAAQ;EACP,QAAQ,KAAK;GAAE,SAAS;GAAc,MAAM;EAAK,CAAC;CACnD;CACA,OAAO;AACR;;;ACpIA,MAAM,mBAAmB;;AAGzB,SAAS,YAAY,OAAc,KAAuC;CACzE,MAAM,MAAM,YAAY,OAAO,GAAG;CAClC,IAAI,QAAQ,MACX,OAAO;CAGR,MAAM,OACL,UAAU,SACP;EAAC;EAAM;EAAM;EAAM;CAAkC,IACrD,UAAU,eACT;EAAC;EAAc;EAAY;CAA0B,IACrD,UAAU,QACT;EAAC;EAAM;EAAM;EAAM;CAA2D,IAC9E;EAAC;EAAM;EAAM;EAAM;CAAwC;CACjE,IAAI;EACH,MAAM,MAAM,aAAa,KAAK,MAAM;GACnC,UAAU;GACV;GACA,SAAS;GACT,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACnC,CAAC,CAAC,CACA,KAAK,CAAC,CACN,MAAM,IAAI,CAAC,CACX,IAAI;EACN,OAAO,QAAQ,KAAA,KAAa,QAAQ,KAAK,OAAO;CACjD,QAAQ;EACP,OAAO;CACR;AACD;;AAGA,SAAS,UAAU,MAAsB;CACxC,IAAI;EACH,OAAO,aAAa,OAAO,IAAI,CAAC,CAAC,YAAY;CAC9C,QAAQ;EACP,OAAO,KAAK,YAAY;CACzB;AACD;;AAGA,SAAgB,WAAW,QAA+C;CACzE,IAAI,OAAO,WAAW,QAAQ,GAC7B,OAAO;CAER,OAAO,WAAW,QAAQ,aAAa;AACxC;AAEA,SAAS,SAAS,GAAW,GAAW,UAAoC;CAC3E,OAAO,aAAa,UAAU,EAAE,YAAY,MAAM,EAAE,YAAY,IAAI,MAAM;AAC3E;AAEA,eAAsB,QAAQ,SAAgD;CAC7E,MAAM,EAAE,MAAM,KAAK,aAAa;CAChC,MAAM,SAAuB;EAC5B,MAAM,KAAK;EACX,SAAS,YAAY,KAAK,IAAI;EAC9B,UAAU,CAAC;EACX,OAAO,CAAC;CACT;CACA,MAAM,YAAY;CAClB,MAAM,WAAW,OAAe,QAAgB,QAAsB;EACrE,OAAO,SAAS,KAAK;GAAE;GAAO;GAAQ;EAAI,CAAC;CAC5C;CAEA,IAAI,OAAO,YAAY,QAAQ,aAAa,KAAK,MAAM,OAAO,OAAO,MAAM,MAC1E,QAAQ,WAAW,iCAAiC,KAAK,QAAQ,SAAS;MACpE;EACN,MAAM,OAAO,KAAK,KAAK,MAAM,cAAc;EAC3C,MAAM,UAAU,KAAK,WAAW,KAAK,MAAM,OAAO,OAAO,GAAG,cAAc;EAC1E,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,OAAO,aAAa,OAAO,CAAC,GACxE,QAAQ,YAAY,GAAG,KAAK,iDAAiD,SAAS;CAExF;CACA,KAAK,MAAM,QAAQ,WAAW;EAC7B,MAAM,OAAO,KAAK,QAAQ,KAAK,IAAI,GAAG,IAAI;EAC1C,MAAM,MAAM,WAAW,IAAI,IAAI,QAAQ,aAAa,MAAM,MAAM,CAAC,IAAI;EACrE,IAAI,QAAQ,MACX,QAAQ,SAAS,GAAG,KAAK,oCAAoC,SAAS;OAChE,IAAI,QAAA,GACV,QACC,SACA,GAAG,KAAK,yBAAyB,IAAI,yBACrC,SACD;CAEF;CACA,IAAI,KAAK,QAAQ,UAChB,OAAO,MAAM,KACZ,wHACD;CAED,MAAM,OAAO,SAAS,KAAK,KAAK;CAChC,IAAI,SAAS,QAAQ,CAAC,cAAc,MAAM,KAAK,QAAQ,EAAE,GACxD,QACC,QACA,GAAG,SAAS,KAAK,KAAK,EAAE,kBAAkB,KAAK,IAAI,yBACnD,UAAU,SAAS,KAAK,KAAK,EAAE,EAChC;CAED,KAAK,MAAM,WAAW,aAAa,KAAK,OAAO,GAAG;EACjD,MAAM,UAAU,QAAQ,MAAM,cAAc,KAAK,QAAQ;EACzD,QACC,WACA,GAAG,QAAQ,GAAG,IAAI,QAAQ,KAAK,QAAQ,QAAQ,OAAO,eAAe,UAAU,oBAAoB,QAAQ,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,SAChJ,UACG,6BAA6B,QAAQ,MAAM,KAAK,wCAAwC,QAAQ,GAAG,0BAA0B,QAAQ,MAAM,UAAU,OACrJ,kEACJ;CACD;CAEA,MAAM,WAAW,aAAa,IAAI;CAClC,KAAK,MAAM,SAAS,SAAS,SAC5B,IAAI,CAAC,WAAW,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,MAAM,MAAM,CAAC,CAAC,SAAA,kBAAoB,GACpF,QACC,WACA,GAAG,MAAM,KAAK,oCACd,qBAAqB,MAAM,MAAM,0CAClC;CAGF,MAAM,WAAW,QAAQ,KAAK,IAAI;CAClC,IAAI,aAAa,SAAS;EACzB,MAAM,iBAAiB,UAAU,QAAQ;EACzC,KAAK,MAAM,UAAU,eAAe,GAAG,GACtC,IAAI,OAAO,SAAS,QAAQ,CAAC,UAAU,OAAO,IAAI,CAAC,CAAC,WAAW,cAAc,GAC5E,QACC,QACA,GAAG,OAAO,QAAQ,mBAAmB,OAAO,QAAQ,aACpD,yDACD;CAGH,OAAO;EACN,MAAM,QAAQ,SAAS,IAAI,YAAY,EAAE;EACzC,MAAM,yBAAS,IAAI,IAAW,CAC7B,GAAG,SAAS,QAAQ,KAAK,UAAU,MAAM,KAAK,GAC9C,GAAI,QAAQ,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,CACjC,CAAC;EACD,KAAK,MAAM,SAAS,QAAQ;GAC3B,IAAI,UAAU,cACb;GAED,MAAM,SAAS,YAAY,OAAO,GAAG;GACrC,IAAI,WAAW,MACd;GAED,MAAM,OAAO,WAAW,MAAM;GAC9B,IAAI,SAAS,QACZ,QACC,QACA,GAAG,MAAM,2BAA2B,KAAK,IAAI,UAC7C,WAAW,KAAK,uCAAuC,MAAM,2BAA2B,KAAK,UAAU,KAAK,EAAE,EAC/G;QACM,IAAI,CAAC,SAAS,QAAQ,KAAK,UAAU,KAAK,GAAG,QAAQ,GAE3D,QACC,QACA,GAAG,MAAM,mBAAmB,SAHZ,OAAO,SAAS,UAAU,IAAI,uBAAuB,MAIrE,sCAAsC,MAAM,kEAC7C;EAEF;CACD;CAEA,MAAM,QAAQ,UAAU,IAAI;CAC5B,IAAI,MAAM,QAAQ,SAAS,GAAG;EAC7B,KAAK,MAAM,SAAS,MAAM,SAAS;GAClC,MAAM,QAAQ,UAAU,KAAK;GAC7B,IAAI,UAAU,UACb,QACC,QACA,GAAG,MAAM,OAAO,MAAM,UAAU,YAAY,YAAY,+BACxD,6EACD;EAEF;EACA,MAAM,SAAS,IAAI,IAAI,MAAM,QAAQ,KAAK,UAAU,MAAM,MAAM,CAAC;EACjE,KAAK,MAAM,WAAW,iBAAiB,KAAK,QAAQ,GACnD,IAAI,CAAC,OAAO,IAAI,QAAQ,MAAM,GAC7B,QACC,QACA,GAAG,QAAQ,QAAQ,GAAG,QAAQ,QAAQ,MAAM,QAAQ,OAAO,iBAC3D,4BACD;CAGH;CACA,OAAO,MAAM,KACZ,GAAG,iBAAiB,KAAK,QAAQ,CAAC,CAAC,KACjC,YAAY,SAAS,QAAQ,QAAQ,GAAG,QAAQ,QAAQ,MAAM,QAAQ,QACxE,CACD;CAEA,MAAM,UAAU,YAAY,CAAC,GAAG,QAAQ,IAAI,GAAG,GAAG;CAClD,IAAI,WAAW,KAAK,QAAQ,MAAM,gBAAgB,QAAQ,KAAK,CAAC,GAC/D,OAAO,MAAM,KACZ,GAAG,QAAQ,KAAK,uFACjB;CAED,OAAO;AACR;AAEA,eAAsB,OACrB,SACA,UAA+B,CAAC,GACd;CAClB,MAAM,SAAS,MAAM,QAAQ,OAAO;CACpC,IAAI,QAAQ,OACX,OAAO,OAAO,SAAS,WAAW,IAAI,KAAK,KAAK,KAAK;CAEtD,IAAI,QAAQ,MACX,QAAQ,GAAG,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;MACxC;EACN,MAAM,QAAQ,CAAC,UAAU,OAAO,WAAW,kBAAkB,MAAM,OAAO,MAAM;EAChF,KAAK,MAAM,WAAW,OAAO,UAC5B,MAAM,KAAK,cAAc,QAAQ,MAAM,KAAK,QAAQ,UAAU,YAAY,QAAQ,KAAK;EAExF,KAAK,MAAM,QAAQ,OAAO,OACzB,MAAM,KAAK,WAAW,MAAM;EAE7B,MAAM,KACL,OAAO,SAAS,WAAW,IAAI,cAAc,KAAK,OAAO,SAAS,OAAO,YAC1E;EACA,QAAQ,GAAG,IAAI,MAAM,KAAK,IAAI,CAAC;CAChC;CACA,OAAO,OAAO,SAAS,WAAW,IAAI,KAAK,KAAK,KAAK;AACtD;;;;ACtPA,SAAgB,aAAa,MAI3B;CAED,OAAO;EACN,QAFc,gBAAgB,KAAK,IAAI,CAAC,GAAG,MAAM;EAGjD,SAAS,KAAK,SAAS,MAAM,IAAI,SAAS;EAC1C,iBAAiB,KAAK,SAAS,IAAI;CACpC;AACD;;AAGA,SAAgB,eACf,KACA,SAC0B;CAC1B,MAAM,QAAQ;EAAE,MAAM;EAAO;EAAS,QAAQ;CAAQ;CACtD,MAAM,aACL,OAAO,IAAI,kBAAkB,YAAY,IAAI,kBAAkB,OAC5D,EAAE,GAAI,IAAI,cAA0C,IACpD,CAAC;CACL,MAAM,WAAW,WAAW;CAC5B,IAAI,MAAM,QAAQ,QAAQ,GAKzB,WAAW,oBAAoB,CAAC,GAJjB,SAAS,QACtB,SACA,EAAE,OAAO,SAAS,YAAY,SAAS,QAAS,KAA4B,SAAS,MAE/C,GAAG,KAAK;MAC1C,IACN,OAAO,aAAa,YACpB,aAAa,QACZ,SAAgC,SAAS,OAE1C,WAAW,oBAAoB,CAAC,UAAU,KAAK;MAE/C,WAAW,oBAAoB;CAEhC,OAAO;EAAE,GAAG;EAAK;CAAW;AAC7B;AAEA,SAAS,mBAAmB,KAA4B;CACvD,IAAI,MAAM;CACV,SAAS;EACR,IAAI,WAAW,KAAK,KAAK,cAAc,CAAC,GACvC,OAAO;EAER,MAAM,SAAS,QAAQ,GAAG;EAC1B,IAAI,WAAW,KACd,OAAO;EAER,MAAM;CACP;AACD;;AAGA,eAAe,aAAa,SAA0C;CAQrE,MAAM,UALS,MAFG,gBAAgB,cAAc,QAAQ,KAAK,QAAQ,KAAK,IAAI,CAC7C,CAAC,CAAC,SAAS,CAAC,iBAAiB,OAAO,KAAK,CAAC,CAAC,EAAA,CAClD,QACxB,cACA,UAAU,gBAAgB,QAC1B,OAAO,UAAU,QAAQ,SAAS,UAAU,aAAa,EAAE,mBAAmB,KAAK,CAAC,CAElE,CAAC,CAAC,KAAK,cAAc,UAAU,OAAO,CAAC,CAAC,SAAS,OAAO,QAAQ,CAAC,CAAC;CACtF,IAAI,WAAW,KAAA,GACd,MAAM,IAAI,WACT,aACA,KAAK,YACL,gCAAgC,QAAQ,QAAQ,EACjD;CAED,OAAO,IAAI;AACZ;AAEA,eAAsB,IACrB,SACA,OACA,MAAc,QAAQ,IAAI,GACR;CAClB,MAAM,UAAU,YAAY,CAAC,GAAG,KAAK,QAAQ,GAAG;CAChD,MAAM,UAAU,mBAAmB,GAAG;CACtC,IAAI,YAAY,QAAQ,YAAY,QAAQ,MAC3C,MAAM,IAAI,WACT,aACA,KAAK,OACL,GAAG,QAAQ,qBAAqB,QAAQ,KAAK,qDAAqD,QAAQ,KAAK,kBAChH;CAED,MAAM,OAAO,KAAK,QAAQ,MAAM,cAAc;CAC9C,IAAI,CAAC,WAAW,IAAI,GACnB,MAAM,IAAI,WAAW,aAAa,KAAK,OAAO,sBAAsB,QAAQ,KAAK,EAAE;CAEpF,MAAM,UAAU,SAAU,MAAM,aAAa,OAAO;CACpD,IAAI;EACH,iBAAiB,SAAS,KAAK;CAChC,SAAS,OAAO;EACf,MAAM,IAAI,WAAW,aAAa,KAAK,OAAQ,MAAgB,OAAO;CACvE;CAEA,MAAM,OAAO,MAAM,YAAY,QAAQ,KAAK,OAAO,QAAQ,KAAK;CAChE,IAAI;EACH,oBAAoB,QAAQ,KAAK,SAAS,QAAQ,KAAK,QAAQ,EAAE;EACjE,MAAM,OAAO,aAAa,MAAM,MAAM;EACtC,IAAI;EACJ,IAAI;GACH,MAAM,KAAK,MAAM,IAAI;EACtB,SAAS,OAAO;GACf,MAAM,IAAI,WACT,aACA,KAAK,OACL,GAAG,KAAK,sBAAuB,MAAgB,SAChD;EACD;EACA,MAAM,SAAS,aAAa,IAAI;EAKhC,MAAM,SAAS,GAJF,KAAK,UAAU,eAAe,KAAK,OAAO,GAAG,MAAM,OAAO,MAAM,CAAC,CAAC,QAC9E,OACA,OAAO,OAEa,IAAI,OAAO,kBAAkB,OAAO,UAAU;EACnE,IAAI,WAAW,MAAM;GACpB,MAAM,OAAO,QAAQ,aAAa,UAAU,MAAQ,SAAS,IAAI,CAAC,CAAC,OAAO;GAC1E,WACC,QAAQ,KAAK,SACb,WACA,QAAQ,OACR,MACA,OAAO,KAAK,QAAQ,MAAM,GAC1B,IACD;EACD;CACD,UAAU;EACT,KAAK,QAAQ;CACd;CACA,QAAQ,GAAG,IACV,QAAQ,OAAO,KAAK,UAAU;EAAE;EAAM;CAAQ,CAAC,IAAI,cAAc,QAAQ,MAAM,MAChF;CACA,OAAO,KAAK;AACb;;;;;;;;;;;;;;;;;;;;AC9IA,MAAa,oBAAoB;AACjC,MAAa,sBACZ;AACD,MAAa,iBAAiB;AAwB9B,SAAS,QAAQ,MAAc,SAAiB,QAA4B;CAC3E,OAAO,IAAI,WACV,gBACA,KAAK,cACL,kBAAkB,MAAM,SAAS,MAAM,CACxC;AACD;;AAGA,SAAgB,eACf,OACA,UACM;CACN,MAAM,OAAO,IAAI,IAAI,QAAQ;CAC7B,MAAM,MAAM,IAAI,IAAI,IAAI;CACxB,IAAI,MAAM,oBAAoB,MAAM;EAEnC,MAAM,QAAQ,IAAI,IAAI,MAAM,iBAAiB,IAAI;EACjD,IAAI,WAAW,MAAM;EACrB,IAAI,SAAS,MAAM;CACpB,OAAO;EACN,IAAI,WAAW,GAAG,KAAK,SAAS,QAAQ,OAAO,EAAE,EAAE,yBAAyB,mBAAmB,MAAM,IAAI,EAAE,GAAG,MAAM;EACpH,IAAI,SAAS;CACd;CACA,IAAI,OAAO;CAEX,IAAI,WAAW;CACf,IAAI,WAAW;CACf,IAAI,IAAI,WAAW,KAAK,QACvB,MAAM,IAAI,MACT,mBAAmB,WAAW,IAAI,IAAI,EAAE,8BAA8B,KAAK,QAC5E;CAED,OAAO;AACR;;AAGA,SAAgB,WAAW,QAKzB;CACD,MAAM,KAAK,CAAC,GAAI,OAAO,MAAM,CAAC,CAAE;CAChC,IAAI,OAAO,WAAW,MACrB,GAAG,KAAK,aAAa,OAAO,QAAQ,MAAM,CAAC;CAE5C,MAAM,EAAE,UAAU,YAAY,OAAO;CACrC,OAAO;EACN,oBAAoB,OAAO;EAC3B,GAAI,GAAG,WAAW,IAAI,CAAC,IAAI,EAAE,GAAG;EAChC,GAAI,aAAa,KAAA,KAAa,YAAY,KAAA,IACvC;GAAE,MAAM,aAAa,UAAU,MAAM;GAAG,KAAK,aAAa,SAAS,MAAM;EAAE,IAC3E,CAAC;CACL;AACD;;AAGA,SAAgB,eAAe,SAAwB,KAAmB;CACzE,MAAM,OAAO,IAAI,SAAS,IAAI,aAAa,WAAW,QAAQ;CAC9D,QAAQ,WAAW,GAAA,CACjB,MAAM,QAAQ,CAAC,CACf,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CACxC,QAAQ,SAAS,SAAS,EAAE,CAAC,CAC7B,MAAM,SAAS;EACf,IAAI,SAAS,KACZ,OAAO;EAER,MAAM,CAAC,MAAM,YAAY,KAAK,MAAM,GAAG;EACvC,IAAI,aAAa,KAAA,KAAa,aAAa,MAC1C,OAAO;EAER,MAAM,OAAO,KAAK,QAAQ,UAAU,EAAE;EACtC,OAAO,IAAI,aAAa,QAAQ,IAAI,SAAS,SAAS,IAAI,MAAM;CACjE,CAAC;AACH;AAEA,SAAS,cAAc,QAAuB,KAAsB;CACnE,MAAM,QAAQ,IAAI,aAAa,WAAY,OAAO,cAAc,OAAO,QAAS,OAAO;CACvF,MAAM,SAAS,eAAe,OAAO,SAAS,GAAG;CACjD,MAAM,MAAM,WAAW,MAAM;CAC7B,IAAI,UAAU,QAAQ,CAAC,QACtB,OAAO,IAAI,WAAW;EAAE,KAAK;EAAO,YAAY;CAAI,CAAC;CAEtD,OAAO,IAAI,MAAM,EAAE,SAAS,IAAI,CAAC;AAClC;AAEA,SAAS,WAAW,QAA+C;CAClE,MAAM,EAAE,OAAO,UAAU,UAAU,SAAS,OAAO;CACnD,IAAI,UAAU,KAAA,GACb,OAAO,EAAE,eAAe,UAAU,QAAQ;CAE3C,IAAI,SAAS,KAAA,GACZ,OAAO,EAAE,eAAe,SAAS,OAAO;CAEzC,IAAI,aAAa,KAAA,KAAa,aAAa,KAAA,GAC1C,OAAO,EAAE,eAAe,SAAS,OAAO,KAAK,GAAG,SAAS,GAAG,UAAU,CAAC,CAAC,SAAS,QAAQ,IAAI;CAE9F,OAAO,CAAC;AACT;;AAGA,MAAa,oBAAwC,OAAO,KAAK,WAAW;CAC3E,MAAM,aAAa,cAAc,QAAQ,GAAG;CAC5C,IAAI;EACH,MAAM,WAAW,MAAM,QAAQ,KAAK;GACnC;GACA,SAAS;IAAE,QAAQ;IAAoB,GAAG,WAAW,MAAM;GAAE;EAC9D,CAAC;EACD,IAAI,SAAS,eAAe,KAAK;GAChC,MAAM,SAAS,KAAK,KAAK;GACzB,MAAM,IAAI,MAAM,qBAAqB,SAAS,WAAW,OAAO,IAAI,UAAU;EAC/E;EACA,MAAM,OAAQ,MAAM,SAAS,KAAK,KAAK;EAEvC,QADa,MAAM,QAAQ,KAAK,YAAY,IAAI,KAAK,eAAe,CAAC,EAAA,CACzD,QACV,SACA,OAAO,SAAS,YAChB,SAAS,QACT,OAAQ,KAAqB,kBAAkB,YAC/C,YAAY,IACd;CACD,UAAU;EACT,MAAM,WAAW,MAAM;CACxB;AACD;;;AAIA,SAAgB,gBAAgB,WAAmB,qBAA6B;CAC/E,OAAO,IAAI,SAAS,QAAQ,uBAAuB,MAAM,EAAE;AAC5D;;AAGA,eAAsB,iBAAiB,QAAiB,cAAqC;CAE5F,OAAM,MADiB,OAAO,YAAA,CACf,OAAO,QAAiD;EACtE,mBAAmB;EACnB,wBAAwB,gBAAgB;EACxC;CACD,CAAC;AACF;;AAGA,SAAgB,cAAwB;CACvC,MAAM,QAAQ,QAAQ,KAAK,MAAM;CACjC,OAAO,MAAM,SAAS,eAAe,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK;AACjE;;;;;AAMA,MAAa,eAA+B,OAAO,QAAQ,YAAY;CACtE,MAAM,MAAM,YAAY,KAAK,QAAQ,cAAc,SAAS,CAAC;CAC7D,MAAM,OAAO,KAAK,KAAK,aAAa;CACpC,cAAc,MAAM,KAAK,UAAU,MAAM,GAAG,EAAE,MAAM,IAAM,CAAC;CAC3D,MAAM,EAAE,MAAM,QAAQ,eAAe,MAAM,SAAS,GAAG;CACvD,IAAI;EACH,MAAM,IAAI,SAAe,SAAS,WAAW;GAC5C,SACC,QAAQ,UACR,MACA;IAAE;IAAK,UAAU;IAAQ,SAAS;IAAS,aAAa;GAAK,IAC5D,OAAO,QAAQ,WAAW;IAC1B,IAAI,UAAU,MAAM;KACnB,QAAQ;KACR;IACD;IACA,OACC,IAAI,MACH,GAAG,OAAO,KAAK,KAAK,OAAO,KAAK,KAAK,MAAM,UAAU,QAAQ,aAAa,EAAE,CAC7E,CACD;GACD,CACD;EACD,CAAC;CACF,UAAU;EACT,OAAO,KAAK;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CAC7C;AACD;;AAGA,SAAgB,eACf,MACA,SACA,KAC6C;CAC7C,MAAM,CAAC,OAAO,GAAG,UAAU,YAAY;CACvC,OAAO;EACN,MAAM;GACL;GACA,GAAG;GACH;GACA;GACA;GACA;GACA,QAAQ;EACT;EACA,KAAK,SAAS,QAAQ,QAAQ,QAAQ,KAAK,GAAG;CAC/C;AACD;AAEA,MAAM,aAAa;;AAGnB,SAAgB,SACf,QACA,KACA,YAA2B,MACP;CACpB,MAAM,QAA2B,CAAC;CAClC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,GAAG,GAC5C,IAAI,CAAC,WAAW,KAAK,GAAG,KAAK,CAAC,gBAAgB,KAAK,GAAG,GACrD,MAAM,OAAO;CAGf,MAAM,aAAa,OAAO,cAAc,OAAO;CAC/C,IAAI,eAAe,MAClB,MAAM,iBAAiB;CAExB,IAAI,OAAO,UAAU,MACpB,MAAM,gBAAgB,OAAO;CAE9B,IAAI,OAAO,YAAY,MACtB,MAAM,cAAc,OAAO;CAG5B,IAAI,OAAO,OAAO,QAAQ,OAAO,GAAG,SAAS,KAAK,cAAc,MAAM;EACrE,MAAM,SAAS,KAAK,WAAW,eAAe;EAC9C,MAAM,QAAQ,CAAC,GAAG,OAAO,EAAE;EAC3B,IAAI,OAAO,WAAW,MACrB,MAAM,KAAK,aAAa,OAAO,QAAQ,MAAM,CAAC;EAE/C,cAAc,QAAQ,GAAG,MAAM,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;EACzF,MAAM,yBAAyB;CAChC,OAAO,IAAI,OAAO,WAAW,MAC5B,MAAM,yBAAyB,OAAO;CAEvC,OAAO;AACR;AAOA,SAAS,UAAU,OAAuD;CACzE,IAAI,OAAO,UAAU,YAAY,UAAU,MAC1C,OAAO;CAER,MAAM,EAAE,MAAM,WAAW;CACzB,OACC,OAAO,SAAS,YAChB,OAAO,WAAW,YAClB,WAAW,QACX,CAAC,MAAM,QAAQ,MAAM;AAEvB;AAEA,SAAS,YAAY,QAAmC;CACvD,MAAM,UAAW,OAAoD,cAAc;CACnF,IAAI,OAAO,YAAY,UACtB,OAAO;CAER,IAAI;EACH,MAAM,SAAS,KAAK,MACnB,OAAO,KAAK,SAAS,QAAQ,CAAC,CAAC,SAAS,MAAM,CAC/C;EACA,IAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,CAAC,MAAM,QAAQ,OAAO,OAAO,GACjF,OAAO;EAER,OAAO;GACN,eAAe,OAAO,OAAO,kBAAkB,WAAW,OAAO,gBAAgB;GACjF,SAAS,OAAO,QAAQ,OAAO,SAAS,CAAC,CAAC,KAAK,aAAa;IAC3D,MAAM,QAAQ;IACd,QAAQ,OAAO,YACd,OAAO,QAAQ,QAAQ,MAAM,CAAC,CAAC,QAAQ,GAAG,WAAW,OAAO,UAAU,QAAQ,CAC/E;GACD,EAAE;EACH;CACD,QAAQ;EACP,OAAO;CACR;AACD;;;;;AAMA,eAAsB,iBACrB,OACA,OAAyF,CAAC,GAC1E;CAChB,MAAM,EAAE,MAAM,YAAY;CAC1B,IAAI;CACJ,IAAI;EACH,MAAM,eAAe,OAAO,MAAM,OAAO,QAAQ;CAClD,SAAS,OAAO;EACf,MAAM,QAAQ,MAAM,SAAS,wBAAwB,WAAY,MAAgB,OAAO,GAAG;CAC5F;CACA,IAAI;CACJ,IAAI;EACH,eAAe,OAAO,KAAK,SAAS,kBAAA,CAAmB,KAAK,MAAM,MAAM;CACzE,SAAS,OAAO;EACf,MAAM,QACL,MACA,SACA,8BAA8B,WAAY,MAAgB,OAAO,GAClE;CACD;CACA,MAAM,aAAa,aAAa,MAAM,SAAS,KAAK,kBAAkB,cAAc;CACpF,IAAI,eAAe,KAAA,GAClB,MAAM,QAAQ,MAAM,SAAS,0DAA0D;CAExF,MAAM,YAAY,YAAY,WAAW,MAAM;CAC/C,IAAI,cAAc,MACjB,MAAM,QAAQ,MAAM,SAAS,8DAA8D;CAG5F,IAAI,UAAU,kBAAA,kCACb,MAAM,QACL,MACA,SACA,2BAA2B,UAAU,cAAc,sBACpD;CAGD,MAAM,kBAAkB,WAAW,KAAK,QAAQ,MAAM,KAAK,EAAE,GAAG;CAChE,MAAM,UAAU,UAAU,QAAQ,MAAM,SAAS,KAAK,SAAS,eAAe;CAC9E,IAAI,YAAY,KAAA,GACf,MAAM,QACL,MACA,SACA,yBAAyB,UAAU,QAAQ,KAAK,SAAS,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,UAAU,QAAQ,iBACrG;CAED,IAAI,QAAQ,OAAO,cAAc,MAAM,WACtC,MAAM,QAAQ,MAAM,SAAS,iEAAiE;CAE/F,MAAM,eAAe,KAAK,MAAM,UAAU,UAAU;CACpD,UAAU,cAAc;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACxD,IAAI;EACH,OAAO,KAAK,UAAU,aAAA,CAAc,WAAW,QAAQ;GACtD;GACA,QAAQ,MAAM;GACd,KAAK,KAAK,OAAO,QAAQ;EAC1B,CAAC;CACF,SAAS,OAAO;EACf,MAAM,QACL,MACA,SACA,kCAAkC,WAAY,MAAgB,OAAO,GACtE;CACD;AACD;;;AC/VA,MAAa,eAAe;AAW5B,SAASC,MACR,MACA,MACmE;CACnE,OAAO,IAAI,SAAS,YAAY;EAC/B,SACC,QAAQ,UACR,CAAC,MAAM,GAAG,IAAI,GACd;GAAE,UAAU;GAAQ,SAAS;GAAQ,aAAa;EAAK,IACtD,OAAO,QAAQ,WAAW;GAC1B,QAAQ;IACP,MACC,UAAU,OACP,IACG,MAAqC,QAA0B;IACtE;IACA;GACD,CAAC;EACF,CACD;CACD,CAAC;AACF;;AAGA,SAAgB,cAAc,eAA+B;CAC5D,MAAM,MAAM,QAAQ,aAAa,eAAe,MAAM,CAAC;CACvD,IAAI,QAAQ,MACX,MAAM,IAAI,WACT,SACA,KAAK,KACL,WAAW,GAAG,cAAc,0BAA0B,CACvD;CAED,OAAO;AACR;;;;;AAMA,SAAgB,iBAAiB,SAAyB,SAAuB;CAChF,MAAM,EAAE,MAAM,UAAU,QAAQ;CAChC,MAAM,MAAM,WAAW,KAAK,MAAM,OAAO;CACzC,MAAM,YAAY,KAAK,KAAK,cAAc;CAC1C,MAAM,MAAM,cAAc,SAAS;CACnC,WACC,KAAK,SACL,YACA,QAAQ,OACR,KAAK,KAAK,MAAM,cAAc,GAC9B,aAAa,SAAS,GACtB,GACD;CACA,MAAM,aAAa,aAAa,WAAW,wBAAwB,gBAAgB,GAAG,CAAC;CACvF,UAAU,QAAQ,KAAK,IAAI,GAAG;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CAC9D,KAAK,MAAM,QAAQ,YAAY,KAAK,MAAM,UAAU;EACnD;EACA,WAAW,KAAK,KAAK,aAAa;EAClC;CACD,CAAC,GACA,WACC,KAAK,SACL,YACA,QAAQ,OACR,KAAK,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,GAClC,OAAO,KAAK,KAAK,OAAO,GACxB,KAAK,IACN;CAED,IAAI,aAAa,WAAW,CAAC,YAC5B,KAAK,MAAM,SAAS,qBAAqB,KAAK,IAAI,GACjD,WAAW,KAAK,SAAS,YAAY,QAAQ,OAAO,OAAO,IAAI;AAGlE;AAEA,SAAgB,mBAAmB,SAAwC;CAC1E,MAAM,OAAO,KAAK,QAAQ,KAAK,MAAM,cAAc;CACnD,OAAO,WAAW,IAAI,IAAI,QAAQ,aAAa,MAAM,MAAM,CAAC,IAAI;AACjE;AAEA,eAAsB,WACrB,SACA,SACA,OAAuB,CAAC,GACN;CAClB,MAAM,OAAO,MAAM,YAAY,QAAQ,KAAK,OAAO,QAAQ,KAAK;CAChE,IAAI;EACH,oBAAoB,QAAQ,KAAK,SAAS,QAAQ,KAAK,QAAQ,EAAE;EACjE,OAAO,QAAQ,WAAW,SAAS,OAAO,IAAI,MAAM,OAAO,SAAS,IAAI;CACzE,UAAU;EACT,KAAK,QAAQ;CACd;AACD;;AAGA,SAAS,SAAS,SAAiC;CAClD,MAAM,EAAE,MAAM,OAAO;CACrB,MAAM,UAAU,YAAY,KAAK,IAAI;CACrC,MAAM,WAAW,aAAa,KAAK,IAAI;CACvC,IAAI,aAAa,QAAQ,CAAC,WAAW,WAAW,KAAK,MAAM,QAAQ,CAAC,KAAK,YAAY,MACpF,MAAM,IAAI,WAAW,SAAS,KAAK,OAAO,sCAAsC;CAGjF,WACC,KAAK,SACL,YACA,QAAQ,OACR,KAAK,KAAK,MAAM,SAAS,GACzB,OAAO,KAAK,GAAG,SAAS,GAAG,CAC5B;CACA,IACC,cAAc,KAAK,WAAW,KAAK,MAAM,QAAQ,GAAA,eAAiB,CAAC,MACnE,mBAAmB,OAAO,GAE1B,iBAAiB,SAAS,QAAQ;CAEnC,YAAY,KAAK,KAAK,MAAM,aAAa,GAAG,GAAG,QAAQ,GAAG;CAC1D,GAAG,IACF,QAAQ,OACL,KAAK,UAAU;EAAE,SAAS;EAAU,UAAU;CAAQ,CAAC,IACvD,yBAAyB,SAAS,SAAS,QAAQ,GACvD;CACA,OAAO,KAAK;AACb;AAEA,eAAe,OAAO,SAAyB,MAAuC;CACrF,MAAM,EAAE,MAAM,KAAK,OAAO;CAC1B,MAAM,YAAY,YAAY,KAAK,IAAI,KAAK,QAAQ;CACpD,MAAM,MAAM,WAAW;CACvB,MAAM,QAAQ,KAAK,WAAW;CAC9B,IAAI,CAAC,gBAAgB,GAAG,GACvB,MAAM,IAAI,WACT,eACA,KAAK,WACL,iBAAiB,OAAO,oBAAoB,CAC7C;CAED,MAAM,OAAO,WAAW,KAAK,GAAG;CAChC,IAAI;EACH,MAAM,SAAS,MAAM,cAAc,KAAK,KAAK,IAAI;EACjD,MAAM,YAAY,IAAI,UAAU,KAAK,QAAQ,KAAK,KAAK,GAAG;EAC1D,MAAM,UAAU,MAAM,UAAU,YAAY,cAAc,QAAQ,EAAA,CAAG;EACrE,IAAI,WAAW,KAAA,GACd,MAAM,IAAI,WACT,eACA,KAAK,WACL,iBAAiB,IAAI,SAAS,GAAG,aAAa,yBAAyB,CACxE;EAGD,IAAI,CAAC,OAAO,GAAG,OAAO,SAAS,SAAS,GAAG;GAC1C,GAAG,IACF,QAAQ,OACL,KAAK,UAAU;IAAE,SAAS;IAAW,QAAQ,OAAO;IAAS,SAAS;GAAM,CAAC,IAC7E,UAAU,UAAU,4BAA4B,OAAO,QAAQ,GACnE;GACA,OAAO,KAAK;EACb;EACA,MAAM,SAAS,MAAM,UAAU,YAAY,cAAc,OAAO,SAAS,IAAI;EAC7E,MAAM,UAAU,MAAM,YAAY,OAAO,IAAI;EAC7C,IAAI,QAAQ,WAAW,OAAO,WAC7B,MAAM,IAAI,WACT,eACA,KAAK,cACL,GAAG,aAAa,GAAG,OAAO,QAAQ,iDACnC;EAED,MAAM,iBAAiB;GACtB,MAAM;GACN,SAAS,OAAO;GAChB,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,aAAa,YAAY;GACzB,MAAM,YAAY,KAAK,KAAK;GAC5B,UAAU,OAAO;GACjB,QAAQ;EACT,CAAC;EACD,MAAM,iBACL;GACC,MAAM;GACN,SAAS,OAAO;GAChB,WAAW,QAAQ;GACnB,iBAAiB,OAAO;GACxB;GACA,UAAU,KAAK;EAChB,GACA;GACC,GAAI,KAAK,sBAAsB,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,KAAK,kBAAkB;GAChF,GAAI,KAAK,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,KAAK,aAAa;GACvE;EACD,CACD;EACA,MAAM,YAAY,KAAK,MAAM,SAAS;EACtC,UAAU,WAAW,EAAE,MAAM,IAAM,CAAC;EACpC,MAAM,YAAY,OAAO,MAAM,SAAS;EACxC,MAAM,gBAAgB,KAAK,WAAW,QAAQ,SAAS;EACvD,IACC,CAAC,WAAW,KAAK,eAAe,aAAa,CAAC,KAC9C,CAAC,WAAW,KAAK,eAAA,eAA6B,CAAC,GAE/C,MAAM,IAAI,WACT,eACA,KAAK,cACL,GAAG,aAAa,GAAG,OAAO,QAAQ,yBACnC;EAED,MAAM,eAAe,cAAc,KAAK,eAAe,cAAc,CAAC;EACtE,MAAM,sBACL,WAAW,KAAK,MAAM,SAAS,KAAK,mBAAmB,OAAO,KAAK;EACpE,IAAI,sBAAsB,eAAe,GACxC,MAAM,IAAI,WACT,SACA,KAAK,KACL,WACC,UAAU,OAAO,QAAQ,+BAA+B,oBAAoB,MAAM,aAAa,EAChG,CACD;EAGD,IAAI,eAAe,qBAClB,MAAM,IAAI,WACT,SACA,KAAK,KACL,WACC,UAAU,OAAO,QAAQ,sBAAsB,aAAa,uCAAuC,qBACpG,CACD;EAED,MAAM,SAAS,eAAe,KAAK,MAAM,OAAO,SAAS,eAAe,YAAY;EACpF,MAAM,SAAS,MAAMA,MAAI,KAAK,QAAQ,cAAc,GAAG;GAAC;GAAe;GAAO;EAAW,CAAC;EAC1F,IAAI,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,MAAM,OAAO,SAAS;GACjE,OAAO,QAAQ;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;GAC/C,MAAM,IAAI,WACT,SACA,KAAK,KACL,WACC,mDAAmD,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,KAAK,QAAQ,OAAO,QACnH,CACD;EACD;EACA,IAAI,iBAAiB,mBAAmB,OAAO,GAC9C,iBAAiB,SAAS,OAAO,OAAO;EAEzC,YAAY,KAAK,KAAK,MAAM,aAAa,GAAG,GAAG,UAAU,GAAG;EAC5D,WACC,KAAK,SACL,YACA,QAAQ,OACR,KAAK,KAAK,MAAM,SAAS,GACzB,OAAO,KAAK,GAAG,OAAO,QAAQ,GAAG,CAClC;EACA,GAAG,IACF,QAAQ,OACL,KAAK,UAAU;GAAE,SAAS,OAAO;GAAS,UAAU;GAAW,SAAS;EAAK,CAAC,IAC9E,kBAAkB,UAAU,MAAM,OAAO,QAAQ,EACrD;EACA,OAAO,KAAK;CACb,UAAU;EACT,OAAO,MAAM;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CAC9C;AACD;;;;ACzPA,SAAgB,iBAAiB,KAAa,UAAiC;CAC9E,IAAI,aAAa,SAChB;CAED,MAAM,OAAO,SAAS,GAAG;CACzB,IAAI,QAAQ,WAAW,KAAA,KAAa,KAAK,QAAQ,QAAQ,OAAO,GAC/D,MAAM,IAAI,WACT,cACA,KAAK,UACL,gBAAgB,KAAK,uBAAuB,kBAAkB,KAAK,CACpE;CAED,KAAK,KAAK,OAAO,QAAW,GAC3B,MAAM,IAAI,WACT,cACA,KAAK,UACL,gBAAgB,KAAK,8BAA8B,cAAc,KAAK,CACvE;AAEF;AAEA,SAAS,iBAAiB,KAAa,UAAiC;CACvE,IAAI,CAAC,WAAW,GAAG,GAAG;EACrB,UAAU,KAAK;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAC/C,IAAI,aAAa,SAChB,UAAU,KAAK,GAAK;CAEtB;CACA,iBAAiB,KAAK,QAAQ;AAC/B;;AAGA,SAAgB,cAAc,KAAwB,UAAoC;CACzF,IAAI,aAAa,SAChB,OAAO,CAAC,YAAY;CAErB,MAAM,QAAQ,SAAS,IAAI,YAAY,EAAE;CACzC,OAAO,QAAQ,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;AAC1C;AAEA,SAAS,UAAU,MAAc,SAAiB,SAA0B;CAC3E,MAAM,WAAW,aAAa,MAAM,OAAO;CAC3C,IAAI,aAAa,MAChB,OAAO;CAER,OAAO,SAAS,MAAM,OAAO,SAAS;EACrC,IAAI;GACH,OAAO,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,OACxC,aAAa,KAAK,WAAW,MAAM,OAAO,GAAG,IAAI,CAAC,CACnD;EACD,QAAQ;GACP,OAAO;EACR;CACD,CAAC;AACF;AAEA,eAAsB,MAAM,SAAyB,SAAwC;CAC5F,MAAM,EAAE,MAAM,KAAK,UAAU,OAAO;CACpC,eAAe,KAAK,IAAI;CACxB,MAAM,UAAU,eAAe;CAC/B,IAAI,YAAY,MACf,MAAM,IAAI,WACT,SACA,KAAK,UACL,yEACD;CAED,KAAK,MAAM,OAAO;EAAC,KAAK;EAAM,KAAK;EAAO,KAAK;CAAK,GACnD,IAAI,QAAQ,QACP;MAAA,WAAW,GAAG,GACjB,iBAAiB,KAAK,QAAQ;CAAA,OAG/B,iBAAiB,KAAK,QAAQ;CAGhC,MAAM,SAAsB;EAC3B,MAAM,KAAK;EACX,SAAS,QAAQ;EACjB,UAAU,CAAC;EACX,OAAO,CAAC;EACR,SAAS;CACV;CACA,MAAM,SAAS,QAAQ,UAAU,cAAc,KAAK,QAAQ;CAC5D,MAAM,UAAU,QAAQ,gBAAgB,eAAe,QAAQ,KAAK,QAAQ,IAAI,CAAC;CACjF,MAAM,SAAS,aAAa,UAAU,gBAAgB,GAAG,IAAI;CAC7D,MAAM,aAAa,aAAa,WAAW,wBAAwB,MAAM;CAGzE,MAAM,QAAQ,QAAQ,KAAK,YAAY;EACtC;EACA,OAAO,aAAa,OAAO,MAAM,KAAK,QAAQ;EAC9C,MAAM,gBAAgB,QAAQ,KAAK,IAAI;CACxC,EAAE;CAGF,MAAM,OAAO,QAAQ,SAAS,OAAO,MAAM,YAAY,KAAK,OAAO,QAAQ,KAAK;CAChF,IAAI;EACH,IAAI,SAAS,MACZ,oBAAoB,KAAK,SAAS,KAAK,QAAQ,EAAE;EAElD,IAAI,CAAC,QAAQ,QAAQ;GACpB,eAAe,SAAS,OAAO;GAC/B,UAAU,QAAQ,KAAK,IAAI,GAAG;IAAE,WAAW;IAAM,MAAM;GAAM,CAAC;GAC9D,KAAK,MAAM,QAAQ,YAAY,KAAK,MAAM,UAAU,EAAE,WAAW,CAAC,GACjE,WACC,KAAK,SACL,YACA,QAAQ,OACR,KAAK,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,GAClC,OAAO,KAAK,KAAK,OAAO,GACxB,KAAK,IACN;GAED,IAAI,aAAa,WAAW,CAAC,YAC5B,KAAK,MAAM,SAAS,qBAAqB,KAAK,IAAI,GACjD,WAAW,KAAK,SAAS,YAAY,QAAQ,OAAO,OAAO,IAAI;EAGlE;EACA,KAAK,MAAM,QAAQ,OAClB,OAAO,SAAS,KAAK,MAAM,UAAU,SAAS,SAAS,IAAI,CAAC;EAE7D,IAAI,QAAQ,MACX,KAAK,MAAM,WAAW,iBAAiB,KAAK,QAAQ,GACnD,KAAK,MAAM,UAAU,YAAY,KAAK,MAAM,UAAU,UAAU,GAC/D,IAAI,QAAQ,QACX,OAAO,MAAM,KAAK;GACjB,QAAQ,KAAK,QAAQ,QAAQ,OAAO,IAAI;GACxC,SAAS;GACT,QAAQ;EACT,CAAC;OAED,OAAO,MAAM,KAAK,QAAQ,MAAM,QAAQ,OAAO,QAAQ,QAAQ,MAAM,CAAC;EAK1E,IAAI,aAAa,WAAW,CAAC,QAAQ,UAAU,QAAQ,UAAU;GAChE,IAAI,cAAc,KAAK,QAAQ,KAAK,IAAI,CAAC,GAAG;IAC3C,IAAI,UAAU,GAAG,QAAQ,KAAK,IAAI,EAAE,GAAG,IAAI,WAAW;IACtD,GAAG,IAAI,eAAe,CAAC;GACxB;GACA,IAAI,QAAQ,YACX,cAAc,KAAK,QAAQ,KAAK,IAAI,CAAC;GAEtC,IAAI,CAAC,YACJ,GAAG,IACF,kCAAkC,UAAU,UAAU,iFACvD;EAEF;CACD,UAAU;EACT,MAAM,QAAQ;CACf;CACA,OAAO,UACN,OAAO,SAAS,QACd,UACA,MAAM,YAAY,aAAa,MAAM,YAAY,cAAc,MAAM,YAAY,SACnF,CAAC,CAAC,SACF,OAAO,MAAM,QAAQ,SAAS;EAAC;EAAW;EAAc;CAAS,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CACxF;CACH,IAAI,QAAQ,MACX,GAAG,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;MAEtC,GAAG,IAAIC,WAAS,MAAM,CAAC;CAExB,IAAI,CAAC,QAAQ,QAGR;MAAA,MADiB,OAAO,SAAS,EAAE,OAAO,QAAQ,KAAK,CAAC,MAC7C,KAAK,MAAM,QAAQ,QACjC,OAAO,KAAK;CAAA;CAGd,OAAO,QAAQ,UAAU,OAAO,UAAU,IAAI,KAAK,UAAU,KAAK;AACnE;;AAGA,SAAS,eAAe,SAAyB,SAAuB;CACvE,MAAM,EAAE,MAAM,YAAY;CAC1B,IAAI,CAAC,UAAU,KAAK,MAAM,SAAS,OAAO,GACzC,eAAe,KAAK,MAAM,SAAS,SAAA,CAAiB;CAErD,cAAc,KAAK,IAAI;CACvB,IAAI,YAAY,KAAK,IAAI,MAAM,SAC9B,WACC,KAAK,SACL,YACA,QAAQ,OACR,KAAK,KAAK,MAAM,SAAS,GACzB,OAAO,KAAK,GAAG,QAAQ,GAAG,CAC3B;CAED,MAAM,YAAY,aAAa,KAAK,WAAW,KAAK,MAAM,OAAO,GAAG,cAAc,CAAC;CACnF,MAAM,YAAY,WAAW,KAAK,KAAK,MAAA,eAAoB,CAAC,IACzD,aAAa,KAAK,KAAK,MAAM,cAAc,CAAC,IAC5C;CACH,IAAI,cAAc,QAAQ,CAAC,UAAU,OAAO,SAAS,GACpD,WACC,KAAK,SACL,YACA,QAAQ,OACR,KAAK,KAAK,MAAM,cAAc,GAC9B,WACA,GACD;AAIF;AAEA,eAAe,UACd,SACA,SACA,MAC2C;CAC3C,MAAM,EAAE,IAAI,SAAS;CACrB,MAAM,EAAE,WAAW;CACnB,IAAI,KAAK,UAAU,MAAM;EACxB,GAAG,IACF,eAAe,OAAO,KAAK,IAAI,KAAK,MAAM,wBAAwB,aAAa,OAAO,OAAO,KAAK,MAAM,OAAO,KAAK,GACrH;EACA,OAAO;GAAE,MAAM,OAAO;GAAM,SAAS;GAAW,QAAQ,KAAK;EAAM;CACpE;CACA,IAAI,KAAK,SAAS,MACjB,OAAO;EAAE,MAAM,OAAO;EAAM,SAAS;CAAY;CAElD,IAAI,QAAQ,QAAQ;EACnB,GAAG,IAAI,cAAc,OAAO,KAAK,KAAK,KAAK,KAAK,MAAM;EACtD,OAAO;GAAE,MAAM,OAAO;GAAM,SAAS;EAAU;CAChD;CACA,IAAI,CAAC,QAAQ,KAAK;EACjB,GAAG,IAAI,KAAK,KAAK,IAAI;EAErB,IAAI,CAAC,MADgB,GAAG,QAAQ,wBAAwB,OAAO,KAAK,EAAE,GACzD;GACZ,GAAG,IACF,WAAW,OAAO,KAAK,wBAAwB,aAAa,OAAO,OAAO,KAAK,MAAM,OAAO,KAAK,GAClG;GACA,OAAO;IAAE,MAAM,OAAO;IAAM,SAAS;GAAW;EACjD;CACD;CAGA,MAAM,QAAQ,aAAa,OAAO,MAAM,QAAQ,KAAK,QAAQ,QAAQ;CACrE,MAAM,QAAQ,gBAAgB,QAAQ,KAAK,IAAI;CAC/C,IAAI,UAAU,MACb,OAAO;EAAE,MAAM,OAAO;EAAM,SAAS;CAAY;CAElD,IAAI,UAAU,QAAS,MAAM,WAAW,KAAK,KAAK,UAAU,CAAC,QAAQ,KAAM;EAC1E,GAAG,IACF,GAAG,OAAO,KAAK,8EAChB;EACA,OAAO;GAAE,MAAM,OAAO;GAAM,SAAS;EAAU;CAChD;CACA,iBAAiB,MAAM,QAAQ,OAAO,KAAK;CAC3C,OAAO;EAAE,MAAM,OAAO;EAAM,SAAS;CAAU;AAChD;AAEA,SAASA,WAAS,QAA6B;CAC9C,MAAM,QAAQ,CAAC,UAAU,OAAO,QAAQ,gBAAgB,OAAO,MAAM;CACrE,KAAK,MAAM,WAAW,OAAO,UAC5B,MAAM,KACL,KAAK,QAAQ,KAAK,IAAI,QAAQ,UAAU,QAAQ,SAAS,KAAK,QAAQ,OAAO,KAAK,IACnF;CAED,KAAK,MAAM,QAAQ,OAAO,OACzB,MAAM,KAAK,KAAK,KAAK,OAAO,IAAI,KAAK,UAAU,KAAK,SAAS,KAAK,KAAK,OAAO,KAAK,IAAI;CAExF,OAAO,MAAM,KAAK,IAAI;AACvB;;;;AC9SA,SAAS,gBAAgB,OAAqB;CAC7C,KAAK,MAAM,OAAO;EAAC,KAAK,OAAA,KAAkB;EAAG,WAAW,KAAK;EAAG;CAAK,GACpE,IAAI;EACH,UAAU,GAAG;CACd,QAAQ,CAER;AAEF;AAEA,eAAsB,UACrB,SACA,SACkB;CAClB,MAAM,EAAE,MAAM,KAAK,UAAU,OAAO;CACpC,IAAI,CAAC,QAAQ,KAIR;MAAA,CAAC,MAHgB,GAAG,QACvB,sBAAsB,KAAK,KAAK,gCAAgC,QAAQ,aAAa,oBAAoB,GAAG,EAC7G,GACa;GACZ,GAAG,IAAI,kBAAkB;GACzB,OAAO,KAAK;EACb;;CAED,MAAM,SAA0B;EAC/B,UAAU,CAAC;EACX,OAAO,CAAC;EACR,aAAa;EACb,cAAc;EACd,WAAW,CAAC;CACb;CACA,MAAM,OAAO,MAAM,YAAY,KAAK,OAAO,QAAQ,KAAK;CACxD,IAAI,QAAQ;CACZ,IAAI;EACH,oBAAoB,KAAK,SAAS,KAAK,QAAQ,EAAE;EACjD,KAAK,MAAM,SAAS,aAAa,IAAI,CAAC,CAAC,SAAS;GAC/C,MAAM,UAAU,mBAAmB,MAAM,QAAQ,OAAO,KAAK;GAC7D,OAAO,SAAS,KAAK;IAAE,MAAM,MAAM;IAAM;GAAQ,CAAC;GAClD,IAAI,YAAY,WAAW;IAC1B,QAAQ;IACR,GAAG,IAAI,eAAe,MAAM,MAAM,cAAc,CAAC;GAClD;EACD;EACA,KAAK,MAAM,SAAS,UAAU,IAAI,CAAC,CAAC,SAAS;GAC5C,MAAM,UAAU,UAAU,MAAM,QAAQ,OAAO,KAAK;GACpD,OAAO,MAAM,KAAK;IAAE,QAAQ,MAAM;IAAQ;GAAQ,CAAC;GACnD,IAAI,YAAY,WAAW;IAC1B,QAAQ;IACR,GAAG,IAAI,eAAe,MAAM,QAAQ,MAAM,CAAC;GAC5C;EACD;EACA,IAAI,aAAa,SAAS;GACzB,mBAAmB,KAAK,QAAQ,KAAK,IAAI,CAAC;GAC1C,gBAAgB,GAAG;EACpB;EACA,IAAI,QAAQ,YAAY;GAEvB,MAAM,YAAY,MAAM,YAAY,KAAK,OAAO,QAAQ,KAAK;GAC7D,IAAI;IACH,MAAM,SAAS,WAAW,KAAK,OAAO,QAAQ,OAAO,EAAE,UAAU,EAAE,CAAC;IACpE,OAAO,YAAY,OAAO,KAAK,OAAO,OAAO,OAAO;IACpD,IAAI,OAAO,UAAU,WAAW,GAAG;KAClC,gBAAgB,KAAK,KAAK;KAC1B,OAAO,eAAe;IACvB;GACD,UAAU;IACT,UAAU,QAAQ;GACnB;GACA,IAAI,OAAO,cAEV,gBAAgB,KAAK,KAAK;GAE3B,IAAI,OAAO,UAAU,SAAS,GAAG;IAChC,QAAQ;IACR,GAAG,IACF,eAAe,OAAO,UAAU,KAAK,IAAI,EAAE,GAAG,OAAO,UAAU,WAAW,IAAI,OAAO,MAAM,0BAC5F;GACD;EACD;EAEA,MAAM,YAAY,GAAG,KAAK,KAAK,YAAY,QAAQ,IAAI,GAAG,KAAK,IAAI;EACnE,aAAa,KAAK,MAAM,SAAS;EACjC,gBAAgB,SAAS;EACzB,OAAO,cAAc;CACtB,UAAU;EACT,KAAK,QAAQ;CACd;CACA,GAAG,IAAI,QAAQ,OAAO,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,SAAS,QAAQ,KAAK,KAAK,CAAC;CACpF,OAAO,QAAQ,KAAK,KAAK,KAAK;AAC/B;AAEA,SAAS,SAAS,QAAyB,OAAuB;CACjE,MAAM,QAAQ,CAAC,iBAAiB;CAChC,KAAK,MAAM,WAAW,OAAO,UAC5B,MAAM,KAAK,KAAK,QAAQ,KAAK,IAAI,QAAQ,SAAS;CAEnD,KAAK,MAAM,QAAQ,OAAO,OACzB,MAAM,KAAK,KAAK,KAAK,OAAO,IAAI,KAAK,SAAS;CAE/C,IAAI,OAAO,cACV,MAAM,KAAK,oBAAoB,MAAM,EAAE;MACjC,IAAI,OAAO,UAAU,SAAS,GACpC,MAAM,KAAK,mBAAmB,MAAM,IAAI,OAAO,UAAU,KAAK,IAAI,EAAE,yBAAyB;MAE7F,MAAM,KAAK,mBAAmB,MAAM,iCAAiC;CAEtE,OAAO,MAAM,KAAK,IAAI;AACvB;;;AC5HA,MAAM,UAAU,gBAAgB;AAEhC,MAAM,QAAQ,WAAW,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCjC,SAAS,MAAM,MAAgB;CAC9B,OAAO,UAAU;EAChB,MAAM;EACN,kBAAkB;EAClB,eAAe;EACf,SAAS;GACR,MAAM,EAAE,MAAM,UAAU;GACxB,MAAM,EAAE,MAAM,UAAU;GACxB,MAAM,EAAE,MAAM,UAAU;GACxB,MAAM,EAAE,MAAM,UAAU;GACxB,OAAO;IAAE,MAAM;IAAU,UAAU;GAAK;GACxC,KAAK,EAAE,MAAM,UAAU;GACvB,WAAW,EAAE,MAAM,UAAU;GAC7B,kBAAkB,EAAE,MAAM,UAAU;GACpC,eAAe,EAAE,MAAM,UAAU;GACjC,aAAa,EAAE,MAAM,UAAU;GAC/B,QAAQ,EAAE,MAAM,UAAU;GAC1B,cAAc,EAAE,MAAM,SAAS;GAC/B,UAAU,EAAE,MAAM,UAAU;GAC5B,SAAS,EAAE,MAAM,SAAS;GAC1B,wBAAwB,EAAE,MAAM,SAAS;GACzC,eAAe,EAAE,MAAM,UAAU;GACjC,QAAQ,EAAE,MAAM,SAAS;GACzB,aAAa,EAAE,MAAM,SAAS;GAC9B,SAAS;IAAE,MAAM;IAAW,OAAO;GAAI;GACvC,MAAM;IAAE,MAAM;IAAW,OAAO;GAAI;EACrC;CACD,CAAC;AACF;;AAKA,MAAM,kBAA6D;CAClE,OAAO;EACN;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACD;CACA,MAAM,CAAC,QAAQ,MAAM;CACrB,QAAQ,CAAC;CACT,OAAO,CAAC;CACR,KAAK,CAAC;CACN,SAAS,CAAC;CACV,OAAO,CAAC,YAAY;CACpB,eAAe,CAAC,UAAU;CAC1B,SAAS,CAAC,WAAW,sBAAsB;CAC3C,WAAW,CAAC,OAAO,aAAa;CAChC,sBAAsB,CAAC,UAAU,WAAW;AAC7C;AAEA,SAAS,iBAAiB,SAAiB,QAA0B;CACpE,MAAM,UAAU,IAAI,IAAkB,gBAAgB,YAAY,CAAC,CAAC;CACpE,OAAO,OAAO,OAAO,eAAe,CAAC,CACnC,KAAK,CAAC,CACN,QAAQ,WAAW,CAAC,QAAQ,IAAI,MAAM,KAAK,OAAO,YAAY,KAAA,CAAS,CAAC,CACxE,KAAK,WAAW,KAAK,QAAQ;AAChC;AAEA,eAAsB,IAAI,MAAgB,SAA2C;CACpF,IAAI;CACJ,IAAI;EACH,SAAS,MAAM,IAAI;CACpB,SAAS,OAAO;EACf,QAAQ,MAAO,MAAgB,OAAO;EACtC,QAAQ,MAAM,KAAK;EACnB,OAAO,KAAK;CACb;CACA,MAAM,EAAE,QAAQ,gBAAgB;CAChC,IAAI,OAAO,SAAS;EACnB,QAAQ,IAAI,OAAO;EACnB,OAAO,KAAK;CACb;CACA,MAAM,UAAU,YAAY;CAC5B,IAAI,OAAO,QAAQ,YAAY,KAAA,GAAW;EACzC,QAAQ,IAAI,KAAK;EACjB,OAAO,YAAY,KAAA,KAAa,CAAC,OAAO,OAAO,KAAK,QAAQ,KAAK;CAClE;CACA,IAAI,gBAAgB,aAAa,KAAA,GAAW;EAC3C,QAAQ,MAAM,oBAAoB,SAAS;EAC3C,QAAQ,MAAM,KAAK;EACnB,OAAO,KAAK;CACb;CACA,MAAM,YAAY,iBAAiB,SAAS,MAAM;CAClD,IAAI,UAAU,SAAS,GAAG;EACzB,QAAQ,MAAM,GAAG,UAAU,KAAK,IAAI,EAAE,uBAAuB,SAAS;EACtE,OAAO,KAAK;CACb;CACA,MAAM,UAAU,qBAAqB;EACpC,GAAI,QAAQ,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,QAAQ,KAAK;EAC3D,GAAI,QAAQ,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK,QAAQ,IAAI;EACxD,GAAI,QAAQ,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI,QAAQ,GAAG;EACrD,MAAM,OAAO,QAAQ;EACrB,SAAS;CACV,CAAC;CACD,IAAI;EACH,OAAO,MAAM,SAAS,SAAS,YAAY,MAAM,CAAC,GAAG,QAAQ,SAAS,OAAO;CAC9E,SAAS,OAAO;EACf,OAAO,YAAY,OAAO,OAAO;CAClC;AACD;AAEA,eAAe,SACd,SACA,MACA,QACA,SACA,SACkB;CAClB,QAAQ,SAAR;EACC,KAAK,SAAS;GACb,MAAM,SAAS,OAAO,SAAS;GAC/B,MAAM,MAAM,QAAQ,QAAQ,UAAU,CAAC,QAAQ,KAAK,CAAC,KAAK,CAAC;GAC3D,IAAI,IAAI,SAAS,GAAG;IACnB,QAAQ,GAAG,IAAI,yBAAyB,OAAO,KAAK,IAAI,EAAE,QAAQ,IAAI,KAAK,IAAI,EAAE,EAAE;IACnF,OAAO,KAAK;GACb;GACA,OAAO,MAAM,SAAS;IACrB,MAAM,OAAO,QAAQ;IACb;IACR,KAAK,OAAO,OAAO;IACnB,QAAQ,OAAO,cAAc;IAC7B,eAAe,OAAO,qBAAqB;IAC3C,YAAY,OAAO,kBAAkB;IACrC,QAAQ,OAAO,UAAU;IACzB,UAAU,OAAO,gBAAgB;GAClC,CAAC;EACF;EACA,KAAK,QAAQ;GACZ,MAAM,QAAQ,KAAK;GACnB,IAAI,UAAU,KAAA,KAAa,CAAC,QAAQ,KAAK,GAAG;IAC3C,QAAQ,GAAG,IAAI,sBAAsB,OAAO,KAAK,IAAI,GAAG;IACxD,OAAO,KAAK;GACb;GACA,MAAM,OAAO,OAAO,SAAS,QAAQ,OAAO,SAAS;GACrD,QAAQ,OAAO,MACd,aAAa,OAAO,QAAQ,KAAK,MAAM;IACtC,MAAM,QAAQ,OAAO,SAAS;IAC9B,MAAM,QAAQ,OAAO,SAAS;GAC/B,CAAC,CACF;GACA,OAAO,KAAK;EACb;EACA,KAAK,UACJ,OAAO,OAAO,OAAO;EACtB,KAAK,SAAS;GACb,MAAM,SAAS,MAAM,WAAW,CAAC,GAAG,QAAQ,IAAI,GAAG;IAClD,MAAM,QAAQ,KAAK;IACnB,GAAI,QAAQ,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK,QAAQ,IAAI;GACzD,CAAC;GACD,QAAQ,GAAG,IAAI,QAAQ,OAAO,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC;GACrF,OAAO,KAAK;EACb;EACA,KAAK,OACJ,OAAO,IAAI,SAAS,KAAK,EAAE;EAC5B,KAAK,WACJ,OAAO,QAAQ,SAAS,KAAK,EAAE;EAChC,KAAK;GACJ,IAAI,KAAK,OAAO,QACf,OAAO,UAAU,OAAO;GAEzB,IAAI,KAAK,OAAO,SACf,OAAO,WACN,SACA,OAAO,kBAAkB,KAAA,IAAA,KAAiC,OAAO,OAAO,aAAa,CACtF;GAED,QAAQ,GAAG,IAAI,2BAA2B;GAC1C,OAAO,KAAK;EAEb,KAAK,eACJ,OAAO,WAAW,SAAS,EAAE,UAAU,OAAO,YAAY,MAAM,CAAC;EAClE,KAAK;GACJ,IAAI,OAAO,YAAY,KAAA,KAAa,OAAO,4BAA4B,KAAA,GAAW;IACjF,QAAQ,GAAG,IAAI,sEAAsE;IACrF,OAAO,KAAK;GACb;GACA,OAAO,QAAQ,SAAS,OAAO,SAAS,OAAO,uBAAuB;EAEvE,KAAK,sBAAsB;GAE1B,IAAI,OAAO,WAAW,KAAA,KAAa,OAAO,iBAAiB,KAAA,GAC1D,OAAO,KAAK;GAEb,MAAM,EAAE,qBAAqB,MAAA,QAAA,QAAA,CAAA,CAAA,WAAA,kBAAA;GAC7B,MAAM,iBAAiB,KAAK,MAAM,aAAa,OAAO,QAAQ,MAAM,CAAC,GAAG,OAAO,YAAY;GAC3F,OAAO,KAAK;EACb;EACA,KAAK,aACJ,OAAO,UAAU,SAAS;GACzB,KAAK,OAAO,OAAO;GACnB,YAAY,OAAO,kBAAkB;EACtC,CAAC;EACF,SACC,OAAO,KAAK;CACd;AACD;AAEA,SAAS,cAAc,QAA+B;CACrD,MAAM,QACL,OAAO,SAAS,QAAQ,mBAAmB,OAAO,SAAS,WAAW,WAAW;CAClF,MAAM,OACL,OAAO,WAAW,OACf,2BACA,GAAG,OAAO,OAAO,MAAM,MAAM,OAAO,OAAO;CAC/C,MAAM,QAAQ,CAAC,OAAO,OAAO,QAAQ,IAAI,MAAM,KAAK,OAAO,WAAW,WAAW,MAAM;CACvF,IAAI,OAAO,YAAY,MACtB,MAAM,KAAK,YAAY,OAAO,SAAS;CAExC,OAAO,MAAM,KAAK,IAAI;AACvB;AAEA,SAAS,YAAY,OAAgB,SAAiC;CACrE,IAAI,aAAa,KAAK,GAAG;EACxB,QAAQ,GAAG,IAAI,WAAW,MAAM,SAAS;EACzC,OAAO,MAAM;CACd;CACA,QAAQ,GAAG,IACV,WAAW,iBAAiB,QAAS,MAAM,SAAS,MAAM,UAAW,OAAO,KAAK,GAClF;CACA,OAAO,KAAK;AACb;;AAKA,SAAS,kBAA0B;CAEjC,OAAA;AAUF"}