@microwiseai/snapshot 0.5.2 → 0.6.0

package/dist/lib/install-timeline.js

@@ -1,243 +0,0 @@
-/**
- * install-timeline.ts — Install timeline instrumentation (investigation only).
- *
- * Purpose: measure WHY a snapshot install is slow, from the inside, without
- * changing any install behavior. Purely additive: when the opt-in env flag is
- * unset the whole thing is a no-op with negligible overhead — every `start()`
- * returns one shared no-op handle and `finalize()` returns immediately.
- *
- * Opt-in: SNAPSHOT_INSTALL_TIMELINE ∈ {'1','true'} (case-insensitive).
- *
- * Output when enabled:
- *   (a) console phase-summary table with relative [+Xs] offsets, per-phase
- *       durations, a `◄ dominant` marker on the largest phase, and per-command /
- *       per-package rows indented under their phase, then a total line.
- *   (b) JSONL file at ~/.ist/logs/snapshot-install-timeline/<ISO>.jsonl —
- *       one line per event + a trailing summary line, for cross-run diffing.
- *
- * Security (security-ssot-principle): tokens must NEVER be written. Command
- * strings and meta are sanitized — IST_SESSION_TOKEN, authToken, _authToken=,
- * and Bearer values are replaced with `***` before any record/print/write.
- */
-import { performance } from 'node:perf_hooks';
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-import { mkdirSync, writeFileSync } from 'node:fs';
-const ENABLE_VALUES = new Set(['1', 'true']);
-/** Shared no-op handle — one allocation, reused for every disabled span. */
-const NOOP_SPAN = { end() { } };
-// ----------------------------------------------------------------------------
-// Sanitization (security-ssot-principle): never emit a real token.
-// ----------------------------------------------------------------------------
-// Keys whose VALUE is credential material and must be redacted wholesale.
-// Deliberately NOT a bare "auth" match: `authType` ('proxy-token'|'anonymous')
-// is a useful, non-secret diagnostic and must survive. `authToken` still matches
-// via "token".
-const SUSPICIOUS_KEY = /(token|secret|password|bearer|credential|apikey)/i;
-/** Redact token material from an arbitrary string. */
-export function sanitizeString(input, env) {
-    let out = input;
-    // key=value / key: value forms for known token-bearing keys.
-    out = out.replace(/(_authToken\s*=\s*)[^\s&'"]+/gi, '$1***');
-    out = out.replace(/(authToken["'\s]*[:=]\s*["']?)[^\s,'"&}]+/gi, '$1***');
-    out = out.replace(/(IST_SESSION_TOKEN["'\s]*[:=]\s*["']?)[^\s,'"&}]+/gi, '$1***');
-    // Bearer <token>
-    out = out.replace(/(Bearer\s+)[A-Za-z0-9._\-+/=]+/gi, '$1***');
-    // Belt-and-suspenders: scrub any literal occurrence of the actual token value
-    // that may have leaked into a command string via env interpolation.
-    const literal = (env ?? {})['IST_SESSION_TOKEN'];
-    if (literal && literal.length >= 8) {
-        out = out.split(literal).join('***');
-    }
-    return out;
-}
-/** Deep-sanitize a meta object: scrub string values and redact suspicious keys. */
-export function sanitizeMeta(meta, env) {
-    if (!meta)
-        return undefined;
-    return sanitizeValue(meta, env);
-}
-function sanitizeValue(value, env) {
-    if (typeof value === 'string')
-        return sanitizeString(value, env);
-    if (Array.isArray(value))
-        return value.map((v) => sanitizeValue(v, env));
-    if (value && typeof value === 'object') {
-        const out = {};
-        for (const [k, v] of Object.entries(value)) {
-            if (SUSPICIOUS_KEY.test(k) && typeof v === 'string') {
-                out[k] = '***';
-            }
-            else {
-                out[k] = sanitizeValue(v, env);
-            }
-        }
-        return out;
-    }
-    return value;
-}
-class NoopTimeline {
-    enabled = false;
-    start() {
-        return NOOP_SPAN;
-    }
-    finalize() { }
-    getEvents() {
-        return [];
-    }
-}
-class ActiveTimeline {
-    enabled = true;
-    now;
-    wallNow;
-    env;
-    logDir;
-    logger;
-    mkdir;
-    writeFile;
-    t0;
-    wallT0;
-    events = [];
-    /** Stack of currently-open phase labels (for parent association). */
-    phaseStack = [];
-    finalized = false;
-    constructor(opts) {
-        this.now = opts.now ?? (() => performance.now());
-        this.wallNow = opts.wallNow ?? (() => Date.now());
-        this.env = opts.env ?? process.env;
-        this.logDir =
-            opts.logDir ?? join(homedir(), '.ist', 'logs', 'snapshot-install-timeline');
-        this.logger = opts.logger ?? ((line) => console.log(line));
-        this.mkdir = opts.mkdir ?? ((dir) => mkdirSync(dir, { recursive: true }));
-        this.writeFile =
-            opts.writeFile ?? ((path, content) => writeFileSync(path, content));
-        this.t0 = this.now();
-        this.wallT0 = this.wallNow();
-    }
-    start(label, opts = {}) {
-        const category = opts.category ?? 'phase';
-        const startMono = this.now();
-        const startOffsetMs = startMono - this.t0;
-        const wallStartIso = new Date(this.wallT0 + startOffsetMs).toISOString();
-        // Parent = innermost currently-open phase (commands/packages nest under it).
-        const parentLabel = category === 'phase' ? undefined : this.phaseStack[this.phaseStack.length - 1];
-        // Sanitize the label too — callers pass raw command strings as labels
-        // (e.g. runCommand), which may embed token material.
-        const safeLabel = sanitizeString(label, this.env);
-        const event = {
-            label: safeLabel,
-            category,
-            startOffsetMs,
-            durationMs: 0,
-            wallStartIso,
-            parentLabel,
-            meta: sanitizeMeta(opts.meta, this.env),
-        };
-        this.events.push(event);
-        if (category === 'phase') {
-            this.phaseStack.push(label);
-        }
-        let ended = false;
-        return {
-            end: (endMeta) => {
-                if (ended)
-                    return;
-                ended = true;
-                event.durationMs = this.now() - startMono;
-                if (endMeta) {
-                    const clean = sanitizeMeta(endMeta, this.env);
-                    event.meta = { ...(event.meta ?? {}), ...(clean ?? {}) };
-                }
-                if (category === 'phase') {
-                    // Pop this phase if it is on top; tolerate out-of-order ends.
-                    const idx = this.phaseStack.lastIndexOf(label);
-                    if (idx !== -1)
-                        this.phaseStack.splice(idx, 1);
-                }
-            },
-        };
-    }
-    getEvents() {
-        return this.events;
-    }
-    finalize() {
-        if (this.finalized)
-            return;
-        this.finalized = true;
-        const phases = this.events.filter((e) => e.category === 'phase');
-        const totalMs = phases.reduce((sum, p) => sum + p.durationMs, 0);
-        const dominant = phases.reduce((max, p) => (max === null || p.durationMs > max.durationMs ? p : max), null);
-        this.printConsole(phases, dominant, totalMs);
-        this.writeJsonl(dominant, totalMs);
-    }
-    printConsole(phases, dominant, totalMs) {
-        const log = this.logger;
-        log('');
-        log('━━━ Install Timeline (SNAPSHOT_INSTALL_TIMELINE) ━━━');
-        // Top-level = phases in start order, plus any orphan (parentless) non-phase.
-        const orphans = this.events.filter((e) => e.category !== 'phase' && !e.parentLabel);
-        const roots = [...phases, ...orphans].sort((a, b) => a.startOffsetMs - b.startOffsetMs);
-        const labelWidth = Math.max(20, ...this.events.map((e) => e.label.length + (e.category === 'phase' ? 0 : 2)));
-        for (const root of roots) {
-            const offset = `[+${(root.startOffsetMs / 1000).toFixed(1)}s]`;
-            const dur = `${Math.round(root.durationMs)}ms`;
-            const marker = dominant && root === dominant ? '  ◄ dominant' : '';
-            log(`${offset} ${root.label.padEnd(labelWidth)} ${dur.padStart(8)}${marker}`);
-            if (root.category === 'phase') {
-                const children = this.events
-                    .filter((e) => e.parentLabel === root.label)
-                    .sort((a, b) => a.startOffsetMs - b.startOffsetMs);
-                for (const child of children) {
-                    const cdur = `${Math.round(child.durationMs)}ms`;
-                    const tag = `${child.category}: ${child.label}`;
-                    log(`         ${tag.padEnd(labelWidth)} ${cdur.padStart(8)}`);
-                }
-            }
-        }
-        log(`         ${'total'.padEnd(labelWidth)} ${`${(totalMs / 1000).toFixed(1)}s`.padStart(8)}`);
-        log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
-    }
-    writeJsonl(dominant, totalMs) {
-        const wallStartIso = new Date(this.wallT0).toISOString();
-        const fileName = `${wallStartIso.replace(/[:.]/g, '-')}.jsonl`;
-        const filePath = join(this.logDir, fileName);
-        const lines = [];
-        for (const e of this.events) {
-            lines.push(JSON.stringify({ kind: 'event', ...e }));
-        }
-        lines.push(JSON.stringify({
-            kind: 'summary',
-            wallStartIso,
-            totalMs: Math.round(totalMs),
-            eventCount: this.events.length,
-            phaseCount: this.events.filter((e) => e.category === 'phase').length,
-            dominantPhase: dominant?.label,
-            dominantMs: dominant ? Math.round(dominant.durationMs) : undefined,
-        }));
-        try {
-            this.mkdir(this.logDir);
-            this.writeFile(filePath, lines.join('\n') + '\n');
-            this.logger(`Timeline written: ${filePath}`);
-        }
-        catch (err) {
-            // Investigation-only: never let logging failure affect the install.
-            const msg = err instanceof Error ? err.message : String(err);
-            this.logger(`Timeline: failed to write JSONL (${msg})`);
-        }
-    }
-}
-/**
- * Decide enablement from the opt-in env flag (unless explicitly overridden).
- */
-export function isTimelineEnabled(env = process.env) {
-    const raw = env['SNAPSHOT_INSTALL_TIMELINE'];
-    return raw !== undefined && ENABLE_VALUES.has(raw.trim().toLowerCase());
-}
-/**
- * Factory: returns an active timeline when opted-in, else a zero-overhead no-op.
- */
-export function createInstallTimeline(opts = {}) {
-    const enabled = opts.enabled ?? isTimelineEnabled(opts.env ?? process.env);
-    return enabled ? new ActiveTimeline(opts) : new NoopTimeline();
-}
-//# sourceMappingURL=install-timeline.js.map

package/dist/lib/install-timeline.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"install-timeline.js","sourceRoot":"","sources":["../../src/lib/install-timeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AA+CnD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AAE7C,4EAA4E;AAC5E,MAAM,SAAS,GAAe,EAAE,GAAG,KAAI,CAAC,EAAE,CAAC;AAE3C,+EAA+E;AAC/E,mEAAmE;AACnE,+EAA+E;AAE/E,0EAA0E;AAC1E,+EAA+E;AAC/E,iFAAiF;AACjF,eAAe;AACf,MAAM,cAAc,GAAG,mDAAmD,CAAC;AAE3E,sDAAsD;AACtD,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,GAAwC;IACpF,IAAI,GAAG,GAAG,KAAK,CAAC;IAEhB,6DAA6D;IAC7D,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,gCAAgC,EAAE,OAAO,CAAC,CAAC;IAC7D,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,6CAA6C,EAAE,OAAO,CAAC,CAAC;IAC1E,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,qDAAqD,EAAE,OAAO,CAAC,CAAC;IAClF,iBAAiB;IACjB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,kCAAkC,EAAE,OAAO,CAAC,CAAC;IAE/D,8EAA8E;IAC9E,oEAAoE;IACpE,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACjD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACnC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAC1B,IAAyC,EACzC,GAAwC;IAExC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,aAAa,CAAC,IAAI,EAAE,GAAG,CAA4B,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,GAAwC;IAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACzE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACpD,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAcD,MAAM,YAAY;IACP,OAAO,GAAG,KAAK,CAAC;IACzB,KAAK;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,QAAQ,KAAU,CAAC;IACnB,SAAS;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAED,MAAM,cAAc;IACT,OAAO,GAAG,IAAI,CAAC;IAEP,GAAG,CAAe;IAClB,OAAO,CAAe;IACtB,GAAG,CAAqC;IACxC,MAAM,CAAS;IACf,MAAM,CAAyB;IAC/B,KAAK,CAAwB;IAC7B,SAAS,CAA0C;IAEnD,EAAE,CAAS;IACX,MAAM,CAAS;IACf,MAAM,GAAoB,EAAE,CAAC;IAC9C,qEAAqE;IACpD,UAAU,GAAa,EAAE,CAAC;IACnC,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,IAA4B;QACtC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,MAAM;YACT,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,SAAS;YACZ,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAEtF,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,KAAa,EAAE,OAAqB,EAAE;QAC1C,MAAM,QAAQ,GAAqB,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QACzE,6EAA6E;QAC7E,MAAM,WAAW,GACf,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEjF,sEAAsE;QACtE,qDAAqD;QACrD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAElD,MAAM,KAAK,GAAkB;YAC3B,KAAK,EAAE,SAAS;YAChB,QAAQ;YACR,aAAa;YACb,UAAU,EAAE,CAAC;YACb,YAAY;YACZ,WAAW;YACX,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;SACxC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAExB,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,OAAO;YACL,GAAG,EAAE,CAAC,OAAiC,EAAQ,EAAE;gBAC/C,IAAI,KAAK;oBAAE,OAAO;gBAClB,KAAK,GAAG,IAAI,CAAC;gBACb,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAC1C,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC9C,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC3D,CAAC;gBACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACzB,8DAA8D;oBAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;oBAC/C,IAAI,GAAG,KAAK,CAAC,CAAC;wBAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EACrE,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAEO,YAAY,CAClB,MAAuB,EACvB,QAA8B,EAC9B,OAAe;QAEf,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,sDAAsD,CAAC,CAAC;QAE5D,6EAA6E;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;QAExF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,EAAE,EACF,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC7E,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAC/C,MAAM,MAAM,GAAG,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;YAE9E,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM;qBACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,KAAK,CAAC;qBAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;gBACrD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;oBAC7B,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;oBACjD,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;oBAChD,GAAG,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;QAED,GAAG,CAAC,YAAY,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/F,GAAG,CAAC,uDAAuD,CAAC,CAAC;IAC/D,CAAC;IAEO,UAAU,CAAC,QAA8B,EAAE,OAAe;QAChE,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE7C,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,SAAS;YACf,YAAY;YACZ,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC9B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM;YACpE,aAAa,EAAE,QAAQ,EAAE,KAAK;YAC9B,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;SACnE,CAAC,CACH,CAAC;QAEF,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,MAAM,CAAC,oCAAoC,GAAG,GAAG,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA0C,OAAO,CAAC,GAAG;IACrF,MAAM,GAAG,GAAG,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC7C,OAAO,GAAG,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA+B,EAAE;IACrE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;AACjE,CAAC"}

package/dist/lib/preflight-adapter.d.ts

@@ -1,52 +0,0 @@
-/**
- * Snapshot ↔ install-preflight adapter (thin).
- *
- * Maps a snapshot.json into the registry-agnostic preflight engine's inputs and
- * runs the gate. The engine (@microwiseai/install-preflight) knows nothing about
- * snapshots; all snapshot-specific knowledge lives here:
- *
- *   • install groups (npm-proxy / glpkg / skit) + legacy packages/skits → channels
- *     + package requests, all probed ANONYMOUSLY (reproduces a first-time
- *     end-user with no token).
- *   • transitive closure discovery: uses the publisher's token to expand npm
- *     deps via the proxy, then hands the discovered nodes back to the engine to
- *     probe anonymously — so a private transitive dep (401 for end-users) is
- *     caught even though the publisher can see it.
- *   • [B] the snapshot's OWN version must be stable when promoted to `latest`.
- *
- * See architecture/decisions — this is the blocking preflight gate wired into
- * `snapshot publish` and the `snapshot preflight` command.
- */
-import { formatReport, createNpmPackumentResolver, type PreflightInput, type PreflightReport, type Resolver } from '@microwiseai/install-preflight';
-import type { Snapshot } from './types.js';
-export interface SnapshotPreflightOptions {
-    /** Attempt transitive-closure discovery (needs a token). Default: true. */
-    includeTransitive?: boolean;
-    /** dist-tag this publish targets (default 'latest'). */
-    distTag?: string;
-    /** Verbose progress logging via the provided sink. */
-    log?: (msg: string) => void;
-    /** Override the engine's network resolver (tests / custom lanes). */
-    resolver?: Resolver;
-}
-export interface SnapshotPreflightResult {
-    report: PreflightReport;
-    /** Non-fatal warnings (e.g. transitive discovery skipped). Surfaced, never silent. */
-    warnings: string[];
-}
-/**
- * Build the full engine input for a snapshot: anonymous channels + direct pins
- * (+ discovered transitive closure). Exposed for testing/other callers.
- */
-export declare function buildSnapshotPreflightInput(snapshot: Snapshot, options?: SnapshotPreflightOptions): Promise<{
-    input: PreflightInput;
-    warnings: string[];
-}>;
-/**
- * Run the blocking preflight gate for a snapshot. Combines:
- *   [A] anonymous resolvability of the whole closure (engine), and
- *   [B] the snapshot's own version must be stable when promoted to `latest`.
- */
-export declare function runSnapshotPreflight(snapshot: Snapshot, options?: SnapshotPreflightOptions): Promise<SnapshotPreflightResult>;
-export { formatReport, createNpmPackumentResolver };
-//# sourceMappingURL=preflight-adapter.d.ts.map

package/dist/lib/preflight-adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"preflight-adapter.d.ts","sourceRoot":"","sources":["../../src/lib/preflight-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAEL,YAAY,EACZ,0BAA0B,EAE1B,KAAK,cAAc,EACnB,KAAK,eAAe,EAIpB,KAAK,QAAQ,EACd,MAAM,gCAAgC,CAAC;AAIxC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAK3C,MAAM,WAAW,wBAAwB;IACvC,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,eAAe,CAAC;IACxB,sFAAsF;IACtF,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AA2KD;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,QAAQ,EAClB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC;IAAE,KAAK,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAqBxD;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,QAAQ,EAClB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,uBAAuB,CAAC,CAsBlC;AAED,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAE,CAAC"}

package/dist/lib/preflight-adapter.js

@@ -1,224 +0,0 @@
-/**
- * Snapshot ↔ install-preflight adapter (thin).
- *
- * Maps a snapshot.json into the registry-agnostic preflight engine's inputs and
- * runs the gate. The engine (@microwiseai/install-preflight) knows nothing about
- * snapshots; all snapshot-specific knowledge lives here:
- *
- *   • install groups (npm-proxy / glpkg / skit) + legacy packages/skits → channels
- *     + package requests, all probed ANONYMOUSLY (reproduces a first-time
- *     end-user with no token).
- *   • transitive closure discovery: uses the publisher's token to expand npm
- *     deps via the proxy, then hands the discovered nodes back to the engine to
- *     probe anonymously — so a private transitive dep (401 for end-users) is
- *     caught even though the publisher can see it.
- *   • [B] the snapshot's OWN version must be stable when promoted to `latest`.
- *
- * See architecture/decisions — this is the blocking preflight gate wired into
- * `snapshot publish` and the `snapshot preflight` command.
- */
-import { preflight, formatReport, createNpmPackumentResolver, checkStableRelease, } from '@microwiseai/install-preflight';
-import { REGISTRY_PROXY_URL, GITLAB_GROUP_ID, getLicenseKey, getProxyAuthToken } from './config.js';
-import { resolveDepsFromLicenseAPI, isDistkitClosureEnabled } from './transitive-resolver.js';
-/** Installer groups whose members resolve as npm-style packages through the proxy. */
-const NPM_LIKE_GROUPS = new Set(['npm-proxy', 'glpkg', 'gitlab-install', 'skit']);
-/** Extract the `@scope` prefix of a package name, or null. */
-function scopeOf(name) {
-    return name.startsWith('@') && name.includes('/') ? name.split('/')[0] : null;
-}
-/** True for names that legacy `packages`/`skits` maps treat as skits. */
-function isSkitName(name) {
-    return name.endsWith('-kit') || name.endsWith('kit');
-}
-/**
- * Build one anonymous channel per installer lane actually used by the snapshot.
- * All lanes hit the same registry-proxy packument endpoint (`GET /{name}`),
- * differing only by id/scope for reporting.
- */
-function buildChannels(scopes) {
-    const base = {
-        registryUrl: REGISTRY_PROXY_URL,
-        auth: { kind: 'anonymous' },
-        strategy: 'npm-packument',
-        scopes,
-        groupId: GITLAB_GROUP_ID,
-    };
-    return [
-        { id: 'npm-proxy', ...base },
-        { id: 'glpkg', ...base },
-        { id: 'skit', ...base },
-    ];
-}
-/** Collect the DIRECT pins declared by a snapshot into engine requests. */
-function collectDirectRequests(snapshot) {
-    const requests = [];
-    const push = (channel, name, range) => {
-        requests.push({ name, range, channel });
-    };
-    // New installer-based structure.
-    if (snapshot.install) {
-        for (const [installer, pkgs] of Object.entries(snapshot.install)) {
-            const channel = installer === 'gitlab-install' ? 'glpkg' : installer;
-            for (const [name, version] of Object.entries(pkgs)) {
-                push(channel === 'npm-proxy' || channel === 'glpkg' || channel === 'skit' ? channel : 'npm-proxy', name, version);
-            }
-        }
-    }
-    // Legacy maps.
-    if (snapshot.packages) {
-        for (const [name, version] of Object.entries(snapshot.packages)) {
-            push(isSkitName(name) ? 'skit' : 'npm-proxy', name, version);
-        }
-    }
-    if (snapshot.skits) {
-        for (const [name, version] of Object.entries(snapshot.skits)) {
-            push('skit', name, version);
-        }
-    }
-    return requests;
-}
-/** Scopes declared by the snapshot's registry block (fallback to pins' scopes). */
-function collectScopes(snapshot, requests) {
-    const scopes = new Set();
-    if (snapshot.registry) {
-        for (const scope of Object.keys(snapshot.registry))
-            scopes.add(scope);
-    }
-    if (scopes.size === 0) {
-        for (const r of requests) {
-            const s = scopeOf(r.name);
-            if (s)
-                scopes.add(s);
-        }
-    }
-    return Array.from(scopes);
-}
-/**
- * Discover transitive npm deps via the proxy (token-authenticated), returning
- * extra requests to probe ANONYMOUSLY. Failure is non-fatal: it returns a
- * warning so coverage gaps are surfaced, never silently dropped.
- */
-async function discoverTransitive(direct, scopes) {
-    const token = getLicenseKey() || getProxyAuthToken();
-    if (!token) {
-        return {
-            requests: [],
-            warning: 'Transitive-closure discovery skipped: no token available (login for full coverage). ' +
-                'Only directly-declared pins were checked.',
-        };
-    }
-    // Expand npm/glpkg-lane pins within tracked scopes.
-    const npmDirect = direct.filter((r) => (r.channel === 'npm-proxy' || r.channel === 'glpkg') && scopes.some((s) => r.name.startsWith(s)));
-    if (npmDirect.length === 0 || scopes.length === 0)
-        return { requests: [] };
-    // ── §5-step6 CUTOVER SWITCH (behind SNAPSHOT_DISTKIT_CLOSURE) ──────────────
-    // flag ON: resolve the transitive closure CLIENT-SIDE via distkit walkClosure
-    // (subsumes /resolve-deps — §3d). PREFLIGHT probes the PRIVATE lane (a private
-    // transitive dep that 401s anonymously is the risk this gate exists for; public
-    // deps are npmjs-anonymous-trivial). §1.4 fail-loud: a resolver error propagates
-    // (NOT swallowed into a warning) — a partial closure would be a wrong gate.
-    // The full public-inclusive closure/lock is produced separately by
-    // resolveSnapshotToLock; it is not what the anonymous-probe gate needs.
-    if (isDistkitClosureEnabled()) {
-        // DYNAMIC import: the distkit bridge is loaded ONLY on the flag-ON path, so
-        // flag-OFF (default) has NO load-time dependency on distkit — 100% reversible
-        // and shippable even while distkit is unpublished/unlinked.
-        const { resolveTransitiveClosureFromPins } = await import('./distkit-closure-bridge.js');
-        const closure = await resolveTransitiveClosureFromPins(npmDirect.map((r) => ({ name: r.name, version: r.range })), scopes);
-        const directNames = new Set(direct.map((r) => `${r.channel}:${r.name}`));
-        const requests = [];
-        for (const node of closure) {
-            if (!scopes.some((s) => node.name.startsWith(s)))
-                continue; // private lane only (preflight)
-            if (directNames.has(`npm-proxy:${node.name}`) || directNames.has(`glpkg:${node.name}`))
-                continue;
-            requests.push({
-                name: node.name,
-                range: node.version,
-                channel: 'npm-proxy',
-                requestedBy: node.requestedBy.join(', ') || '(transitive closure)',
-            });
-        }
-        return { requests };
-    }
-    // flag OFF (default): legacy /resolve-deps path — COMPLETELY UNCHANGED.
-    try {
-        const resolved = await resolveDepsFromLicenseAPI({
-            packages: npmDirect.map((r) => `${r.name}@${r.range}`),
-            groupId: GITLAB_GROUP_ID,
-            scopes,
-            includePeer: true,
-        });
-        const directNames = new Set(direct.map((r) => `${r.channel}:${r.name}`));
-        const requests = [];
-        for (const [name, version] of Object.entries(resolved.dependencies)) {
-            if (directNames.has(`npm-proxy:${name}`) || directNames.has(`glpkg:${name}`))
-                continue;
-            requests.push({
-                name,
-                range: version,
-                channel: 'npm-proxy',
-                requestedBy: '(transitive closure)',
-            });
-        }
-        for (const [name, version] of Object.entries(resolved.peerDependencies ?? {})) {
-            if (requests.some((r) => r.name === name) || directNames.has(`npm-proxy:${name}`))
-                continue;
-            requests.push({ name, range: version, channel: 'npm-proxy', requestedBy: '(peer dependency)' });
-        }
-        return { requests };
-    }
-    catch (err) {
-        return {
-            requests: [],
-            warning: `Transitive-closure discovery failed (${err instanceof Error ? err.message : String(err)}). ` +
-                'Only directly-declared pins were checked — transitive private/unpublished deps may be missed.',
-        };
-    }
-}
-/**
- * Build the full engine input for a snapshot: anonymous channels + direct pins
- * (+ discovered transitive closure). Exposed for testing/other callers.
- */
-export async function buildSnapshotPreflightInput(snapshot, options = {}) {
-    const { includeTransitive = true, distTag = 'latest' } = options;
-    const warnings = [];
-    const direct = collectDirectRequests(snapshot);
-    const scopes = collectScopes(snapshot, direct);
-    let packages = direct;
-    if (includeTransitive) {
-        const { requests, warning } = await discoverTransitive(direct, scopes);
-        if (warning)
-            warnings.push(warning);
-        packages = [...direct, ...requests];
-    }
-    const input = {
-        channels: buildChannels(scopes),
-        packages,
-        policy: { distTag, requireStableForTags: ['latest'], forbidPrereleaseDefaultResolve: true },
-        resolver: options.resolver,
-    };
-    return { input, warnings };
-}
-/**
- * Run the blocking preflight gate for a snapshot. Combines:
- *   [A] anonymous resolvability of the whole closure (engine), and
- *   [B] the snapshot's own version must be stable when promoted to `latest`.
- */
-export async function runSnapshotPreflight(snapshot, options = {}) {
-    const distTag = options.distTag ?? 'latest';
-    const { input, warnings } = await buildSnapshotPreflightInput(snapshot, options);
-    options.log?.(`Preflight: probing ${input.packages.length} package(s) anonymously across ${input.channels.length} channel(s)...`);
-    const report = await preflight(input);
-    // [B] (b1): the snapshot itself must be a stable release when → latest.
-    const selfFinding = snapshot.version
-        ? checkStableRelease(snapshot.version, { package: snapshot.name, channel: 'snapshot', requested: snapshot.version }, { distTag, requireStableForTags: ['latest'] })
-        : null;
-    if (selfFinding) {
-        report.findings.unshift(selfFinding);
-        report.ok = false;
-    }
-    return { report, warnings };
-}
-export { formatReport, createNpmPackumentResolver };
-//# sourceMappingURL=preflight-adapter.js.map

package/dist/lib/preflight-adapter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"preflight-adapter.js","sourceRoot":"","sources":["../../src/lib/preflight-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EACL,SAAS,EACT,YAAY,EACZ,0BAA0B,EAC1B,kBAAkB,GAOnB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAG9F,sFAAsF;AACtF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;AAmBlF,8DAA8D;AAC9D,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,MAAgB;IACrC,MAAM,IAAI,GAAG;QACX,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,EAAE,IAAI,EAAE,WAAoB,EAAE;QACpC,QAAQ,EAAE,eAAwB;QAClC,MAAM;QACN,OAAO,EAAE,eAAe;KACzB,CAAC;IACF,OAAO;QACL,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE;QAC5B,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE;QACxB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAS,qBAAqB,CAAC,QAAkB;IAC/C,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,IAAY,EAAE,KAAa,EAAQ,EAAE;QAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,iCAAiC;IACjC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjE,MAAM,OAAO,GAAG,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACpH,CAAC;QACH,CAAC;IACH,CAAC;IAED,eAAe;IACf,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mFAAmF;AACnF,SAAS,aAAa,CAAC,QAAkB,EAAE,QAA0B;IACnE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAC/B,MAAwB,EACxB,MAAgB;IAEhB,MAAM,KAAK,GAAG,aAAa,EAAE,IAAI,iBAAiB,EAAE,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,OAAO,EACL,sFAAsF;gBACtF,2CAA2C;SAC9C,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CACxG,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAE3E,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,gFAAgF;IAChF,iFAAiF;IACjF,4EAA4E;IAC5E,mEAAmE;IACnE,wEAAwE;IACxE,IAAI,uBAAuB,EAAE,EAAE,CAAC;QAC9B,4EAA4E;QAC5E,8EAA8E;QAC9E,4DAA4D;QAC5D,MAAM,EAAE,gCAAgC,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,MAAM,gCAAgC,CACpD,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAC1D,MAAM,CACP,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAqB,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS,CAAC,gCAAgC;YAC5F,IAAI,WAAW,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAE,SAAS;YACjG,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,OAAO;gBACnB,OAAO,EAAE,WAAW;gBACpB,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB;aACnE,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC;YAC/C,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACtD,OAAO,EAAE,eAAe;YACxB,MAAM;YACN,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAqB,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACpE,IAAI,WAAW,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;gBAAE,SAAS;YACvF,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,KAAK,EAAE,OAAO;gBACd,OAAO,EAAE,WAAW;gBACpB,WAAW,EAAE,sBAAsB;aACpC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;gBAAE,SAAS;YAC5F,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,OAAO,EACL,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK;gBAC7F,+FAA+F;SAClG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAAkB,EAClB,UAAoC,EAAE;IAEtC,MAAM,EAAE,iBAAiB,GAAG,IAAI,EAAE,OAAO,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;IACjE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE/C,IAAI,QAAQ,GAAG,MAAM,CAAC;IACtB,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvE,IAAI,OAAO;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,QAAQ,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,KAAK,GAAmB;QAC5B,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC;QAC/B,QAAQ;QACR,MAAM,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,QAAQ,CAAC,EAAE,8BAA8B,EAAE,IAAI,EAAE;QAC3F,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAkB,EAClB,UAAoC,EAAE;IAEtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC;IAC5C,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,2BAA2B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEjF,OAAO,CAAC,GAAG,EAAE,CAAC,sBAAsB,KAAK,CAAC,QAAQ,CAAC,MAAM,kCAAkC,KAAK,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC;IAElI,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IAEtC,wEAAwE;IACxE,MAAM,WAAW,GAA4B,QAAQ,CAAC,OAAO;QAC3D,CAAC,CAAC,kBAAkB,CAChB,QAAQ,CAAC,OAAO,EAChB,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,EAC5E,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,QAAQ,CAAC,EAAE,CAC9C;QACH,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACpC,MAA0B,CAAC,EAAE,GAAG,KAAK,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAE,CAAC"}