@microwiseai/snapshot 0.9.0 → 0.9.2

package/node_modules/@microwiseai/skit/dist/utils/installed-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"installed-registry.d.ts","sourceRoot":"","sources":["../../src/utils/installed-registry.ts"],"names":[],"mappings":"AAAA;;GAEG;AAQH;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,CAAC;CACrC;AAYD;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMjD;AASD;;GAEG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAQ/D;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAI9E;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAGvF;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EAAE,GACd,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAItE;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAmBjF;AAED;;GAEG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAEpE"}
+{"version":3,"file":"installed-registry.d.ts","sourceRoot":"","sources":["../../src/utils/installed-registry.ts"],"names":[],"mappings":"AAAA;;GAEG;AAQH;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,CAAC;CACrC;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK/C;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMjD;AASD;;GAEG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAQ/D;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAI9E;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAGvF;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EAAE,EACf,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GACvC,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAItE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElD;AAOD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,iBAAiB,EAC3B,WAAW,EAAE,MAAM,GAClB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAUvB;AAED,wCAAwC;AACxC,MAAM,WAAW,oBAAoB;IACnC,+DAA+D;IAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,kEAAkE;IAClE,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACtD,wEAAwE;IACxE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,wEAAwE;IACxE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1D,OAAO,CAAC,oBAAoB,CAAC,CA0C/B;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;CAAO,GACxC,OAAO,CAAC,MAAM,EAAE,CAAC,CAEnB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAEpE"}

package/node_modules/@microwiseai/skit/dist/utils/npm-auth.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Auth inheritance for the temporary proxy .npmrc (installNpmDeps).
+ *
+ * installNpmDeps points npm at a throwaway scoped .npmrc via
+ * `NPM_CONFIG_USERCONFIG`, which makes npm IGNORE the user's own ~/.npmrc —
+ * including its `//<proxy>/:_authToken=` line. A logged-in user therefore hit
+ * the proxy anonymously (401 Authentication required on a private dep).
+ *
+ * This module carries the user's proxy auth into the temp .npmrc WITHOUT ever
+ * writing a token value to disk:
+ *   - a user line already in env-reference form (`${VAR}`) is copied verbatim
+ *     (only when every referenced VAR is set — npm fails hard on an unset ref);
+ *   - a PLAINTEXT user token is moved into a child-process env var
+ *     (`SKIT_NPM_AUTH_<n>`) and the temp .npmrc gets `${SKIT_NPM_AUTH_<n>}`;
+ *   - with no user line, an `IST_SESSION_TOKEN` env (the IST session token the
+ *     proxy accepts as Bearer) yields a `${IST_SESSION_TOKEN}` reference line.
+ * With none of these, no auth line is produced — the anonymous behavior is
+ * unchanged.
+ */
+/** Env var that carries the IST session token the registry-proxy accepts. */
+export declare const IST_SESSION_TOKEN_ENV = "IST_SESSION_TOKEN";
+/** Prefix for the child-only env vars that carry a plaintext user token. */
+export declare const SKIT_NPM_AUTH_ENV_PREFIX = "SKIT_NPM_AUTH_";
+export interface InheritedNpmAuth {
+    /** `.npmrc` lines to append — env references only, never a token value. */
+    lines: string[];
+    /** Extra env for the npm child process (plaintext tokens live ONLY here). */
+    env: Record<string, string>;
+}
+/**
+ * Path of the user's npm config as npm itself would pick it: the ORIGINAL
+ * `NPM_CONFIG_USERCONFIG` (case-insensitive, as npm reads it) or `~/.npmrc`.
+ */
+export declare function resolveUserNpmrcPath(env?: NodeJS.ProcessEnv): string;
+/**
+ * Build the auth lines + child env that let a temp .npmrc authenticate against
+ * `registryUrl` the same way the user's own npm config would. Pure given its
+ * inputs (`npmrcContent` is the user's npmrc body, or null when unreadable).
+ * Exported for tests.
+ */
+export declare function buildInheritedNpmAuth(registryUrl: string, npmrcContent: string | null, env?: NodeJS.ProcessEnv): InheritedNpmAuth;
+/**
+ * Read the user's npm config (see {@link resolveUserNpmrcPath}) and build the
+ * inherited auth for `registryUrl`. A missing/unreadable config is not an error
+ * (it just contributes no lines).
+ */
+export declare function resolveInheritedNpmAuth(registryUrl: string, env?: NodeJS.ProcessEnv): InheritedNpmAuth;
+/**
+ * Strip credentials from a URL for display: userinfo and the query string are
+ * dropped (tokens never belong in a reported URL). Non-URLs are returned as-is.
+ */
+export declare function redactUrl(url: string): string;
+/**
+ * Remove anything token-shaped from free text before it is surfaced: the given
+ * secret values, `_authToken=`/`_auth=` values, and `Bearer`/`token` headers.
+ */
+export declare function redactSecrets(text: string, secrets?: string[]): string;
+/** Actionable hint for an HTTP status from a registry. */
+export declare function httpStatusHint(status: number): string;
+/**
+ * Format a registry HTTP failure: `HTTP <status> [<statusText>] <METHOD> <url>`
+ * plus a hint for 401/403. The URL is always redacted.
+ */
+export declare function formatHttpFailure(status: number, url: string, opts?: {
+    statusText?: string;
+    method?: string;
+}): string;
+export interface NpmHttpFailure {
+    status: number;
+    method?: string;
+    url?: string;
+}
+/**
+ * Pull the HTTP status + URL out of npm's error output, e.g.
+ *   `npm error 401 Unauthorized - GET https://proxy/@scope%2fpkg - Authentication required`
+ *   `npm ERR! 404 Not Found - GET https://proxy/@scope%2fpkg - Not found`
+ *   `npm error code E403`
+ * Returns null when npm's output carries no HTTP status.
+ */
+export declare function parseNpmHttpFailure(output: string): NpmHttpFailure | null;
+/**
+ * Build the error message for a failed `npm install -g` batch: surfaces the
+ * real HTTP status + (redacted) URL when npm reports one, with an auth hint for
+ * 401/403, and redacts any token material from npm's own output.
+ */
+export declare function formatNpmInstallError(specs: string[], rawMessage: string, secrets?: string[]): string;
+/**
+ * A registry HTTP failure carrying the real status + (redacted) URL, so callers
+ * can branch on it (e.g. 401/403 → fall back to another source) without
+ * parsing message text.
+ */
+export declare class RegistryHttpError extends Error {
+    readonly status: number;
+    readonly url: string;
+    constructor(message: string, status: number, url: string);
+}
+/** True for a 401/403 (auth / entitlement) registry failure. */
+export declare function isAuthDenied(error: unknown): error is RegistryHttpError;
+//# sourceMappingURL=npm-auth.d.ts.map

package/node_modules/@microwiseai/skit/dist/utils/npm-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-auth.d.ts","sourceRoot":"","sources":["../../src/utils/npm-auth.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAEzD,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,mBAAmB,CAAC;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAIjF;AAcD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,gBAAgB,CAoClB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,gBAAgB,CAQlB;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAW7C;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,EAAO,GAAG,MAAM,CAU1E;AAED,0DAA0D;AAC1D,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAYrD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAClD,MAAM,CAKR;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CASzE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EAAE,EACf,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,MAAM,EAAO,GACrB,MAAM,CASR;AAED;;;;GAIG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBACT,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;CAMzD;AAED,gEAAgE;AAChE,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAEvE"}

package/node_modules/@microwiseai/skit/dist/utils/profile-permissions.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Profile permission overlays.
+ *
+ * A paid add-on kit (e.g. @ist/smon-kit) can declare `profilePermissions` in its
+ * skit.json to grant `allowedTools` entries to a profile shipped by a DIFFERENT
+ * (typically free) base kit — for example re-granting `Bash(smon:*)` to the
+ * `tda-manager` profile that @ist/tda-kit-free intentionally ships without it.
+ *
+ * On install we union the declared entries into the installed profile's YAML
+ * front-matter `allowedTools:` list; on uninstall we remove exactly what we added
+ * (the applied set is recorded in the installed-kits registry so removal never
+ * touches permissions the base profile legitimately owns).
+ *
+ * Front-matter is edited textually (no YAML dependency) so existing formatting,
+ * comments and key ordering are preserved. Only the `allowedTools:` list block is
+ * touched.
+ */
+import { type ProfilePermissions, type SkitManifest } from '../types/skit.js';
+/** Map of profileName -> allowedTools entries actually applied (for reversal). */
+export type AppliedProfileGrants = Record<string, string[]>;
+/**
+ * Union `tools` into a profile's `allowedTools` front-matter list.
+ * Returns the (possibly unchanged) content and the subset actually added.
+ */
+export declare function addToolsToProfile(content: string, tools: string[]): {
+    content: string;
+    added: string[];
+};
+/**
+ * Remove `tools` from a profile's `allowedTools` front-matter list.
+ * Returns the (possibly unchanged) content and the subset actually removed.
+ */
+export declare function removeToolsFromProfile(content: string, tools: string[]): {
+    content: string;
+    removed: string[];
+};
+interface OverlayOptions {
+    dryRun?: boolean;
+    onProgress?: (message: string) => void;
+}
+/**
+ * Apply a manifest's `profilePermissions` to the installed profiles.
+ * Returns the grants actually applied (profile -> added tools), for later reversal.
+ */
+export declare function applyProfilePermissions(manifest: SkitManifest, options?: OverlayOptions): Promise<AppliedProfileGrants>;
+/**
+ * Reverse previously-applied profile permission grants (on uninstall).
+ * `grants` is the recorded profile -> tools map from the registry.
+ */
+export declare function removeProfilePermissions(grants: ProfilePermissions, options?: OverlayOptions & {
+    installProfiles?: string;
+}): Promise<AppliedProfileGrants>;
+export {};
+//# sourceMappingURL=profile-permissions.d.ts.map

package/node_modules/@microwiseai/skit/dist/utils/profile-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-permissions.d.ts","sourceRoot":"","sources":["../../src/utils/profile-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,YAAY,EAClB,MAAM,kBAAkB,CAAC;AAE1B,kFAAkF;AAClF,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAiD5D;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EAAE,GACd;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAsBtC;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EAAE,GACd;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAexC;AAED,UAAU,cAAc;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAOD;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,YAAY,EACtB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,oBAAoB,CAAC,CA4B/B;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,kBAAkB,EAC1B,OAAO,GAAE,cAAc,GAAG;IAAE,eAAe,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1D,OAAO,CAAC,oBAAoB,CAAC,CAuB/B"}

package/node_modules/@microwiseai/skit/dist/utils/skit-config.d.ts

@@ -0,0 +1,41 @@
+/** Installer config shape (P1: registryUrl; P2 T1: gitlabHost / gitlabGroup). */
+export interface SkitConfig {
+    /** Default proxy/registry base URL (layer ③ of getRegistryUrl). */
+    registryUrl?: string;
+    /**
+     * Default GitLab host (P2 #4). Bare host (e.g. "gitlab.acme.com"); a scheme is
+     * stripped by `getGitlabHost`. Layer ② of the host chain (below IST_GITLAB_HOST
+     * env, above the built-in gitlab.com).
+     */
+    gitlabHost?: string;
+    /**
+     * Installer-default GitLab group name (P2 #5). Layer below the author's
+     * manifest `registry[scope].group` and the IST_GITLAB_GROUP env.
+     */
+    gitlabGroup?: string;
+}
+/**
+ * Resolve the config file path: `$XDG_CONFIG_HOME/skit/config.json` when
+ * `XDG_CONFIG_HOME` is set (and non-empty), else `~/.config/skit/config.json`.
+ * @internal Exported for testing.
+ */
+export declare function getSkitConfigPath(): string;
+/** Read + parse the config file (no cache). @internal Exported for testing. */
+export declare function readSkitConfig(): SkitConfig;
+/** Load the installer config, cached for the process lifetime. */
+export declare function loadSkitConfig(): SkitConfig;
+/** Clear the module-level cache (test seam). @internal */
+export declare function resetSkitConfigCache(): void;
+/** Keys `skit config set|get|unset` manages (the fields of {@link SkitConfig}). */
+export declare const SKIT_CONFIG_KEYS: readonly ["registryUrl", "gitlabHost", "gitlabGroup"];
+export type SkitConfigKey = (typeof SKIT_CONFIG_KEYS)[number];
+/** Validate a key for `skit config`. Throws on an unknown key. */
+export declare function parseSkitConfigKey(key: string): SkitConfigKey;
+/**
+ * Set (value string) or remove (value undefined) one key in the config file.
+ * Other keys in the file — including ones this version does not know — are
+ * kept as they are. A malformed file is NOT overwritten (throws instead).
+ * Resets the read cache.
+ */
+export declare function updateSkitConfig(key: SkitConfigKey, value: string | undefined): string;
+//# sourceMappingURL=skit-config.d.ts.map

package/node_modules/@microwiseai/skit/dist/utils/skit-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skit-config.d.ts","sourceRoot":"","sources":["../../src/utils/skit-config.ts"],"names":[],"mappings":"AAyBA,iFAAiF;AACjF,MAAM,WAAW,UAAU;IACzB,mEAAmE;IACnE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAI1C;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,IAAI,UAAU,CA4B3C;AAED,kEAAkE;AAClE,wBAAgB,cAAc,IAAI,UAAU,CAI3C;AAED,0DAA0D;AAC1D,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,uDAAwD,CAAC;AACtF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,kEAAkE;AAClE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAG7D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAwBtF"}

package/node_modules/@microwiseai/skit/dist/utils/skit-parser.d.ts

@@ -1,4 +1,9 @@
 import type { SkitManifest } from '../types/skit.js';
+/**
+ * Validate that the prompt install path is a valid scoped directory.
+ * Returns null if valid, or an error message string if invalid.
+ */
+export declare function validatePromptInstallPath(manifest: SkitManifest): string | null;
 /**
  * Parse skit.json from a staging directory
  */

package/node_modules/@microwiseai/skit/dist/utils/skit-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skit-parser.d.ts","sourceRoot":"","sources":["../../src/utils/skit-parser.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA+BjF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAU9D"}
+{"version":3,"file":"skit-parser.d.ts","sourceRoot":"","sources":["../../src/utils/skit-parser.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAYrD;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,GAAG,IAAI,CAgC/E;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA+BjF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAU9D"}

package/node_modules/@microwiseai/skit/dist/utils/temp-npmrc.d.ts

@@ -0,0 +1,70 @@
+/**
+ * A throwaway .npmrc that routes one or more npm scopes to a given registry
+ * (typically the registry-proxy) for an ANONYMOUS read — no auth token is
+ * written. Callers point npm at it via `NPM_CONFIG_USERCONFIG` for a single
+ * install, then call `cleanup()`.
+ *
+ * This replicates what glpkg does internally (scope -> registry with no auth
+ * line when no token is present) WITHOUT requiring the glpkg binary.
+ */
+export interface TempNpmrc {
+    /** Absolute path to the generated .npmrc file. */
+    path: string;
+    /** Remove the temp directory. Safe to call more than once. */
+    cleanup: () => void;
+}
+/**
+ * Build the .npmrc body mapping each scope to `registryUrl` (no auth line).
+ * Scopes are normalized to start with '@' and de-duplicated. Exported for tests.
+ *
+ * `overrides` pins specific scopes to a different registry (e.g. an npmjs-native
+ * scope routed to public npmjs instead of the proxy). Override lines are emitted
+ * first and win over the default `registryUrl` for the same scope.
+ *
+ * @example
+ * buildScopedNpmrcContent(['@ist', 'microwiseai'], 'https://proxy/')
+ * // => "@ist:registry=https://proxy/\n@microwiseai:registry=https://proxy/\n"
+ * @example
+ * buildScopedNpmrcContent(['@ist'], 'https://proxy/', { '@glpkg': 'https://registry.npmjs.org/' })
+ * // => "@glpkg:registry=https://registry.npmjs.org/\n@ist:registry=https://proxy/\n"
+ */
+export declare function buildScopedNpmrcContent(scopes: string[], registryUrl: string, overrides?: Record<string, string>): string;
+/**
+ * Write a temporary scoped .npmrc under the OS temp dir and return its path plus
+ * a cleanup handle. `overrides` pins specific scopes to a different registry
+ * (see buildScopedNpmrcContent). `extraLines` are appended verbatim — callers
+ * use it ONLY for env-reference auth lines (`//host/:_authToken=${VAR}`, see
+ * utils/npm-auth.ts), so no token value is ever written. With no extra lines
+ * the file is anonymous (unchanged behavior). The file is created 0600.
+ */
+export declare function writeScopedNpmrc(scopes: string[], registryUrl: string, overrides?: Record<string, string>, extraLines?: string[]): TempNpmrc;
+/** One GitLab-direct scope → its group registry base URL. */
+export interface GitlabScopeEntry {
+    /** npm scope, e.g. '@ist' (normalized to start with '@'). */
+    scope: string;
+    /** GitLab group npm registry base URL for this scope (from manifest registry). */
+    registryUrl: string;
+}
+/**
+ * Convert a registry base URL to its npm auth-key prefix: npm keys `_authToken`
+ * lines by the scheme-less `//host/path/` form. e.g.
+ *   `https://gitlab.com/api/v4/groups/9/-/packages/npm/`
+ *     -> `//gitlab.com/api/v4/groups/9/-/packages/npm/`
+ * A trailing slash is preserved (npm matches the registry path exactly).
+ */
+export declare function npmrcAuthKey(registryUrl: string): string;
+/**
+ * Build a GitLab-direct .npmrc body: per-scope `@scope:registry=<url>` lines plus,
+ * when `token` is non-null, one `//<host/path>/:_authToken=<token>` line per
+ * DISTINCT registry base. When `token` is null the body carries NO auth line —
+ * an anonymous read, so a PUBLIC package still installs token-free (the no-token
+ * public invariant is preserved for the gitlab origin too). Exported for tests.
+ */
+export declare function buildGitlabNpmrcContent(entries: GitlabScopeEntry[], token: string | null): string;
+/**
+ * Write a temporary GitLab-direct scoped .npmrc (see buildGitlabNpmrcContent) and
+ * return its path + cleanup handle. Anonymous-tolerant: pass `token: null` for a
+ * token-free (public) install, or a PAT to authenticate a private read.
+ */
+export declare function writeGitlabScopedNpmrc(entries: GitlabScopeEntry[], token: string | null): TempNpmrc;
+//# sourceMappingURL=temp-npmrc.d.ts.map

package/node_modules/@microwiseai/skit/dist/utils/temp-npmrc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"temp-npmrc.d.ts","sourceRoot":"","sources":["../../src/utils/temp-npmrc.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACxB,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EAAE,EAChB,WAAW,EAAE,MAAM,EACnB,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACrC,MAAM,CAaR;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EAAE,EAChB,WAAW,EAAE,MAAM,EACnB,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,EACtC,UAAU,GAAE,MAAM,EAAO,GACxB,SAAS,CAiBX;AAED,6DAA6D;AAC7D,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,gBAAgB,EAAE,EAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,MAAM,CAmBR;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,gBAAgB,EAAE,EAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,SAAS,CAcX"}

package/node_modules/@microwiseai/skit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microwiseai/skit",
-  "version": "0.1.19",
+  "version": "0.1.45",
   "description": "CLI and library for installing skit packages to correct component locations",
   "type": "module",
   "main": "./dist/lib.js",
@@ -16,14 +16,19 @@
     }
   },
   "bin": {
-    "skit": "./dist/index.js"
+    "skit": "dist/index.js"
   },
   "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
+    "build": "node scripts/build.mjs",
+    "typecheck": "tsc --noEmit",
+    "dev": "node scripts/build.mjs",
     "test": "vitest",
     "test:run": "vitest run",
-    "prepublishOnly": "npm run build"
+    "test:e2e:network": "SKIT_E2E_NETWORK=1 vitest run src/__tests__/version-resolve.test.ts",
+    "prepublishOnly": "npm run build",
+    "publish:glpkg": "glpkg publish",
+    "publish:npm": "node scripts/publish-npm.mjs",
+    "publish:all": "npm run publish:glpkg && npm run publish:npm"
   },
   "files": [
     "dist"
@@ -37,18 +42,43 @@
   ],
   "author": "Microature",
   "license": "MIT",
-  "dependencies": {
-    "@ist/registry-config": "^0.1.1",
-    "chalk": "^5.3.0",
-    "commander": "^12.1.0",
-    "tar": "^7.5.12"
+  "comment:dependencies": "Runtime deps are esbuild-inlined into dist/ (see scripts/build.mjs); the published package has ZERO runtime dependencies so it installs from ANY registry (npmjs included) with no @microwiseai/@glpkg auth. The former runtime deps (@glpkg/cli, @microwiseai/distkit(-schema), chalk, commander, semver, tar) live under devDependencies because they are only needed at build time to bundle.",
+  "dependencies": {},
+  "comment:peerDependencies": "distkit(-schema) are OPTIONAL peers (peerDependenciesMeta.optional): they are NOT on npmjs, so making them hard deps would break a public install. Optional keeps npmjs CLI installs clean (npm never tries to fetch them) while letting a GitLab-registry LIB consumer converge on the SAME distkit the bundle was built against (no directive-shape skew). Peers are not installed/bundled — bundling uses the devDependencies copy via esbuild — so the ZERO-runtime-deps invariant is unaffected.",
+  "peerDependencies": {
+    "@microwiseai/distkit": "0.7.0",
+    "@microwiseai/distkit-schema": "0.5.2"
+  },
+  "peerDependenciesMeta": {
+    "@microwiseai/distkit": {
+      "optional": true
+    },
+    "@microwiseai/distkit-schema": {
+      "optional": true
+    }
   },
   "devDependencies": {
+    "@glpkg/cli": "0.16.1",
+    "@microwiseai/distkit": "0.7.0",
+    "@microwiseai/distkit-schema": "0.5.2",
     "@types/node": "^20.11.0",
+    "@types/semver": "^7.5.0",
+    "chalk": "^5.3.0",
+    "commander": "^12.1.0",
+    "esbuild": "^0.27.2",
+    "semver": "^7.8.0",
+    "tar": "^7.5.12",
     "typescript": "^5.7.3",
     "vitest": "^3.0.4"
   },
   "engines": {
     "node": ">=18.0.0"
+  },
+  "glpkg": {
+    "group": "microwiseai"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://gitlab.com/microwiseai/ist.skit.skit-cli.git"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microwiseai/snapshot",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "description": "CLI for installing IST Snapshot packages",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -52,7 +52,7 @@
   "dependencies": {
     "@microwiseai/import-telemetry": "^0.1.0",
     "@microwiseai/license": "^0.1.4",
-    "@microwiseai/skit": "^0.1.19",
+    "@microwiseai/skit": "^0.1.45",
     "@microwiseai/snapshot-dedup": "0.2.0",
     "@microwiseai/snapshot-downgrade-guard": "0.1.0",
     "@microwiseai/snapshot-parallel": "^0.1.0",

package/node_modules/@isaacs/fs-minipass/LICENSE

@@ -1,15 +0,0 @@
-The ISC License
-
-Copyright (c) Isaac Z. Schlueter and Contributors
-
-Permission to use, copy, modify, and/or distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
-IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

package/node_modules/@isaacs/fs-minipass/README.md

@@ -1,71 +0,0 @@
-# fs-minipass
-
-Filesystem streams based on [minipass](http://npm.im/minipass).
-
-4 classes are exported:
-
-- ReadStream
-- ReadStreamSync
-- WriteStream
-- WriteStreamSync
-
-When using `ReadStreamSync`, all of the data is made available
-immediately upon consuming the stream.  Nothing is buffered in memory
-when the stream is constructed.  If the stream is piped to a writer,
-then it will synchronously `read()` and emit data into the writer as
-fast as the writer can consume it.  (That is, it will respect
-backpressure.)  If you call `stream.read()` then it will read the
-entire file and return the contents.
-
-When using `WriteStreamSync`, every write is flushed to the file
-synchronously.  If your writes all come in a single tick, then it'll
-write it all out in a single tick.  It's as synchronous as you are.
-
-The async versions work much like their node builtin counterparts,
-with the exception of introducing significantly less Stream machinery
-overhead.
-
-## USAGE
-
-It's just streams, you pipe them or read() them or write() to them.
-
-```js
-import { ReadStream, WriteStream } from 'fs-minipass'
-// or: const { ReadStream, WriteStream } = require('fs-minipass')
-const readStream = new ReadStream('file.txt')
-const writeStream = new WriteStream('output.txt')
-writeStream.write('some file header or whatever\n')
-readStream.pipe(writeStream)
-```
-
-## ReadStream(path, options)
-
-Path string is required, but somewhat irrelevant if an open file
-descriptor is passed in as an option.
-
-Options:
-
-- `fd` Pass in a numeric file descriptor, if the file is already open.
-- `readSize` The size of reads to do, defaults to 16MB
-- `size` The size of the file, if known.  Prevents zero-byte read()
-  call at the end.
-- `autoClose` Set to `false` to prevent the file descriptor from being
-  closed when the file is done being read.
-
-## WriteStream(path, options)
-
-Path string is required, but somewhat irrelevant if an open file
-descriptor is passed in as an option.
-
-Options:
-
-- `fd` Pass in a numeric file descriptor, if the file is already open.
-- `mode` The mode to create the file with. Defaults to `0o666`.
-- `start` The position in the file to start reading.  If not
-  specified, then the file will start writing at position zero, and be
-  truncated by default.
-- `autoClose` Set to `false` to prevent the file descriptor from being
-  closed when the stream is ended.
-- `flags` Flags to use when opening the file.  Irrelevant if `fd` is
-  passed in, since file won't be opened in that case.  Defaults to
-  `'a'` if a `pos` is specified, or `'w'` otherwise.

package/node_modules/@isaacs/fs-minipass/dist/commonjs/index.d.ts

@@ -1,118 +0,0 @@
-/// <reference types="node" />
-/// <reference types="node" />
-/// <reference types="node" />
-import EE from 'events';
-import { Minipass } from 'minipass';
-declare const _autoClose: unique symbol;
-declare const _close: unique symbol;
-declare const _ended: unique symbol;
-declare const _fd: unique symbol;
-declare const _finished: unique symbol;
-declare const _flags: unique symbol;
-declare const _flush: unique symbol;
-declare const _handleChunk: unique symbol;
-declare const _makeBuf: unique symbol;
-declare const _mode: unique symbol;
-declare const _needDrain: unique symbol;
-declare const _onerror: unique symbol;
-declare const _onopen: unique symbol;
-declare const _onread: unique symbol;
-declare const _onwrite: unique symbol;
-declare const _open: unique symbol;
-declare const _path: unique symbol;
-declare const _pos: unique symbol;
-declare const _queue: unique symbol;
-declare const _read: unique symbol;
-declare const _readSize: unique symbol;
-declare const _reading: unique symbol;
-declare const _remain: unique symbol;
-declare const _size: unique symbol;
-declare const _write: unique symbol;
-declare const _writing: unique symbol;
-declare const _defaultFlag: unique symbol;
-declare const _errored: unique symbol;
-export type ReadStreamOptions = Minipass.Options<Minipass.ContiguousData> & {
-    fd?: number;
-    readSize?: number;
-    size?: number;
-    autoClose?: boolean;
-};
-export type ReadStreamEvents = Minipass.Events<Minipass.ContiguousData> & {
-    open: [fd: number];
-};
-export declare class ReadStream extends Minipass<Minipass.ContiguousData, Buffer, ReadStreamEvents> {
-    [_errored]: boolean;
-    [_fd]?: number;
-    [_path]: string;
-    [_readSize]: number;
-    [_reading]: boolean;
-    [_size]: number;
-    [_remain]: number;
-    [_autoClose]: boolean;
-    constructor(path: string, opt: ReadStreamOptions);
-    get fd(): number | undefined;
-    get path(): string;
-    write(): void;
-    end(): void;
-    [_open](): void;
-    [_onopen](er?: NodeJS.ErrnoException | null, fd?: number): void;
-    [_makeBuf](): Buffer;
-    [_read](): void;
-    [_onread](er?: NodeJS.ErrnoException | null, br?: number, buf?: Buffer): void;
-    [_close](): void;
-    [_onerror](er: NodeJS.ErrnoException): void;
-    [_handleChunk](br: number, buf: Buffer): boolean;
-    emit<Event extends keyof ReadStreamEvents>(ev: Event, ...args: ReadStreamEvents[Event]): boolean;
-}
-export declare class ReadStreamSync extends ReadStream {
-    [_open](): void;
-    [_read](): void;
-    [_close](): void;
-}
-export type WriteStreamOptions = {
-    fd?: number;
-    autoClose?: boolean;
-    mode?: number;
-    captureRejections?: boolean;
-    start?: number;
-    flags?: string;
-};
-export declare class WriteStream extends EE {
-    readable: false;
-    writable: boolean;
-    [_errored]: boolean;
-    [_writing]: boolean;
-    [_ended]: boolean;
-    [_queue]: Buffer[];
-    [_needDrain]: boolean;
-    [_path]: string;
-    [_mode]: number;
-    [_autoClose]: boolean;
-    [_fd]?: number;
-    [_defaultFlag]: boolean;
-    [_flags]: string;
-    [_finished]: boolean;
-    [_pos]?: number;
-    constructor(path: string, opt: WriteStreamOptions);
-    emit(ev: string, ...args: any[]): boolean;
-    get fd(): number | undefined;
-    get path(): string;
-    [_onerror](er: NodeJS.ErrnoException): void;
-    [_open](): void;
-    [_onopen](er?: null | NodeJS.ErrnoException, fd?: number): void;
-    end(buf: string, enc?: BufferEncoding): this;
-    end(buf?: Buffer, enc?: undefined): this;
-    write(buf: string, enc?: BufferEncoding): boolean;
-    write(buf: Buffer, enc?: undefined): boolean;
-    [_write](buf: Buffer): void;
-    [_onwrite](er?: null | NodeJS.ErrnoException, bw?: number): void;
-    [_flush](): void;
-    [_close](): void;
-}
-export declare class WriteStreamSync extends WriteStream {
-    [_open](): void;
-    [_close](): void;
-    [_write](buf: Buffer): void;
-}
-export {};
-//# sourceMappingURL=index.d.ts.map

package/node_modules/@isaacs/fs-minipass/dist/commonjs/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;AAAA,OAAO,EAAE,MAAM,QAAQ,CAAA;AAEvB,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAInC,QAAA,MAAM,UAAU,eAAuB,CAAA;AACvC,QAAA,MAAM,MAAM,eAAmB,CAAA;AAC/B,QAAA,MAAM,MAAM,eAAmB,CAAA;AAC/B,QAAA,MAAM,GAAG,eAAgB,CAAA;AACzB,QAAA,MAAM,SAAS,eAAsB,CAAA;AACrC,QAAA,MAAM,MAAM,eAAmB,CAAA;AAC/B,QAAA,MAAM,MAAM,eAAmB,CAAA;AAC/B,QAAA,MAAM,YAAY,eAAyB,CAAA;AAC3C,QAAA,MAAM,QAAQ,eAAqB,CAAA;AACnC,QAAA,MAAM,KAAK,eAAkB,CAAA;AAC7B,QAAA,MAAM,UAAU,eAAuB,CAAA;AACvC,QAAA,MAAM,QAAQ,eAAqB,CAAA;AACnC,QAAA,MAAM,OAAO,eAAoB,CAAA;AACjC,QAAA,MAAM,OAAO,eAAoB,CAAA;AACjC,QAAA,MAAM,QAAQ,eAAqB,CAAA;AACnC,QAAA,MAAM,KAAK,eAAkB,CAAA;AAC7B,QAAA,MAAM,KAAK,eAAkB,CAAA;AAC7B,QAAA,MAAM,IAAI,eAAiB,CAAA;AAC3B,QAAA,MAAM,MAAM,eAAmB,CAAA;AAC/B,QAAA,MAAM,KAAK,eAAkB,CAAA;AAC7B,QAAA,MAAM,SAAS,eAAsB,CAAA;AACrC,QAAA,MAAM,QAAQ,eAAqB,CAAA;AACnC,QAAA,MAAM,OAAO,eAAoB,CAAA;AACjC,QAAA,MAAM,KAAK,eAAkB,CAAA;AAC7B,QAAA,MAAM,MAAM,eAAmB,CAAA;AAC/B,QAAA,MAAM,QAAQ,eAAqB,CAAA;AACnC,QAAA,MAAM,YAAY,eAAyB,CAAA;AAC3C,QAAA,MAAM,QAAQ,eAAqB,CAAA;AAEnC,MAAM,MAAM,iBAAiB,GAC3B,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG;IAC1C,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB,CAAA;AAEH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG;IACxE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;CACnB,CAAA;AAED,qBAAa,UAAW,SAAQ,QAAQ,CACtC,QAAQ,CAAC,cAAc,EACvB,MAAM,EACN,gBAAgB,CACjB;IACC,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAS;IAC5B,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAChB,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAS;IAC5B,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAChB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;gBAET,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB;IA4BhD,IAAI,EAAE,uBAEL;IAED,IAAI,IAAI,WAEP;IAGD,KAAK;IAKL,GAAG;IAIH,CAAC,KAAK,CAAC;IAIP,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,cAAc,GAAG,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM;IAUxD,CAAC,QAAQ,CAAC;IAIV,CAAC,KAAK,CAAC;IAeP,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,cAAc,GAAG,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;IAStE,CAAC,MAAM,CAAC;IAUR,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,cAAc;IAMpC,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;IAiBtC,IAAI,CAAC,KAAK,SAAS,MAAM,gBAAgB,EACvC,EAAE,EAAE,KAAK,EACT,GAAG,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAC/B,OAAO;CAuBX;AAED,qBAAa,cAAe,SAAQ,UAAU;IAC5C,CAAC,KAAK,CAAC;IAYP,CAAC,KAAK,CAAC;IA2BP,CAAC,MAAM,CAAC;CAQT;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,qBAAa,WAAY,SAAQ,EAAE;IACjC,QAAQ,EAAE,KAAK,CAAQ;IACvB,QAAQ,EAAE,OAAO,CAAQ;IACzB,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAS;IAC5B,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAS;IAC5B,CAAC,MAAM,CAAC,EAAE,OAAO,CAAS;IAC1B,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAM;IACxB,CAAC,UAAU,CAAC,EAAE,OAAO,CAAS;IAC9B,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAChB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAChB,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IACtB,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IACxB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAS;IAC7B,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAA;gBAEH,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB;IAoBjD,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE;IAU/B,IAAI,EAAE,uBAEL;IAED,IAAI,IAAI,WAEP;IAED,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,cAAc;IAMpC,CAAC,KAAK,CAAC;IAMP,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC,EAAE,MAAM;IAoBxD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,cAAc,GAAG,IAAI;IAC5C,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,IAAI;IAoBxC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,cAAc,GAAG,OAAO;IACjD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO;IAsB5C,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM;IAWpB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC,EAAE,MAAM;IAwBzD,CAAC,MAAM,CAAC;IAgBR,CAAC,MAAM,CAAC;CAST;AAED,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,CAAC,KAAK,CAAC,IAAI,IAAI;IAsBf,CAAC,MAAM,CAAC;IASR,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM;CAmBrB"}