@mrpatronz/nexusflow 2.2.0 → 2.3.0

package/dist/resources/materializer.js

@@ -0,0 +1,439 @@
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { createHash, randomUUID } from 'node:crypto';
+import fse from 'fs-extra';
+import { acquireLock, createMutationQueue } from '../core/locks.js';
+import { parseSkillMarkdown, serializeSkillMarkdown } from '../utils/skills-catalog.js';
+import { serializeCodexAgentToml } from './codex-agent.js';
+import { formatValidationError, codexAgentNameSchema, resourceIdSchema, resourceLockSchema, skillFrontmatterSchema, } from './contracts.js';
+import { assertNoLinkedPathComponents, assertPathIsNotLink, assertPathWithin, atomicWriteJson, } from './fs-safety.js';
+const LOCK_FILE = path.join('.nexusflow', 'resources.lock.json');
+const runMaterialization = createMutationQueue();
+const PORTABLE_SKILL_ASSISTANTS = new Set(['codex', 'antigravity', 'cursor', 'copilot']);
+const ALLOWED_SKILL_ROOT_ENTRIES = new Set(['SKILL.md', 'scripts', 'references', 'assets', 'agents']);
+export class ResourceConflictError extends Error {
+    conflicts;
+    constructor(conflicts) {
+        super(`Resource materialization conflicts:\n- ${conflicts.join('\n- ')}`);
+        this.name = 'ResourceConflictError';
+        this.conflicts = conflicts;
+    }
+}
+function toPosix(relativePath) {
+    return relativePath.split(path.sep).join('/');
+}
+function hashBytes(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+function errorCode(error) {
+    return typeof error === 'object' && error !== null && 'code' in error
+        ? String(error.code)
+        : undefined;
+}
+async function hashFile(filePath) {
+    return hashBytes(await fs.readFile(filePath));
+}
+function portableMode(mode) {
+    return process.platform === 'win32' ? undefined : mode & 0o777;
+}
+async function fileMatchesOutput(filePath, output) {
+    if ((await hashFile(filePath)) !== output.hash)
+        return false;
+    if (output.mode === undefined)
+        return true;
+    return portableMode((await fs.stat(filePath)).mode) === output.mode;
+}
+function normalizeManagedPath(relativePath) {
+    if (path.isAbsolute(relativePath))
+        throw new Error(`Managed path must be relative: ${relativePath}`);
+    const normalized = path.normalize(relativePath);
+    if (normalized === '..' || normalized.startsWith(`..${path.sep}`)) {
+        throw new Error(`Managed path escapes the workspace: ${relativePath}`);
+    }
+    return toPosix(normalized);
+}
+async function walkSkillFiles(skill) {
+    if (!skill.sourcePath) {
+        const metadata = {
+            name: skill.id,
+            description: skill.description,
+            metadata: {
+                nexusflow: {
+                    title: skill.title || skill.name,
+                    category: skill.category,
+                    tags: skill.tags || [],
+                },
+            },
+        };
+        return [{
+                relativePath: 'SKILL.md',
+                bytes: Buffer.from(serializeSkillMarkdown(metadata, skill.content), 'utf-8'),
+                mode: process.platform === 'win32' ? undefined : 0o644,
+            }];
+    }
+    const sourceRoot = path.resolve(skill.sourcePath);
+    await assertPathIsNotLink(sourceRoot);
+    const entries = await fs.readdir(sourceRoot, { withFileTypes: true });
+    for (const entry of entries) {
+        if (!ALLOWED_SKILL_ROOT_ENTRIES.has(entry.name)) {
+            throw new Error(`Unsupported top-level entry in skill "${skill.id}": ${entry.name}`);
+        }
+    }
+    const files = [];
+    async function walk(directory) {
+        await assertNoLinkedPathComponents(sourceRoot, directory);
+        for (const entry of await fs.readdir(directory, { withFileTypes: true })) {
+            if (entry.isSymbolicLink()) {
+                throw new Error(`Linked files are not allowed in managed skills: ${entry.name}`);
+            }
+            const absolute = path.join(directory, entry.name);
+            if (entry.isDirectory()) {
+                await walk(absolute);
+            }
+            else if (entry.isFile()) {
+                const relativePath = toPosix(path.relative(sourceRoot, absolute));
+                let bytes = await fs.readFile(absolute);
+                if (relativePath === 'SKILL.md') {
+                    const parsed = parseSkillMarkdown(bytes.toString('utf-8'));
+                    const validated = skillFrontmatterSchema.safeParse(parsed.metadata);
+                    if (!validated.success) {
+                        throw new Error(`Invalid SKILL.md for "${skill.id}": ${formatValidationError(validated.error)}`);
+                    }
+                    const portableMetadata = {
+                        name: validated.data.name,
+                        description: validated.data.description,
+                    };
+                    if (validated.data.license)
+                        portableMetadata.license = validated.data.license;
+                    if (validated.data.compatibility)
+                        portableMetadata.compatibility = validated.data.compatibility;
+                    if (validated.data.metadata)
+                        portableMetadata.metadata = validated.data.metadata;
+                    if (validated.data['allowed-tools'])
+                        portableMetadata['allowed-tools'] = validated.data['allowed-tools'];
+                    bytes = Buffer.from(serializeSkillMarkdown(portableMetadata, parsed.content), 'utf-8');
+                }
+                files.push({ relativePath, bytes, mode: portableMode((await fs.stat(absolute)).mode) });
+            }
+        }
+    }
+    await walk(sourceRoot);
+    if (!files.some((file) => file.relativePath === 'SKILL.md')) {
+        throw new Error(`Skill "${skill.id}" is missing SKILL.md.`);
+    }
+    return files.sort((a, b) => a.relativePath.localeCompare(b.relativePath));
+}
+async function buildDesiredFiles(assistants, skills, agents) {
+    const desired = new Map();
+    for (const skill of skills) {
+        const skillId = resourceIdSchema.safeParse(skill.id);
+        if (!skillId.success || skillId.data !== skill.name) {
+            throw new Error(skillId.success
+                ? `Skill id and name must match: ${skill.id}`
+                : `Invalid skill identity: ${formatValidationError(skillId.error)}`);
+        }
+        const sourceFiles = await walkSkillFiles(skill);
+        const roots = new Map();
+        if (assistants.some((assistant) => PORTABLE_SKILL_ASSISTANTS.has(assistant))) {
+            roots.set(path.join('.agents', 'skills', skill.id), 'agent-skill-v1');
+        }
+        if (assistants.includes('claude')) {
+            roots.set(path.join('.claude', 'skills', skill.id), 'claude-skill-v1');
+        }
+        for (const [root, adapter] of roots) {
+            for (const sourceFile of sourceFiles) {
+                const outputPath = normalizeManagedPath(path.join(root, sourceFile.relativePath));
+                const item = {
+                    kind: 'skill',
+                    resourceId: skill.id,
+                    adapter,
+                    path: outputPath,
+                    hash: hashBytes(sourceFile.bytes),
+                    mode: sourceFile.mode,
+                    bytes: sourceFile.bytes,
+                    resourceRoot: normalizeManagedPath(root),
+                };
+                const existing = desired.get(outputPath);
+                if (existing && existing.hash !== item.hash) {
+                    throw new Error(`Multiple resources produce different content for ${outputPath}.`);
+                }
+                desired.set(outputPath, item);
+            }
+        }
+    }
+    if (assistants.includes('codex')) {
+        for (const agent of agents) {
+            const agentId = codexAgentNameSchema.safeParse(agent.id);
+            if (!agentId.success || agentId.data !== agent.name) {
+                throw new Error(agentId.success
+                    ? `Agent id and name must match: ${agent.id}`
+                    : `Invalid agent identity: ${formatValidationError(agentId.error)}`);
+            }
+            const bytes = Buffer.from(serializeCodexAgentToml(agent), 'utf-8');
+            const outputPath = normalizeManagedPath(path.join('.codex', 'agents', `${agent.id}.toml`));
+            desired.set(outputPath, {
+                kind: 'codex-agent',
+                resourceId: agent.id,
+                adapter: 'codex-agent-v1',
+                path: outputPath,
+                hash: hashBytes(bytes),
+                mode: process.platform === 'win32' ? undefined : 0o644,
+                bytes,
+                resourceRoot: outputPath,
+            });
+        }
+    }
+    return [...desired.values()].sort((a, b) => a.path.localeCompare(b.path));
+}
+async function loadLock(workspacePath) {
+    const lockPath = path.join(workspacePath, LOCK_FILE);
+    if (!(await fse.pathExists(lockPath)))
+        return { schemaVersion: 1, outputs: [] };
+    const parsed = resourceLockSchema.safeParse(JSON.parse(await fs.readFile(lockPath, 'utf-8')));
+    if (!parsed.success)
+        throw new Error(`Invalid workspace resource ownership lock: ${parsed.error.message}`);
+    for (const output of parsed.data.outputs) {
+        const normalizedPath = normalizeManagedPath(output.path);
+        const expectedRoot = managedResourceRoot(output);
+        const isValidPath = output.kind === 'codex-agent'
+            ? normalizedPath === expectedRoot
+            : normalizedPath.startsWith(`${expectedRoot}/`) && normalizedPath.length > expectedRoot.length + 1;
+        if (!isValidPath) {
+            throw new Error(`Invalid workspace resource ownership path: ${output.path}`);
+        }
+    }
+    return parsed.data;
+}
+function managedResourceRoot(output) {
+    if (output.kind === 'skill' && output.adapter === 'agent-skill-v1') {
+        return `.agents/skills/${output.resourceId}`;
+    }
+    if (output.kind === 'skill' && output.adapter === 'claude-skill-v1') {
+        return `.claude/skills/${output.resourceId}`;
+    }
+    if (output.kind === 'codex-agent' && output.adapter === 'codex-agent-v1') {
+        return `.codex/agents/${output.resourceId}.toml`;
+    }
+    throw new Error(`Invalid resource kind/adapter combination for ${output.path}.`);
+}
+function managedOutputDirectories(output) {
+    if (output.kind !== 'skill')
+        return [];
+    const root = managedResourceRoot(output);
+    const directories = [];
+    let current = path.posix.dirname(normalizeManagedPath(output.path));
+    while (current === root || current.startsWith(`${root}/`)) {
+        directories.push(current);
+        if (current === root)
+            break;
+        current = path.posix.dirname(current);
+    }
+    return directories;
+}
+async function listExistingTree(root) {
+    const files = [];
+    const directories = [];
+    const stat = await fs.lstat(root);
+    if (stat.isSymbolicLink())
+        throw new Error(`Linked managed resource roots are not allowed: ${root}`);
+    if (stat.isFile())
+        return { files: [root], directories };
+    if (!stat.isDirectory())
+        throw new Error(`Unsupported managed resource entry: ${root}`);
+    directories.push(root);
+    async function walk(directory) {
+        for (const entry of await fs.readdir(directory, { withFileTypes: true })) {
+            const absolute = path.join(directory, entry.name);
+            if (entry.isSymbolicLink()) {
+                throw new Error(`Linked files are not allowed in managed resource roots: ${absolute}`);
+            }
+            if (entry.isDirectory()) {
+                directories.push(absolute);
+                await walk(absolute);
+            }
+            else if (entry.isFile())
+                files.push(absolute);
+            else
+                throw new Error(`Unsupported managed resource entry: ${absolute}`);
+        }
+    }
+    await walk(root);
+    return { files, directories };
+}
+function oldOutputOwnsRoot(oldOutputs, root) {
+    const prefix = `${root.replaceAll('\\', '/')}/`;
+    return [...oldOutputs.keys()].some((item) => item === root || item.startsWith(prefix));
+}
+async function preflight(workspacePath, oldLock, desiredFiles) {
+    const conflicts = [];
+    const oldOutputs = new Map(oldLock.outputs.map((output) => [normalizeManagedPath(output.path), output]));
+    const oldOwnedDirectories = new Set(oldLock.outputs.flatMap(managedOutputDirectories));
+    for (const root of new Set(oldLock.outputs.map(managedResourceRoot))) {
+        const absoluteRoot = assertPathWithin(workspacePath, path.join(workspacePath, root));
+        await assertNoLinkedPathComponents(workspacePath, absoluteRoot);
+        if (!(await fse.pathExists(absoluteRoot)))
+            continue;
+        const existingTree = await listExistingTree(absoluteRoot);
+        for (const existingFile of existingTree.files) {
+            const relativePath = normalizeManagedPath(path.relative(workspacePath, existingFile));
+            if (!oldOutputs.has(relativePath)) {
+                conflicts.push(`${relativePath} exists inside a NexusFlow-managed resource but is not owned by NexusFlow`);
+            }
+        }
+        for (const existingDirectory of existingTree.directories) {
+            const relativePath = normalizeManagedPath(path.relative(workspacePath, existingDirectory));
+            if (!oldOwnedDirectories.has(relativePath)) {
+                conflicts.push(`${relativePath} exists inside a NexusFlow-managed resource but is not owned by NexusFlow`);
+            }
+        }
+    }
+    for (const root of new Set(desiredFiles.map((file) => file.resourceRoot))) {
+        const absoluteRoot = assertPathWithin(workspacePath, path.join(workspacePath, root));
+        await assertNoLinkedPathComponents(workspacePath, absoluteRoot);
+        if ((await fse.pathExists(absoluteRoot)) && !oldOutputOwnsRoot(oldOutputs, root)) {
+            conflicts.push(`${root} already exists and is not owned by NexusFlow`);
+        }
+    }
+    for (const desired of desiredFiles) {
+        const absolute = assertPathWithin(workspacePath, path.join(workspacePath, desired.path));
+        await assertNoLinkedPathComponents(workspacePath, absolute);
+        if (!(await fse.pathExists(absolute)))
+            continue;
+        const old = oldOutputs.get(desired.path);
+        if (!old) {
+            conflicts.push(`${desired.path} already exists and is not owned by NexusFlow`);
+            continue;
+        }
+        if (!(await fileMatchesOutput(absolute, old))) {
+            conflicts.push(`${desired.path} was modified after NexusFlow installed it`);
+        }
+    }
+    const desiredPaths = new Set(desiredFiles.map((file) => file.path));
+    for (const old of oldLock.outputs) {
+        const oldPath = normalizeManagedPath(old.path);
+        if (desiredPaths.has(oldPath))
+            continue;
+        const absolute = assertPathWithin(workspacePath, path.join(workspacePath, oldPath));
+        await assertNoLinkedPathComponents(workspacePath, absolute);
+        if ((await fse.pathExists(absolute)) && !(await fileMatchesOutput(absolute, old))) {
+            conflicts.push(`${oldPath} was modified and cannot be removed safely`);
+        }
+    }
+    if (conflicts.length)
+        throw new ResourceConflictError([...new Set(conflicts)]);
+}
+export async function reconcileWorkspaceResources(workspacePath, assistants, skills, agents, options = {}) {
+    return runMaterialization(async () => {
+        const canonicalWorkspace = await fs.realpath(workspacePath);
+        const nexusflowDir = path.join(canonicalWorkspace, '.nexusflow');
+        if (await fse.pathExists(nexusflowDir)) {
+            await assertNoLinkedPathComponents(canonicalWorkspace, nexusflowDir);
+        }
+        else {
+            await fse.ensureDir(nexusflowDir);
+        }
+        await assertPathIsNotLink(nexusflowDir);
+        const release = await acquireLock(path.join(nexusflowDir, 'resource-materialization.lock'), {
+            staleMs: 120_000,
+            timeoutMs: 30_000,
+            timeoutMessage: 'Timed out waiting for workspace resource materialization.',
+        });
+        try {
+            const oldLock = await loadLock(canonicalWorkspace);
+            const desiredFiles = await buildDesiredFiles(assistants, skills, agents);
+            await preflight(canonicalWorkspace, oldLock, desiredFiles);
+            const oldOutputs = new Map(oldLock.outputs.map((output) => [normalizeManagedPath(output.path), output]));
+            const desiredPaths = new Set(desiredFiles.map((file) => file.path));
+            const operationRoot = path.join(nexusflowDir, `resource-staging-${randomUUID()}`);
+            const stagedRoot = path.join(operationRoot, 'staged');
+            const backupRoot = path.join(operationRoot, 'backup');
+            await fse.ensureDir(stagedRoot);
+            const writes = [];
+            const unchanged = [];
+            for (const desired of desiredFiles) {
+                const absolute = path.join(canonicalWorkspace, desired.path);
+                if ((await fse.pathExists(absolute)) && (await fileMatchesOutput(absolute, desired))) {
+                    unchanged.push(desired.path);
+                    continue;
+                }
+                const staged = path.join(stagedRoot, desired.path);
+                await fse.ensureDir(path.dirname(staged));
+                await fs.writeFile(staged, desired.bytes);
+                if (desired.mode !== undefined)
+                    await fs.chmod(staged, desired.mode);
+                writes.push(desired);
+            }
+            const removals = oldLock.outputs.filter((old) => !desiredPaths.has(normalizeManagedPath(old.path)));
+            const committed = [];
+            const rename = options.rename ?? fs.rename;
+            try {
+                for (const desired of writes) {
+                    const target = path.join(canonicalWorkspace, desired.path);
+                    await assertNoLinkedPathComponents(canonicalWorkspace, path.dirname(target));
+                    await fse.ensureDir(path.dirname(target));
+                    await assertNoLinkedPathComponents(canonicalWorkspace, path.dirname(target));
+                    let backup;
+                    if (await fse.pathExists(target)) {
+                        backup = path.join(backupRoot, desired.path);
+                        await fse.ensureDir(path.dirname(backup));
+                        await rename(target, backup);
+                    }
+                    committed.push({ target, backup, wasRemoval: false });
+                    await rename(path.join(stagedRoot, desired.path), target);
+                }
+                for (const removal of removals) {
+                    const target = path.join(canonicalWorkspace, normalizeManagedPath(removal.path));
+                    if (!(await fse.pathExists(target)))
+                        continue;
+                    const backup = path.join(backupRoot, normalizeManagedPath(removal.path));
+                    await fse.ensureDir(path.dirname(backup));
+                    await rename(target, backup);
+                    committed.push({ target, backup, wasRemoval: true });
+                }
+                const removableDirectories = new Set(removals.flatMap(managedOutputDirectories));
+                for (const directory of [...removableDirectories].sort((a, b) => b.length - a.length)) {
+                    const absolute = assertPathWithin(canonicalWorkspace, path.join(canonicalWorkspace, directory));
+                    try {
+                        await fs.rmdir(absolute);
+                    }
+                    catch (error) {
+                        if (!['ENOENT', 'ENOTEMPTY', 'EEXIST'].includes(errorCode(error) ?? ''))
+                            throw error;
+                    }
+                }
+                const newLock = {
+                    schemaVersion: 1,
+                    outputs: desiredFiles.map(({ bytes: _bytes, resourceRoot: _root, ...output }) => output),
+                };
+                await atomicWriteJson(path.join(canonicalWorkspace, LOCK_FILE), newLock);
+            }
+            catch (error) {
+                for (const item of committed.reverse()) {
+                    if (!item.wasRemoval && (await fse.pathExists(item.target))) {
+                        await fse.remove(item.target).catch(() => { });
+                    }
+                    if (item.backup && (await fse.pathExists(item.backup))) {
+                        await fse.ensureDir(path.dirname(item.target));
+                        await rename(item.backup, item.target).catch(() => { });
+                    }
+                }
+                throw error;
+            }
+            finally {
+                await fse.remove(operationRoot).catch(() => { });
+            }
+            const installed = writes.filter((file) => !oldOutputs.has(file.path)).map((file) => file.path);
+            const updated = writes.filter((file) => oldOutputs.has(file.path)).map((file) => file.path);
+            return {
+                installed,
+                updated,
+                removed: removals.map((output) => normalizeManagedPath(output.path)),
+                unchanged,
+            };
+        }
+        finally {
+            await release();
+        }
+    });
+}
+//# sourceMappingURL=materializer.js.map

package/dist/resources/materializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"materializer.js","sourceRoot":"","sources":["../../src/resources/materializer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,GAAG,MAAM,UAAU,CAAC;AAG3B,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,GAGvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAExB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;AACjE,MAAM,kBAAkB,GAAG,mBAAmB,EAAE,CAAC;AACjD,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAc,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AACtG,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAkBtG,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9B,SAAS,CAAW;IAEpC,YAAY,SAAmB;QAC7B,KAAK,CAAC,0CAA0C,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,SAAS,OAAO,CAAC,YAAoB;IACnC,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;QACnE,CAAC,CAAC,MAAM,CAAE,KAA+B,CAAC,IAAI,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAgB;IACtC,OAAO,SAAS,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,MAA4C;IAC7F,IAAI,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,SAAS,oBAAoB,CAAC,YAAoB;IAChD,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAC;IACrG,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,uCAAuC,YAAY,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAAgB;IAC5C,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,QAAQ,GAA4B;YACxC,IAAI,EAAE,KAAK,CAAC,EAAE;YACd,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE;gBACR,SAAS,EAAE;oBACT,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI;oBAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;iBACvB;aACF;SACF,CAAC;QACF,OAAO,CAAC;gBACN,YAAY,EAAE,UAAU;gBACxB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBAC5E,IAAI,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK;aACvD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAsE,EAAE,CAAC;IACpF,KAAK,UAAU,IAAI,CAAC,SAAiB;QACnC,MAAM,4BAA4B,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACzE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,mDAAmD,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAClE,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACxC,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;oBAChC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC3D,MAAM,SAAS,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACpE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;wBACvB,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,CAAC,EAAE,MAAM,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBACnG,CAAC;oBACD,MAAM,gBAAgB,GAA4B;wBAChD,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI;wBACzB,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW;qBACxC,CAAC;oBACF,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO;wBAAE,gBAAgB,CAAC,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;oBAC9E,IAAI,SAAS,CAAC,IAAI,CAAC,aAAa;wBAAE,gBAAgB,CAAC,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC;oBAChG,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ;wBAAE,gBAAgB,CAAC,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;oBACjF,IAAI,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC;wBAAE,gBAAgB,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oBACzG,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;gBACzF,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,KAAK,UAAU,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,UAAyB,EACzB,MAAmB,EACnB,MAAwB;IAExB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,OAAO;gBACb,CAAC,CAAC,iCAAiC,KAAK,CAAC,EAAE,EAAE;gBAC7C,CAAC,CAAC,2BAA2B,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgD,CAAC;QACtE,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,yBAAyB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC7E,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACzE,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;YACpC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;gBAClF,MAAM,IAAI,GAAgB;oBACxB,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,KAAK,CAAC,EAAE;oBACpB,OAAO;oBACP,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC;oBACjC,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,YAAY,EAAE,oBAAoB,CAAC,IAAI,CAAC;iBACzC,CAAC;gBACF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACzC,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC5C,MAAM,IAAI,KAAK,CAAC,oDAAoD,UAAU,GAAG,CAAC,CAAC;gBACrF,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,OAAO;oBACb,CAAC,CAAC,iCAAiC,KAAK,CAAC,EAAE,EAAE;oBAC7C,CAAC,CAAC,2BAA2B,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CACtE,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3F,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE;gBACtB,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,KAAK,CAAC,EAAE;gBACpB,OAAO,EAAE,gBAAgB;gBACzB,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC;gBACtB,IAAI,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK;gBACtD,KAAK;gBACL,YAAY,EAAE,UAAU;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,aAAqB;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChF,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAY,CAAC,CAAC;IACzG,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3G,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,KAAK,aAAa;YAC/C,CAAC,CAAC,cAAc,KAAK,YAAY;YACjC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QACrG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAqB;IAChD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACnE,OAAO,kBAAkB,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;QACpE,OAAO,kBAAkB,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,IAAI,MAAM,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACzE,OAAO,iBAAiB,MAAM,CAAC,UAAU,OAAO,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAqB;IACrD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;QAC1D,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM;QAC5B,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;IACrG,IAAI,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;IACxF,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEvB,KAAK,UAAU,IAAI,CAAC,SAAiB;QACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,2DAA2D,QAAQ,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC3B,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;iBACI,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;;gBACzC,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAsC,EAAE,IAAY;IAC7E,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC;IAChD,OAAO,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,aAAqB,EACrB,OAAqB,EACrB,YAA2B;IAE3B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACzG,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAEvF,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,YAAY,GAAG,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;QACrF,MAAM,4BAA4B,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAChE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAAE,SAAS;QACpD,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC1D,KAAK,MAAM,YAAY,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;YAC9C,MAAM,YAAY,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClC,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,2EAA2E,CAAC,CAAC;YAC7G,CAAC;QACH,CAAC;QACD,KAAK,MAAM,iBAAiB,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,YAAY,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC3F,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC3C,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,2EAA2E,CAAC,CAAC;YAC7G,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,YAAY,GAAG,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;QACrF,MAAM,4BAA4B,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;YACjF,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,+CAA+C,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACzF,MAAM,4BAA4B,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAAE,SAAS;QAChD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,+CAA+C,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YAC9C,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,4CAA4C,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QACxC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;QACpF,MAAM,4BAA4B,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YAClF,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,4CAA4C,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,MAAM;QAAE,MAAM,IAAI,qBAAqB,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,aAAqB,EACrB,UAAyB,EACzB,MAAmB,EACnB,MAAwB,EACxB,UAAuC,EAAE;IAEzC,OAAO,kBAAkB,CAAC,KAAK,IAAI,EAAE;QACnC,MAAM,kBAAkB,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QACjE,IAAI,MAAM,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,MAAM,4BAA4B,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC;QAExC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,+BAA+B,CAAC,EAAE;YAC1F,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,MAAM;YACjB,cAAc,EAAE,2DAA2D;SAC5E,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YACnD,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,SAAS,CAAC,kBAAkB,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;YAE3D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACzG,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACpE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,oBAAoB,UAAU,EAAE,EAAE,CAAC,CAAC;YAClF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YACtD,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAEhC,MAAM,MAAM,GAAkB,EAAE,CAAC;YACjC,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC7D,IAAI,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;oBACrF,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC7B,SAAS;gBACX,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnD,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC1C,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC1C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;oBAAE,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBACrE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;YAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpG,MAAM,SAAS,GAAoE,EAAE,CAAC;YACtF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC;YAC3C,IAAI,CAAC;gBACH,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;oBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC3D,MAAM,4BAA4B,CAAC,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC7E,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC1C,MAAM,4BAA4B,CAAC,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC7E,IAAI,MAA0B,CAAC;oBAC/B,IAAI,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;wBACjC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;wBAC7C,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;wBAC1C,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC/B,CAAC;oBACD,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;oBACtD,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;gBAC5D,CAAC;gBAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;oBACjF,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;wBAAE,SAAS;oBAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;oBACzE,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC1C,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC7B,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBACjF,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC;oBAChG,IAAI,CAAC;wBACH,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAC3B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;4BAAE,MAAM,KAAK,CAAC;oBACvF,CAAC;gBACH,CAAC;gBAED,MAAM,OAAO,GAAiB;oBAC5B,aAAa,EAAE,CAAC;oBAChB,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC;iBACzF,CAAC;gBACF,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;YAC3E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;oBACvC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;wBAC5D,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBAChD,CAAC;oBACD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;wBACvD,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;wBAC/C,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACzD,CAAC;gBACH,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAClD,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5F,OAAO;gBACL,SAAS;gBACT,OAAO;gBACP,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACpE,SAAS;aACV,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/resources/materializer.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=materializer.test.d.ts.map

package/dist/resources/materializer.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"materializer.test.d.ts","sourceRoot":"","sources":["../../src/resources/materializer.test.ts"],"names":[],"mappings":""}

package/dist/resources/materializer.test.js

@@ -0,0 +1,149 @@
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import * as fs from 'node:fs/promises';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import fse from 'fs-extra';
+import { reconcileWorkspaceResources, ResourceConflictError } from './materializer.js';
+const skill = {
+    id: 'portable-skill',
+    name: 'portable-skill',
+    title: 'Portable Skill',
+    category: 'general',
+    description: 'Use when testing portable skill materialization.',
+    content: '# Portable skill\n\nFollow the test instructions.',
+    custom: false,
+};
+const agent = {
+    id: 'code_reviewer',
+    name: 'code_reviewer',
+    category: 'general',
+    description: 'Use when reviewing a fixed diff.',
+    developerInstructions: 'Review correctness and security.',
+    sandboxMode: 'read-only',
+    custom: true,
+};
+describe('workspace resource materializer', () => {
+    let workspace;
+    beforeEach(async () => {
+        workspace = await fs.mkdtemp(path.join(os.tmpdir(), 'nexusflow-materializer-'));
+    });
+    afterEach(async () => {
+        await fse.remove(workspace);
+    });
+    it('installs portable skills and Codex agents idempotently', async () => {
+        const first = await reconcileWorkspaceResources(workspace, ['codex', 'claude', 'cursor', 'copilot'], [skill], [agent]);
+        expect(first.installed).toContain('.agents/skills/portable-skill/SKILL.md');
+        expect(first.installed).toContain('.claude/skills/portable-skill/SKILL.md');
+        expect(first.installed).toContain('.codex/agents/code_reviewer.toml');
+        expect(await fse.pathExists(path.join(workspace, '.codex', 'skills'))).toBe(false);
+        expect(await fs.readFile(path.join(workspace, '.codex', 'agents', 'code_reviewer.toml'), 'utf-8')).toContain('developer_instructions');
+        const second = await reconcileWorkspaceResources(workspace, ['codex', 'claude', 'cursor', 'copilot'], [skill], [agent]);
+        expect(second.installed).toEqual([]);
+        expect(second.updated).toEqual([]);
+        expect(second.unchanged).toHaveLength(3);
+    });
+    it('removes only unchanged owned packages and permits reassignment', async () => {
+        await reconcileWorkspaceResources(workspace, ['codex'], [skill], [agent]);
+        const result = await reconcileWorkspaceResources(workspace, ['codex'], [], []);
+        expect(result.removed).toEqual(expect.arrayContaining([
+            '.agents/skills/portable-skill/SKILL.md',
+            '.codex/agents/code_reviewer.toml',
+        ]));
+        expect(await fse.pathExists(path.join(workspace, '.agents', 'skills', 'portable-skill', 'SKILL.md'))).toBe(false);
+        expect(await fse.pathExists(path.join(workspace, '.agents', 'skills', 'portable-skill'))).toBe(false);
+        expect(await fse.pathExists(path.join(workspace, '.codex', 'agents', 'code_reviewer.toml'))).toBe(false);
+        const reassigned = await reconcileWorkspaceResources(workspace, ['codex'], [skill], [agent]);
+        expect(reassigned.installed).toEqual(expect.arrayContaining([
+            '.agents/skills/portable-skill/SKILL.md',
+            '.codex/agents/code_reviewer.toml',
+        ]));
+    });
+    it('preserves modified managed files and reports drift before mutating anything', async () => {
+        await reconcileWorkspaceResources(workspace, ['codex'], [skill], [agent]);
+        const skillPath = path.join(workspace, '.agents', 'skills', 'portable-skill', 'SKILL.md');
+        const agentPath = path.join(workspace, '.codex', 'agents', 'code_reviewer.toml');
+        await fs.writeFile(skillPath, 'user edit', 'utf-8');
+        await expect(reconcileWorkspaceResources(workspace, ['codex'], [], [])).rejects.toBeInstanceOf(ResourceConflictError);
+        expect(await fs.readFile(skillPath, 'utf-8')).toBe('user edit');
+        expect(await fse.pathExists(agentPath)).toBe(true);
+    });
+    it('restores the old target and lock when installing a staged replacement fails', async () => {
+        await reconcileWorkspaceResources(workspace, ['codex'], [skill], []);
+        const target = path.join(workspace, '.agents', 'skills', 'portable-skill', 'SKILL.md');
+        const lockPath = path.join(workspace, '.nexusflow', 'resources.lock.json');
+        const beforeTarget = await fs.readFile(target, 'utf-8');
+        const beforeLock = await fs.readFile(lockPath, 'utf-8');
+        let renameCall = 0;
+        await expect(reconcileWorkspaceResources(workspace, ['codex'], [{ ...skill, content: '# Changed\n\nNew instructions.' }], [], {
+            rename: async (source, destination) => {
+                renameCall += 1;
+                if (renameCall === 2)
+                    throw Object.assign(new Error('injected staged rename failure'), { code: 'EACCES' });
+                await fs.rename(source, destination);
+            },
+        })).rejects.toThrow(/injected staged rename failure/i);
+        expect(await fs.readFile(target, 'utf-8')).toBe(beforeTarget);
+        expect(await fs.readFile(lockPath, 'utf-8')).toBe(beforeLock);
+    });
+    it('rejects unmanaged files added inside an owned skill package', async () => {
+        await reconcileWorkspaceResources(workspace, ['codex'], [skill], []);
+        const extra = path.join(workspace, '.agents', 'skills', 'portable-skill', 'scripts', 'extra.sh');
+        await fse.ensureDir(path.dirname(extra));
+        await fs.writeFile(extra, 'echo unmanaged', 'utf-8');
+        await expect(reconcileWorkspaceResources(workspace, ['codex'], [skill], [])).rejects.toMatchObject({
+            conflicts: expect.arrayContaining([expect.stringContaining('is not owned by NexusFlow')]),
+        });
+        expect(await fs.readFile(extra, 'utf-8')).toBe('echo unmanaged');
+    });
+    it('rejects unmanaged collisions with zero target mutations', async () => {
+        const target = path.join(workspace, '.agents', 'skills', 'portable-skill');
+        await fse.ensureDir(target);
+        await fs.writeFile(path.join(target, 'README.md'), 'user owned', 'utf-8');
+        await expect(reconcileWorkspaceResources(workspace, ['codex'], [skill], [])).rejects.toBeInstanceOf(ResourceConflictError);
+        expect(await fs.readFile(path.join(target, 'README.md'), 'utf-8')).toBe('user owned');
+        expect(await fse.pathExists(path.join(target, 'SKILL.md'))).toBe(false);
+        expect(await fse.pathExists(path.join(workspace, '.nexusflow', 'resources.lock.json'))).toBe(false);
+    });
+    it('rejects invalid identities before writing targets', async () => {
+        await expect(reconcileWorkspaceResources(workspace, ['codex'], [{ ...skill, id: '../../escape', name: '../../escape' }], [])).rejects.toThrow(/invalid skill identity/i);
+        expect(await fse.pathExists(path.join(workspace, 'escape'))).toBe(false);
+    });
+    it('normalizes legacy NexusFlow frontmatter without dropping package files', async () => {
+        const source = path.join(workspace, 'source-skill');
+        await fse.ensureDir(path.join(source, 'assets'));
+        await fs.writeFile(path.join(source, 'SKILL.md'), '---\nname: portable-skill\ndescription: Use when testing.\ntitle: Legacy title\ncategory: general\ntags: [test]\nmetadata:\n  owner: team\n---\n\n# Instructions\n', 'utf-8');
+        await fs.writeFile(path.join(source, 'assets', 'fixture.txt'), 'fixture', 'utf-8');
+        await reconcileWorkspaceResources(workspace, ['codex'], [{ ...skill, sourcePath: source }], []);
+        const installed = await fs.readFile(path.join(workspace, '.agents', 'skills', 'portable-skill', 'SKILL.md'), 'utf-8');
+        expect(installed).not.toContain('title: Legacy title');
+        expect(installed).not.toContain('category: general');
+        expect(installed).toContain('owner: team');
+        expect(await fs.readFile(path.join(workspace, '.agents', 'skills', 'portable-skill', 'assets', 'fixture.txt'), 'utf-8')).toBe('fixture');
+    });
+    it.skipIf(process.platform === 'win32')('preserves executable script modes and detects permission drift', async () => {
+        const source = path.join(workspace, 'executable-skill');
+        const sourceScript = path.join(source, 'scripts', 'check.sh');
+        await fse.ensureDir(path.dirname(sourceScript));
+        await fs.writeFile(path.join(source, 'SKILL.md'), '---\nname: portable-skill\ndescription: Use when checking executable scripts.\n---\n\n# Check\n', 'utf-8');
+        await fs.writeFile(sourceScript, '#!/bin/sh\necho ok\n', 'utf-8');
+        await fs.chmod(sourceScript, 0o755);
+        await reconcileWorkspaceResources(workspace, ['codex'], [{ ...skill, sourcePath: source }], []);
+        const targetScript = path.join(workspace, '.agents', 'skills', 'portable-skill', 'scripts', 'check.sh');
+        expect((await fs.stat(targetScript)).mode & 0o777).toBe(0o755);
+        await fs.chmod(targetScript, 0o644);
+        await expect(reconcileWorkspaceResources(workspace, ['codex'], [{ ...skill, sourcePath: source }], [])).rejects.toBeInstanceOf(ResourceConflictError);
+    });
+    it('never trusts a tampered ownership lock to delete an arbitrary workspace file', async () => {
+        await reconcileWorkspaceResources(workspace, ['codex'], [skill], []);
+        const victim = path.join(workspace, 'victim.txt');
+        await fs.writeFile(victim, 'keep me', 'utf-8');
+        const lockPath = path.join(workspace, '.nexusflow', 'resources.lock.json');
+        const lock = JSON.parse(await fs.readFile(lockPath, 'utf-8'));
+        lock.outputs[0].path = 'victim.txt';
+        lock.outputs[0].hash = '6cc7d5a6f9f85c209a8e18e5426de33f0db1df6d2a223c90a4a4e0e08e64b341';
+        await fs.writeFile(lockPath, `${JSON.stringify(lock, null, 2)}\n`, 'utf-8');
+        await expect(reconcileWorkspaceResources(workspace, ['codex'], [], [])).rejects.toThrow(/invalid workspace resource ownership path/i);
+        expect(await fs.readFile(victim, 'utf-8')).toBe('keep me');
+    });
+});
+//# sourceMappingURL=materializer.test.js.map