@narumitw/pi-sync 0.57.9 → 0.57.11

package/dist/chunks/{chunk-QO333NM4.ts → chunk-OVBAW7KV.ts}

@@ -2,10 +2,7 @@
 // @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
 import {
   normalizeLocalFields
-} from "./chunk-A6HU4ERM.ts";
-import {
-  normalizeSyncInclude
-} from "./chunk-QOFMXPM5.ts";
+} from "./chunk-X7R6DCVF.ts";
 import {
   backendIdentityCoordinates,
   normalizeEndpointIdentity,
@@ -20,6 +17,9 @@ import {
   normalizeGitRemote,
   normalizeGitRemoteIdentity
 } from "./chunk-T2SJD3N7.ts";
+import {
+  normalizeSyncInclude
+} from "./chunk-KYTT7KV4.ts";
 
 // src/settings/config.ts
 import { createHash } from "node:crypto";
@@ -60,7 +60,8 @@ var LOCKFILE_FS_ADAPTER = {
   utimes,
   utimesSync
 };
-var publishConfigFile = publishFileWithoutReplacement;
+var configUpdateQueue = Promise.resolve();
+var publishConfigFile = publishFileWithGuard;
 var beforeConfigPublicationHook = async () => void 0;
 var afterMissingConfigReadProbeHook = async () => void 0;
 var afterReplacementInstalledHook = async () => void 0;
@@ -74,10 +75,12 @@ function legacyLocalConfigPath() {
 async function activeLocalConfigPath() {
   const canonicalPath = localConfigPath();
   const legacyPath = legacyLocalConfigPath();
-  return withLocalConfigReadLockIfNeeded(async () => {
-    if (await pathExists(canonicalPath)) return canonicalPath;
-    return await pathExists(legacyPath) ? legacyPath : canonicalPath;
-  });
+  return queueConfigOperation(
+    () => withLocalConfigReadLockIfNeeded(async () => {
+      if (await pathExists(canonicalPath)) return canonicalPath;
+      return await pathExists(legacyPath) ? legacyPath : canonicalPath;
+    })
+  );
 }
 function consumeLocalConfigMigrationNotice() {
   const configPath = localConfigPath();
@@ -88,18 +91,22 @@ function consumeLocalConfigMigrationNotice() {
 async function readActiveLocalConfigDocumentForRepair() {
   const canonicalPath = localConfigPath();
   const legacyPath = legacyLocalConfigPath();
-  return withLocalConfigReadLockIfNeeded(async () => {
-    const filePath = await pathExists(canonicalPath) ? canonicalPath : legacyPath;
-    const snapshot = await readConfigSnapshotIfExists(filePath);
-    return snapshot ? { path: filePath, ...snapshot } : void 0;
-  });
+  return queueConfigOperation(
+    () => withLocalConfigReadLockIfNeeded(async () => {
+      const filePath = await pathExists(canonicalPath) ? canonicalPath : legacyPath;
+      const snapshot = await readConfigSnapshotIfExists(filePath);
+      return snapshot ? { path: filePath, ...snapshot } : void 0;
+    })
+  );
 }
 async function readMigratingLocalConfigDocument(validateForMigration) {
-  return withLocalConfigReadLockIfNeeded(async () => {
-    const configPath = await prepareLocalConfigPath(validateForMigration);
-    const snapshot = await readConfigSnapshotIfExists(configPath);
-    return snapshot ? { path: configPath, ...snapshot } : void 0;
-  });
+  return queueConfigOperation(
+    () => withLocalConfigReadLockIfNeeded(async () => {
+      const configPath = await prepareLocalConfigPath(validateForMigration);
+      const snapshot = await readConfigSnapshotIfExists(configPath);
+      return snapshot ? { path: configPath, ...snapshot } : void 0;
+    })
+  );
 }
 async function withLocalConfigReadLockIfNeeded(read) {
   if (await pathExists(localConfigPath()) || await pathExists(legacyLocalConfigPath())) {
@@ -107,45 +114,63 @@ async function withLocalConfigReadLockIfNeeded(read) {
   }
   await afterMissingConfigReadProbeHook();
   if (await pathExists(configMutationLockPath())) return withLocalConfigFileLock(read);
+  await assertNoInterruptedConfigReplacement();
   return read();
 }
+function queueConfigOperation(run) {
+  const operation = configUpdateQueue.then(run);
+  configUpdateQueue = operation.then(
+    () => void 0,
+    () => void 0
+  );
+  return operation;
+}
 function updateLocalConfigDocument(defaultValue, update, validate, signal) {
-  return withLocalConfigFileLock(async () => {
-    signal?.throwIfAborted();
-    const configPath = await prepareLocalConfigPath(validate);
-    const snapshot = await readConfigSnapshotIfExists(configPath);
-    const document = snapshot ? { path: configPath, ...snapshot } : void 0;
-    const current = document ? structuredClone(document.parsed) : structuredClone(defaultValue);
-    const next = update(current);
-    validate(next);
+  return queueConfigOperation(() => {
     signal?.throwIfAborted();
-    if (document && JSON.stringify(document.parsed) === JSON.stringify(next)) return next;
-    if (document) await replaceLocalConfigDocumentUnlocked(document, next);
-    else await installPrivateConfigExclusively(localConfigPath(), serializedConfig(next));
-    return next;
+    return withLocalConfigFileLock(async () => {
+      signal?.throwIfAborted();
+      const configPath = await prepareLocalConfigPath(validate);
+      signal?.throwIfAborted();
+      const snapshot = await readConfigSnapshotIfExists(configPath);
+      signal?.throwIfAborted();
+      const document = snapshot ? { path: configPath, ...snapshot } : void 0;
+      const current = document ? structuredClone(document.parsed) : structuredClone(defaultValue);
+      const next = update(current);
+      validate(next);
+      signal?.throwIfAborted();
+      if (document && JSON.stringify(document.parsed) === JSON.stringify(next)) return next;
+      if (document) await replaceLocalConfigDocumentUnlocked(document, next, signal);
+      else await installPrivateConfigExclusively(localConfigPath(), serializedConfig(next), signal);
+      return next;
+    });
   });
 }
-function createLocalConfigDocument(value) {
-  return withLocalConfigFileLock(async () => {
-    const bytes = serializedConfig(value);
-    try {
-      await installPrivateConfigExclusively(localConfigPath(), bytes);
-    } catch (error) {
-      if (error.code === "EEXIST") {
-        throw new Error("Pi-sync settings were created concurrently; reopen settings and retry.");
+function createLocalConfigDocument(value, signal) {
+  return queueConfigOperation(() => {
+    signal?.throwIfAborted();
+    return withLocalConfigFileLock(async () => {
+      signal?.throwIfAborted();
+      const bytes = serializedConfig(value);
+      try {
+        await installPrivateConfigExclusively(localConfigPath(), bytes, signal);
+      } catch (error) {
+        if (error.code === "EEXIST") {
+          throw new Error("Pi-sync settings were created concurrently; reopen settings and retry.");
+        }
+        throw error;
       }
-      throw error;
-    }
+    });
   });
 }
-async function replaceLocalConfigDocumentUnlocked(document, value) {
+async function replaceLocalConfigDocumentUnlocked(document, value, signal) {
   const nextBytes = serializedConfig(value);
   const canonicalPath = localConfigPath();
   if (document.path !== canonicalPath) {
     if (!await configDocumentStillMatches(document)) throw settingsChangedError();
-    let installed2;
+    let installed;
     try {
-      installed2 = await installPrivateConfigExclusively(canonicalPath, nextBytes);
+      installed = await installPrivateConfigExclusively(canonicalPath, nextBytes, signal);
     } catch (error) {
       if (error.code === "EEXIST") {
         throw new Error("Canonical settings were created concurrently; no settings were replaced.");
@@ -153,35 +178,66 @@ async function replaceLocalConfigDocumentUnlocked(document, value) {
       throw error;
     }
     if (!await configDocumentStillMatches(document)) {
-      await quarantineAndRemoveConfigIfMatchesUnlocked(canonicalPath, installed2, nextBytes);
+      await quarantineAndRemoveConfigIfMatchesUnlocked(canonicalPath, installed, nextBytes);
       throw settingsChangedError();
     }
     return;
   }
-  const quarantinePath = await claimCanonicalConfigDocument(document);
-  let installed;
-  try {
-    installed = await installPrivateConfigExclusively(canonicalPath, nextBytes);
-  } catch (error) {
-    await restoreQuarantinedConfig(canonicalPath, quarantinePath);
-    if (error.code === "EEXIST") {
-      throw new Error("Canonical settings changed concurrently; no settings were replaced.");
-    }
-    throw error;
-  }
+  const recoveryPath = path.join(
+    path.dirname(canonicalPath),
+    `.${path.basename(canonicalPath)}.${randomUUID()}.schema-migration-source`
+  );
+  const previousHandle = await fs.open(canonicalPath, "r");
   try {
-    await afterReplacementInstalledHook();
-    if (!await fileIdentityAndContentsMatch(quarantinePath, document.identity, document.bytes)) {
+    const previous = await previousHandle.stat();
+    if (previous.dev !== document.identity.dev || previous.ino !== document.identity.ino) {
       throw settingsChangedError();
     }
-    if (process.platform !== "win32") await fs.chmod(quarantinePath, 384);
+    await writePrivateConfigBytes(recoveryPath, document.bytes, "wx");
+    await syncParentDirectory(canonicalPath);
+    await withPrivateConfigTemporary(canonicalPath, nextBytes, async (temporaryPath, installed) => {
+      let published = false;
+      let previousBytesRead;
+      const readPreviousBytes = () => previousBytesRead ??= previousHandle.readFile();
+      try {
+        signal?.throwIfAborted();
+        await publishConfigFile(temporaryPath, canonicalPath, document, signal);
+        published = true;
+        await syncParentDirectory(canonicalPath);
+        await afterReplacementInstalledHook();
+        if (!(await readPreviousBytes()).equals(document.bytes)) throw settingsChangedError();
+        if (!await fileIdentityAndContentsMatch(canonicalPath, installed, nextBytes)) {
+          throw settingsChangedError();
+        }
+      } catch (error) {
+        if (published || await fileIdentityAndContentsMatch(canonicalPath, installed, nextBytes)) {
+          const previousBytes = await readPreviousBytes().catch(() => document.bytes);
+          if (!previousBytes.equals(document.bytes)) {
+            await writePrivateConfigBytes(recoveryPath, previousBytes, "w");
+          }
+          if (await fileIdentityAndContentsMatch(canonicalPath, installed, nextBytes)) {
+            await fs.rename(recoveryPath, canonicalPath);
+            await syncParentDirectory(canonicalPath);
+          }
+        } else if (await configDocumentStillMatches(document)) {
+          await fs.rm(recoveryPath);
+        }
+        if (error.code === "EEXIST") {
+          throw new Error("Canonical settings changed concurrently; no settings were replaced.");
+        }
+        throw error;
+      }
+    });
+    await fs.rm(recoveryPath).catch(() => void 0);
+    await syncParentDirectory(canonicalPath).catch(() => void 0);
   } catch (error) {
-    await quarantineAndRemoveConfigIfMatchesUnlocked(canonicalPath, installed, nextBytes);
-    await restoreQuarantinedConfig(canonicalPath, quarantinePath);
+    if (await configDocumentStillMatches(document)) {
+      await fs.rm(recoveryPath, { force: true }).catch(() => void 0);
+    }
     throw error;
+  } finally {
+    await previousHandle.close().catch(() => void 0);
   }
-  await fs.rm(quarantinePath).catch(() => void 0);
-  await syncParentDirectory(canonicalPath).catch(() => void 0);
 }
 async function prepareLocalConfigPath(validateForMigration) {
   const canonicalPath = localConfigPath();
@@ -305,76 +361,50 @@ function parseConfigObject(bytes, filePath) {
   }
   return parsed;
 }
-async function installPrivateConfigExclusively(filePath, bytes) {
+async function installPrivateConfigExclusively(filePath, bytes, signal) {
+  return withPrivateConfigTemporary(filePath, bytes, async (temporaryPath, installed) => {
+    signal?.throwIfAborted();
+    await publishConfigFile(temporaryPath, filePath, void 0, signal);
+    try {
+      if (!await fileIdentityAndContentsMatch(filePath, installed, bytes)) {
+        throw new Error(`Published pi-sync settings changed concurrently: ${filePath}`);
+      }
+      await syncParentDirectory(filePath);
+    } catch (error) {
+      await quarantineAndRemoveConfigIfMatchesUnlocked(filePath, installed, bytes);
+      throw error;
+    }
+    return installed;
+  });
+}
+async function withPrivateConfigTemporary(filePath, bytes, publish) {
   await fs.mkdir(path.dirname(filePath), { recursive: true });
   const temporaryPath = path.join(
     path.dirname(filePath),
     `.${path.basename(filePath)}.${process.pid}.${randomUUID()}.migrate`
   );
-  let handle;
   try {
-    handle = await fs.open(temporaryPath, "wx", 384);
+    const identity = await writePrivateConfigBytes(temporaryPath, bytes, "wx");
+    return await publish(temporaryPath, identity);
+  } finally {
+    await fs.rm(temporaryPath, { force: true }).catch(() => void 0);
+  }
+}
+async function writePrivateConfigBytes(filePath, bytes, flags) {
+  const handle = await fs.open(filePath, flags, 384);
+  try {
     await handle.writeFile(bytes);
     if (process.platform !== "win32") await handle.chmod(384);
     await handle.sync();
-    await handle.close();
-    handle = void 0;
-    await publishConfigFile(temporaryPath, filePath);
-    const installed = await fs.lstat(filePath);
-    let publishedHandle;
-    let publicationError;
-    try {
-      if (installed.isSymbolicLink() || !installed.isFile()) {
-        throw new Error(`Published pi-sync settings are not a regular file: ${filePath}`);
-      }
-      publishedHandle = await fs.open(filePath, "r+");
-      const published = await publishedHandle.stat();
-      if (published.dev !== installed.dev || published.ino !== installed.ino) {
-        throw new Error(`Published pi-sync settings changed while opening: ${filePath}`);
-      }
-      if (process.platform !== "win32") await publishedHandle.chmod(384);
-      await publishedHandle.sync();
-      await syncParentDirectory(filePath);
-    } catch (error) {
-      publicationError = error;
-    } finally {
-      await publishedHandle?.close().catch(() => void 0);
-    }
-    if (publicationError) {
-      await quarantineAndRemoveConfigIfMatchesUnlocked(filePath, { dev: installed.dev, ino: installed.ino }, bytes);
-      throw publicationError;
-    }
+    const installed = await handle.stat();
     return { dev: installed.dev, ino: installed.ino };
   } finally {
-    await handle?.close().catch(() => void 0);
-    await fs.rm(temporaryPath, { force: true }).catch(() => void 0);
+    await handle.close();
   }
 }
 async function configDocumentStillMatches(document) {
   return fileIdentityAndContentsMatch(document.path, document.identity, document.bytes);
 }
-async function claimCanonicalConfigDocument(document) {
-  const quarantinePath = path.join(
-    path.dirname(document.path),
-    `.${path.basename(document.path)}.${randomUUID()}.schema-migration-source`
-  );
-  try {
-    await fs.rename(document.path, quarantinePath);
-    await syncParentDirectory(document.path);
-  } catch (error) {
-    await restoreQuarantinedConfig(document.path, quarantinePath);
-    throw error;
-  }
-  if (!await fileIdentityAndContentsMatch(quarantinePath, document.identity, document.bytes)) {
-    await restoreQuarantinedConfig(document.path, quarantinePath);
-    throw settingsChangedError();
-  }
-  if (await pathExists(document.path)) {
-    await restoreQuarantinedConfig(document.path, quarantinePath);
-    throw new Error("Canonical settings changed concurrently; no settings were replaced.");
-  }
-  return quarantinePath;
-}
 function settingsChangedError() {
   return new Error("pi-sync settings changed during migration; no settings were replaced.");
 }
@@ -456,6 +486,7 @@ async function withLocalConfigFileLock(run) {
     }
   });
   try {
+    await assertNoInterruptedConfigReplacement();
     const result = await run();
     if (compromisedError) throw compromisedError;
     return result;
@@ -473,16 +504,43 @@ async function syncParentDirectory(filePath) {
     await handle?.close().catch(() => void 0);
   }
 }
-async function publishFileWithoutReplacement(source, destination) {
+async function publishFileWithGuard(source, destination, expected, signal) {
   await beforeConfigPublicationHook();
-  await renameFileWithoutReplacement(source, destination);
+  signal?.throwIfAborted();
+  if (expected) {
+    if (!await configDocumentStillMatches(expected)) throw settingsChangedError();
+    signal?.throwIfAborted();
+    await fs.rename(source, destination);
+  } else {
+    await renameFileWithoutReplacement(source, destination, signal);
+  }
 }
-async function renameFileWithoutReplacement(source, destination) {
+async function renameFileWithoutReplacement(source, destination, signal) {
   if (await pathExists(destination)) {
     throw Object.assign(new Error(`Settings already exist: ${destination}`), { code: "EEXIST" });
   }
+  signal?.throwIfAborted();
   await fs.rename(source, destination);
 }
+async function assertNoInterruptedConfigReplacement() {
+  const configPath = localConfigPath();
+  if (await pathExists(configPath)) return;
+  let names;
+  try {
+    names = await fs.readdir(path.dirname(configPath));
+  } catch (error) {
+    if (error.code === "ENOENT") return;
+    throw error;
+  }
+  const prefix = `.${path.basename(configPath)}.`;
+  if (names.some(
+    (name) => name.startsWith(prefix) && (name.endsWith(".schema-migration-source") || name.endsWith(".migration-retired"))
+  )) {
+    throw new Error(
+      "Interrupted pi-sync settings replacement: restore the retained recovery file to pi-sync.json before retrying; legacy settings were not loaded."
+    );
+  }
+}
 async function pathExists(filePath) {
   try {
     await fs.lstat(filePath);
@@ -856,7 +914,6 @@ function ownRecord(value) {
 }
 
 // src/settings/settings-store.ts
-var configUpdateQueue = Promise.resolve();
 async function requireSettings() {
   const settings = await readLocalConfigObject();
   if (!settings) {
@@ -893,17 +950,6 @@ async function readLocalConfigObject() {
   return (await readLocalConfigDocument())?.parsed;
 }
 function updateLocalConfig(update, signal) {
-  const operation = configUpdateQueue.then(() => {
-    signal?.throwIfAborted();
-    return performLocalConfigUpdate(update, signal);
-  });
-  configUpdateQueue = operation.then(
-    () => void 0,
-    () => void 0
-  );
-  return operation;
-}
-async function performLocalConfigUpdate(update, signal) {
   return updateLocalConfigDocument(localConfigTemplate(), update, validateSettingsDocument, signal);
 }
 
@@ -1113,6 +1159,7 @@ export {
   updateLocalConfig,
   loadConfig,
   loadConfigForCheck,
+  configFromSettings,
   loadPartialConfig,
   syncSetupStorageReview,
   syncSetupReviewIdentity,
@@ -1124,4 +1171,4 @@ export {
   isEnabled,
   isExplicitlyEnabled
 };
-//# sourceMappingURL=chunk-QO333NM4.ts.map
+//# sourceMappingURL=chunk-OVBAW7KV.ts.map

package/dist/chunks/chunk-OVBAW7KV.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/settings/config.ts", "../../src/settings/config-file.ts", "../../src/settings/settings-validation.ts", "../../src/settings/settings-store.ts"],
+  "sourcesContent": ["import { createHash } from \"node:crypto\";\nimport { backendIdentityCoordinates } from \"../backends/backend-identity.js\";\nimport { normalizeGitBranch, normalizeGitDirectory, normalizeGitRemote } from \"../backends/git/git-config.js\";\nimport { normalizeWebDavPath, normalizeWebDavUrl } from \"../backends/webdav/webdav-config.js\";\nimport { normalizeLocalFields } from \"../sync/local-field-policy.js\";\nimport { normalizeSyncInclude } from \"../sync/sync-policy.js\";\nimport { localConfigPath, readActiveLocalConfigDocumentForRepair } from \"./config-file.js\";\nimport { requireSettings } from \"./settings-store.js\";\nimport type {\n  AnySyncConfig,\n  OnSwitchAction,\n  PartialConfig,\n  PiSyncSettingsV3,\n  StorageConnectionSettings,\n  SyncSetupSettings,\n} from \"./settings-types.js\";\nimport {\n  DEFAULT_ON_SWITCH,\n  isCloudflareR2Endpoint,\n  normalizeS3Bucket,\n  normalizeS3Endpoint,\n  normalizeStoragePath,\n  optionalString,\n  ownObject,\n  requiredString,\n  validateConfigName,\n  validateSettingsDocument,\n} from \"./settings-validation.js\";\n\nexport async function loadConfig(setupName?: string): Promise<AnySyncConfig> {\n  return configFromSettings(await requireSettings(), setupName);\n}\n\n/** A background freshness read must never trigger legacy-file publication. */\nexport async function loadConfigForCheck(): Promise<AnySyncConfig> {\n  const document = await readActiveLocalConfigDocumentForRepair();\n  if (!document) throw new Error(`Missing pi-sync settings: ${localConfigPath()}`);\n  validateSettingsDocument(document.parsed);\n  return configFromSettings(document.parsed as PiSyncSettingsV3);\n}\n\nexport function configFromSettings(settings: PiSyncSettingsV3, setupName?: string): AnySyncConfig {\n  const selectedName = setupName ?? settings.activeSyncSetup;\n  if (!selectedName) throw new Error(\"No sync setups are configured.\");\n  validateConfigName(selectedName, \"sync setup\");\n  const setup = ownObject<SyncSetupSettings>(settings.syncSetups, selectedName);\n  if (!setup) throw new Error(`Invalid pi-sync settings: sync setup \u201C${selectedName}\u201D was not found.`);\n  const connectionName = setup.storage.connection;\n  const connection = ownObject<StorageConnectionSettings>(settings.storageConnections, connectionName);\n  if (!connection) {\n    throw new Error(\n      `Invalid pi-sync settings: sync setup \u201C${selectedName}\u201D references missing storage connection \u201C${connectionName}\u201D.`,\n    );\n  }\n  return {\n    ...resolveSyncConfig(\n      selectedName,\n      setup,\n      connectionName,\n      connection,\n      settings.onSwitch,\n      settings.skipSecretScan ?? false,\n      settings.showStatus ?? true,\n    ),\n    debug: settings.debug ?? false,\n  };\n}\n\nexport type SyncSetupStorageReview = Pick<\n  PartialConfig,\n  \"connectionName\" | \"storageKind\" | \"storagePath\" | \"bucket\" | \"branch\"\n>;\n\n/** A validated setup-facing projection used by manager and settings UI. */\nexport async function loadPartialConfig(setupName?: string): Promise<PartialConfig> {\n  const config = await loadConfig(setupName);\n  return {\n    setupName: config.setupName,\n    ...storageReviewFromConfig(config),\n    include: [...config.include],\n    automatic: config.automatic,\n    automaticTransfer: config.automaticTransfer ?? false,\n    agentMode: config.agentMode ?? false,\n    continuous: config.continuous ?? false,\n    onSwitch: config.onSwitch,\n    showStatus: config.showStatus,\n  };\n}\n\nexport function syncSetupStorageReview(\n  setupName: string,\n  setup: SyncSetupSettings,\n  connectionName: string,\n  connection: StorageConnectionSettings,\n): SyncSetupStorageReview {\n  return storageReviewFromConfig(\n    resolveSyncConfig(setupName, setup, connectionName, connection, DEFAULT_ON_SWITCH, false, true),\n  );\n}\n\nexport function syncSetupReviewIdentity(\n  setupName: string,\n  setup: SyncSetupSettings,\n  connectionName: string,\n  connection: StorageConnectionSettings,\n) {\n  return syncConfigReviewIdentity(\n    resolveSyncConfig(setupName, setup, connectionName, connection, DEFAULT_ON_SWITCH, false, true),\n  );\n}\n\nexport function syncConfigReviewIdentity(config: AnySyncConfig) {\n  return JSON.stringify([\n    config.setupName,\n    config.connectionName,\n    backendIdentityCoordinates(config),\n    config.include,\n    config.automatic,\n    config.automaticTransfer ?? false,\n    config.agentMode ?? false,\n    config.localFields,\n    config.mergeSettings ?? false,\n    config.mergeContent ?? false,\n    config.partialSync ?? false,\n    // Preserve existing Off identities and cached candidates across the upgrade.\n    ...(config.continuous ? [\"continuous\"] : []),\n  ]);\n}\n\nexport function syncConfigReviewFingerprint(config: AnySyncConfig) {\n  return createHash(\"sha256\").update(syncConfigReviewIdentity(config)).digest(\"hex\");\n}\n\n/** Internal freshness token, including credentials; never display or persist it. */\nexport function syncCheckConfigFingerprint(config: AnySyncConfig) {\n  return createHash(\"sha256\")\n    .update(JSON.stringify({ ...config, showStatus: undefined, debug: undefined }))\n    .digest(\"hex\");\n}\n\nfunction storageReviewFromConfig(config: AnySyncConfig): SyncSetupStorageReview {\n  return {\n    connectionName: config.connectionName,\n    storageKind: config.backend.type,\n    storagePath: config.storagePath,\n    ...(config.backend.type === \"s3\"\n      ? { bucket: config.backend.destination.bucket }\n      : config.backend.type === \"git\"\n        ? { branch: config.backend.destination.branch }\n        : {}),\n  };\n}\n\nfunction resolveSyncConfig(\n  setupName: string,\n  setup: SyncSetupSettings,\n  connectionName: string,\n  connection: StorageConnectionSettings,\n  onSwitch: OnSwitchAction,\n  skipSecretScan: boolean,\n  showStatus: boolean,\n): AnySyncConfig {\n  const storagePath = normalizeStoragePath(setup.storage.path);\n  const namespace = storagePath === \"./\" ? \"root\" : storagePath.slice(storagePath.lastIndexOf(\"/\") + 1);\n  const include = normalizeSyncInclude(setup.sync.include);\n  const common = {\n    setupName,\n    connectionName,\n    storagePath,\n    snapshotIdentity: namespace,\n    include,\n    automatic: setup.sync.automatic,\n    automaticTransfer: setup.sync.automaticTransfer ?? false,\n    agentMode: setup.sync.agentMode ?? false,\n    continuous: setup.sync.continuous ?? false,\n    localFields: setup.sync.localFields === undefined ? undefined : normalizeLocalFields(setup.sync.localFields),\n    mergeSettings: setup.sync.mergeSettings ?? false,\n    mergeContent: setup.sync.mergeContent ?? false,\n    partialSync: setup.sync.partialSync ?? false,\n    onSwitch,\n    skipSecretScan,\n    showStatus,\n  };\n  if (connection.type === \"git\") {\n    return {\n      ...common,\n      backend: {\n        type: \"git\",\n        profile: { kind: \"git\", remote: normalizeGitRemote(connection.remote) as string },\n        destination: {\n          branch: normalizeGitBranch(setup.storage.branch),\n          directory: normalizeGitDirectory(storagePath),\n          namespace,\n        },\n      },\n    };\n  }\n  if (connection.type === \"webdav\") {\n    return {\n      ...common,\n      backend: {\n        type: \"webdav\",\n        profile: {\n          kind: \"webdav\",\n          url: normalizeWebDavUrl(connection.url) as string,\n          username: connection.credentials.username,\n          password: connection.credentials.password,\n        },\n        destination: { path: normalizeWebDavPath(storagePath), namespace },\n      },\n    };\n  }\n  return {\n    ...common,\n    backend: {\n      type: \"s3\",\n      profile: {\n        kind: isCloudflareR2Endpoint(connection.endpoint) ? \"r2\" : \"s3-compatible\",\n        endpoint: normalizeS3Endpoint(connection.endpoint),\n        region: requiredString(connection.region, \"S3 region\"),\n        accessKeyId: connection.credentials.accessKeyId,\n        secretAccessKey: connection.credentials.secretAccessKey,\n        sessionToken: optionalString(connection.credentials.sessionToken, \"S3 session token\"),\n      },\n      destination: {\n        bucket: normalizeS3Bucket(setup.storage.bucket),\n        prefix: storagePath,\n        namespace,\n      },\n    },\n  };\n}\n\nexport function sessionTokenWarnings(config: { endpoint?: string; sessionToken?: string }) {\n  if (!isCloudflareR2Endpoint(config.endpoint) || !config.sessionToken) return [];\n  return [\n    \"session token: configured for Cloudflare R2; if R2 rejects X-Amz-Security-Token, pi-sync retries once without it. R2 static access keys usually do not need a session token.\",\n  ];\n}\n\nexport function syncSessionsWarnings(config: { include: readonly string[] }) {\n  if (!config.include.includes(\"sessions\")) return [];\n  return [\n    \"sessions: included; Pi session JSONL can contain prompts, tool output, file paths, images, and secrets. Sync sessions only to storage you trust.\",\n  ];\n}\n\nexport function isEnabled(value: boolean | string | undefined, defaultValue: boolean) {\n  if (value === undefined) return defaultValue;\n  if (typeof value === \"boolean\") return value;\n  return ![\"0\", \"false\", \"no\", \"off\"].includes(value.trim().toLowerCase());\n}\n\nexport function isExplicitlyEnabled(value: boolean | string | undefined) {\n  if (typeof value === \"boolean\") return value;\n  return [\"1\", \"true\", \"yes\", \"on\"].includes(value?.trim().toLowerCase() ?? \"\");\n}\n", "import { randomUUID } from \"node:crypto\";\nimport {\n  mkdir,\n  mkdirSync,\n  realpath,\n  realpathSync,\n  rmdir,\n  rmdirSync,\n  stat,\n  statSync,\n  utimes,\n  utimesSync,\n} from \"node:fs\";\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { getAgentDir } from \"@earendil-works/pi-coding-agent\";\nimport lockfile from \"proper-lockfile\";\n\nconst CONFIG_FILE_NAME = \"pi-sync.json\";\nconst LEGACY_CONFIG_FILE_NAME = \"pi-sync.local.json\";\nconst configMigrationNotices = new Map<string, string>();\nconst legacyPresenceNoticed = new Set<string>();\nconst CONFIG_LOCK_STALE_MS = 30_000;\nconst CONFIG_LOCK_UPDATE_MS = 10_000;\nconst LOCKFILE_FS_ADAPTER = {\n  mkdir,\n  mkdirSync,\n  realpath,\n  realpathSync,\n  rmdir,\n  rmdirSync,\n  stat,\n  statSync,\n  utimes,\n  utimesSync,\n};\n\ntype PublishFile = (\n  source: string,\n  destination: string,\n  expected?: LocalConfigDocument,\n  signal?: AbortSignal,\n) => Promise<void>;\nlet configUpdateQueue: Promise<void> = Promise.resolve();\nlet publishConfigFile: PublishFile = publishFileWithGuard;\nlet beforeConfigPublicationHook: () => Promise<void> = async () => undefined;\nlet afterMissingConfigReadProbeHook: () => Promise<void> = async () => undefined;\nlet afterReplacementInstalledHook: () => Promise<void> = async () => undefined;\nlet afterConfigQuarantinedHook: () => Promise<void> = async () => undefined;\n\nexport type FileIdentity = { dev: number; ino: number };\n\nexport async function withConfigFilePublicationForTest<T>(publish: PublishFile, run: () => Promise<T>): Promise<T> {\n  const previous = publishConfigFile;\n  publishConfigFile = publish;\n  try {\n    return await run();\n  } finally {\n    publishConfigFile = previous;\n  }\n}\n\nexport async function withConfigPublicationReadyHookForTest<T>(\n  hook: () => Promise<void>,\n  run: () => Promise<T>,\n): Promise<T> {\n  const previous = beforeConfigPublicationHook;\n  beforeConfigPublicationHook = hook;\n  try {\n    return await run();\n  } finally {\n    beforeConfigPublicationHook = previous;\n  }\n}\n\nexport async function withMissingConfigReadProbeHookForTest<T>(\n  hook: () => Promise<void>,\n  run: () => Promise<T>,\n): Promise<T> {\n  const previous = afterMissingConfigReadProbeHook;\n  afterMissingConfigReadProbeHook = hook;\n  try {\n    return await run();\n  } finally {\n    afterMissingConfigReadProbeHook = previous;\n  }\n}\n\nexport async function withConfigReplacementInstalledHookForTest<T>(\n  hook: () => Promise<void>,\n  run: () => Promise<T>,\n): Promise<T> {\n  const previous = afterReplacementInstalledHook;\n  afterReplacementInstalledHook = hook;\n  try {\n    return await run();\n  } finally {\n    afterReplacementInstalledHook = previous;\n  }\n}\n\nexport async function withConfigQuarantinedHookForTest<T>(\n  hook: () => Promise<void>,\n  run: () => Promise<T>,\n): Promise<T> {\n  const previous = afterConfigQuarantinedHook;\n  afterConfigQuarantinedHook = hook;\n  try {\n    return await run();\n  } finally {\n    afterConfigQuarantinedHook = previous;\n  }\n}\n\ntype ConfigSnapshot = {\n  bytes: Buffer;\n  identity: FileIdentity;\n  parsed: Record<string, unknown>;\n};\n\nexport type LocalConfigDocument = ConfigSnapshot & { path: string };\n\nexport function localConfigPath() {\n  return path.join(getAgentDir(), CONFIG_FILE_NAME);\n}\n\nexport function legacyLocalConfigPath() {\n  return path.join(getAgentDir(), LEGACY_CONFIG_FILE_NAME);\n}\n\nexport async function activeLocalConfigPath() {\n  const canonicalPath = localConfigPath();\n  const legacyPath = legacyLocalConfigPath();\n  return queueConfigOperation(() =>\n    withLocalConfigReadLockIfNeeded(async () => {\n      if (await pathExists(canonicalPath)) return canonicalPath;\n      return (await pathExists(legacyPath)) ? legacyPath : canonicalPath;\n    }),\n  );\n}\n\nexport function consumeLocalConfigMigrationNotice() {\n  const configPath = localConfigPath();\n  const notice = configMigrationNotices.get(configPath);\n  configMigrationNotices.delete(configPath);\n  return notice;\n}\n\nexport async function readActiveLocalConfigDocumentForRepair(): Promise<LocalConfigDocument | undefined> {\n  const canonicalPath = localConfigPath();\n  const legacyPath = legacyLocalConfigPath();\n  return queueConfigOperation(() =>\n    withLocalConfigReadLockIfNeeded(async () => {\n      const filePath = (await pathExists(canonicalPath)) ? canonicalPath : legacyPath;\n      const snapshot = await readConfigSnapshotIfExists(filePath);\n      return snapshot ? { path: filePath, ...snapshot } : undefined;\n    }),\n  );\n}\n\nexport async function readMigratingLocalConfigDocument(\n  validateForMigration: (settings: Record<string, unknown>) => void,\n): Promise<LocalConfigDocument | undefined> {\n  return queueConfigOperation(() =>\n    withLocalConfigReadLockIfNeeded(async () => {\n      const configPath = await prepareLocalConfigPath(validateForMigration);\n      const snapshot = await readConfigSnapshotIfExists(configPath);\n      return snapshot ? { path: configPath, ...snapshot } : undefined;\n    }),\n  );\n}\n\nasync function withLocalConfigReadLockIfNeeded<T>(read: () => Promise<T>): Promise<T> {\n  if ((await pathExists(localConfigPath())) || (await pathExists(legacyLocalConfigPath()))) {\n    return withLocalConfigFileLock(read);\n  }\n  await afterMissingConfigReadProbeHook();\n  if (await pathExists(configMutationLockPath())) return withLocalConfigFileLock(read);\n  await assertNoInterruptedConfigReplacement();\n  return read();\n}\n\nfunction queueConfigOperation<T>(run: () => Promise<T>): Promise<T> {\n  // Mutation callbacks use the unlocked helpers below, never a queued public read.\n  const operation = configUpdateQueue.then(run);\n  configUpdateQueue = operation.then(\n    () => undefined,\n    () => undefined,\n  );\n  return operation;\n}\n\nexport function updateLocalConfigDocument<T extends Record<string, unknown>>(\n  defaultValue: T,\n  update: (current: T) => T,\n  validate: (value: Record<string, unknown>) => void,\n  signal?: AbortSignal,\n): Promise<T> {\n  return queueConfigOperation(() => {\n    signal?.throwIfAborted();\n    return withLocalConfigFileLock(async () => {\n      signal?.throwIfAborted();\n      const configPath = await prepareLocalConfigPath(validate);\n      signal?.throwIfAborted();\n      const snapshot = await readConfigSnapshotIfExists(configPath);\n      signal?.throwIfAborted();\n      const document = snapshot ? { path: configPath, ...snapshot } : undefined;\n      const current = document ? (structuredClone(document.parsed) as T) : structuredClone(defaultValue);\n      const next = update(current);\n      validate(next);\n      signal?.throwIfAborted();\n      if (document && JSON.stringify(document.parsed) === JSON.stringify(next)) return next;\n      if (document) await replaceLocalConfigDocumentUnlocked(document, next, signal);\n      else await installPrivateConfigExclusively(localConfigPath(), serializedConfig(next), signal);\n      return next;\n    });\n  });\n}\n\nexport function createLocalConfigDocument(value: Record<string, unknown>, signal?: AbortSignal) {\n  return queueConfigOperation(() => {\n    signal?.throwIfAborted();\n    return withLocalConfigFileLock(async () => {\n      signal?.throwIfAborted();\n      const bytes = serializedConfig(value);\n      try {\n        await installPrivateConfigExclusively(localConfigPath(), bytes, signal);\n      } catch (error) {\n        if ((error as NodeJS.ErrnoException).code === \"EEXIST\") {\n          throw new Error(\"Pi-sync settings were created concurrently; reopen settings and retry.\");\n        }\n        throw error;\n      }\n    });\n  });\n}\n\nexport function replaceLocalConfigDocument(document: LocalConfigDocument, value: Record<string, unknown>) {\n  return queueConfigOperation(() => withLocalConfigFileLock(() => replaceLocalConfigDocumentUnlocked(document, value)));\n}\n\nasync function replaceLocalConfigDocumentUnlocked(\n  document: LocalConfigDocument,\n  value: Record<string, unknown>,\n  signal?: AbortSignal,\n) {\n  const nextBytes = serializedConfig(value);\n  const canonicalPath = localConfigPath();\n  if (document.path !== canonicalPath) {\n    if (!(await configDocumentStillMatches(document))) throw settingsChangedError();\n    let installed: FileIdentity;\n    try {\n      installed = await installPrivateConfigExclusively(canonicalPath, nextBytes, signal);\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code === \"EEXIST\") {\n        throw new Error(\"Canonical settings were created concurrently; no settings were replaced.\");\n      }\n      throw error;\n    }\n    if (!(await configDocumentStillMatches(document))) {\n      await quarantineAndRemoveConfigIfMatchesUnlocked(canonicalPath, installed, nextBytes);\n      throw settingsChangedError();\n    }\n    return;\n  }\n\n  const recoveryPath = path.join(\n    path.dirname(canonicalPath),\n    `.${path.basename(canonicalPath)}.${randomUUID()}.schema-migration-source`,\n  );\n  const previousHandle = await fs.open(canonicalPath, \"r\");\n  try {\n    const previous = await previousHandle.stat();\n    if (previous.dev !== document.identity.dev || previous.ino !== document.identity.ino) {\n      throw settingsChangedError();\n    }\n    await writePrivateConfigBytes(recoveryPath, document.bytes, \"wx\");\n    await syncParentDirectory(canonicalPath);\n    await withPrivateConfigTemporary(canonicalPath, nextBytes, async (temporaryPath, installed) => {\n      let published = false;\n      let previousBytesRead: Promise<Buffer> | undefined;\n      const readPreviousBytes = () => (previousBytesRead ??= previousHandle.readFile());\n      try {\n        signal?.throwIfAborted();\n        await publishConfigFile(temporaryPath, canonicalPath, document, signal);\n        published = true;\n        await syncParentDirectory(canonicalPath);\n        await afterReplacementInstalledHook();\n        if (!(await readPreviousBytes()).equals(document.bytes)) throw settingsChangedError();\n        if (!(await fileIdentityAndContentsMatch(canonicalPath, installed, nextBytes))) {\n          throw settingsChangedError();\n        }\n      } catch (error) {\n        if (published || (await fileIdentityAndContentsMatch(canonicalPath, installed, nextBytes))) {\n          const previousBytes = await readPreviousBytes().catch(() => document.bytes);\n          if (!previousBytes.equals(document.bytes)) {\n            await writePrivateConfigBytes(recoveryPath, previousBytes, \"w\");\n          }\n          // Rollback also replaces atomically; never remove the active settings first.\n          if (await fileIdentityAndContentsMatch(canonicalPath, installed, nextBytes)) {\n            await fs.rename(recoveryPath, canonicalPath);\n            await syncParentDirectory(canonicalPath);\n          }\n        } else if (await configDocumentStillMatches(document)) {\n          await fs.rm(recoveryPath);\n        }\n        if ((error as NodeJS.ErrnoException).code === \"EEXIST\") {\n          throw new Error(\"Canonical settings changed concurrently; no settings were replaced.\");\n        }\n        throw error;\n      }\n    });\n    await fs.rm(recoveryPath).catch(() => undefined);\n    await syncParentDirectory(canonicalPath).catch(() => undefined);\n  } catch (error) {\n    if (await configDocumentStillMatches(document)) {\n      await fs.rm(recoveryPath, { force: true }).catch(() => undefined);\n    }\n    throw error;\n  } finally {\n    await previousHandle.close().catch(() => undefined);\n  }\n}\n\nasync function prepareLocalConfigPath(validateForMigration: (settings: Record<string, unknown>) => void) {\n  const canonicalPath = localConfigPath();\n  const legacyPath = legacyLocalConfigPath();\n  if (await pathExists(canonicalPath)) {\n    const legacyStatus = await secureIgnoredLegacyIfPresent(legacyPath);\n    if (legacyStatus !== \"missing\" && !legacyPresenceNoticed.has(canonicalPath)) {\n      legacyPresenceNoticed.add(canonicalPath);\n      recordConfigMigrationNotice(\n        canonicalPath,\n        legacyStatus === \"private\"\n          ? `${LEGACY_CONFIG_FILE_NAME} legacy settings were ignored because ${CONFIG_FILE_NAME} takes precedence. Delete ${LEGACY_CONFIG_FILE_NAME} after confirming your settings.`\n          : `${LEGACY_CONFIG_FILE_NAME} legacy settings were ignored because ${CONFIG_FILE_NAME} takes precedence, but pi-sync could not verify them as a private regular file. Secure or delete the legacy path after confirming your settings.`,\n      );\n    }\n    return canonicalPath;\n  }\n\n  const legacy = await readConfigSnapshotIfExists(legacyPath);\n  if (!legacy) return canonicalPath;\n  validateForMigration(legacy.parsed);\n\n  let installedIdentity: FileIdentity;\n  try {\n    installedIdentity = await installPrivateConfigExclusively(canonicalPath, legacy.bytes);\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"EEXIST\") {\n      recordConfigMigrationNotice(\n        canonicalPath,\n        `${LEGACY_CONFIG_FILE_NAME} legacy settings were ignored because ${CONFIG_FILE_NAME} was created concurrently and takes precedence.`,\n      );\n      return canonicalPath;\n    }\n    recordConfigMigrationNotice(\n      canonicalPath,\n      `Could not migrate ${LEGACY_CONFIG_FILE_NAME} to ${CONFIG_FILE_NAME}; the legacy settings were used for this session and were not changed.`,\n    );\n    return legacyPath;\n  }\n\n  if (!(await configSnapshotStillMatches(legacyPath, legacy))) {\n    const removed = await quarantineAndRemoveConfigIfMatchesUnlocked(canonicalPath, installedIdentity, legacy.bytes);\n    recordConfigMigrationNotice(\n      canonicalPath,\n      removed\n        ? `${LEGACY_CONFIG_FILE_NAME} changed during migration; the stale ${CONFIG_FILE_NAME} copy was removed and the legacy settings were used for this session.`\n        : `${LEGACY_CONFIG_FILE_NAME} changed during migration, but ${CONFIG_FILE_NAME} was replaced concurrently and takes precedence.`,\n    );\n    return removed ? legacyPath : canonicalPath;\n  }\n\n  legacyPresenceNoticed.add(canonicalPath);\n  recordConfigMigrationNotice(\n    canonicalPath,\n    `pi-sync settings migrated from ${LEGACY_CONFIG_FILE_NAME} to ${CONFIG_FILE_NAME}; the private legacy file was retained as a recovery copy and can be deleted after verification.`,\n  );\n  return canonicalPath;\n}\n\nasync function secureIgnoredLegacyIfPresent(filePath: string) {\n  let pathStat: Awaited<ReturnType<typeof fs.lstat>>;\n  try {\n    pathStat = await fs.lstat(filePath);\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return \"missing\" as const;\n    return \"unsafe\" as const;\n  }\n  if (pathStat.isSymbolicLink() || !pathStat.isFile()) return \"unsafe\" as const;\n\n  let handle: fs.FileHandle | undefined;\n  try {\n    handle = await fs.open(filePath, \"r\");\n    const openedStat = await handle.stat();\n    if (openedStat.dev !== pathStat.dev || openedStat.ino !== pathStat.ino) {\n      return \"unsafe\" as const;\n    }\n    if (process.platform !== \"win32\" && (openedStat.mode & 0o777) !== 0o600) {\n      await handle.chmod(0o600);\n    }\n    return \"private\" as const;\n  } catch {\n    return \"unsafe\" as const;\n  } finally {\n    await handle?.close().catch(() => undefined);\n  }\n}\n\nasync function readConfigSnapshotIfExists(filePath: string): Promise<ConfigSnapshot | undefined> {\n  let pathStat: Awaited<ReturnType<typeof fs.lstat>>;\n  try {\n    pathStat = await fs.lstat(filePath);\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return undefined;\n    throw error;\n  }\n  if (pathStat.isSymbolicLink()) {\n    throw new Error(`Refusing to read symlinked pi-sync config: ${filePath}`);\n  }\n  if (!pathStat.isFile()) throw new Error(`pi-sync config is not a regular file: ${filePath}`);\n\n  const handle = await fs.open(filePath, \"r\");\n  try {\n    const openedStat = await handle.stat();\n    if (openedStat.dev !== pathStat.dev || openedStat.ino !== pathStat.ino) {\n      throw new Error(`pi-sync config changed while opening: ${filePath}`);\n    }\n    if (process.platform !== \"win32\" && (openedStat.mode & 0o777) !== 0o600) {\n      await handle.chmod(0o600);\n    }\n    const bytes = await handle.readFile();\n    return {\n      bytes,\n      identity: { dev: openedStat.dev, ino: openedStat.ino },\n      parsed: parseConfigObject(bytes, filePath),\n    };\n  } finally {\n    await handle.close();\n  }\n}\n\nfunction serializedConfig(value: Record<string, unknown>) {\n  return Buffer.from(`${JSON.stringify(value, null, \"\\t\")}\\n`, \"utf8\");\n}\n\nfunction parseConfigObject(bytes: Buffer, filePath: string) {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(bytes.toString(\"utf8\"));\n  } catch {\n    throw new SyntaxError(`Invalid JSON in pi-sync config: ${filePath}`);\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    throw new Error(`pi-sync config must contain a JSON object: ${filePath}`);\n  }\n  return parsed as Record<string, unknown>;\n}\n\nasync function installPrivateConfigExclusively(filePath: string, bytes: Buffer, signal?: AbortSignal) {\n  return withPrivateConfigTemporary(filePath, bytes, async (temporaryPath, installed) => {\n    signal?.throwIfAborted();\n    await publishConfigFile(temporaryPath, filePath, undefined, signal);\n    try {\n      if (!(await fileIdentityAndContentsMatch(filePath, installed, bytes))) {\n        throw new Error(`Published pi-sync settings changed concurrently: ${filePath}`);\n      }\n      await syncParentDirectory(filePath);\n    } catch (error) {\n      await quarantineAndRemoveConfigIfMatchesUnlocked(filePath, installed, bytes);\n      throw error;\n    }\n    return installed;\n  });\n}\n\nasync function withPrivateConfigTemporary<T>(\n  filePath: string,\n  bytes: Buffer,\n  publish: (temporaryPath: string, identity: FileIdentity) => Promise<T>,\n): Promise<T> {\n  await fs.mkdir(path.dirname(filePath), { recursive: true });\n  const temporaryPath = path.join(\n    path.dirname(filePath),\n    `.${path.basename(filePath)}.${process.pid}.${randomUUID()}.migrate`,\n  );\n  try {\n    const identity = await writePrivateConfigBytes(temporaryPath, bytes, \"wx\");\n    return await publish(temporaryPath, identity);\n  } finally {\n    await fs.rm(temporaryPath, { force: true }).catch(() => undefined);\n  }\n}\n\nasync function writePrivateConfigBytes(filePath: string, bytes: Buffer, flags: \"w\" | \"wx\") {\n  const handle = await fs.open(filePath, flags, 0o600);\n  try {\n    await handle.writeFile(bytes);\n    if (process.platform !== \"win32\") await handle.chmod(0o600);\n    await handle.sync();\n    const installed = await handle.stat();\n    return { dev: installed.dev, ino: installed.ino };\n  } finally {\n    await handle.close();\n  }\n}\n\nasync function configDocumentStillMatches(document: LocalConfigDocument) {\n  return fileIdentityAndContentsMatch(document.path, document.identity, document.bytes);\n}\n\nfunction settingsChangedError() {\n  return new Error(\"pi-sync settings changed during migration; no settings were replaced.\");\n}\n\nasync function configSnapshotStillMatches(filePath: string, snapshot: ConfigSnapshot) {\n  return fileIdentityAndContentsMatch(filePath, snapshot.identity, snapshot.bytes);\n}\n\nexport function quarantineAndRemoveConfigIfMatches(filePath: string, identity: FileIdentity, expectedBytes: Buffer) {\n  return queueConfigOperation(() =>\n    withLocalConfigFileLock(() => quarantineAndRemoveConfigIfMatchesUnlocked(filePath, identity, expectedBytes)),\n  );\n}\n\nasync function quarantineAndRemoveConfigIfMatchesUnlocked(\n  filePath: string,\n  identity: FileIdentity,\n  expectedBytes: Buffer,\n) {\n  const quarantinePath = path.join(\n    path.dirname(filePath),\n    `.${path.basename(filePath)}.${randomUUID()}.migration-retired`,\n  );\n  try {\n    await fs.rename(filePath, quarantinePath);\n  } catch {\n    return false;\n  }\n  await afterConfigQuarantinedHook();\n  try {\n    await syncParentDirectory(filePath);\n  } catch {\n    await restoreQuarantinedConfig(filePath, quarantinePath);\n    return false;\n  }\n\n  const matches = await fileIdentityAndContentsMatch(quarantinePath, identity, expectedBytes);\n  if (!matches) {\n    await restoreQuarantinedConfig(filePath, quarantinePath);\n    return false;\n  }\n  if (await pathExists(filePath)) {\n    await fs.rm(quarantinePath, { force: true });\n    await syncParentDirectory(filePath);\n    return false;\n  }\n  await fs.rm(quarantinePath);\n  await syncParentDirectory(filePath);\n  return true;\n}\n\nasync function fileIdentityAndContentsMatch(filePath: string, identity: FileIdentity, expectedBytes: Buffer) {\n  try {\n    const current = await fs.lstat(filePath);\n    if (current.isSymbolicLink()) return false;\n    if (current.dev !== identity.dev || current.ino !== identity.ino) return false;\n    return (await fs.readFile(filePath)).equals(expectedBytes);\n  } catch {\n    return false;\n  }\n}\n\nasync function restoreQuarantinedConfig(filePath: string, quarantinePath: string) {\n  try {\n    await renameFileWithoutReplacement(quarantinePath, filePath);\n    if (process.platform !== \"win32\") await fs.chmod(filePath, 0o600);\n    await syncParentDirectory(filePath);\n    return;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== \"EEXIST\") return;\n  }\n  try {\n    if (process.platform !== \"win32\") await fs.chmod(quarantinePath, 0o600);\n    await syncParentDirectory(filePath);\n  } catch {\n    // Preserve the quarantine rather than risk deleting settings that changed concurrently.\n  }\n}\n\nfunction configMutationLockPath() {\n  return `${localConfigPath()}.mutation-lock`;\n}\n\nexport async function withLocalConfigFileLock<T>(run: () => Promise<T>): Promise<T> {\n  const configPath = localConfigPath();\n  await fs.mkdir(path.dirname(configPath), { recursive: true });\n  let compromisedError: Error | undefined;\n  const release = await lockfile.lock(configPath, {\n    fs: LOCKFILE_FS_ADAPTER,\n    lockfilePath: configMutationLockPath(),\n    realpath: false,\n    stale: CONFIG_LOCK_STALE_MS,\n    update: CONFIG_LOCK_UPDATE_MS,\n    retries: { retries: 100, factor: 1.2, minTimeout: 10, maxTimeout: 100 },\n    onCompromised: (error) => {\n      compromisedError = error;\n    },\n  });\n  try {\n    await assertNoInterruptedConfigReplacement();\n    const result = await run();\n    if (compromisedError) throw compromisedError;\n    return result;\n  } finally {\n    await release();\n  }\n}\n\nasync function syncParentDirectory(filePath: string) {\n  if (process.platform === \"win32\") return;\n  let handle: fs.FileHandle | undefined;\n  try {\n    handle = await fs.open(path.dirname(filePath), \"r\");\n    await handle.sync();\n  } finally {\n    await handle?.close().catch(() => undefined);\n  }\n}\n\nasync function publishFileWithGuard(\n  source: string,\n  destination: string,\n  expected?: LocalConfigDocument,\n  signal?: AbortSignal,\n) {\n  await beforeConfigPublicationHook();\n  signal?.throwIfAborted();\n  if (expected) {\n    // The shared lock orders Pi Sync writers; rename has no CAS for noncooperating writers.\n    if (!(await configDocumentStillMatches(expected))) throw settingsChangedError();\n    signal?.throwIfAborted();\n    await fs.rename(source, destination);\n  } else {\n    await renameFileWithoutReplacement(source, destination, signal);\n  }\n}\n\nasync function renameFileWithoutReplacement(source: string, destination: string, signal?: AbortSignal) {\n  if (await pathExists(destination)) {\n    throw Object.assign(new Error(`Settings already exist: ${destination}`), { code: \"EEXIST\" });\n  }\n  signal?.throwIfAborted();\n  await fs.rename(source, destination);\n}\n\nasync function assertNoInterruptedConfigReplacement() {\n  const configPath = localConfigPath();\n  if (await pathExists(configPath)) return;\n  let names: string[];\n  try {\n    names = await fs.readdir(path.dirname(configPath));\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return;\n    throw error;\n  }\n  const prefix = `.${path.basename(configPath)}.`;\n  if (\n    names.some(\n      (name) =>\n        name.startsWith(prefix) && (name.endsWith(\".schema-migration-source\") || name.endsWith(\".migration-retired\")),\n    )\n  ) {\n    throw new Error(\n      \"Interrupted pi-sync settings replacement: restore the retained recovery file to pi-sync.json before retrying; legacy settings were not loaded.\",\n    );\n  }\n}\n\nasync function pathExists(filePath: string) {\n  try {\n    await fs.lstat(filePath);\n    return true;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return false;\n    throw error;\n  }\n}\n\nfunction recordConfigMigrationNotice(configPath: string, notice: string) {\n  if (!configMigrationNotices.has(configPath)) configMigrationNotices.set(configPath, notice);\n}\n", "import path from \"node:path\";\nimport { normalizeEndpointIdentity } from \"../backends/backend-identity.js\";\nimport {\n  normalizeGitBranch,\n  normalizeGitDirectory,\n  normalizeGitRemote,\n  normalizeGitRemoteIdentity,\n} from \"../backends/git/git-config.js\";\nimport {\n  normalizeWebDavIdentityUrl,\n  normalizeWebDavPath,\n  normalizeWebDavUrl,\n  validateWebDavCredentials,\n} from \"../backends/webdav/webdav-config.js\";\nimport { normalizeLocalFields } from \"../sync/local-field-policy.js\";\nimport { normalizeSyncInclude } from \"../sync/sync-policy.js\";\nimport { localConfigPath } from \"./config-file.js\";\nimport type {\n  OnSwitchAction,\n  PiSyncSettingsV3,\n  StorageConnectionSettings,\n  SyncSetupSettings,\n} from \"./settings-types.js\";\n\nexport const DEFAULT_ON_SWITCH: OnSwitchAction = \"ask-before-pull\";\n\nexport function normalizeOnSwitch(value: unknown): OnSwitchAction {\n  if (value === \"ask-before-pull\" || value === \"pull-after-switch\" || value === \"switch-only\") {\n    return value;\n  }\n  throw new Error(\n    'Invalid pi-sync settings: onSwitch must be \"ask-before-pull\", \"pull-after-switch\", or \"switch-only\".',\n  );\n}\n\nexport function validateSettingsDocument(value: Record<string, unknown>): PiSyncSettingsV3 {\n  if (value.version !== 3 && value.version !== 4 && value.version !== 5) {\n    throw new Error(\n      `Unsupported pi-sync settings: version 3 or 4 or 5 is required. Keep the existing ${path.basename(localConfigPath())} for recovery and use a compatible pi-sync client or review a separate supported setup; do not downgrade portable field policies. pi-sync will not migrate or overwrite unsupported settings.`,\n    );\n  }\n  rejectLegacyFields(\n    value,\n    [\n      \"profiles\",\n      \"targets\",\n      \"activeTarget\",\n      \"targetSwitchAction\",\n      \"endpoint\",\n      \"bucket\",\n      \"region\",\n      \"accessKeyId\",\n      \"secretAccessKey\",\n      \"sessionToken\",\n      \"profile\",\n      \"prefix\",\n      \"autoSync\",\n      \"syncFiles\",\n      \"syncSessions\",\n      \"extraFiles\",\n    ],\n    \"top level\",\n  );\n  normalizeOnSwitch(value.onSwitch);\n  if (value.skipSecretScan !== undefined && typeof value.skipSecretScan !== \"boolean\") {\n    throw new Error(\"Invalid pi-sync settings: skipSecretScan must be boolean.\");\n  }\n  if (value.showStatus !== undefined && typeof value.showStatus !== \"boolean\") {\n    throw new Error(\"Invalid pi-sync settings: showStatus must be boolean.\");\n  }\n  if (value.debug !== undefined && typeof value.debug !== \"boolean\") {\n    throw new Error(\"Invalid pi-sync settings: debug must be boolean.\");\n  }\n  const storageConnections = requireNamedObjectMap(\n    value.storageConnections,\n    \"storageConnections\",\n    \"storage connection\",\n  );\n  const syncSetups = requireNamedObjectMap(value.syncSetups, \"syncSetups\", \"sync setup\");\n  for (const name of Object.keys(storageConnections)) {\n    validateStorageConnection(\n      name,\n      requireOwnObject(storageConnections, name, \"storage connection\") as Record<string, unknown>,\n    );\n  }\n  for (const name of Object.keys(syncSetups)) {\n    validateSyncSetup(\n      name,\n      requireOwnObject(syncSetups, name, \"sync setup\") as Record<string, unknown>,\n      storageConnections,\n    );\n  }\n  const names = Object.keys(syncSetups);\n  const activeSyncSetup = optionalCanonicalReference(value.activeSyncSetup, \"activeSyncSetup\");\n  if (names.length === 0) {\n    if (activeSyncSetup !== undefined) {\n      throw new Error(\"Invalid pi-sync settings: empty syncSetups cannot have activeSyncSetup.\");\n    }\n  } else if (!activeSyncSetup || !Object.hasOwn(syncSetups, activeSyncSetup)) {\n    throw new Error(\"Invalid pi-sync settings: activeSyncSetup must reference an existing own-property sync setup.\");\n  }\n  for (const setup of Object.values(syncSetups)) {\n    const policy = (setup as SyncSetupSettings).sync;\n    if (policy.localFields !== undefined && value.version !== 4 && value.version !== 5)\n      throw new Error(\"localFields requires explicit settings version 4; older binaries must refuse portable state.\");\n  }\n  for (const setup of Object.values(syncSetups)) {\n    const policy = (setup as SyncSetupSettings).sync;\n    if ((policy.mergeContent || policy.partialSync) && value.version !== 5)\n      throw new Error(\"Content/partial sync requires explicit settings version 5.\");\n  }\n  validateUniqueRemoteSyncSetups(syncSetups, storageConnections);\n  return value as PiSyncSettingsV3;\n}\n\nfunction validateStorageConnection(name: string, value: Record<string, unknown>) {\n  rejectLegacyFields(\n    value,\n    [\"kind\", \"accessKeyId\", \"secretAccessKey\", \"sessionToken\", \"username\", \"password\"],\n    `storage connection \u201C${name}\u201D`,\n  );\n  const type = requiredString(value.type, `storage connection \u201C${name}\u201D type`);\n  if (type !== \"s3\" && type !== \"git\" && type !== \"webdav\") {\n    throw new Error(`Invalid pi-sync settings: storage connection \u201C${name}\u201D has unsupported type.`);\n  }\n  const known = [\"endpoint\", \"region\", \"remote\", \"url\", \"credentials\"];\n  const allowed =\n    type === \"s3\"\n      ? new Set([\"endpoint\", \"region\", \"credentials\"])\n      : type === \"git\"\n        ? new Set([\"remote\"])\n        : new Set([\"url\", \"credentials\"]);\n  if (known.some((field) => Object.hasOwn(value, field) && !allowed.has(field))) {\n    throw new Error(\n      `Invalid pi-sync settings: ${type.toUpperCase()} storage connection \u201C${name}\u201D mixes backend fields.`,\n    );\n  }\n  if (type === \"git\") {\n    if (!normalizeGitRemote(requiredString(value.remote, `Git remote for \u201C${name}\u201D`))) {\n      throw new Error(`Invalid pi-sync settings: Git remote for \u201C${name}\u201D is required.`);\n    }\n    return;\n  }\n  const credentials = requireRecord(value.credentials, `credentials for storage connection \u201C${name}\u201D`);\n  if (type === \"webdav\") {\n    normalizeWebDavUrl(requiredString(value.url, `WebDAV URL for \u201C${name}\u201D`));\n    const username = requiredString(credentials.username, `WebDAV username for \u201C${name}\u201D`);\n    const password = requiredSecret(credentials.password, `WebDAV password for \u201C${name}\u201D`);\n    if ([\"accessKeyId\", \"secretAccessKey\", \"sessionToken\"].some((field) => Object.hasOwn(credentials, field))) {\n      throw new Error(`Invalid pi-sync settings: WebDAV credentials for \u201C${name}\u201D mix fields.`);\n    }\n    validateWebDavCredentials(username, password);\n    return;\n  }\n  normalizeS3Endpoint(requiredString(value.endpoint, `S3 endpoint for \u201C${name}\u201D`));\n  requiredString(value.region, `S3 region for \u201C${name}\u201D`);\n  requiredString(credentials.accessKeyId, `S3 access key id for \u201C${name}\u201D`);\n  requiredSecret(credentials.secretAccessKey, `S3 secret access key for \u201C${name}\u201D`);\n  optionalString(credentials.sessionToken, `S3 session token for \u201C${name}\u201D`);\n  if ([\"username\", \"password\"].some((field) => Object.hasOwn(credentials, field))) {\n    throw new Error(`Invalid pi-sync settings: S3 credentials for \u201C${name}\u201D mix fields.`);\n  }\n}\n\nfunction validateSyncSetup(name: string, value: Record<string, unknown>, connections: Record<string, unknown>) {\n  rejectLegacyFields(\n    value,\n    [\n      \"profile\",\n      \"bucket\",\n      \"branch\",\n      \"path\",\n      \"prefix\",\n      \"directory\",\n      \"namespace\",\n      \"autoSync\",\n      \"syncFiles\",\n      \"syncSessions\",\n      \"extraFiles\",\n    ],\n    `sync setup \u201C${name}\u201D`,\n  );\n  const storage = requireRecord(value.storage, `storage for sync setup \u201C${name}\u201D`);\n  const sync = requireRecord(value.sync, `sync policy for sync setup \u201C${name}\u201D`);\n  rejectLegacyFields(storage, [\"profile\", \"prefix\", \"directory\", \"namespace\"], `storage for sync setup \u201C${name}\u201D`);\n  rejectLegacyFields(\n    sync,\n    [\"autoSync\", \"syncFiles\", \"syncSessions\", \"extraFiles\"],\n    `sync policy for sync setup \u201C${name}\u201D`,\n  );\n  const connectionName = requiredCanonicalReference(\n    storage.connection,\n    `storage connection reference for sync setup \u201C${name}\u201D`,\n  );\n  validateConfigName(connectionName, \"storage connection reference\");\n  const connection = ownObject<Record<string, unknown>>(connections, connectionName);\n  if (!connection) {\n    throw new Error(\n      `Invalid pi-sync settings: sync setup \u201C${name}\u201D references missing storage connection \u201C${connectionName}\u201D.`,\n    );\n  }\n  const type = connection.type;\n  normalizeStoragePath(requiredString(storage.path, `storage path for sync setup \u201C${name}\u201D`));\n  if (type === \"s3\") {\n    normalizeS3Bucket(requiredString(storage.bucket, `S3 bucket for sync setup \u201C${name}\u201D`));\n    if (Object.hasOwn(storage, \"branch\")) mixedSetupError(\"S3\", name);\n  } else if (type === \"git\") {\n    normalizeGitBranch(requiredString(storage.branch, `Git branch for sync setup \u201C${name}\u201D`));\n    if (Object.hasOwn(storage, \"bucket\")) mixedSetupError(\"Git\", name);\n  } else if (type === \"webdav\") {\n    if (Object.hasOwn(storage, \"bucket\") || Object.hasOwn(storage, \"branch\")) {\n      mixedSetupError(\"WebDAV\", name);\n    }\n  }\n  if (!Object.hasOwn(sync, \"include\")) {\n    throw new Error(`Invalid pi-sync settings: sync setup \u201C${name}\u201D is missing sync.include.`);\n  }\n  const include = normalizeSyncInclude(sync.include);\n  const localFields = normalizeLocalFields(sync.localFields);\n  if (localFields.length > 0 && !include.includes(\"settings.json\"))\n    throw new Error(\"Nonempty localFields requires settings.json in sync.include.\");\n  for (const key of [\"mergeContent\", \"partialSync\", \"agentMode\", \"continuous\"])\n    if (sync[key] !== undefined && typeof sync[key] !== \"boolean\") throw new Error(`${key} must be boolean.`);\n  if (sync.mergeSettings !== undefined && typeof sync.mergeSettings !== \"boolean\")\n    throw new Error(\"mergeSettings must be boolean.\");\n  if (sync.automaticTransfer !== undefined && typeof sync.automaticTransfer !== \"boolean\") {\n    throw new Error(`Invalid pi-sync settings: sync setup \u201C${name}\u201D sync.automaticTransfer must be boolean.`);\n  }\n  if (typeof sync.automatic !== \"boolean\") {\n    throw new Error(`Invalid pi-sync settings: sync setup \u201C${name}\u201D sync.automatic must be boolean.`);\n  }\n}\n\nfunction mixedSetupError(type: string, name: string): never {\n  throw new Error(`Invalid pi-sync settings: ${type} sync setup \u201C${name}\u201D mixes backend fields.`);\n}\n\nexport function validateUniqueRemoteSyncSetups(setups: Record<string, unknown>, connections: Record<string, unknown>) {\n  const identities = new Map<string, string>();\n  for (const name of Object.keys(setups)) {\n    const setup = requireOwnObject(setups, name, \"sync setup\") as unknown as SyncSetupSettings;\n    const connection = requireOwnObject(\n      connections,\n      setup.storage.connection,\n      \"storage connection\",\n    ) as unknown as StorageConnectionSettings;\n    const identity = effectiveSyncSetupRemoteIdentity(setup, connection);\n    const existing = identities.get(identity);\n    if (existing) {\n      throw new Error(\n        `Invalid pi-sync settings: sync setups \u201C${existing}\u201D and \u201C${name}\u201D use the same normalized remote location.`,\n      );\n    }\n    identities.set(identity, name);\n  }\n}\n\nexport function effectiveSyncSetupRemoteIdentity(setup: SyncSetupSettings, connection: StorageConnectionSettings) {\n  const storagePath = normalizeStoragePath(setup.storage.path);\n  if (connection.type === \"git\") {\n    return JSON.stringify([\n      \"git\",\n      normalizeGitRemoteIdentity(connection.remote),\n      normalizeGitBranch(setup.storage.branch),\n      normalizeGitDirectory(storagePath),\n    ]);\n  }\n  if (connection.type === \"webdav\") {\n    return JSON.stringify([\n      \"webdav\",\n      normalizeWebDavIdentityUrl(connection.url),\n      connection.credentials.username.trim(),\n      normalizeWebDavPath(storagePath),\n    ]);\n  }\n  return JSON.stringify([\n    \"s3\",\n    normalizeEndpointIdentity(connection.endpoint),\n    normalizeS3Bucket(setup.storage.bucket),\n    storagePath,\n  ]);\n}\n\nfunction rejectLegacyFields(value: Record<string, unknown>, fields: readonly string[], context: string) {\n  const field = fields.find((candidate) => Object.hasOwn(value, candidate));\n  if (field) {\n    throw new Error(`Invalid pi-sync settings: ${context} contains unsupported version 1/2 field \u201C${field}\u201D.`);\n  }\n}\n\nfunction requireNamedObjectMap(value: unknown, field: string, itemLabel: string) {\n  const result = requireRecord(value, field);\n  for (const name of Object.keys(result)) validateConfigName(name, itemLabel);\n  return result;\n}\n\nfunction requireOwnObject(value: Record<string, unknown>, key: string, label: string) {\n  const item = ownObject(value, key);\n  if (!item) throw new Error(`Invalid pi-sync settings: ${label} \u201C${key}\u201D must be an object.`);\n  return item;\n}\n\nexport function ownObject<T extends object>(value: Record<string, unknown>, key: string): T | undefined {\n  if (!Object.hasOwn(value, key)) return undefined;\n  const item = value[key];\n  return item && typeof item === \"object\" && !Array.isArray(item) ? (item as T) : undefined;\n}\n\nfunction requireRecord(value: unknown, field: string): Record<string, unknown> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    throw new Error(`Invalid pi-sync settings: ${field} must be an object.`);\n  }\n  return value as Record<string, unknown>;\n}\n\nexport function validateConfigName(value: string, field: string) {\n  if (\n    !value.trim() ||\n    value !== value.trim() ||\n    value.length > 100 ||\n    value === \"__proto__\" ||\n    value === \"prototype\" ||\n    value === \"constructor\" ||\n    hasControlCharacter(value)\n  ) {\n    throw new Error(`Invalid pi-sync settings: invalid ${field} name.`);\n  }\n}\n\nexport function requiredString(value: unknown, field: string) {\n  if (typeof value !== \"string\" || !value.trim() || hasControlCharacter(value)) {\n    throw new Error(`Invalid pi-sync settings: ${field} must be a non-empty string.`);\n  }\n  return value.trim();\n}\n\nfunction requiredCanonicalReference(value: unknown, field: string) {\n  const normalized = requiredString(value, field);\n  if (value !== normalized) {\n    throw new Error(`Invalid pi-sync settings: ${field} must not have surrounding whitespace.`);\n  }\n  return normalized;\n}\n\nfunction optionalCanonicalReference(value: unknown, field: string) {\n  const normalized = optionalString(value, field);\n  if (normalized !== undefined && value !== normalized) {\n    throw new Error(`Invalid pi-sync settings: ${field} must not have surrounding whitespace.`);\n  }\n  return normalized;\n}\n\nfunction requiredSecret(value: unknown, field: string) {\n  if (typeof value !== \"string\" || !value || hasControlCharacter(value)) {\n    throw new Error(`Invalid pi-sync settings: ${field} must be configured.`);\n  }\n  return value;\n}\n\nexport function optionalString(value: unknown, field: string) {\n  if (value === undefined) return undefined;\n  if (typeof value !== \"string\" || hasControlCharacter(value)) {\n    throw new Error(`Invalid pi-sync settings: ${field} must be a string.`);\n  }\n  return value.trim() || undefined;\n}\n\nexport function normalizeStoragePath(value: string) {\n  if (value.trim() === \".\" || value.trim() === \"./\") return \"./\";\n  const normalized = value.trim().replace(/^\\/+|\\/+$/gu, \"\");\n  if (\n    !normalized ||\n    normalized.length > 1024 ||\n    normalized.startsWith(\"-\") ||\n    normalized.includes(\"\\\\\") ||\n    hasControlCharacter(normalized) ||\n    normalized.split(\"/\").some((segment) => !segment || segment === \".\" || segment === \"..\")\n  ) {\n    throw new Error(\"Invalid pi-sync settings: storage.path must be a safe relative path.\");\n  }\n  return normalized;\n}\n\nexport function normalizeS3Endpoint(value: string) {\n  let url: URL;\n  try {\n    url = new URL(value.trim());\n  } catch {\n    throw new Error(\"Invalid pi-sync S3 endpoint.\");\n  }\n  const loopback = url.hostname === \"127.0.0.1\" || url.hostname === \"localhost\" || url.hostname === \"[::1]\";\n  if (\n    (url.protocol !== \"https:\" && !(url.protocol === \"http:\" && loopback)) ||\n    url.username ||\n    url.password ||\n    url.search ||\n    url.hash\n  ) {\n    throw new Error(\"Invalid pi-sync S3 endpoint: HTTPS is required except for loopback.\");\n  }\n  url.pathname = url.pathname.replace(/\\/+$/gu, \"\");\n  return url.toString().replace(/\\/$/u, \"\");\n}\n\nexport function normalizeS3Bucket(value: string | undefined) {\n  const bucket = requiredString(value, \"S3 bucket\");\n  if (bucket.includes(\"/\") || bucket.includes(\"\\\\\") || bucket.startsWith(\"-\")) {\n    throw new Error(\"Invalid pi-sync S3 bucket.\");\n  }\n  return bucket;\n}\n\nfunction hasControlCharacter(value: string) {\n  // biome-ignore lint/suspicious/noControlCharactersInRegex: Stored settings cannot contain controls.\n  return /[\\u0000-\\u001f\\u007f-\\u009f]/u.test(value);\n}\n\nexport function isCloudflareR2Endpoint(endpoint: string | undefined) {\n  const value = endpoint?.trim();\n  if (!value) return false;\n  try {\n    const hostname = new URL(value).hostname.toLowerCase();\n    return hostname === \"r2.cloudflarestorage.com\" || hostname.endsWith(\".r2.cloudflarestorage.com\");\n  } catch {\n    return false;\n  }\n}\n\nexport function ownRecord(value: unknown): Record<string, unknown> | undefined {\n  return value && typeof value === \"object\" && !Array.isArray(value) ? (value as Record<string, unknown>) : undefined;\n}\n", "import { localConfigPath, readMigratingLocalConfigDocument, updateLocalConfigDocument } from \"./config-file.js\";\nimport type { OnSwitchAction, PiSyncSettingsV3 } from \"./settings-types.js\";\nimport { DEFAULT_ON_SWITCH, validateSettingsDocument } from \"./settings-validation.js\";\n\nexport async function requireSettings() {\n  const settings = await readLocalConfigObject();\n  if (!settings) {\n    throw new Error(`Missing pi-sync settings. Open /sync and choose Set up sync, or create ${localConfigPath()}.`);\n  }\n  return settings;\n}\n\nexport async function configuredSyncSetupNames() {\n  const settings = await readLocalConfigObject();\n  return settings ? Object.keys(settings.syncSetups).sort((left, right) => left.localeCompare(right)) : [];\n}\n\nexport async function loadOnSwitch(): Promise<OnSwitchAction> {\n  return (await requireSettings()).onSwitch;\n}\n\nexport function localConfigTemplate(): PiSyncSettingsV3 {\n  return {\n    version: 3,\n    onSwitch: DEFAULT_ON_SWITCH,\n    skipSecretScan: false,\n    showStatus: true,\n    debug: false,\n    storageConnections: {},\n    syncSetups: {},\n  };\n}\n\nexport async function readLocalConfigDocument() {\n  const document = await readMigratingLocalConfigDocument((settings) => {\n    validateSettingsDocument(settings);\n  });\n  if (document) validateSettingsDocument(document.parsed);\n  return document;\n}\n\nexport async function readLocalConfigObject(): Promise<PiSyncSettingsV3 | undefined> {\n  return (await readLocalConfigDocument())?.parsed as PiSyncSettingsV3 | undefined;\n}\n\nexport function updateLocalConfig(update: (current: PiSyncSettingsV3) => PiSyncSettingsV3, signal?: AbortSignal) {\n  return updateLocalConfigDocument(localConfigTemplate(), update, validateSettingsDocument, signal);\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,kBAAkB;;;ACA3B,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,mBAAmB;AAC5B,OAAO,cAAc;AAErB,IAAM,mBAAmB;AACzB,IAAM,0BAA0B;AAChC,IAAM,yBAAyB,oBAAI,IAAoB;AACvD,IAAM,wBAAwB,oBAAI,IAAY;AAC9C,IAAM,uBAAuB;AAC7B,IAAM,wBAAwB;AAC9B,IAAM,sBAAsB;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAQA,IAAI,oBAAmC,QAAQ,QAAQ;AACvD,IAAI,oBAAiC;AACrC,IAAI,8BAAmD,YAAY;AACnE,IAAI,kCAAuD,YAAY;AACvE,IAAI,gCAAqD,YAAY;AACrE,IAAI,6BAAkD,YAAY;AA0E3D,SAAS,kBAAkB;AAChC,SAAO,KAAK,KAAK,YAAY,GAAG,gBAAgB;AAClD;AAEO,SAAS,wBAAwB;AACtC,SAAO,KAAK,KAAK,YAAY,GAAG,uBAAuB;AACzD;AAEA,eAAsB,wBAAwB;AAC5C,QAAM,gBAAgB,gBAAgB;AACtC,QAAM,aAAa,sBAAsB;AACzC,SAAO;AAAA,IAAqB,MAC1B,gCAAgC,YAAY;AAC1C,UAAI,MAAM,WAAW,aAAa,EAAG,QAAO;AAC5C,aAAQ,MAAM,WAAW,UAAU,IAAK,aAAa;AAAA,IACvD,CAAC;AAAA,EACH;AACF;AAEO,SAAS,oCAAoC;AAClD,QAAM,aAAa,gBAAgB;AACnC,QAAM,SAAS,uBAAuB,IAAI,UAAU;AACpD,yBAAuB,OAAO,UAAU;AACxC,SAAO;AACT;AAEA,eAAsB,yCAAmF;AACvG,QAAM,gBAAgB,gBAAgB;AACtC,QAAM,aAAa,sBAAsB;AACzC,SAAO;AAAA,IAAqB,MAC1B,gCAAgC,YAAY;AAC1C,YAAM,WAAY,MAAM,WAAW,aAAa,IAAK,gBAAgB;AACrE,YAAM,WAAW,MAAM,2BAA2B,QAAQ;AAC1D,aAAO,WAAW,EAAE,MAAM,UAAU,GAAG,SAAS,IAAI;AAAA,IACtD,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,iCACpB,sBAC0C;AAC1C,SAAO;AAAA,IAAqB,MAC1B,gCAAgC,YAAY;AAC1C,YAAM,aAAa,MAAM,uBAAuB,oBAAoB;AACpE,YAAM,WAAW,MAAM,2BAA2B,UAAU;AAC5D,aAAO,WAAW,EAAE,MAAM,YAAY,GAAG,SAAS,IAAI;AAAA,IACxD,CAAC;AAAA,EACH;AACF;AAEA,eAAe,gCAAmC,MAAoC;AACpF,MAAK,MAAM,WAAW,gBAAgB,CAAC,KAAO,MAAM,WAAW,sBAAsB,CAAC,GAAI;AACxF,WAAO,wBAAwB,IAAI;AAAA,EACrC;AACA,QAAM,gCAAgC;AACtC,MAAI,MAAM,WAAW,uBAAuB,CAAC,EAAG,QAAO,wBAAwB,IAAI;AACnF,QAAM,qCAAqC;AAC3C,SAAO,KAAK;AACd;AAEA,SAAS,qBAAwB,KAAmC;AAElE,QAAM,YAAY,kBAAkB,KAAK,GAAG;AAC5C,sBAAoB,UAAU;AAAA,IAC5B,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACA,SAAO;AACT;AAEO,SAAS,0BACd,cACA,QACA,UACA,QACY;AACZ,SAAO,qBAAqB,MAAM;AAChC,YAAQ,eAAe;AACvB,WAAO,wBAAwB,YAAY;AACzC,cAAQ,eAAe;AACvB,YAAM,aAAa,MAAM,uBAAuB,QAAQ;AACxD,cAAQ,eAAe;AACvB,YAAM,WAAW,MAAM,2BAA2B,UAAU;AAC5D,cAAQ,eAAe;AACvB,YAAM,WAAW,WAAW,EAAE,MAAM,YAAY,GAAG,SAAS,IAAI;AAChE,YAAM,UAAU,WAAY,gBAAgB,SAAS,MAAM,IAAU,gBAAgB,YAAY;AACjG,YAAM,OAAO,OAAO,OAAO;AAC3B,eAAS,IAAI;AACb,cAAQ,eAAe;AACvB,UAAI,YAAY,KAAK,UAAU,SAAS,MAAM,MAAM,KAAK,UAAU,IAAI,EAAG,QAAO;AACjF,UAAI,SAAU,OAAM,mCAAmC,UAAU,MAAM,MAAM;AAAA,UACxE,OAAM,gCAAgC,gBAAgB,GAAG,iBAAiB,IAAI,GAAG,MAAM;AAC5F,aAAO;AAAA,IACT,CAAC;AAAA,EACH,CAAC;AACH;AAEO,SAAS,0BAA0B,OAAgC,QAAsB;AAC9F,SAAO,qBAAqB,MAAM;AAChC,YAAQ,eAAe;AACvB,WAAO,wBAAwB,YAAY;AACzC,cAAQ,eAAe;AACvB,YAAM,QAAQ,iBAAiB,KAAK;AACpC,UAAI;AACF,cAAM,gCAAgC,gBAAgB,GAAG,OAAO,MAAM;AAAA,MACxE,SAAS,OAAO;AACd,YAAK,MAAgC,SAAS,UAAU;AACtD,gBAAM,IAAI,MAAM,wEAAwE;AAAA,QAC1F;AACA,cAAM;AAAA,MACR;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;AAMA,eAAe,mCACb,UACA,OACA,QACA;AACA,QAAM,YAAY,iBAAiB,KAAK;AACxC,QAAM,gBAAgB,gBAAgB;AACtC,MAAI,SAAS,SAAS,eAAe;AACnC,QAAI,CAAE,MAAM,2BAA2B,QAAQ,EAAI,OAAM,qBAAqB;AAC9E,QAAI;AACJ,QAAI;AACF,kBAAY,MAAM,gCAAgC,eAAe,WAAW,MAAM;AAAA,IACpF,SAAS,OAAO;AACd,UAAK,MAAgC,SAAS,UAAU;AACtD,cAAM,IAAI,MAAM,0EAA0E;AAAA,MAC5F;AACA,YAAM;AAAA,IACR;AACA,QAAI,CAAE,MAAM,2BAA2B,QAAQ,GAAI;AACjD,YAAM,2CAA2C,eAAe,WAAW,SAAS;AACpF,YAAM,qBAAqB;AAAA,IAC7B;AACA;AAAA,EACF;AAEA,QAAM,eAAe,KAAK;AAAA,IACxB,KAAK,QAAQ,aAAa;AAAA,IAC1B,IAAI,KAAK,SAAS,aAAa,CAAC,IAAI,WAAW,CAAC;AAAA,EAClD;AACA,QAAM,iBAAiB,MAAM,GAAG,KAAK,eAAe,GAAG;AACvD,MAAI;AACF,UAAM,WAAW,MAAM,eAAe,KAAK;AAC3C,QAAI,SAAS,QAAQ,SAAS,SAAS,OAAO,SAAS,QAAQ,SAAS,SAAS,KAAK;AACpF,YAAM,qBAAqB;AAAA,IAC7B;AACA,UAAM,wBAAwB,cAAc,SAAS,OAAO,IAAI;AAChE,UAAM,oBAAoB,aAAa;AACvC,UAAM,2BAA2B,eAAe,WAAW,OAAO,eAAe,cAAc;AAC7F,UAAI,YAAY;AAChB,UAAI;AACJ,YAAM,oBAAoB,MAAO,sBAAsB,eAAe,SAAS;AAC/E,UAAI;AACF,gBAAQ,eAAe;AACvB,cAAM,kBAAkB,eAAe,eAAe,UAAU,MAAM;AACtE,oBAAY;AACZ,cAAM,oBAAoB,aAAa;AACvC,cAAM,8BAA8B;AACpC,YAAI,EAAE,MAAM,kBAAkB,GAAG,OAAO,SAAS,KAAK,EAAG,OAAM,qBAAqB;AACpF,YAAI,CAAE,MAAM,6BAA6B,eAAe,WAAW,SAAS,GAAI;AAC9E,gBAAM,qBAAqB;AAAA,QAC7B;AAAA,MACF,SAAS,OAAO;AACd,YAAI,aAAc,MAAM,6BAA6B,eAAe,WAAW,SAAS,GAAI;AAC1F,gBAAM,gBAAgB,MAAM,kBAAkB,EAAE,MAAM,MAAM,SAAS,KAAK;AAC1E,cAAI,CAAC,cAAc,OAAO,SAAS,KAAK,GAAG;AACzC,kBAAM,wBAAwB,cAAc,eAAe,GAAG;AAAA,UAChE;AAEA,cAAI,MAAM,6BAA6B,eAAe,WAAW,SAAS,GAAG;AAC3E,kBAAM,GAAG,OAAO,cAAc,aAAa;AAC3C,kBAAM,oBAAoB,aAAa;AAAA,UACzC;AAAA,QACF,WAAW,MAAM,2BAA2B,QAAQ,GAAG;AACrD,gBAAM,GAAG,GAAG,YAAY;AAAA,QAC1B;AACA,YAAK,MAAgC,SAAS,UAAU;AACtD,gBAAM,IAAI,MAAM,qEAAqE;AAAA,QACvF;AACA,cAAM;AAAA,MACR;AAAA,IACF,CAAC;AACD,UAAM,GAAG,GAAG,YAAY,EAAE,MAAM,MAAM,MAAS;AAC/C,UAAM,oBAAoB,aAAa,EAAE,MAAM,MAAM,MAAS;AAAA,EAChE,SAAS,OAAO;AACd,QAAI,MAAM,2BAA2B,QAAQ,GAAG;AAC9C,YAAM,GAAG,GAAG,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,IAClE;AACA,UAAM;AAAA,EACR,UAAE;AACA,UAAM,eAAe,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,EACpD;AACF;AAEA,eAAe,uBAAuB,sBAAmE;AACvG,QAAM,gBAAgB,gBAAgB;AACtC,QAAM,aAAa,sBAAsB;AACzC,MAAI,MAAM,WAAW,aAAa,GAAG;AACnC,UAAM,eAAe,MAAM,6BAA6B,UAAU;AAClE,QAAI,iBAAiB,aAAa,CAAC,sBAAsB,IAAI,aAAa,GAAG;AAC3E,4BAAsB,IAAI,aAAa;AACvC;AAAA,QACE;AAAA,QACA,iBAAiB,YACb,GAAG,uBAAuB,yCAAyC,gBAAgB,6BAA6B,uBAAuB,qCACvI,GAAG,uBAAuB,yCAAyC,gBAAgB;AAAA,MACzF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,MAAM,2BAA2B,UAAU;AAC1D,MAAI,CAAC,OAAQ,QAAO;AACpB,uBAAqB,OAAO,MAAM;AAElC,MAAI;AACJ,MAAI;AACF,wBAAoB,MAAM,gCAAgC,eAAe,OAAO,KAAK;AAAA,EACvF,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,UAAU;AACtD;AAAA,QACE;AAAA,QACA,GAAG,uBAAuB,yCAAyC,gBAAgB;AAAA,MACrF;AACA,aAAO;AAAA,IACT;AACA;AAAA,MACE;AAAA,MACA,qBAAqB,uBAAuB,OAAO,gBAAgB;AAAA,IACrE;AACA,WAAO;AAAA,EACT;AAEA,MAAI,CAAE,MAAM,2BAA2B,YAAY,MAAM,GAAI;AAC3D,UAAM,UAAU,MAAM,2CAA2C,eAAe,mBAAmB,OAAO,KAAK;AAC/G;AAAA,MACE;AAAA,MACA,UACI,GAAG,uBAAuB,wCAAwC,gBAAgB,0EAClF,GAAG,uBAAuB,kCAAkC,gBAAgB;AAAA,IAClF;AACA,WAAO,UAAU,aAAa;AAAA,EAChC;AAEA,wBAAsB,IAAI,aAAa;AACvC;AAAA,IACE;AAAA,IACA,kCAAkC,uBAAuB,OAAO,gBAAgB;AAAA,EAClF;AACA,SAAO;AACT;AAEA,eAAe,6BAA6B,UAAkB;AAC5D,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,GAAG,MAAM,QAAQ;AAAA,EACpC,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,WAAO;AAAA,EACT;AACA,MAAI,SAAS,eAAe,KAAK,CAAC,SAAS,OAAO,EAAG,QAAO;AAE5D,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,GAAG,KAAK,UAAU,GAAG;AACpC,UAAM,aAAa,MAAM,OAAO,KAAK;AACrC,QAAI,WAAW,QAAQ,SAAS,OAAO,WAAW,QAAQ,SAAS,KAAK;AACtE,aAAO;AAAA,IACT;AACA,QAAI,QAAQ,aAAa,YAAY,WAAW,OAAO,SAAW,KAAO;AACvE,YAAM,OAAO,MAAM,GAAK;AAAA,IAC1B;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT,UAAE;AACA,UAAM,QAAQ,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,EAC7C;AACF;AAEA,eAAe,2BAA2B,UAAuD;AAC/F,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,GAAG,MAAM,QAAQ;AAAA,EACpC,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,UAAM;AAAA,EACR;AACA,MAAI,SAAS,eAAe,GAAG;AAC7B,UAAM,IAAI,MAAM,8CAA8C,QAAQ,EAAE;AAAA,EAC1E;AACA,MAAI,CAAC,SAAS,OAAO,EAAG,OAAM,IAAI,MAAM,yCAAyC,QAAQ,EAAE;AAE3F,QAAM,SAAS,MAAM,GAAG,KAAK,UAAU,GAAG;AAC1C,MAAI;AACF,UAAM,aAAa,MAAM,OAAO,KAAK;AACrC,QAAI,WAAW,QAAQ,SAAS,OAAO,WAAW,QAAQ,SAAS,KAAK;AACtE,YAAM,IAAI,MAAM,yCAAyC,QAAQ,EAAE;AAAA,IACrE;AACA,QAAI,QAAQ,aAAa,YAAY,WAAW,OAAO,SAAW,KAAO;AACvE,YAAM,OAAO,MAAM,GAAK;AAAA,IAC1B;AACA,UAAM,QAAQ,MAAM,OAAO,SAAS;AACpC,WAAO;AAAA,MACL;AAAA,MACA,UAAU,EAAE,KAAK,WAAW,KAAK,KAAK,WAAW,IAAI;AAAA,MACrD,QAAQ,kBAAkB,OAAO,QAAQ;AAAA,IAC3C;AAAA,EACF,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;AAEA,SAAS,iBAAiB,OAAgC;AACxD,SAAO,OAAO,KAAK,GAAG,KAAK,UAAU,OAAO,MAAM,GAAI,CAAC;AAAA,GAAM,MAAM;AACrE;AAEA,SAAS,kBAAkB,OAAe,UAAkB;AAC1D,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,MAAM,SAAS,MAAM,CAAC;AAAA,EAC5C,QAAQ;AACN,UAAM,IAAI,YAAY,mCAAmC,QAAQ,EAAE;AAAA,EACrE;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAClE,UAAM,IAAI,MAAM,8CAA8C,QAAQ,EAAE;AAAA,EAC1E;AACA,SAAO;AACT;AAEA,eAAe,gCAAgC,UAAkB,OAAe,QAAsB;AACpG,SAAO,2BAA2B,UAAU,OAAO,OAAO,eAAe,cAAc;AACrF,YAAQ,eAAe;AACvB,UAAM,kBAAkB,eAAe,UAAU,QAAW,MAAM;AAClE,QAAI;AACF,UAAI,CAAE,MAAM,6BAA6B,UAAU,WAAW,KAAK,GAAI;AACrE,cAAM,IAAI,MAAM,oDAAoD,QAAQ,EAAE;AAAA,MAChF;AACA,YAAM,oBAAoB,QAAQ;AAAA,IACpC,SAAS,OAAO;AACd,YAAM,2CAA2C,UAAU,WAAW,KAAK;AAC3E,YAAM;AAAA,IACR;AACA,WAAO;AAAA,EACT,CAAC;AACH;AAEA,eAAe,2BACb,UACA,OACA,SACY;AACZ,QAAM,GAAG,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAC1D,QAAM,gBAAgB,KAAK;AAAA,IACzB,KAAK,QAAQ,QAAQ;AAAA,IACrB,IAAI,KAAK,SAAS,QAAQ,CAAC,IAAI,QAAQ,GAAG,IAAI,WAAW,CAAC;AAAA,EAC5D;AACA,MAAI;AACF,UAAM,WAAW,MAAM,wBAAwB,eAAe,OAAO,IAAI;AACzE,WAAO,MAAM,QAAQ,eAAe,QAAQ;AAAA,EAC9C,UAAE;AACA,UAAM,GAAG,GAAG,eAAe,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,EACnE;AACF;AAEA,eAAe,wBAAwB,UAAkB,OAAe,OAAmB;AACzF,QAAM,SAAS,MAAM,GAAG,KAAK,UAAU,OAAO,GAAK;AACnD,MAAI;AACF,UAAM,OAAO,UAAU,KAAK;AAC5B,QAAI,QAAQ,aAAa,QAAS,OAAM,OAAO,MAAM,GAAK;AAC1D,UAAM,OAAO,KAAK;AAClB,UAAM,YAAY,MAAM,OAAO,KAAK;AACpC,WAAO,EAAE,KAAK,UAAU,KAAK,KAAK,UAAU,IAAI;AAAA,EAClD,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;AAEA,eAAe,2BAA2B,UAA+B;AACvE,SAAO,6BAA6B,SAAS,MAAM,SAAS,UAAU,SAAS,KAAK;AACtF;AAEA,SAAS,uBAAuB;AAC9B,SAAO,IAAI,MAAM,uEAAuE;AAC1F;AAEA,eAAe,2BAA2B,UAAkB,UAA0B;AACpF,SAAO,6BAA6B,UAAU,SAAS,UAAU,SAAS,KAAK;AACjF;AAQA,eAAe,2CACb,UACA,UACA,eACA;AACA,QAAM,iBAAiB,KAAK;AAAA,IAC1B,KAAK,QAAQ,QAAQ;AAAA,IACrB,IAAI,KAAK,SAAS,QAAQ,CAAC,IAAI,WAAW,CAAC;AAAA,EAC7C;AACA,MAAI;AACF,UAAM,GAAG,OAAO,UAAU,cAAc;AAAA,EAC1C,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,2BAA2B;AACjC,MAAI;AACF,UAAM,oBAAoB,QAAQ;AAAA,EACpC,QAAQ;AACN,UAAM,yBAAyB,UAAU,cAAc;AACvD,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,MAAM,6BAA6B,gBAAgB,UAAU,aAAa;AAC1F,MAAI,CAAC,SAAS;AACZ,UAAM,yBAAyB,UAAU,cAAc;AACvD,WAAO;AAAA,EACT;AACA,MAAI,MAAM,WAAW,QAAQ,GAAG;AAC9B,UAAM,GAAG,GAAG,gBAAgB,EAAE,OAAO,KAAK,CAAC;AAC3C,UAAM,oBAAoB,QAAQ;AAClC,WAAO;AAAA,EACT;AACA,QAAM,GAAG,GAAG,cAAc;AAC1B,QAAM,oBAAoB,QAAQ;AAClC,SAAO;AACT;AAEA,eAAe,6BAA6B,UAAkB,UAAwB,eAAuB;AAC3G,MAAI;AACF,UAAM,UAAU,MAAM,GAAG,MAAM,QAAQ;AACvC,QAAI,QAAQ,eAAe,EAAG,QAAO;AACrC,QAAI,QAAQ,QAAQ,SAAS,OAAO,QAAQ,QAAQ,SAAS,IAAK,QAAO;AACzE,YAAQ,MAAM,GAAG,SAAS,QAAQ,GAAG,OAAO,aAAa;AAAA,EAC3D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,yBAAyB,UAAkB,gBAAwB;AAChF,MAAI;AACF,UAAM,6BAA6B,gBAAgB,QAAQ;AAC3D,QAAI,QAAQ,aAAa,QAAS,OAAM,GAAG,MAAM,UAAU,GAAK;AAChE,UAAM,oBAAoB,QAAQ;AAClC;AAAA,EACF,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU;AAAA,EAC1D;AACA,MAAI;AACF,QAAI,QAAQ,aAAa,QAAS,OAAM,GAAG,MAAM,gBAAgB,GAAK;AACtE,UAAM,oBAAoB,QAAQ;AAAA,EACpC,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,yBAAyB;AAChC,SAAO,GAAG,gBAAgB,CAAC;AAC7B;AAEA,eAAsB,wBAA2B,KAAmC;AAClF,QAAM,aAAa,gBAAgB;AACnC,QAAM,GAAG,MAAM,KAAK,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5D,MAAI;AACJ,QAAM,UAAU,MAAM,SAAS,KAAK,YAAY;AAAA,IAC9C,IAAI;AAAA,IACJ,cAAc,uBAAuB;AAAA,IACrC,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,EAAE,SAAS,KAAK,QAAQ,KAAK,YAAY,IAAI,YAAY,IAAI;AAAA,IACtE,eAAe,CAAC,UAAU;AACxB,yBAAmB;AAAA,IACrB;AAAA,EACF,CAAC;AACD,MAAI;AACF,UAAM,qCAAqC;AAC3C,UAAM,SAAS,MAAM,IAAI;AACzB,QAAI,iBAAkB,OAAM;AAC5B,WAAO;AAAA,EACT,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAEA,eAAe,oBAAoB,UAAkB;AACnD,MAAI,QAAQ,aAAa,QAAS;AAClC,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,GAAG,KAAK,KAAK,QAAQ,QAAQ,GAAG,GAAG;AAClD,UAAM,OAAO,KAAK;AAAA,EACpB,UAAE;AACA,UAAM,QAAQ,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,EAC7C;AACF;AAEA,eAAe,qBACb,QACA,aACA,UACA,QACA;AACA,QAAM,4BAA4B;AAClC,UAAQ,eAAe;AACvB,MAAI,UAAU;AAEZ,QAAI,CAAE,MAAM,2BAA2B,QAAQ,EAAI,OAAM,qBAAqB;AAC9E,YAAQ,eAAe;AACvB,UAAM,GAAG,OAAO,QAAQ,WAAW;AAAA,EACrC,OAAO;AACL,UAAM,6BAA6B,QAAQ,aAAa,MAAM;AAAA,EAChE;AACF;AAEA,eAAe,6BAA6B,QAAgB,aAAqB,QAAsB;AACrG,MAAI,MAAM,WAAW,WAAW,GAAG;AACjC,UAAM,OAAO,OAAO,IAAI,MAAM,2BAA2B,WAAW,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAAA,EAC7F;AACA,UAAQ,eAAe;AACvB,QAAM,GAAG,OAAO,QAAQ,WAAW;AACrC;AAEA,eAAe,uCAAuC;AACpD,QAAM,aAAa,gBAAgB;AACnC,MAAI,MAAM,WAAW,UAAU,EAAG;AAClC,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,GAAG,QAAQ,KAAK,QAAQ,UAAU,CAAC;AAAA,EACnD,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU;AACxD,UAAM;AAAA,EACR;AACA,QAAM,SAAS,IAAI,KAAK,SAAS,UAAU,CAAC;AAC5C,MACE,MAAM;AAAA,IACJ,CAAC,SACC,KAAK,WAAW,MAAM,MAAM,KAAK,SAAS,0BAA0B,KAAK,KAAK,SAAS,oBAAoB;AAAA,EAC/G,GACA;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAe,WAAW,UAAkB;AAC1C,MAAI;AACF,UAAM,GAAG,MAAM,QAAQ;AACvB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,UAAM;AAAA,EACR;AACF;AAEA,SAAS,4BAA4B,YAAoB,QAAgB;AACvE,MAAI,CAAC,uBAAuB,IAAI,UAAU,EAAG,wBAAuB,IAAI,YAAY,MAAM;AAC5F;;;ACprBA,OAAOA,WAAU;AAwBV,IAAM,oBAAoC;AAE1C,SAAS,kBAAkB,OAAgC;AAChE,MAAI,UAAU,qBAAqB,UAAU,uBAAuB,UAAU,eAAe;AAC3F,WAAO;AAAA,EACT;AACA,QAAM,IAAI;AAAA,IACR;AAAA,EACF;AACF;AAEO,SAAS,yBAAyB,OAAkD;AACzF,MAAI,MAAM,YAAY,KAAK,MAAM,YAAY,KAAK,MAAM,YAAY,GAAG;AACrE,UAAM,IAAI;AAAA,MACR,oFAAoFC,MAAK,SAAS,gBAAgB,CAAC,CAAC;AAAA,IACtH;AAAA,EACF;AACA;AAAA,IACE;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,EACF;AACA,oBAAkB,MAAM,QAAQ;AAChC,MAAI,MAAM,mBAAmB,UAAa,OAAO,MAAM,mBAAmB,WAAW;AACnF,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AACA,MAAI,MAAM,eAAe,UAAa,OAAO,MAAM,eAAe,WAAW;AAC3E,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,MAAI,MAAM,UAAU,UAAa,OAAO,MAAM,UAAU,WAAW;AACjE,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,QAAM,qBAAqB;AAAA,IACzB,MAAM;AAAA,IACN;AAAA,IACA;AAAA,EACF;AACA,QAAM,aAAa,sBAAsB,MAAM,YAAY,cAAc,YAAY;AACrF,aAAW,QAAQ,OAAO,KAAK,kBAAkB,GAAG;AAClD;AAAA,MACE;AAAA,MACA,iBAAiB,oBAAoB,MAAM,oBAAoB;AAAA,IACjE;AAAA,EACF;AACA,aAAW,QAAQ,OAAO,KAAK,UAAU,GAAG;AAC1C;AAAA,MACE;AAAA,MACA,iBAAiB,YAAY,MAAM,YAAY;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,OAAO,KAAK,UAAU;AACpC,QAAM,kBAAkB,2BAA2B,MAAM,iBAAiB,iBAAiB;AAC3F,MAAI,MAAM,WAAW,GAAG;AACtB,QAAI,oBAAoB,QAAW;AACjC,YAAM,IAAI,MAAM,yEAAyE;AAAA,IAC3F;AAAA,EACF,WAAW,CAAC,mBAAmB,CAAC,OAAO,OAAO,YAAY,eAAe,GAAG;AAC1E,UAAM,IAAI,MAAM,+FAA+F;AAAA,EACjH;AACA,aAAW,SAAS,OAAO,OAAO,UAAU,GAAG;AAC7C,UAAM,SAAU,MAA4B;AAC5C,QAAI,OAAO,gBAAgB,UAAa,MAAM,YAAY,KAAK,MAAM,YAAY;AAC/E,YAAM,IAAI,MAAM,8FAA8F;AAAA,EAClH;AACA,aAAW,SAAS,OAAO,OAAO,UAAU,GAAG;AAC7C,UAAM,SAAU,MAA4B;AAC5C,SAAK,OAAO,gBAAgB,OAAO,gBAAgB,MAAM,YAAY;AACnE,YAAM,IAAI,MAAM,4DAA4D;AAAA,EAChF;AACA,iCAA+B,YAAY,kBAAkB;AAC7D,SAAO;AACT;AAEA,SAAS,0BAA0B,MAAc,OAAgC;AAC/E;AAAA,IACE;AAAA,IACA,CAAC,QAAQ,eAAe,mBAAmB,gBAAgB,YAAY,UAAU;AAAA,IACjF,4BAAuB,IAAI;AAAA,EAC7B;AACA,QAAM,OAAO,eAAe,MAAM,MAAM,4BAAuB,IAAI,aAAQ;AAC3E,MAAI,SAAS,QAAQ,SAAS,SAAS,SAAS,UAAU;AACxD,UAAM,IAAI,MAAM,sDAAiD,IAAI,8BAAyB;AAAA,EAChG;AACA,QAAM,QAAQ,CAAC,YAAY,UAAU,UAAU,OAAO,aAAa;AACnE,QAAM,UACJ,SAAS,OACL,oBAAI,IAAI,CAAC,YAAY,UAAU,aAAa,CAAC,IAC7C,SAAS,QACP,oBAAI,IAAI,CAAC,QAAQ,CAAC,IAClB,oBAAI,IAAI,CAAC,OAAO,aAAa,CAAC;AACtC,MAAI,MAAM,KAAK,CAAC,UAAU,OAAO,OAAO,OAAO,KAAK,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG;AAC7E,UAAM,IAAI;AAAA,MACR,6BAA6B,KAAK,YAAY,CAAC,6BAAwB,IAAI;AAAA,IAC7E;AAAA,EACF;AACA,MAAI,SAAS,OAAO;AAClB,QAAI,CAAC,mBAAmB,eAAe,MAAM,QAAQ,wBAAmB,IAAI,QAAG,CAAC,GAAG;AACjF,YAAM,IAAI,MAAM,kDAA6C,IAAI,qBAAgB;AAAA,IACnF;AACA;AAAA,EACF;AACA,QAAM,cAAc,cAAc,MAAM,aAAa,4CAAuC,IAAI,QAAG;AACnG,MAAI,SAAS,UAAU;AACrB,uBAAmB,eAAe,MAAM,KAAK,wBAAmB,IAAI,QAAG,CAAC;AACxE,UAAM,WAAW,eAAe,YAAY,UAAU,6BAAwB,IAAI,QAAG;AACrF,UAAM,WAAW,eAAe,YAAY,UAAU,6BAAwB,IAAI,QAAG;AACrF,QAAI,CAAC,eAAe,mBAAmB,cAAc,EAAE,KAAK,CAAC,UAAU,OAAO,OAAO,aAAa,KAAK,CAAC,GAAG;AACzG,YAAM,IAAI,MAAM,0DAAqD,IAAI,oBAAe;AAAA,IAC1F;AACA,8BAA0B,UAAU,QAAQ;AAC5C;AAAA,EACF;AACA,sBAAoB,eAAe,MAAM,UAAU,yBAAoB,IAAI,QAAG,CAAC;AAC/E,iBAAe,MAAM,QAAQ,uBAAkB,IAAI,QAAG;AACtD,iBAAe,YAAY,aAAa,8BAAyB,IAAI,QAAG;AACxE,iBAAe,YAAY,iBAAiB,kCAA6B,IAAI,QAAG;AAChF,iBAAe,YAAY,cAAc,8BAAyB,IAAI,QAAG;AACzE,MAAI,CAAC,YAAY,UAAU,EAAE,KAAK,CAAC,UAAU,OAAO,OAAO,aAAa,KAAK,CAAC,GAAG;AAC/E,UAAM,IAAI,MAAM,sDAAiD,IAAI,oBAAe;AAAA,EACtF;AACF;AAEA,SAAS,kBAAkB,MAAc,OAAgC,aAAsC;AAC7G;AAAA,IACE;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,oBAAe,IAAI;AAAA,EACrB;AACA,QAAM,UAAU,cAAc,MAAM,SAAS,gCAA2B,IAAI,QAAG;AAC/E,QAAM,OAAO,cAAc,MAAM,MAAM,oCAA+B,IAAI,QAAG;AAC7E,qBAAmB,SAAS,CAAC,WAAW,UAAU,aAAa,WAAW,GAAG,gCAA2B,IAAI,QAAG;AAC/G;AAAA,IACE;AAAA,IACA,CAAC,YAAY,aAAa,gBAAgB,YAAY;AAAA,IACtD,oCAA+B,IAAI;AAAA,EACrC;AACA,QAAM,iBAAiB;AAAA,IACrB,QAAQ;AAAA,IACR,qDAAgD,IAAI;AAAA,EACtD;AACA,qBAAmB,gBAAgB,8BAA8B;AACjE,QAAM,aAAa,UAAmC,aAAa,cAAc;AACjF,MAAI,CAAC,YAAY;AACf,UAAM,IAAI;AAAA,MACR,8CAAyC,IAAI,sDAA4C,cAAc;AAAA,IACzG;AAAA,EACF;AACA,QAAM,OAAO,WAAW;AACxB,uBAAqB,eAAe,QAAQ,MAAM,qCAAgC,IAAI,QAAG,CAAC;AAC1F,MAAI,SAAS,MAAM;AACjB,sBAAkB,eAAe,QAAQ,QAAQ,kCAA6B,IAAI,QAAG,CAAC;AACtF,QAAI,OAAO,OAAO,SAAS,QAAQ,EAAG,iBAAgB,MAAM,IAAI;AAAA,EAClE,WAAW,SAAS,OAAO;AACzB,uBAAmB,eAAe,QAAQ,QAAQ,mCAA8B,IAAI,QAAG,CAAC;AACxF,QAAI,OAAO,OAAO,SAAS,QAAQ,EAAG,iBAAgB,OAAO,IAAI;AAAA,EACnE,WAAW,SAAS,UAAU;AAC5B,QAAI,OAAO,OAAO,SAAS,QAAQ,KAAK,OAAO,OAAO,SAAS,QAAQ,GAAG;AACxE,sBAAgB,UAAU,IAAI;AAAA,IAChC;AAAA,EACF;AACA,MAAI,CAAC,OAAO,OAAO,MAAM,SAAS,GAAG;AACnC,UAAM,IAAI,MAAM,8CAAyC,IAAI,iCAA4B;AAAA,EAC3F;AACA,QAAM,UAAU,qBAAqB,KAAK,OAAO;AACjD,QAAM,cAAc,qBAAqB,KAAK,WAAW;AACzD,MAAI,YAAY,SAAS,KAAK,CAAC,QAAQ,SAAS,eAAe;AAC7D,UAAM,IAAI,MAAM,8DAA8D;AAChF,aAAW,OAAO,CAAC,gBAAgB,eAAe,aAAa,YAAY;AACzE,QAAI,KAAK,GAAG,MAAM,UAAa,OAAO,KAAK,GAAG,MAAM,UAAW,OAAM,IAAI,MAAM,GAAG,GAAG,mBAAmB;AAC1G,MAAI,KAAK,kBAAkB,UAAa,OAAO,KAAK,kBAAkB;AACpE,UAAM,IAAI,MAAM,gCAAgC;AAClD,MAAI,KAAK,sBAAsB,UAAa,OAAO,KAAK,sBAAsB,WAAW;AACvF,UAAM,IAAI,MAAM,8CAAyC,IAAI,gDAA2C;AAAA,EAC1G;AACA,MAAI,OAAO,KAAK,cAAc,WAAW;AACvC,UAAM,IAAI,MAAM,8CAAyC,IAAI,wCAAmC;AAAA,EAClG;AACF;AAEA,SAAS,gBAAgB,MAAc,MAAqB;AAC1D,QAAM,IAAI,MAAM,6BAA6B,IAAI,qBAAgB,IAAI,8BAAyB;AAChG;AAEO,SAAS,+BAA+B,QAAiC,aAAsC;AACpH,QAAM,aAAa,oBAAI,IAAoB;AAC3C,aAAW,QAAQ,OAAO,KAAK,MAAM,GAAG;AACtC,UAAM,QAAQ,iBAAiB,QAAQ,MAAM,YAAY;AACzD,UAAM,aAAa;AAAA,MACjB;AAAA,MACA,MAAM,QAAQ;AAAA,MACd;AAAA,IACF;AACA,UAAM,WAAW,iCAAiC,OAAO,UAAU;AACnE,UAAM,WAAW,WAAW,IAAI,QAAQ;AACxC,QAAI,UAAU;AACZ,YAAM,IAAI;AAAA,QACR,+CAA0C,QAAQ,oBAAU,IAAI;AAAA,MAClE;AAAA,IACF;AACA,eAAW,IAAI,UAAU,IAAI;AAAA,EAC/B;AACF;AAEO,SAAS,iCAAiC,OAA0B,YAAuC;AAChH,QAAM,cAAc,qBAAqB,MAAM,QAAQ,IAAI;AAC3D,MAAI,WAAW,SAAS,OAAO;AAC7B,WAAO,KAAK,UAAU;AAAA,MACpB;AAAA,MACA,2BAA2B,WAAW,MAAM;AAAA,MAC5C,mBAAmB,MAAM,QAAQ,MAAM;AAAA,MACvC,sBAAsB,WAAW;AAAA,IACnC,CAAC;AAAA,EACH;AACA,MAAI,WAAW,SAAS,UAAU;AAChC,WAAO,KAAK,UAAU;AAAA,MACpB;AAAA,MACA,2BAA2B,WAAW,GAAG;AAAA,MACzC,WAAW,YAAY,SAAS,KAAK;AAAA,MACrC,oBAAoB,WAAW;AAAA,IACjC,CAAC;AAAA,EACH;AACA,SAAO,KAAK,UAAU;AAAA,IACpB;AAAA,IACA,0BAA0B,WAAW,QAAQ;AAAA,IAC7C,kBAAkB,MAAM,QAAQ,MAAM;AAAA,IACtC;AAAA,EACF,CAAC;AACH;AAEA,SAAS,mBAAmB,OAAgC,QAA2B,SAAiB;AACtG,QAAM,QAAQ,OAAO,KAAK,CAAC,cAAc,OAAO,OAAO,OAAO,SAAS,CAAC;AACxE,MAAI,OAAO;AACT,UAAM,IAAI,MAAM,6BAA6B,OAAO,iDAA4C,KAAK,SAAI;AAAA,EAC3G;AACF;AAEA,SAAS,sBAAsB,OAAgB,OAAe,WAAmB;AAC/E,QAAM,SAAS,cAAc,OAAO,KAAK;AACzC,aAAW,QAAQ,OAAO,KAAK,MAAM,EAAG,oBAAmB,MAAM,SAAS;AAC1E,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAgC,KAAa,OAAe;AACpF,QAAM,OAAO,UAAU,OAAO,GAAG;AACjC,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,6BAA6B,KAAK,UAAK,GAAG,2BAAsB;AAC3F,SAAO;AACT;AAEO,SAAS,UAA4B,OAAgC,KAA4B;AACtG,MAAI,CAAC,OAAO,OAAO,OAAO,GAAG,EAAG,QAAO;AACvC,QAAM,OAAO,MAAM,GAAG;AACtB,SAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,IAAK,OAAa;AAClF;AAEA,SAAS,cAAc,OAAgB,OAAwC;AAC7E,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC/D,UAAM,IAAI,MAAM,6BAA6B,KAAK,qBAAqB;AAAA,EACzE;AACA,SAAO;AACT;AAEO,SAAS,mBAAmB,OAAe,OAAe;AAC/D,MACE,CAAC,MAAM,KAAK,KACZ,UAAU,MAAM,KAAK,KACrB,MAAM,SAAS,OACf,UAAU,eACV,UAAU,eACV,UAAU,iBACV,oBAAoB,KAAK,GACzB;AACA,UAAM,IAAI,MAAM,qCAAqC,KAAK,QAAQ;AAAA,EACpE;AACF;AAEO,SAAS,eAAe,OAAgB,OAAe;AAC5D,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,KAAK,oBAAoB,KAAK,GAAG;AAC5E,UAAM,IAAI,MAAM,6BAA6B,KAAK,8BAA8B;AAAA,EAClF;AACA,SAAO,MAAM,KAAK;AACpB;AAEA,SAAS,2BAA2B,OAAgB,OAAe;AACjE,QAAM,aAAa,eAAe,OAAO,KAAK;AAC9C,MAAI,UAAU,YAAY;AACxB,UAAM,IAAI,MAAM,6BAA6B,KAAK,wCAAwC;AAAA,EAC5F;AACA,SAAO;AACT;AAEA,SAAS,2BAA2B,OAAgB,OAAe;AACjE,QAAM,aAAa,eAAe,OAAO,KAAK;AAC9C,MAAI,eAAe,UAAa,UAAU,YAAY;AACpD,UAAM,IAAI,MAAM,6BAA6B,KAAK,wCAAwC;AAAA,EAC5F;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAAgB,OAAe;AACrD,MAAI,OAAO,UAAU,YAAY,CAAC,SAAS,oBAAoB,KAAK,GAAG;AACrE,UAAM,IAAI,MAAM,6BAA6B,KAAK,sBAAsB;AAAA,EAC1E;AACA,SAAO;AACT;AAEO,SAAS,eAAe,OAAgB,OAAe;AAC5D,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,OAAO,UAAU,YAAY,oBAAoB,KAAK,GAAG;AAC3D,UAAM,IAAI,MAAM,6BAA6B,KAAK,oBAAoB;AAAA,EACxE;AACA,SAAO,MAAM,KAAK,KAAK;AACzB;AAEO,SAAS,qBAAqB,OAAe;AAClD,MAAI,MAAM,KAAK,MAAM,OAAO,MAAM,KAAK,MAAM,KAAM,QAAO;AAC1D,QAAM,aAAa,MAAM,KAAK,EAAE,QAAQ,eAAe,EAAE;AACzD,MACE,CAAC,cACD,WAAW,SAAS,QACpB,WAAW,WAAW,GAAG,KACzB,WAAW,SAAS,IAAI,KACxB,oBAAoB,UAAU,KAC9B,WAAW,MAAM,GAAG,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW,YAAY,OAAO,YAAY,IAAI,GACvF;AACA,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,SAAO;AACT;AAEO,SAAS,oBAAoB,OAAe;AACjD,MAAI;AACJ,MAAI;AACF,UAAM,IAAI,IAAI,MAAM,KAAK,CAAC;AAAA,EAC5B,QAAQ;AACN,UAAM,IAAI,MAAM,8BAA8B;AAAA,EAChD;AACA,QAAM,WAAW,IAAI,aAAa,eAAe,IAAI,aAAa,eAAe,IAAI,aAAa;AAClG,MACG,IAAI,aAAa,YAAY,EAAE,IAAI,aAAa,WAAW,aAC5D,IAAI,YACJ,IAAI,YACJ,IAAI,UACJ,IAAI,MACJ;AACA,UAAM,IAAI,MAAM,qEAAqE;AAAA,EACvF;AACA,MAAI,WAAW,IAAI,SAAS,QAAQ,UAAU,EAAE;AAChD,SAAO,IAAI,SAAS,EAAE,QAAQ,QAAQ,EAAE;AAC1C;AAEO,SAAS,kBAAkB,OAA2B;AAC3D,QAAM,SAAS,eAAe,OAAO,WAAW;AAChD,MAAI,OAAO,SAAS,GAAG,KAAK,OAAO,SAAS,IAAI,KAAK,OAAO,WAAW,GAAG,GAAG;AAC3E,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAe;AAE1C,SAAO,gCAAgC,KAAK,KAAK;AACnD;AAEO,SAAS,uBAAuB,UAA8B;AACnE,QAAM,QAAQ,UAAU,KAAK;AAC7B,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,UAAM,WAAW,IAAI,IAAI,KAAK,EAAE,SAAS,YAAY;AACrD,WAAO,aAAa,8BAA8B,SAAS,SAAS,2BAA2B;AAAA,EACjG,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,UAAU,OAAqD;AAC7E,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAK,QAAoC;AAC5G;;;AC1aA,eAAsB,kBAAkB;AACtC,QAAM,WAAW,MAAM,sBAAsB;AAC7C,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,0EAA0E,gBAAgB,CAAC,GAAG;AAAA,EAChH;AACA,SAAO;AACT;AAEA,eAAsB,2BAA2B;AAC/C,QAAM,WAAW,MAAM,sBAAsB;AAC7C,SAAO,WAAW,OAAO,KAAK,SAAS,UAAU,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC,IAAI,CAAC;AACzG;AAEA,eAAsB,eAAwC;AAC5D,UAAQ,MAAM,gBAAgB,GAAG;AACnC;AAEO,SAAS,sBAAwC;AACtD,SAAO;AAAA,IACL,SAAS;AAAA,IACT,UAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,oBAAoB,CAAC;AAAA,IACrB,YAAY,CAAC;AAAA,EACf;AACF;AAEA,eAAsB,0BAA0B;AAC9C,QAAM,WAAW,MAAM,iCAAiC,CAAC,aAAa;AACpE,6BAAyB,QAAQ;AAAA,EACnC,CAAC;AACD,MAAI,SAAU,0BAAyB,SAAS,MAAM;AACtD,SAAO;AACT;AAEA,eAAsB,wBAA+D;AACnF,UAAQ,MAAM,wBAAwB,IAAI;AAC5C;AAEO,SAAS,kBAAkB,QAAyD,QAAsB;AAC/G,SAAO,0BAA0B,oBAAoB,GAAG,QAAQ,0BAA0B,MAAM;AAClG;;;AHlBA,eAAsB,WAAW,WAA4C;AAC3E,SAAO,mBAAmB,MAAM,gBAAgB,GAAG,SAAS;AAC9D;AAGA,eAAsB,qBAA6C;AACjE,QAAM,WAAW,MAAM,uCAAuC;AAC9D,MAAI,CAAC,SAAU,OAAM,IAAI,MAAM,6BAA6B,gBAAgB,CAAC,EAAE;AAC/E,2BAAyB,SAAS,MAAM;AACxC,SAAO,mBAAmB,SAAS,MAA0B;AAC/D;AAEO,SAAS,mBAAmB,UAA4B,WAAmC;AAChG,QAAM,eAAe,aAAa,SAAS;AAC3C,MAAI,CAAC,aAAc,OAAM,IAAI,MAAM,gCAAgC;AACnE,qBAAmB,cAAc,YAAY;AAC7C,QAAM,QAAQ,UAA6B,SAAS,YAAY,YAAY;AAC5E,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,8CAAyC,YAAY,uBAAkB;AACnG,QAAM,iBAAiB,MAAM,QAAQ;AACrC,QAAM,aAAa,UAAqC,SAAS,oBAAoB,cAAc;AACnG,MAAI,CAAC,YAAY;AACf,UAAM,IAAI;AAAA,MACR,8CAAyC,YAAY,sDAA4C,cAAc;AAAA,IACjH;AAAA,EACF;AACA,SAAO;AAAA,IACL,GAAG;AAAA,MACD;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,SAAS,kBAAkB;AAAA,MAC3B,SAAS,cAAc;AAAA,IACzB;AAAA,IACA,OAAO,SAAS,SAAS;AAAA,EAC3B;AACF;AAQA,eAAsB,kBAAkB,WAA4C;AAClF,QAAM,SAAS,MAAM,WAAW,SAAS;AACzC,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,GAAG,wBAAwB,MAAM;AAAA,IACjC,SAAS,CAAC,GAAG,OAAO,OAAO;AAAA,IAC3B,WAAW,OAAO;AAAA,IAClB,mBAAmB,OAAO,qBAAqB;AAAA,IAC/C,WAAW,OAAO,aAAa;AAAA,IAC/B,YAAY,OAAO,cAAc;AAAA,IACjC,UAAU,OAAO;AAAA,IACjB,YAAY,OAAO;AAAA,EACrB;AACF;AAEO,SAAS,uBACd,WACA,OACA,gBACA,YACwB;AACxB,SAAO;AAAA,IACL,kBAAkB,WAAW,OAAO,gBAAgB,YAAY,mBAAmB,OAAO,IAAI;AAAA,EAChG;AACF;AAEO,SAAS,wBACd,WACA,OACA,gBACA,YACA;AACA,SAAO;AAAA,IACL,kBAAkB,WAAW,OAAO,gBAAgB,YAAY,mBAAmB,OAAO,IAAI;AAAA,EAChG;AACF;AAEO,SAAS,yBAAyB,QAAuB;AAC9D,SAAO,KAAK,UAAU;AAAA,IACpB,OAAO;AAAA,IACP,OAAO;AAAA,IACP,2BAA2B,MAAM;AAAA,IACjC,OAAO;AAAA,IACP,OAAO;AAAA,IACP,OAAO,qBAAqB;AAAA,IAC5B,OAAO,aAAa;AAAA,IACpB,OAAO;AAAA,IACP,OAAO,iBAAiB;AAAA,IACxB,OAAO,gBAAgB;AAAA,IACvB,OAAO,eAAe;AAAA;AAAA,IAEtB,GAAI,OAAO,aAAa,CAAC,YAAY,IAAI,CAAC;AAAA,EAC5C,CAAC;AACH;AAEO,SAAS,4BAA4B,QAAuB;AACjE,SAAO,WAAW,QAAQ,EAAE,OAAO,yBAAyB,MAAM,CAAC,EAAE,OAAO,KAAK;AACnF;AAGO,SAAS,2BAA2B,QAAuB;AAChE,SAAO,WAAW,QAAQ,EACvB,OAAO,KAAK,UAAU,EAAE,GAAG,QAAQ,YAAY,QAAW,OAAO,OAAU,CAAC,CAAC,EAC7E,OAAO,KAAK;AACjB;AAEA,SAAS,wBAAwB,QAA+C;AAC9E,SAAO;AAAA,IACL,gBAAgB,OAAO;AAAA,IACvB,aAAa,OAAO,QAAQ;AAAA,IAC5B,aAAa,OAAO;AAAA,IACpB,GAAI,OAAO,QAAQ,SAAS,OACxB,EAAE,QAAQ,OAAO,QAAQ,YAAY,OAAO,IAC5C,OAAO,QAAQ,SAAS,QACtB,EAAE,QAAQ,OAAO,QAAQ,YAAY,OAAO,IAC5C,CAAC;AAAA,EACT;AACF;AAEA,SAAS,kBACP,WACA,OACA,gBACA,YACA,UACA,gBACA,YACe;AACf,QAAM,cAAc,qBAAqB,MAAM,QAAQ,IAAI;AAC3D,QAAM,YAAY,gBAAgB,OAAO,SAAS,YAAY,MAAM,YAAY,YAAY,GAAG,IAAI,CAAC;AACpG,QAAM,UAAU,qBAAqB,MAAM,KAAK,OAAO;AACvD,QAAM,SAAS;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA,kBAAkB;AAAA,IAClB;AAAA,IACA,WAAW,MAAM,KAAK;AAAA,IACtB,mBAAmB,MAAM,KAAK,qBAAqB;AAAA,IACnD,WAAW,MAAM,KAAK,aAAa;AAAA,IACnC,YAAY,MAAM,KAAK,cAAc;AAAA,IACrC,aAAa,MAAM,KAAK,gBAAgB,SAAY,SAAY,qBAAqB,MAAM,KAAK,WAAW;AAAA,IAC3G,eAAe,MAAM,KAAK,iBAAiB;AAAA,IAC3C,cAAc,MAAM,KAAK,gBAAgB;AAAA,IACzC,aAAa,MAAM,KAAK,eAAe;AAAA,IACvC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,WAAW,SAAS,OAAO;AAC7B,WAAO;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACP,MAAM;AAAA,QACN,SAAS,EAAE,MAAM,OAAO,QAAQ,mBAAmB,WAAW,MAAM,EAAY;AAAA,QAChF,aAAa;AAAA,UACX,QAAQ,mBAAmB,MAAM,QAAQ,MAAM;AAAA,UAC/C,WAAW,sBAAsB,WAAW;AAAA,UAC5C;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,MAAI,WAAW,SAAS,UAAU;AAChC,WAAO;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACP,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,UACN,KAAK,mBAAmB,WAAW,GAAG;AAAA,UACtC,UAAU,WAAW,YAAY;AAAA,UACjC,UAAU,WAAW,YAAY;AAAA,QACnC;AAAA,QACA,aAAa,EAAE,MAAM,oBAAoB,WAAW,GAAG,UAAU;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,QACP,MAAM,uBAAuB,WAAW,QAAQ,IAAI,OAAO;AAAA,QAC3D,UAAU,oBAAoB,WAAW,QAAQ;AAAA,QACjD,QAAQ,eAAe,WAAW,QAAQ,WAAW;AAAA,QACrD,aAAa,WAAW,YAAY;AAAA,QACpC,iBAAiB,WAAW,YAAY;AAAA,QACxC,cAAc,eAAe,WAAW,YAAY,cAAc,kBAAkB;AAAA,MACtF;AAAA,MACA,aAAa;AAAA,QACX,QAAQ,kBAAkB,MAAM,QAAQ,MAAM;AAAA,QAC9C,QAAQ;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,qBAAqB,QAAsD;AACzF,MAAI,CAAC,uBAAuB,OAAO,QAAQ,KAAK,CAAC,OAAO,aAAc,QAAO,CAAC;AAC9E,SAAO;AAAA,IACL;AAAA,EACF;AACF;AAEO,SAAS,qBAAqB,QAAwC;AAC3E,MAAI,CAAC,OAAO,QAAQ,SAAS,UAAU,EAAG,QAAO,CAAC;AAClD,SAAO;AAAA,IACL;AAAA,EACF;AACF;AAEO,SAAS,UAAU,OAAqC,cAAuB;AACpF,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,OAAO,UAAU,UAAW,QAAO;AACvC,SAAO,CAAC,CAAC,KAAK,SAAS,MAAM,KAAK,EAAE,SAAS,MAAM,KAAK,EAAE,YAAY,CAAC;AACzE;AAEO,SAAS,oBAAoB,OAAqC;AACvE,MAAI,OAAO,UAAU,UAAW,QAAO;AACvC,SAAO,CAAC,KAAK,QAAQ,OAAO,IAAI,EAAE,SAAS,OAAO,KAAK,EAAE,YAAY,KAAK,EAAE;AAC9E;",
+  "names": ["path", "path"]
+}