@opensip-cli/core 0.1.0

package/dist/plugins/marker-discovery.js

@@ -0,0 +1,172 @@
+/**
+ * @fileoverview Generic marker-based plugin discovery.
+ *
+ * Walks ancestor `node_modules/` directories from a project root, looking
+ * for packages whose `package.json` declares an `opensipTools.kind` value
+ * matching the requested kind. Returns the deduplicated list (first
+ * occurrence walking outward wins, matching Node's nearest-ancestor
+ * module resolution).
+ *
+ * `MarkerKind` is the closed union of HOST marker kinds — just `'tool'` now
+ * (whole-subcommand Tool plugins, a host concern). The former DOMAIN markers
+ * (`'fit-pack'`, `'sim-pack'`, `'graph-adapter'`) were RETIRED from this union
+ * once discovery became descriptor-driven (§5.3): a tool's manifest declares its
+ * own marker kind, the generic substrate discovers it via the string-typed
+ * {@link discoverPackagesByDeclaredKind}, and nothing in the host compiles in the
+ * domain vocabulary. Use {@link readDeclaredKind} for any kind that is not the
+ * host `'tool'` marker.
+ *
+ * Why a marker rather than a name pattern (for `'tool'`): a name-prefix rule
+ * breaks down once organisations publish their own scoped tool packages. The
+ * marker decouples publication scope from plugin shape.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { logger } from '../lib/logger.js';
+import { safeReaddir } from './node-modules-walk.js';
+/**
+ * The closed vocabulary of HOST `opensipTools.kind` markers — `'tool'` only.
+ * Domain markers (fit-pack/sim-pack/graph-adapter) are NOT here anymore: they are
+ * declared per-tool in manifests and discovered via {@link discoverPackagesByDeclaredKind}
+ * (§5.3). The workspace-invariant test validates a package.json marker against
+ * `'tool'` PLUS the marker kinds the bundled manifests declare — descriptor-driven,
+ * not a compiled-in domain list.
+ */
+export const MARKER_KINDS = ['tool'];
+/**
+ * Narrow an unknown string to MarkerKind. Used by readMarkerKind below
+ * and re-exported for callers that need to validate dynamic input.
+ */
+export function isMarkerKind(value) {
+    return typeof value === 'string' && MARKER_KINDS.includes(value);
+}
+/**
+ * Walk up from `projectDir` looking for `node_modules/` directories.
+ * For each one, scan top-level entries (and one level into scoped
+ * directories like `@opensip-cli/`) for packages declaring
+ * `opensipTools.kind === options.kind`. Return the deduplicated list.
+ *
+ * Same-named packages are returned once — the first occurrence walking
+ * from `projectDir` outward wins, matching Node's nearest-ancestor
+ * resolution behavior.
+ */
+export function discoverPackagesByMarker(options) {
+    // Typed narrowing wrapper over the raw-string walker: the kind passed in is a
+    // MarkerKind, so every result's echoed kind is that same MarkerKind.
+    return discoverPackagesByDeclaredKind(options.projectDir, options.kind).map((p) => ({
+        name: p.name,
+        packageDir: p.packageDir,
+        kind: p.kind,
+    }));
+}
+/**
+ * Scan EXACTLY ONE `node_modules` directory for packages declaring
+ * `opensipTools.kind === kind` — no ancestor walk. Used for fixed plugin
+ * host dirs (`~/.opensip-cli/plugins/tool/node_modules`,
+ * `<project>/.runtime/plugins/tool/node_modules`) where walking up would
+ * wrongly pull in `$HOME/node_modules` or unrelated ancestor trees.
+ */
+export function discoverPackagesInNodeModules(nodeModulesDir, kind) {
+    const out = [];
+    if (existsSync(nodeModulesDir)) {
+        collectByDeclaredKind(nodeModulesDir, kind, new Set(), out);
+    }
+    return out.map((p) => ({ name: p.name, packageDir: p.packageDir, kind: p.kind }));
+}
+/**
+ * Walk ancestor `node_modules/` directories from `projectDir`, returning every
+ * package whose `package.json` declares `opensipTools.kind === kind` for the
+ * given raw-string kind. The string-typed generalization of
+ * {@link discoverPackagesByMarker}: the closed-union version is a thin wrapper
+ * over this. Deduplicated; first occurrence walking outward wins.
+ */
+export function discoverPackagesByDeclaredKind(projectDir, kind) {
+    const seen = new Set();
+    const out = [];
+    let dir = projectDir;
+    let prev = '';
+    while (dir !== prev) {
+        const nodeModules = join(dir, 'node_modules');
+        if (existsSync(nodeModules)) {
+            collectByDeclaredKind(nodeModules, kind, seen, out);
+        }
+        prev = dir;
+        dir = dirname(dir);
+    }
+    return out;
+}
+// eslint-disable-next-line sonarjs/cognitive-complexity -- node_modules walker: handles both flat and @scope/* layouts and skips invalid entries inline
+function collectByDeclaredKind(nodeModulesDir, kind, seen, out) {
+    for (const entry of safeReaddir(nodeModulesDir)) {
+        if (entry.startsWith('.'))
+            continue;
+        const entryPath = join(nodeModulesDir, entry);
+        if (entry.startsWith('@')) {
+            // Scoped — descend one level
+            for (const scopedEntry of safeReaddir(entryPath)) {
+                if (scopedEntry.startsWith('.'))
+                    continue;
+                const name = `${entry}/${scopedEntry}`;
+                if (seen.has(name))
+                    continue;
+                const pkgDir = join(entryPath, scopedEntry);
+                if (readDeclaredKind(pkgDir) === kind) {
+                    seen.add(name);
+                    out.push({ name, packageDir: pkgDir, kind });
+                }
+            }
+            continue;
+        }
+        if (seen.has(entry))
+            continue;
+        if (readDeclaredKind(entryPath) === kind) {
+            seen.add(entry);
+            out.push({ name: entry, packageDir: entryPath, kind });
+        }
+    }
+}
+/**
+ * Read the declared `opensipTools.kind` from a package's package.json.
+ * Returns the kind if it parses, is a string, and matches the closed
+ * MarkerKind union; otherwise undefined. Parse failures are logged at
+ * debug — a malformed package.json under node_modules is not a discovery
+ * concern, just an entry to skip.
+ *
+ * Exported as the canonical host-tool marker reader. Domain markers such as
+ * fit-pack and graph-adapter are descriptor-driven and use the string-typed
+ * `readDeclaredKind` / `discoverPackagesByDeclaredKind` path.
+ */
+export function readMarkerKind(packageDir) {
+    const kind = readDeclaredKind(packageDir);
+    return isMarkerKind(kind) ? kind : undefined;
+}
+/**
+ * Read the RAW `opensipTools.kind` string from a package's package.json — the
+ * string-typed sibling of {@link readMarkerKind}, with no closed-union narrowing.
+ * Returns the string if it parses and is a string; otherwise undefined. Parse
+ * failures are logged at debug (a malformed node_modules package.json is an
+ * entry to skip, not a discovery error). The generic discovery substrate reads
+ * declared kinds through this one function so there is no second implementation
+ * to drift.
+ */
+export function readDeclaredKind(packageDir) {
+    const pkgJsonPath = join(packageDir, 'package.json');
+    if (!existsSync(pkgJsonPath))
+        return undefined;
+    try {
+        const pkg = JSON.parse(readFileSync(pkgJsonPath, 'utf8'));
+        const kind = pkg.opensipTools?.kind;
+        return typeof kind === 'string' ? kind : undefined;
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        logger.debug({
+            evt: 'core.marker_discovery.read_failed',
+            module: 'core:plugins',
+            packageDir,
+            error: msg,
+        });
+        return undefined;
+    }
+}
+//# sourceMappingURL=marker-discovery.js.map

package/dist/plugins/marker-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"marker-discovery.js","sourceRoot":"","sources":["../../src/plugins/marker-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAM,CAAU,CAAC;AAuB9C;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,YAAkC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAA+B;IAE/B,8EAA8E;IAC9E,qEAAqE;IACrE,OAAO,8BAA8B,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClF,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,IAAI,EAAE,CAAC,CAAC,IAAkB;KAC3B,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,cAAsB,EACtB,IAAgB;IAEhB,MAAM,GAAG,GAAgC,EAAE,CAAC;IAC5C,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,qBAAqB,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,GAAG,EAAU,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAkB,EAAE,CAAC,CAAC,CAAC;AAClG,CAAC;AAcD;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAC5C,UAAkB,EAClB,IAAY;IAEZ,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAgC,EAAE,CAAC;IAC5C,IAAI,GAAG,GAAG,UAAU,CAAC;IACrB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC9C,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,qBAAqB,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,GAAG,GAAG,CAAC;QACX,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wJAAwJ;AACxJ,SAAS,qBAAqB,CAC5B,cAAsB,EACtB,IAAY,EACZ,IAAiB,EACjB,GAAgC;IAEhC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,6BAA6B;YAC7B,KAAK,MAAM,WAAW,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjD,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC1C,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,WAAW,EAAE,CAAC;gBACvC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC5C,IAAI,gBAAgB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;oBACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACf,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9B,IAAI,gBAAgB,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAEvD,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC;QACpC,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC;YACX,GAAG,EAAE,mCAAmC;YACxC,MAAM,EAAE,cAAc;YACtB,UAAU;YACV,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/plugins/node-modules-walk.d.ts

@@ -0,0 +1,61 @@
+/**
+ * @fileoverview Shared node_modules ancestor-walk primitives for plugin
+ * auto-discovery.
+ *
+ * Scoped package discovery (`scenarios-*`, future packs) walks up the
+ * directory tree from a project root, scanning
+ * `node_modules/<scope>/` directories — mirroring Node's nearest-ancestor
+ * module resolution, which handles pnpm hoisting and monorepo layouts
+ * where the scope may live in the workspace root.
+ *
+ * The leaf filesystem probes (`safeReaddir`, `hasPackageJson`) and the
+ * explicit-name resolver (`resolvePackageDir`) are shared by marker
+ * discovery, exact package resolution, and simulation's scoped scenario-pack
+ * discovery. They live here now — one home for the generic walk plumbing the
+ * kernel already owns.
+ *
+ * These are pure `node:fs` / `node:path` primitives — no fitness/sim
+ * vocabulary leaks down into the kernel. The per-tool policy (explicit
+ * list vs opt-out vs auto-discover, the domain-specific not-resolved
+ * warning events) stays in each engine's outer discovery function.
+ */
+/** A package discovered (or resolved) inside node_modules. */
+export interface DiscoveredScopedPackage {
+    /** npm package name, e.g. '@opensip-cli/checks-python'. */
+    readonly name: string;
+    /** Absolute path to the package's directory inside node_modules. */
+    readonly packageDir: string;
+}
+/** Inputs for {@link discoverScopedPackages}: the project root, the npm scopes to scan, and the package-name prefix to match. */
+export interface DiscoverScopedPackagesOptions {
+    /** Absolute path to the project root. */
+    readonly projectDir: string;
+    /** Effective npm scopes to scan (already validated/deduped). */
+    readonly scopes: readonly string[];
+    /** Package-name prefix to match within each scope, e.g. `checks-`. */
+    readonly prefix: string;
+}
+/**
+ * Walk up the directory tree from `projectDir` looking for
+ * `node_modules/<scope>/` directories under every configured scope, and
+ * return all packages whose name (the entry under the scope dir) starts
+ * with `prefix` and contains a `package.json`. Deduplicated by full
+ * package name; the first occurrence walking from `projectDir` outward
+ * wins, matching Node's nearest-ancestor resolution.
+ */
+export declare function discoverScopedPackages(options: DiscoverScopedPackagesOptions): DiscoveredScopedPackage[];
+/**
+ * Resolve an *explicit* package name to its on-disk directory by walking
+ * ancestor `node_modules` directories. Returns the first directory that
+ * contains a `package.json`, or undefined if the package is not installed.
+ */
+export declare function resolvePackageDir(projectDir: string, name: string): string | undefined;
+/** True when `packageDir` exists and contains a `package.json`. */
+export declare function hasPackageJson(packageDir: string): boolean;
+/**
+ * Read a directory's entries, returning `[]` on any failure. A filesystem
+ * probe: a missing directory or permission denial yields "no entries",
+ * indistinguishable from a genuinely empty directory.
+ */
+export declare function safeReaddir(dir: string): string[];
+//# sourceMappingURL=node-modules-walk.d.ts.map

package/dist/plugins/node-modules-walk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-modules-walk.d.ts","sourceRoot":"","sources":["../../src/plugins/node-modules-walk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,8DAA8D;AAC9D,MAAM,WAAW,uBAAuB;IACtC,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,iIAAiI;AACjI,MAAM,WAAW,6BAA6B;IAC5C,yCAAyC;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AAEH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,6BAA6B,GACrC,uBAAuB,EAAE,CAwB3B;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUtF;AAED,mEAAmE;AACnE,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAG1D;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAOjD"}

package/dist/plugins/node-modules-walk.js

@@ -0,0 +1,99 @@
+/**
+ * @fileoverview Shared node_modules ancestor-walk primitives for plugin
+ * auto-discovery.
+ *
+ * Scoped package discovery (`scenarios-*`, future packs) walks up the
+ * directory tree from a project root, scanning
+ * `node_modules/<scope>/` directories — mirroring Node's nearest-ancestor
+ * module resolution, which handles pnpm hoisting and monorepo layouts
+ * where the scope may live in the workspace root.
+ *
+ * The leaf filesystem probes (`safeReaddir`, `hasPackageJson`) and the
+ * explicit-name resolver (`resolvePackageDir`) are shared by marker
+ * discovery, exact package resolution, and simulation's scoped scenario-pack
+ * discovery. They live here now — one home for the generic walk plumbing the
+ * kernel already owns.
+ *
+ * These are pure `node:fs` / `node:path` primitives — no fitness/sim
+ * vocabulary leaks down into the kernel. The per-tool policy (explicit
+ * list vs opt-out vs auto-discover, the domain-specific not-resolved
+ * warning events) stays in each engine's outer discovery function.
+ */
+import { existsSync, readdirSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+/**
+ * Walk up the directory tree from `projectDir` looking for
+ * `node_modules/<scope>/` directories under every configured scope, and
+ * return all packages whose name (the entry under the scope dir) starts
+ * with `prefix` and contains a `package.json`. Deduplicated by full
+ * package name; the first occurrence walking from `projectDir` outward
+ * wins, matching Node's nearest-ancestor resolution.
+ */
+// eslint-disable-next-line sonarjs/cognitive-complexity -- ancestor-walk discovery: walks node_modules trees up the directory tree until the filesystem root
+export function discoverScopedPackages(options) {
+    const { projectDir, scopes, prefix } = options;
+    const seen = new Set();
+    const out = [];
+    let dir = projectDir;
+    let prev = '';
+    while (dir !== prev) {
+        for (const scope of scopes) {
+            const scopeDir = join(dir, 'node_modules', scope);
+            if (!existsSync(scopeDir))
+                continue;
+            for (const entry of safeReaddir(scopeDir)) {
+                if (!entry.startsWith(prefix))
+                    continue;
+                const name = `${scope}/${entry}`;
+                if (seen.has(name))
+                    continue;
+                const packageDir = join(scopeDir, entry);
+                if (!hasPackageJson(packageDir))
+                    continue;
+                seen.add(name);
+                out.push({ name, packageDir });
+            }
+        }
+        prev = dir;
+        dir = dirname(dir);
+    }
+    return out;
+}
+/**
+ * Resolve an *explicit* package name to its on-disk directory by walking
+ * ancestor `node_modules` directories. Returns the first directory that
+ * contains a `package.json`, or undefined if the package is not installed.
+ */
+export function resolvePackageDir(projectDir, name) {
+    let dir = projectDir;
+    let prev = '';
+    while (dir !== prev) {
+        const candidate = join(dir, 'node_modules', name);
+        if (hasPackageJson(candidate))
+            return candidate;
+        prev = dir;
+        dir = dirname(dir);
+    }
+    return undefined;
+}
+/** True when `packageDir` exists and contains a `package.json`. */
+export function hasPackageJson(packageDir) {
+    if (!existsSync(packageDir))
+        return false;
+    return existsSync(join(packageDir, 'package.json'));
+}
+/**
+ * Read a directory's entries, returning `[]` on any failure. A filesystem
+ * probe: a missing directory or permission denial yields "no entries",
+ * indistinguishable from a genuinely empty directory.
+ */
+export function safeReaddir(dir) {
+    try {
+        return readdirSync(dir);
+    }
+    catch {
+        // @fitness-ignore-next-line error-handling-quality -- filesystem probe; exception → empty array is the function's contract (missing directory or permission denied returns "no entries", same as a genuinely empty dir).
+        return [];
+    }
+}
+//# sourceMappingURL=node-modules-walk.js.map

package/dist/plugins/node-modules-walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-modules-walk.js","sourceRoot":"","sources":["../../src/plugins/node-modules-walk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAoB1C;;;;;;;GAOG;AACH,6JAA6J;AAC7J,MAAM,UAAU,sBAAsB,CACpC,OAAsC;IAEtC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAA8B,EAAE,CAAC;IAC1C,IAAI,GAAG,GAAG,UAAU,CAAC;IACrB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACpC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,SAAS;gBACxC,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACzC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC;oBAAE,SAAS;gBAC1C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACf,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,IAAI,GAAG,GAAG,CAAC;QACX,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,IAAY;IAChE,IAAI,GAAG,GAAG,UAAU,CAAC;IACrB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,cAAc,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAChD,IAAI,GAAG,GAAG,CAAC;QACX,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,yNAAyN;QACzN,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/plugins/package-entry.d.ts

@@ -0,0 +1,38 @@
+/**
+ * @fileoverview Resolve a package's main entry point from its
+ * `package.json` — shared between plugin discovery (project-local
+ * `.runtime/plugins/<domain>/node_modules/`) and tool-package discovery
+ * (any installed `opensipTools.kind === 'tool'` package).
+ *
+ * The two discovery sites previously inlined the same exports-map walk,
+ * each with its own `eslint-disable-next-line sonarjs/cognitive-complexity`
+ * suppression. Extracting the resolver removes the duplication and keeps
+ * each caller small enough to satisfy the rule on its own.
+ *
+ * Resolution order matches Node's: `exports['.']` (string or condition
+ * object — `import` / `default` / `node` selected in that order) →
+ * `pkg.main` → `./index.js`. Returns the joined absolute path of the
+ * entry, plus the package name from `pkg.name`. Returns `undefined`
+ * when `package.json` is missing, malformed, or has no resolvable
+ * entry.
+ */
+/** The result of {@link resolvePackageEntryPoint}: a package's resolved entry point plus its name. */
+export interface PackageEntryResolution {
+    /** Package name from `pkg.name`. Falls back to caller-supplied default if absent. */
+    readonly name: string;
+    /** Absolute path to the resolved entry point. */
+    readonly entry: string;
+    /** Raw entry path before joining (for callers that want the relative form). */
+    readonly rawEntry: string;
+}
+/**
+ * Resolve a package's entry-point from its directory.
+ *
+ * @param packageDir   Absolute path to the package directory.
+ * @param fallbackName Name to use if `pkg.name` is missing — typically
+ *                     the directory entry the caller iterated over.
+ * @returns The resolved entry plus name, or `undefined` if `package.json`
+ *          is absent, malformed, or has no resolvable entry.
+ */
+export declare function resolvePackageEntryPoint(packageDir: string, fallbackName?: string): PackageEntryResolution | undefined;
+//# sourceMappingURL=package-entry.d.ts.map

package/dist/plugins/package-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-entry.d.ts","sourceRoot":"","sources":["../../src/plugins/package-entry.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;GAiBG;AAKH,sGAAsG;AACtG,MAAM,WAAW,sBAAsB;IACrC,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAQD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,sBAAsB,GAAG,SAAS,CAqBpC"}

package/dist/plugins/package-entry.js

@@ -0,0 +1,86 @@
+// @fitness-ignore-file unbounded-memory -- reads npm package.json files; bounded by standard package metadata size
+/**
+ * @fileoverview Resolve a package's main entry point from its
+ * `package.json` — shared between plugin discovery (project-local
+ * `.runtime/plugins/<domain>/node_modules/`) and tool-package discovery
+ * (any installed `opensipTools.kind === 'tool'` package).
+ *
+ * The two discovery sites previously inlined the same exports-map walk,
+ * each with its own `eslint-disable-next-line sonarjs/cognitive-complexity`
+ * suppression. Extracting the resolver removes the duplication and keeps
+ * each caller small enough to satisfy the rule on its own.
+ *
+ * Resolution order matches Node's: `exports['.']` (string or condition
+ * object — `import` / `default` / `node` selected in that order) →
+ * `pkg.main` → `./index.js`. Returns the joined absolute path of the
+ * entry, plus the package name from `pkg.name`. Returns `undefined`
+ * when `package.json` is missing, malformed, or has no resolvable
+ * entry.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+/**
+ * Resolve a package's entry-point from its directory.
+ *
+ * @param packageDir   Absolute path to the package directory.
+ * @param fallbackName Name to use if `pkg.name` is missing — typically
+ *                     the directory entry the caller iterated over.
+ * @returns The resolved entry plus name, or `undefined` if `package.json`
+ *          is absent, malformed, or has no resolvable entry.
+ */
+export function resolvePackageEntryPoint(packageDir, fallbackName) {
+    const pkgJsonPath = join(packageDir, 'package.json');
+    if (!existsSync(pkgJsonPath))
+        return undefined;
+    let pkg;
+    try {
+        pkg = JSON.parse(readFileSync(pkgJsonPath, 'utf8'));
+    }
+    catch {
+        // @fitness-ignore-next-line error-handling-quality -- malformed/unreadable package.json deliberately surfaces via undefined return; caller treats as "no resolvable entry" (documented in the function's JSDoc).
+        return undefined;
+    }
+    const name = pkg.name ?? fallbackName;
+    if (!name)
+        return undefined;
+    const rawEntry = resolveEntryFromExportsField(pkg.exports) ?? pkg.main ?? './index.js';
+    return {
+        name,
+        entry: join(packageDir, rawEntry),
+        rawEntry,
+    };
+}
+/**
+ * Walk the `exports` field of a parsed `package.json` and pick the
+ * main entry. Returns the raw (relative) entry string or `undefined`
+ * when no resolvable entry is present.
+ *
+ * Handles three shapes:
+ *   - `"exports": "./dist/index.js"`               (string)
+ *   - `"exports": { ".": "./dist/index.js" }`      (object, string `.`)
+ *   - `"exports": { ".": { "import": "./..." } }`  (object, condition `.`)
+ */
+function resolveEntryFromExportsField(exportsField) {
+    if (typeof exportsField === 'string')
+        return exportsField;
+    if (!exportsField || typeof exportsField !== 'object')
+        return undefined;
+    if (!('.' in exportsField))
+        return undefined;
+    const dot = exportsField['.'];
+    if (typeof dot === 'string')
+        return dot;
+    if (!dot || typeof dot !== 'object')
+        return undefined;
+    const conditions = dot;
+    // Order matches Node's "exports" condition resolution priority for
+    // ESM consumers: prefer 'import', then 'default', then 'node'.
+    if (typeof conditions.import === 'string')
+        return conditions.import;
+    if (typeof conditions.default === 'string')
+        return conditions.default;
+    if (typeof conditions.node === 'string')
+        return conditions.node;
+    return undefined;
+}
+//# sourceMappingURL=package-entry.js.map

package/dist/plugins/package-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-entry.js","sourceRoot":"","sources":["../../src/plugins/package-entry.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAkBjC;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAkB,EAClB,YAAqB;IAErB,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IAE/C,IAAI,GAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAqB,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,iNAAiN;QACjN,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,YAAY,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,MAAM,QAAQ,GAAG,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,YAAY,CAAC;IACvF,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC;QACjC,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,4BAA4B,CACnC,YAAyC;IAEzC,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC;IAC1D,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxE,IAAI,CAAC,CAAC,GAAG,IAAI,YAAY,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,UAAU,GAAG,GAA8B,CAAC;IAClD,mEAAmE;IACnE,+DAA+D;IAC/D,IAAI,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC;IACpE,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,OAAO,CAAC;IACtE,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC;IAChE,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/plugins/recipe-loader.d.ts

@@ -0,0 +1,63 @@
+/**
+ * @fileoverview Shared recipe-registration helper for fitness + simulation
+ * plugin loaders. Single implementation of the "iterate mod.recipes,
+ * shape-check each, register, count" pattern that previously appeared in
+ * three near-identical sites (fitness/engine/src/plugins/loader.ts,
+ * fitness/engine/src/cli/fit.ts, simulation/engine/src/cli/sim.ts).
+ *
+ * The malformed-recipe warning preserves the careful pattern from
+ * loader.ts — recipes that fail the `id + name` shape check emit a
+ * `plugin.recipe.invalid_item` warning so the customer can see what
+ * was skipped.
+ *
+ * Duplicate handling: the underlying `RecipeRegistry.register` doesn't
+ * throw on duplicate when `allowOverwrite: false` (the default) — it
+ * logs a `recipe.registry.duplicate` warning and silently returns.
+ * This helper uses `registry.has()` to check first, so `recipesRegistered`
+ * counts only entries that genuinely landed in the registry. The
+ * optional `onDuplicate` callback lets the caller observe the rejection
+ * (no-op by default).
+ *
+ * No try/catch around `register` itself — if the registry throws for
+ * an unexpected reason (validation error, internal failure), the error
+ * propagates to the caller's outer try/catch in cli/fit.ts or cli/sim.ts,
+ * surfacing as a per-package load failure rather than being silently
+ * misattributed as a duplicate.
+ */
+import type { RecipeBase, RecipeRegistry } from '../recipes/registry.js';
+/** Options for {@link registerRecipesFromMod}: the warning namespace, warn callback, and an optional duplicate observer. */
+export interface RegisterRecipesOptions<R extends RecipeBase> {
+    /** Package name (or plugin namespace) used in warning messages. */
+    readonly namespace: string;
+    /**
+     * Warn callback. Adapts to loader.ts's `ctx.warn(evt, message, extra)`
+     * channel and the CLI sites' `logger.warn(...)` shape.
+     */
+    readonly onWarn: (evt: string, message: string, extra?: Record<string, unknown>) => void;
+    /**
+     * Invoked when a recipe is skipped because the registry already has
+     * one with the same id/name. Defaults to a no-op. Useful for tests
+     * and for callers that want a structured count of duplicates.
+     */
+    readonly onDuplicate?: (recipe: R) => void;
+}
+/** Result of {@link registerRecipesFromMod}: how many recipes actually entered the registry. */
+export interface RegisterRecipesResult {
+    /** Count of recipes that actually entered the registry. */
+    readonly recipesRegistered: number;
+}
+/**
+ * Iterate `mod.recipes` (if present), shape-check each item, and
+ * register valid entries into the registry. Returns the count of
+ * successful registrations.
+ *
+ * - `mod.recipes` undefined or not an array → returns `{ recipesRegistered: 0 }`.
+ * - Item fails the shape check (`'id' in recipe && 'name' in recipe`) →
+ *   emits `plugin.recipe.invalid_item` via `onWarn` and skips.
+ * - Item is a duplicate of an existing entry (by id or name) → skipped
+ *   without incrementing; `onDuplicate` invoked if provided. The
+ *   registry's own warning surfaces the duplicate event.
+ * - Registry throws on `register` for any other reason → propagates.
+ */
+export declare function registerRecipesFromMod<R extends RecipeBase>(mod: unknown, registry: RecipeRegistry<R>, options: RegisterRecipesOptions<R>): RegisterRecipesResult;
+//# sourceMappingURL=recipe-loader.d.ts.map

package/dist/plugins/recipe-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipe-loader.d.ts","sourceRoot":"","sources":["../../src/plugins/recipe-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAEzE,4HAA4H;AAC5H,MAAM,WAAW,sBAAsB,CAAC,CAAC,SAAS,UAAU;IAC1D,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACzF;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC;CAC5C;AAED,gGAAgG;AAChG,MAAM,WAAW,qBAAqB;IACpC,2DAA2D;IAC3D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,SAAS,UAAU,EACzD,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,EAC3B,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,GACjC,qBAAqB,CAwBvB"}

package/dist/plugins/recipe-loader.js

@@ -0,0 +1,67 @@
+/**
+ * @fileoverview Shared recipe-registration helper for fitness + simulation
+ * plugin loaders. Single implementation of the "iterate mod.recipes,
+ * shape-check each, register, count" pattern that previously appeared in
+ * three near-identical sites (fitness/engine/src/plugins/loader.ts,
+ * fitness/engine/src/cli/fit.ts, simulation/engine/src/cli/sim.ts).
+ *
+ * The malformed-recipe warning preserves the careful pattern from
+ * loader.ts — recipes that fail the `id + name` shape check emit a
+ * `plugin.recipe.invalid_item` warning so the customer can see what
+ * was skipped.
+ *
+ * Duplicate handling: the underlying `RecipeRegistry.register` doesn't
+ * throw on duplicate when `allowOverwrite: false` (the default) — it
+ * logs a `recipe.registry.duplicate` warning and silently returns.
+ * This helper uses `registry.has()` to check first, so `recipesRegistered`
+ * counts only entries that genuinely landed in the registry. The
+ * optional `onDuplicate` callback lets the caller observe the rejection
+ * (no-op by default).
+ *
+ * No try/catch around `register` itself — if the registry throws for
+ * an unexpected reason (validation error, internal failure), the error
+ * propagates to the caller's outer try/catch in cli/fit.ts or cli/sim.ts,
+ * surfacing as a per-package load failure rather than being silently
+ * misattributed as a duplicate.
+ */
+/**
+ * Iterate `mod.recipes` (if present), shape-check each item, and
+ * register valid entries into the registry. Returns the count of
+ * successful registrations.
+ *
+ * - `mod.recipes` undefined or not an array → returns `{ recipesRegistered: 0 }`.
+ * - Item fails the shape check (`'id' in recipe && 'name' in recipe`) →
+ *   emits `plugin.recipe.invalid_item` via `onWarn` and skips.
+ * - Item is a duplicate of an existing entry (by id or name) → skipped
+ *   without incrementing; `onDuplicate` invoked if provided. The
+ *   registry's own warning surfaces the duplicate event.
+ * - Registry throws on `register` for any other reason → propagates.
+ */
+export function registerRecipesFromMod(mod, registry, options) {
+    const recipes = mod?.recipes;
+    if (!Array.isArray(recipes)) {
+        return { recipesRegistered: 0 };
+    }
+    let recipesRegistered = 0;
+    for (const [index, item] of recipes.entries()) {
+        if (!isShapedLikeRecipe(item)) {
+            options.onWarn('plugin.recipe.invalid_item', `${options.namespace} recipes[${index}] is not a valid Recipe object (missing id or name) — skipping.`, { index });
+            continue;
+        }
+        const recipe = item;
+        if (registry.has(recipe.id) || registry.has(recipe.name)) {
+            options.onDuplicate?.(recipe);
+            continue;
+        }
+        registry.register(recipe, { allowOverwrite: false });
+        recipesRegistered++;
+    }
+    return { recipesRegistered };
+}
+function isShapedLikeRecipe(value) {
+    if (value === null || typeof value !== 'object')
+        return false;
+    const obj = value;
+    return typeof obj.id === 'string' && typeof obj.name === 'string';
+}
+//# sourceMappingURL=recipe-loader.js.map

package/dist/plugins/recipe-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipe-loader.js","sourceRoot":"","sources":["../../src/plugins/recipe-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AA2BH;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAY,EACZ,QAA2B,EAC3B,OAAkC;IAElC,MAAM,OAAO,GAAI,GAAgD,EAAE,OAAO,CAAC;IAC3E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,CACZ,4BAA4B,EAC5B,GAAG,OAAO,CAAC,SAAS,YAAY,KAAK,iEAAiE,EACtG,EAAE,KAAK,EAAE,CACV,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAS,CAAC;QACzB,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,iBAAiB,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc;IAEd,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC;AACpE,CAAC"}