@orkestrel/scaffold 0.0.23 → 0.0.24

package/dist/src/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["#token","#target","#root","#stage","#backup","#expectations","#parents","#directories","#anchor","#existing","#emitter","#host","#ensureAlive","#prepare","#apply","#destroyed","#copy","#write","#manifest","#manifestLoaded","#manifestValue","#emitter","#guidesBase","#branch","#guidesTimeout","#registryBase","#registryTimeout","#concurrency","#retries","#strict","#limit","#items","#budget","#controller","#ensureAlive","#lookup","#guides","#versions","#runPool","#guideUrl","#fetchText","#toGuideSync","#toVersionSync","#registryUrl","#toVersionLookup","#packages","#toPackument","#toGuideDescription","#combineNote","#destroyed","#orgUrl","#toOrgPackages","#drain","#cancel","#readBounded","#transportNote","#causeCode","#parseLatest"],"sources":["../../../src/server/constants.ts","../../../src/server/shapers.ts","../../../src/server/contracts.ts","../../../src/server/validators.ts","../../../src/server/parsers.ts","../../../src/server/WriteTransaction.ts","../../../src/server/helpers.ts","../../../src/server/Materializer.ts","../../../src/server/Sync.ts","../../../src/server/factories.ts"],"sourcesContent":["import { MAX_ARTIFACT_BYTES } from '@src/core'\n\n/**\n * The prune-owned directories. Files outside these roots are never candidates\n * for removal, including project-owned skills under `.agents/skills` and\n * `.claude/skills`.\n *\n * @example\n * ```ts\n * import { PRUNE_DIRECTORIES } from '@orkestrel/scaffold/server'\n *\n * PRUNE_DIRECTORIES // ['.claude/agents', '.codex/agents', 'scripts']\n * ```\n */\nexport const PRUNE_DIRECTORIES: readonly string[] = Object.freeze([\n\t'.claude/agents',\n\t'.codex/agents',\n\t'scripts',\n])\n\n/** Reserved metadata file written at the root of every staged host. */\nexport const HOST_MANIFEST_PATH = 'manifest.json'\n\n/** Local configuration and credential-like paths that must never enter a vendored host. */\nexport const SENSITIVE_HOST_PATH_PATTERN =\n\t/(?:^|\\/)(?:(?:\\.git|\\.ssh|\\.aws|\\.azure|\\.docker|\\.kube|\\.gnupg|\\.env(?:\\.[^/]*)?)(?:\\/|$)|(?:\\.npmrc|\\.pypirc|\\.netrc|\\.git-credentials|settings\\.local\\.json|auth\\.json|credentials(?:\\.json)?|application_default_credentials\\.json|id_rsa|id_ed25519|kubeconfig)(?:\\/|$)|\\.config\\/(?:gh|gcloud)(?:\\/|$)|\\.local\\/share\\/keyrings(?:\\/|$)|[^/]*service-account[^/]*\\.json$|[^/]*\\.(?:jks|key|p12|pem|pfx|pkcs12)$)/i\n\n/** Existing repository metadata that a materialization target must never own. */\nexport const RESERVED_TARGET_PATH_PATTERN = /(?:^|\\/)\\.git(?:\\/|$)/i\n\n/** Maximum normalized package-catalog description length. */\nexport const MAX_CATALOG_DESCRIPTION_LENGTH = 500\n\n/** Maximum UTF-8 bytes parsed from one local package guide. */\nexport const MAX_GUIDE_BYTES = MAX_ARTIFACT_BYTES\n\n/** Maximum filesystem entries accepted by one vendored-host traversal. */\nexport const MAX_HOST_ENTRIES = 4_096\n\n/** Maximum directory nesting accepted by one vendored-host traversal. */\nexport const MAX_HOST_DEPTH = 32\n\n/** Maximum caller-controlled filesystem path depth accepted before filesystem work. */\nexport const MAX_FILESYSTEM_DEPTH = 64\n\n/** Maximum UTF-8 bytes accepted in one portable filesystem path segment. */\nexport const MAX_PATH_SEGMENT_BYTES = 255\n\n/** Windows device names that remain reserved even when followed by an extension. */\nexport const RESERVED_PATH_SEGMENT_PATTERN =\n\t/^(?:con|prn|aux|nul|com[1-9]|lpt[1-9]|conin\\$|conout\\$)(?:\\..*)?$/i\n\n/** Maximum simultaneous upstream requests accepted by `Sync`. */\nexport const MAX_SYNC_CONCURRENCY = 64\n\n/** Default simultaneous upstream requests used by `Sync`. */\nexport const DEFAULT_SYNC_CONCURRENCY = 6\n\n/** Maximum retry count accepted by `Sync`. */\nexport const MAX_SYNC_RETRIES = 5\n\n/** Maximum per-request timeout accepted by `Sync`, in milliseconds. */\nexport const MAX_SYNC_TIMEOUT = 300_000\n\n/** Default per-request timeout used by `Sync`, in milliseconds. */\nexport const DEFAULT_SYNC_TIMEOUT = 10_000\n\n/** Maximum response body accepted by `Sync`, in bytes. */\nexport const MAX_SYNC_LIMIT = MAX_ARTIFACT_BYTES\n\n/** Default per-response byte limit used by `Sync`. */\nexport const DEFAULT_SYNC_LIMIT = MAX_ARTIFACT_BYTES\n\n/** Default maximum dependencies or catalog entries retained by one Sync operation. */\nexport const DEFAULT_SYNC_ITEMS = 256\n\n/** Maximum configurable dependencies or catalog entries for one Sync operation. */\nexport const MAX_SYNC_ITEMS = 1_000\n\n/** Default cumulative response bytes retained by one Sync operation. */\nexport const DEFAULT_SYNC_BUDGET = 16_777_216\n\n/** Maximum configurable cumulative response bytes retained by one Sync operation. */\nexport const MAX_SYNC_BUDGET = 104_857_600\n\n/** Maximum caller-supplied endpoint characters inspected before URL allocation. */\nexport const MAX_SYNC_BASE_LENGTH = 2_048\n\n/** Maximum portable Git branch characters accepted by the guide endpoint. */\nexport const MAX_SYNC_BRANCH_LENGTH = 255\n\n/** Exact SHA-256 digest accepted by write preconditions. */\nexport const WRITE_DIGEST_PATTERN = /^[0-9a-f]{64}$/\n\n/** Safe ASCII branch alphabet accepted before Git ref-component validation. */\nexport const SYNC_BRANCH_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._/-]*$/\n","import {\n\tbooleanShape,\n\tintegerShape,\n\tobjectShape,\n\toptionalShape,\n\tstringShape,\n} from '@orkestrel/contract'\nimport { MAX_PATH_LENGTH } from '@src/core'\nimport {\n\tMAX_SYNC_BASE_LENGTH,\n\tMAX_SYNC_BRANCH_LENGTH,\n\tMAX_SYNC_CONCURRENCY,\n\tMAX_SYNC_BUDGET,\n\tMAX_SYNC_ITEMS,\n\tMAX_SYNC_LIMIT,\n\tMAX_SYNC_RETRIES,\n\tMAX_SYNC_TIMEOUT,\n} from './constants.js'\n\n/** Build the closed upstream-guide endpoint options shape. */\nexport function syncGuideOptionsShape() {\n\treturn objectShape({\n\t\tbase: optionalShape(stringShape({ min: 1, max: MAX_SYNC_BASE_LENGTH })),\n\t\tbranch: optionalShape(stringShape({ min: 1, max: MAX_SYNC_BRANCH_LENGTH })),\n\t\ttimeout: optionalShape(integerShape({ min: 1, max: MAX_SYNC_TIMEOUT })),\n\t})\n}\n\n/** Build the closed registry endpoint options shape. */\nexport function syncRegistryOptionsShape() {\n\treturn objectShape({\n\t\tbase: optionalShape(stringShape({ min: 1, max: MAX_SYNC_BASE_LENGTH })),\n\t\ttimeout: optionalShape(integerShape({ min: 1, max: MAX_SYNC_TIMEOUT })),\n\t})\n}\n\n/** Build the closed data-only `SyncOptions` shape. */\nexport function syncOptionsShape() {\n\treturn objectShape({\n\t\tguides: optionalShape(syncGuideOptionsShape()),\n\t\tregistry: optionalShape(syncRegistryOptionsShape()),\n\t\tconcurrency: optionalShape(integerShape({ min: 1, max: MAX_SYNC_CONCURRENCY })),\n\t\tretries: optionalShape(integerShape({ min: 0, max: MAX_SYNC_RETRIES })),\n\t\tstrict: optionalShape(booleanShape()),\n\t\tlimit: optionalShape(integerShape({ min: 1, max: MAX_SYNC_LIMIT })),\n\t\titems: optionalShape(integerShape({ min: 1, max: MAX_SYNC_ITEMS })),\n\t\tbudget: optionalShape(integerShape({ min: 1, max: MAX_SYNC_BUDGET })),\n\t})\n}\n\n/** Build the closed data-only `MaterializerOptions` shape. */\nexport function materializerOptionsShape() {\n\treturn objectShape({\n\t\thost: optionalShape(stringShape({ min: 1, max: MAX_PATH_LENGTH })),\n\t})\n}\n","import { createContract } from '@orkestrel/contract'\nimport { materializerOptionsShape, syncOptionsShape } from './shapers.js'\n\n/** The compiled, closed data-only `SyncOptions` contract. */\nexport const syncOptionsContract = createContract(syncOptionsShape())\n\n/** The compiled, closed data-only `MaterializerOptions` contract. */\nexport const materializerOptionsContract = createContract(materializerOptionsShape())\n","import type { EmitterHooks } from '@orkestrel/emitter'\nimport type { Dependency } from '@src/core'\nimport type {\n\tCatalogAllowance,\n\tHostManifest,\n\tManifestEntry,\n\tMaterializerEventMap,\n\tSyncEventMap,\n\tWritePrecondition,\n} from './types.js'\nimport { attempt, isError, isFunction, isRecord, isString } from '@orkestrel/contract'\nimport {\n\tCONTROL_CHARACTER_PATTERN,\n\tcontentByteLength,\n\thasOnlyDataProperties,\n\tINVALID_PATH_CHARACTER_PATTERN,\n\tisDenseDataArray,\n\tisDependency,\n\tMAX_PATH_LENGTH,\n} from '@src/core'\nimport {\n\tMAX_CATALOG_DESCRIPTION_LENGTH,\n\tMAX_FILESYSTEM_DEPTH,\n\tMAX_HOST_ENTRIES,\n\tMAX_PATH_SEGMENT_BYTES,\n\tRESERVED_PATH_SEGMENT_PATTERN,\n\tRESERVED_TARGET_PATH_PATTERN,\n\tSENSITIVE_HOST_PATH_PATTERN,\n\tWRITE_DIGEST_PATTERN,\n} from './constants.js'\n\n/** Narrow one exact aggregate fleet traversal allowance. */\nexport function isCatalogAllowance(value: unknown): value is CatalogAllowance {\n\tconst result = attempt(() => {\n\t\tconst bufferGetter = Object.getOwnPropertyDescriptor(\n\t\t\tObject.getPrototypeOf(Float64Array.prototype),\n\t\t\t'buffer',\n\t\t)?.get\n\t\tif (\n\t\t\tbufferGetter === undefined ||\n\t\t\t!ArrayBuffer.isView(value) ||\n\t\t\t!(value instanceof Float64Array) ||\n\t\t\t!(Reflect.apply(bufferGetter, value, []) instanceof ArrayBuffer) ||\n\t\t\tvalue.length !== 1\n\t\t) {\n\t\t\treturn false\n\t\t}\n\t\tconst remaining = value[0]\n\t\treturn (\n\t\t\tremaining !== undefined &&\n\t\t\tNumber.isSafeInteger(remaining) &&\n\t\t\tremaining >= 0 &&\n\t\t\tremaining <= MAX_HOST_ENTRIES\n\t\t)\n\t})\n\treturn result.success && result.value\n}\n\n/**\n * Determine whether a value is a non-empty portable relative POSIX path.\n *\n * @param value - The candidate path.\n * @returns `true` when every path segment is safe and portable.\n */\nexport function isPortablePath(value: unknown): value is string {\n\tif (!isString(value) || value.length === 0 || value.length > MAX_PATH_LENGTH) return false\n\tif (INVALID_PATH_CHARACTER_PATTERN.test(value) || CONTROL_CHARACTER_PATTERN.test(value)) {\n\t\treturn false\n\t}\n\tconst segments = value.split('/')\n\treturn (\n\t\tsegments.length <= MAX_FILESYSTEM_DEPTH &&\n\t\t!segments.some(\n\t\t\t(segment) =>\n\t\t\t\tsegment === '' ||\n\t\t\t\tsegment === '.' ||\n\t\t\t\tsegment === '..' ||\n\t\t\t\tsegment.endsWith('.') ||\n\t\t\t\tsegment.endsWith(' ') ||\n\t\t\t\tcontentByteLength(segment) > MAX_PATH_SEGMENT_BYTES ||\n\t\t\t\tRESERVED_PATH_SEGMENT_PATTERN.test(segment),\n\t\t)\n\t)\n}\n\n/** Whether one host filesystem path is bounded, non-empty, and safe to render in a terminal. */\nexport function isFilesystemPath(value: unknown): value is string {\n\tif (\n\t\t!isString(value) ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > MAX_PATH_LENGTH ||\n\t\tCONTROL_CHARACTER_PATTERN.test(value)\n\t) {\n\t\treturn false\n\t}\n\tconst normalized = value.replaceAll('\\\\', '/')\n\tconst withoutRoot = normalized.startsWith('//')\n\t\t? normalized.slice(2)\n\t\t: normalized.startsWith('/')\n\t\t\t? normalized.slice(1)\n\t\t\t: normalized\n\tif (withoutRoot.includes('//')) return false\n\tconst segments = withoutRoot.split('/').filter((segment) => segment.length > 0)\n\tif (segments.length > MAX_FILESYSTEM_DEPTH) return false\n\treturn !segments.some((segment, index) => {\n\t\tif (segment === '.' || segment === '..') return false\n\t\tif (index === 0 && /^[A-Za-z]:$/u.test(segment)) return false\n\t\treturn (\n\t\t\t/[<>:\"|?*]/u.test(segment) ||\n\t\t\tsegment.endsWith('.') ||\n\t\t\tsegment.endsWith(' ') ||\n\t\t\tcontentByteLength(segment) > MAX_PATH_SEGMENT_BYTES ||\n\t\t\tRESERVED_PATH_SEGMENT_PATTERN.test(segment)\n\t\t)\n\t})\n}\n\n/** Whether one externally supplied string is safe to render in terminal or JSON diagnostics. */\nexport function isTerminalText(value: unknown): value is string {\n\treturn isString(value) && !CONTROL_CHARACTER_PATTERN.test(value)\n}\n\n/** Whether one dependency is an exact data-property record safe to snapshot. */\nexport function isDependencyData(value: unknown): value is Dependency {\n\treturn hasOnlyDataProperties(value) && isDependency(value)\n}\n\n/**\n * Determine whether a host-relative path resembles local configuration or credentials.\n *\n * @param value - The portable candidate path.\n * @returns `true` when the path must be excluded from vendored host output.\n */\nexport function isSensitiveHostPath(value: string): boolean {\n\treturn SENSITIVE_HOST_PATH_PATTERN.test(value.replaceAll('\\\\', '/'))\n}\n\n/** Determine whether a target-relative path addresses preserved repository metadata. */\nexport function isReservedTargetPath(value: string): boolean {\n\treturn RESERVED_TARGET_PATH_PATTERN.test(value.replaceAll('\\\\', '/'))\n}\n\n/** Whether a normalized catalog description is bounded and contains no controls. */\nexport function isCatalogDescription(value: unknown): value is string {\n\treturn (\n\t\tisString(value) &&\n\t\tvalue.length <= MAX_CATALOG_DESCRIPTION_LENGTH &&\n\t\t!CONTROL_CHARACTER_PATTERN.test(value)\n\t)\n}\n\n/**\n * Determine whether a caught filesystem error reports an absent path.\n *\n * @param value - The caught value.\n * @returns `true` only for an `Error` whose `code` is exactly `ENOENT`.\n */\nexport function isMissingPathError(value: unknown): boolean {\n\tconst result = attempt(() => isError(value) && Reflect.get(value, 'code') === 'ENOENT')\n\treturn result.success && result.value\n}\n\n/** Narrow one exact transaction destination precondition. */\nexport function isWritePrecondition(value: unknown): value is WritePrecondition {\n\tconst result = attempt(() => {\n\t\tif (!isRecord(value)) return false\n\t\tconst keys = Reflect.ownKeys(value)\n\t\tif (\n\t\t\tkeys.some((key) => key !== 'path' && key !== 'shape' && key !== 'digest') ||\n\t\t\tkeys.length < 2 ||\n\t\t\tkeys.length > 3\n\t\t) {\n\t\t\treturn false\n\t\t}\n\t\tconst path = Reflect.getOwnPropertyDescriptor(value, 'path')\n\t\tconst shape = Reflect.getOwnPropertyDescriptor(value, 'shape')\n\t\tconst digest = Reflect.getOwnPropertyDescriptor(value, 'digest')\n\t\tif (\n\t\t\tpath === undefined ||\n\t\t\t!Reflect.has(path, 'value') ||\n\t\t\tshape === undefined ||\n\t\t\t!Reflect.has(shape, 'value') ||\n\t\t\t(digest !== undefined && !Reflect.has(digest, 'value')) ||\n\t\t\t!isPortablePath(path.value)\n\t\t) {\n\t\t\treturn false\n\t\t}\n\t\treturn shape.value === 'absent'\n\t\t\t? digest === undefined\n\t\t\t: shape.value === 'file' &&\n\t\t\t\t\tdigest !== undefined &&\n\t\t\t\t\ttypeof digest.value === 'string' &&\n\t\t\t\t\tWRITE_DIGEST_PATTERN.test(digest.value)\n\t})\n\treturn result.success && result.value\n}\n\n/**\n * Narrow a value to one exact vendored-host manifest entry.\n *\n * @param value - The candidate raw manifest entry.\n * @returns `true` only for the exact safe entry shape.\n */\nexport function isManifestEntry(value: unknown): value is ManifestEntry {\n\tconst result = attempt(() => {\n\t\tif (!isRecord(value)) return false\n\t\tconst keys = Reflect.ownKeys(value)\n\t\tconst storage = Reflect.getOwnPropertyDescriptor(value, 'storage')\n\t\tconst destination = Reflect.getOwnPropertyDescriptor(value, 'destination')\n\t\tconst executable = Reflect.getOwnPropertyDescriptor(value, 'executable')\n\t\treturn (\n\t\t\tkeys.length === 3 &&\n\t\t\tkeys.every((key) => key === 'storage' || key === 'destination' || key === 'executable') &&\n\t\t\tstorage !== undefined &&\n\t\t\tReflect.has(storage, 'value') &&\n\t\t\tdestination !== undefined &&\n\t\t\tReflect.has(destination, 'value') &&\n\t\t\texecutable !== undefined &&\n\t\t\tReflect.has(executable, 'value') &&\n\t\t\tisPortablePath(storage.value) &&\n\t\t\tisPortablePath(destination.value) &&\n\t\t\ttypeof executable.value === 'boolean'\n\t\t)\n\t})\n\treturn result.success && result.value\n}\n\n/**\n * Narrow a value to one exact complete vendored-host manifest.\n *\n * @param value - The candidate manifest value.\n * @returns `true` only for an exact `{ entries, roots, digest }` record with safe paths.\n */\nexport function isHostManifest(value: unknown): value is HostManifest {\n\tconst result = attempt(() => {\n\t\tif (!isRecord(value)) return false\n\t\tconst keys = Reflect.ownKeys(value)\n\t\tconst entries = Reflect.getOwnPropertyDescriptor(value, 'entries')\n\t\tconst roots = Reflect.getOwnPropertyDescriptor(value, 'roots')\n\t\tconst digest = Reflect.getOwnPropertyDescriptor(value, 'digest')\n\t\treturn (\n\t\t\tkeys.length === 3 &&\n\t\t\tkeys.every((key) => key === 'entries' || key === 'roots' || key === 'digest') &&\n\t\t\tentries !== undefined &&\n\t\t\tReflect.has(entries, 'value') &&\n\t\t\troots !== undefined &&\n\t\t\tReflect.has(roots, 'value') &&\n\t\t\tdigest !== undefined &&\n\t\t\tReflect.has(digest, 'value') &&\n\t\t\tisDenseDataArray(entries.value, MAX_HOST_ENTRIES, isManifestEntry) &&\n\t\t\tisDenseDataArray(roots.value, MAX_HOST_ENTRIES, isPortablePath) &&\n\t\t\ttypeof digest.value === 'string' &&\n\t\t\tWRITE_DIGEST_PATTERN.test(digest.value)\n\t\t)\n\t})\n\treturn result.success && result.value\n}\n\n/** Narrow an exact initial-listener record for `Sync`. */\nexport function isSyncEventHooks(value: unknown): value is EmitterHooks<SyncEventMap> {\n\tconst result = attempt(() => {\n\t\tif (!isRecord(value)) return false\n\t\tconst keys = Reflect.ownKeys(value)\n\t\tif (\n\t\t\tkeys.some(\n\t\t\t\t(key) =>\n\t\t\t\t\tkey !== 'guide' &&\n\t\t\t\t\tkey !== 'version' &&\n\t\t\t\t\tkey !== 'package' &&\n\t\t\t\t\tkey !== 'write' &&\n\t\t\t\t\tkey !== 'done' &&\n\t\t\t\t\tkey !== 'error' &&\n\t\t\t\t\tkey !== 'destroy',\n\t\t\t)\n\t\t) {\n\t\t\treturn false\n\t\t}\n\t\treturn keys.every((key) => {\n\t\t\tconst descriptor = Reflect.getOwnPropertyDescriptor(value, key)\n\t\t\treturn (\n\t\t\t\tdescriptor !== undefined && Reflect.has(descriptor, 'value') && isFunction(descriptor.value)\n\t\t\t)\n\t\t})\n\t})\n\treturn result.success && result.value\n}\n\n/** Narrow an exact initial-listener record for `Materializer`. */\nexport function isMaterializerEventHooks(\n\tvalue: unknown,\n): value is EmitterHooks<MaterializerEventMap> {\n\tconst result = attempt(() => {\n\t\tif (!isRecord(value)) return false\n\t\tconst keys = Reflect.ownKeys(value)\n\t\tif (\n\t\t\tkeys.some(\n\t\t\t\t(key) =>\n\t\t\t\t\tkey !== 'copy' &&\n\t\t\t\t\tkey !== 'write' &&\n\t\t\t\t\tkey !== 'remove' &&\n\t\t\t\t\tkey !== 'done' &&\n\t\t\t\t\tkey !== 'error' &&\n\t\t\t\t\tkey !== 'destroy',\n\t\t\t)\n\t\t) {\n\t\t\treturn false\n\t\t}\n\t\treturn keys.every((key) => {\n\t\t\tconst descriptor = Reflect.getOwnPropertyDescriptor(value, key)\n\t\t\treturn (\n\t\t\t\tdescriptor !== undefined && Reflect.has(descriptor, 'value') && isFunction(descriptor.value)\n\t\t\t)\n\t\t})\n\t})\n\treturn result.success && result.value\n}\n","import type { Dependency } from '@src/core'\nimport type {\n\tMaterializerEventMap,\n\tMaterializerOptions,\n\tSyncBase,\n\tSyncBranch,\n\tSyncEventMap,\n\tSyncOptions,\n\tWritePrecondition,\n} from './types.js'\nimport type { EmitterHooks } from '@orkestrel/emitter'\nimport { attempt, isFunction, isRecord } from '@orkestrel/contract'\nimport {\n\tcontentByteLength,\n\tEXTRA_NAME_PATTERN,\n\tisDenseDataArray,\n\tisEmitterErrorHandler,\n\tMAX_ARTIFACT_BYTES,\n\tMAX_DEPENDENCY_NAME_LENGTH,\n\tScaffoldError,\n\tvalidateDependencyArray,\n} from '@src/core'\nimport {\n\tMAX_SYNC_BASE_LENGTH,\n\tMAX_SYNC_BRANCH_LENGTH,\n\tMAX_SYNC_ITEMS,\n\tSYNC_BRANCH_PATTERN,\n} from './constants.js'\nimport { materializerOptionsContract, syncOptionsContract } from './contracts.js'\nimport {\n\tisDependencyData,\n\tisFilesystemPath,\n\tisMaterializerEventHooks,\n\tisPortablePath,\n\tisSyncEventHooks,\n\tisWritePrecondition,\n} from './validators.js'\n\n/**\n * Parse and semantically validate bare registry package names before Sync performs network I/O.\n *\n * @param value - Untrusted package-name collection.\n * @returns A frozen owned snapshot of valid unique npm package names.\n */\nexport function parseSyncNames(value: unknown): readonly string[] {\n\tconst owned = attempt(() => {\n\t\tif (\n\t\t\t!isDenseDataArray(\n\t\t\t\tvalue,\n\t\t\t\tMAX_SYNC_ITEMS,\n\t\t\t\t(candidate): candidate is string => typeof candidate === 'string',\n\t\t\t)\n\t\t) {\n\t\t\tthrow new Error('package names are malformed')\n\t\t}\n\t\tconst length = Reflect.getOwnPropertyDescriptor(value, 'length')?.value\n\t\tif (\n\t\t\ttypeof length !== 'number' ||\n\t\t\t!Number.isSafeInteger(length) ||\n\t\t\tlength < 0 ||\n\t\t\tlength > MAX_SYNC_ITEMS\n\t\t) {\n\t\t\tthrow new Error('package name length is malformed')\n\t\t}\n\t\tconst names: string[] = []\n\t\tfor (let index = 0; index < length; index += 1) {\n\t\t\tconst descriptor = Reflect.getOwnPropertyDescriptor(value, String(index))\n\t\t\tif (\n\t\t\t\tdescriptor === undefined ||\n\t\t\t\t!Reflect.has(descriptor, 'value') ||\n\t\t\t\ttypeof descriptor.value !== 'string'\n\t\t\t) {\n\t\t\t\tthrow new Error('package name is malformed')\n\t\t\t}\n\t\t\tnames.push(descriptor.value)\n\t\t}\n\t\treturn Object.freeze(names)\n\t})\n\tif (!owned.success) {\n\t\tthrow new ScaffoldError('INVALID', 'Sync package names are malformed', {\n\t\t\terror: owned.error,\n\t\t})\n\t}\n\tconst snapshot = owned.value\n\tconst seen = new Set<string>()\n\tfor (const name of snapshot) {\n\t\tif (\n\t\t\tname.length === 0 ||\n\t\t\tname.length > MAX_DEPENDENCY_NAME_LENGTH ||\n\t\t\t!EXTRA_NAME_PATTERN.test(name) ||\n\t\t\tseen.has(name)\n\t\t) {\n\t\t\tthrow new ScaffoldError('INVALID', 'Sync package names are invalid', { name })\n\t\t}\n\t\tseen.add(name)\n\t}\n\treturn snapshot\n}\n\n/** Parse and semantically validate dependency data before Sync performs network I/O. */\nexport function parseSyncDependencies(value: unknown, external: boolean): readonly Dependency[] {\n\tconst owned = attempt(() => {\n\t\tif (!isDenseDataArray(value, MAX_SYNC_ITEMS, isDependencyData)) {\n\t\t\tthrow new Error('dependencies are malformed')\n\t\t}\n\t\tconst length = Reflect.getOwnPropertyDescriptor(value, 'length')?.value\n\t\tif (\n\t\t\ttypeof length !== 'number' ||\n\t\t\t!Number.isSafeInteger(length) ||\n\t\t\tlength < 0 ||\n\t\t\tlength > MAX_SYNC_ITEMS\n\t\t) {\n\t\t\tthrow new Error('dependency length is malformed')\n\t\t}\n\t\tconst dependencies: Dependency[] = []\n\t\tfor (let index = 0; index < length; index += 1) {\n\t\t\tconst descriptor = Reflect.getOwnPropertyDescriptor(value, String(index))\n\t\t\tif (\n\t\t\t\tdescriptor === undefined ||\n\t\t\t\t!Reflect.has(descriptor, 'value') ||\n\t\t\t\t!isDependencyData(descriptor.value)\n\t\t\t) {\n\t\t\t\tthrow new Error('dependency is malformed')\n\t\t\t}\n\t\t\tconst name = Reflect.getOwnPropertyDescriptor(descriptor.value, 'name')?.value\n\t\t\tconst range = Reflect.getOwnPropertyDescriptor(descriptor.value, 'range')?.value\n\t\t\tconst optional = Reflect.getOwnPropertyDescriptor(descriptor.value, 'optional')?.value\n\t\t\tif (\n\t\t\t\ttypeof name !== 'string' ||\n\t\t\t\ttypeof range !== 'string' ||\n\t\t\t\t(optional !== undefined && typeof optional !== 'boolean')\n\t\t\t) {\n\t\t\t\tthrow new Error('dependency is malformed')\n\t\t\t}\n\t\t\tdependencies.push(\n\t\t\t\tObject.freeze({\n\t\t\t\t\tname,\n\t\t\t\t\trange,\n\t\t\t\t\t...(optional === undefined ? {} : { optional }),\n\t\t\t\t}),\n\t\t\t)\n\t\t}\n\t\treturn Object.freeze(dependencies)\n\t})\n\tif (!owned.success) {\n\t\tthrow new ScaffoldError('INVALID', 'Sync dependencies are malformed', {\n\t\t\terror: owned.error,\n\t\t})\n\t}\n\tconst snapshot = owned.value\n\tconst validation = validateDependencyArray(external ? 'extras' : 'dependencies', snapshot)\n\tif (validation.questions.length > 0) {\n\t\tthrow new ScaffoldError('INVALID', 'Sync dependencies are invalid', {\n\t\t\tquestions: validation.questions,\n\t\t})\n\t}\n\treturn snapshot\n}\n\n/** Parse a bounded dense array of host filesystem paths without invoking caller methods. */\nexport function parseFilesystemPaths(value: unknown, limit: number): readonly string[] | undefined {\n\tconst parsed = attempt(() => {\n\t\tif (\n\t\t\t!Number.isSafeInteger(limit) ||\n\t\t\tlimit < 0 ||\n\t\t\t!isDenseDataArray(value, limit, isFilesystemPath)\n\t\t) {\n\t\t\treturn undefined\n\t\t}\n\t\tconst length = Reflect.getOwnPropertyDescriptor(value, 'length')?.value\n\t\tif (\n\t\t\ttypeof length !== 'number' ||\n\t\t\t!Number.isSafeInteger(length) ||\n\t\t\tlength < 0 ||\n\t\t\tlength > limit\n\t\t) {\n\t\t\treturn undefined\n\t\t}\n\t\tconst paths: string[] = []\n\t\tfor (let index = 0; index < length; index += 1) {\n\t\t\tconst descriptor = Reflect.getOwnPropertyDescriptor(value, String(index))\n\t\t\tif (\n\t\t\t\tdescriptor === undefined ||\n\t\t\t\t!Reflect.has(descriptor, 'value') ||\n\t\t\t\t!isFilesystemPath(descriptor.value)\n\t\t\t) {\n\t\t\t\treturn undefined\n\t\t\t}\n\t\t\tpaths.push(descriptor.value)\n\t\t}\n\t\treturn Object.freeze(paths)\n\t})\n\treturn parsed.success ? parsed.value : undefined\n}\n\n/** Parse a bounded dense array of portable paths without invoking caller methods. */\nexport function parsePortablePaths(value: unknown, limit: number): readonly string[] | undefined {\n\tconst parsed = attempt(() => {\n\t\tif (\n\t\t\t!Number.isSafeInteger(limit) ||\n\t\t\tlimit < 0 ||\n\t\t\t!isDenseDataArray(value, limit, isPortablePath)\n\t\t) {\n\t\t\treturn undefined\n\t\t}\n\t\tconst length = Reflect.getOwnPropertyDescriptor(value, 'length')?.value\n\t\tif (\n\t\t\ttypeof length !== 'number' ||\n\t\t\t!Number.isSafeInteger(length) ||\n\t\t\tlength < 0 ||\n\t\t\tlength > limit\n\t\t) {\n\t\t\treturn undefined\n\t\t}\n\t\tconst paths: string[] = []\n\t\tfor (let index = 0; index < length; index += 1) {\n\t\t\tconst descriptor = Reflect.getOwnPropertyDescriptor(value, String(index))\n\t\t\tif (\n\t\t\t\tdescriptor === undefined ||\n\t\t\t\t!Reflect.has(descriptor, 'value') ||\n\t\t\t\t!isPortablePath(descriptor.value)\n\t\t\t) {\n\t\t\t\treturn undefined\n\t\t\t}\n\t\t\tpaths.push(descriptor.value)\n\t\t}\n\t\treturn Object.freeze(paths)\n\t})\n\treturn parsed.success ? parsed.value : undefined\n}\n\n/** Parse bounded exact transaction preconditions without invoking caller methods. */\nexport function parseWritePreconditions(\n\tvalue: unknown,\n\tlimit: number,\n): readonly WritePrecondition[] | undefined {\n\tconst parsed = attempt(() => {\n\t\tif (\n\t\t\t!Number.isSafeInteger(limit) ||\n\t\t\tlimit < 0 ||\n\t\t\t!isDenseDataArray(value, limit, isWritePrecondition)\n\t\t) {\n\t\t\treturn undefined\n\t\t}\n\t\tconst length = Reflect.getOwnPropertyDescriptor(value, 'length')?.value\n\t\tif (\n\t\t\ttypeof length !== 'number' ||\n\t\t\t!Number.isSafeInteger(length) ||\n\t\t\tlength < 0 ||\n\t\t\tlength > limit\n\t\t) {\n\t\t\treturn undefined\n\t\t}\n\t\tconst preconditions: WritePrecondition[] = []\n\t\tfor (let index = 0; index < length; index += 1) {\n\t\t\tconst descriptor = Reflect.getOwnPropertyDescriptor(value, String(index))\n\t\t\tif (\n\t\t\t\tdescriptor === undefined ||\n\t\t\t\t!Reflect.has(descriptor, 'value') ||\n\t\t\t\t!isWritePrecondition(descriptor.value)\n\t\t\t) {\n\t\t\t\treturn undefined\n\t\t\t}\n\t\t\tconst precondition = descriptor.value\n\t\t\tconst path = Reflect.getOwnPropertyDescriptor(precondition, 'path')?.value\n\t\t\tconst shape = Reflect.getOwnPropertyDescriptor(precondition, 'shape')?.value\n\t\t\tconst digest = Reflect.getOwnPropertyDescriptor(precondition, 'digest')?.value\n\t\t\tif (typeof path !== 'string') return undefined\n\t\t\tif (shape === 'absent' && digest === undefined) {\n\t\t\t\tconst copy: WritePrecondition = { path, shape }\n\t\t\t\tif (!isWritePrecondition(copy)) return undefined\n\t\t\t\tpreconditions.push(Object.freeze(copy))\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (shape !== 'file' || typeof digest !== 'string') return undefined\n\t\t\tconst copy: WritePrecondition = { path, shape, digest }\n\t\t\tif (!isWritePrecondition(copy)) return undefined\n\t\t\tpreconditions.push(Object.freeze(copy))\n\t\t}\n\t\treturn Object.freeze(preconditions)\n\t})\n\treturn parsed.success ? parsed.value : undefined\n}\n\n/** Parse and normalize one upstream HTTP(S) endpoint base. */\nexport function parseSyncBase(value: unknown): SyncBase {\n\tif (\n\t\ttypeof value !== 'string' ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > MAX_SYNC_BASE_LENGTH ||\n\t\tvalue !== value.trim() ||\n\t\t(/^[A-Za-z][A-Za-z0-9+.-]*:\\/\\//i.test(value) && !/^https?:\\/\\//i.test(value))\n\t) {\n\t\tthrow new ScaffoldError('INVALID', 'Invalid Sync endpoint base', { value })\n\t}\n\tconst normalized = /^https?:\\/\\//i.test(value) ? value : `https://${value}`\n\tconst parsed = attempt(() => new URL(normalized))\n\tif (\n\t\t!parsed.success ||\n\t\t(parsed.value.protocol !== 'http:' && parsed.value.protocol !== 'https:') ||\n\t\tparsed.value.username.length > 0 ||\n\t\tparsed.value.password.length > 0 ||\n\t\tparsed.value.search.length > 0 ||\n\t\tparsed.value.hash.length > 0 ||\n\t\t(parsed.value.protocol === 'http:' &&\n\t\t\t!['127.0.0.1', '[::1]', 'localhost'].includes(parsed.value.hostname.toLowerCase()))\n\t) {\n\t\tthrow new ScaffoldError('INVALID', 'Invalid Sync endpoint base', { value })\n\t}\n\tconst base = parsed.value.href.replace(/\\/+$/, '')\n\tif (base.length > MAX_SYNC_BASE_LENGTH) {\n\t\tthrow new ScaffoldError('INVALID', 'Invalid Sync endpoint base', { value })\n\t}\n\treturn base\n}\n\n/**\n * Snapshot only declared guide references while enforcing per-file and cumulative byte limits.\n *\n * @param value - The caller-supplied guide content map.\n * @param names - Exact dependency names eligible for selection.\n * @param budget - Maximum cumulative UTF-8 bytes.\n * @returns A frozen selected map, or `undefined` when no map was supplied.\n */\nexport function parseSyncCurrent(\n\tvalue: Readonly<Record<string, string>> | undefined,\n\tnames: readonly string[],\n\tbudget: number,\n): Readonly<Record<string, string>> | undefined {\n\tif (value === undefined) return undefined\n\tconst snapshot = attempt(() => {\n\t\tif (!isRecord(value)) throw new Error('current must be a plain record')\n\t\tconst selected: Record<string, string> = {}\n\t\tlet consumed = 0\n\t\tfor (const name of names) {\n\t\t\tconst descriptor = Reflect.getOwnPropertyDescriptor(value, name)\n\t\t\tif (descriptor === undefined) continue\n\t\t\tif (!Reflect.has(descriptor, 'value') || typeof descriptor.value !== 'string') {\n\t\t\t\tthrow new Error('current values must be string data properties')\n\t\t\t}\n\t\t\tconst bytes = contentByteLength(descriptor.value)\n\t\t\tconsumed += bytes\n\t\t\tif (bytes > MAX_ARTIFACT_BYTES || consumed > budget) {\n\t\t\t\tthrow new Error('current guide content exceeds its byte allowance')\n\t\t\t}\n\t\t\tselected[name] = descriptor.value\n\t\t}\n\t\treturn Object.freeze(selected)\n\t})\n\tif (!snapshot.success) {\n\t\tthrow new ScaffoldError('INVALID', 'Sync current guides are malformed', {\n\t\t\terror: snapshot.error,\n\t\t})\n\t}\n\treturn snapshot.value\n}\n\n/** Parse a safe Git branch path for the canonical raw-guide URL. */\nexport function parseSyncBranch(value: unknown): SyncBranch {\n\tconst segments = typeof value === 'string' ? value.split('/') : []\n\tif (\n\t\ttypeof value !== 'string' ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > MAX_SYNC_BRANCH_LENGTH ||\n\t\t!SYNC_BRANCH_PATTERN.test(value) ||\n\t\tvalue.includes('..') ||\n\t\tvalue.includes('@{') ||\n\t\tvalue === '@' ||\n\t\tsegments.some(\n\t\t\t(segment) =>\n\t\t\t\tsegment === '' ||\n\t\t\t\tsegment.startsWith('.') ||\n\t\t\t\tsegment.endsWith('.') ||\n\t\t\t\t/\\.lock$/iu.test(segment),\n\t\t)\n\t) {\n\t\tthrow new ScaffoldError('INVALID', 'Invalid Sync guide branch', { value })\n\t}\n\treturn value\n}\n\n/** Parse exact materializer options before allocating its emitter. */\nexport function parseMaterializerOptions(value: unknown): MaterializerOptions {\n\tif (value === undefined) return {}\n\tconst read = attempt(() => {\n\t\tif (!isRecord(value)) throw new Error('options must be a plain record')\n\t\tconst keys = Reflect.ownKeys(value)\n\t\tif (keys.some((key) => key !== 'host' && key !== 'on' && key !== 'error')) {\n\t\t\tthrow new Error('options contain an unknown key')\n\t\t}\n\t\tconst descriptors = keys.map((key) => Reflect.getOwnPropertyDescriptor(value, key))\n\t\tif (\n\t\t\tdescriptors.some(\n\t\t\t\t(descriptor) => descriptor === undefined || !Reflect.has(descriptor, 'value'),\n\t\t\t)\n\t\t) {\n\t\t\tthrow new Error('options must use data properties')\n\t\t}\n\t\treturn {\n\t\t\thost: Reflect.getOwnPropertyDescriptor(value, 'host')?.value,\n\t\t\ton: Reflect.getOwnPropertyDescriptor(value, 'on')?.value,\n\t\t\terror: Reflect.getOwnPropertyDescriptor(value, 'error')?.value,\n\t\t}\n\t})\n\tif (!read.success) {\n\t\tthrow new ScaffoldError('INVALID', 'Materializer options are malformed', {\n\t\t\terror: read.error,\n\t\t})\n\t}\n\tconst parsed = materializerOptionsContract.parse({\n\t\t...(read.value.host === undefined ? {} : { host: read.value.host }),\n\t})\n\tif (parsed === undefined || (parsed.host !== undefined && !isFilesystemPath(parsed.host))) {\n\t\tthrow new ScaffoldError('INVALID', 'Materializer host is malformed')\n\t}\n\tif (read.value.on !== undefined && !isMaterializerEventHooks(read.value.on)) {\n\t\tthrow new ScaffoldError('INVALID', 'Materializer event hooks are malformed')\n\t}\n\tconst ownedHooks = attempt(() => {\n\t\tconst sourceHooks = read.value.on\n\t\tif (sourceHooks === undefined) return undefined\n\t\tif (typeof sourceHooks !== 'object' || sourceHooks === null) {\n\t\t\tthrow new Error('event hooks are malformed')\n\t\t}\n\t\tconst copy = Reflect.getOwnPropertyDescriptor(sourceHooks, 'copy')?.value\n\t\tconst write = Reflect.getOwnPropertyDescriptor(sourceHooks, 'write')?.value\n\t\tconst remove = Reflect.getOwnPropertyDescriptor(sourceHooks, 'remove')?.value\n\t\tconst done = Reflect.getOwnPropertyDescriptor(sourceHooks, 'done')?.value\n\t\tconst error = Reflect.getOwnPropertyDescriptor(sourceHooks, 'error')?.value\n\t\tconst destroy = Reflect.getOwnPropertyDescriptor(sourceHooks, 'destroy')?.value\n\t\tif (\n\t\t\t(copy !== undefined && !isFunction(copy)) ||\n\t\t\t(write !== undefined && !isFunction(write)) ||\n\t\t\t(remove !== undefined && !isFunction(remove)) ||\n\t\t\t(done !== undefined && !isFunction(done)) ||\n\t\t\t(error !== undefined && !isFunction(error)) ||\n\t\t\t(destroy !== undefined && !isFunction(destroy))\n\t\t) {\n\t\t\tthrow new Error('event hooks are malformed')\n\t\t}\n\t\treturn Object.freeze({\n\t\t\t...(copy === undefined ? {} : { copy }),\n\t\t\t...(write === undefined ? {} : { write }),\n\t\t\t...(remove === undefined ? {} : { remove }),\n\t\t\t...(done === undefined ? {} : { done }),\n\t\t\t...(error === undefined ? {} : { error }),\n\t\t\t...(destroy === undefined ? {} : { destroy }),\n\t\t})\n\t})\n\tif (!ownedHooks.success) {\n\t\tthrow new ScaffoldError('INVALID', 'Materializer event hooks are malformed', {\n\t\t\terror: ownedHooks.error,\n\t\t})\n\t}\n\tconst on: EmitterHooks<MaterializerEventMap> | undefined = ownedHooks.value\n\tif (read.value.error !== undefined && !isEmitterErrorHandler(read.value.error)) {\n\t\tthrow new ScaffoldError('INVALID', 'Materializer error handler is malformed')\n\t}\n\treturn {\n\t\t...(parsed.host === undefined ? {} : { host: parsed.host }),\n\t\t...(on === undefined ? {} : { on }),\n\t\t...(read.value.error === undefined ? {} : { error: read.value.error }),\n\t}\n}\n\n/**\n * Parse the exact bounded `SyncOptions` boundary before allocating resources.\n *\n * @param value - Caller-supplied options.\n * @returns A fresh, validated options record.\n */\nexport function parseSyncOptions(value: unknown): SyncOptions {\n\tif (value === undefined) return {}\n\tconst read = attempt(() => {\n\t\tif (!isRecord(value)) throw new Error('options must be a plain record')\n\t\tconst keys = Reflect.ownKeys(value)\n\t\tif (\n\t\t\tkeys.some(\n\t\t\t\t(key) =>\n\t\t\t\t\tkey !== 'guides' &&\n\t\t\t\t\tkey !== 'registry' &&\n\t\t\t\t\tkey !== 'concurrency' &&\n\t\t\t\t\tkey !== 'retries' &&\n\t\t\t\t\tkey !== 'strict' &&\n\t\t\t\t\tkey !== 'limit' &&\n\t\t\t\t\tkey !== 'items' &&\n\t\t\t\t\tkey !== 'budget' &&\n\t\t\t\t\tkey !== 'on' &&\n\t\t\t\t\tkey !== 'error',\n\t\t\t)\n\t\t) {\n\t\t\tthrow new Error('options contain an unknown key')\n\t\t}\n\t\tconst descriptors = keys.map((key) => Reflect.getOwnPropertyDescriptor(value, key))\n\t\tif (\n\t\t\tdescriptors.some(\n\t\t\t\t(descriptor) => descriptor === undefined || !Reflect.has(descriptor, 'value'),\n\t\t\t)\n\t\t) {\n\t\t\tthrow new Error('options must use data properties')\n\t\t}\n\t\treturn {\n\t\t\tguides: Reflect.getOwnPropertyDescriptor(value, 'guides')?.value,\n\t\t\tregistry: Reflect.getOwnPropertyDescriptor(value, 'registry')?.value,\n\t\t\tconcurrency: Reflect.getOwnPropertyDescriptor(value, 'concurrency')?.value,\n\t\t\tretries: Reflect.getOwnPropertyDescriptor(value, 'retries')?.value,\n\t\t\tstrict: Reflect.getOwnPropertyDescriptor(value, 'strict')?.value,\n\t\t\tlimit: Reflect.getOwnPropertyDescriptor(value, 'limit')?.value,\n\t\t\titems: Reflect.getOwnPropertyDescriptor(value, 'items')?.value,\n\t\t\tbudget: Reflect.getOwnPropertyDescriptor(value, 'budget')?.value,\n\t\t\ton: Reflect.getOwnPropertyDescriptor(value, 'on')?.value,\n\t\t\terror: Reflect.getOwnPropertyDescriptor(value, 'error')?.value,\n\t\t}\n\t})\n\tif (!read.success) {\n\t\tthrow new ScaffoldError('INVALID', 'Sync options are malformed', { error: read.error })\n\t}\n\tconst nested = attempt(() => {\n\t\tlet guides: Record<string, unknown> | undefined\n\t\tif (read.value.guides !== undefined) {\n\t\t\tconst source = read.value.guides\n\t\t\tif (!isRecord(source)) throw new Error('guides must be a plain record')\n\t\t\tconst keys = Reflect.ownKeys(source)\n\t\t\tif (keys.some((key) => key !== 'base' && key !== 'branch' && key !== 'timeout')) {\n\t\t\t\tthrow new Error('guides contain an unknown key')\n\t\t\t}\n\t\t\tconst descriptors = keys.map((key) => Reflect.getOwnPropertyDescriptor(source, key))\n\t\t\tif (\n\t\t\t\tdescriptors.some(\n\t\t\t\t\t(descriptor) => descriptor === undefined || !Reflect.has(descriptor, 'value'),\n\t\t\t\t)\n\t\t\t) {\n\t\t\t\tthrow new Error('guides must use data properties')\n\t\t\t}\n\t\t\tguides = {\n\t\t\t\tbase: Reflect.getOwnPropertyDescriptor(source, 'base')?.value,\n\t\t\t\tbranch: Reflect.getOwnPropertyDescriptor(source, 'branch')?.value,\n\t\t\t\ttimeout: Reflect.getOwnPropertyDescriptor(source, 'timeout')?.value,\n\t\t\t}\n\t\t}\n\t\tlet registry: Record<string, unknown> | undefined\n\t\tif (read.value.registry !== undefined) {\n\t\t\tconst source = read.value.registry\n\t\t\tif (!isRecord(source)) throw new Error('registry must be a plain record')\n\t\t\tconst keys = Reflect.ownKeys(source)\n\t\t\tif (keys.some((key) => key !== 'base' && key !== 'timeout')) {\n\t\t\t\tthrow new Error('registry contains an unknown key')\n\t\t\t}\n\t\t\tconst descriptors = keys.map((key) => Reflect.getOwnPropertyDescriptor(source, key))\n\t\t\tif (\n\t\t\t\tdescriptors.some(\n\t\t\t\t\t(descriptor) => descriptor === undefined || !Reflect.has(descriptor, 'value'),\n\t\t\t\t)\n\t\t\t) {\n\t\t\t\tthrow new Error('registry must use data properties')\n\t\t\t}\n\t\t\tregistry = {\n\t\t\t\tbase: Reflect.getOwnPropertyDescriptor(source, 'base')?.value,\n\t\t\t\ttimeout: Reflect.getOwnPropertyDescriptor(source, 'timeout')?.value,\n\t\t\t}\n\t\t}\n\t\treturn { guides, registry }\n\t})\n\tif (!nested.success) {\n\t\tthrow new ScaffoldError('INVALID', 'Sync endpoint options are malformed', {\n\t\t\terror: nested.error,\n\t\t})\n\t}\n\tconst configuration = {\n\t\t...(nested.value.guides === undefined ? {} : { guides: nested.value.guides }),\n\t\t...(nested.value.registry === undefined ? {} : { registry: nested.value.registry }),\n\t\t...(read.value.concurrency === undefined ? {} : { concurrency: read.value.concurrency }),\n\t\t...(read.value.retries === undefined ? {} : { retries: read.value.retries }),\n\t\t...(read.value.strict === undefined ? {} : { strict: read.value.strict }),\n\t\t...(read.value.limit === undefined ? {} : { limit: read.value.limit }),\n\t\t...(read.value.items === undefined ? {} : { items: read.value.items }),\n\t\t...(read.value.budget === undefined ? {} : { budget: read.value.budget }),\n\t}\n\tconst parsed = syncOptionsContract.parse(configuration)\n\tif (parsed === undefined) {\n\t\tthrow new ScaffoldError('INVALID', 'Sync options are malformed')\n\t}\n\tif (read.value.on !== undefined && !isSyncEventHooks(read.value.on)) {\n\t\tthrow new ScaffoldError('INVALID', 'Sync event hooks are malformed')\n\t}\n\tconst ownedHooks = attempt(() => {\n\t\tconst sourceHooks = read.value.on\n\t\tif (sourceHooks === undefined) return undefined\n\t\tif (typeof sourceHooks !== 'object' || sourceHooks === null) {\n\t\t\tthrow new Error('event hooks are malformed')\n\t\t}\n\t\tconst guide = Reflect.getOwnPropertyDescriptor(sourceHooks, 'guide')?.value\n\t\tconst version = Reflect.getOwnPropertyDescriptor(sourceHooks, 'version')?.value\n\t\tconst packageListener = Reflect.getOwnPropertyDescriptor(sourceHooks, 'package')?.value\n\t\tconst write = Reflect.getOwnPropertyDescriptor(sourceHooks, 'write')?.value\n\t\tconst done = Reflect.getOwnPropertyDescriptor(sourceHooks, 'done')?.value\n\t\tconst error = Reflect.getOwnPropertyDescriptor(sourceHooks, 'error')?.value\n\t\tconst destroy = Reflect.getOwnPropertyDescriptor(sourceHooks, 'destroy')?.value\n\t\tif (\n\t\t\t(guide !== undefined && !isFunction(guide)) ||\n\t\t\t(version !== undefined && !isFunction(version)) ||\n\t\t\t(packageListener !== undefined && !isFunction(packageListener)) ||\n\t\t\t(write !== undefined && !isFunction(write)) ||\n\t\t\t(done !== undefined && !isFunction(done)) ||\n\t\t\t(error !== undefined && !isFunction(error)) ||\n\t\t\t(destroy !== undefined && !isFunction(destroy))\n\t\t) {\n\t\t\tthrow new Error('event hooks are malformed')\n\t\t}\n\t\treturn Object.freeze({\n\t\t\t...(guide === undefined ? {} : { guide }),\n\t\t\t...(version === undefined ? {} : { version }),\n\t\t\t...(packageListener === undefined ? {} : { package: packageListener }),\n\t\t\t...(write === undefined ? {} : { write }),\n\t\t\t...(done === undefined ? {} : { done }),\n\t\t\t...(error === undefined ? {} : { error }),\n\t\t\t...(destroy === undefined ? {} : { destroy }),\n\t\t})\n\t})\n\tif (!ownedHooks.success) {\n\t\tthrow new ScaffoldError('INVALID', 'Sync event hooks are malformed', {\n\t\t\terror: ownedHooks.error,\n\t\t})\n\t}\n\tconst on: EmitterHooks<SyncEventMap> | undefined = ownedHooks.value\n\tif (read.value.error !== undefined && !isEmitterErrorHandler(read.value.error)) {\n\t\tthrow new ScaffoldError('INVALID', 'Sync error handler is malformed')\n\t}\n\tconst guides =\n\t\tparsed.guides === undefined\n\t\t\t? undefined\n\t\t\t: {\n\t\t\t\t\t...(parsed.guides.base === undefined ? {} : { base: parseSyncBase(parsed.guides.base) }),\n\t\t\t\t\t...(parsed.guides.branch === undefined\n\t\t\t\t\t\t? {}\n\t\t\t\t\t\t: { branch: parseSyncBranch(parsed.guides.branch) }),\n\t\t\t\t\t...(parsed.guides.timeout === undefined ? {} : { timeout: parsed.guides.timeout }),\n\t\t\t\t}\n\tconst registry =\n\t\tparsed.registry === undefined\n\t\t\t? undefined\n\t\t\t: {\n\t\t\t\t\t...(parsed.registry.base === undefined\n\t\t\t\t\t\t? {}\n\t\t\t\t\t\t: { base: parseSyncBase(parsed.registry.base) }),\n\t\t\t\t\t...(parsed.registry.timeout === undefined ? {} : { timeout: parsed.registry.timeout }),\n\t\t\t\t}\n\treturn {\n\t\t...(guides === undefined ? {} : { guides }),\n\t\t...(registry === undefined ? {} : { registry }),\n\t\t...(parsed.concurrency === undefined ? {} : { concurrency: parsed.concurrency }),\n\t\t...(parsed.retries === undefined ? {} : { retries: parsed.retries }),\n\t\t...(parsed.strict === undefined ? {} : { strict: parsed.strict }),\n\t\t...(parsed.limit === undefined ? {} : { limit: parsed.limit }),\n\t\t...(parsed.items === undefined ? {} : { items: parsed.items }),\n\t\t...(parsed.budget === undefined ? {} : { budget: parsed.budget }),\n\t\t...(on === undefined ? {} : { on }),\n\t\t...(read.value.error === undefined ? {} : { error: read.value.error }),\n\t}\n}\n","import type { WriteAnchor, WriteExpectation, WritePrecondition } from './types.js'\nimport { randomUUID } from 'node:crypto'\nimport { lstatSync, mkdirSync, rmdirSync, rmSync } from 'node:fs'\nimport { basename, dirname, join, resolve } from 'node:path'\nimport { attempt } from '@orkestrel/contract'\nimport { findFileConflict, MAX_COLLECTION_ITEMS, ScaffoldError } from '@src/core'\nimport { WRITE_DIGEST_PATTERN } from './constants.js'\nimport { digestFile, resolvePhysicalPath } from './helpers.js'\nimport { parsePortablePaths, parseWritePreconditions } from './parsers.js'\nimport { isFilesystemPath, isMissingPathError, isPortablePath } from './validators.js'\n\n/**\n * Nominal, same-volume write-transaction state. Construction derives every\n * filesystem path from a target and portable relative paths; callers cannot\n * supply a deletion root or mutate captured arrays.\n */\nexport class WriteTransaction {\n\tstatic readonly #token = Object.freeze({})\n\n\treadonly #target: string\n\treadonly #root: string\n\treadonly #stage: string\n\treadonly #backup: string\n\treadonly #expectations: readonly WriteExpectation[]\n\treadonly #parents: readonly WriteAnchor[]\n\treadonly #directories: readonly WriteAnchor[]\n\treadonly #anchor: WriteAnchor\n\treadonly #existing: WriteAnchor | undefined\n\n\tconstructor(\n\t\ttoken: unknown,\n\t\ttarget: string,\n\t\troot: string,\n\t\tstage: string,\n\t\tbackup: string,\n\t\texpectations: readonly WriteExpectation[],\n\t\tparents: readonly WriteAnchor[],\n\t\tdirectories: readonly WriteAnchor[],\n\t\tanchor: WriteAnchor,\n\t\texisting: WriteAnchor | undefined,\n\t) {\n\t\tif (token !== WriteTransaction.#token) {\n\t\t\tthrow new ScaffoldError('WRITE', 'WriteTransaction must be created through create()')\n\t\t}\n\t\tthis.#target = target\n\t\tthis.#root = root\n\t\tthis.#stage = stage\n\t\tthis.#backup = backup\n\t\tthis.#expectations = Object.freeze([...expectations])\n\t\tthis.#parents = Object.freeze(parents.map((parent) => Object.freeze({ ...parent })))\n\t\tthis.#directories = Object.freeze(\n\t\t\tdirectories.map((directory) => Object.freeze({ ...directory })),\n\t\t)\n\t\tthis.#anchor = Object.freeze({ ...anchor })\n\t\tthis.#existing = existing === undefined ? undefined : Object.freeze({ ...existing })\n\t}\n\n\t/** Create private staging state and snapshot every destination before mutation. */\n\tstatic create(\n\t\ttarget: string,\n\t\tpaths: readonly string[],\n\t\tpreconditions?: readonly WritePrecondition[],\n\t): WriteTransaction {\n\t\tif (!isFilesystemPath(target)) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Write transaction target is malformed', { target })\n\t\t}\n\t\tconst resolvedTarget = resolve(target)\n\t\tconst requested = parsePortablePaths(paths, MAX_COLLECTION_ITEMS)\n\t\tif (requested === undefined) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Write transaction paths are malformed', {\n\t\t\t\ttarget: resolvedTarget,\n\t\t\t})\n\t\t}\n\t\tconst conditions =\n\t\t\tpreconditions === undefined\n\t\t\t\t? undefined\n\t\t\t\t: parseWritePreconditions(preconditions, MAX_COLLECTION_ITEMS)\n\t\tif (preconditions !== undefined && conditions === undefined) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Write transaction preconditions are malformed', {\n\t\t\t\ttarget: resolvedTarget,\n\t\t\t})\n\t\t}\n\t\tconst conflict = findFileConflict(requested)\n\t\tif (conflict !== undefined) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'WRITE',\n\t\t\t\t`Write transaction collision between \"${conflict[0]}\" and \"${conflict[1]}\"`,\n\t\t\t\t{ paths: conflict, committed: false },\n\t\t\t)\n\t\t}\n\t\tif (\n\t\t\tconditions !== undefined &&\n\t\t\t(conditions.length !== requested.length ||\n\t\t\t\trequested.some((path) => !conditions.some((condition) => condition.path === path)) ||\n\t\t\t\tconditions.some(\n\t\t\t\t\t(condition) =>\n\t\t\t\t\t\t!isPortablePath(condition.path) ||\n\t\t\t\t\t\t(condition.shape === 'file' &&\n\t\t\t\t\t\t\t(condition.digest === undefined || !WRITE_DIGEST_PATTERN.test(condition.digest))) ||\n\t\t\t\t\t\t(condition.shape === 'absent' && condition.digest !== undefined),\n\t\t\t\t))\n\t\t) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Write transaction preconditions are malformed', {\n\t\t\t\tpaths: requested,\n\t\t\t})\n\t\t}\n\t\tconst parent = dirname(resolvedTarget)\n\t\tconst missingParents: string[] = []\n\t\tlet ancestor = parent\n\t\tlet anchor: WriteAnchor | undefined\n\t\twhile (anchor === undefined) {\n\t\t\tconst status = attempt(() => lstatSync(ancestor))\n\t\t\tif (status.success) {\n\t\t\t\tif (!status.value.isDirectory() || status.value.isSymbolicLink()) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', 'Write transaction parent is not a real directory', {\n\t\t\t\t\t\ttarget: resolvedTarget,\n\t\t\t\t\t\tparent: ancestor,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tanchor = Object.freeze({\n\t\t\t\t\tpath: ancestor,\n\t\t\t\t\tdevice: status.value.dev,\n\t\t\t\t\tinode: status.value.ino,\n\t\t\t\t})\n\t\t\t\tbreak\n\t\t\t}\n\t\t\tif (!isMissingPathError(status.error)) {\n\t\t\t\tthrow new ScaffoldError('WRITE', 'Failed to inspect write transaction parent', {\n\t\t\t\t\ttarget: resolvedTarget,\n\t\t\t\t\tparent: ancestor,\n\t\t\t\t\terror: status.error,\n\t\t\t\t})\n\t\t\t}\n\t\t\tmissingParents.push(ancestor)\n\t\t\tconst next = dirname(ancestor)\n\t\t\tif (next === ancestor) {\n\t\t\t\tthrow new ScaffoldError('WRITE', 'Write transaction has no existing parent', {\n\t\t\t\t\ttarget: resolvedTarget,\n\t\t\t\t})\n\t\t\t}\n\t\t\tancestor = next\n\t\t}\n\t\tconst targetStatus = attempt(() => lstatSync(resolvedTarget))\n\t\tconst existing =\n\t\t\ttargetStatus.success &&\n\t\t\ttargetStatus.value.isDirectory() &&\n\t\t\t!targetStatus.value.isSymbolicLink()\n\t\t\t\t? Object.freeze({\n\t\t\t\t\t\tpath: resolvedTarget,\n\t\t\t\t\t\tdevice: targetStatus.value.dev,\n\t\t\t\t\t\tinode: targetStatus.value.ino,\n\t\t\t\t\t})\n\t\t\t\t: undefined\n\t\tif (!targetStatus.success && !isMissingPathError(targetStatus.error)) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Failed to inspect write transaction target', {\n\t\t\t\ttarget: resolvedTarget,\n\t\t\t\terror: targetStatus.error,\n\t\t\t})\n\t\t}\n\t\tif (targetStatus.success && existing === undefined) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Write transaction target is not a real directory', {\n\t\t\t\ttarget: resolvedTarget,\n\t\t\t})\n\t\t}\n\t\tconst expectations: WriteExpectation[] = []\n\t\tfor (const path of requested) {\n\t\t\tif (!isPortablePath(path)) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Invalid transaction path at ${path}`, { path })\n\t\t\t}\n\t\t\tconst precondition = conditions?.find((condition) => condition.path === path)\n\t\t\tconst destination = resolvePhysicalPath(resolvedTarget, path, 'WRITE', 'target')\n\t\t\tconst current = attempt(() => lstatSync(destination))\n\t\t\tif (!current.success) {\n\t\t\t\tif (!isMissingPathError(current.error)) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', `Failed to inspect transaction destination at ${path}`, {\n\t\t\t\t\t\tpath,\n\t\t\t\t\t\terror: current.error,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tif (precondition?.shape === 'file') {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', `Write precondition changed at ${path}`, {\n\t\t\t\t\t\tpath,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\texpectations.push(Object.freeze({ path, shape: 'absent' }))\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (\n\t\t\t\tcurrent.value.isSymbolicLink() ||\n\t\t\t\t(current.value.isFile() && current.value.nlink !== 1) ||\n\t\t\t\t(!current.value.isFile() && !current.value.isDirectory())\n\t\t\t) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Unsafe transaction destination at ${path}`, {\n\t\t\t\t\tpath,\n\t\t\t\t})\n\t\t\t}\n\t\t\tif (current.value.isDirectory()) {\n\t\t\t\tif (precondition !== undefined) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', `Write precondition changed at ${path}`, {\n\t\t\t\t\t\tpath,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\texpectations.push(\n\t\t\t\t\tObject.freeze({\n\t\t\t\t\t\tpath,\n\t\t\t\t\t\tshape: 'directory',\n\t\t\t\t\t\tdevice: current.value.dev,\n\t\t\t\t\t\tinode: current.value.ino,\n\t\t\t\t\t\tmodified: current.value.mtimeMs,\n\t\t\t\t\t\tsize: current.value.size,\n\t\t\t\t\t}),\n\t\t\t\t)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconst content = attempt(() => digestFile(destination))\n\t\t\tif (!content.success) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Failed to snapshot transaction destination at ${path}`, {\n\t\t\t\t\tpath,\n\t\t\t\t\terror: content.error,\n\t\t\t\t})\n\t\t\t}\n\t\t\tif (\n\t\t\t\tprecondition?.shape === 'absent' ||\n\t\t\t\t(precondition?.shape === 'file' && precondition.digest !== content.value)\n\t\t\t) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Write precondition changed at ${path}`, {\n\t\t\t\t\tpath,\n\t\t\t\t})\n\t\t\t}\n\t\t\texpectations.push(\n\t\t\t\tObject.freeze({\n\t\t\t\t\tpath,\n\t\t\t\t\tshape: 'file',\n\t\t\t\t\tdevice: current.value.dev,\n\t\t\t\t\tinode: current.value.ino,\n\t\t\t\t\tmodified: current.value.mtimeMs,\n\t\t\t\t\tsize: current.value.size,\n\t\t\t\t\tdigest: content.value,\n\t\t\t\t}),\n\t\t\t)\n\t\t}\n\t\tconst token = randomUUID()\n\t\tconst root = join(parent, `.${basename(resolvedTarget)}.write-${token}`)\n\t\tconst stage = join(root, 'stage')\n\t\tconst backup = join(root, 'backup')\n\t\tconst parents: WriteAnchor[] = []\n\t\tconst directories: WriteAnchor[] = []\n\t\tconst created = attempt(() => {\n\t\t\tconst anchored = lstatSync(anchor.path)\n\t\t\tif (\n\t\t\t\t!anchored.isDirectory() ||\n\t\t\t\tanchored.isSymbolicLink() ||\n\t\t\t\tanchored.dev !== anchor.device ||\n\t\t\t\tanchored.ino !== anchor.inode\n\t\t\t) {\n\t\t\t\tthrow new Error('write transaction anchor changed')\n\t\t\t}\n\t\t\tfor (const directory of [...missingParents].reverse()) {\n\t\t\t\tmkdirSync(directory)\n\t\t\t\tconst status = lstatSync(directory)\n\t\t\t\tif (!status.isDirectory() || status.isSymbolicLink()) {\n\t\t\t\t\tthrow new Error(`write transaction parent changed at ${directory}`)\n\t\t\t\t}\n\t\t\t\tparents.push(Object.freeze({ path: directory, device: status.dev, inode: status.ino }))\n\t\t\t}\n\t\t\tmkdirSync(root, { mode: 0o700 })\n\t\t\tconst rootStatus = lstatSync(root)\n\t\t\tif (!rootStatus.isDirectory() || rootStatus.isSymbolicLink()) {\n\t\t\t\tthrow new Error('write transaction root is not a real directory')\n\t\t\t}\n\t\t\tdirectories.push(Object.freeze({ path: root, device: rootStatus.dev, inode: rootStatus.ino }))\n\t\t\tmkdirSync(stage, { mode: 0o700 })\n\t\t\tconst stageStatus = lstatSync(stage)\n\t\t\tif (!stageStatus.isDirectory() || stageStatus.isSymbolicLink()) {\n\t\t\t\tthrow new Error('write transaction stage is not a real directory')\n\t\t\t}\n\t\t\tdirectories.push(\n\t\t\t\tObject.freeze({ path: stage, device: stageStatus.dev, inode: stageStatus.ino }),\n\t\t\t)\n\t\t\tmkdirSync(backup, { mode: 0o700 })\n\t\t\tconst backupStatus = lstatSync(backup)\n\t\t\tif (!backupStatus.isDirectory() || backupStatus.isSymbolicLink()) {\n\t\t\t\tthrow new Error('write transaction backup is not a real directory')\n\t\t\t}\n\t\t\tdirectories.push(\n\t\t\t\tObject.freeze({ path: backup, device: backupStatus.dev, inode: backupStatus.ino }),\n\t\t\t)\n\t\t\tfor (const directory of [...parents, ...directories]) {\n\t\t\t\tconst status = lstatSync(directory.path)\n\t\t\t\tif (\n\t\t\t\t\t!status.isDirectory() ||\n\t\t\t\t\tstatus.isSymbolicLink() ||\n\t\t\t\t\tstatus.dev !== directory.device ||\n\t\t\t\t\tstatus.ino !== directory.inode\n\t\t\t\t) {\n\t\t\t\t\tthrow new Error(`write transaction directory changed at ${directory.path}`)\n\t\t\t\t}\n\t\t\t}\n\t\t})\n\t\tif (!created.success) {\n\t\t\tconst privateState = attempt(() => {\n\t\t\t\tfor (const directory of directories) {\n\t\t\t\t\tconst status = lstatSync(directory.path)\n\t\t\t\t\tif (\n\t\t\t\t\t\t!status.isDirectory() ||\n\t\t\t\t\t\tstatus.isSymbolicLink() ||\n\t\t\t\t\t\tstatus.dev !== directory.device ||\n\t\t\t\t\t\tstatus.ino !== directory.inode\n\t\t\t\t\t) {\n\t\t\t\t\t\tthrow new Error(`write transaction directory changed at ${directory.path}`)\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tif (directories.length > 0) rmSync(root, { recursive: true })\n\t\t\t})\n\t\t\tif (privateState.success) {\n\t\t\t\tfor (const directory of [...parents].reverse()) {\n\t\t\t\t\tattempt(() => {\n\t\t\t\t\t\tconst status = lstatSync(directory.path)\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t!status.isDirectory() ||\n\t\t\t\t\t\t\tstatus.isSymbolicLink() ||\n\t\t\t\t\t\t\tstatus.dev !== directory.device ||\n\t\t\t\t\t\t\tstatus.ino !== directory.inode\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\tthrow new Error(`write transaction parent changed at ${directory.path}`)\n\t\t\t\t\t\t}\n\t\t\t\t\t\trmdirSync(directory.path)\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t}\n\t\t\tthrow new ScaffoldError('WRITE', 'Failed to create write transaction', {\n\t\t\t\ttarget: resolvedTarget,\n\t\t\t\troot,\n\t\t\t\terror: created.error,\n\t\t\t})\n\t\t}\n\t\treturn new WriteTransaction(\n\t\t\tWriteTransaction.#token,\n\t\t\tresolvedTarget,\n\t\t\troot,\n\t\t\tstage,\n\t\t\tbackup,\n\t\t\texpectations,\n\t\t\tparents,\n\t\t\tdirectories,\n\t\t\tanchor,\n\t\t\texisting,\n\t\t)\n\t}\n\n\tget target(): string {\n\t\treturn this.#target\n\t}\n\n\tget root(): string {\n\t\treturn this.#root\n\t}\n\n\tget stage(): string {\n\t\treturn this.#stage\n\t}\n\n\tget backup(): string {\n\t\treturn this.#backup\n\t}\n\n\tget expectations(): readonly WriteExpectation[] {\n\t\treturn this.#expectations\n\t}\n\n\tget parents(): readonly WriteAnchor[] {\n\t\treturn this.#parents\n\t}\n\n\tget directories(): readonly WriteAnchor[] {\n\t\treturn this.#directories\n\t}\n\n\tget anchor(): WriteAnchor {\n\t\treturn this.#anchor\n\t}\n\n\tget existing(): WriteAnchor | undefined {\n\t\treturn this.#existing\n\t}\n}\n","import type {\n\tArtifact,\n\tBlueprint,\n\tCatalogEntry,\n\tDependency,\n\tGuideSync,\n\tHostArtifact,\n\tPlan,\n\tScaffoldErrorCode,\n\tSnapshot,\n\tSyncReport,\n\tVersionSync,\n} from '@src/core'\nimport type { BlockquoteNode } from '@orkestrel/markdown'\nimport type {\n\tCatalogAllowance,\n\tGuideWrite,\n\tHostManifest,\n\tManifestEntry,\n\tWriteAnchor,\n\tWriteDirectoryResult,\n\tWriteExpectation,\n} from './types.js'\nimport { createHash, randomUUID } from 'node:crypto'\nimport {\n\tcloseSync,\n\tconstants as FS_CONSTANTS,\n\tcopyFileSync,\n\texistsSync,\n\tfstatSync,\n\tlinkSync,\n\tlstatSync,\n\tmkdirSync,\n\topenSync,\n\topendirSync,\n\treaddirSync,\n\treadSync,\n\trealpathSync,\n\trenameSync,\n\trmdirSync,\n\trmSync,\n\twriteFileSync,\n} from 'node:fs'\nimport { basename, dirname, join, relative as relativeOf, resolve, sep } from 'node:path'\nimport { fileURLToPath } from 'node:url'\nimport { attempt, isRecord, parseJSON, parseJSONAs } from '@orkestrel/contract'\nimport {\n\tflattenText,\n\tisBlockquoteNode,\n\tisParagraphNode,\n\tparseDocument,\n\twalkNodes,\n} from '@orkestrel/markdown'\nimport {\n\tblueprint,\n\tbytesToHex,\n\tcontentByteLength,\n\tDEFAULT_ENGINES,\n\tDEFAULT_VERSION,\n\tDEPENDENCY_NAME_PATTERN,\n\tdevDependenciesFor,\n\tfindFileConflict,\n\tfindPathConflict,\n\tGLOBAL_SETUP_PATH,\n\tHOST_PATHS,\n\tHEX_PATTERN,\n\tisWorkspaceName,\n\tMAX_ARTIFACT_BYTES,\n\tMAX_ARTIFACT_HEX_LENGTH,\n\tMAX_COLLECTION_ITEMS,\n\tMAX_MANIFEST_BYTES,\n\tMAX_TOTAL_ARTIFACT_BYTES,\n\tisPlan,\n\townDataValue,\n\tScaffoldError,\n\tSHOWCASE_CONFIG_PATH,\n\tsnapshotPlan,\n\tENVIRONMENTS,\n\tstableStringify,\n\tVERSION_PATTERN,\n} from '@src/core'\nimport {\n\tHOST_MANIFEST_PATH,\n\tMAX_FILESYSTEM_DEPTH,\n\tMAX_GUIDE_BYTES,\n\tMAX_HOST_DEPTH,\n\tMAX_HOST_ENTRIES,\n\tPRUNE_DIRECTORIES,\n} from './constants.js'\nimport {\n\tisHostManifest,\n\tisCatalogDescription,\n\tisCatalogAllowance,\n\tisFilesystemPath,\n\tisMissingPathError,\n\tisPortablePath,\n\tisSensitiveHostPath,\n\tisTerminalText,\n} from './validators.js'\nimport { parseFilesystemPaths, parsePortablePaths } from './parsers.js'\nimport { WriteTransaction } from './WriteTransaction.js'\n\n/**\n * Whether a path is an existing physical directory rather than a file or link.\n *\n * @param path - The filesystem path to inspect without following links.\n * @returns `true` only for a successful `lstat` reporting a directory.\n */\nexport function isRealDirectory(path: string): boolean {\n\tconst status = attempt(() => lstatSync(path).isDirectory())\n\treturn status.success && status.value\n}\n\n/**\n * Whether a path is an existing physical file rather than a directory or link.\n *\n * @param path - The filesystem path to inspect without following links.\n * @returns `true` only for a successful `lstat` reporting a single-link file.\n */\nexport function isRealFile(path: string): boolean {\n\tconst status = attempt(() => lstatSync(path))\n\treturn (\n\t\tstatus.success &&\n\t\tstatus.value.isFile() &&\n\t\t!status.value.isSymbolicLink() &&\n\t\tstatus.value.nlink === 1\n\t)\n}\n\n/**\n * Compute a bounded-memory SHA-256 digest for one file.\n *\n * @param path - The file to read.\n * @returns Its lowercase SHA-256 digest.\n */\nexport function digestFile(path: string): string {\n\tconst initial = lstatSync(path)\n\tif (!initial.isFile() || initial.isSymbolicLink() || initial.nlink !== 1) {\n\t\tthrow new Error(`Digest source is not a physical file at ${path}`)\n\t}\n\tif (initial.size > MAX_ARTIFACT_BYTES) {\n\t\tthrow new Error(`Digest source exceeds ${MAX_ARTIFACT_BYTES} bytes at ${path}`)\n\t}\n\tconst handle = openSync(path, 'r')\n\tconst hash = createHash('sha256')\n\tconst buffer = Buffer.allocUnsafe(65_536)\n\tconst read = attempt(() => {\n\t\tconst current = fstatSync(handle)\n\t\tif (\n\t\t\t!current.isFile() ||\n\t\t\tcurrent.nlink !== 1 ||\n\t\t\tcurrent.dev !== initial.dev ||\n\t\t\tcurrent.ino !== initial.ino\n\t\t) {\n\t\t\tthrow new Error(`Digest source changed before reading at ${path}`)\n\t\t}\n\t\tlet size = 0\n\t\tfor (;;) {\n\t\t\tconst length = readSync(handle, buffer, 0, buffer.byteLength, null)\n\t\t\tif (length === 0) break\n\t\t\tsize += length\n\t\t\tif (size > MAX_ARTIFACT_BYTES) {\n\t\t\t\tthrow new Error(`Digest source exceeds ${MAX_ARTIFACT_BYTES} bytes at ${path}`)\n\t\t\t}\n\t\t\thash.update(buffer.subarray(0, length))\n\t\t}\n\t\tconst after = fstatSync(handle)\n\t\tconst pathStatus = lstatSync(path)\n\t\tif (\n\t\t\tsize !== current.size ||\n\t\t\tafter.dev !== current.dev ||\n\t\t\tafter.ino !== current.ino ||\n\t\t\tafter.mtimeMs !== current.mtimeMs ||\n\t\t\tafter.size !== current.size ||\n\t\t\t!pathStatus.isFile() ||\n\t\t\tpathStatus.isSymbolicLink() ||\n\t\t\tpathStatus.nlink !== 1 ||\n\t\t\tpathStatus.dev !== current.dev ||\n\t\t\tpathStatus.ino !== current.ino\n\t\t) {\n\t\t\tthrow new Error(`Digest source changed while reading at ${path}`)\n\t\t}\n\t\treturn hash.digest('hex')\n\t})\n\tconst closed = attempt(() => closeSync(handle))\n\tif (!read.success) throw read.error\n\tif (!closed.success) throw closed.error\n\treturn read.value\n}\n\n/**\n * Compute SHA-256 from exact lowercase hexadecimal bytes without decoding the whole value at once.\n *\n * @param hex - Exact hexadecimal bytes.\n * @returns Their lowercase SHA-256 digest.\n */\nexport function digestHex(hex: string): string {\n\tif (hex.length > MAX_ARTIFACT_HEX_LENGTH || !HEX_PATTERN.test(hex)) {\n\t\tthrow new Error('Digest input is not bounded exact hexadecimal bytes')\n\t}\n\tconst hash = createHash('sha256')\n\tfor (let offset = 0; offset < hex.length; offset += 131_072) {\n\t\thash.update(Buffer.from(hex.slice(offset, offset + 131_072), 'hex'))\n\t}\n\treturn hash.digest('hex')\n}\n\n/**\n * Compute SHA-256 from UTF-8 text.\n *\n * @param value - The text to hash.\n * @returns Its lowercase SHA-256 digest.\n */\nexport function digestText(value: string): string {\n\treturn createHash('sha256').update(value, 'utf8').digest('hex')\n}\n\n/**\n * Digest the exact declared membership of a vendored host manifest.\n *\n * @param entries - The ordered file membership declarations.\n * @param roots - The ordered directory membership declarations.\n * @returns A SHA-256 digest independent of the manifest's stored digest field.\n */\nexport function digestHostManifest(\n\tentries: readonly ManifestEntry[],\n\troots: readonly string[],\n): string {\n\treturn digestText(stableStringify({ entries, roots }))\n}\n\n/**\n * Render the local pointer written when an upstream dependency guide is not vendored yet.\n *\n * @param source - The canonical `guides/src/<name>.md` source path.\n * @returns The deterministic pointer content.\n */\nexport function guideStub(source: string): string {\n\tconst short = source.slice('guides/src/'.length, source.length - '.md'.length)\n\treturn `> Vendored guide for @orkestrel/${short} — run \\`scaffold pull\\` to fetch it.\\n`\n}\n\n/**\n * Remove the canonical Orkestrel scope from a dependency name.\n *\n * @param name - A dependency name.\n * @returns Its unscoped member when canonical, otherwise the original name.\n */\nexport function packageShortName(name: string): string {\n\tconst prefix = '@orkestrel/'\n\treturn name.startsWith(prefix) ? name.slice(prefix.length) : name\n}\n\n/**\n * Read bounded physical local guide mirrors for package names.\n *\n * @param target - The package root.\n * @param names - The package names whose mirrors are eligible.\n * @returns Existing guide content keyed by package name.\n */\nexport function readGuideReferences(\n\ttarget: string,\n\tnames: readonly string[],\n): Readonly<Record<string, string>> {\n\tconst current: Record<string, string> = {}\n\tfor (const name of names) {\n\t\tconst path = `guides/src/${packageShortName(name)}.md`\n\t\tconst full = resolvePhysicalPath(target, path, 'TARGET', 'target')\n\t\tconst status = attempt(() => lstatSync(full))\n\t\tif (!status.success) {\n\t\t\tif (isMissingPathError(status.error)) continue\n\t\t\tthrow new ScaffoldError('TARGET', `Failed to inspect local guide at ${path}`, {\n\t\t\t\tpath,\n\t\t\t\terror: status.error,\n\t\t\t})\n\t\t}\n\t\tif (!status.value.isFile() || status.value.isSymbolicLink() || status.value.nlink !== 1) {\n\t\t\tthrow new ScaffoldError('TARGET', `Local guide is not a physical file at ${path}`, {\n\t\t\t\tpath,\n\t\t\t})\n\t\t}\n\t\tcurrent[name] = readFileText(target, path, 'TARGET', 'target')\n\t}\n\treturn Object.freeze(current)\n}\n\n/**\n * Assemble one synchronization report from already ordered guide and version outcomes.\n *\n * @param target - The target package root.\n * @param guides - Guide outcomes.\n * @param versions - Version outcomes.\n * @returns The derived whole report.\n */\nexport function syncReportOf(\n\ttarget: string,\n\tguides: readonly GuideSync[],\n\tversions: readonly VersionSync[],\n): SyncReport {\n\tconst failed = [...guides, ...versions].filter(\n\t\t(entry) => entry.freshness === 'missing' || entry.freshness === 'failed',\n\t).length\n\tconst clean =\n\t\tfailed === 0 &&\n\t\tguides.every((guide) => guide.freshness === 'current') &&\n\t\tversions.every((version) => version.freshness === 'current')\n\treturn { target, guides, versions, clean, failed }\n}\n\n// ============================================================================\n//  @orkestrel/scaffold/server — helpers.ts (AGENTS §5 source of truth). The\n//  server-only helpers `blueprintToPlan`'s green-field target law, the\n//  `diffPlan`-feeding target reader, `Sync`'s manifest reader, the\n//  `Materializer`'s vendored-host manifest, the vendored-host BUILD staging\n//  primitive (`stageHost`), and the\n//  `catalog` bin verb depend on: `isVacant`, `readTarget`, `readManifest`,\n//  `readHostManifest`, `readFileHex`, `listFiles`, `hydratePlan`,\n//  `discoverPackages`, `hostRoot`, `deriveBlueprint`, and `catalogPackages`.\n//  `selectOrkestrelEntries`, `locateHostSource`, and\n//  `storagePath` are exported module-scope helpers per AGENTS §5's\n//  no-nested-functions law — single-call-site status is not an exemption.\n// ============================================================================\n\n/**\n * Locate this MODULE's own installed package root — the nearest ancestor of\n * `import.meta.url` holding a `package.json` — and return its vendored\n * `dist/host` data root. THE single source of truth for the default\n * `Materializer` / `scaffold` bin host: once installed, walking up from the\n * module's own file (not `process.cwd()`, which points at whichever project\n * happens to be running) resolves to `node_modules/@orkestrel/scaffold`, the\n * correct default host — the package ships its vendored data with itself.\n * `dist/host` may not exist yet when this resolves from SOURCE under a test\n * runner; that is fine — existence is checked at the point of use, not here.\n *\n * @returns The absolute vendored `dist/host` path.\n * @throws `ScaffoldError('TARGET', …)` when no ancestor of this module's own\n *   location holds a `package.json`.\n *\n * @example\n * ```ts\n * import { hostRoot } from '@orkestrel/scaffold/server'\n *\n * hostRoot() // '/…/node_modules/@orkestrel/scaffold/dist/host'\n * ```\n */\nexport function hostRoot(): string {\n\tlet dir = dirname(fileURLToPath(import.meta.url))\n\tfor (;;) {\n\t\tif (existsSync(join(dir, 'package.json'))) return join(dir, 'dist', 'host')\n\t\tconst parent = dirname(dir)\n\t\tif (parent === dir) {\n\t\t\tthrow new ScaffoldError('TARGET', 'No package root found above the module location', {\n\t\t\t\tmodule: import.meta.url,\n\t\t\t})\n\t\t}\n\t\tdir = parent\n\t}\n}\n\n/**\n * Resolve the deepest existing ancestor of a path through the real filesystem.\n *\n * @param path - The absolute or relative path to resolve.\n * @returns A path whose existing prefix has been resolved through symlinks.\n */\nexport function resolveRealPath(path: string): string {\n\tif (!isFilesystemPath(path)) {\n\t\tthrow new ScaffoldError('TARGET', 'Filesystem path is malformed or exceeds its bounds')\n\t}\n\tlet current = resolve(path)\n\tconst unresolved: string[] = []\n\twhile (!existsSync(current)) {\n\t\tconst parent = dirname(current)\n\t\tif (parent === current || unresolved.length >= MAX_FILESYSTEM_DEPTH) {\n\t\t\tthrow new ScaffoldError('TARGET', 'Filesystem path has no bounded existing ancestor', {\n\t\t\t\tpath,\n\t\t\t\tlimit: MAX_FILESYSTEM_DEPTH,\n\t\t\t})\n\t\t}\n\t\tunresolved.unshift(relativeOf(parent, current))\n\t\tcurrent = parent\n\t}\n\tlet physical = realpathSync(current)\n\tfor (const segment of unresolved) physical = join(physical, segment)\n\treturn physical\n}\n\n/**\n * Resolve a path beneath a declared root and reject lexical or symlink escape.\n *\n * @param root - The containing filesystem root.\n * @param path - The candidate path, relative or absolute.\n * @param code - The coded error to raise on escape.\n * @param boundary - The boundary name used in diagnostics.\n * @returns The lexically resolved candidate after realpath-aware validation.\n */\nexport function resolveContainedPath(\n\troot: string,\n\tpath: string,\n\tcode: ScaffoldErrorCode,\n\tboundary: string,\n): string {\n\tif (!isFilesystemPath(root) || !isFilesystemPath(path)) {\n\t\tthrow new ScaffoldError(code, `${boundary} path is malformed or exceeds its bounds`, {\n\t\t\tpath,\n\t\t\troot,\n\t\t})\n\t}\n\tconst resolvedRoot = resolveRealPath(resolve(root))\n\tconst resolvedCandidate = resolveRealPath(resolve(root, path))\n\tif (resolvedCandidate !== resolvedRoot && !resolvedCandidate.startsWith(resolvedRoot + sep)) {\n\t\tthrow new ScaffoldError(code, `Path \"${path}\" escapes the ${boundary} root`, {\n\t\t\tpath,\n\t\t\troot,\n\t\t})\n\t}\n\treturn resolve(root, path)\n}\n\n/**\n * Resolve a contained path whose existing ancestor chain contains no links.\n *\n * @param root - The trusted lexical and physical root.\n * @param path - The portable root-relative path.\n * @param code - The coded error to raise on failure.\n * @param boundary - The boundary name used in diagnostics.\n * @returns The contained destination.\n * @throws `ScaffoldError` when containment fails or an ancestor is not a real directory.\n */\nexport function resolvePhysicalPath(\n\troot: string,\n\tpath: string,\n\tcode: ScaffoldErrorCode,\n\tboundary: string,\n): string {\n\tconst resolvedRoot = resolve(root)\n\tconst destination = resolveContainedPath(resolvedRoot, path, code, boundary)\n\tif (destination === resolvedRoot) {\n\t\tconst status = attempt(() => lstatSync(resolvedRoot))\n\t\tif (!status.success || !status.value.isDirectory() || status.value.isSymbolicLink()) {\n\t\t\tthrow new ScaffoldError(code, `${boundary} root is not a real directory`, {\n\t\t\t\tpath,\n\t\t\t\troot,\n\t\t\t\t...(status.success ? {} : { error: status.error }),\n\t\t\t})\n\t\t}\n\t\treturn destination\n\t}\n\tlet parent = dirname(destination)\n\tfor (;;) {\n\t\tif (existsSync(parent)) {\n\t\t\tconst status = attempt(() => lstatSync(parent))\n\t\t\tif (!status.success || !status.value.isDirectory() || status.value.isSymbolicLink()) {\n\t\t\t\tthrow new ScaffoldError(code, `${boundary} parent is not a real directory`, {\n\t\t\t\t\tpath,\n\t\t\t\t\tparent,\n\t\t\t\t\t...(status.success ? {} : { error: status.error }),\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\t\tif (parent === resolvedRoot) break\n\t\tconst next = dirname(parent)\n\t\tif (next === parent) {\n\t\t\tthrow new ScaffoldError(code, `${boundary} parent escapes its root`, {\n\t\t\t\tpath,\n\t\t\t\troot,\n\t\t\t})\n\t\t}\n\t\tparent = next\n\t}\n\treturn destination\n}\n\n/**\n * Revalidate one captured physical-directory identity without following links.\n *\n * @param anchor - The captured path, device, and inode.\n * @param boundary - The boundary name used in diagnostics.\n * @throws `ScaffoldError('WRITE', ...)` when the directory is missing or changed.\n */\nexport function validateWriteAnchor(anchor: WriteAnchor, boundary: string): void {\n\tconst status = attempt(() => lstatSync(anchor.path))\n\tif (\n\t\t!status.success ||\n\t\t!status.value.isDirectory() ||\n\t\tstatus.value.isSymbolicLink() ||\n\t\tstatus.value.dev !== anchor.device ||\n\t\tstatus.value.ino !== anchor.inode\n\t) {\n\t\tthrow new ScaffoldError('WRITE', `Write transaction ${boundary} changed`, {\n\t\t\tpath: anchor.path,\n\t\t\t...(status.success ? {} : { error: status.error }),\n\t\t})\n\t}\n}\n\n/**\n * Create a physical directory path one segment at a time behind captured identities.\n *\n * @param path - The absolute directory path to establish.\n * @param boundary - The boundary name used in diagnostics.\n * @returns The final directory anchor and the subset created by this call.\n */\nexport function createWriteDirectory(path: string, boundary: string): WriteDirectoryResult {\n\tconst destination = resolve(path)\n\tconst missing: string[] = []\n\tlet current = destination\n\tlet existing: WriteAnchor | undefined\n\tfor (;;) {\n\t\tconst status = attempt(() => lstatSync(current))\n\t\tif (status.success) {\n\t\t\tif (!status.value.isDirectory() || status.value.isSymbolicLink()) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `${boundary} is not a physical directory`, {\n\t\t\t\t\tpath: current,\n\t\t\t\t})\n\t\t\t}\n\t\t\texisting = Object.freeze({\n\t\t\t\tpath: current,\n\t\t\t\tdevice: status.value.dev,\n\t\t\t\tinode: status.value.ino,\n\t\t\t})\n\t\t\tbreak\n\t\t}\n\t\tif (!isMissingPathError(status.error)) {\n\t\t\tthrow new ScaffoldError('WRITE', `Failed to inspect ${boundary}`, {\n\t\t\t\tpath: current,\n\t\t\t\terror: status.error,\n\t\t\t})\n\t\t}\n\t\tmissing.push(current)\n\t\tconst parent = dirname(current)\n\t\tif (parent === current) {\n\t\t\tthrow new ScaffoldError('WRITE', `Cannot establish ${boundary}`, { path: destination })\n\t\t}\n\t\tcurrent = parent\n\t}\n\tconst created: WriteAnchor[] = []\n\tlet anchor = existing\n\tfor (const directory of [...missing].reverse()) {\n\t\tvalidateWriteAnchor(anchor, boundary)\n\t\tmkdirSync(directory)\n\t\tvalidateWriteAnchor(anchor, boundary)\n\t\tconst status = lstatSync(directory)\n\t\tif (!status.isDirectory() || status.isSymbolicLink()) {\n\t\t\tthrow new ScaffoldError('WRITE', `${boundary} changed while creating it`, {\n\t\t\t\tpath: directory,\n\t\t\t})\n\t\t}\n\t\tanchor = Object.freeze({\n\t\t\tpath: directory,\n\t\t\tdevice: status.dev,\n\t\t\tinode: status.ino,\n\t\t})\n\t\tcreated.push(anchor)\n\t}\n\treturn { anchor, created }\n}\n\n/**\n * Revalidate every private directory owned by a write transaction.\n *\n * @param transaction - The nominal transaction state.\n * @throws `ScaffoldError('WRITE', ...)` when any private directory changed.\n */\nexport function validateWriteDirectories(transaction: WriteTransaction): void {\n\tvalidateWriteAnchor(transaction.anchor, 'anchor')\n\tfor (const parent of transaction.parents) validateWriteAnchor(parent, 'parent')\n\tfor (const directory of transaction.directories) {\n\t\tvalidateWriteAnchor(directory, 'private directory')\n\t}\n}\n\n/**\n * Revalidate the transaction target against its original or transaction-owned identity.\n *\n * @param transaction - The nominal transaction state.\n * @param owned - A target directory created by the current commit.\n * @throws `ScaffoldError('WRITE', ...)` when the target identity changed.\n */\nexport function validateWriteTarget(\n\ttransaction: WriteTransaction,\n\towned: WriteAnchor | undefined,\n): void {\n\tvalidateWriteDirectories(transaction)\n\tconst expected = transaction.existing ?? owned\n\tconst status = attempt(() => lstatSync(transaction.target))\n\tif (expected === undefined) {\n\t\tif (status.success || !isMissingPathError(status.error)) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Write transaction target changed', {\n\t\t\t\ttarget: transaction.target,\n\t\t\t\t...(status.success ? {} : { error: status.error }),\n\t\t\t})\n\t\t}\n\t\treturn\n\t}\n\tif (\n\t\t!status.success ||\n\t\t!status.value.isDirectory() ||\n\t\tstatus.value.isSymbolicLink() ||\n\t\tstatus.value.dev !== expected.device ||\n\t\tstatus.value.ino !== expected.inode\n\t) {\n\t\tthrow new ScaffoldError('WRITE', 'Write transaction target changed', {\n\t\t\ttarget: transaction.target,\n\t\t\t...(status.success ? {} : { error: status.error }),\n\t\t})\n\t}\n}\n\n/**\n * Remove an uncommitted or already-committed write transaction's private residue.\n *\n * @param transaction - The transaction to discard.\n * @throws `ScaffoldError('WRITE', ...)` when its private root cannot be removed.\n */\nexport function discardWriteTransaction(transaction: WriteTransaction): void {\n\tif (!(transaction instanceof WriteTransaction)) {\n\t\tthrow new ScaffoldError('WRITE', 'Write transaction identity is invalid')\n\t}\n\tvalidateWriteDirectories(transaction)\n\tconst discarded = attempt(() => rmSync(transaction.root, { recursive: true }))\n\tif (!discarded.success) {\n\t\tthrow new ScaffoldError('WRITE', 'Failed to discard write transaction', {\n\t\t\ttarget: transaction.target,\n\t\t\troot: transaction.root,\n\t\t\terror: discarded.error,\n\t\t})\n\t}\n\tfor (const parent of [...transaction.parents].reverse()) {\n\t\tconst removed = attempt(() => {\n\t\t\tconst status = lstatSync(parent.path)\n\t\t\tif (\n\t\t\t\t!status.isDirectory() ||\n\t\t\t\tstatus.isSymbolicLink() ||\n\t\t\t\tstatus.dev !== parent.device ||\n\t\t\t\tstatus.ino !== parent.inode\n\t\t\t) {\n\t\t\t\tthrow new Error(`write transaction parent changed at ${parent.path}`)\n\t\t\t}\n\t\t\trmdirSync(parent.path)\n\t\t})\n\t\tif (!removed.success && !isMissingPathError(removed.error)) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Failed to discard write transaction parent', {\n\t\t\t\ttarget: transaction.target,\n\t\t\t\troot: transaction.root,\n\t\t\t\tparent: parent.path,\n\t\t\t\terror: removed.error,\n\t\t\t})\n\t\t}\n\t}\n}\n\n/**\n * Promote a complete staged set and roll every earlier destination back when\n * any later promotion fails.\n *\n * @param transaction - Same-volume sibling staging state.\n * @param paths - Portable target-relative files to promote.\n * @throws `ScaffoldError('WRITE', ...)` with recovery details on failure.\n */\nexport function commitWriteTransaction(\n\ttransaction: WriteTransaction,\n\tpaths: readonly string[],\n): void {\n\tif (!(transaction instanceof WriteTransaction)) {\n\t\tthrow new ScaffoldError('WRITE', 'Write transaction identity is invalid')\n\t}\n\tconst requested = parsePortablePaths(paths, MAX_COLLECTION_ITEMS)\n\tconst conflict = requested === undefined ? undefined : findFileConflict(requested)\n\tif (\n\t\trequested === undefined ||\n\t\tconflict !== undefined ||\n\t\trequested.length !== transaction.expectations.length ||\n\t\trequested.some(\n\t\t\t(path) => !transaction.expectations.some((expectation) => expectation.path === path),\n\t\t) ||\n\t\ttransaction.expectations.some(\n\t\t\t(expectation) => !requested.some((path) => path === expectation.path),\n\t\t)\n\t) {\n\t\tdiscardWriteTransaction(transaction)\n\t\tthrow new ScaffoldError(\n\t\t\t'WRITE',\n\t\t\trequested !== undefined && conflict === undefined\n\t\t\t\t? 'Write transaction paths do not match its expectations'\n\t\t\t\t: requested !== undefined\n\t\t\t\t\t? `Write transaction collision between \"${conflict?.[0]}\" and \"${conflict?.[1]}\"`\n\t\t\t\t\t: 'Write transaction paths are malformed',\n\t\t\t{\n\t\t\t\tpaths: conflict ?? requested ?? [],\n\t\t\t\tcommitted: false,\n\t\t\t},\n\t\t)\n\t}\n\tconst preflight = attempt(() => {\n\t\tvalidateWriteTarget(transaction, undefined)\n\t\tvalidateWriteDirectories(transaction)\n\t\tfor (const path of requested) {\n\t\t\tif (!isPortablePath(path)) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Invalid transaction path at ${path}`, { path })\n\t\t\t}\n\t\t\tconst expectation = transaction.expectations.find((candidate) => candidate.path === path)\n\t\t\tif (expectation === undefined) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Missing transaction expectation at ${path}`, { path })\n\t\t\t}\n\t\t\tconst staged = resolvePhysicalPath(transaction.stage, path, 'WRITE', 'staging')\n\t\t\tconst stagedStatus = attempt(() => lstatSync(staged))\n\t\t\tif (\n\t\t\t\t!stagedStatus.success ||\n\t\t\t\tstagedStatus.value.isSymbolicLink() ||\n\t\t\t\t!stagedStatus.value.isFile() ||\n\t\t\t\tstagedStatus.value.nlink !== 1\n\t\t\t) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Invalid staged transaction entry at ${path}`, {\n\t\t\t\t\tpath,\n\t\t\t\t\terror: stagedStatus.success ? undefined : stagedStatus.error,\n\t\t\t\t})\n\t\t\t}\n\t\t\tconst destination = resolvePhysicalPath(transaction.target, path, 'WRITE', 'target')\n\t\t\tconst current = attempt(() => lstatSync(destination))\n\t\t\tif (expectation.shape === 'absent') {\n\t\t\t\tif (current.success || !isMissingPathError(current.error)) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', `Transaction destination changed at ${path}`, {\n\t\t\t\t\t\tpath,\n\t\t\t\t\t\terror: current.success ? undefined : current.error,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (!current.success) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Transaction destination changed at ${path}`, {\n\t\t\t\t\tpath,\n\t\t\t\t\terror: current.error,\n\t\t\t\t})\n\t\t\t}\n\t\t\tconst shape = current.value.isDirectory() ? 'directory' : 'file'\n\t\t\tconst content = shape === 'file' ? attempt(() => digestFile(destination)) : undefined\n\t\t\tif (\n\t\t\t\tcurrent.value.isSymbolicLink() ||\n\t\t\t\t(current.value.isFile() && current.value.nlink !== 1) ||\n\t\t\t\tcurrent.value.isDirectory() !== stagedStatus.value.isDirectory() ||\n\t\t\t\tcurrent.value.isDirectory() ||\n\t\t\t\tshape !== expectation.shape ||\n\t\t\t\tcurrent.value.dev !== expectation.device ||\n\t\t\t\tcurrent.value.ino !== expectation.inode ||\n\t\t\t\tcurrent.value.mtimeMs !== expectation.modified ||\n\t\t\t\tcurrent.value.size !== expectation.size ||\n\t\t\t\t(content !== undefined && (!content.success || content.value !== expectation.digest))\n\t\t\t) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Transaction destination changed at ${path}`, {\n\t\t\t\t\tpath,\n\t\t\t\t\t...(content?.success === false ? { error: content.error } : {}),\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\t})\n\tif (!preflight.success) {\n\t\tconst cleanup = attempt(() => discardWriteTransaction(transaction))\n\t\tthrow new ScaffoldError('WRITE', 'Write transaction failed preflight', {\n\t\t\ttarget: transaction.target,\n\t\t\terror: preflight.error,\n\t\t\tcommitted: false,\n\t\t\t...(cleanup.success ? {} : { cleanup: cleanup.error }),\n\t\t})\n\t}\n\tconst preserved: string[] = []\n\tconst promoted: WriteExpectation[] = []\n\tconst createdParents: WriteAnchor[] = []\n\tlet ownedTarget: WriteAnchor | undefined\n\tconst committed = attempt(() => {\n\t\tfor (const path of requested) {\n\t\t\tvalidateWriteTarget(transaction, ownedTarget)\n\t\t\tvalidateWriteDirectories(transaction)\n\t\t\tif (!isPortablePath(path)) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Invalid transaction path at ${path}`, { path })\n\t\t\t}\n\t\t\tconst staged = resolvePhysicalPath(transaction.stage, path, 'WRITE', 'staging')\n\t\t\tconst stagedStatus = attempt(() => lstatSync(staged))\n\t\t\tif (\n\t\t\t\t!stagedStatus.success ||\n\t\t\t\tstagedStatus.value.isSymbolicLink() ||\n\t\t\t\t!stagedStatus.value.isFile() ||\n\t\t\t\tstagedStatus.value.nlink !== 1\n\t\t\t) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Invalid staged transaction entry at ${path}`, {\n\t\t\t\t\tpath,\n\t\t\t\t\terror: stagedStatus.success ? undefined : stagedStatus.error,\n\t\t\t\t})\n\t\t\t}\n\t\t\tconst destination = resolvePhysicalPath(transaction.target, path, 'WRITE', 'target')\n\t\t\tconst backup = resolvePhysicalPath(transaction.backup, path, 'WRITE', 'backup')\n\t\t\tconst expectation = transaction.expectations.find((candidate) => candidate.path === path)\n\t\t\tif (expectation === undefined) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Missing transaction expectation at ${path}`, { path })\n\t\t\t}\n\t\t\tconst current = attempt(() => lstatSync(destination))\n\t\t\tif (expectation.shape === 'absent') {\n\t\t\t\tif (current.success || !isMissingPathError(current.error)) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', `Transaction destination changed at ${path}`, {\n\t\t\t\t\t\tpath,\n\t\t\t\t\t\terror: current.success ? undefined : current.error,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t} else if (current.success) {\n\t\t\t\tconst shape = current.value.isDirectory() ? 'directory' : 'file'\n\t\t\t\tconst content = shape === 'file' ? attempt(() => digestFile(destination)) : undefined\n\t\t\t\tif (\n\t\t\t\t\tcurrent.value.isSymbolicLink() ||\n\t\t\t\t\t(current.value.isFile() && current.value.nlink !== 1) ||\n\t\t\t\t\tcurrent.value.isDirectory() !== stagedStatus.value.isDirectory() ||\n\t\t\t\t\tcurrent.value.isDirectory() ||\n\t\t\t\t\tshape !== expectation.shape ||\n\t\t\t\t\tcurrent.value.dev !== expectation.device ||\n\t\t\t\t\tcurrent.value.ino !== expectation.inode ||\n\t\t\t\t\tcurrent.value.mtimeMs !== expectation.modified ||\n\t\t\t\t\tcurrent.value.size !== expectation.size ||\n\t\t\t\t\t(content !== undefined && (!content.success || content.value !== expectation.digest))\n\t\t\t\t) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', `Transaction destination changed at ${path}`, {\n\t\t\t\t\t\tpath,\n\t\t\t\t\t\t...(content?.success === false ? { error: content.error } : {}),\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tmkdirSync(dirname(backup), { recursive: true })\n\t\t\t\trenameSync(destination, backup)\n\t\t\t\tpreserved.push(path)\n\t\t\t\tconst capturedStatus = lstatSync(backup)\n\t\t\t\tconst capturedContent = digestFile(backup)\n\t\t\t\tif (\n\t\t\t\t\t!capturedStatus.isFile() ||\n\t\t\t\t\tcapturedStatus.isSymbolicLink() ||\n\t\t\t\t\tcapturedStatus.nlink !== 1 ||\n\t\t\t\t\tcapturedStatus.dev !== expectation.device ||\n\t\t\t\t\tcapturedStatus.ino !== expectation.inode ||\n\t\t\t\t\tcapturedStatus.mtimeMs !== expectation.modified ||\n\t\t\t\t\tcapturedStatus.size !== expectation.size ||\n\t\t\t\t\tcapturedContent !== expectation.digest\n\t\t\t\t) {\n\t\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t\t'WRITE',\n\t\t\t\t\t\t`Transaction destination changed during preservation at ${path}`,\n\t\t\t\t\t\t{ path },\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Transaction destination changed at ${path}`, {\n\t\t\t\t\tpath,\n\t\t\t\t\terror: current.error,\n\t\t\t\t})\n\t\t\t}\n\t\t\tconst missingParents: string[] = []\n\t\t\tlet parent = dirname(destination)\n\t\t\twhile (parent !== dirname(transaction.target)) {\n\t\t\t\tconst status = attempt(() => lstatSync(parent))\n\t\t\t\tif (status.success) {\n\t\t\t\t\tif (\n\t\t\t\t\t\ttransaction.existing === undefined &&\n\t\t\t\t\t\townedTarget === undefined &&\n\t\t\t\t\t\tparent === transaction.target\n\t\t\t\t\t) {\n\t\t\t\t\t\tthrow new ScaffoldError('WRITE', 'Write transaction target changed', {\n\t\t\t\t\t\t\ttarget: transaction.target,\n\t\t\t\t\t\t})\n\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tif (!isMissingPathError(status.error)) throw status.error\n\t\t\t\tmissingParents.push(parent)\n\t\t\t\tparent = dirname(parent)\n\t\t\t}\n\t\t\tfor (const createdParent of [...missingParents].reverse()) {\n\t\t\t\tmkdirSync(createdParent)\n\t\t\t\tconst status = lstatSync(createdParent)\n\t\t\t\tif (!status.isDirectory() || status.isSymbolicLink()) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', `Write transaction parent changed at ${createdParent}`, {\n\t\t\t\t\t\ttarget: transaction.target,\n\t\t\t\t\t\tparent: createdParent,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tif (!createdParents.some((candidate) => candidate.path === createdParent)) {\n\t\t\t\t\tconst captured = Object.freeze({\n\t\t\t\t\t\tpath: createdParent,\n\t\t\t\t\t\tdevice: status.dev,\n\t\t\t\t\t\tinode: status.ino,\n\t\t\t\t\t})\n\t\t\t\t\tcreatedParents.push(captured)\n\t\t\t\t\tif (createdParent === transaction.target) ownedTarget = captured\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (transaction.existing === undefined && ownedTarget === undefined) {\n\t\t\t\tthrow new ScaffoldError('WRITE', 'Write transaction target was not created safely', {\n\t\t\t\t\ttarget: transaction.target,\n\t\t\t\t})\n\t\t\t}\n\t\t\tlinkSync(staged, destination)\n\t\t\tconst linkedStatus = lstatSync(destination)\n\t\t\tconst stagedAfterLink = lstatSync(staged)\n\t\t\tif (\n\t\t\t\t!linkedStatus.isFile() ||\n\t\t\t\tlinkedStatus.isSymbolicLink() ||\n\t\t\t\tlinkedStatus.dev !== stagedStatus.value.dev ||\n\t\t\t\tlinkedStatus.ino !== stagedStatus.value.ino ||\n\t\t\t\tstagedAfterLink.dev !== linkedStatus.dev ||\n\t\t\t\tstagedAfterLink.ino !== linkedStatus.ino\n\t\t\t) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Staged promotion changed at ${path}`, { path })\n\t\t\t}\n\t\t\tconst unlinked = attempt(() => rmSync(staged))\n\t\t\tif (!unlinked.success) {\n\t\t\t\tconst cleanup = attempt(() => {\n\t\t\t\t\tconst destinationStatus = lstatSync(destination)\n\t\t\t\t\tif (\n\t\t\t\t\t\tdestinationStatus.dev !== linkedStatus.dev ||\n\t\t\t\t\t\tdestinationStatus.ino !== linkedStatus.ino\n\t\t\t\t\t) {\n\t\t\t\t\t\tthrow new Error(`promoted file changed at ${path}`)\n\t\t\t\t\t}\n\t\t\t\t\trmSync(destination)\n\t\t\t\t})\n\t\t\t\tthrow new ScaffoldError('WRITE', `Failed to release staged link at ${path}`, {\n\t\t\t\t\tpath,\n\t\t\t\t\terror: unlinked.error,\n\t\t\t\t\tcleanup: cleanup.success ? undefined : cleanup.error,\n\t\t\t\t})\n\t\t\t}\n\t\t\tconst promotedStatus = lstatSync(destination)\n\t\t\tpromoted.push(\n\t\t\t\tObject.freeze({\n\t\t\t\t\tpath,\n\t\t\t\t\tshape: 'file',\n\t\t\t\t\tdevice: promotedStatus.dev,\n\t\t\t\t\tinode: promotedStatus.ino,\n\t\t\t\t\tmodified: promotedStatus.mtimeMs,\n\t\t\t\t\tsize: promotedStatus.size,\n\t\t\t\t\tdigest: digestFile(destination),\n\t\t\t\t}),\n\t\t\t)\n\t\t}\n\t})\n\tif (!committed.success) {\n\t\tconst recoveryErrors: unknown[] = []\n\t\tlet preserveResidue = false\n\t\tfor (const promotion of [...promoted].reverse()) {\n\t\t\tconst removed = attempt(() => {\n\t\t\t\tvalidateWriteTarget(transaction, ownedTarget)\n\t\t\t\tconst destination = resolvePhysicalPath(\n\t\t\t\t\ttransaction.target,\n\t\t\t\t\tpromotion.path,\n\t\t\t\t\t'WRITE',\n\t\t\t\t\t'target',\n\t\t\t\t)\n\t\t\t\tconst status = lstatSync(destination)\n\t\t\t\tconst shape = status.isDirectory() ? 'directory' : 'file'\n\t\t\t\tconst digest = shape === 'file' ? attempt(() => digestFile(destination)) : undefined\n\t\t\t\tif (\n\t\t\t\t\tstatus.isSymbolicLink() ||\n\t\t\t\t\tshape !== promotion.shape ||\n\t\t\t\t\tstatus.dev !== promotion.device ||\n\t\t\t\t\tstatus.ino !== promotion.inode ||\n\t\t\t\t\t(digest !== undefined &&\n\t\t\t\t\t\t(!digest.success ||\n\t\t\t\t\t\t\tstatus.mtimeMs !== promotion.modified ||\n\t\t\t\t\t\t\tstatus.size !== promotion.size ||\n\t\t\t\t\t\t\tdigest.value !== promotion.digest))\n\t\t\t\t) {\n\t\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t\t'WRITE',\n\t\t\t\t\t\t`Promoted transaction destination changed at ${promotion.path}`,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tpath: promotion.path,\n\t\t\t\t\t\t\t...(digest?.success === false ? { error: digest.error } : {}),\n\t\t\t\t\t\t},\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t\tif (shape === 'directory') {\n\t\t\t\t\tconst recovery = resolvePhysicalPath(\n\t\t\t\t\t\ttransaction.stage,\n\t\t\t\t\t\t`.rollback/${promotion.path}`,\n\t\t\t\t\t\t'WRITE',\n\t\t\t\t\t\t'rollback',\n\t\t\t\t\t)\n\t\t\t\t\tmkdirSync(dirname(recovery), { recursive: true })\n\t\t\t\t\tvalidateWriteTarget(transaction, ownedTarget)\n\t\t\t\t\trenameSync(destination, recovery)\n\t\t\t\t\tpreserveResidue = true\n\t\t\t\t} else {\n\t\t\t\t\trmSync(destination)\n\t\t\t\t}\n\t\t\t})\n\t\t\tif (!removed.success) recoveryErrors.push(removed.error)\n\t\t}\n\t\tfor (const path of [...preserved].reverse()) {\n\t\t\tconst restored = attempt(() => {\n\t\t\t\tvalidateWriteTarget(transaction, ownedTarget)\n\t\t\t\tvalidateWriteDirectories(transaction)\n\t\t\t\tconst destination = resolvePhysicalPath(transaction.target, path, 'WRITE', 'target')\n\t\t\t\tconst backup = resolvePhysicalPath(transaction.backup, path, 'WRITE', 'backup')\n\t\t\t\tmkdirSync(dirname(destination), { recursive: true })\n\t\t\t\tlinkSync(backup, destination)\n\t\t\t\trmSync(backup)\n\t\t\t})\n\t\t\tif (!restored.success) recoveryErrors.push(restored.error)\n\t\t}\n\t\tfor (const parent of [...createdParents].reverse()) {\n\t\t\tconst removed = attempt(() => {\n\t\t\t\tvalidateWriteTarget(transaction, ownedTarget)\n\t\t\t\tvalidateWriteDirectories(transaction)\n\t\t\t\tvalidateWriteAnchor(parent, 'created parent')\n\t\t\t\trmdirSync(parent.path)\n\t\t\t})\n\t\t\tif (!removed.success && !isMissingPathError(removed.error)) recoveryErrors.push(removed.error)\n\t\t}\n\t\tconst cleanup =\n\t\t\trecoveryErrors.length === 0 && !preserveResidue\n\t\t\t\t? attempt(() => discardWriteTransaction(transaction))\n\t\t\t\t: undefined\n\t\tthrow new ScaffoldError('WRITE', 'Write transaction failed before commit', {\n\t\t\ttarget: transaction.target,\n\t\t\troot: transaction.root,\n\t\t\terror: committed.error,\n\t\t\tcommitted: false,\n\t\t\trecovery: recoveryErrors,\n\t\t\tresidue: preserveResidue ? transaction.root : undefined,\n\t\t\tcleanup: cleanup?.success === false ? cleanup.error : undefined,\n\t\t})\n\t}\n\tvalidateWriteDirectories(transaction)\n\tconst cleanup = attempt(() => rmSync(transaction.root, { recursive: true }))\n\tif (!cleanup.success) {\n\t\tthrow new ScaffoldError('WRITE', 'Write transaction committed with cleanup residue', {\n\t\t\ttarget: transaction.target,\n\t\t\troot: transaction.root,\n\t\t\terror: cleanup.error,\n\t\t\tcommitted: true,\n\t\t})\n\t}\n}\n\n/**\n * Resolve and completely preflight the canonical guide destinations a sync may write.\n *\n * @param guides - Structurally validated behind guide results.\n * @param target - The repository root that owns `guides/src`.\n * @returns Each guide paired with its contained destination.\n * @throws `ScaffoldError('WRITE', ...)` before mutation for ownership, collision,\n * containment, or existing filesystem-shape violations.\n */\nexport function resolveGuideWrites(\n\tguides: readonly GuideSync[],\n\ttarget: string,\n): readonly GuideWrite[] {\n\tconst copied = attempt(() =>\n\t\tguides.map((guide) => {\n\t\t\tconst name = guide.name\n\t\t\tconst path = guide.path\n\t\t\tconst content = guide.content\n\t\t\tconst freshness = guide.freshness\n\t\t\tconst note = guide.note\n\t\t\tconst baseline = guide.baseline\n\t\t\treturn {\n\t\t\t\tname,\n\t\t\t\tpath,\n\t\t\t\tcontent,\n\t\t\t\tfreshness,\n\t\t\t\t...(note === undefined ? {} : { note }),\n\t\t\t\t...(baseline === undefined ? {} : { baseline }),\n\t\t\t}\n\t\t}),\n\t)\n\tif (!copied.success) {\n\t\tthrow new ScaffoldError('WRITE', 'Sync guides could not be read safely', {\n\t\t\terror: copied.error,\n\t\t})\n\t}\n\tconst behind = copied.value.filter((guide) => guide.freshness === 'behind')\n\tconst paths: string[] = []\n\tfor (const guide of behind) {\n\t\tif (!DEPENDENCY_NAME_PATTERN.test(guide.name)) {\n\t\t\tthrow new ScaffoldError('WRITE', `Invalid guide dependency name at ${guide.name}`, {\n\t\t\t\tname: guide.name,\n\t\t\t})\n\t\t}\n\t\tconst short = packageShortName(guide.name)\n\t\tconst expected = `guides/src/${short}.md`\n\t\tif (guide.path !== expected) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'WRITE',\n\t\t\t\t`Guide path \"${guide.path}\" does not match dependency ${guide.name}`,\n\t\t\t\t{ path: guide.path, expected },\n\t\t\t)\n\t\t}\n\t\tpaths.push(guide.path)\n\t}\n\tconst conflict = findFileConflict(paths)\n\tif (conflict !== undefined) {\n\t\tthrow new ScaffoldError(\n\t\t\t'WRITE',\n\t\t\t`Guide destination collision between \"${conflict[0]}\" and \"${conflict[1]}\"`,\n\t\t\t{ paths: conflict },\n\t\t)\n\t}\n\tconst resolvedTarget = resolve(target)\n\tconst destinations = behind.map((guide) => ({\n\t\tguide,\n\t\tdestination: resolvePhysicalPath(target, guide.path, 'WRITE', 'target'),\n\t}))\n\tfor (const { guide, destination } of destinations) {\n\t\tif (existsSync(destination)) {\n\t\t\tconst status = attempt(() => lstatSync(destination))\n\t\t\tif (\n\t\t\t\t!status.success ||\n\t\t\t\t!status.value.isFile() ||\n\t\t\t\tstatus.value.isSymbolicLink() ||\n\t\t\t\tstatus.value.nlink !== 1\n\t\t\t) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Guide destination is not a file at ${guide.path}`, {\n\t\t\t\t\tpath: guide.path,\n\t\t\t\t\t...(status.success ? {} : { error: status.error }),\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\t\tif (!destination.startsWith(resolvedTarget + sep)) {\n\t\t\tthrow new ScaffoldError('WRITE', `Guide destination escapes the target for ${guide.path}`, {\n\t\t\t\tpath: guide.path,\n\t\t\t\ttarget,\n\t\t\t})\n\t\t}\n\t}\n\treturn destinations\n}\n\n/**\n * Restore quarantined files to their original target-relative paths.\n *\n * @param transaction - The nominal transaction that owns the quarantine and target.\n * @param paths - The relative paths to restore, in their original move order.\n * @throws `ScaffoldError('WRITE', …)` after attempting every reverse-order\n *   restoration when one or more files could not be restored.\n */\nexport function restoreFiles(transaction: WriteTransaction, paths: readonly string[]): void {\n\tconst requested = parsePortablePaths(paths, MAX_COLLECTION_ITEMS)\n\tif (requested === undefined) {\n\t\tthrow new ScaffoldError('WRITE', 'Quarantine restore paths are malformed', {\n\t\t\tlimit: MAX_COLLECTION_ITEMS,\n\t\t})\n\t}\n\tconst failed: string[] = []\n\tconst errors: unknown[] = []\n\tfor (const path of [...requested].reverse()) {\n\t\tconst restored = attempt(() => {\n\t\t\tvalidateWriteTarget(transaction, undefined)\n\t\t\tconst from = resolvePhysicalPath(transaction.backup, path, 'WRITE', 'quarantine')\n\t\t\tconst to = resolvePhysicalPath(transaction.target, path, 'WRITE', 'target')\n\t\t\tconst sourceStatus = lstatSync(from)\n\t\t\tif (!sourceStatus.isFile() || sourceStatus.isSymbolicLink() || sourceStatus.nlink !== 1) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Invalid quarantined file at ${path}`, { path })\n\t\t\t}\n\t\t\tmkdirSync(dirname(to), { recursive: true })\n\t\t\tvalidateWriteTarget(transaction, undefined)\n\t\t\tlinkSync(from, to)\n\t\t\tvalidateWriteTarget(transaction, undefined)\n\t\t\trmSync(from)\n\t\t})\n\t\tif (!restored.success) {\n\t\t\tfailed.push(path)\n\t\t\terrors.push(restored.error)\n\t\t}\n\t}\n\tif (failed.length > 0) {\n\t\tthrow new ScaffoldError('WRITE', 'Failed to restore quarantined files', {\n\t\t\tsource: transaction.backup,\n\t\t\ttarget: transaction.target,\n\t\t\tpaths: failed,\n\t\t\terrors,\n\t\t})\n\t}\n}\n\n/**\n * Atomically promote a staged sibling directory while preserving recoverable state.\n *\n * @param staging - The completed staging directory.\n * @param target - The destination directory to replace.\n * @param backup - The sibling path reserved for the prior target.\n * @throws `ScaffoldError('WRITE', …)` with explicit `committed` and recovery paths.\n */\nexport function replaceDirectory(staging: string, target: string, backup: string): void {\n\tconst resolvedStaging = resolve(staging)\n\tconst resolvedTarget = resolve(target)\n\tconst resolvedBackup = resolve(backup)\n\tconst parent = dirname(resolvedTarget)\n\tconst paths = [resolvedStaging, resolvedTarget, resolvedBackup]\n\tif (dirname(resolvedStaging) !== parent || dirname(resolvedBackup) !== parent) {\n\t\tthrow new ScaffoldError('WRITE', 'Directory replacement paths must share one parent', {\n\t\t\tstaging: resolvedStaging,\n\t\t\ttarget: resolvedTarget,\n\t\t\tbackup: resolvedBackup,\n\t\t\tcommitted: false,\n\t\t})\n\t}\n\tif (new Set(paths.map((path) => path.toLowerCase())).size !== paths.length) {\n\t\tthrow new ScaffoldError('WRITE', 'Directory replacement paths must be distinct', {\n\t\t\tstaging: resolvedStaging,\n\t\t\ttarget: resolvedTarget,\n\t\t\tbackup: resolvedBackup,\n\t\t\tcommitted: false,\n\t\t})\n\t}\n\tconst parentStatus = attempt(() => lstatSync(parent))\n\tif (\n\t\t!parentStatus.success ||\n\t\t!parentStatus.value.isDirectory() ||\n\t\tparentStatus.value.isSymbolicLink()\n\t) {\n\t\tthrow new ScaffoldError('WRITE', 'Directory replacement parent must be a real directory', {\n\t\t\tstaging: resolvedStaging,\n\t\t\ttarget: resolvedTarget,\n\t\t\tbackup: resolvedBackup,\n\t\t\tcommitted: false,\n\t\t\t...(parentStatus.success ? {} : { error: parentStatus.error }),\n\t\t})\n\t}\n\tconst parentAnchor: WriteAnchor = Object.freeze({\n\t\tpath: parent,\n\t\tdevice: parentStatus.value.dev,\n\t\tinode: parentStatus.value.ino,\n\t})\n\tconst reserved = attempt(() => lstatSync(resolvedBackup))\n\tif (reserved.success) {\n\t\tthrow new ScaffoldError('WRITE', 'Directory replacement backup already exists', {\n\t\t\tstaging: resolvedStaging,\n\t\t\ttarget: resolvedTarget,\n\t\t\tbackup: resolvedBackup,\n\t\t\tcommitted: false,\n\t\t})\n\t}\n\tif (!isMissingPathError(reserved.error)) {\n\t\tthrow new ScaffoldError('WRITE', 'Failed to inspect directory replacement backup', {\n\t\t\tstaging: resolvedStaging,\n\t\t\ttarget: resolvedTarget,\n\t\t\tbackup: resolvedBackup,\n\t\t\tcommitted: false,\n\t\t\terror: reserved.error,\n\t\t})\n\t}\n\tconst staged = attempt(() => lstatSync(resolvedStaging))\n\tif (!staged.success || !staged.value.isDirectory() || staged.value.isSymbolicLink()) {\n\t\tthrow new ScaffoldError('WRITE', 'Directory replacement staging must be a real directory', {\n\t\t\tstaging: resolvedStaging,\n\t\t\ttarget: resolvedTarget,\n\t\t\tbackup: resolvedBackup,\n\t\t\tcommitted: false,\n\t\t\terror: staged.success ? undefined : staged.error,\n\t\t})\n\t}\n\tconst stagingAnchor: WriteAnchor = Object.freeze({\n\t\tpath: resolvedStaging,\n\t\tdevice: staged.value.dev,\n\t\tinode: staged.value.ino,\n\t})\n\tconst current = attempt(() => lstatSync(resolvedTarget))\n\tif (!current.success && !isMissingPathError(current.error)) {\n\t\tthrow new ScaffoldError('WRITE', 'Failed to inspect directory replacement target', {\n\t\t\tstaging: resolvedStaging,\n\t\t\ttarget: resolvedTarget,\n\t\t\tbackup: resolvedBackup,\n\t\t\tcommitted: false,\n\t\t\terror: current.error,\n\t\t})\n\t}\n\tif (current.success && (!current.value.isDirectory() || current.value.isSymbolicLink())) {\n\t\tthrow new ScaffoldError('WRITE', 'Directory replacement target must be a real directory', {\n\t\t\tstaging: resolvedStaging,\n\t\t\ttarget: resolvedTarget,\n\t\t\tbackup: resolvedBackup,\n\t\t\tcommitted: false,\n\t\t})\n\t}\n\tconst existing = current.success\n\tconst targetAnchor: WriteAnchor | undefined = current.success\n\t\t? Object.freeze({\n\t\t\t\tpath: resolvedTarget,\n\t\t\t\tdevice: current.value.dev,\n\t\t\t\tinode: current.value.ino,\n\t\t\t})\n\t\t: undefined\n\tlet preserved = false\n\tlet promoted = false\n\tconst replacement = attempt(() => {\n\t\tvalidateWriteAnchor(parentAnchor, 'directory replacement parent')\n\t\tvalidateWriteAnchor(stagingAnchor, 'directory replacement staging')\n\t\tif (existing) {\n\t\t\tif (targetAnchor === undefined) {\n\t\t\t\tthrow new Error('directory replacement target identity is missing')\n\t\t\t}\n\t\t\tvalidateWriteAnchor(targetAnchor, 'directory replacement target')\n\t\t\trenameSync(resolvedTarget, resolvedBackup)\n\t\t\tpreserved = true\n\t\t\tvalidateWriteAnchor(parentAnchor, 'directory replacement parent')\n\t\t\tvalidateWriteAnchor(\n\t\t\t\tObject.freeze({ ...targetAnchor, path: resolvedBackup }),\n\t\t\t\t'directory replacement backup',\n\t\t\t)\n\t\t\tconst vacated = attempt(() => lstatSync(resolvedTarget))\n\t\t\tif (vacated.success || !isMissingPathError(vacated.error)) {\n\t\t\t\tthrow new Error('directory replacement target was not vacated')\n\t\t\t}\n\t\t}\n\t\tvalidateWriteAnchor(parentAnchor, 'directory replacement parent')\n\t\tvalidateWriteAnchor(stagingAnchor, 'directory replacement staging')\n\t\trenameSync(resolvedStaging, resolvedTarget)\n\t\tpromoted = true\n\t\tvalidateWriteAnchor(parentAnchor, 'directory replacement parent')\n\t\tvalidateWriteAnchor(\n\t\t\tObject.freeze({ ...stagingAnchor, path: resolvedTarget }),\n\t\t\t'directory replacement target',\n\t\t)\n\t\tif (existing) {\n\t\t\tif (targetAnchor === undefined) {\n\t\t\t\tthrow new Error('directory replacement backup identity is missing')\n\t\t\t}\n\t\t\tvalidateWriteAnchor(\n\t\t\t\tObject.freeze({ ...targetAnchor, path: resolvedBackup }),\n\t\t\t\t'directory replacement backup',\n\t\t\t)\n\t\t\trmSync(resolvedBackup, { recursive: true, force: true })\n\t\t\tpreserved = false\n\t\t}\n\t\tvalidateWriteAnchor(parentAnchor, 'directory replacement parent')\n\t\tvalidateWriteAnchor(\n\t\t\tObject.freeze({ ...stagingAnchor, path: resolvedTarget }),\n\t\t\t'directory replacement target',\n\t\t)\n\t})\n\tif (replacement.success) return\n\tconst restored =\n\t\texisting && preserved && !promoted\n\t\t\t? attempt(() => {\n\t\t\t\t\tif (targetAnchor === undefined) {\n\t\t\t\t\t\tthrow new Error('directory replacement backup identity is missing')\n\t\t\t\t\t}\n\t\t\t\t\tvalidateWriteAnchor(parentAnchor, 'directory replacement parent')\n\t\t\t\t\tvalidateWriteAnchor(\n\t\t\t\t\t\tObject.freeze({ ...targetAnchor, path: resolvedBackup }),\n\t\t\t\t\t\t'directory replacement backup',\n\t\t\t\t\t)\n\t\t\t\t\tconst destination = attempt(() => lstatSync(resolvedTarget))\n\t\t\t\t\tif (destination.success || !isMissingPathError(destination.error)) {\n\t\t\t\t\t\tthrow new Error('directory replacement target is not vacant')\n\t\t\t\t\t}\n\t\t\t\t\trenameSync(resolvedBackup, resolvedTarget)\n\t\t\t\t\tvalidateWriteAnchor(targetAnchor, 'directory replacement target')\n\t\t\t\t\tpreserved = false\n\t\t\t\t})\n\t\t\t: undefined\n\tthrow new ScaffoldError('WRITE', 'Directory replacement failed', {\n\t\tstaging: resolvedStaging,\n\t\ttarget: resolvedTarget,\n\t\tbackup: preserved ? resolvedBackup : undefined,\n\t\tcommitted: promoted,\n\t\terror: replacement.error,\n\t\trestore: restored?.success === false ? restored.error : undefined,\n\t})\n}\n\n/**\n * Filter a manifest record's entries down to `@orkestrel/`-prefixed keys with\n * string values — the shared `dependencies` / `peerDependencies` /\n * `devDependencies` reader `deriveBlueprint` uses for every dependency-shaped\n * field.\n *\n * @param value - The candidate manifest field value (e.g. `parsed.dependencies`).\n * @returns The `@orkestrel/`-prefixed `[name, range]` entries; `[]` when\n *   `value` is not a plain object (per `isRecord`).\n *\n * @example\n * ```ts\n * import { selectOrkestrelEntries } from '@orkestrel/scaffold/server'\n *\n * selectOrkestrelEntries({ '@orkestrel/core': '^1.0.0', lodash: '^4.0.0' })\n * // [['@orkestrel/core', '^1.0.0']]\n * ```\n */\nexport function selectOrkestrelEntries(value: unknown): readonly (readonly [string, string])[] {\n\tif (!isRecord(value)) return []\n\tconst selected = attempt(() => {\n\t\tconst entries: [string, string][] = []\n\t\tfor (const [name, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(value))) {\n\t\t\tif (!Reflect.has(descriptor, 'value')) return []\n\t\t\tif (typeof descriptor.value === 'string' && DEPENDENCY_NAME_PATTERN.test(name)) {\n\t\t\t\tentries.push([name, descriptor.value])\n\t\t\t}\n\t\t}\n\t\treturn entries\n\t})\n\treturn selected.success ? selected.value : []\n}\n\n/**\n * Reconstruct a `Blueprint` from an EXISTING repo at `target` — the faithful\n * inverse `audit` / `repair` / `mirror` need to diff a live package against\n * its own would-be scaffold, rather than a fresh, dependency-less stand-in.\n *\n * @param target - The existing package directory to derive a `Blueprint` from.\n * @remarks\n * A scoped package name is stripped to its bounded safe short name. An\n * unscoped name is accepted only when the target is app-only, `private: true`,\n * and the name satisfies `isWorkspaceName`; every other name is a coded\n * `TARGET` failure. `src` is derived from `src/<environment>/` and `app` from\n * `app/<environment>/`; a target with no environment on either axis is also a coded\n * `TARGET` failure. The `bin` and `integration` facts probe physical\n * directories at `src/bin` and `tests/integration`. `services` is the sorted\n * set of direct vendor directories under `tests/service` that contain a test\n * at any depth, while `global` probes the physical exact-case `tests/setupGlobal.ts` file and `showcase`\n * probes the physical exact-case `configs/app/vite.showcase.config.ts` regular file; none is\n * inferred from the workspace name. `dependencies` /\n * `peers` are the `@orkestrel/`-prefixed entries of `manifest.dependencies` /\n * `manifest.peerDependencies` (a peer flagged `peerDependenciesMeta[name]\n * .optional === true` carries `optional: true`). `extras` is EVERY entry of\n * `manifest.devDependencies` (not only `@orkestrel/`-prefixed ones — an\n * external extra like `zod` must round-trip too), EXCLUDING the complete\n * generated dependency set `devDependenciesFor` emits for the reconstructed\n * blueprint's actual environments and structural axes. A devDependency ALSO present in\n * `manifest.peerDependencies` or `manifest.dependencies` (e.g. a peer\n * dev-installed for local testing) is likewise excluded from `extras` — it\n * already appears as a `peer`/`dependency` above, and double-counting it as\n * an `extra` would land it in `peers ∩ extras`, a blocking `validateBlueprint`\n * gate. `overrides` is always `[]` — derivation cannot recover a caller's\n * artifact-override intent from repository state.\n * @returns The reconstructed `Blueprint`.\n * @throws `ScaffoldError('TARGET', …)` when `target`'s manifest is unreadable\n *   (via `readManifest`), is not valid JSON, its name is unsafe for its\n *   publication mode, or `target` carries no source or application environment.\n * @throws `ScaffoldError('INVALID', …)` when service tests use the retired flat\n *   layout, a vendor directory has no test, or a service companion is missing.\n *\n * @example\n * ```ts\n * import { deriveBlueprint } from '@orkestrel/scaffold/server'\n *\n * deriveBlueprint('./packages/router') // { name: 'router', src: ['core', 'server'], … }\n * ```\n */\nexport function deriveBlueprint(target: string): Blueprint {\n\tconst text = readManifest(target)\n\tconst parsed = parseJSON(text)\n\tif (!isRecord(parsed)) {\n\t\tthrow new ScaffoldError('TARGET', `Manifest at ${target} is not a valid JSON object`, {\n\t\t\ttarget,\n\t\t})\n\t}\n\tconst src = ENVIRONMENTS.filter((environment) =>\n\t\tisRealDirectory(join(target, 'src', environment)),\n\t)\n\tconst app = ENVIRONMENTS.filter((environment) =>\n\t\tisRealDirectory(join(target, 'app', environment)),\n\t)\n\tif (src.length === 0 && app.length === 0) {\n\t\tthrow new ScaffoldError(\n\t\t\t'TARGET',\n\t\t\t`No source or application environment directory found under ${target}`,\n\t\t\t{ target },\n\t\t)\n\t}\n\tconst rawName = ownDataValue(parsed, 'name')\n\tif (typeof rawName !== 'string') {\n\t\tthrow new ScaffoldError('TARGET', 'Manifest name must be a string', {\n\t\t\ttarget,\n\t\t\tname: rawName,\n\t\t})\n\t}\n\tconst scopedValue = rawName.startsWith('@orkestrel/')\n\t\t? rawName.slice('@orkestrel/'.length)\n\t\t: undefined\n\tconst scopedName = isWorkspaceName(scopedValue)\n\tconst privateAppName =\n\t\tsrc.length === 0 && ownDataValue(parsed, 'private') === true && isWorkspaceName(rawName)\n\tif (!scopedName && !privateAppName) {\n\t\tthrow new ScaffoldError(\n\t\t\t'TARGET',\n\t\t\t`Manifest name \"${String(rawName)}\" is neither an @orkestrel package nor a private application`,\n\t\t\t{ target, name: rawName },\n\t\t)\n\t}\n\tconst name = scopedName ? scopedValue : rawName\n\n\tconst rawDescription = ownDataValue(parsed, 'description')\n\tconst description = typeof rawDescription === 'string' ? rawDescription : undefined\n\tconst rawKeywords = ownDataValue(parsed, 'keywords')\n\tconst keywords =\n\t\tArray.isArray(rawKeywords) && rawKeywords.every((word) => typeof word === 'string')\n\t\t\t? rawKeywords\n\t\t\t: []\n\tconst rawVersion = ownDataValue(parsed, 'version')\n\tconst version = typeof rawVersion === 'string' ? rawVersion : DEFAULT_VERSION\n\tconst rawEngines = ownDataValue(parsed, 'engines')\n\tconst rawNode = ownDataValue(rawEngines, 'node')\n\tconst engines = typeof rawNode === 'string' ? rawNode : DEFAULT_ENGINES\n\n\t// Structural only: a repo carries the self-hosting tax (bin field, scaffold\n\t// script, check/test/build:src:bin scripts, build:host, the srcBin vite\n\t// project) iff it ships its own src/bin — never derived from `name`.\n\tconst bin = isRealDirectory(join(target, 'src', 'bin'))\n\tconst integration = isRealDirectory(join(target, 'tests', 'integration'))\n\tconst serviceRoot = join(target, 'tests', 'service')\n\tconst services: string[] = []\n\tif (existsSync(serviceRoot)) {\n\t\tif (!isRealDirectory(serviceRoot)) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'INVALID',\n\t\t\t\t`Service root at ${serviceRoot} must be a physical directory`,\n\t\t\t\t{\n\t\t\t\t\ttarget,\n\t\t\t\t\tpath: 'tests/service',\n\t\t\t\t},\n\t\t\t)\n\t\t}\n\t\tconst serviceEntries = readdirSync(serviceRoot, { withFileTypes: true })\n\t\tconst flat = serviceEntries\n\t\t\t.filter((entry) => entry.name.endsWith('.test.ts') && !entry.isDirectory())\n\t\t\t.map((entry) => entry.name)\n\t\t\t.sort()\n\t\tif (flat.length > 0) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'INVALID',\n\t\t\t\t`Flat service tests are not supported; move ${flat.join(', ')} into tests/service/<vendor>/`,\n\t\t\t\t{ target, paths: flat.map((path) => `tests/service/${path}`) },\n\t\t\t)\n\t\t}\n\t\tfor (const entry of serviceEntries) {\n\t\t\tconst vendor = join(serviceRoot, entry.name)\n\t\t\tif (!isRealDirectory(vendor)) continue\n\t\t\tif (!isWorkspaceName(entry.name)) {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'INVALID',\n\t\t\t\t\t`Service vendor directory \"${entry.name}\" must use a bounded lowercase name`,\n\t\t\t\t\t{ target, path: `tests/service/${entry.name}` },\n\t\t\t\t)\n\t\t\t}\n\t\t\tconst tests = listFiles(vendor).filter((path) => path.endsWith('.test.ts'))\n\t\t\tif (tests.length === 0) {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'INVALID',\n\t\t\t\t\t`Service vendor \"${entry.name}\" contains no test; add tests/service/${entry.name}/**/*.test.ts or remove the directory`,\n\t\t\t\t\t{ target, service: entry.name },\n\t\t\t\t)\n\t\t\t}\n\t\t\tconst setup = `tests/service/${entry.name}/setup.ts`\n\t\t\tif (!isRealFile(join(target, setup))) {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'INVALID',\n\t\t\t\t\t`Service vendor \"${entry.name}\" is missing ${setup}; add a readiness module that probes and warms the vendor and throws when unavailable`,\n\t\t\t\t\t{ target, service: entry.name, missing: setup },\n\t\t\t\t)\n\t\t\t}\n\t\t\tservices.push(entry.name)\n\t\t}\n\t\tservices.sort()\n\t}\n\tconst showcaseRoot = join(target, dirname(SHOWCASE_CONFIG_PATH))\n\tconst showcaseEntries = attempt(() => readdirSync(showcaseRoot))\n\tconst showcase =\n\t\tshowcaseEntries.success &&\n\t\tshowcaseEntries.value.includes(basename(SHOWCASE_CONFIG_PATH)) &&\n\t\tisRealFile(join(target, SHOWCASE_CONFIG_PATH))\n\tconst tests = join(target, dirname(GLOBAL_SETUP_PATH))\n\tconst entries = attempt(() => readdirSync(tests))\n\tconst global =\n\t\tentries.success &&\n\t\tentries.value.includes(basename(GLOBAL_SETUP_PATH)) &&\n\t\tisRealFile(join(target, GLOBAL_SETUP_PATH))\n\tconst rawDependencies = ownDataValue(parsed, 'dependencies')\n\tconst rawPeerDependencies = ownDataValue(parsed, 'peerDependencies')\n\tconst dependencies: Dependency[] = selectOrkestrelEntries(rawDependencies).map(\n\t\t([depName, range]) => ({ name: depName, range }),\n\t)\n\n\tconst rawPeersMeta = ownDataValue(parsed, 'peerDependenciesMeta')\n\tconst peersMeta = isRecord(rawPeersMeta) ? rawPeersMeta : undefined\n\tconst peers: Dependency[] = selectOrkestrelEntries(rawPeerDependencies).map(\n\t\t([depName, range]) => {\n\t\t\tconst meta = ownDataValue(peersMeta, depName)\n\t\t\treturn isRecord(meta) && ownDataValue(meta, 'optional') === true\n\t\t\t\t? { name: depName, range, optional: true }\n\t\t\t\t: { name: depName, range }\n\t\t},\n\t)\n\n\t// A devDependency that ALSO appears in peerDependencies or dependencies is\n\t// excluded from extras — it already appears as a peer/dependency above,\n\t// and leaving it in extras would land it in `peers ∩ extras`, a blocking\n\t// `validateBlueprint` gate. Middleware-shaped packages dev-install a peer\n\t// for local testing.\n\tconst peerAndDependencyNames = new Set([\n\t\t...selectOrkestrelEntries(rawPeerDependencies).map(([depName]) => depName),\n\t\t...selectOrkestrelEntries(rawDependencies).map(([depName]) => depName),\n\t])\n\tconst generatedDevDependencies = new Set(\n\t\tObject.keys(\n\t\t\tdevDependenciesFor(\n\t\t\t\tblueprint(name, {\n\t\t\t\t\tsrc,\n\t\t\t\t\tapp,\n\t\t\t\t\tdependencies,\n\t\t\t\t\tpeers,\n\t\t\t\t\textras: [],\n\t\t\t\t\tbin,\n\t\t\t\t\tintegration,\n\t\t\t\t\tservices,\n\t\t\t\t\tglobal,\n\t\t\t\t\tshowcase,\n\t\t\t\t}),\n\t\t\t),\n\t\t),\n\t)\n\t// EVERY devDependency, not only `@orkestrel/`-prefixed ones, is a candidate\n\t// `extras` entry — an external extra (e.g. `zod`) must round-trip through\n\t// derivation exactly like an `@orkestrel/`-scoped one, or a package with a\n\t// HAND-ADDED devDependency (recovered here from the manifest's\n\t// devDependencies minus the generated baseline) audits DRIFTED against\n\t// its own manifest.\n\tconst rawDevDependencies = ownDataValue(parsed, 'devDependencies')\n\tconst devDependencies = isRecord(rawDevDependencies) ? rawDevDependencies : {}\n\tconst extras: Dependency[] = Object.entries(devDependencies)\n\t\t.filter((entry): entry is [string, string] => typeof entry[1] === 'string')\n\t\t.filter(\n\t\t\t([depName]) => !generatedDevDependencies.has(depName) && !peerAndDependencyNames.has(depName),\n\t\t)\n\t\t.map(([depName, range]) => ({ name: depName, range }))\n\treturn blueprint(name, {\n\t\t...(description === undefined ? {} : { description }),\n\t\tkeywords,\n\t\tsrc,\n\t\tapp,\n\t\tdependencies,\n\t\tpeers,\n\t\textras,\n\t\tversion,\n\t\tengines,\n\t\toverrides: [],\n\t\tbin,\n\t\tintegration,\n\t\tservices,\n\t\tglobal,\n\t\tshowcase,\n\t})\n}\n\n/**\n * Whether a target path is absent, empty, or contains nothing but a `.git`\n * directory — the green-field target law `Materializer.materialize` enforces.\n *\n * @param target - The candidate target directory path.\n * @returns `true` when `target` is safe to materialize a fresh package into.\n *\n * @example\n * ```ts\n * import { isVacant } from '@orkestrel/scaffold/server'\n *\n * isVacant('./packages/router-new') // true — absent, empty, or only a .git dir\n * ```\n */\nexport function isVacant(target: string): boolean {\n\tif (!isFilesystemPath(target)) return false\n\tconst status = attempt(() => lstatSync(target))\n\tif (!status.success) return isMissingPathError(status.error)\n\tif (!status.value.isDirectory() || status.value.isSymbolicLink()) return false\n\tconst handle = opendirSync(target)\n\tlet first: string | undefined\n\tlet second = false\n\ttry {\n\t\tfirst = handle.readSync()?.name\n\t\tsecond = first === undefined ? false : handle.readSync() !== null\n\t} finally {\n\t\thandle.closeSync()\n\t}\n\tif (first === undefined) return true\n\tif (second || first !== '.git') return false\n\tconst metadata = lstatSync(join(target, '.git'))\n\treturn metadata.isDirectory() && !metadata.isSymbolicLink()\n}\n\n/**\n * Read a target's current bytes at a set of relative paths into a\n * byte-exact hexadecimal {@link Snapshot} — the I/O that feeds `diffPlan`.\n *\n * @param target - The target directory to read from.\n * @param paths - The plan-relative artifact paths to probe.\n * @returns A snapshot keyed by path; each file maps to its exact lowercase\n *   hexadecimal bytes and a directly requested directory maps to `''`\n *   (presence only). An absent path is omitted entirely.\n * @throws `ScaffoldError('TARGET', …)` when an EXISTING path fails to read\n *   (e.g. `EACCES` / `EPERM`) — carries the offending relative `path` (and\n *   the resolved `full` path) in `context`. An absent path is never an\n *   error — it is simply omitted, per the return contract above.\n *\n * @example\n * ```ts\n * import { readTarget } from '@orkestrel/scaffold/server'\n *\n * readTarget('./packages/router', ['package.json', 'src/core/index.ts'])\n * // { 'package.json': '7b226e616d65223a…', 'src/core/index.ts': '6578706f7274…' }\n * ```\n */\nexport function readTarget(target: string, paths: readonly string[]): Snapshot {\n\tif (!isFilesystemPath(target)) {\n\t\tthrow new ScaffoldError('TARGET', 'Target path is malformed or exceeds its bounds', { target })\n\t}\n\tconst requested = parsePortablePaths(paths, MAX_COLLECTION_ITEMS)\n\tif (requested === undefined) {\n\t\tthrow new ScaffoldError('TARGET', 'Target snapshot paths are malformed', {\n\t\t\ttarget,\n\t\t\tlimit: MAX_COLLECTION_ITEMS,\n\t\t})\n\t}\n\tlet remaining = MAX_TOTAL_ARTIFACT_BYTES\n\tconst entries: [path: string, hex: string][] = []\n\tfor (const path of requested) {\n\t\tconst full = resolvePhysicalPath(target, path, 'TARGET', 'target')\n\t\tif (!existsSync(full)) continue\n\t\tconst status = attempt(() => lstatSync(full))\n\t\tif (\n\t\t\t!status.success ||\n\t\t\tstatus.value.isSymbolicLink() ||\n\t\t\t(!status.value.isDirectory() &&\n\t\t\t\t(!status.value.isFile() || status.value.nlink !== 1 || status.value.size > remaining))\n\t\t) {\n\t\t\tthrow new ScaffoldError('TARGET', `Failed to read target file at ${path}`, {\n\t\t\t\tpath,\n\t\t\t\tfull,\n\t\t\t\tlimit: MAX_TOTAL_ARTIFACT_BYTES,\n\t\t\t\t...(status.success ? {} : { error: status.error }),\n\t\t\t})\n\t\t}\n\t\tif (status.value.isDirectory()) {\n\t\t\tentries.push([path, ''])\n\t\t\tcontinue\n\t\t}\n\t\tconst hex = readFileHex(\n\t\t\ttarget,\n\t\t\tpath,\n\t\t\t'TARGET',\n\t\t\t'target',\n\t\t\tMath.min(MAX_ARTIFACT_BYTES, remaining),\n\t\t)\n\t\tremaining -= hex.length / 2\n\t\tentries.push([path, hex])\n\t}\n\treturn Object.fromEntries(entries)\n}\n\n/**\n * Read `target/package.json` text — the read that feeds `manifestToDependencies`.\n *\n * @param target - The target directory to read the manifest from.\n * @returns The manifest file's raw text.\n * @throws `ScaffoldError('TARGET', …)` when the manifest is absent or\n *   unreadable (e.g. `EACCES` / `EPERM`) — carries the resolved `full` path\n *   in `context`.\n *\n * @example\n * ```ts\n * import { readManifest } from '@orkestrel/scaffold/server'\n *\n * readManifest('./packages/router') // '{ \"name\": \"@orkestrel/router\", … }'\n * ```\n */\nexport function readManifest(target: string): string {\n\tif (!isFilesystemPath(target)) {\n\t\tthrow new ScaffoldError('TARGET', 'Manifest target is malformed or exceeds its bounds', {\n\t\t\ttarget,\n\t\t})\n\t}\n\tconst full = join(target, 'package.json')\n\tconst result = attempt(() =>\n\t\treadFileText(target, 'package.json', 'TARGET', 'target', MAX_MANIFEST_BYTES),\n\t)\n\tif (!result.success) {\n\t\tthrow new ScaffoldError('TARGET', `Failed to read manifest at ${full}`, {\n\t\t\ttarget,\n\t\t\tfull,\n\t\t\terror: result.error,\n\t\t})\n\t}\n\treturn result.value\n}\n\n/**\n * Read and validate a vendored host root's `manifest.json`, when present.\n *\n * @param host - The host root to probe.\n * @returns The parsed complete manifest, or `undefined` when `host` has no\n *   `manifest.json` — the raw-repo-root fallback (`Materializer` then maps\n *   an artifact's `source` to `host` 1:1, no vendored staging indirection).\n * @throws `ScaffoldError('TARGET', …)` when `manifest.json` exists but is\n *   unreadable, malformed, membership-corrupted, collision-prone,\n *   root-incomplete, or does not map bijectively and case-exactly onto real\n *   contained storage files.\n *\n * @example\n * ```ts\n * import { readHostManifest } from '@orkestrel/scaffold/server'\n *\n * readHostManifest('./dist/host') // HostManifest | undefined\n * ```\n */\nexport function readHostManifest(host: string): HostManifest | undefined {\n\tif (!isFilesystemPath(host)) {\n\t\tthrow new ScaffoldError('TARGET', 'Host path is malformed or exceeds its bounds', { host })\n\t}\n\tconst full = resolvePhysicalPath(host, HOST_MANIFEST_PATH, 'TARGET', 'host')\n\tif (!existsSync(full)) return undefined\n\tconst text = attempt(() =>\n\t\treadFileText(host, HOST_MANIFEST_PATH, 'TARGET', 'host', MAX_MANIFEST_BYTES),\n\t)\n\tif (!text.success) {\n\t\tthrow new ScaffoldError('TARGET', `Failed to read host manifest at ${full}`, {\n\t\t\thost,\n\t\t\tfull,\n\t\t\terror: text.error,\n\t\t})\n\t}\n\tconst manifest = parseJSONAs(text.value, isHostManifest)\n\tif (manifest === undefined) {\n\t\tthrow new ScaffoldError('TARGET', `Host manifest at ${full} is malformed`, { host, full })\n\t}\n\tif (manifest.digest !== digestHostManifest(manifest.entries, manifest.roots)) {\n\t\tthrow new ScaffoldError('TARGET', `Host manifest membership at ${full} is corrupted`, {\n\t\t\thost,\n\t\t\tfull,\n\t\t})\n\t}\n\tconst destinationConflict = findFileConflict(manifest.entries.map((entry) => entry.destination))\n\tif (destinationConflict !== undefined) {\n\t\tthrow new ScaffoldError(\n\t\t\t'TARGET',\n\t\t\t`Host manifest destination collision between \"${destinationConflict[0]}\" and \"${destinationConflict[1]}\"`,\n\t\t\t{ host, full, field: 'destination', paths: destinationConflict },\n\t\t)\n\t}\n\tconst storageConflict = findFileConflict([\n\t\tHOST_MANIFEST_PATH,\n\t\t...manifest.entries.map((entry) => entry.storage),\n\t])\n\tif (storageConflict !== undefined) {\n\t\tthrow new ScaffoldError(\n\t\t\t'TARGET',\n\t\t\t`Host manifest storage collision between \"${storageConflict[0]}\" and \"${storageConflict[1]}\"`,\n\t\t\t{ host, full, field: 'storage', paths: storageConflict },\n\t\t)\n\t}\n\tconst rootConflict = findPathConflict(manifest.roots)\n\tif (rootConflict !== undefined) {\n\t\tthrow new ScaffoldError(\n\t\t\t'TARGET',\n\t\t\t`Host manifest root collision between \"${rootConflict[0]}\" and \"${rootConflict[1]}\"`,\n\t\t\t{ host, full, field: 'root', paths: rootConflict },\n\t\t)\n\t}\n\tconst declaredRoots = new Set(manifest.roots)\n\tfor (const entry of manifest.entries) {\n\t\tconst segments = entry.destination.split('/')\n\t\tfor (let index = 1; index < segments.length; index += 1) {\n\t\t\tconst root = segments.slice(0, index).join('/')\n\t\t\tif (!declaredRoots.has(root)) {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'TARGET',\n\t\t\t\t\t`Host manifest does not declare destination root \"${root}\"`,\n\t\t\t\t\t{ host, full, root, destination: entry.destination },\n\t\t\t\t)\n\t\t\t}\n\t\t}\n\t}\n\tfor (const root of manifest.roots) {\n\t\tconst foldedRoot = root.toLowerCase()\n\t\tconst file = manifest.entries.find((entry) => {\n\t\t\tconst destination = entry.destination.toLowerCase()\n\t\t\treturn foldedRoot === destination || foldedRoot.startsWith(`${destination}/`)\n\t\t})\n\t\tif (file !== undefined) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'TARGET',\n\t\t\t\t`Host manifest directory \"${root}\" conflicts with file \"${file.destination}\"`,\n\t\t\t\t{ host, full, root, destination: file.destination },\n\t\t\t)\n\t\t}\n\t}\n\tconst listed = attempt(() => listFiles(host))\n\tif (!listed.success) {\n\t\tthrow new ScaffoldError('TARGET', `Failed to inventory host storage at ${host}`, {\n\t\t\thost,\n\t\t\tfull,\n\t\t\terror: listed.error,\n\t\t})\n\t}\n\tconst stored = listed.value.filter((path) => path !== HOST_MANIFEST_PATH)\n\tconst storedConflict = findPathConflict(stored)\n\tif (storedConflict !== undefined) {\n\t\tthrow new ScaffoldError(\n\t\t\t'TARGET',\n\t\t\t`Host storage collision between \"${storedConflict[0]}\" and \"${storedConflict[1]}\"`,\n\t\t\t{ host, full, paths: storedConflict },\n\t\t)\n\t}\n\tconst storedByPath = new Map(stored.map((path) => [path.toLowerCase(), path]))\n\tconst declaredStorage = new Set(manifest.entries.map((entry) => entry.storage.toLowerCase()))\n\tfor (const path of stored) {\n\t\tif (!declaredStorage.has(path.toLowerCase())) {\n\t\t\tthrow new ScaffoldError('TARGET', `Host storage file \"${path}\" is not declared`, {\n\t\t\t\thost,\n\t\t\t\tfull,\n\t\t\t\tpath,\n\t\t\t})\n\t\t}\n\t}\n\tfor (const entry of manifest.entries) {\n\t\tconst storedPath = storedByPath.get(entry.storage.toLowerCase())\n\t\tif (storedPath === undefined || storedPath !== entry.storage) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'TARGET',\n\t\t\t\t`Host storage file \"${entry.storage}\" is missing or case-mismatched`,\n\t\t\t\t{ host, full, storage: entry.storage, actual: storedPath },\n\t\t\t)\n\t\t}\n\t\tconst storage = resolvePhysicalPath(host, entry.storage, 'TARGET', 'host')\n\t\tconst status = attempt(() => lstatSync(storage))\n\t\tif (\n\t\t\t!status.success ||\n\t\t\t!status.value.isFile() ||\n\t\t\tstatus.value.isSymbolicLink() ||\n\t\t\tstatus.value.nlink !== 1\n\t\t) {\n\t\t\tthrow new ScaffoldError('TARGET', `Host storage at \"${entry.storage}\" is not a file`, {\n\t\t\t\thost,\n\t\t\t\tfull,\n\t\t\t\tstorage: entry.storage,\n\t\t\t\terror: status.success ? undefined : status.error,\n\t\t\t})\n\t\t}\n\t}\n\treturn manifest\n}\n\n/**\n * Read one contained file as exact lowercase hexadecimal bytes.\n *\n * @param root - The declared containing root.\n * @param path - The root-relative file path.\n * @param code - The coded failure for containment or reading.\n * @param boundary - The boundary name used in diagnostics.\n * @returns The exact file bytes encoded as lowercase hexadecimal.\n */\nexport function readFileHex(\n\troot: string,\n\tpath: string,\n\tcode: ScaffoldErrorCode,\n\tboundary: string,\n\tlimit = MAX_ARTIFACT_BYTES,\n): string {\n\tif (!Number.isSafeInteger(limit) || limit < 0 || limit > MAX_ARTIFACT_BYTES) {\n\t\tthrow new ScaffoldError(code, `Invalid file byte limit at ${path}`, { path, root, limit })\n\t}\n\tif (!isPortablePath(path)) {\n\t\tthrow new ScaffoldError(code, `Unsafe file path at ${path}`, { path, root })\n\t}\n\tconst full = resolvePhysicalPath(root, path, code, boundary)\n\tconst status = attempt(() => lstatSync(full))\n\tif (\n\t\t!status.success ||\n\t\t!status.value.isFile() ||\n\t\tstatus.value.isSymbolicLink() ||\n\t\tstatus.value.nlink !== 1\n\t) {\n\t\tthrow new ScaffoldError(code, `File is not a physical readable file at ${path}`, {\n\t\t\tpath,\n\t\t\tfull,\n\t\t\t...(status.success ? {} : { error: status.error }),\n\t\t})\n\t}\n\tconst opened = attempt(() => openSync(full, 'r'))\n\tif (!opened.success) {\n\t\tthrow new ScaffoldError(code, `Failed to read file at ${path}`, {\n\t\t\tpath,\n\t\t\tfull,\n\t\t\terror: opened.error,\n\t\t})\n\t}\n\tconst handle = opened.value\n\tconst result = attempt(() => {\n\t\tconst current = fstatSync(handle)\n\t\tif (\n\t\t\t!current.isFile() ||\n\t\t\tcurrent.nlink !== 1 ||\n\t\t\tcurrent.dev !== status.value.dev ||\n\t\t\tcurrent.ino !== status.value.ino\n\t\t) {\n\t\t\tthrow new ScaffoldError(code, `File changed before reading at ${path}`, { path, full })\n\t\t}\n\t\tif (current.size > limit) {\n\t\t\tthrow new ScaffoldError(code, `File exceeds the artifact limit at ${path}`, {\n\t\t\t\tpath,\n\t\t\t\tfull,\n\t\t\t\tlimit,\n\t\t\t\tsize: current.size,\n\t\t\t})\n\t\t}\n\t\tconst bytes = Buffer.alloc(current.size)\n\t\tlet offset = 0\n\t\twhile (offset < bytes.byteLength) {\n\t\t\tconst length = readSync(handle, bytes, offset, bytes.byteLength - offset, offset)\n\t\t\tif (length === 0) break\n\t\t\toffset += length\n\t\t}\n\t\tconst overflow = Buffer.alloc(1)\n\t\tconst extra = readSync(handle, overflow, 0, overflow.byteLength, offset)\n\t\tconst after = fstatSync(handle)\n\t\tconst pathStatus = lstatSync(full)\n\t\tif (\n\t\t\toffset !== bytes.byteLength ||\n\t\t\textra !== 0 ||\n\t\t\tafter.dev !== current.dev ||\n\t\t\tafter.ino !== current.ino ||\n\t\t\tafter.mtimeMs !== current.mtimeMs ||\n\t\t\tafter.size !== current.size ||\n\t\t\t!pathStatus.isFile() ||\n\t\t\tpathStatus.isSymbolicLink() ||\n\t\t\tpathStatus.nlink !== 1 ||\n\t\t\tpathStatus.dev !== current.dev ||\n\t\t\tpathStatus.ino !== current.ino\n\t\t) {\n\t\t\tthrow new ScaffoldError(code, `File changed while reading at ${path}`, { path, full })\n\t\t}\n\t\treturn bytesToHex(bytes)\n\t})\n\tconst closed = attempt(() => closeSync(handle))\n\tif (!result.success) throw result.error\n\tif (!closed.success) {\n\t\tthrow new ScaffoldError(code, `Failed to close file at ${path}`, {\n\t\t\tpath,\n\t\t\tfull,\n\t\t\terror: closed.error,\n\t\t})\n\t}\n\treturn result.value\n}\n\n/**\n * Read one contained physical file as bounded UTF-8 text.\n *\n * @param root - The declared containing root.\n * @param path - The root-relative file path.\n * @param code - The coded failure for containment or reading.\n * @param boundary - The boundary name used in diagnostics.\n * @returns The exact file bytes decoded as UTF-8 text.\n */\nexport function readFileText(\n\troot: string,\n\tpath: string,\n\tcode: ScaffoldErrorCode,\n\tboundary: string,\n\tlimit = MAX_ARTIFACT_BYTES,\n): string {\n\tconst decoded = attempt(() =>\n\t\tnew TextDecoder('utf-8', { fatal: true }).decode(\n\t\t\tBuffer.from(readFileHex(root, path, code, boundary, limit), 'hex'),\n\t\t),\n\t)\n\tif (!decoded.success) {\n\t\tthrow new ScaffoldError(code, `File is not valid UTF-8 at ${path}`, {\n\t\t\tpath,\n\t\t\troot,\n\t\t\terror: decoded.error,\n\t\t})\n\t}\n\treturn decoded.value\n}\n\n/**\n * Recursively list a directory's files as root-relative paths.\n *\n * @param root - The directory to list.\n * @returns Root-relative file paths (posix-style `/` separators), code-unit\n *   sorted, or `[]` when `root` is absent.\n *\n * @example\n * ```ts\n * import { listFiles } from '@orkestrel/scaffold/server'\n *\n * listFiles('./dist/host/.claude/agents') // ['scout.md', 'builder.md', …]\n * ```\n */\nexport function listFiles(root: string): readonly string[] {\n\tif (!isFilesystemPath(root)) {\n\t\tthrow new ScaffoldError('TARGET', 'Listing root is malformed or exceeds its bounds', { root })\n\t}\n\tconst rootStatus = attempt(() => lstatSync(root))\n\tif (!rootStatus.success) {\n\t\tif (isMissingPathError(rootStatus.error)) return []\n\t\tthrow new ScaffoldError('TARGET', 'Failed to inspect listing root', {\n\t\t\troot,\n\t\t\terror: rootStatus.error,\n\t\t})\n\t}\n\tif (!rootStatus.value.isDirectory() || rootStatus.value.isSymbolicLink()) {\n\t\tthrow new ScaffoldError('TARGET', 'Listing root is not a physical directory', { root })\n\t}\n\tconst files: string[] = []\n\tconst pending = [{ full: root, path: '', depth: 0 }]\n\tlet visited = 0\n\twhile (pending.length > 0) {\n\t\tconst current = pending.pop()\n\t\tif (current === undefined) break\n\t\tconst handle = opendirSync(current.full)\n\t\ttry {\n\t\t\tfor (;;) {\n\t\t\t\tconst entry = handle.readSync()\n\t\t\t\tif (entry === null) break\n\t\t\t\tvisited += 1\n\t\t\t\tif (visited > MAX_HOST_ENTRIES) {\n\t\t\t\t\tthrow new ScaffoldError('TARGET', `Host traversal exceeds ${MAX_HOST_ENTRIES} entries`, {\n\t\t\t\t\t\troot,\n\t\t\t\t\t\tlimit: MAX_HOST_ENTRIES,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tconst path = current.path === '' ? entry.name : `${current.path}/${entry.name}`\n\t\t\t\tif (!isPortablePath(path)) {\n\t\t\t\t\tthrow new ScaffoldError('TARGET', 'Filesystem traversal found a non-portable path')\n\t\t\t\t}\n\t\t\t\tif (entry.isDirectory() && !entry.isSymbolicLink()) {\n\t\t\t\t\tconst depth = current.depth + 1\n\t\t\t\t\tif (depth > MAX_HOST_DEPTH) {\n\t\t\t\t\t\tthrow new ScaffoldError('TARGET', `Host traversal exceeds depth ${MAX_HOST_DEPTH}`, {\n\t\t\t\t\t\t\troot,\n\t\t\t\t\t\t\tpath,\n\t\t\t\t\t\t\tlimit: MAX_HOST_DEPTH,\n\t\t\t\t\t\t})\n\t\t\t\t\t}\n\t\t\t\t\tpending.push({ full: join(current.full, entry.name), path, depth })\n\t\t\t\t} else {\n\t\t\t\t\tfiles.push(path)\n\t\t\t\t}\n\t\t\t}\n\t\t} finally {\n\t\t\thandle.closeSync()\n\t\t}\n\t}\n\treturn files.sort()\n}\n\n/**\n * Recursively list a directory's descendant directories.\n *\n * @param root - The directory to list.\n * @returns Root-relative POSIX directory paths in code-unit order.\n */\nexport function listDirectories(root: string): readonly string[] {\n\tif (!isFilesystemPath(root)) {\n\t\tthrow new ScaffoldError('TARGET', 'Listing root is malformed or exceeds its bounds', { root })\n\t}\n\tconst rootStatus = attempt(() => lstatSync(root))\n\tif (!rootStatus.success) {\n\t\tif (isMissingPathError(rootStatus.error)) return []\n\t\tthrow new ScaffoldError('TARGET', 'Failed to inspect listing root', {\n\t\t\troot,\n\t\t\terror: rootStatus.error,\n\t\t})\n\t}\n\tif (!rootStatus.value.isDirectory() || rootStatus.value.isSymbolicLink()) {\n\t\tthrow new ScaffoldError('TARGET', 'Listing root is not a physical directory', { root })\n\t}\n\tconst directories: string[] = []\n\tconst pending = [{ full: root, path: '', depth: 0 }]\n\tlet visited = 0\n\twhile (pending.length > 0) {\n\t\tconst current = pending.pop()\n\t\tif (current === undefined) break\n\t\tconst handle = opendirSync(current.full)\n\t\ttry {\n\t\t\tfor (;;) {\n\t\t\t\tconst entry = handle.readSync()\n\t\t\t\tif (entry === null) break\n\t\t\t\tvisited += 1\n\t\t\t\tif (visited > MAX_HOST_ENTRIES) {\n\t\t\t\t\tthrow new ScaffoldError('TARGET', `Host traversal exceeds ${MAX_HOST_ENTRIES} entries`, {\n\t\t\t\t\t\troot,\n\t\t\t\t\t\tlimit: MAX_HOST_ENTRIES,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tif (!entry.isDirectory() || entry.isSymbolicLink()) continue\n\t\t\t\tconst path = current.path === '' ? entry.name : `${current.path}/${entry.name}`\n\t\t\t\tif (!isPortablePath(path)) {\n\t\t\t\t\tthrow new ScaffoldError('TARGET', 'Filesystem traversal found a non-portable path')\n\t\t\t\t}\n\t\t\t\tconst depth = current.depth + 1\n\t\t\t\tif (depth > MAX_HOST_DEPTH) {\n\t\t\t\t\tthrow new ScaffoldError('TARGET', `Host traversal exceeds depth ${MAX_HOST_DEPTH}`, {\n\t\t\t\t\t\troot,\n\t\t\t\t\t\tpath,\n\t\t\t\t\t\tlimit: MAX_HOST_DEPTH,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tdirectories.push(path)\n\t\t\t\tpending.push({ full: join(current.full, entry.name), path, depth })\n\t\t\t}\n\t\t} finally {\n\t\t\thandle.closeSync()\n\t\t}\n\t}\n\treturn directories.sort()\n}\n\n/**\n * Map a repo-relative path to its vendored-host STAGING path, per the\n * dotfile-mapping rule `stageHost` writes into `manifest.json`.\n *\n * @param path - The repo-relative source path (e.g. `.claude/agents/reviewer.md`).\n * @returns The mapped storage path: a leading-dot TOP-LEVEL FILE maps to\n *   `dotfiles/<name-without-dot>`; a leading-dot DIRECTORY segment loses its\n *   dot wherever it appears; an undotted path is unchanged.\n *\n * @example\n * ```ts\n * import { storagePath } from '@orkestrel/scaffold/server'\n *\n * storagePath('.gitignore') // 'dotfiles/gitignore'\n * storagePath('.claude/agents/reviewer.md') // 'claude/agents/reviewer.md'\n * storagePath('.github/workflows/ci.yml') // 'github/workflows/ci.yml'\n * storagePath('AGENTS.md') // 'AGENTS.md'\n * ```\n */\nexport function storagePath(path: string): string {\n\tconst segments = path.split('/')\n\tif (segments.length === 1) {\n\t\tconst name = segments[0]\n\t\tif (name === undefined) return path\n\t\treturn name.startsWith('.') ? `dotfiles/${name.slice(1)}` : name\n\t}\n\treturn segments.map((segment) => (segment.startsWith('.') ? segment.slice(1) : segment)).join('/')\n}\n\n/**\n * Stage the vendored host set (byte-preserved copies + `manifest.json`) from\n * a repo root into an output directory — the BUILD-time primitive the\n * `build:host` npm script now calls directly (replacing a standalone build\n * script); `Materializer.materialize` is the RUNTIME reader of what this\n * writes (via `hostRoot` / `readHostManifest`).\n *\n * @param root - The repo root every `paths` entry resolves against.\n * @param out - The output directory to replace after staging completes.\n * @param paths - The repo-relative file/directory entries to stage; defaults\n *   to the package's own vendored set (`HOST_PATHS`) — a caller passes an\n *   explicit list only to stage an arbitrary/test set.\n * @remarks\n * Every source, path collision, and root/output relationship is preflighted\n * before output mutation. Files are copied into a temporary sibling; the\n * completed staging tree atomically replaces `out`, with rollback when the\n * swap fails. The manifest records both sorted file `entries` and the\n * complete sorted directory `roots` inventory so destructive consumers can\n * distinguish a declared-empty root from a truncated manifest.\n * @returns The written manifest's entries (`{ storage, destination, executable }`).\n * @throws `ScaffoldError('TARGET', …)` for an invalid/escaping source or path\n *   collision, and `ScaffoldError('WRITE', …)` for staging/swap failures.\n *\n * @example\n * ```ts\n * import { stageHost } from '@orkestrel/scaffold/server'\n *\n * const entries = stageHost(process.cwd(), 'dist/host')\n * entries.length // number of files staged\n * ```\n */\nexport function stageHost(\n\troot: string,\n\tout: string,\n\tpaths: readonly string[] = HOST_PATHS,\n): readonly ManifestEntry[] {\n\tif (!isFilesystemPath(root) || !isFilesystemPath(out)) {\n\t\tthrow new ScaffoldError('TARGET', 'Host root or output is malformed or exceeds its bounds', {\n\t\t\troot,\n\t\t\tout,\n\t\t})\n\t}\n\tconst copiedPaths = parsePortablePaths(paths, MAX_HOST_ENTRIES)\n\tif (copiedPaths === undefined) {\n\t\tthrow new ScaffoldError('TARGET', 'Host source paths are malformed', {\n\t\t\troot,\n\t\t\tout,\n\t\t\tlimit: MAX_HOST_ENTRIES,\n\t\t})\n\t}\n\tconst destinations: string[] = []\n\tconst roots: string[] = []\n\tconst resolvedRoot = resolveRealPath(resolve(root))\n\tconst resolvedOut = resolveRealPath(resolve(out))\n\tif (resolvedRoot === resolvedOut || resolvedRoot.startsWith(resolvedOut + sep)) {\n\t\tthrow new ScaffoldError('TARGET', `Host output at ${out} contains the source root`, {\n\t\t\troot,\n\t\t\tout,\n\t\t})\n\t}\n\tfor (const path of copiedPaths) {\n\t\tif (!isPortablePath(path) || isSensitiveHostPath(path)) {\n\t\t\tthrow new ScaffoldError('TARGET', `Invalid host source path at ${path}`, { path, root })\n\t\t}\n\t\tconst absolute = resolvePhysicalPath(root, path, 'TARGET', 'host')\n\t\tif (!existsSync(absolute)) {\n\t\t\tthrow new ScaffoldError('TARGET', `Missing host source at ${path}`, { path, root })\n\t\t}\n\t\tconst status = attempt(() => lstatSync(absolute))\n\t\tif (!status.success) {\n\t\t\tthrow new ScaffoldError('TARGET', `Failed to inspect host source at ${path}`, {\n\t\t\t\tpath,\n\t\t\t\troot,\n\t\t\t\terror: status.error,\n\t\t\t})\n\t\t}\n\t\tif (status.value.isSymbolicLink()) {\n\t\t\tthrow new ScaffoldError('TARGET', `Host source is linked at ${path}`, { path, root })\n\t\t}\n\t\tif (status.value.isDirectory()) {\n\t\t\tconst resolvedSource = resolveRealPath(absolute)\n\t\t\tif (resolvedOut === resolvedSource || resolvedOut.startsWith(resolvedSource + sep)) {\n\t\t\t\tthrow new ScaffoldError('TARGET', `Host output at ${out} is inside source ${path}`, {\n\t\t\t\t\troot,\n\t\t\t\t\tout,\n\t\t\t\t\tpath,\n\t\t\t\t})\n\t\t\t}\n\t\t\troots.push(path)\n\t\t\tfor (const nested of listDirectories(absolute)) roots.push(`${path}/${nested}`)\n\t\t\tfor (const nested of listFiles(absolute)) destinations.push(`${path}/${nested}`)\n\t\t} else {\n\t\t\tdestinations.push(path)\n\t\t}\n\t}\n\tif (destinations.length > MAX_HOST_ENTRIES || roots.length > MAX_HOST_ENTRIES) {\n\t\tthrow new ScaffoldError('TARGET', 'Host source inventory exceeds the entry limit', {\n\t\t\troot,\n\t\t\tlimit: MAX_HOST_ENTRIES,\n\t\t})\n\t}\n\n\tconst entries: ManifestEntry[] = []\n\tconst expectations: WriteExpectation[] = []\n\tlet totalBytes = 0\n\tfor (const destination of destinations) {\n\t\tif (isSensitiveHostPath(destination)) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'TARGET',\n\t\t\t\t`Sensitive host source is not vendorable at ${destination}`,\n\t\t\t\t{\n\t\t\t\t\troot,\n\t\t\t\t\tdestination,\n\t\t\t\t},\n\t\t\t)\n\t\t}\n\t\tconst source = resolvePhysicalPath(root, destination, 'TARGET', 'host')\n\t\tconst status = attempt(() => lstatSync(source))\n\t\tif (\n\t\t\t!status.success ||\n\t\t\t!status.value.isFile() ||\n\t\t\tstatus.value.isSymbolicLink() ||\n\t\t\tstatus.value.nlink !== 1\n\t\t) {\n\t\t\tthrow new ScaffoldError('TARGET', `Host source is not a readable file at ${destination}`, {\n\t\t\t\troot,\n\t\t\t\tdestination,\n\t\t\t\terror: status.success ? undefined : status.error,\n\t\t\t})\n\t\t}\n\t\ttotalBytes += status.value.size\n\t\tif (totalBytes > MAX_TOTAL_ARTIFACT_BYTES) {\n\t\t\tthrow new ScaffoldError('TARGET', 'Host source inventory exceeds the aggregate byte limit', {\n\t\t\t\troot,\n\t\t\t\tlimit: MAX_TOTAL_ARTIFACT_BYTES,\n\t\t\t})\n\t\t}\n\t\texpectations.push(\n\t\t\tObject.freeze({\n\t\t\t\tpath: destination,\n\t\t\t\tshape: 'file',\n\t\t\t\tdevice: status.value.dev,\n\t\t\t\tinode: status.value.ino,\n\t\t\t\tmodified: status.value.mtimeMs,\n\t\t\t\tsize: status.value.size,\n\t\t\t\tdigest: digestFile(source),\n\t\t\t}),\n\t\t)\n\t\tconst storage = storagePath(destination)\n\t\tconst executable = destination.endsWith('.sh')\n\t\tentries.push({ storage, destination, executable })\n\t\tconst segments = destination.split('/')\n\t\tfor (let index = 1; index < segments.length; index += 1) {\n\t\t\troots.push(segments.slice(0, index).join('/'))\n\t\t}\n\t}\n\tentries.sort((a, b) =>\n\t\ta.destination < b.destination ? -1 : a.destination > b.destination ? 1 : 0,\n\t)\n\tconst destinationConflict = findFileConflict(entries.map((entry) => entry.destination))\n\tif (destinationConflict !== undefined) {\n\t\tthrow new ScaffoldError(\n\t\t\t'TARGET',\n\t\t\t`Destination collision between \"${destinationConflict[0]}\" and \"${destinationConflict[1]}\"`,\n\t\t\t{ paths: destinationConflict },\n\t\t)\n\t}\n\tconst storageConflict = findFileConflict(entries.map((entry) => entry.storage))\n\tif (storageConflict !== undefined) {\n\t\tconst storageDestinations = entries\n\t\t\t.filter((entry) => entry.storage.toLowerCase() === storageConflict[0].toLowerCase())\n\t\t\t.map((entry) => entry.destination)\n\t\tthrow new ScaffoldError(\n\t\t\t'TARGET',\n\t\t\t`Storage collision at \"${storageConflict[0]}\" between destinations \"${storageDestinations[0] ?? ''}\" and \"${storageDestinations[1] ?? ''}\"`,\n\t\t\t{ storage: storageConflict[0], destinations: storageDestinations },\n\t\t)\n\t}\n\tconst manifestConflict = findFileConflict([\n\t\tHOST_MANIFEST_PATH,\n\t\t...entries.map((entry) => entry.storage),\n\t])\n\tif (manifestConflict !== undefined) {\n\t\tthrow new ScaffoldError(\n\t\t\t'TARGET',\n\t\t\t`Storage path \"${manifestConflict[1]}\" collides with reserved manifest.json`,\n\t\t\t{ paths: manifestConflict },\n\t\t)\n\t}\n\tconst uniqueRoots = [...new Set(roots)].sort()\n\tif (uniqueRoots.length > MAX_HOST_ENTRIES) {\n\t\tthrow new ScaffoldError('TARGET', 'Host source inventory exceeds the entry limit', {\n\t\t\troot,\n\t\t\tlimit: MAX_HOST_ENTRIES,\n\t\t})\n\t}\n\tconst rootConflict = findPathConflict(uniqueRoots)\n\tif (rootConflict !== undefined) {\n\t\tthrow new ScaffoldError(\n\t\t\t'TARGET',\n\t\t\t`Directory collision between \"${rootConflict[0]}\" and \"${rootConflict[1]}\"`,\n\t\t\t{ paths: rootConflict },\n\t\t)\n\t}\n\tconst manifest: HostManifest = {\n\t\tentries,\n\t\troots: uniqueRoots,\n\t\tdigest: digestHostManifest(entries, uniqueRoots),\n\t}\n\tconst parent = dirname(resolve(out))\n\tconst name = basename(resolve(out))\n\tconst token = randomUUID()\n\tconst staging = resolveContainedPath(parent, `.${name}.stage-${token}`, 'WRITE', 'output')\n\tconst backup = resolveContainedPath(parent, `.${name}.backup-${token}`, 'WRITE', 'output')\n\tlet stagingAnchor: WriteAnchor | undefined\n\tlet parentDirectory: WriteDirectoryResult | undefined\n\tconst staged = attempt(() => {\n\t\tparentDirectory = createWriteDirectory(parent, 'host output parent')\n\t\tvalidateWriteAnchor(parentDirectory.anchor, 'host output parent')\n\t\tmkdirSync(staging, { recursive: false })\n\t\tvalidateWriteAnchor(parentDirectory.anchor, 'host output parent')\n\t\tconst stagingStatus = lstatSync(staging)\n\t\tif (!stagingStatus.isDirectory() || stagingStatus.isSymbolicLink()) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Host staging root is not a physical directory', {\n\t\t\t\tstaging,\n\t\t\t})\n\t\t}\n\t\tstagingAnchor = Object.freeze({\n\t\t\tpath: staging,\n\t\t\tdevice: stagingStatus.dev,\n\t\t\tinode: stagingStatus.ino,\n\t\t})\n\t\tfor (const entry of entries) {\n\t\t\tvalidateWriteAnchor(parentDirectory.anchor, 'host output parent')\n\t\t\tvalidateWriteAnchor(stagingAnchor, 'host staging root')\n\t\t\tconst source = resolvePhysicalPath(root, entry.destination, 'TARGET', 'host')\n\t\t\tconst expectation = expectations.find((candidate) => candidate.path === entry.destination)\n\t\t\tconst sourceStatus = lstatSync(source)\n\t\t\tconst sourceDigest = digestFile(source)\n\t\t\tif (\n\t\t\t\texpectation === undefined ||\n\t\t\t\t!sourceStatus.isFile() ||\n\t\t\t\tsourceStatus.isSymbolicLink() ||\n\t\t\t\tsourceStatus.nlink !== 1 ||\n\t\t\t\tsourceStatus.dev !== expectation.device ||\n\t\t\t\tsourceStatus.ino !== expectation.inode ||\n\t\t\t\tsourceStatus.mtimeMs !== expectation.modified ||\n\t\t\t\tsourceStatus.size !== expectation.size ||\n\t\t\t\tsourceDigest !== expectation.digest\n\t\t\t) {\n\t\t\t\tthrow new ScaffoldError('TARGET', `Host source changed at ${entry.destination}`, {\n\t\t\t\t\troot,\n\t\t\t\t\tdestination: entry.destination,\n\t\t\t\t})\n\t\t\t}\n\t\t\tconst destination = resolvePhysicalPath(staging, entry.storage, 'WRITE', 'staging')\n\t\t\tmkdirSync(dirname(destination), { recursive: true })\n\t\t\tvalidateWriteAnchor(stagingAnchor, 'host staging root')\n\t\t\tconst containedDestination = resolvePhysicalPath(staging, entry.storage, 'WRITE', 'staging')\n\t\t\tcopyFileSync(source, containedDestination, FS_CONSTANTS.COPYFILE_EXCL)\n\t\t\tconst copiedStatus = lstatSync(containedDestination)\n\t\t\tif (\n\t\t\t\t!copiedStatus.isFile() ||\n\t\t\t\tcopiedStatus.isSymbolicLink() ||\n\t\t\t\tcopiedStatus.nlink !== 1 ||\n\t\t\t\tdigestFile(containedDestination) !== expectation.digest\n\t\t\t) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Host staging copy changed at ${entry.destination}`, {\n\t\t\t\t\tstaging,\n\t\t\t\t\tdestination: entry.destination,\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\t\twriteFileSync(join(staging, HOST_MANIFEST_PATH), `${JSON.stringify(manifest, null, '\\t')}\\n`, {\n\t\t\tencoding: 'utf8',\n\t\t\tflag: 'wx',\n\t\t})\n\t\tvalidateWriteAnchor(parentDirectory.anchor, 'host output parent')\n\t\tif (readHostManifest(staging) === undefined) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Staged host manifest could not be verified', {\n\t\t\t\tstaging,\n\t\t\t})\n\t\t}\n\t})\n\tif (!staged.success) {\n\t\tconst identity = stagingAnchor\n\t\tconst cleanup =\n\t\t\tidentity === undefined\n\t\t\t\t? undefined\n\t\t\t\t: attempt(() => {\n\t\t\t\t\t\tvalidateWriteAnchor(identity, 'host staging root')\n\t\t\t\t\t\trmSync(staging, { recursive: true })\n\t\t\t\t\t})\n\t\tconst parentCleanup = attempt(() => {\n\t\t\tfor (const created of [...(parentDirectory?.created ?? [])].reverse()) {\n\t\t\t\tvalidateWriteAnchor(created, 'host output parent')\n\t\t\t\trmdirSync(created.path)\n\t\t\t}\n\t\t})\n\t\tthrow new ScaffoldError('WRITE', `Failed to stage host output at ${out}`, {\n\t\t\troot,\n\t\t\tout,\n\t\t\terror: staged.error,\n\t\t\tcleanup: cleanup?.success === false ? cleanup.error : undefined,\n\t\t\tparentCleanup: parentCleanup.success ? undefined : parentCleanup.error,\n\t\t})\n\t}\n\tif (parentDirectory === undefined) {\n\t\tthrow new ScaffoldError('WRITE', 'Host output parent was not established', { out })\n\t}\n\tvalidateWriteAnchor(parentDirectory.anchor, 'host output parent')\n\treplaceDirectory(staging, out, backup)\n\n\treturn entries\n}\n\n/**\n * Resolve the absolute host-storage path for a host-origin artifact's\n * `source`, manifest-aware.\n *\n * @param manifest - The parsed complete host manifest, or `undefined`\n *   when the host carries none (raw-repo-root fallback).\n * @param source - The artifact's `source` (or `path`) to resolve.\n * @param host - The resolved host root the path is joined against.\n * @returns `join(host, source)` when `manifest` is `undefined` (no vendored\n *   staging indirection); when `manifest` is present, `join(host,\n *   entries[0].storage)` for the SINGLE manifest entry whose `destination`\n *   equals `source`, or `undefined` when zero or more than one entry matches\n *   (`source` names a directory, or the manifest is ambiguous — no single\n *   storage file to point at).\n *\n * @example\n * ```ts\n * import { locateHostSource } from '@orkestrel/scaffold/server'\n *\n * locateHostSource(undefined, 'package.json', './dist/host') // './dist/host/package.json'\n * locateHostSource(\n *   {\n *     entries: [{ storage: 'pkg.tmpl', destination: 'package.json', executable: false }],\n *     roots: [],\n *     digest: '3b52f19450237ea4cfb39bc7a77b1e5094b52a8ff1fc9c02fd68b13ad088aa0f',\n *   },\n *   'package.json',\n *   './dist/host',\n * )\n * // './dist/host/pkg.tmpl'\n * ```\n */\nexport function locateHostSource(\n\tmanifest: HostManifest | undefined,\n\tsource: string,\n\thost: string,\n): string | undefined {\n\tif (manifest === undefined) return join(host, source)\n\tconst entries = manifest.entries.filter((entry) => entry.destination === source)\n\tif (entries.length !== 1) return undefined\n\tconst [entry] = entries\n\treturn entry === undefined ? undefined : join(host, entry.storage)\n}\n\n/**\n * Map a manifest destination from an artifact's source prefix to its target prefix.\n *\n * @param artifact - The host artifact carrying the target path and optional source.\n * @param destination - The matched manifest destination.\n * @returns The exact target-relative path for the matched manifest file.\n * @throws `ScaffoldError('INVALID', …)` when `destination` is outside the source prefix.\n */\nexport function remapArtifactPath(artifact: HostArtifact, destination: string): string {\n\tconst source = artifact.source ?? artifact.path\n\tif (destination === source) return artifact.path\n\tif (!destination.startsWith(`${source}/`)) {\n\t\tthrow new ScaffoldError('INVALID', `Manifest destination does not match ${source}`, {\n\t\t\tsource,\n\t\t\tdestination,\n\t\t})\n\t}\n\treturn `${artifact.path}/${destination.slice(source.length + 1)}`\n}\n\n/**\n * Rehydrate a `Plan`'s `host`-origin artifacts with their exact byte hex read\n * from `host` — manifest-aware, via `locateHostSource`.\n *\n * @param plan - The plan to hydrate.\n * @param host - The resolved host root to read from.\n * @returns A new `Plan` whose file-shaped `host` artifacts carry exact `hex`.\n *   Directory-shaped host artifacts expand into one byte-aware artifact\n *   per file, preserving their group and mapping the artifact/source prefixes.\n *   `template` / `computed` artifacts pass through untouched.\n * @throws `ScaffoldError('TARGET', …)` when the host is not a readable\n *   directory, a present manifest is invalid/incomplete, or a required source\n *   is absent, escaping, not a file/directory as declared, or unreadable.\n *\n * @example\n * ```ts\n * import { hydratePlan } from '@orkestrel/scaffold/server'\n *\n * const hydrated = hydratePlan(plan, './dist/host')\n * ```\n */\nexport function hydratePlan(plan: Plan, host: string): Plan {\n\tif (!isFilesystemPath(host)) {\n\t\tthrow new ScaffoldError('TARGET', 'Host path is malformed or exceeds its bounds', { host })\n\t}\n\tconst owned = snapshotPlan(plan)\n\tconst status = attempt(() => lstatSync(host))\n\tif (!status.success || !status.value.isDirectory() || status.value.isSymbolicLink()) {\n\t\tthrow new ScaffoldError('TARGET', `Host root is not a readable directory at ${host}`, {\n\t\t\thost,\n\t\t\terror: status.success ? undefined : status.error,\n\t\t})\n\t}\n\tconst manifest = readHostManifest(host)\n\tconst artifacts: Artifact[] = []\n\tlet remaining = MAX_TOTAL_ARTIFACT_BYTES\n\tfor (const artifact of owned.artifacts) {\n\t\tif (artifact.origin !== 'host') remaining -= Buffer.byteLength(artifact.content, 'utf8')\n\t}\n\tfor (const artifact of owned.artifacts) {\n\t\tif (artifact.origin !== 'host') {\n\t\t\tartifacts.push(artifact)\n\t\t\tcontinue\n\t\t}\n\t\tconst source = artifact.source ?? artifact.path\n\t\tif (!isPortablePath(source) || isSensitiveHostPath(source)) {\n\t\t\tthrow new ScaffoldError('TARGET', `Unsafe host artifact source at ${source}`, {\n\t\t\t\thost,\n\t\t\t\tsource,\n\t\t\t})\n\t\t}\n\t\tconst full = locateHostSource(manifest, source, host)\n\t\tconst relative = full === undefined ? undefined : relativeOf(host, full).split(sep).join('/')\n\t\tif (relative !== undefined) {\n\t\t\tconst contained = resolvePhysicalPath(host, relative, 'TARGET', 'host')\n\t\t\tif (existsSync(contained)) {\n\t\t\t\tconst exact = attempt(() => lstatSync(contained))\n\t\t\t\tif (!exact.success) {\n\t\t\t\t\tthrow new ScaffoldError('TARGET', `Failed to inspect host artifact source at ${source}`, {\n\t\t\t\t\t\thost,\n\t\t\t\t\t\tsource,\n\t\t\t\t\t\terror: exact.error,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tif (exact.value.isFile() && !exact.value.isSymbolicLink() && exact.value.nlink === 1) {\n\t\t\t\t\tconst hex = readFileHex(\n\t\t\t\t\t\thost,\n\t\t\t\t\t\trelative,\n\t\t\t\t\t\t'TARGET',\n\t\t\t\t\t\t'host',\n\t\t\t\t\t\tMath.min(MAX_ARTIFACT_BYTES, remaining),\n\t\t\t\t\t)\n\t\t\t\t\tremaining -= hex.length / 2\n\t\t\t\t\tartifacts.push({\n\t\t\t\t\t\t...artifact,\n\t\t\t\t\t\thex,\n\t\t\t\t\t})\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\tif (manifest !== undefined) {\n\t\t\t\t\tthrow new ScaffoldError('TARGET', `Host artifact source is not a file at ${source}`, {\n\t\t\t\t\t\thost,\n\t\t\t\t\t\tsource,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (manifest !== undefined) {\n\t\t\t\tthrow new ScaffoldError('TARGET', `Host artifact source is missing at ${source}`, {\n\t\t\t\t\thost,\n\t\t\t\t\tsource,\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\n\t\tif (manifest !== undefined) {\n\t\t\tconst entries = manifest.entries.filter((entry) => entry.destination.startsWith(`${source}/`))\n\t\t\tif (artifacts.length + entries.length > MAX_COLLECTION_ITEMS) {\n\t\t\t\tthrow new ScaffoldError('TARGET', 'Hydrated plan exceeds the artifact count limit', {\n\t\t\t\t\thost,\n\t\t\t\t\tlimit: MAX_COLLECTION_ITEMS,\n\t\t\t\t})\n\t\t\t}\n\t\t\tif (entries.length === 0) {\n\t\t\t\tif (source.startsWith('guides/src/') && source.endsWith('.md')) {\n\t\t\t\t\t// The absent `hex` is the structural presence-ownership mark. Strip\n\t\t\t\t\t// caller-carried bytes so a manifest-confirmed guide-pointer degrade\n\t\t\t\t\t// can never masquerade as vendored content canon.\n\t\t\t\t\tconst { hex: _hex, ...presenceOwned } = artifact\n\t\t\t\t\tartifacts.push(presenceOwned)\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\tthrow new ScaffoldError('TARGET', `Host manifest does not declare ${source}`, {\n\t\t\t\t\thost,\n\t\t\t\t\tsource,\n\t\t\t\t})\n\t\t\t}\n\t\t\tfor (const entry of entries) {\n\t\t\t\tif (isSensitiveHostPath(entry.destination)) {\n\t\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t\t'TARGET',\n\t\t\t\t\t\t`Sensitive host artifact source at ${entry.destination}`,\n\t\t\t\t\t\t{ host, source: entry.destination },\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t\tconst nestedPath = entry.destination.slice(source.length + 1)\n\t\t\t\tconst hex = readFileHex(\n\t\t\t\t\thost,\n\t\t\t\t\tentry.storage,\n\t\t\t\t\t'TARGET',\n\t\t\t\t\t'host',\n\t\t\t\t\tMath.min(MAX_ARTIFACT_BYTES, remaining),\n\t\t\t\t)\n\t\t\t\tremaining -= hex.length / 2\n\t\t\t\tartifacts.push({\n\t\t\t\t\t...artifact,\n\t\t\t\t\tpath: `${artifact.path}/${nestedPath}`,\n\t\t\t\t\tsource: entry.destination,\n\t\t\t\t\thex,\n\t\t\t\t})\n\t\t\t}\n\t\t\tcontinue\n\t\t}\n\n\t\tconst directory = resolvePhysicalPath(host, source, 'TARGET', 'host')\n\t\tif (!existsSync(directory)) {\n\t\t\tthrow new ScaffoldError('TARGET', `Host artifact source is missing at ${source}`, {\n\t\t\t\thost,\n\t\t\t\tsource,\n\t\t\t})\n\t\t}\n\t\tconst directoryStatus = attempt(() => lstatSync(directory))\n\t\tif (\n\t\t\t!directoryStatus.success ||\n\t\t\t!directoryStatus.value.isDirectory() ||\n\t\t\tdirectoryStatus.value.isSymbolicLink()\n\t\t) {\n\t\t\tthrow new ScaffoldError('TARGET', `Host artifact source is not a directory at ${source}`, {\n\t\t\t\thost,\n\t\t\t\tsource,\n\t\t\t\terror: directoryStatus.success ? undefined : directoryStatus.error,\n\t\t\t})\n\t\t}\n\t\tconst relatives = listFiles(directory)\n\t\tif (artifacts.length + relatives.length > MAX_COLLECTION_ITEMS) {\n\t\t\tthrow new ScaffoldError('TARGET', 'Hydrated plan exceeds the artifact count limit', {\n\t\t\t\thost,\n\t\t\t\tlimit: MAX_COLLECTION_ITEMS,\n\t\t\t})\n\t\t}\n\t\tif (relatives.length === 0) {\n\t\t\tartifacts.push(artifact)\n\t\t\tcontinue\n\t\t}\n\t\tfor (const nestedPath of relatives) {\n\t\t\tconst nestedSource = `${source}/${nestedPath}`\n\t\t\tif (isSensitiveHostPath(nestedSource)) {\n\t\t\t\tthrow new ScaffoldError('TARGET', `Sensitive host artifact source at ${nestedSource}`, {\n\t\t\t\t\thost,\n\t\t\t\t\tsource: nestedSource,\n\t\t\t\t})\n\t\t\t}\n\t\t\tconst hex = readFileHex(\n\t\t\t\thost,\n\t\t\t\tnestedSource,\n\t\t\t\t'TARGET',\n\t\t\t\t'host',\n\t\t\t\tMath.min(MAX_ARTIFACT_BYTES, remaining),\n\t\t\t)\n\t\t\tremaining -= hex.length / 2\n\t\t\tartifacts.push({\n\t\t\t\t...artifact,\n\t\t\t\tpath: `${artifact.path}/${nestedPath}`,\n\t\t\t\tsource: nestedSource,\n\t\t\t\thex,\n\t\t\t})\n\t\t}\n\t}\n\tconst conflict = findFileConflict(artifacts.map((artifact) => artifact.path))\n\tif (conflict !== undefined) {\n\t\tthrow new ScaffoldError(\n\t\t\t'INVALID',\n\t\t\t`Hydrated artifact collision between \"${conflict[0]}\" and \"${conflict[1]}\"`,\n\t\t\t{ paths: conflict },\n\t\t)\n\t}\n\tconst hydrated = { ...owned, artifacts }\n\tif (!isPlan(hydrated)) {\n\t\tthrow new ScaffoldError('INVALID', 'Hydrated plan violates the bounded Plan contract')\n\t}\n\treturn hydrated\n}\n\n/**\n * The vendored set of destination-relative paths under `directory` (one of\n * `PRUNE_DIRECTORIES`) that `pruneTargets` must NOT report — read from the\n * manifest's `destination`s when `host` has one, else listed straight off\n * `host/<directory>`.\n *\n * @param host - The vendored host root to establish the allowlist from.\n * @param directory - The prune directory (one of `PRUNE_DIRECTORIES`) to scope the allowlist to.\n * @remarks\n * FAIL CLOSED: before returning any allowlist (even an empty one), the\n * vendored source must be POSITIVELY established, or a caller would treat an\n * unresolved host as \"vendors nothing\" and report every file under\n * `target/<directory>` as unexpected. A missing `host` root, or (no\n * `manifest.json` AND no `host/<directory>`), is a coded `TARGET` failure —\n * the distinction this guards is missing-host vs genuinely-empty-vendor: a\n * `host` that EXISTS and vendors zero files in `directory` (an existing empty\n * dir, or a manifest with zero entries for it) remains a valid empty allowlist.\n * @returns The allowed destination-relative paths under `directory`.\n * @throws `ScaffoldError('TARGET', …)` when `host` does not exist, or when\n *   `host` has no `manifest.json` and no `host/<directory>` either.\n *\n * @example\n * ```ts\n * import { vendoredPruneSet } from '@orkestrel/scaffold/server'\n *\n * vendoredPruneSet('./dist/host', '.claude/agents') // Set { '.claude/agents/reviewer.md', … }\n * ```\n */\nexport function vendoredPruneSet(host: string, directory: string): ReadonlySet<string> {\n\tif (!existsSync(host)) {\n\t\tthrow new ScaffoldError(\n\t\t\t'TARGET',\n\t\t\t`Cannot establish vendored source for prune: host root not found at ${host}`,\n\t\t\t{ host, directory },\n\t\t)\n\t}\n\tconst manifest = readHostManifest(host)\n\tif (manifest !== undefined) {\n\t\tif (!manifest.roots.includes(directory)) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'TARGET',\n\t\t\t\t`Cannot establish vendored source for prune: manifest does not declare ${directory}`,\n\t\t\t\t{ host, directory },\n\t\t\t)\n\t\t}\n\t\treturn new Set(\n\t\t\tmanifest.entries\n\t\t\t\t.filter((entry) => entry.destination.startsWith(`${directory}/`))\n\t\t\t\t.map((entry) => entry.destination),\n\t\t)\n\t}\n\tconst hostDirectory = resolvePhysicalPath(host, directory, 'TARGET', 'host')\n\tif (!existsSync(hostDirectory)) {\n\t\tthrow new ScaffoldError(\n\t\t\t'TARGET',\n\t\t\t`Cannot establish vendored source for prune: no manifest.json and no host directory at ${hostDirectory}`,\n\t\t\t{ host, directory },\n\t\t)\n\t}\n\tconst hostStatus = attempt(() => lstatSync(hostDirectory))\n\tif (!hostStatus.success || !hostStatus.value.isDirectory() || hostStatus.value.isSymbolicLink()) {\n\t\tthrow new ScaffoldError(\n\t\t\t'TARGET',\n\t\t\t`Cannot establish vendored source for prune: host directory is not physical at ${hostDirectory}`,\n\t\t\t{ host, directory, ...(hostStatus.success ? {} : { error: hostStatus.error }) },\n\t\t)\n\t}\n\treturn new Set(listFiles(hostDirectory).map((relative) => `${directory}/${relative}`))\n}\n\n/**\n * List the repo-relative POSIX paths under `target`'s prune directories\n * (`.claude/agents`, `.codex/agents`, `scripts`) that the vendored `host`\n * allowlist does NOT declare — THE single source of truth for prune drift, consumed by both\n * `Materializer.prune` (which deletes exactly these paths) and the bin's\n * audit/preview UX (which now shows them honestly instead of a\n * structurally-always-zero `audit.foreign`).\n *\n * @param target - The target directory to scan for unexpected files.\n * @param host - The vendored host root the allowlist is derived from.\n * @returns The unexpected relative paths (e.g. `.claude/agents/rogue.md`); `[]`\n *   when a prune directory is absent under `target`, or when none of its\n *   files are unexpected. Pure read — never deletes anything.\n * @throws `ScaffoldError('TARGET', …)` when `host` cannot positively\n *   establish a vendored allowlist for a prune directory that DOES exist\n *   under `target` (see `vendoredPruneSet`'s fail-closed remarks).\n *\n * @example\n * ```ts\n * import { pruneTargets } from '@orkestrel/scaffold/server'\n *\n * pruneTargets('./packages/router', hostRoot()) // ['.claude/agents/rogue.md']\n * ```\n */\nexport function pruneTargets(target: string, host: string): readonly string[] {\n\tif (!isFilesystemPath(target) || !isFilesystemPath(host)) {\n\t\tthrow new ScaffoldError('TARGET', 'Prune root is malformed or exceeds its bounds', {\n\t\t\ttarget,\n\t\t\thost,\n\t\t})\n\t}\n\tconst paths: string[] = []\n\tfor (const directory of PRUNE_DIRECTORIES) {\n\t\tconst root = resolvePhysicalPath(target, directory, 'TARGET', 'target')\n\t\tif (!existsSync(root)) continue\n\t\tconst status = attempt(() => lstatSync(root))\n\t\tif (!status.success || !status.value.isDirectory() || status.value.isSymbolicLink()) {\n\t\t\tthrow new ScaffoldError('TARGET', `Prune root is not a physical directory at ${root}`, {\n\t\t\t\ttarget,\n\t\t\t\tdirectory,\n\t\t\t\t...(status.success ? {} : { error: status.error }),\n\t\t\t})\n\t\t}\n\t\tconst allowed = vendoredPruneSet(host, directory)\n\t\tfor (const relative of listFiles(root)) {\n\t\t\tconst path = `${directory}/${relative}`\n\t\t\tif (!allowed.has(path)) paths.push(path)\n\t\t}\n\t}\n\treturn paths\n}\n\n/** Consume one aggregate fleet-catalog traversal slot. */\nexport function consumeCatalogAllowance(allowance: CatalogAllowance, root: string): void {\n\tconst consumed = attempt(() => {\n\t\tif (!isCatalogAllowance(allowance)) throw new Error('allowance must be one Float64 cell')\n\t\tconst remaining = allowance[0]\n\t\tif (\n\t\t\tremaining === undefined ||\n\t\t\t!Number.isSafeInteger(remaining) ||\n\t\t\tremaining < 1 ||\n\t\t\tremaining > MAX_HOST_ENTRIES\n\t\t) {\n\t\t\tthrow new Error('allowance is outside its bounds')\n\t\t}\n\t\tconst next = remaining - 1\n\t\tallowance[0] = next\n\t\tif (allowance[0] !== next) throw new Error('allowance decrement was not retained')\n\t})\n\tif (!consumed.success) {\n\t\tthrow new ScaffoldError('TARGET', 'Fleet catalog exceeds its aggregate entry limit', {\n\t\t\troot,\n\t\t\tlimit: MAX_HOST_ENTRIES,\n\t\t\terror: consumed.error,\n\t\t})\n\t}\n}\n\n/**\n * List a fleet root's `@orkestrel/*` package directories.\n *\n * @param root - The fleet root directory to scan.\n * @returns Absolute, code-unit-sorted paths of `root`'s immediate child\n *   directories whose `package.json` parses and whose `name` starts with\n *   `@orkestrel/`. A child with an unreadable or unparsable `package.json`,\n *   or a non-`@orkestrel` name, is skipped silently — it simply is not a\n *   fleet member.\n * @throws `ScaffoldError('TARGET', …)` when a child directory name contains\n *   terminal controls and therefore cannot be safely inspected or reported.\n *\n * @example\n * ```ts\n * import { discoverPackages } from '@orkestrel/scaffold/server'\n *\n * discoverPackages('./packages') // ['/abs/packages/router', '/abs/packages/budget']\n * ```\n */\nexport function discoverPackages(\n\troot: string,\n\tallowance: CatalogAllowance = new Float64Array([MAX_HOST_ENTRIES]),\n): readonly string[] {\n\tif (!isCatalogAllowance(allowance)) {\n\t\tthrow new ScaffoldError('TARGET', 'Fleet catalog allowance is malformed', {\n\t\t\troot,\n\t\t\tlimit: MAX_HOST_ENTRIES,\n\t\t})\n\t}\n\tif (!isFilesystemPath(root)) {\n\t\tthrow new ScaffoldError('TARGET', 'Fleet root is malformed or exceeds its bounds', { root })\n\t}\n\tconst rootStatus = attempt(() => lstatSync(root))\n\tif (!rootStatus.success || !rootStatus.value.isDirectory() || rootStatus.value.isSymbolicLink()) {\n\t\tthrow new ScaffoldError('TARGET', `Fleet root is not a physical directory at ${root}`, {\n\t\t\troot,\n\t\t\t...(rootStatus.success ? {} : { error: rootStatus.error }),\n\t\t})\n\t}\n\tconst packages: string[] = []\n\tconst handle = opendirSync(root)\n\ttry {\n\t\tfor (;;) {\n\t\t\tconst entry = handle.readSync()\n\t\t\tif (entry === null) break\n\t\t\tconsumeCatalogAllowance(allowance, root)\n\t\t\tif (!entry.isDirectory()) continue\n\t\t\tif (!isTerminalText(entry.name)) {\n\t\t\t\tthrow new ScaffoldError('TARGET', 'Fleet discovery found a non-portable directory')\n\t\t\t}\n\t\t\tconst directory = join(root, entry.name)\n\t\t\tconst text = attempt(() =>\n\t\t\t\treadFileText(directory, 'package.json', 'TARGET', 'package', MAX_MANIFEST_BYTES),\n\t\t\t)\n\t\t\tif (!text.success) continue\n\t\t\tconst parsed = parseJSON(text.value)\n\t\t\tif (!isRecord(parsed)) continue\n\t\t\tconst name = ownDataValue(parsed, 'name')\n\t\t\tif (typeof name !== 'string' || !DEPENDENCY_NAME_PATTERN.test(name)) continue\n\t\t\tif (!isPortablePath(entry.name)) {\n\t\t\t\tthrow new ScaffoldError('TARGET', 'Fleet discovery found a non-portable directory')\n\t\t\t}\n\t\t\tpackages.push(directory)\n\t\t}\n\t} finally {\n\t\thandle.closeSync()\n\t}\n\treturn packages.sort()\n}\n\n/**\n * Extract the first paragraph from the first blockquote in a Markdown guide.\n *\n * @param text - The guide Markdown to traverse.\n * @returns A normalized one-line description, or `undefined` when parsing\n *   fails, no blockquote paragraph exists, or the paragraph is empty.\n *\n * @example\n * ```ts\n * import { guideToDescription } from '@orkestrel/scaffold/server'\n *\n * guideToDescription('> A concise package description.\\n>\\n> More detail.')\n * // 'A concise package description.'\n * ```\n */\nexport function guideToDescription(text: string): string | undefined {\n\tif (text.length > MAX_GUIDE_BYTES || contentByteLength(text) > MAX_GUIDE_BYTES) {\n\t\treturn undefined\n\t}\n\tconst parsed = attempt(() => parseDocument(text))\n\tif (!parsed.success) return undefined\n\tlet quote: BlockquoteNode | undefined\n\tfor (const node of walkNodes(parsed.value)) {\n\t\tif (isBlockquoteNode(node)) {\n\t\t\tquote = node\n\t\t\tbreak\n\t\t}\n\t}\n\tif (quote === undefined) return undefined\n\tconst paragraph = quote.children.find((child) => isParagraphNode(child))\n\tif (paragraph === undefined) return undefined\n\tconst description = flattenText(paragraph).replace(/\\s+/g, ' ').trim()\n\treturn description.length > 0 && isCatalogDescription(description) ? description : undefined\n}\n\n/**\n * Build the fleet package catalog — one `CatalogEntry` per `@orkestrel/*`\n * package discovered under each root, its description drawn from its own\n * guide's FIRST blockquote.\n *\n * @param roots - The fleet root directories to scan (each walked via `discoverPackages`).\n * @remarks\n * Per discovered package directory: `name` / `version` come from its own\n * `package.json`; `description` is the first paragraph of the guide's opening\n * blockquote — the flattened text of the FIRST `ParagraphNode` among the\n * FIRST `BlockquoteNode` found's (depth-first, pre-order, via `walkNodes`)\n * TOP-LEVEL children in its `guides/src/<short>.md` (`<short>` = `name` with\n * the `@orkestrel/` prefix stripped), parsed with `@orkestrel/markdown`'s\n * `parseDocument` — a multi-paragraph blockquote overview yields only its\n * FIRST paragraph, never the whole quote glued together; embedded newlines\n * collapse to single spaces, and surrounding whitespace trims. A\n * missing/unreadable guide, a guide carrying no blockquote, or a blockquote\n * with no top-level paragraph child, yields `description: ''`, never a\n * thrown error. Entries merge across `roots` (a later root's entry for a\n * repeated `name` wins), then code-unit sort by `name`. An unreadable ROOT\n * itself is NOT wrapped here — whatever `discoverPackages` throws for it\n * propagates as-is; the bin layer is responsible for coding that failure\n * `TARGET`.\n * @returns The merged, sorted `CatalogEntry[]`.\n *\n * @example\n * ```ts\n * import { catalogPackages } from '@orkestrel/scaffold/server'\n *\n * catalogPackages(['/repos']) // [{ name: '@orkestrel/contract', version: '0.0.5', description: '…' }, …]\n * ```\n */\nexport function catalogPackages(\n\troots: readonly string[],\n\tlimit = MAX_HOST_ENTRIES,\n): readonly CatalogEntry[] {\n\tconst requested = parseFilesystemPaths(roots, MAX_HOST_ENTRIES)\n\tif (\n\t\trequested === undefined ||\n\t\t!Number.isSafeInteger(limit) ||\n\t\tlimit < 1 ||\n\t\tlimit > MAX_HOST_ENTRIES\n\t) {\n\t\tthrow new ScaffoldError('TARGET', 'Catalog roots are malformed', {\n\t\t\tlimit: MAX_HOST_ENTRIES,\n\t\t})\n\t}\n\tconst merged = new Map<string, CatalogEntry>()\n\tconst allowance = new Float64Array([limit])\n\tfor (const root of requested) {\n\t\tconsumeCatalogAllowance(allowance, root)\n\t\tfor (const directory of discoverPackages(root, allowance)) {\n\t\t\tconst text = attempt(() =>\n\t\t\t\treadFileText(directory, 'package.json', 'TARGET', 'package', MAX_MANIFEST_BYTES),\n\t\t\t)\n\t\t\tif (!text.success) continue\n\t\t\tconst parsed = parseJSON(text.value)\n\t\t\tif (!isRecord(parsed)) continue\n\t\t\tconst name = ownDataValue(parsed, 'name')\n\t\t\tif (typeof name !== 'string' || !DEPENDENCY_NAME_PATTERN.test(name)) continue\n\t\t\tconst version = ownDataValue(parsed, 'version')\n\t\t\tif (typeof version !== 'string' || !VERSION_PATTERN.test(version)) continue\n\t\t\tconst short = packageShortName(name)\n\t\t\tlet description = ''\n\t\t\tconst guide = attempt(() =>\n\t\t\t\treadFileText(directory, `guides/src/${short}.md`, 'TARGET', 'package', MAX_GUIDE_BYTES),\n\t\t\t)\n\t\t\tif (guide.success) description = guideToDescription(guide.value) ?? ''\n\t\t\tmerged.set(name, { name, version, description })\n\t\t}\n\t}\n\treturn [...merged.values()].sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0))\n}\n","import type {\n\tHostManifest,\n\tMaterializeResult,\n\tMaterializerEventMap,\n\tMaterializerInterface,\n\tMaterializerOptions,\n\tWritePrecondition,\n} from './types.js'\nimport type { Audit, ContentArtifact, HostArtifact, Plan } from '@src/core'\nimport type { EmitterInterface } from '@orkestrel/emitter'\nimport {\n\tchmodSync,\n\tconstants as FS_CONSTANTS,\n\tcopyFileSync,\n\texistsSync,\n\tlstatSync,\n\tmkdirSync,\n\trenameSync,\n\twriteFileSync,\n} from 'node:fs'\nimport { dirname } from 'node:path'\nimport { attempt } from '@orkestrel/contract'\nimport { Emitter } from '@orkestrel/emitter'\nimport {\n\tdiffPlan,\n\tfindFileConflict,\n\thasOnlyDataProperties,\n\thasValidAuditBytes,\n\thasValidSnapshotBytes,\n\tparsePlan,\n\tScaffoldError,\n\tvalidatePlan,\n} from '@src/core'\nimport {\n\thostRoot,\n\thydratePlan,\n\tisVacant,\n\tpruneTargets,\n\treadTarget,\n\treadHostManifest,\n\tremapArtifactPath,\n\tcommitWriteTransaction,\n\tdigestFile,\n\tdigestHex,\n\tdigestText,\n\tdiscardWriteTransaction,\n\tguideStub,\n\tresolvePhysicalPath,\n\trestoreFiles,\n\tvalidateWriteDirectories,\n\tvalidateWriteTarget,\n} from './helpers.js'\nimport { WriteTransaction } from './WriteTransaction.js'\nimport { isFilesystemPath, isPortablePath, isReservedTargetPath } from './validators.js'\nimport { parseMaterializerOptions } from './parsers.js'\n\n/**\n * The materialization entity (server) — the only impure environment in the\n * package, writing a `Plan` to `node:fs` behind an explicit call.\n *\n * @remarks\n * `materialize` is green-field: it refuses any target `isVacant` rejects\n * (`ScaffoldError('TARGET', …)`), then byte-copies each `host` artifact from\n * the `host` root and writes each `template` / `computed` artifact's rendered\n * `content`, failing fast on any write error (`ScaffoldError('WRITE', …)`).\n * `repair` is into-existing: it skips the vacancy check and writes `missing`\n * artifacts an `Audit` names. `stale` artifacts are report-only unless its\n * `replace` switch is true, because byte replacement discards local changes.\n * Hydrated directory-shaped host entries are expanded into\n * file-shaped artifacts, so canonical skills and agent configuration are\n * audited and repaired file by file. `prune` deletes stale files under\n * `target/.claude/agents/`, `target/.codex/agents/`, and `target/scripts/`\n * that the vendored `host` does not name. After `destroy()`\n * every method throws `DESTROYED`; teardown is idempotent, emitter last.\n * Before the vacancy check or any write, `materialize` and `repair` require a\n * structural `isPlan` match and a valid `validatePlan` result. Contextual\n * overrides that are missing from the artifact set, host-owned, or target\n * `package.json` therefore fail closed instead of being silently ignored.\n *\n * @remarks\n * `host`-origin copies are MANIFEST-AWARE: when the resolved `host` root\n * carries a `manifest.json` (this package's own vendored `dist/host`), each\n * artifact's `source` (a destination-relative path) is looked up in the\n * manifest to find its un-dotted STORAGE path plus an `executable` bit\n * (applied via `chmodSync` after the copy) — the vendored-package shape,\n * where storage names avoid leading dots npm would otherwise mangle. When\n * `host` carries no `manifest.json` (a caller-supplied raw repo root, e.g. a\n * sibling checkout or a test fixture), `source` maps to `host` 1:1, exactly\n * as before.\n *\n * @remarks\n * A manifest-present `source` with ZERO matching entries degrades to a stub\n * ONLY when that `source` is a dependency-guide pointer — one that starts\n * with `guides/src/` and ends with `.md` (the `guides/src/<dep>.md` pointer\n * `Compiler` emits for any dependency outside this package's vendored set).\n * That is the ONLY zero-match case that is legitimate: every `HOST_PATHS`\n * source is always staged by `stageHost`, so a non-guide zero-match means a\n * corrupted or truncated `manifest.json`, not an intentionally-unvendored\n * artifact. For a guide pointer, a short stub file is written at the\n * destination and reported exactly like a successful copy. The READ path\n * leaves that intentional pointer without canonical bytes, so `diffPlan`\n * treats it as presence-owned rather than inventing a byte match.\n * For every OTHER zero-match, the\n * fail-closed `ScaffoldError('TARGET', …)` is thrown — degrading an\n * unscoped zero-match would otherwise let a corrupted manifest silently stub\n * an unrecoverable artifact (e.g. `AGENTS.md` — `pull` only ever fetches\n * dependency guides) or write a FILE named `.claude` over what should be a\n * directory artifact. The raw-root fallback (`manifest === undefined`, a\n * caller-supplied `--from`) keeps its own throw regardless: an EXPLICITLY\n * named source failing to resolve is a different, caller-error failure\n * class, not a \"not vendored\" degrade.\n *\n * @remarks\n * Defense in depth at the filesystem trust boundary: EVERY resolved\n * destination (`materialize` and `repair`, both origins) is asserted to stay\n * within `resolve(target)` before any write, and every `host`-origin copy\n * source is asserted to stay within `resolve(host)` before any read — a\n * traversal segment (`../`) in an artifact's `path` or `source` cannot escape\n * either root, even if a gate upstream (e.g. an ungated `Plan` built by hand)\n * let it through. A destination violation throws `ScaffoldError('WRITE', …)`;\n * a source violation throws `ScaffoldError('TARGET', …)`.\n *\n * @remarks\n * The containment check is REAL-PATH aware, not merely lexical: both the\n * root (`target` / `host`) and the candidate destination/source are resolved\n * through `realpathSync` on their DEEPEST EXISTING ancestor before the prefix\n * comparison, so a symlinked subdirectory planted inside an otherwise\n * legitimate root cannot smuggle a write (or read) outside it — `repair`,\n * which has no `isVacant` gate, is covered exactly like `materialize`. A path\n * segment that does not yet exist on disk (the still-to-be-created file/dir\n * a write is about to create) is rejoined onto the resolved existing\n * ancestor rather than realpath'd itself.\n *\n * @example\n * ```ts\n * import { blueprint, blueprintToPlan } from '@orkestrel/scaffold'\n * import { createMaterializer } from '@orkestrel/scaffold/server'\n *\n * const plan = blueprintToPlan(blueprint('budget', { src: ['core'] }))\n * const materializer = createMaterializer()\n * materializer.materialize(plan, './packages/budget-new')\n * materializer.destroy()\n * ```\n */\nexport class Materializer implements MaterializerInterface {\n\treadonly #emitter: Emitter<MaterializerEventMap>\n\treadonly #host: string\n\t#manifestLoaded = false\n\t#manifestValue: HostManifest | undefined\n\t#destroyed = false\n\n\tconstructor(options?: MaterializerOptions) {\n\t\tconst parsed = parseMaterializerOptions(options)\n\t\tthis.#emitter = new Emitter<MaterializerEventMap>({\n\t\t\t...(parsed.on === undefined ? {} : { on: parsed.on }),\n\t\t\t...(parsed.error === undefined ? {} : { error: parsed.error }),\n\t\t})\n\t\t// The host IS this package's own vendored data unless `options.host`\n\t\t// overrides it — see `hostRoot`'s doc-comment for the resolution law.\n\t\tthis.#host = parsed.host ?? hostRoot()\n\t}\n\n\tget emitter(): EmitterInterface<MaterializerEventMap> {\n\t\treturn this.#emitter\n\t}\n\n\tmaterialize(plan: Plan, target: string): MaterializeResult {\n\t\tthis.#ensureAlive()\n\t\tconst prepared = this.#prepare(plan, target)\n\t\tif (!isVacant(target)) {\n\t\t\tthrow new ScaffoldError('TARGET', 'materialize requires a vacant target', { target })\n\t\t}\n\t\tconst { written, copied } = this.#apply(prepared, target)\n\t\tconst result: MaterializeResult = { target, written, copied, skipped: [], removed: [] }\n\t\tthis.#emitter.emit('done', result)\n\t\treturn result\n\t}\n\n\trepair(plan: Plan, audit: Audit, target: string, replace = false): MaterializeResult {\n\t\tthis.#ensureAlive()\n\t\tconst context = this.#prepare(plan, target, plan, false)\n\t\tif (!hasOnlyDataProperties(audit) || !hasValidAuditBytes(audit)) {\n\t\t\tthrow new ScaffoldError('INVALID', 'repair requires a bounded audit snapshot')\n\t\t}\n\t\tconst preview = attempt(() => structuredClone(audit))\n\t\tif (!preview.success || !Array.isArray(preview.value.findings)) {\n\t\t\tthrow new ScaffoldError('INVALID', 'repair requires a structurally valid audit', {\n\t\t\t\t...(preview.success ? {} : { error: preview.error }),\n\t\t\t})\n\t\t}\n\t\tconst selectedPaths = new Set(\n\t\t\tpreview.value.findings\n\t\t\t\t.filter(\n\t\t\t\t\t(finding) =>\n\t\t\t\t\t\tfinding.drift === 'missing' || (replace === true && finding.drift === 'stale'),\n\t\t\t\t)\n\t\t\t\t.map((finding) => finding.path),\n\t\t)\n\t\tconst selected = {\n\t\t\t...context,\n\t\t\tartifacts: context.artifacts.filter((artifact) => selectedPaths.has(artifact.path)),\n\t\t}\n\t\tconst prepared = this.#prepare(selected, target, context)\n\t\tconst preparedByPath = new Map(prepared.artifacts.map((artifact) => [artifact.path, artifact]))\n\t\tconst comparison = {\n\t\t\t...context,\n\t\t\tartifacts: context.artifacts.map((artifact) => preparedByPath.get(artifact.path) ?? artifact),\n\t\t}\n\t\tconst current = diffPlan(\n\t\t\tcomparison,\n\t\t\treadTarget(\n\t\t\t\ttarget,\n\t\t\t\tcomparison.artifacts.map((artifact) => artifact.path),\n\t\t\t),\n\t\t)\n\t\tif (JSON.stringify(current.findings) !== JSON.stringify(preview.value.findings)) {\n\t\t\tthrow new ScaffoldError('TARGET', 'Repair target changed after its audit preview', {\n\t\t\t\ttarget,\n\t\t\t})\n\t\t}\n\t\tconst preconditions: WritePrecondition[] = prepared.artifacts.map((artifact) => {\n\t\t\tconst finding = preview.value.findings.find((candidate) => candidate.path === artifact.path)\n\t\t\tif (finding?.drift === 'missing') return { path: artifact.path, shape: 'absent' }\n\t\t\tif (finding?.drift === 'stale' && finding.observed !== undefined) {\n\t\t\t\treturn {\n\t\t\t\t\tpath: artifact.path,\n\t\t\t\t\tshape: 'file',\n\t\t\t\t\tdigest: digestHex(finding.observed),\n\t\t\t\t}\n\t\t\t}\n\t\t\tthrow new ScaffoldError('INVALID', `Repair precondition is missing at ${artifact.path}`, {\n\t\t\t\tpath: artifact.path,\n\t\t\t})\n\t\t})\n\t\tconst skipped: string[] = []\n\t\tfor (const artifact of context.artifacts) {\n\t\t\tif (!selectedPaths.has(artifact.path)) {\n\t\t\t\tskipped.push(artifact.path)\n\t\t\t}\n\t\t}\n\t\tconst { written, copied } = this.#apply(prepared, target, preconditions)\n\t\tconst result: MaterializeResult = { target, written, copied, skipped, removed: [] }\n\t\tthis.#emitter.emit('done', result)\n\t\treturn result\n\t}\n\n\t// The unexpected-file scan itself lives in `pruneTargets` (server/helpers.js)\n\t// — the single source of truth both this deletion and the bin's audit/preview\n\t// UX read from; `prune` only deletes exactly what it reports.\n\tprune(target: string, expected: Readonly<Record<string, string>>): MaterializeResult {\n\t\tthis.#ensureAlive()\n\t\tif (!isFilesystemPath(target)) {\n\t\t\tthrow new ScaffoldError('TARGET', 'Prune target is malformed or exceeds its bounds', {\n\t\t\t\ttarget,\n\t\t\t})\n\t\t}\n\t\tconst paths = pruneTargets(target, this.#host)\n\t\tif (!hasOnlyDataProperties(expected) || !hasValidSnapshotBytes(expected)) {\n\t\t\tthrow new ScaffoldError('TARGET', 'Prune preview is malformed or unbounded', { target })\n\t\t}\n\t\tconst preview = attempt(() => structuredClone(expected))\n\t\tconst expectedPaths = preview.success ? Object.keys(preview.value).sort() : []\n\t\tif (\n\t\t\t!preview.success ||\n\t\t\tJSON.stringify(expectedPaths) !== JSON.stringify([...paths].sort()) ||\n\t\t\tJSON.stringify(readTarget(target, paths)) !== JSON.stringify(preview.value)\n\t\t) {\n\t\t\tthrow new ScaffoldError('TARGET', 'Prune targets changed after their preview', {\n\t\t\t\ttarget,\n\t\t\t\t...(preview.success ? {} : { error: preview.error }),\n\t\t\t})\n\t\t}\n\t\tif (paths.length === 0) {\n\t\t\tconst result: MaterializeResult = {\n\t\t\t\ttarget,\n\t\t\t\twritten: [],\n\t\t\t\tcopied: [],\n\t\t\t\tskipped: [],\n\t\t\t\tremoved: [],\n\t\t\t}\n\t\t\tthis.#emitter.emit('done', result)\n\t\t\treturn result\n\t\t}\n\t\tconst transaction = WriteTransaction.create(target, [])\n\t\tconst files = paths.map((path) => {\n\t\t\tresolvePhysicalPath(target, path, 'WRITE', 'target')\n\t\t\treturn { path }\n\t\t})\n\t\tconst moved: typeof files = []\n\t\tconst staged = attempt(() => {\n\t\t\tfor (const file of files) {\n\t\t\t\tvalidateWriteTarget(transaction, undefined)\n\t\t\t\tconst source = resolvePhysicalPath(target, file.path, 'WRITE', 'target')\n\t\t\t\tconst sourceStatus = lstatSync(source)\n\t\t\t\tif (!sourceStatus.isFile() || sourceStatus.isSymbolicLink() || sourceStatus.nlink !== 1) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', `Prune target is not a physical file at ${file.path}`, {\n\t\t\t\t\t\tpath: file.path,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tconst sourceDigest = digestFile(source)\n\t\t\t\tconst expectedHex = preview.value[file.path]\n\t\t\t\tif (expectedHex === undefined || sourceDigest !== digestHex(expectedHex)) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', `Prune target changed at ${file.path}`, {\n\t\t\t\t\t\tpath: file.path,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tconst destination = resolvePhysicalPath(\n\t\t\t\t\ttransaction.backup,\n\t\t\t\t\tfile.path,\n\t\t\t\t\t'WRITE',\n\t\t\t\t\t'quarantine',\n\t\t\t\t)\n\t\t\t\tmkdirSync(dirname(destination), { recursive: true })\n\t\t\t\tvalidateWriteTarget(transaction, undefined)\n\t\t\t\tconst containedDestination = resolvePhysicalPath(\n\t\t\t\t\ttransaction.backup,\n\t\t\t\t\tfile.path,\n\t\t\t\t\t'WRITE',\n\t\t\t\t\t'quarantine',\n\t\t\t\t)\n\t\t\t\trenameSync(source, containedDestination)\n\t\t\t\tmoved.push(file)\n\t\t\t\tconst capturedStatus = lstatSync(containedDestination)\n\t\t\t\tconst capturedDigest = digestFile(containedDestination)\n\t\t\t\tif (\n\t\t\t\t\t!capturedStatus.isFile() ||\n\t\t\t\t\tcapturedStatus.isSymbolicLink() ||\n\t\t\t\t\tcapturedStatus.nlink !== 1 ||\n\t\t\t\t\tcapturedStatus.dev !== sourceStatus.dev ||\n\t\t\t\t\tcapturedStatus.ino !== sourceStatus.ino ||\n\t\t\t\t\tcapturedStatus.mtimeMs !== sourceStatus.mtimeMs ||\n\t\t\t\t\tcapturedStatus.size !== sourceStatus.size ||\n\t\t\t\t\tcapturedDigest !== sourceDigest\n\t\t\t\t) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', `Prune target changed at ${file.path}`, {\n\t\t\t\t\t\tpath: file.path,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t}\n\t\t})\n\t\tif (!staged.success) {\n\t\t\tconst recovery = attempt(() =>\n\t\t\t\trestoreFiles(\n\t\t\t\t\ttransaction,\n\t\t\t\t\tmoved.map((file) => file.path),\n\t\t\t\t),\n\t\t\t)\n\t\t\tconst cleanup = recovery.success\n\t\t\t\t? attempt(() => discardWriteTransaction(transaction))\n\t\t\t\t: undefined\n\t\t\tthrow new ScaffoldError('WRITE', 'Failed to stage prune targets', {\n\t\t\t\ttarget,\n\t\t\t\terror: staged.error,\n\t\t\t\tquarantine: transaction.backup,\n\t\t\t\tcommitted: false,\n\t\t\t\trecovery: recovery.success ? undefined : recovery.error,\n\t\t\t\tcleanup: cleanup?.success === false ? cleanup.error : undefined,\n\t\t\t})\n\t\t}\n\t\tconst removed = files.map((file) => file.path)\n\t\tconst cleared = attempt(() => discardWriteTransaction(transaction))\n\t\tif (!cleared.success) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Prune committed with cleanup residue', {\n\t\t\t\ttarget,\n\t\t\t\terror: cleared.error,\n\t\t\t\tquarantine: transaction.backup,\n\t\t\t\tcommitted: true,\n\t\t\t\tremoved,\n\t\t\t})\n\t\t}\n\t\tfor (const path of removed) this.#emitter.emit('remove', path)\n\t\tconst result: MaterializeResult = { target, written: [], copied: [], skipped: [], removed }\n\t\tthis.#emitter.emit('done', result)\n\t\treturn result\n\t}\n\n\tdestroy(): void {\n\t\tif (this.#destroyed) return\n\t\tthis.#destroyed = true\n\t\tthis.#emitter.emit('destroy')\n\t\tthis.#emitter.destroy()\n\t}\n\n\t#apply(\n\t\tplan: Plan,\n\t\ttarget: string,\n\t\tpreconditions?: readonly WritePrecondition[],\n\t): Pick<MaterializeResult, 'written' | 'copied'> {\n\t\tif (plan.artifacts.length === 0) return { written: [], copied: [] }\n\t\tconst paths = plan.artifacts.map((artifact) => artifact.path)\n\t\tconst transaction = WriteTransaction.create(target, paths, preconditions)\n\t\tconst staged = attempt(() => {\n\t\t\tfor (const artifact of plan.artifacts) {\n\t\t\t\tvalidateWriteDirectories(transaction)\n\t\t\t\tif (artifact.origin === 'host') this.#copy(artifact, transaction)\n\t\t\t\telse this.#write(artifact, transaction)\n\t\t\t}\n\t\t})\n\t\tif (!staged.success) {\n\t\t\tconst cleanup = attempt(() => discardWriteTransaction(transaction))\n\t\t\tthis.#emitter.emit('error', staged.error)\n\t\t\tthrow new ScaffoldError('WRITE', 'Failed to stage materialization', {\n\t\t\t\ttarget,\n\t\t\t\terror: staged.error,\n\t\t\t\tcleanup: cleanup.success ? undefined : cleanup.error,\n\t\t\t})\n\t\t}\n\t\tconst committed = attempt(() => commitWriteTransaction(transaction, paths))\n\t\tif (!committed.success) {\n\t\t\tthis.#emitter.emit('error', committed.error)\n\t\t\tthrow committed.error\n\t\t}\n\t\tconst written = plan.artifacts\n\t\t\t.filter((artifact) => artifact.origin !== 'host')\n\t\t\t.map((artifact) => artifact.path)\n\t\tconst copied = plan.artifacts\n\t\t\t.filter((artifact) => artifact.origin === 'host')\n\t\t\t.map((artifact) => artifact.path)\n\t\tfor (const path of written) this.#emitter.emit('write', path)\n\t\tfor (const path of copied) this.#emitter.emit('copy', path)\n\t\treturn { written, copied }\n\t}\n\n\t#copy(artifact: HostArtifact, transaction: WriteTransaction): void {\n\t\tconst source = artifact.source ?? artifact.path\n\t\tconst manifest = this.#manifest()\n\t\tconst entries =\n\t\t\tmanifest?.entries.filter(\n\t\t\t\t(entry) => entry.destination === source || entry.destination.startsWith(`${source}/`),\n\t\t\t) ?? []\n\t\tif (manifest !== undefined && entries.length === 0) {\n\t\t\tif (!source.startsWith('guides/src/') || !source.endsWith('.md')) {\n\t\t\t\t// Not a dependency-guide pointer — every HOST_PATHS source is\n\t\t\t\t// always staged by `stageHost`, so a non-guide zero-match means a\n\t\t\t\t// corrupted or truncated manifest, not a legitimate degrade (see\n\t\t\t\t// the class doc comment). Fail closed.\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'TARGET',\n\t\t\t\t\t`Manifest entry for \"${source}\" is missing — the vendored manifest may be corrupted or truncated`,\n\t\t\t\t\t{ target: transaction.stage, source },\n\t\t\t\t)\n\t\t\t}\n\t\t\t// A dependency-guide pointer — degrade to a stub instead of throwing.\n\t\t\t// The read path treats it as presence-owned while canonical bytes are\n\t\t\t// unavailable (see the class doc comment).\n\t\t\tconst to = resolvePhysicalPath(transaction.stage, artifact.path, 'WRITE', 'staging')\n\t\t\ttry {\n\t\t\t\tmkdirSync(dirname(to), { recursive: true })\n\t\t\t\tvalidateWriteDirectories(transaction)\n\t\t\t\tconst destination = resolvePhysicalPath(\n\t\t\t\t\ttransaction.stage,\n\t\t\t\t\tartifact.path,\n\t\t\t\t\t'WRITE',\n\t\t\t\t\t'staging',\n\t\t\t\t)\n\t\t\t\tconst content = guideStub(source)\n\t\t\t\twriteFileSync(destination, content, { encoding: 'utf8', flag: 'wx' })\n\t\t\t\tconst status = lstatSync(destination)\n\t\t\t\tif (\n\t\t\t\t\t!status.isFile() ||\n\t\t\t\t\tstatus.isSymbolicLink() ||\n\t\t\t\t\tstatus.nlink !== 1 ||\n\t\t\t\t\tdigestFile(destination) !== digestText(content)\n\t\t\t\t) {\n\t\t\t\t\tthrow new Error(`staged guide pointer changed at ${artifact.path}`)\n\t\t\t\t}\n\t\t\t\tvalidateWriteDirectories(transaction)\n\t\t\t} catch (error) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Failed to write host artifact stub at ${artifact.path}`, {\n\t\t\t\t\tpath: artifact.path,\n\t\t\t\t\terror,\n\t\t\t\t})\n\t\t\t}\n\t\t\treturn\n\t\t}\n\t\tif (manifest === undefined && artifact.hex === undefined) {\n\t\t\tconst directory = resolvePhysicalPath(this.#host, source, 'TARGET', 'host')\n\t\t\tconst status = lstatSync(directory)\n\t\t\tif (!status.isDirectory() || status.isSymbolicLink()) {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'TARGET',\n\t\t\t\t\t`Host artifact is not a physical directory at ${source}`,\n\t\t\t\t\t{\n\t\t\t\t\t\tsource,\n\t\t\t\t\t},\n\t\t\t\t)\n\t\t\t}\n\t\t\tconst destination = resolvePhysicalPath(transaction.stage, artifact.path, 'WRITE', 'staging')\n\t\t\tmkdirSync(destination, { recursive: true })\n\t\t\tvalidateWriteDirectories(transaction)\n\t\t\tconst staged = lstatSync(destination)\n\t\t\tif (!staged.isDirectory() || staged.isSymbolicLink()) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Staged host directory changed at ${artifact.path}`, {\n\t\t\t\t\tpath: artifact.path,\n\t\t\t\t})\n\t\t\t}\n\t\t\treturn\n\t\t}\n\t\tconst entry = entries[0]\n\t\tconst sourcePath = entry === undefined ? source : entry.storage\n\t\tconst destinationPath =\n\t\t\tentry === undefined ? artifact.path : remapArtifactPath(artifact, entry.destination)\n\t\tconst expected = artifact.hex\n\t\tif (expected === undefined) {\n\t\t\tthrow new ScaffoldError('TARGET', `Host artifact has no byte snapshot at ${source}`, {\n\t\t\t\tsource,\n\t\t\t})\n\t\t}\n\t\tconst from = resolvePhysicalPath(this.#host, sourcePath, 'TARGET', 'host')\n\t\tconst sourceStatus = lstatSync(from)\n\t\tif (\n\t\t\t!sourceStatus.isFile() ||\n\t\t\tsourceStatus.isSymbolicLink() ||\n\t\t\tsourceStatus.nlink !== 1 ||\n\t\t\tdigestFile(from) !== digestHex(expected)\n\t\t) {\n\t\t\tthrow new ScaffoldError('TARGET', `Host artifact changed at ${source}`, { source })\n\t\t}\n\t\tconst to = resolvePhysicalPath(transaction.stage, destinationPath, 'WRITE', 'staging')\n\t\ttry {\n\t\t\tmkdirSync(dirname(to), { recursive: true })\n\t\t\tvalidateWriteDirectories(transaction)\n\t\t\tconst destination = resolvePhysicalPath(\n\t\t\t\ttransaction.stage,\n\t\t\t\tdestinationPath,\n\t\t\t\t'WRITE',\n\t\t\t\t'staging',\n\t\t\t)\n\t\t\tcopyFileSync(from, destination, FS_CONSTANTS.COPYFILE_EXCL)\n\t\t\tif (entry?.executable === true) chmodSync(destination, 0o755)\n\t\t\tconst copied = lstatSync(destination)\n\t\t\tif (\n\t\t\t\t!copied.isFile() ||\n\t\t\t\tcopied.isSymbolicLink() ||\n\t\t\t\tcopied.nlink !== 1 ||\n\t\t\t\tdigestFile(destination) !== digestHex(expected)\n\t\t\t) {\n\t\t\t\tthrow new Error(`staged host artifact changed at ${artifact.path}`)\n\t\t\t}\n\t\t\tvalidateWriteDirectories(transaction)\n\t\t} catch (error) {\n\t\t\tthrow new ScaffoldError('WRITE', `Failed to copy host artifact at ${artifact.path}`, {\n\t\t\t\tpath: artifact.path,\n\t\t\t\terror,\n\t\t\t})\n\t\t}\n\t}\n\n\t// Lazily load + cache `host`'s `manifest.json` (once per instance) —\n\t// `undefined` means `host` has no manifest and callers fall back to the\n\t// 1:1 raw-root mapping.\n\t#prepare(plan: Plan, target: string, context: Plan = plan, hydrate = true): Plan {\n\t\tif (!isFilesystemPath(target)) {\n\t\t\tthrow new ScaffoldError('TARGET', 'Materializer target is malformed or exceeds its bounds', {\n\t\t\t\ttarget,\n\t\t\t})\n\t\t}\n\t\tif (!hasOnlyDataProperties(plan)) {\n\t\t\tthrow new ScaffoldError('INVALID', 'Materializer requires a data-only Plan')\n\t\t}\n\t\tconst snapshot = attempt(() => structuredClone(plan))\n\t\tconst parsed = snapshot.success ? parsePlan(snapshot.value) : undefined\n\t\tif (parsed === undefined) {\n\t\t\tthrow new ScaffoldError('INVALID', 'Materializer requires a valid Plan', {\n\t\t\t\t...(snapshot.success ? {} : { error: snapshot.error }),\n\t\t\t})\n\t\t}\n\t\tconst contextSnapshot =\n\t\t\tcontext === plan\n\t\t\t\t? snapshot\n\t\t\t\t: hasOnlyDataProperties(context)\n\t\t\t\t\t? attempt(() => structuredClone(context))\n\t\t\t\t\t: undefined\n\t\tconst parsedContext =\n\t\t\tcontext === plan\n\t\t\t\t? parsed\n\t\t\t\t: contextSnapshot?.success === true\n\t\t\t\t\t? parsePlan(contextSnapshot.value)\n\t\t\t\t\t: undefined\n\t\tif (parsedContext === undefined) {\n\t\t\tthrow new ScaffoldError('INVALID', 'Materializer requires a valid contextual Plan', {\n\t\t\t\t...(contextSnapshot?.success === false ? { error: contextSnapshot.error } : {}),\n\t\t\t})\n\t\t}\n\t\tconst validation = validatePlan(parsedContext)\n\t\tif (!validation.valid) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'INVALID',\n\t\t\t\t'Materializer requires a semantically and contextually valid Plan',\n\t\t\t\t{ questions: validation.questions },\n\t\t\t)\n\t\t}\n\t\tfor (const artifact of parsed.artifacts) {\n\t\t\tif (!isPortablePath(artifact.path)) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Invalid artifact path at ${artifact.path}`, {\n\t\t\t\t\tpath: artifact.path,\n\t\t\t\t})\n\t\t\t}\n\t\t\tif (isReservedTargetPath(artifact.path)) {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'WRITE',\n\t\t\t\t\t`Artifact path targets reserved repository metadata at ${artifact.path}`,\n\t\t\t\t\t{ path: artifact.path },\n\t\t\t\t)\n\t\t\t}\n\t\t\tif (artifact.source !== undefined && !isPortablePath(artifact.source)) {\n\t\t\t\tthrow new ScaffoldError('TARGET', `Invalid artifact source at ${artifact.source}`, {\n\t\t\t\t\tsource: artifact.source,\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\t\tconst hosted = parsed.artifacts.some((artifact) => artifact.origin === 'host')\n\t\tconst prepared = hydrate && hosted ? hydratePlan(parsed, this.#host) : parsed\n\t\tconst conflict = findFileConflict(prepared.artifacts.map((artifact) => artifact.path))\n\t\tif (conflict !== undefined) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'INVALID',\n\t\t\t\t`Plan artifact collision between \"${conflict[0]}\" and \"${conflict[1]}\"`,\n\t\t\t\t{ paths: conflict },\n\t\t\t)\n\t\t}\n\t\tif (!hydrate) return prepared\n\t\tconst manifest = hosted ? this.#manifest() : undefined\n\t\tfor (const artifact of prepared.artifacts) {\n\t\t\tconst destination = resolvePhysicalPath(target, artifact.path, 'WRITE', 'target')\n\t\t\tif (!existsSync(destination)) continue\n\t\t\tconst destinationStatus = attempt(() => lstatSync(destination))\n\t\t\tif (!destinationStatus.success) {\n\t\t\t\tthrow new ScaffoldError('TARGET', `Failed to inspect artifact target at ${artifact.path}`, {\n\t\t\t\t\tpath: artifact.path,\n\t\t\t\t\terror: destinationStatus.error,\n\t\t\t\t})\n\t\t\t}\n\t\t\tif (\n\t\t\t\tdestinationStatus.value.isSymbolicLink() ||\n\t\t\t\t(destinationStatus.value.isFile() && destinationStatus.value.nlink !== 1)\n\t\t\t) {\n\t\t\t\tthrow new ScaffoldError('TARGET', `Artifact target is linked at ${artifact.path}`, {\n\t\t\t\t\tpath: artifact.path,\n\t\t\t\t})\n\t\t\t}\n\t\t\tlet directory = false\n\t\t\tif (artifact.origin === 'host' && manifest === undefined && artifact.hex === undefined) {\n\t\t\t\tconst source = artifact.source ?? artifact.path\n\t\t\t\tconst sourcePath = resolvePhysicalPath(this.#host, source, 'TARGET', 'host')\n\t\t\t\tconst sourceStatus = attempt(() => lstatSync(sourcePath))\n\t\t\t\tif (!sourceStatus.success) {\n\t\t\t\t\tthrow new ScaffoldError('TARGET', `Failed to inspect host artifact at ${source}`, {\n\t\t\t\t\t\tsource,\n\t\t\t\t\t\terror: sourceStatus.error,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tdirectory = sourceStatus.value.isDirectory() && !sourceStatus.value.isSymbolicLink()\n\t\t\t}\n\t\t\tif (destinationStatus.value.isDirectory() !== directory) {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'TARGET',\n\t\t\t\t\t`Artifact target has an incompatible shape at ${artifact.path}`,\n\t\t\t\t\t{\n\t\t\t\t\t\tpath: artifact.path,\n\t\t\t\t\t\tdirectory,\n\t\t\t\t\t},\n\t\t\t\t)\n\t\t\t}\n\t\t}\n\t\treturn prepared\n\t}\n\n\t#manifest(): HostManifest | undefined {\n\t\tif (!this.#manifestLoaded) {\n\t\t\tthis.#manifestValue = readHostManifest(this.#host)\n\t\t\tthis.#manifestLoaded = true\n\t\t}\n\t\treturn this.#manifestValue\n\t}\n\n\t#write(artifact: ContentArtifact, transaction: WriteTransaction): void {\n\t\tconst to = resolvePhysicalPath(transaction.stage, artifact.path, 'WRITE', 'staging')\n\t\ttry {\n\t\t\tmkdirSync(dirname(to), { recursive: true })\n\t\t\tvalidateWriteDirectories(transaction)\n\t\t\tconst destination = resolvePhysicalPath(transaction.stage, artifact.path, 'WRITE', 'staging')\n\t\t\twriteFileSync(destination, artifact.content, { encoding: 'utf8', flag: 'wx' })\n\t\t\tconst status = lstatSync(destination)\n\t\t\tif (\n\t\t\t\t!status.isFile() ||\n\t\t\t\tstatus.isSymbolicLink() ||\n\t\t\t\tstatus.nlink !== 1 ||\n\t\t\t\tdigestFile(destination) !== digestText(artifact.content)\n\t\t\t) {\n\t\t\t\tthrow new Error(`staged artifact changed at ${artifact.path}`)\n\t\t\t}\n\t\t\tvalidateWriteDirectories(transaction)\n\t\t} catch (error) {\n\t\t\tthrow new ScaffoldError('WRITE', `Failed to write artifact at ${artifact.path}`, {\n\t\t\t\tpath: artifact.path,\n\t\t\t\terror,\n\t\t\t})\n\t\t}\n\t}\n\n\t#ensureAlive(): void {\n\t\tif (this.#destroyed) throw new ScaffoldError('DESTROYED', 'Materializer has been destroyed')\n\t}\n}\n","import type {\n\tSyncAllowance,\n\tSyncEventMap,\n\tSyncInterface,\n\tSyncOptions,\n\tVersionLookup,\n\tWritePrecondition,\n} from './types.js'\nimport type {\n\tCatalogEntry,\n\tDependency,\n\tFreshness,\n\tGuideSync,\n\tSyncReport,\n\tVersionSync,\n} from '@src/core'\nimport type { EmitterInterface } from '@orkestrel/emitter'\nimport { lstatSync, mkdirSync, writeFileSync } from 'node:fs'\nimport { dirname } from 'node:path'\nimport { attempt, isRecord, parseJSON } from '@orkestrel/contract'\nimport { Emitter } from '@orkestrel/emitter'\nimport {\n\tisSyncReport,\n\thasOnlyDataProperties,\n\tmanifestToDependencies,\n\tmanifestToName,\n\townDataValue,\n\tparseSyncReport,\n\trangeToFreshness,\n\tScaffoldError,\n\tDEPENDENCY_NAME_PATTERN,\n\tMAX_ARTIFACT_BYTES,\n\tSYNC_BASELINE_PATTERN,\n\tVERSION_PATTERN,\n} from '@src/core'\nimport {\n\tcommitWriteTransaction,\n\tdigestFile,\n\tdigestText,\n\tdiscardWriteTransaction,\n\tguideToDescription,\n\tpackageShortName,\n\treadGuideReferences,\n\treadManifest,\n\tresolvePhysicalPath,\n\tresolveGuideWrites,\n\tsyncReportOf,\n\tvalidateWriteDirectories,\n} from './helpers.js'\nimport {\n\tparseSyncCurrent,\n\tparseSyncDependencies,\n\tparseSyncNames,\n\tparseSyncOptions,\n} from './parsers.js'\nimport { isCatalogDescription, isFilesystemPath, isMissingPathError } from './validators.js'\nimport { WriteTransaction } from './WriteTransaction.js'\nimport {\n\tDEFAULT_SYNC_BUDGET,\n\tDEFAULT_SYNC_CONCURRENCY,\n\tDEFAULT_SYNC_ITEMS,\n\tDEFAULT_SYNC_LIMIT,\n\tDEFAULT_SYNC_TIMEOUT,\n} from './constants.js'\n\n/**\n * The upstream-synchronization entity (server) — the impure FETCH sibling of\n * `Materializer`, Promise-based and network-only.\n *\n * @remarks\n * Every method reads upstream over HTTPS with a 10-second per-request\n * `AbortSignal.timeout` and bounded `concurrency` (default 6, never an\n * unbounded `Promise.all`). The default COLLECT posture captures each\n * dependency's `freshness` (`404` → `missing`, transport / other non-2xx →\n * `failed`) into the result; `strict` mode instead throws\n * `ScaffoldError('FETCH', …)` naming the failing URL. `guides`'s optional\n * `current` parameter is a caller-supplied local-mirror content map keyed by\n * dependency NAME (the `diffPlan` caller-supplied-reference pattern): WITH the\n * map, a fetched guide byte-equal to its entry verdicts `current`, anything\n * differing or absent from the map verdicts `behind`; WITHOUT the map, every\n * successful fetch verdicts `behind` (no reference means it needs syncing).\n * `pull` builds that map itself from the TARGET's declared dependency mirrors;\n * `mirror` builds it from the registry's exact organization package list,\n * excluding the target's own guide and issuing no registry version reads. Both\n * verdicts are target-relative; `write` commits only the\n * `behind` guides (never `current`, `missing`, or `failed`, which carries no\n * trustworthy content) under the same realpath-anchored containment law\n * `Materializer` enforces. After `destroy()` every method throws `DESTROYED`;\n * teardown is idempotent, emitter last.\n *\n * @example\n * ```ts\n * import { createSync } from '@orkestrel/scaffold/server'\n *\n * const sync = createSync()\n * const report = await sync.pull('.')\n * if (report.failed === 0) await sync.write(report, '.')\n * sync.destroy()\n * ```\n */\nexport class Sync implements SyncInterface {\n\treadonly #emitter: Emitter<SyncEventMap>\n\treadonly #guidesBase: string\n\treadonly #branch: string\n\treadonly #guidesTimeout: number\n\treadonly #registryBase: string\n\treadonly #registryTimeout: number\n\treadonly #concurrency: number\n\treadonly #retries: number\n\treadonly #strict: boolean\n\treadonly #limit: number\n\treadonly #items: number\n\treadonly #budget: number\n\treadonly #controller = new AbortController()\n\t#destroyed = false\n\n\tconstructor(options?: SyncOptions) {\n\t\tconst parsed = parseSyncOptions(options)\n\t\tthis.#emitter = new Emitter<SyncEventMap>({\n\t\t\t...(parsed.on === undefined ? {} : { on: parsed.on }),\n\t\t\t...(parsed.error === undefined ? {} : { error: parsed.error }),\n\t\t})\n\t\tthis.#guidesBase = parsed.guides?.base ?? 'https://raw.githubusercontent.com'\n\t\tthis.#branch = parsed.guides?.branch ?? 'main'\n\t\tthis.#guidesTimeout = parsed.guides?.timeout ?? DEFAULT_SYNC_TIMEOUT\n\t\tthis.#registryBase = parsed.registry?.base ?? 'https://registry.npmjs.org'\n\t\tthis.#registryTimeout = parsed.registry?.timeout ?? DEFAULT_SYNC_TIMEOUT\n\t\tthis.#concurrency = parsed.concurrency ?? DEFAULT_SYNC_CONCURRENCY\n\t\tthis.#retries = parsed.retries ?? 0\n\t\tthis.#strict = parsed.strict ?? false\n\t\tthis.#limit = parsed.limit ?? DEFAULT_SYNC_LIMIT\n\t\tthis.#items = parsed.items ?? DEFAULT_SYNC_ITEMS\n\t\tthis.#budget = parsed.budget ?? DEFAULT_SYNC_BUDGET\n\t}\n\n\tget emitter(): EmitterInterface<SyncEventMap> {\n\t\treturn this.#emitter\n\t}\n\n\tasync lookup(names: readonly string[]): Promise<readonly VersionLookup[]> {\n\t\tthis.#ensureAlive()\n\t\treturn this.#lookup(names, Float64Array.of(this.#budget))\n\t}\n\n\tasync guides(\n\t\tdeps: readonly Dependency[],\n\t\tcurrent?: Readonly<Record<string, string>>,\n\t): Promise<readonly GuideSync[]> {\n\t\tthis.#ensureAlive()\n\t\tconst parsed = parseSyncDependencies(deps, false)\n\t\treturn this.#guides(\n\t\t\tparsed.map((dependency) => dependency.name),\n\t\t\tcurrent,\n\t\t\tFloat64Array.of(this.#budget),\n\t\t)\n\t}\n\n\tasync versions(deps: readonly Dependency[]): Promise<readonly VersionSync[]> {\n\t\tthis.#ensureAlive()\n\t\treturn this.#versions(deps, Float64Array.of(this.#budget))\n\t}\n\n\t#guides(\n\t\tnames: readonly string[],\n\t\tcurrent: Readonly<Record<string, string>> | undefined,\n\t\tallowance: SyncAllowance,\n\t): Promise<readonly GuideSync[]> {\n\t\tconst parsed = parseSyncNames(names)\n\t\tif (parsed.length > this.#items) {\n\t\t\tthrow new ScaffoldError('INVALID', 'Sync dependency count exceeds its item limit', {\n\t\t\t\titems: parsed.length,\n\t\t\t\tlimit: this.#items,\n\t\t\t})\n\t\t}\n\t\tconst reference = parseSyncCurrent(current, parsed, this.#budget)\n\t\treturn Sync.#runPool(parsed, this.#concurrency, async (name) => {\n\t\t\tconst short = packageShortName(name)\n\t\t\tconst url = this.#guideUrl(short)\n\t\t\tconst outcome = await Sync.#fetchText(\n\t\t\t\turl,\n\t\t\t\tthis.#guidesTimeout,\n\t\t\t\tthis.#retries,\n\t\t\t\tthis.#limit,\n\t\t\t\tallowance,\n\t\t\t\tthis.#controller.signal,\n\t\t\t)\n\t\t\tconst guide = Sync.#toGuideSync(name, short, outcome, reference)\n\t\t\tif (outcome.kind === 'failed') this.#emitter.emit('error', outcome.error)\n\t\t\tthis.#emitter.emit('guide', name)\n\t\t\tif (this.#strict && (guide.freshness === 'missing' || guide.freshness === 'failed')) {\n\t\t\t\tthrow new ScaffoldError('FETCH', `Failed to fetch guide at ${url}`, {\n\t\t\t\t\turl,\n\t\t\t\t\tname,\n\t\t\t\t})\n\t\t\t}\n\t\t\treturn guide\n\t\t})\n\t}\n\n\tasync #versions(\n\t\tdeps: readonly Dependency[],\n\t\tallowance: SyncAllowance,\n\t): Promise<readonly VersionSync[]> {\n\t\tconst parsed = parseSyncDependencies(deps, true)\n\t\tconst lookups = await this.#lookup(\n\t\t\tparsed.map((dependency) => dependency.name),\n\t\t\tallowance,\n\t\t)\n\t\tconst versions: VersionSync[] = []\n\t\tfor (let index = 0; index < parsed.length; index += 1) {\n\t\t\tconst dep = parsed[index]\n\t\t\tconst lookup = lookups[index]\n\t\t\tif (dep === undefined || lookup === undefined) {\n\t\t\t\tthrow new ScaffoldError('INVALID', 'Sync version lookup result is incomplete')\n\t\t\t}\n\t\t\tversions.push(Sync.#toVersionSync(dep, lookup))\n\t\t}\n\t\treturn Object.freeze(versions)\n\t}\n\n\t#lookup(names: readonly string[], allowance: SyncAllowance): Promise<readonly VersionLookup[]> {\n\t\tconst parsed = parseSyncNames(names)\n\t\tif (parsed.length > this.#items) {\n\t\t\tthrow new ScaffoldError('INVALID', 'Sync dependency count exceeds its item limit', {\n\t\t\t\titems: parsed.length,\n\t\t\t\tlimit: this.#items,\n\t\t\t})\n\t\t}\n\t\treturn Sync.#runPool(parsed, this.#concurrency, async (name) => {\n\t\t\tconst url = this.#registryUrl(name)\n\t\t\tconst outcome = await Sync.#fetchText(\n\t\t\t\turl,\n\t\t\t\tthis.#registryTimeout,\n\t\t\t\tthis.#retries,\n\t\t\t\tthis.#limit,\n\t\t\t\tallowance,\n\t\t\t\tthis.#controller.signal,\n\t\t\t)\n\t\t\tconst version = Sync.#toVersionLookup(name, outcome)\n\t\t\tif (outcome.kind === 'failed') this.#emitter.emit('error', outcome.error)\n\t\t\tthis.#emitter.emit('version', name)\n\t\t\tif (this.#strict && (version.freshness === 'missing' || version.freshness === 'failed')) {\n\t\t\t\tthrow new ScaffoldError('FETCH', `Failed to fetch registry version at ${url}`, {\n\t\t\t\t\turl,\n\t\t\t\t\tname,\n\t\t\t\t})\n\t\t\t}\n\t\t\treturn version\n\t\t})\n\t}\n\n\t/**\n\t * The fleet package catalog, sourced from the npm registry — the\n\t * AUTHORITATIVE enumeration (never a caller-supplied root).\n\t *\n\t * @returns One {@link CatalogEntry} per `@orkestrel/*` package the registry\n\t * lists, code-unit sorted by `name`.\n\t * @remarks\n\t * Three fetches build each entry: (1) the org's exact package-list\n\t * (`-/org/orkestrel/package`) enumerates every published name — an\n\t * unreachable or malformed response throws a coded `ScaffoldError('FETCH')`\n\t * UNCONDITIONALLY (never gated by `strict`), since without it there is no\n\t * catalog to build; (2) each name's own registry packument supplies\n\t * `version` (`dist-tags.latest`) and a registry-path `description`\n\t * fallback — a failed/malformed packument keeps the entry (degraded:\n\t * `version: ''`) rather than dropping it, since the org list already\n\t * proved the package exists; (3) each name's own guide\n\t * (`guides/src/<short>.md`, same canonical URL as `guides()`, fetched\n\t * unauthenticated — every fleet repo is public) supplies the PREFERRED\n\t * `description` — its first blockquote's first paragraph — falling back\n\t * to the packument description when the guide 404s, faults, or carries no\n\t * blockquote; a 404 STAYS LISTED (it is a reachability signal, not an\n\t * absence) with a note reading `guide unreachable (HTTP 404 — repo\n\t * private or guide missing?)`. Emits `package` once per entry with a\n\t * combined human-readable `note` (empty when both fetches succeeded)\n\t * alongside the existing `error` events for each degraded sub-fetch.\n\t */\n\tasync catalog(): Promise<readonly CatalogEntry[]> {\n\t\tthis.#ensureAlive()\n\t\tconst allowance: SyncAllowance = Float64Array.of(this.#budget)\n\t\tconst names = await this.#packages(allowance)\n\t\tconst entries = await Sync.#runPool(names, this.#concurrency, async (name) => {\n\t\t\tconst packumentOutcome = await Sync.#fetchText(\n\t\t\t\tthis.#registryUrl(name),\n\t\t\t\tthis.#registryTimeout,\n\t\t\t\tthis.#retries,\n\t\t\t\tthis.#limit,\n\t\t\t\tallowance,\n\t\t\t\tthis.#controller.signal,\n\t\t\t)\n\t\t\tconst packument = Sync.#toPackument(packumentOutcome)\n\t\t\tconst short = packageShortName(name)\n\t\t\tconst guideOutcome = await Sync.#fetchText(\n\t\t\t\tthis.#guideUrl(short),\n\t\t\t\tthis.#guidesTimeout,\n\t\t\t\tthis.#retries,\n\t\t\t\tthis.#limit,\n\t\t\t\tallowance,\n\t\t\t\tthis.#controller.signal,\n\t\t\t)\n\t\t\tconst guide = Sync.#toGuideDescription(guideOutcome)\n\t\t\tif (packumentOutcome.kind === 'failed') this.#emitter.emit('error', packumentOutcome.error)\n\t\t\tif (guideOutcome.kind === 'failed') this.#emitter.emit('error', guideOutcome.error)\n\t\t\tconst description = guide.description ?? packument.description\n\t\t\tconst note = Sync.#combineNote(guide.note, packument.note)\n\t\t\tthis.#emitter.emit('package', name, note)\n\t\t\treturn { name, version: packument.version, description }\n\t\t})\n\t\treturn entries\n\t}\n\n\tasync pull(target: string, dependencies?: readonly Dependency[]): Promise<SyncReport> {\n\t\tthis.#ensureAlive()\n\t\tconst manifest = readManifest(target)\n\t\tconst declared = manifestToDependencies(manifest)\n\t\tconst deps = dependencies === undefined ? declared : parseSyncDependencies(dependencies, false)\n\t\tif (\n\t\t\tdependencies !== undefined &&\n\t\t\tdeps.some(\n\t\t\t\t(dependency) =>\n\t\t\t\t\t!declared.some(\n\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\tcandidate.name === dependency.name && candidate.range === dependency.range,\n\t\t\t\t\t),\n\t\t\t)\n\t\t) {\n\t\t\tthrow new ScaffoldError('INVALID', 'Sync pull selection is not declared by the target')\n\t\t}\n\t\tconst name = manifestToName(manifest)\n\t\tconst guideNames = deps\n\t\t\t.map((dependency) => dependency.name)\n\t\t\t.filter((dependency) => dependency !== name)\n\t\tconst current = readGuideReferences(target, guideNames)\n\t\tconst allowance: SyncAllowance = Float64Array.of(this.#budget)\n\t\tconst guides = await this.#guides(guideNames, current, allowance)\n\t\tconst versions = await this.#versions(deps, allowance)\n\t\tconst report = syncReportOf(target, guides, versions)\n\t\tthis.#emitter.emit('done', report)\n\t\treturn report\n\t}\n\n\tasync mirror(target: string): Promise<SyncReport> {\n\t\tthis.#ensureAlive()\n\t\tconst manifest = readManifest(target)\n\t\tconst name = manifestToName(manifest)\n\t\tconst allowance: SyncAllowance = Float64Array.of(this.#budget)\n\t\tconst names = (await this.#packages(allowance)).filter((candidate) => candidate !== name)\n\t\tconst current = readGuideReferences(target, names)\n\t\tconst guides = await this.#guides(names, current, allowance)\n\t\tconst report = syncReportOf(target, guides, [])\n\t\tthis.#emitter.emit('done', report)\n\t\treturn report\n\t}\n\n\tasync write(report: SyncReport, target: string): Promise<readonly string[]> {\n\t\tthis.#ensureAlive()\n\t\tif (!isFilesystemPath(target)) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Sync write target is malformed or exceeds its bounds', {\n\t\t\t\ttarget,\n\t\t\t})\n\t\t}\n\t\tif (!hasOnlyDataProperties(report) || !isSyncReport(report)) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Sync report is malformed')\n\t\t}\n\t\tconst snapshot = attempt(() => structuredClone(report))\n\t\tconst parsed = snapshot.success ? parseSyncReport(snapshot.value) : undefined\n\t\tif (parsed === undefined) {\n\t\t\tthrow new ScaffoldError('WRITE', 'Sync report is malformed', {\n\t\t\t\t...(snapshot.success ? {} : { error: snapshot.error }),\n\t\t\t})\n\t\t}\n\t\tconst destinations = resolveGuideWrites(parsed.guides, target)\n\t\tconst written = destinations.map(({ guide }) => guide.path)\n\t\tif (written.length === 0) return written\n\t\tconst preconditions: WritePrecondition[] = []\n\t\tfor (const { guide, destination } of destinations) {\n\t\t\tif (guide.baseline === undefined || !SYNC_BASELINE_PATTERN.test(guide.baseline)) {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'WRITE',\n\t\t\t\t\t`Guide baseline is missing or malformed at ${guide.path}`,\n\t\t\t\t\t{\n\t\t\t\t\t\tpath: guide.path,\n\t\t\t\t\t},\n\t\t\t\t)\n\t\t\t}\n\t\t\tconst status = attempt(() => lstatSync(destination))\n\t\t\tif (guide.baseline === 'absent') {\n\t\t\t\tif (status.success || !isMissingPathError(status.error)) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', `Guide destination changed at ${guide.path}`, {\n\t\t\t\t\t\tpath: guide.path,\n\t\t\t\t\t\t...(status.success ? {} : { error: status.error }),\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tpreconditions.push({ path: guide.path, shape: 'absent' })\n\t\t\t} else if (\n\t\t\t\t!status.success ||\n\t\t\t\t!status.value.isFile() ||\n\t\t\t\tstatus.value.isSymbolicLink() ||\n\t\t\t\tstatus.value.nlink !== 1 ||\n\t\t\t\tdigestFile(destination) !== guide.baseline\n\t\t\t) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `Guide destination changed at ${guide.path}`, {\n\t\t\t\t\tpath: guide.path,\n\t\t\t\t\t...(status.success ? {} : { error: status.error }),\n\t\t\t\t})\n\t\t\t} else {\n\t\t\t\tpreconditions.push({\n\t\t\t\t\tpath: guide.path,\n\t\t\t\t\tshape: 'file',\n\t\t\t\t\tdigest: guide.baseline,\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\t\tconst transaction = WriteTransaction.create(target, written, preconditions)\n\t\tconst staged = attempt(() => {\n\t\t\tfor (const { guide } of destinations) {\n\t\t\t\tif (Buffer.byteLength(guide.content, 'utf8') > MAX_ARTIFACT_BYTES) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', `Guide exceeds the artifact limit at ${guide.path}`, {\n\t\t\t\t\t\tpath: guide.path,\n\t\t\t\t\t\tlimit: MAX_ARTIFACT_BYTES,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tvalidateWriteDirectories(transaction)\n\t\t\t\tconst candidate = resolvePhysicalPath(transaction.stage, guide.path, 'WRITE', 'staging')\n\t\t\t\tmkdirSync(dirname(candidate), { recursive: true })\n\t\t\t\tvalidateWriteDirectories(transaction)\n\t\t\t\tconst destination = resolvePhysicalPath(transaction.stage, guide.path, 'WRITE', 'staging')\n\t\t\t\twriteFileSync(destination, guide.content, {\n\t\t\t\t\tencoding: 'utf8',\n\t\t\t\t\tflag: 'wx',\n\t\t\t\t})\n\t\t\t\tconst status = lstatSync(destination)\n\t\t\t\tif (\n\t\t\t\t\t!status.isFile() ||\n\t\t\t\t\tstatus.isSymbolicLink() ||\n\t\t\t\t\tstatus.nlink !== 1 ||\n\t\t\t\t\tdigestFile(destination) !== digestText(guide.content)\n\t\t\t\t) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', `Staged guide changed at ${guide.path}`, {\n\t\t\t\t\t\tpath: guide.path,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tvalidateWriteDirectories(transaction)\n\t\t\t}\n\t\t})\n\t\tif (!staged.success) {\n\t\t\tconst cleanup = attempt(() => discardWriteTransaction(transaction))\n\t\t\tthis.#emitter.emit('error', staged.error)\n\t\t\tthrow new ScaffoldError('WRITE', 'Failed to stage guide synchronization', {\n\t\t\t\ttarget,\n\t\t\t\terror: staged.error,\n\t\t\t\tcleanup: cleanup.success ? undefined : cleanup.error,\n\t\t\t})\n\t\t}\n\t\tconst committed = attempt(() => commitWriteTransaction(transaction, written))\n\t\tif (!committed.success) {\n\t\t\tthis.#emitter.emit('error', committed.error)\n\t\t\tthrow committed.error\n\t\t}\n\t\tfor (const path of written) this.#emitter.emit('write', path)\n\t\treturn written\n\t}\n\n\tdestroy(): void {\n\t\tif (this.#destroyed) return\n\t\tthis.#destroyed = true\n\t\tthis.#controller.abort()\n\t\tthis.#emitter.emit('destroy')\n\t\tthis.#emitter.destroy()\n\t}\n\n\t// The canonical raw.githubusercontent.com form is\n\t// `/orkestrel/<short>/refs/heads/<branch>/…`. Requests use\n\t// `redirect: 'manual'`, so this direct URL never relaxes redirect policy.\n\t#guideUrl(short: string): string {\n\t\tconst branch = this.#branch\n\t\t\t.split('/')\n\t\t\t.map((segment) => encodeURIComponent(segment))\n\t\t\t.join('/')\n\t\tconst encoded = encodeURIComponent(short)\n\t\treturn `${this.#guidesBase}/orkestrel/${encoded}/refs/heads/${branch}/guides/src/${encoded}.md`\n\t}\n\n\t// npm's canonical scoped-package registry path keeps the literal `@` and\n\t// encodes only the slash (`encodeURIComponent` would also escape the `@`\n\t// into `%40`, which registries accept but which diverges from the\n\t// canonical form). A valid npm package name — `@orkestrel/*` or any other\n\t// scoped/unscoped name (`extras` may now carry either, per\n\t// `EXTRA_NAME_PATTERN`) — has at most one `/` (the single scope\n\t// boundary), so this plain first-occurrence slash replace is exhaustive\n\t// for every name `versions()` is called with, not just `@orkestrel/*`.\n\t#registryUrl(name: string): string {\n\t\treturn `${this.#registryBase}/${name.replace('/', '%2F')}`\n\t}\n\n\t// The registry's exact-membership org package list — a flat name→access\n\t// map, not a fuzzy relevance search — is `catalog()`'s authoritative\n\t// enumeration source (never `-/v1/search`, whose `scope:` qualifier does\n\t// not filter as its name implies).\n\t#orgUrl(): string {\n\t\treturn `${this.#registryBase}/-/org/orkestrel/package`\n\t}\n\n\tasync #packages(allowance: SyncAllowance): Promise<readonly string[]> {\n\t\tconst url = this.#orgUrl()\n\t\tconst outcome = await Sync.#fetchText(\n\t\t\turl,\n\t\t\tthis.#registryTimeout,\n\t\t\tthis.#retries,\n\t\t\tthis.#limit,\n\t\t\tallowance,\n\t\t\tthis.#controller.signal,\n\t\t)\n\t\tconst names = Sync.#toOrgPackages(outcome, url)\n\t\tif (names.length > this.#items) {\n\t\t\tthrow new ScaffoldError('FETCH', `Package list at ${url} exceeds the item limit`, {\n\t\t\t\turl,\n\t\t\t\titems: names.length,\n\t\t\t\tlimit: this.#items,\n\t\t\t})\n\t\t}\n\t\treturn [...names].sort((left, right) => (left < right ? -1 : left > right ? 1 : 0))\n\t}\n\n\t// Bounded-concurrency worker pool — never an unbounded `Promise.all` (§12).\n\t// `concurrency` workers pull from a shared cursor over `items`, each\n\t// running `worker` to completion before pulling the next index; results\n\t// land back at their ORIGINAL index, so the returned array preserves\n\t// input order. Fail-fast-SAFELY: the first worker error stops the cursor\n\t// from issuing further items (a `stopped` flag, checked before each pull)\n\t// and every worker is awaited via `Promise.allSettled` — so a sibling's\n\t// later rejection is always observed, never an `unhandledRejection` — then\n\t// the FIRST error is rethrown.\n\tstatic async #runPool<T, R>(\n\t\titems: readonly T[],\n\t\tconcurrency: number,\n\t\tworker: (item: T) => Promise<R>,\n\t): Promise<R[]> {\n\t\tconst results: R[] = new Array(items.length)\n\t\tconst state: {\n\t\t\tcursor: number\n\t\t\tstopped: boolean\n\t\t\tfirstError: { readonly error: unknown } | undefined\n\t\t} = { cursor: 0, stopped: false, firstError: undefined }\n\t\tconst workers = Array.from({ length: Math.min(concurrency, items.length) }, () =>\n\t\t\tSync.#drain({ items, worker, results, state }),\n\t\t)\n\t\tawait Promise.allSettled(workers)\n\t\tif (state.firstError !== undefined) throw state.firstError.error\n\t\treturn results\n\t}\n\n\t// One worker's pull-and-run loop over the shared pool `state` — extracted\n\t// from `#runPool` so no function is declared inside another (§4). `state`\n\t// carries the mutable cursor/stopped/firstError coordination shared by\n\t// every concurrent worker; `items`, `worker`, and `results` are the pool's\n\t// immutable inputs and output sink.\n\tstatic async #drain<T, R>(pool: {\n\t\treadonly items: readonly T[]\n\t\treadonly worker: (item: T) => Promise<R>\n\t\treadonly results: R[]\n\t\treadonly state: {\n\t\t\tcursor: number\n\t\t\tstopped: boolean\n\t\t\tfirstError: { readonly error: unknown } | undefined\n\t\t}\n\t}): Promise<void> {\n\t\tfor (;;) {\n\t\t\tif (pool.state.stopped) return\n\t\t\tconst index = pool.state.cursor\n\t\t\tpool.state.cursor += 1\n\t\t\tif (index >= pool.items.length) return\n\t\t\tconst item = pool.items[index]\n\t\t\tif (item === undefined) return\n\t\t\ttry {\n\t\t\t\tpool.results[index] = await pool.worker(item)\n\t\t\t} catch (error) {\n\t\t\t\tif (pool.state.firstError === undefined) pool.state.firstError = { error }\n\t\t\t\tpool.state.stopped = true\n\t\t\t\treturn\n\t\t\t}\n\t\t}\n\t}\n\n\t// One HTTPS GET with a per-request `AbortSignal.timeout` and up to\n\t// `retries` additional attempts on a TRANSPORT fault (a thrown/rejected\n\t// fetch, a non-2xx non-404 response, a manual 3xx redirect, or a body\n\t// exceeding `limit` bytes) — a `404` is a definitive upstream answer\n\t// and is never retried. Every `failed` outcome carries `note`, the LAST\n\t// attempt's human-readable cause — a transport error message (with an\n\t// `ECONNREFUSED`-style cause code appended when present), an `HTTP\n\t// <status>`, the fixed redirect-blocked string, or the oversized-body\n\t// message — so a caller can tell WHY, not just THAT, the fetch failed.\n\tstatic async #fetchText(\n\t\turl: string,\n\t\ttimeout: number,\n\t\tretries: number,\n\t\tlimit: number,\n\t\tallowance: SyncAllowance,\n\t\tsignal: AbortSignal,\n\t): Promise<\n\t\t| { readonly kind: 'ok'; readonly text: string }\n\t\t| { readonly kind: 'missing' }\n\t\t| { readonly kind: 'failed'; readonly error: unknown; readonly note: string }\n\t> {\n\t\tlet lastError: unknown\n\t\tlet lastNote = ''\n\t\tfor (let retry = 0; retry <= retries; retry += 1) {\n\t\t\tif (signal.aborted) {\n\t\t\t\tthrow new ScaffoldError('DESTROYED', 'Sync has been destroyed')\n\t\t\t}\n\t\t\ttry {\n\t\t\t\t// `redirect: 'manual'` prevents a compromised or misconfigured endpoint\n\t\t\t\t// must not silently redirect cross-host; any 3xx (or the opaque\n\t\t\t\t// redirect response `redirect: 'manual'` itself resolves) is treated\n\t\t\t\t// as a distinct, named transport fault — never a bare status code.\n\t\t\t\t// Every fetch is unauthenticated (no headers) — every fleet repo is\n\t\t\t\t// public, so reachability alone is the signal.\n\t\t\t\tconst response = await fetch(url, {\n\t\t\t\t\tsignal: AbortSignal.any([signal, AbortSignal.timeout(timeout)]),\n\t\t\t\t\tredirect: 'manual',\n\t\t\t\t})\n\t\t\t\tif (response.status === 404) {\n\t\t\t\t\tawait Sync.#cancel(response)\n\t\t\t\t\treturn { kind: 'missing' }\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\tresponse.type === 'opaqueredirect' ||\n\t\t\t\t\t(response.status >= 300 && response.status < 400)\n\t\t\t\t) {\n\t\t\t\t\tlastNote = 'redirected (redirect following is disabled)'\n\t\t\t\t\tlastError = new Error(`Redirect blocked for ${url}`)\n\t\t\t\t\tawait Sync.#cancel(response)\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\tif (!response.ok) {\n\t\t\t\t\tlastNote = `HTTP ${String(response.status)}`\n\t\t\t\t\tlastError = new Error(`Unexpected HTTP status ${response.status} for ${url}`)\n\t\t\t\t\tawait Sync.#cancel(response)\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\tconst read = await Sync.#readBounded(response, url, limit, allowance)\n\t\t\t\tif (!read.ok) {\n\t\t\t\t\tlastError = read.error\n\t\t\t\t\tlastNote = read.note\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\treturn { kind: 'ok', text: read.text }\n\t\t\t} catch (error) {\n\t\t\t\tif (signal.aborted) {\n\t\t\t\t\tthrow new ScaffoldError('DESTROYED', 'Sync has been destroyed', { error })\n\t\t\t\t}\n\t\t\t\tlastError = error\n\t\t\t\tlastNote = Sync.#transportNote(error)\n\t\t\t}\n\t\t}\n\t\treturn { kind: 'failed', error: lastError, note: lastNote }\n\t}\n\n\tstatic async #cancel(response: Response): Promise<void> {\n\t\tawait response.body?.cancel()\n\t}\n\n\t// A thrown/rejected `fetch`'s message, with the underlying cause's `code`\n\t// (e.g. `ECONNREFUSED`, `ETIMEDOUT`) appended when the runtime attaches\n\t// one — Node's `fetch failed` wraps the real socket error in `.cause`.\n\tstatic #transportNote(error: unknown): string {\n\t\tif (!(error instanceof Error)) return String(error)\n\t\tconst code = Sync.#causeCode(error)\n\t\treturn code !== undefined ? `${error.message}: ${code}` : error.message\n\t}\n\n\tstatic #causeCode(error: Error): string | undefined {\n\t\tconst cause = error.cause\n\t\tif (typeof cause !== 'object' || cause === null) return undefined\n\t\tif (!('code' in cause)) return undefined\n\t\treturn typeof cause.code === 'string' ? cause.code : undefined\n\t}\n\n\t// Reads `response.body` incrementally, counting bytes, aborting past\n\t// `limit` (a declared oversized `Content-Length` short-circuits before any\n\t// read) — an overflow is reported as a transport fault, handled by the\n\t// caller exactly like any other (retry-eligible, then `failed` / strict\n\t// `FETCH`). `response.body` may be `null` (e.g. an empty reply); that\n\t// decodes to an empty string with no reader loop.\n\tstatic async #readBounded(\n\t\tresponse: Response,\n\t\turl: string,\n\t\tlimit: number,\n\t\tallowance: SyncAllowance,\n\t): Promise<\n\t\t| { readonly ok: true; readonly text: string }\n\t\t| { readonly ok: false; readonly error: unknown; readonly note: string }\n\t> {\n\t\tconst declared = response.headers.get('content-length')\n\t\tif (declared !== null) {\n\t\t\tconst declaredBytes = Number(declared)\n\t\t\tif (\n\t\t\t\tNumber.isFinite(declaredBytes) &&\n\t\t\t\t(declaredBytes > limit || declaredBytes > (allowance[0] ?? 0))\n\t\t\t) {\n\t\t\t\tawait response.body?.cancel()\n\t\t\t\tconst threshold = Math.min(limit, allowance[0] ?? 0)\n\t\t\t\treturn {\n\t\t\t\t\tok: false,\n\t\t\t\t\terror: new Error(\n\t\t\t\t\t\t`Response body for ${url} declares ${String(declaredBytes)} bytes, exceeding the ${String(threshold)}-byte allowance`,\n\t\t\t\t\t),\n\t\t\t\t\tnote: `response exceeded allowance (${String(threshold)} bytes)`,\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tconst body = response.body\n\t\tif (body === null) return { ok: true, text: '' }\n\t\tconst reader = body.getReader()\n\t\tconst decoder = new TextDecoder('utf-8', { fatal: true })\n\t\tconst chunks: string[] = []\n\t\tlet total = 0\n\t\ttry {\n\t\t\tfor (;;) {\n\t\t\t\tconst { done, value } = await reader.read()\n\t\t\t\tif (done) break\n\t\t\t\ttotal += value.byteLength\n\t\t\t\tif (total > limit || value.byteLength > (allowance[0] ?? 0)) {\n\t\t\t\t\tawait reader.cancel()\n\t\t\t\t\tconst threshold = Math.min(limit, total + (allowance[0] ?? 0) - value.byteLength)\n\t\t\t\t\tallowance[0] = Math.max(0, (allowance[0] ?? 0) - value.byteLength)\n\t\t\t\t\treturn {\n\t\t\t\t\t\tok: false,\n\t\t\t\t\t\terror: new Error(\n\t\t\t\t\t\t\t`Response body for ${url} exceeded the ${String(threshold)}-byte allowance`,\n\t\t\t\t\t\t),\n\t\t\t\t\t\tnote: `response exceeded allowance (${String(threshold)} bytes)`,\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tallowance[0] = (allowance[0] ?? 0) - value.byteLength\n\t\t\t\tchunks.push(decoder.decode(value, { stream: true }))\n\t\t\t}\n\t\t\tchunks.push(decoder.decode())\n\t\t} catch (error) {\n\t\t\tawait reader.cancel(error).catch(() => undefined)\n\t\t\tthrow error\n\t\t} finally {\n\t\t\treader.releaseLock()\n\t\t}\n\t\treturn { ok: true, text: chunks.join('') }\n\t}\n\n\tstatic #toGuideSync(\n\t\tname: string,\n\t\tshort: string,\n\t\toutcome:\n\t\t\t| { readonly kind: 'ok'; readonly text: string }\n\t\t\t| { readonly kind: 'missing' }\n\t\t\t| { readonly kind: 'failed'; readonly error: unknown; readonly note: string },\n\t\tcurrent?: Readonly<Record<string, string>>,\n\t): GuideSync {\n\t\tconst path = `guides/src/${short}.md`\n\t\tconst local = current?.[name]\n\t\tconst baseline =\n\t\t\tcurrent === undefined ? undefined : local === undefined ? 'absent' : digestText(local)\n\t\tif (outcome.kind === 'missing') {\n\t\t\treturn {\n\t\t\t\tname,\n\t\t\t\tpath,\n\t\t\t\tcontent: '',\n\t\t\t\tfreshness: 'missing',\n\t\t\t\tnote: 'HTTP 404',\n\t\t\t\t...(baseline === undefined ? {} : { baseline }),\n\t\t\t}\n\t\t}\n\t\tif (outcome.kind === 'failed') {\n\t\t\treturn {\n\t\t\t\tname,\n\t\t\t\tpath,\n\t\t\t\tcontent: '',\n\t\t\t\tfreshness: 'failed',\n\t\t\t\tnote: outcome.note,\n\t\t\t\t...(baseline === undefined ? {} : { baseline }),\n\t\t\t}\n\t\t}\n\t\tconst freshness: Freshness =\n\t\t\tcurrent !== undefined && local !== undefined && local === outcome.text ? 'current' : 'behind'\n\t\treturn {\n\t\t\tname,\n\t\t\tpath,\n\t\t\tcontent: outcome.text,\n\t\t\tfreshness,\n\t\t\t...(baseline === undefined ? {} : { baseline }),\n\t\t}\n\t}\n\n\tstatic #toVersionLookup(\n\t\tname: string,\n\t\toutcome:\n\t\t\t| { readonly kind: 'ok'; readonly text: string }\n\t\t\t| { readonly kind: 'missing' }\n\t\t\t| { readonly kind: 'failed'; readonly error: unknown; readonly note: string },\n\t): VersionLookup {\n\t\tif (outcome.kind === 'missing') {\n\t\t\treturn {\n\t\t\t\tname,\n\t\t\t\tfreshness: 'missing',\n\t\t\t\tnote: 'HTTP 404',\n\t\t\t}\n\t\t}\n\t\tif (outcome.kind === 'failed') {\n\t\t\treturn {\n\t\t\t\tname,\n\t\t\t\tfreshness: 'failed',\n\t\t\t\tnote: outcome.note,\n\t\t\t}\n\t\t}\n\t\tconst latest = Sync.#parseLatest(outcome.text)\n\t\tif (latest === undefined) {\n\t\t\treturn {\n\t\t\t\tname,\n\t\t\t\tfreshness: 'failed',\n\t\t\t\tnote: 'malformed registry response (missing dist-tags.latest)',\n\t\t\t}\n\t\t}\n\t\treturn {\n\t\t\tname,\n\t\t\tlatest,\n\t\t\tfreshness: 'behind',\n\t\t}\n\t}\n\n\tstatic #toVersionSync(dep: Dependency, lookup: VersionLookup): VersionSync {\n\t\tif (lookup.freshness !== 'behind') {\n\t\t\treturn {\n\t\t\t\tname: dep.name,\n\t\t\t\trange: dep.range,\n\t\t\t\tlatest: '',\n\t\t\t\tfreshness: lookup.freshness,\n\t\t\t\tnote: lookup.note,\n\t\t\t}\n\t\t}\n\t\treturn {\n\t\t\tname: dep.name,\n\t\t\trange: dep.range,\n\t\t\tlatest: lookup.latest,\n\t\t\tfreshness: rangeToFreshness(dep.range, lookup.latest),\n\t\t}\n\t}\n\n\t// The org package-list response is the WHOLE reason `catalog()` can claim\n\t// to be authoritative — an unreachable or malformed response means there\n\t// IS no catalog, so this throws unconditionally (never gated by\n\t// `strict`), unlike every other collect-mode FETCH outcome in this class.\n\tstatic #toOrgPackages(\n\t\toutcome:\n\t\t\t| { readonly kind: 'ok'; readonly text: string }\n\t\t\t| { readonly kind: 'missing' }\n\t\t\t| { readonly kind: 'failed'; readonly error: unknown; readonly note: string },\n\t\turl: string,\n\t): readonly string[] {\n\t\tif (outcome.kind === 'missing' || outcome.kind === 'failed') {\n\t\t\tconst note = outcome.kind === 'missing' ? 'HTTP 404' : outcome.note\n\t\t\tthrow new ScaffoldError('FETCH', `Failed to fetch the package list at ${url}`, { url, note })\n\t\t}\n\t\tconst parsed = parseJSON(outcome.text)\n\t\tif (!isRecord(parsed)) {\n\t\t\tthrow new ScaffoldError('FETCH', `Malformed package list response at ${url}`, { url })\n\t\t}\n\t\tconst names = Object.keys(parsed)\n\t\tif (names.length === 0 || names.some((name) => !DEPENDENCY_NAME_PATTERN.test(name))) {\n\t\t\tthrow new ScaffoldError('FETCH', `Malformed package list response at ${url}`, { url })\n\t\t}\n\t\treturn names\n\t}\n\n\t// A packument fetch that fails or comes back malformed keeps the entry\n\t// (the org list already proved the package exists) rather than dropping\n\t// it — degraded, never absent. The FULL packument (never the abbreviated\n\t// `Accept` form, which omits `description`) supplies both `dist-tags.latest`\n\t// and the top-level `description` — the registry-path fallback description.\n\tstatic #toPackument(\n\t\toutcome:\n\t\t\t| { readonly kind: 'ok'; readonly text: string }\n\t\t\t| { readonly kind: 'missing' }\n\t\t\t| { readonly kind: 'failed'; readonly error: unknown; readonly note: string },\n\t): { readonly version: string; readonly description: string; readonly note: string } {\n\t\tif (outcome.kind === 'missing') return { version: '', description: '', note: 'HTTP 404' }\n\t\tif (outcome.kind === 'failed') {\n\t\t\treturn { version: '', description: '', note: outcome.note }\n\t\t}\n\t\tconst parsed = parseJSON(outcome.text)\n\t\tif (parsed === undefined) {\n\t\t\treturn {\n\t\t\t\tversion: '',\n\t\t\t\tdescription: '',\n\t\t\t\tnote: 'malformed registry response (invalid JSON)',\n\t\t\t}\n\t\t}\n\t\tif (!isRecord(parsed)) {\n\t\t\treturn {\n\t\t\t\tversion: '',\n\t\t\t\tdescription: '',\n\t\t\t\tnote: 'malformed registry response (not an object)',\n\t\t\t}\n\t\t}\n\t\tconst distTags = ownDataValue(parsed, 'dist-tags')\n\t\tconst latest = ownDataValue(distTags, 'latest')\n\t\tconst version =\n\t\t\tisRecord(distTags) && typeof latest === 'string' && VERSION_PATTERN.test(latest) ? latest : ''\n\t\tconst rawDescription = ownDataValue(parsed, 'description')\n\t\tconst description = isCatalogDescription(rawDescription) ? rawDescription : ''\n\t\tconst note = version === '' ? 'malformed registry response (missing dist-tags.latest)' : ''\n\t\treturn { version, description, note }\n\t}\n\n\t// The guide-fetch counterpart of `#toPackument` — `description` is\n\t// `undefined` (never `''`) on ANY degradation (404, transport fault, no\n\t// blockquote) so `catalog()`'s caller can cleanly fall back to the\n\t// packument description with `??`. Every fleet repo is public, so a guide\n\t// 404 is a READINESS signal (repo private or guide not yet written), not\n\t// an absence — the entry STAYS LISTED with this exact note text.\n\tstatic #toGuideDescription(\n\t\toutcome:\n\t\t\t| { readonly kind: 'ok'; readonly text: string }\n\t\t\t| { readonly kind: 'missing' }\n\t\t\t| { readonly kind: 'failed'; readonly error: unknown; readonly note: string },\n\t): { readonly description: string | undefined; readonly note: string } {\n\t\tif (outcome.kind === 'missing') {\n\t\t\treturn {\n\t\t\t\tdescription: undefined,\n\t\t\t\tnote: 'guide unreachable (HTTP 404 — repo private or guide missing?)',\n\t\t\t}\n\t\t}\n\t\tif (outcome.kind === 'failed') return { description: undefined, note: outcome.note }\n\t\tconst description = guideToDescription(outcome.text)\n\t\treturn description !== undefined\n\t\t\t? { description, note: '' }\n\t\t\t: { description: undefined, note: 'guide has no blockquote description' }\n\t}\n\n\t// Combines a degraded guide/packument note into one human-readable string\n\t// for `SyncEventMap['package']`'s `note` — empty when both succeeded.\n\tstatic #combineNote(guideNote: string, packumentNote: string): string {\n\t\tconst parts: string[] = []\n\t\tif (packumentNote !== '') parts.push(`version unavailable — ${packumentNote}`)\n\t\tif (guideNote !== '') parts.push(`description from registry — ${guideNote}`)\n\t\treturn parts.join('; ')\n\t}\n\n\tstatic #parseLatest(text: string): string | undefined {\n\t\tconst parsed = parseJSON(text)\n\t\tif (!isRecord(parsed)) return undefined\n\t\tconst distTags = ownDataValue(parsed, 'dist-tags')\n\t\tif (!isRecord(distTags)) return undefined\n\t\tconst latest = ownDataValue(distTags, 'latest')\n\t\treturn typeof latest === 'string' && VERSION_PATTERN.test(latest) ? latest : undefined\n\t}\n\n\t#ensureAlive(): void {\n\t\tif (this.#destroyed) throw new ScaffoldError('DESTROYED', 'Sync has been destroyed')\n\t}\n}\n","import type {\n\tMaterializerInterface,\n\tMaterializerOptions,\n\tSyncInterface,\n\tSyncOptions,\n} from './types.js'\nimport { Materializer } from './Materializer.js'\nimport { Sync } from './Sync.js'\n\n/**\n * Create a `MaterializerInterface` (server) — the materialization entity,\n * seeded from `MaterializerOptions`.\n *\n * @param options - Optional `host` root override, emitter hooks, and error handler\n * @returns A {@link MaterializerInterface}\n *\n * @example\n * ```ts\n * import { createMaterializer } from '@orkestrel/scaffold/server'\n *\n * const materializer = createMaterializer()\n * materializer.destroy()\n * ```\n */\nexport function createMaterializer(options?: MaterializerOptions): MaterializerInterface {\n\treturn new Materializer(options)\n}\n\n/**\n * Create a `SyncInterface` (server) — the upstream-synchronization entity,\n * seeded from `SyncOptions`.\n *\n * @param options - Optional endpoint bases/branch, concurrency, retries, strict, emitter hooks, and error handler\n * @returns A {@link SyncInterface}\n *\n * @example\n * ```ts\n * import { createSync } from '@orkestrel/scaffold/server'\n *\n * const sync = createSync()\n * sync.destroy()\n * ```\n */\nexport function createSync(options?: SyncOptions): SyncInterface {\n\treturn new Sync(options)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAcA,IAAa,oBAAuC,OAAO,OAAO;CACjE;CACA;CACA;AACD,CAAC;;AAGD,IAAa,qBAAqB;;AAGlC,IAAa,8BACZ;;AAGD,IAAa,+BAA+B;;AAG5C,IAAa,iCAAiC;;AAG9C,IAAa,kBAAkB;;AAG/B,IAAa,mBAAmB;;AAGhC,IAAa,iBAAiB;;AAG9B,IAAa,uBAAuB;;AAGpC,IAAa,yBAAyB;;AAGtC,IAAa,gCACZ;;AAGD,IAAa,uBAAuB;;AAGpC,IAAa,2BAA2B;;AAGxC,IAAa,mBAAmB;;AAGhC,IAAa,mBAAmB;;AAGhC,IAAa,uBAAuB;;AAGpC,IAAa,iBAAiB;;AAG9B,IAAa,qBAAqB;;AAGlC,IAAa,qBAAqB;;AAGlC,IAAa,iBAAiB;;AAG9B,IAAa,sBAAsB;;AAGnC,IAAa,kBAAkB;;AAG/B,IAAa,uBAAuB;;AAGpC,IAAa,yBAAyB;;AAGtC,IAAa,uBAAuB;;AAGpC,IAAa,sBAAsB;;;;AC3EnC,SAAgB,wBAAwB;CACvC,OAAO,YAAY;EAClB,MAAM,cAAc,YAAY;GAAE,KAAK;GAAG,KAAK;EAAqB,CAAC,CAAC;EACtE,QAAQ,cAAc,YAAY;GAAE,KAAK;GAAG,KAAA;EAA4B,CAAC,CAAC;EAC1E,SAAS,cAAc,aAAa;GAAE,KAAK;GAAG,KAAK;EAAiB,CAAC,CAAC;CACvE,CAAC;AACF;;AAGA,SAAgB,2BAA2B;CAC1C,OAAO,YAAY;EAClB,MAAM,cAAc,YAAY;GAAE,KAAK;GAAG,KAAK;EAAqB,CAAC,CAAC;EACtE,SAAS,cAAc,aAAa;GAAE,KAAK;GAAG,KAAK;EAAiB,CAAC,CAAC;CACvE,CAAC;AACF;;AAGA,SAAgB,mBAAmB;CAClC,OAAO,YAAY;EAClB,QAAQ,cAAc,sBAAsB,CAAC;EAC7C,UAAU,cAAc,yBAAyB,CAAC;EAClD,aAAa,cAAc,aAAa;GAAE,KAAK;GAAG,KAAA;EAA0B,CAAC,CAAC;EAC9E,SAAS,cAAc,aAAa;GAAE,KAAK;GAAG,KAAA;EAAsB,CAAC,CAAC;EACtE,QAAQ,cAAc,aAAa,CAAC;EACpC,OAAO,cAAc,aAAa;GAAE,KAAK;GAAG,KAAK;EAAe,CAAC,CAAC;EAClE,OAAO,cAAc,aAAa;GAAE,KAAK;GAAG,KAAK;EAAe,CAAC,CAAC;EAClE,QAAQ,cAAc,aAAa;GAAE,KAAK;GAAG,KAAK;EAAgB,CAAC,CAAC;CACrE,CAAC;AACF;;AAGA,SAAgB,2BAA2B;CAC1C,OAAO,YAAY,EAClB,MAAM,cAAc,YAAY;EAAE,KAAK;EAAG,KAAK;CAAgB,CAAC,CAAC,EAClE,CAAC;AACF;;;;ACnDA,IAAa,sBAAsB,eAAe,iBAAiB,CAAC;;AAGpE,IAAa,8BAA8B,eAAe,yBAAyB,CAAC;;;;ACyBpF,SAAgB,mBAAmB,OAA2C;CAC7E,MAAM,SAAS,cAAc;EAC5B,MAAM,eAAe,OAAO,yBAC3B,OAAO,eAAe,aAAa,SAAS,GAC5C,QACD,CAAC,EAAE;EACH,IACC,iBAAiB,KAAA,KACjB,CAAC,YAAY,OAAO,KAAK,KACzB,EAAE,iBAAiB,iBACnB,EAAE,QAAQ,MAAM,cAAc,OAAO,CAAC,CAAC,aAAa,gBACpD,MAAM,WAAW,GAEjB,OAAO;EAER,MAAM,YAAY,MAAM;EACxB,OACC,cAAc,KAAA,KACd,OAAO,cAAc,SAAS,KAC9B,aAAa,KACb,aAAA;CAEF,CAAC;CACD,OAAO,OAAO,WAAW,OAAO;AACjC;;;;;;;AAQA,SAAgB,eAAe,OAAiC;CAC/D,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,WAAW,KAAK,MAAM,SAAS,iBAAiB,OAAO;CACrF,IAAI,+BAA+B,KAAK,KAAK,KAAK,0BAA0B,KAAK,KAAK,GACrF,OAAO;CAER,MAAM,WAAW,MAAM,MAAM,GAAG;CAChC,OACC,SAAS,UAAA,MACT,CAAC,SAAS,MACR,YACA,YAAY,MACZ,YAAY,OACZ,YAAY,QACZ,QAAQ,SAAS,GAAG,KACpB,QAAQ,SAAS,GAAG,KACpB,kBAAkB,OAAO,IAAA,OACzB,8BAA8B,KAAK,OAAO,CAC5C;AAEF;;AAGA,SAAgB,iBAAiB,OAAiC;CACjE,IACC,CAAC,SAAS,KAAK,KACf,MAAM,WAAW,KACjB,MAAM,SAAS,mBACf,0BAA0B,KAAK,KAAK,GAEpC,OAAO;CAER,MAAM,aAAa,MAAM,WAAW,MAAM,GAAG;CAC7C,MAAM,cAAc,WAAW,WAAW,IAAI,IAC3C,WAAW,MAAM,CAAC,IAClB,WAAW,WAAW,GAAG,IACxB,WAAW,MAAM,CAAC,IAClB;CACJ,IAAI,YAAY,SAAS,IAAI,GAAG,OAAO;CACvC,MAAM,WAAW,YAAY,MAAM,GAAG,CAAC,CAAC,QAAQ,YAAY,QAAQ,SAAS,CAAC;CAC9E,IAAI,SAAS,SAAA,IAA+B,OAAO;CACnD,OAAO,CAAC,SAAS,MAAM,SAAS,UAAU;EACzC,IAAI,YAAY,OAAO,YAAY,MAAM,OAAO;EAChD,IAAI,UAAU,KAAK,eAAe,KAAK,OAAO,GAAG,OAAO;EACxD,OACC,aAAa,KAAK,OAAO,KACzB,QAAQ,SAAS,GAAG,KACpB,QAAQ,SAAS,GAAG,KACpB,kBAAkB,OAAO,IAAA,OACzB,8BAA8B,KAAK,OAAO;CAE5C,CAAC;AACF;;AAGA,SAAgB,eAAe,OAAiC;CAC/D,OAAO,SAAS,KAAK,KAAK,CAAC,0BAA0B,KAAK,KAAK;AAChE;;AAGA,SAAgB,iBAAiB,OAAqC;CACrE,OAAO,sBAAsB,KAAK,KAAK,aAAa,KAAK;AAC1D;;;;;;;AAQA,SAAgB,oBAAoB,OAAwB;CAC3D,OAAO,4BAA4B,KAAK,MAAM,WAAW,MAAM,GAAG,CAAC;AACpE;;AAGA,SAAgB,qBAAqB,OAAwB;CAC5D,OAAO,6BAA6B,KAAK,MAAM,WAAW,MAAM,GAAG,CAAC;AACrE;;AAGA,SAAgB,qBAAqB,OAAiC;CACrE,OACC,SAAS,KAAK,KACd,MAAM,UAAA,OACN,CAAC,0BAA0B,KAAK,KAAK;AAEvC;;;;;;;AAQA,SAAgB,mBAAmB,OAAyB;CAC3D,MAAM,SAAS,cAAc,QAAQ,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,MAAM,QAAQ;CACtF,OAAO,OAAO,WAAW,OAAO;AACjC;;AAGA,SAAgB,oBAAoB,OAA4C;CAC/E,MAAM,SAAS,cAAc;EAC5B,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;EAC7B,MAAM,OAAO,QAAQ,QAAQ,KAAK;EAClC,IACC,KAAK,MAAM,QAAQ,QAAQ,UAAU,QAAQ,WAAW,QAAQ,QAAQ,KACxE,KAAK,SAAS,KACd,KAAK,SAAS,GAEd,OAAO;EAER,MAAM,OAAO,QAAQ,yBAAyB,OAAO,MAAM;EAC3D,MAAM,QAAQ,QAAQ,yBAAyB,OAAO,OAAO;EAC7D,MAAM,SAAS,QAAQ,yBAAyB,OAAO,QAAQ;EAC/D,IACC,SAAS,KAAA,KACT,CAAC,QAAQ,IAAI,MAAM,OAAO,KAC1B,UAAU,KAAA,KACV,CAAC,QAAQ,IAAI,OAAO,OAAO,KAC1B,WAAW,KAAA,KAAa,CAAC,QAAQ,IAAI,QAAQ,OAAO,KACrD,CAAC,eAAe,KAAK,KAAK,GAE1B,OAAO;EAER,OAAO,MAAM,UAAU,WACpB,WAAW,KAAA,IACX,MAAM,UAAU,UAChB,WAAW,KAAA,KACX,OAAO,OAAO,UAAU,YACxB,qBAAqB,KAAK,OAAO,KAAK;CAC1C,CAAC;CACD,OAAO,OAAO,WAAW,OAAO;AACjC;;;;;;;AAQA,SAAgB,gBAAgB,OAAwC;CACvE,MAAM,SAAS,cAAc;EAC5B,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;EAC7B,MAAM,OAAO,QAAQ,QAAQ,KAAK;EAClC,MAAM,UAAU,QAAQ,yBAAyB,OAAO,SAAS;EACjE,MAAM,cAAc,QAAQ,yBAAyB,OAAO,aAAa;EACzE,MAAM,aAAa,QAAQ,yBAAyB,OAAO,YAAY;EACvE,OACC,KAAK,WAAW,KAChB,KAAK,OAAO,QAAQ,QAAQ,aAAa,QAAQ,iBAAiB,QAAQ,YAAY,KACtF,YAAY,KAAA,KACZ,QAAQ,IAAI,SAAS,OAAO,KAC5B,gBAAgB,KAAA,KAChB,QAAQ,IAAI,aAAa,OAAO,KAChC,eAAe,KAAA,KACf,QAAQ,IAAI,YAAY,OAAO,KAC/B,eAAe,QAAQ,KAAK,KAC5B,eAAe,YAAY,KAAK,KAChC,OAAO,WAAW,UAAU;CAE9B,CAAC;CACD,OAAO,OAAO,WAAW,OAAO;AACjC;;;;;;;AAQA,SAAgB,eAAe,OAAuC;CACrE,MAAM,SAAS,cAAc;EAC5B,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;EAC7B,MAAM,OAAO,QAAQ,QAAQ,KAAK;EAClC,MAAM,UAAU,QAAQ,yBAAyB,OAAO,SAAS;EACjE,MAAM,QAAQ,QAAQ,yBAAyB,OAAO,OAAO;EAC7D,MAAM,SAAS,QAAQ,yBAAyB,OAAO,QAAQ;EAC/D,OACC,KAAK,WAAW,KAChB,KAAK,OAAO,QAAQ,QAAQ,aAAa,QAAQ,WAAW,QAAQ,QAAQ,KAC5E,YAAY,KAAA,KACZ,QAAQ,IAAI,SAAS,OAAO,KAC5B,UAAU,KAAA,KACV,QAAQ,IAAI,OAAO,OAAO,KAC1B,WAAW,KAAA,KACX,QAAQ,IAAI,QAAQ,OAAO,KAC3B,iBAAiB,QAAQ,OAAA,MAAyB,eAAe,KACjE,iBAAiB,MAAM,OAAA,MAAyB,cAAc,KAC9D,OAAO,OAAO,UAAU,YACxB,qBAAqB,KAAK,OAAO,KAAK;CAExC,CAAC;CACD,OAAO,OAAO,WAAW,OAAO;AACjC;;AAGA,SAAgB,iBAAiB,OAAqD;CACrF,MAAM,SAAS,cAAc;EAC5B,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;EAC7B,MAAM,OAAO,QAAQ,QAAQ,KAAK;EAClC,IACC,KAAK,MACH,QACA,QAAQ,WACR,QAAQ,aACR,QAAQ,aACR,QAAQ,WACR,QAAQ,UACR,QAAQ,WACR,QAAQ,SACV,GAEA,OAAO;EAER,OAAO,KAAK,OAAO,QAAQ;GAC1B,MAAM,aAAa,QAAQ,yBAAyB,OAAO,GAAG;GAC9D,OACC,eAAe,KAAA,KAAa,QAAQ,IAAI,YAAY,OAAO,KAAK,WAAW,WAAW,KAAK;EAE7F,CAAC;CACF,CAAC;CACD,OAAO,OAAO,WAAW,OAAO;AACjC;;AAGA,SAAgB,yBACf,OAC8C;CAC9C,MAAM,SAAS,cAAc;EAC5B,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;EAC7B,MAAM,OAAO,QAAQ,QAAQ,KAAK;EAClC,IACC,KAAK,MACH,QACA,QAAQ,UACR,QAAQ,WACR,QAAQ,YACR,QAAQ,UACR,QAAQ,WACR,QAAQ,SACV,GAEA,OAAO;EAER,OAAO,KAAK,OAAO,QAAQ;GAC1B,MAAM,aAAa,QAAQ,yBAAyB,OAAO,GAAG;GAC9D,OACC,eAAe,KAAA,KAAa,QAAQ,IAAI,YAAY,OAAO,KAAK,WAAW,WAAW,KAAK;EAE7F,CAAC;CACF,CAAC;CACD,OAAO,OAAO,WAAW,OAAO;AACjC;;;;;;;;;AC/QA,SAAgB,eAAe,OAAmC;CACjE,MAAM,QAAQ,cAAc;EAC3B,IACC,CAAC,iBACA,OAAA,MAEC,cAAmC,OAAO,cAAc,QAC1D,GAEA,MAAM,IAAI,MAAM,6BAA6B;EAE9C,MAAM,SAAS,QAAQ,yBAAyB,OAAO,QAAQ,CAAC,EAAE;EAClE,IACC,OAAO,WAAW,YAClB,CAAC,OAAO,cAAc,MAAM,KAC5B,SAAS,KACT,SAAA,KAEA,MAAM,IAAI,MAAM,kCAAkC;EAEnD,MAAM,QAAkB,CAAC;EACzB,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG;GAC/C,MAAM,aAAa,QAAQ,yBAAyB,OAAO,OAAO,KAAK,CAAC;GACxE,IACC,eAAe,KAAA,KACf,CAAC,QAAQ,IAAI,YAAY,OAAO,KAChC,OAAO,WAAW,UAAU,UAE5B,MAAM,IAAI,MAAM,2BAA2B;GAE5C,MAAM,KAAK,WAAW,KAAK;EAC5B;EACA,OAAO,OAAO,OAAO,KAAK;CAC3B,CAAC;CACD,IAAI,CAAC,MAAM,SACV,MAAM,IAAI,cAAc,WAAW,oCAAoC,EACtE,OAAO,MAAM,MACd,CAAC;CAEF,MAAM,WAAW,MAAM;CACvB,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,QAAQ,UAAU;EAC5B,IACC,KAAK,WAAW,KAChB,KAAK,SAAS,8BACd,CAAC,mBAAmB,KAAK,IAAI,KAC7B,KAAK,IAAI,IAAI,GAEb,MAAM,IAAI,cAAc,WAAW,kCAAkC,EAAE,KAAK,CAAC;EAE9E,KAAK,IAAI,IAAI;CACd;CACA,OAAO;AACR;;AAGA,SAAgB,sBAAsB,OAAgB,UAA0C;CAC/F,MAAM,QAAQ,cAAc;EAC3B,IAAI,CAAC,iBAAiB,OAAA,KAAuB,gBAAgB,GAC5D,MAAM,IAAI,MAAM,4BAA4B;EAE7C,MAAM,SAAS,QAAQ,yBAAyB,OAAO,QAAQ,CAAC,EAAE;EAClE,IACC,OAAO,WAAW,YAClB,CAAC,OAAO,cAAc,MAAM,KAC5B,SAAS,KACT,SAAA,KAEA,MAAM,IAAI,MAAM,gCAAgC;EAEjD,MAAM,eAA6B,CAAC;EACpC,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG;GAC/C,MAAM,aAAa,QAAQ,yBAAyB,OAAO,OAAO,KAAK,CAAC;GACxE,IACC,eAAe,KAAA,KACf,CAAC,QAAQ,IAAI,YAAY,OAAO,KAChC,CAAC,iBAAiB,WAAW,KAAK,GAElC,MAAM,IAAI,MAAM,yBAAyB;GAE1C,MAAM,OAAO,QAAQ,yBAAyB,WAAW,OAAO,MAAM,CAAC,EAAE;GACzE,MAAM,QAAQ,QAAQ,yBAAyB,WAAW,OAAO,OAAO,CAAC,EAAE;GAC3E,MAAM,WAAW,QAAQ,yBAAyB,WAAW,OAAO,UAAU,CAAC,EAAE;GACjF,IACC,OAAO,SAAS,YAChB,OAAO,UAAU,YAChB,aAAa,KAAA,KAAa,OAAO,aAAa,WAE/C,MAAM,IAAI,MAAM,yBAAyB;GAE1C,aAAa,KACZ,OAAO,OAAO;IACb;IACA;IACA,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;GAC9C,CAAC,CACF;EACD;EACA,OAAO,OAAO,OAAO,YAAY;CAClC,CAAC;CACD,IAAI,CAAC,MAAM,SACV,MAAM,IAAI,cAAc,WAAW,mCAAmC,EACrE,OAAO,MAAM,MACd,CAAC;CAEF,MAAM,WAAW,MAAM;CACvB,MAAM,aAAa,wBAAwB,WAAW,WAAW,gBAAgB,QAAQ;CACzF,IAAI,WAAW,UAAU,SAAS,GACjC,MAAM,IAAI,cAAc,WAAW,iCAAiC,EACnE,WAAW,WAAW,UACvB,CAAC;CAEF,OAAO;AACR;;AAGA,SAAgB,qBAAqB,OAAgB,OAA8C;CAClG,MAAM,SAAS,cAAc;EAC5B,IACC,CAAC,OAAO,cAAc,KAAK,KAC3B,QAAQ,KACR,CAAC,iBAAiB,OAAO,OAAO,gBAAgB,GAEhD;EAED,MAAM,SAAS,QAAQ,yBAAyB,OAAO,QAAQ,CAAC,EAAE;EAClE,IACC,OAAO,WAAW,YAClB,CAAC,OAAO,cAAc,MAAM,KAC5B,SAAS,KACT,SAAS,OAET;EAED,MAAM,QAAkB,CAAC;EACzB,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG;GAC/C,MAAM,aAAa,QAAQ,yBAAyB,OAAO,OAAO,KAAK,CAAC;GACxE,IACC,eAAe,KAAA,KACf,CAAC,QAAQ,IAAI,YAAY,OAAO,KAChC,CAAC,iBAAiB,WAAW,KAAK,GAElC;GAED,MAAM,KAAK,WAAW,KAAK;EAC5B;EACA,OAAO,OAAO,OAAO,KAAK;CAC3B,CAAC;CACD,OAAO,OAAO,UAAU,OAAO,QAAQ,KAAA;AACxC;;AAGA,SAAgB,mBAAmB,OAAgB,OAA8C;CAChG,MAAM,SAAS,cAAc;EAC5B,IACC,CAAC,OAAO,cAAc,KAAK,KAC3B,QAAQ,KACR,CAAC,iBAAiB,OAAO,OAAO,cAAc,GAE9C;EAED,MAAM,SAAS,QAAQ,yBAAyB,OAAO,QAAQ,CAAC,EAAE;EAClE,IACC,OAAO,WAAW,YAClB,CAAC,OAAO,cAAc,MAAM,KAC5B,SAAS,KACT,SAAS,OAET;EAED,MAAM,QAAkB,CAAC;EACzB,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG;GAC/C,MAAM,aAAa,QAAQ,yBAAyB,OAAO,OAAO,KAAK,CAAC;GACxE,IACC,eAAe,KAAA,KACf,CAAC,QAAQ,IAAI,YAAY,OAAO,KAChC,CAAC,eAAe,WAAW,KAAK,GAEhC;GAED,MAAM,KAAK,WAAW,KAAK;EAC5B;EACA,OAAO,OAAO,OAAO,KAAK;CAC3B,CAAC;CACD,OAAO,OAAO,UAAU,OAAO,QAAQ,KAAA;AACxC;;AAGA,SAAgB,wBACf,OACA,OAC2C;CAC3C,MAAM,SAAS,cAAc;EAC5B,IACC,CAAC,OAAO,cAAc,KAAK,KAC3B,QAAQ,KACR,CAAC,iBAAiB,OAAO,OAAO,mBAAmB,GAEnD;EAED,MAAM,SAAS,QAAQ,yBAAyB,OAAO,QAAQ,CAAC,EAAE;EAClE,IACC,OAAO,WAAW,YAClB,CAAC,OAAO,cAAc,MAAM,KAC5B,SAAS,KACT,SAAS,OAET;EAED,MAAM,gBAAqC,CAAC;EAC5C,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG;GAC/C,MAAM,aAAa,QAAQ,yBAAyB,OAAO,OAAO,KAAK,CAAC;GACxE,IACC,eAAe,KAAA,KACf,CAAC,QAAQ,IAAI,YAAY,OAAO,KAChC,CAAC,oBAAoB,WAAW,KAAK,GAErC;GAED,MAAM,eAAe,WAAW;GAChC,MAAM,OAAO,QAAQ,yBAAyB,cAAc,MAAM,CAAC,EAAE;GACrE,MAAM,QAAQ,QAAQ,yBAAyB,cAAc,OAAO,CAAC,EAAE;GACvE,MAAM,SAAS,QAAQ,yBAAyB,cAAc,QAAQ,CAAC,EAAE;GACzE,IAAI,OAAO,SAAS,UAAU,OAAO,KAAA;GACrC,IAAI,UAAU,YAAY,WAAW,KAAA,GAAW;IAC/C,MAAM,OAA0B;KAAE;KAAM;IAAM;IAC9C,IAAI,CAAC,oBAAoB,IAAI,GAAG,OAAO,KAAA;IACvC,cAAc,KAAK,OAAO,OAAO,IAAI,CAAC;IACtC;GACD;GACA,IAAI,UAAU,UAAU,OAAO,WAAW,UAAU,OAAO,KAAA;GAC3D,MAAM,OAA0B;IAAE;IAAM;IAAO;GAAO;GACtD,IAAI,CAAC,oBAAoB,IAAI,GAAG,OAAO,KAAA;GACvC,cAAc,KAAK,OAAO,OAAO,IAAI,CAAC;EACvC;EACA,OAAO,OAAO,OAAO,aAAa;CACnC,CAAC;CACD,OAAO,OAAO,UAAU,OAAO,QAAQ,KAAA;AACxC;;AAGA,SAAgB,cAAc,OAA0B;CACvD,IACC,OAAO,UAAU,YACjB,MAAM,WAAW,KACjB,MAAM,SAAA,QACN,UAAU,MAAM,KAAK,KACpB,iCAAiC,KAAK,KAAK,KAAK,CAAC,gBAAgB,KAAK,KAAK,GAE5E,MAAM,IAAI,cAAc,WAAW,8BAA8B,EAAE,MAAM,CAAC;CAE3E,MAAM,aAAa,gBAAgB,KAAK,KAAK,IAAI,QAAQ,WAAW;CACpE,MAAM,SAAS,cAAc,IAAI,IAAI,UAAU,CAAC;CAChD,IACC,CAAC,OAAO,WACP,OAAO,MAAM,aAAa,WAAW,OAAO,MAAM,aAAa,YAChE,OAAO,MAAM,SAAS,SAAS,KAC/B,OAAO,MAAM,SAAS,SAAS,KAC/B,OAAO,MAAM,OAAO,SAAS,KAC7B,OAAO,MAAM,KAAK,SAAS,KAC1B,OAAO,MAAM,aAAa,WAC1B,CAAC;EAAC;EAAa;EAAS;CAAW,CAAC,CAAC,SAAS,OAAO,MAAM,SAAS,YAAY,CAAC,GAElF,MAAM,IAAI,cAAc,WAAW,8BAA8B,EAAE,MAAM,CAAC;CAE3E,MAAM,OAAO,OAAO,MAAM,KAAK,QAAQ,QAAQ,EAAE;CACjD,IAAI,KAAK,SAAA,MACR,MAAM,IAAI,cAAc,WAAW,8BAA8B,EAAE,MAAM,CAAC;CAE3E,OAAO;AACR;;;;;;;;;AAUA,SAAgB,iBACf,OACA,OACA,QAC+C;CAC/C,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,MAAM,WAAW,cAAc;EAC9B,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,gCAAgC;EACtE,MAAM,WAAmC,CAAC;EAC1C,IAAI,WAAW;EACf,KAAK,MAAM,QAAQ,OAAO;GACzB,MAAM,aAAa,QAAQ,yBAAyB,OAAO,IAAI;GAC/D,IAAI,eAAe,KAAA,GAAW;GAC9B,IAAI,CAAC,QAAQ,IAAI,YAAY,OAAO,KAAK,OAAO,WAAW,UAAU,UACpE,MAAM,IAAI,MAAM,+CAA+C;GAEhE,MAAM,QAAQ,kBAAkB,WAAW,KAAK;GAChD,YAAY;GACZ,IAAI,QAAQ,sBAAsB,WAAW,QAC5C,MAAM,IAAI,MAAM,kDAAkD;GAEnE,SAAS,QAAQ,WAAW;EAC7B;EACA,OAAO,OAAO,OAAO,QAAQ;CAC9B,CAAC;CACD,IAAI,CAAC,SAAS,SACb,MAAM,IAAI,cAAc,WAAW,qCAAqC,EACvE,OAAO,SAAS,MACjB,CAAC;CAEF,OAAO,SAAS;AACjB;;AAGA,SAAgB,gBAAgB,OAA4B;CAC3D,MAAM,WAAW,OAAO,UAAU,WAAW,MAAM,MAAM,GAAG,IAAI,CAAC;CACjE,IACC,OAAO,UAAU,YACjB,MAAM,WAAW,KACjB,MAAM,SAAA,OACN,CAAC,oBAAoB,KAAK,KAAK,KAC/B,MAAM,SAAS,IAAI,KACnB,MAAM,SAAS,IAAI,KACnB,UAAU,OACV,SAAS,MACP,YACA,YAAY,MACZ,QAAQ,WAAW,GAAG,KACtB,QAAQ,SAAS,GAAG,KACpB,YAAY,KAAK,OAAO,CAC1B,GAEA,MAAM,IAAI,cAAc,WAAW,6BAA6B,EAAE,MAAM,CAAC;CAE1E,OAAO;AACR;;AAGA,SAAgB,yBAAyB,OAAqC;CAC7E,IAAI,UAAU,KAAA,GAAW,OAAO,CAAC;CACjC,MAAM,OAAO,cAAc;EAC1B,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,gCAAgC;EACtE,MAAM,OAAO,QAAQ,QAAQ,KAAK;EAClC,IAAI,KAAK,MAAM,QAAQ,QAAQ,UAAU,QAAQ,QAAQ,QAAQ,OAAO,GACvE,MAAM,IAAI,MAAM,gCAAgC;EAGjD,IADoB,KAAK,KAAK,QAAQ,QAAQ,yBAAyB,OAAO,GAAG,CAEhF,CAAA,CAAY,MACV,eAAe,eAAe,KAAA,KAAa,CAAC,QAAQ,IAAI,YAAY,OAAO,CAC7E,GAEA,MAAM,IAAI,MAAM,kCAAkC;EAEnD,OAAO;GACN,MAAM,QAAQ,yBAAyB,OAAO,MAAM,CAAC,EAAE;GACvD,IAAI,QAAQ,yBAAyB,OAAO,IAAI,CAAC,EAAE;GACnD,OAAO,QAAQ,yBAAyB,OAAO,OAAO,CAAC,EAAE;EAC1D;CACD,CAAC;CACD,IAAI,CAAC,KAAK,SACT,MAAM,IAAI,cAAc,WAAW,sCAAsC,EACxE,OAAO,KAAK,MACb,CAAC;CAEF,MAAM,SAAS,4BAA4B,MAAM,EAChD,GAAI,KAAK,MAAM,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,KAAK,EAClE,CAAC;CACD,IAAI,WAAW,KAAA,KAAc,OAAO,SAAS,KAAA,KAAa,CAAC,iBAAiB,OAAO,IAAI,GACtF,MAAM,IAAI,cAAc,WAAW,gCAAgC;CAEpE,IAAI,KAAK,MAAM,OAAO,KAAA,KAAa,CAAC,yBAAyB,KAAK,MAAM,EAAE,GACzE,MAAM,IAAI,cAAc,WAAW,wCAAwC;CAE5E,MAAM,aAAa,cAAc;EAChC,MAAM,cAAc,KAAK,MAAM;EAC/B,IAAI,gBAAgB,KAAA,GAAW,OAAO,KAAA;EACtC,IAAI,OAAO,gBAAgB,YAAY,gBAAgB,MACtD,MAAM,IAAI,MAAM,2BAA2B;EAE5C,MAAM,OAAO,QAAQ,yBAAyB,aAAa,MAAM,CAAC,EAAE;EACpE,MAAM,QAAQ,QAAQ,yBAAyB,aAAa,OAAO,CAAC,EAAE;EACtE,MAAM,SAAS,QAAQ,yBAAyB,aAAa,QAAQ,CAAC,EAAE;EACxE,MAAM,OAAO,QAAQ,yBAAyB,aAAa,MAAM,CAAC,EAAE;EACpE,MAAM,QAAQ,QAAQ,yBAAyB,aAAa,OAAO,CAAC,EAAE;EACtE,MAAM,UAAU,QAAQ,yBAAyB,aAAa,SAAS,CAAC,EAAE;EAC1E,IACE,SAAS,KAAA,KAAa,CAAC,WAAW,IAAI,KACtC,UAAU,KAAA,KAAa,CAAC,WAAW,KAAK,KACxC,WAAW,KAAA,KAAa,CAAC,WAAW,MAAM,KAC1C,SAAS,KAAA,KAAa,CAAC,WAAW,IAAI,KACtC,UAAU,KAAA,KAAa,CAAC,WAAW,KAAK,KACxC,YAAY,KAAA,KAAa,CAAC,WAAW,OAAO,GAE7C,MAAM,IAAI,MAAM,2BAA2B;EAE5C,OAAO,OAAO,OAAO;GACpB,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;GACrC,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;GACvC,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;GACzC,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;GACrC,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;GACvC,GAAI,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ;EAC5C,CAAC;CACF,CAAC;CACD,IAAI,CAAC,WAAW,SACf,MAAM,IAAI,cAAc,WAAW,0CAA0C,EAC5E,OAAO,WAAW,MACnB,CAAC;CAEF,MAAM,KAAqD,WAAW;CACtE,IAAI,KAAK,MAAM,UAAU,KAAA,KAAa,CAAC,sBAAsB,KAAK,MAAM,KAAK,GAC5E,MAAM,IAAI,cAAc,WAAW,yCAAyC;CAE7E,OAAO;EACN,GAAI,OAAO,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,OAAO,KAAK;EACzD,GAAI,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,GAAG;EACjC,GAAI,KAAK,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,MAAM;CACrE;AACD;;;;;;;AAQA,SAAgB,iBAAiB,OAA6B;CAC7D,IAAI,UAAU,KAAA,GAAW,OAAO,CAAC;CACjC,MAAM,OAAO,cAAc;EAC1B,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,gCAAgC;EACtE,MAAM,OAAO,QAAQ,QAAQ,KAAK;EAClC,IACC,KAAK,MACH,QACA,QAAQ,YACR,QAAQ,cACR,QAAQ,iBACR,QAAQ,aACR,QAAQ,YACR,QAAQ,WACR,QAAQ,WACR,QAAQ,YACR,QAAQ,QACR,QAAQ,OACV,GAEA,MAAM,IAAI,MAAM,gCAAgC;EAGjD,IADoB,KAAK,KAAK,QAAQ,QAAQ,yBAAyB,OAAO,GAAG,CAEhF,CAAA,CAAY,MACV,eAAe,eAAe,KAAA,KAAa,CAAC,QAAQ,IAAI,YAAY,OAAO,CAC7E,GAEA,MAAM,IAAI,MAAM,kCAAkC;EAEnD,OAAO;GACN,QAAQ,QAAQ,yBAAyB,OAAO,QAAQ,CAAC,EAAE;GAC3D,UAAU,QAAQ,yBAAyB,OAAO,UAAU,CAAC,EAAE;GAC/D,aAAa,QAAQ,yBAAyB,OAAO,aAAa,CAAC,EAAE;GACrE,SAAS,QAAQ,yBAAyB,OAAO,SAAS,CAAC,EAAE;GAC7D,QAAQ,QAAQ,yBAAyB,OAAO,QAAQ,CAAC,EAAE;GAC3D,OAAO,QAAQ,yBAAyB,OAAO,OAAO,CAAC,EAAE;GACzD,OAAO,QAAQ,yBAAyB,OAAO,OAAO,CAAC,EAAE;GACzD,QAAQ,QAAQ,yBAAyB,OAAO,QAAQ,CAAC,EAAE;GAC3D,IAAI,QAAQ,yBAAyB,OAAO,IAAI,CAAC,EAAE;GACnD,OAAO,QAAQ,yBAAyB,OAAO,OAAO,CAAC,EAAE;EAC1D;CACD,CAAC;CACD,IAAI,CAAC,KAAK,SACT,MAAM,IAAI,cAAc,WAAW,8BAA8B,EAAE,OAAO,KAAK,MAAM,CAAC;CAEvF,MAAM,SAAS,cAAc;EAC5B,IAAI;EACJ,IAAI,KAAK,MAAM,WAAW,KAAA,GAAW;GACpC,MAAM,SAAS,KAAK,MAAM;GAC1B,IAAI,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,+BAA+B;GACtE,MAAM,OAAO,QAAQ,QAAQ,MAAM;GACnC,IAAI,KAAK,MAAM,QAAQ,QAAQ,UAAU,QAAQ,YAAY,QAAQ,SAAS,GAC7E,MAAM,IAAI,MAAM,+BAA+B;GAGhD,IADoB,KAAK,KAAK,QAAQ,QAAQ,yBAAyB,QAAQ,GAAG,CAEjF,CAAA,CAAY,MACV,eAAe,eAAe,KAAA,KAAa,CAAC,QAAQ,IAAI,YAAY,OAAO,CAC7E,GAEA,MAAM,IAAI,MAAM,iCAAiC;GAElD,SAAS;IACR,MAAM,QAAQ,yBAAyB,QAAQ,MAAM,CAAC,EAAE;IACxD,QAAQ,QAAQ,yBAAyB,QAAQ,QAAQ,CAAC,EAAE;IAC5D,SAAS,QAAQ,yBAAyB,QAAQ,SAAS,CAAC,EAAE;GAC/D;EACD;EACA,IAAI;EACJ,IAAI,KAAK,MAAM,aAAa,KAAA,GAAW;GACtC,MAAM,SAAS,KAAK,MAAM;GAC1B,IAAI,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,iCAAiC;GACxE,MAAM,OAAO,QAAQ,QAAQ,MAAM;GACnC,IAAI,KAAK,MAAM,QAAQ,QAAQ,UAAU,QAAQ,SAAS,GACzD,MAAM,IAAI,MAAM,kCAAkC;GAGnD,IADoB,KAAK,KAAK,QAAQ,QAAQ,yBAAyB,QAAQ,GAAG,CAEjF,CAAA,CAAY,MACV,eAAe,eAAe,KAAA,KAAa,CAAC,QAAQ,IAAI,YAAY,OAAO,CAC7E,GAEA,MAAM,IAAI,MAAM,mCAAmC;GAEpD,WAAW;IACV,MAAM,QAAQ,yBAAyB,QAAQ,MAAM,CAAC,EAAE;IACxD,SAAS,QAAQ,yBAAyB,QAAQ,SAAS,CAAC,EAAE;GAC/D;EACD;EACA,OAAO;GAAE;GAAQ;EAAS;CAC3B,CAAC;CACD,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,cAAc,WAAW,uCAAuC,EACzE,OAAO,OAAO,MACf,CAAC;CAEF,MAAM,gBAAgB;EACrB,GAAI,OAAO,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,OAAO,MAAM,OAAO;EAC3E,GAAI,OAAO,MAAM,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,OAAO,MAAM,SAAS;EACjF,GAAI,KAAK,MAAM,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,KAAK,MAAM,YAAY;EACtF,GAAI,KAAK,MAAM,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,KAAK,MAAM,QAAQ;EAC1E,GAAI,KAAK,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,KAAK,MAAM,OAAO;EACvE,GAAI,KAAK,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,MAAM;EACpE,GAAI,KAAK,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,MAAM;EACpE,GAAI,KAAK,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,KAAK,MAAM,OAAO;CACxE;CACA,MAAM,SAAS,oBAAoB,MAAM,aAAa;CACtD,IAAI,WAAW,KAAA,GACd,MAAM,IAAI,cAAc,WAAW,4BAA4B;CAEhE,IAAI,KAAK,MAAM,OAAO,KAAA,KAAa,CAAC,iBAAiB,KAAK,MAAM,EAAE,GACjE,MAAM,IAAI,cAAc,WAAW,gCAAgC;CAEpE,MAAM,aAAa,cAAc;EAChC,MAAM,cAAc,KAAK,MAAM;EAC/B,IAAI,gBAAgB,KAAA,GAAW,OAAO,KAAA;EACtC,IAAI,OAAO,gBAAgB,YAAY,gBAAgB,MACtD,MAAM,IAAI,MAAM,2BAA2B;EAE5C,MAAM,QAAQ,QAAQ,yBAAyB,aAAa,OAAO,CAAC,EAAE;EACtE,MAAM,UAAU,QAAQ,yBAAyB,aAAa,SAAS,CAAC,EAAE;EAC1E,MAAM,kBAAkB,QAAQ,yBAAyB,aAAa,SAAS,CAAC,EAAE;EAClF,MAAM,QAAQ,QAAQ,yBAAyB,aAAa,OAAO,CAAC,EAAE;EACtE,MAAM,OAAO,QAAQ,yBAAyB,aAAa,MAAM,CAAC,EAAE;EACpE,MAAM,QAAQ,QAAQ,yBAAyB,aAAa,OAAO,CAAC,EAAE;EACtE,MAAM,UAAU,QAAQ,yBAAyB,aAAa,SAAS,CAAC,EAAE;EAC1E,IACE,UAAU,KAAA,KAAa,CAAC,WAAW,KAAK,KACxC,YAAY,KAAA,KAAa,CAAC,WAAW,OAAO,KAC5C,oBAAoB,KAAA,KAAa,CAAC,WAAW,eAAe,KAC5D,UAAU,KAAA,KAAa,CAAC,WAAW,KAAK,KACxC,SAAS,KAAA,KAAa,CAAC,WAAW,IAAI,KACtC,UAAU,KAAA,KAAa,CAAC,WAAW,KAAK,KACxC,YAAY,KAAA,KAAa,CAAC,WAAW,OAAO,GAE7C,MAAM,IAAI,MAAM,2BAA2B;EAE5C,OAAO,OAAO,OAAO;GACpB,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;GACvC,GAAI,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ;GAC3C,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,gBAAgB;GACpE,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;GACvC,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;GACrC,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;GACvC,GAAI,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ;EAC5C,CAAC;CACF,CAAC;CACD,IAAI,CAAC,WAAW,SACf,MAAM,IAAI,cAAc,WAAW,kCAAkC,EACpE,OAAO,WAAW,MACnB,CAAC;CAEF,MAAM,KAA6C,WAAW;CAC9D,IAAI,KAAK,MAAM,UAAU,KAAA,KAAa,CAAC,sBAAsB,KAAK,MAAM,KAAK,GAC5E,MAAM,IAAI,cAAc,WAAW,iCAAiC;CAErE,MAAM,SACL,OAAO,WAAW,KAAA,IACf,KAAA,IACA;EACA,GAAI,OAAO,OAAO,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,cAAc,OAAO,OAAO,IAAI,EAAE;EACtF,GAAI,OAAO,OAAO,WAAW,KAAA,IAC1B,CAAC,IACD,EAAE,QAAQ,gBAAgB,OAAO,OAAO,MAAM,EAAE;EACnD,GAAI,OAAO,OAAO,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,OAAO,OAAO,QAAQ;CACjF;CACH,MAAM,WACL,OAAO,aAAa,KAAA,IACjB,KAAA,IACA;EACA,GAAI,OAAO,SAAS,SAAS,KAAA,IAC1B,CAAC,IACD,EAAE,MAAM,cAAc,OAAO,SAAS,IAAI,EAAE;EAC/C,GAAI,OAAO,SAAS,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,OAAO,SAAS,QAAQ;CACrF;CACH,OAAO;EACN,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;EACzC,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;EAC7C,GAAI,OAAO,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,OAAO,YAAY;EAC9E,GAAI,OAAO,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,OAAO,QAAQ;EAClE,GAAI,OAAO,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,OAAO,OAAO;EAC/D,GAAI,OAAO,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;EAC5D,GAAI,OAAO,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;EAC5D,GAAI,OAAO,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,OAAO,OAAO;EAC/D,GAAI,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,GAAG;EACjC,GAAI,KAAK,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,MAAM;CACrE;AACD;;;;;;;;ACnoBA,IAAa,mBAAb,MAAa,iBAAiB;CAC7B,OAAgBA,SAAS,OAAO,OAAO,CAAC,CAAC;CAEzC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACC,OACA,QACA,MACA,OACA,QACA,cACA,SACA,aACA,QACA,UACC;EACD,IAAI,UAAU,iBAAiBA,QAC9B,MAAM,IAAI,cAAc,SAAS,mDAAmD;EAErF,KAAKC,UAAU;EACf,KAAKC,QAAQ;EACb,KAAKC,SAAS;EACd,KAAKC,UAAU;EACf,KAAKC,gBAAgB,OAAO,OAAO,CAAC,GAAG,YAAY,CAAC;EACpD,KAAKC,WAAW,OAAO,OAAO,QAAQ,KAAK,WAAW,OAAO,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;EACnF,KAAKC,eAAe,OAAO,OAC1B,YAAY,KAAK,cAAc,OAAO,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC,CAC/D;EACA,KAAKC,UAAU,OAAO,OAAO,EAAE,GAAG,OAAO,CAAC;EAC1C,KAAKC,YAAY,aAAa,KAAA,IAAY,KAAA,IAAY,OAAO,OAAO,EAAE,GAAG,SAAS,CAAC;CACpF;;CAGA,OAAO,OACN,QACA,OACA,eACmB;EACnB,IAAI,CAAC,iBAAiB,MAAM,GAC3B,MAAM,IAAI,cAAc,SAAS,yCAAyC,EAAE,OAAO,CAAC;EAErF,MAAM,iBAAiB,QAAQ,MAAM;EACrC,MAAM,YAAY,mBAAmB,OAAO,oBAAoB;EAChE,IAAI,cAAc,KAAA,GACjB,MAAM,IAAI,cAAc,SAAS,yCAAyC,EACzE,QAAQ,eACT,CAAC;EAEF,MAAM,aACL,kBAAkB,KAAA,IACf,KAAA,IACA,wBAAwB,eAAe,oBAAoB;EAC/D,IAAI,kBAAkB,KAAA,KAAa,eAAe,KAAA,GACjD,MAAM,IAAI,cAAc,SAAS,iDAAiD,EACjF,QAAQ,eACT,CAAC;EAEF,MAAM,WAAW,iBAAiB,SAAS;EAC3C,IAAI,aAAa,KAAA,GAChB,MAAM,IAAI,cACT,SACA,wCAAwC,SAAS,GAAG,SAAS,SAAS,GAAG,IACzE;GAAE,OAAO;GAAU,WAAW;EAAM,CACrC;EAED,IACC,eAAe,KAAA,MACd,WAAW,WAAW,UAAU,UAChC,UAAU,MAAM,SAAS,CAAC,WAAW,MAAM,cAAc,UAAU,SAAS,IAAI,CAAC,KACjF,WAAW,MACT,cACA,CAAC,eAAe,UAAU,IAAI,KAC7B,UAAU,UAAU,WACnB,UAAU,WAAW,KAAA,KAAa,CAAC,qBAAqB,KAAK,UAAU,MAAM,MAC9E,UAAU,UAAU,YAAY,UAAU,WAAW,KAAA,CACxD,IAED,MAAM,IAAI,cAAc,SAAS,iDAAiD,EACjF,OAAO,UACR,CAAC;EAEF,MAAM,SAAS,QAAQ,cAAc;EACrC,MAAM,iBAA2B,CAAC;EAClC,IAAI,WAAW;EACf,IAAI;EACJ,OAAO,WAAW,KAAA,GAAW;GAC5B,MAAM,SAAS,cAAc,UAAU,QAAQ,CAAC;GAChD,IAAI,OAAO,SAAS;IACnB,IAAI,CAAC,OAAO,MAAM,YAAY,KAAK,OAAO,MAAM,eAAe,GAC9D,MAAM,IAAI,cAAc,SAAS,oDAAoD;KACpF,QAAQ;KACR,QAAQ;IACT,CAAC;IAEF,SAAS,OAAO,OAAO;KACtB,MAAM;KACN,QAAQ,OAAO,MAAM;KACrB,OAAO,OAAO,MAAM;IACrB,CAAC;IACD;GACD;GACA,IAAI,CAAC,mBAAmB,OAAO,KAAK,GACnC,MAAM,IAAI,cAAc,SAAS,8CAA8C;IAC9E,QAAQ;IACR,QAAQ;IACR,OAAO,OAAO;GACf,CAAC;GAEF,eAAe,KAAK,QAAQ;GAC5B,MAAM,OAAO,QAAQ,QAAQ;GAC7B,IAAI,SAAS,UACZ,MAAM,IAAI,cAAc,SAAS,4CAA4C,EAC5E,QAAQ,eACT,CAAC;GAEF,WAAW;EACZ;EACA,MAAM,eAAe,cAAc,UAAU,cAAc,CAAC;EAC5D,MAAM,WACL,aAAa,WACb,aAAa,MAAM,YAAY,KAC/B,CAAC,aAAa,MAAM,eAAe,IAChC,OAAO,OAAO;GACd,MAAM;GACN,QAAQ,aAAa,MAAM;GAC3B,OAAO,aAAa,MAAM;EAC3B,CAAC,IACA,KAAA;EACJ,IAAI,CAAC,aAAa,WAAW,CAAC,mBAAmB,aAAa,KAAK,GAClE,MAAM,IAAI,cAAc,SAAS,8CAA8C;GAC9E,QAAQ;GACR,OAAO,aAAa;EACrB,CAAC;EAEF,IAAI,aAAa,WAAW,aAAa,KAAA,GACxC,MAAM,IAAI,cAAc,SAAS,oDAAoD,EACpF,QAAQ,eACT,CAAC;EAEF,MAAM,eAAmC,CAAC;EAC1C,KAAK,MAAM,QAAQ,WAAW;GAC7B,IAAI,CAAC,eAAe,IAAI,GACvB,MAAM,IAAI,cAAc,SAAS,+BAA+B,QAAQ,EAAE,KAAK,CAAC;GAEjF,MAAM,eAAe,YAAY,MAAM,cAAc,UAAU,SAAS,IAAI;GAC5E,MAAM,cAAc,oBAAoB,gBAAgB,MAAM,SAAS,QAAQ;GAC/E,MAAM,UAAU,cAAc,UAAU,WAAW,CAAC;GACpD,IAAI,CAAC,QAAQ,SAAS;IACrB,IAAI,CAAC,mBAAmB,QAAQ,KAAK,GACpC,MAAM,IAAI,cAAc,SAAS,gDAAgD,QAAQ;KACxF;KACA,OAAO,QAAQ;IAChB,CAAC;IAEF,IAAI,cAAc,UAAU,QAC3B,MAAM,IAAI,cAAc,SAAS,iCAAiC,QAAQ,EACzE,KACD,CAAC;IAEF,aAAa,KAAK,OAAO,OAAO;KAAE;KAAM,OAAO;IAAS,CAAC,CAAC;IAC1D;GACD;GACA,IACC,QAAQ,MAAM,eAAe,KAC5B,QAAQ,MAAM,OAAO,KAAK,QAAQ,MAAM,UAAU,KAClD,CAAC,QAAQ,MAAM,OAAO,KAAK,CAAC,QAAQ,MAAM,YAAY,GAEvD,MAAM,IAAI,cAAc,SAAS,qCAAqC,QAAQ,EAC7E,KACD,CAAC;GAEF,IAAI,QAAQ,MAAM,YAAY,GAAG;IAChC,IAAI,iBAAiB,KAAA,GACpB,MAAM,IAAI,cAAc,SAAS,iCAAiC,QAAQ,EACzE,KACD,CAAC;IAEF,aAAa,KACZ,OAAO,OAAO;KACb;KACA,OAAO;KACP,QAAQ,QAAQ,MAAM;KACtB,OAAO,QAAQ,MAAM;KACrB,UAAU,QAAQ,MAAM;KACxB,MAAM,QAAQ,MAAM;IACrB,CAAC,CACF;IACA;GACD;GACA,MAAM,UAAU,cAAc,WAAW,WAAW,CAAC;GACrD,IAAI,CAAC,QAAQ,SACZ,MAAM,IAAI,cAAc,SAAS,iDAAiD,QAAQ;IACzF;IACA,OAAO,QAAQ;GAChB,CAAC;GAEF,IACC,cAAc,UAAU,YACvB,cAAc,UAAU,UAAU,aAAa,WAAW,QAAQ,OAEnE,MAAM,IAAI,cAAc,SAAS,iCAAiC,QAAQ,EACzE,KACD,CAAC;GAEF,aAAa,KACZ,OAAO,OAAO;IACb;IACA,OAAO;IACP,QAAQ,QAAQ,MAAM;IACtB,OAAO,QAAQ,MAAM;IACrB,UAAU,QAAQ,MAAM;IACxB,MAAM,QAAQ,MAAM;IACpB,QAAQ,QAAQ;GACjB,CAAC,CACF;EACD;EACA,MAAM,QAAQ,WAAW;EACzB,MAAM,OAAO,KAAK,QAAQ,IAAI,SAAS,cAAc,EAAE,SAAS,OAAO;EACvE,MAAM,QAAQ,KAAK,MAAM,OAAO;EAChC,MAAM,SAAS,KAAK,MAAM,QAAQ;EAClC,MAAM,UAAyB,CAAC;EAChC,MAAM,cAA6B,CAAC;EACpC,MAAM,UAAU,cAAc;GAC7B,MAAM,WAAW,UAAU,OAAO,IAAI;GACtC,IACC,CAAC,SAAS,YAAY,KACtB,SAAS,eAAe,KACxB,SAAS,QAAQ,OAAO,UACxB,SAAS,QAAQ,OAAO,OAExB,MAAM,IAAI,MAAM,kCAAkC;GAEnD,KAAK,MAAM,aAAa,CAAC,GAAG,cAAc,CAAC,CAAC,QAAQ,GAAG;IACtD,UAAU,SAAS;IACnB,MAAM,SAAS,UAAU,SAAS;IAClC,IAAI,CAAC,OAAO,YAAY,KAAK,OAAO,eAAe,GAClD,MAAM,IAAI,MAAM,uCAAuC,WAAW;IAEnE,QAAQ,KAAK,OAAO,OAAO;KAAE,MAAM;KAAW,QAAQ,OAAO;KAAK,OAAO,OAAO;IAAI,CAAC,CAAC;GACvF;GACA,UAAU,MAAM,EAAE,MAAM,IAAM,CAAC;GAC/B,MAAM,aAAa,UAAU,IAAI;GACjC,IAAI,CAAC,WAAW,YAAY,KAAK,WAAW,eAAe,GAC1D,MAAM,IAAI,MAAM,gDAAgD;GAEjE,YAAY,KAAK,OAAO,OAAO;IAAE,MAAM;IAAM,QAAQ,WAAW;IAAK,OAAO,WAAW;GAAI,CAAC,CAAC;GAC7F,UAAU,OAAO,EAAE,MAAM,IAAM,CAAC;GAChC,MAAM,cAAc,UAAU,KAAK;GACnC,IAAI,CAAC,YAAY,YAAY,KAAK,YAAY,eAAe,GAC5D,MAAM,IAAI,MAAM,iDAAiD;GAElE,YAAY,KACX,OAAO,OAAO;IAAE,MAAM;IAAO,QAAQ,YAAY;IAAK,OAAO,YAAY;GAAI,CAAC,CAC/E;GACA,UAAU,QAAQ,EAAE,MAAM,IAAM,CAAC;GACjC,MAAM,eAAe,UAAU,MAAM;GACrC,IAAI,CAAC,aAAa,YAAY,KAAK,aAAa,eAAe,GAC9D,MAAM,IAAI,MAAM,kDAAkD;GAEnE,YAAY,KACX,OAAO,OAAO;IAAE,MAAM;IAAQ,QAAQ,aAAa;IAAK,OAAO,aAAa;GAAI,CAAC,CAClF;GACA,KAAK,MAAM,aAAa,CAAC,GAAG,SAAS,GAAG,WAAW,GAAG;IACrD,MAAM,SAAS,UAAU,UAAU,IAAI;IACvC,IACC,CAAC,OAAO,YAAY,KACpB,OAAO,eAAe,KACtB,OAAO,QAAQ,UAAU,UACzB,OAAO,QAAQ,UAAU,OAEzB,MAAM,IAAI,MAAM,0CAA0C,UAAU,MAAM;GAE5E;EACD,CAAC;EACD,IAAI,CAAC,QAAQ,SAAS;GAerB,IAdqB,cAAc;IAClC,KAAK,MAAM,aAAa,aAAa;KACpC,MAAM,SAAS,UAAU,UAAU,IAAI;KACvC,IACC,CAAC,OAAO,YAAY,KACpB,OAAO,eAAe,KACtB,OAAO,QAAQ,UAAU,UACzB,OAAO,QAAQ,UAAU,OAEzB,MAAM,IAAI,MAAM,0CAA0C,UAAU,MAAM;IAE5E;IACA,IAAI,YAAY,SAAS,GAAG,OAAO,MAAM,EAAE,WAAW,KAAK,CAAC;GAC7D,CACI,CAAA,CAAa,SAChB,KAAK,MAAM,aAAa,CAAC,GAAG,OAAO,CAAC,CAAC,QAAQ,GAC5C,cAAc;IACb,MAAM,SAAS,UAAU,UAAU,IAAI;IACvC,IACC,CAAC,OAAO,YAAY,KACpB,OAAO,eAAe,KACtB,OAAO,QAAQ,UAAU,UACzB,OAAO,QAAQ,UAAU,OAEzB,MAAM,IAAI,MAAM,uCAAuC,UAAU,MAAM;IAExE,UAAU,UAAU,IAAI;GACzB,CAAC;GAGH,MAAM,IAAI,cAAc,SAAS,sCAAsC;IACtE,QAAQ;IACR;IACA,OAAO,QAAQ;GAChB,CAAC;EACF;EACA,OAAO,IAAI,iBACV,iBAAiBT,QACjB,gBACA,MACA,OACA,QACA,cACA,SACA,aACA,QACA,QACD;CACD;CAEA,IAAI,SAAiB;EACpB,OAAO,KAAKC;CACb;CAEA,IAAI,OAAe;EAClB,OAAO,KAAKC;CACb;CAEA,IAAI,QAAgB;EACnB,OAAO,KAAKC;CACb;CAEA,IAAI,SAAiB;EACpB,OAAO,KAAKC;CACb;CAEA,IAAI,eAA4C;EAC/C,OAAO,KAAKC;CACb;CAEA,IAAI,UAAkC;EACrC,OAAO,KAAKC;CACb;CAEA,IAAI,cAAsC;EACzC,OAAO,KAAKC;CACb;CAEA,IAAI,SAAsB;EACzB,OAAO,KAAKC;CACb;CAEA,IAAI,WAAoC;EACvC,OAAO,KAAKC;CACb;AACD;;;;;;;;;ACrRA,SAAgB,gBAAgB,MAAuB;CACtD,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC,CAAC,YAAY,CAAC;CAC1D,OAAO,OAAO,WAAW,OAAO;AACjC;;;;;;;AAQA,SAAgB,WAAW,MAAuB;CACjD,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;CAC5C,OACC,OAAO,WACP,OAAO,MAAM,OAAO,KACpB,CAAC,OAAO,MAAM,eAAe,KAC7B,OAAO,MAAM,UAAU;AAEzB;;;;;;;AAQA,SAAgB,WAAW,MAAsB;CAChD,MAAM,UAAU,UAAU,IAAI;CAC9B,IAAI,CAAC,QAAQ,OAAO,KAAK,QAAQ,eAAe,KAAK,QAAQ,UAAU,GACtE,MAAM,IAAI,MAAM,2CAA2C,MAAM;CAElE,IAAI,QAAQ,OAAO,oBAClB,MAAM,IAAI,MAAM,yBAAyB,mBAAmB,YAAY,MAAM;CAE/E,MAAM,SAAS,SAAS,MAAM,GAAG;CACjC,MAAM,OAAO,WAAW,QAAQ;CAChC,MAAM,SAAS,OAAO,YAAY,KAAM;CACxC,MAAM,OAAO,cAAc;EAC1B,MAAM,UAAU,UAAU,MAAM;EAChC,IACC,CAAC,QAAQ,OAAO,KAChB,QAAQ,UAAU,KAClB,QAAQ,QAAQ,QAAQ,OACxB,QAAQ,QAAQ,QAAQ,KAExB,MAAM,IAAI,MAAM,2CAA2C,MAAM;EAElE,IAAI,OAAO;EACX,SAAS;GACR,MAAM,SAAS,SAAS,QAAQ,QAAQ,GAAG,OAAO,YAAY,IAAI;GAClE,IAAI,WAAW,GAAG;GAClB,QAAQ;GACR,IAAI,OAAO,oBACV,MAAM,IAAI,MAAM,yBAAyB,mBAAmB,YAAY,MAAM;GAE/E,KAAK,OAAO,OAAO,SAAS,GAAG,MAAM,CAAC;EACvC;EACA,MAAM,QAAQ,UAAU,MAAM;EAC9B,MAAM,aAAa,UAAU,IAAI;EACjC,IACC,SAAS,QAAQ,QACjB,MAAM,QAAQ,QAAQ,OACtB,MAAM,QAAQ,QAAQ,OACtB,MAAM,YAAY,QAAQ,WAC1B,MAAM,SAAS,QAAQ,QACvB,CAAC,WAAW,OAAO,KACnB,WAAW,eAAe,KAC1B,WAAW,UAAU,KACrB,WAAW,QAAQ,QAAQ,OAC3B,WAAW,QAAQ,QAAQ,KAE3B,MAAM,IAAI,MAAM,0CAA0C,MAAM;EAEjE,OAAO,KAAK,OAAO,KAAK;CACzB,CAAC;CACD,MAAM,SAAS,cAAc,UAAU,MAAM,CAAC;CAC9C,IAAI,CAAC,KAAK,SAAS,MAAM,KAAK;CAC9B,IAAI,CAAC,OAAO,SAAS,MAAM,OAAO;CAClC,OAAO,KAAK;AACb;;;;;;;AAQA,SAAgB,UAAU,KAAqB;CAC9C,IAAI,IAAI,SAAS,2BAA2B,CAAC,YAAY,KAAK,GAAG,GAChE,MAAM,IAAI,MAAM,qDAAqD;CAEtE,MAAM,OAAO,WAAW,QAAQ;CAChC,KAAK,IAAI,SAAS,GAAG,SAAS,IAAI,QAAQ,UAAU,QACnD,KAAK,OAAO,OAAO,KAAK,IAAI,MAAM,QAAQ,SAAS,MAAO,GAAG,KAAK,CAAC;CAEpE,OAAO,KAAK,OAAO,KAAK;AACzB;;;;;;;AAQA,SAAgB,WAAW,OAAuB;CACjD,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,MAAM,CAAC,CAAC,OAAO,KAAK;AAC/D;;;;;;;;AASA,SAAgB,mBACf,SACA,OACS;CACT,OAAO,WAAW,gBAAgB;EAAE;EAAS;CAAM,CAAC,CAAC;AACtD;;;;;;;AAQA,SAAgB,UAAU,QAAwB;CAEjD,OAAO,mCADO,OAAO,MAAM,IAAsB,OAAO,SAAS,CACvB,EAAM;AACjD;;;;;;;AAQA,SAAgB,iBAAiB,MAAsB;CAEtD,OAAO,KAAK,WAAW,aAAM,IAAI,KAAK,MAAM,EAAa,IAAI;AAC9D;;;;;;;;AASA,SAAgB,oBACf,QACA,OACmC;CACnC,MAAM,UAAkC,CAAC;CACzC,KAAK,MAAM,QAAQ,OAAO;EACzB,MAAM,OAAO,cAAc,iBAAiB,IAAI,EAAE;EAClD,MAAM,OAAO,oBAAoB,QAAQ,MAAM,UAAU,QAAQ;EACjE,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;EAC5C,IAAI,CAAC,OAAO,SAAS;GACpB,IAAI,mBAAmB,OAAO,KAAK,GAAG;GACtC,MAAM,IAAI,cAAc,UAAU,oCAAoC,QAAQ;IAC7E;IACA,OAAO,OAAO;GACf,CAAC;EACF;EACA,IAAI,CAAC,OAAO,MAAM,OAAO,KAAK,OAAO,MAAM,eAAe,KAAK,OAAO,MAAM,UAAU,GACrF,MAAM,IAAI,cAAc,UAAU,yCAAyC,QAAQ,EAClF,KACD,CAAC;EAEF,QAAQ,QAAQ,aAAa,QAAQ,MAAM,UAAU,QAAQ;CAC9D;CACA,OAAO,OAAO,OAAO,OAAO;AAC7B;;;;;;;;;AAUA,SAAgB,aACf,QACA,QACA,UACa;CACb,MAAM,SAAS,CAAC,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAC,QACtC,UAAU,MAAM,cAAc,aAAa,MAAM,cAAc,QACjE,CAAC,CAAC;CAKF,OAAO;EAAE;EAAQ;EAAQ;EAAU,OAHlC,WAAW,KACX,OAAO,OAAO,UAAU,MAAM,cAAc,SAAS,KACrD,SAAS,OAAO,YAAY,QAAQ,cAAc,SAAS;EAClB;CAAO;AAClD;;;;;;;;;;;;;;;;;;;;;;;AAsCA,SAAgB,WAAmB;CAClC,IAAI,MAAM,QAAQ,cAAc,YAAY,GAAG,CAAC;CAChD,SAAS;EACR,IAAI,WAAW,KAAK,KAAK,cAAc,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,MAAM;EAC1E,MAAM,SAAS,QAAQ,GAAG;EAC1B,IAAI,WAAW,KACd,MAAM,IAAI,cAAc,UAAU,mDAAmD,EACpF,QAAQ,YAAY,IACrB,CAAC;EAEF,MAAM;CACP;AACD;;;;;;;AAQA,SAAgB,gBAAgB,MAAsB;CACrD,IAAI,CAAC,iBAAiB,IAAI,GACzB,MAAM,IAAI,cAAc,UAAU,oDAAoD;CAEvF,IAAI,UAAU,QAAQ,IAAI;CAC1B,MAAM,aAAuB,CAAC;CAC9B,OAAO,CAAC,WAAW,OAAO,GAAG;EAC5B,MAAM,SAAS,QAAQ,OAAO;EAC9B,IAAI,WAAW,WAAW,WAAW,UAAA,IACpC,MAAM,IAAI,cAAc,UAAU,oDAAoD;GACrF;GACA,OAAA;EACD,CAAC;EAEF,WAAW,QAAQ,SAAW,QAAQ,OAAO,CAAC;EAC9C,UAAU;CACX;CACA,IAAI,WAAW,aAAa,OAAO;CACnC,KAAK,MAAM,WAAW,YAAY,WAAW,KAAK,UAAU,OAAO;CACnE,OAAO;AACR;;;;;;;;;;AAWA,SAAgB,qBACf,MACA,MACA,MACA,UACS;CACT,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC,iBAAiB,IAAI,GACpD,MAAM,IAAI,cAAc,MAAM,GAAG,SAAS,2CAA2C;EACpF;EACA;CACD,CAAC;CAEF,MAAM,eAAe,gBAAgB,QAAQ,IAAI,CAAC;CAClD,MAAM,oBAAoB,gBAAgB,QAAQ,MAAM,IAAI,CAAC;CAC7D,IAAI,sBAAsB,gBAAgB,CAAC,kBAAkB,WAAW,eAAe,GAAG,GACzF,MAAM,IAAI,cAAc,MAAM,SAAS,KAAK,gBAAgB,SAAS,QAAQ;EAC5E;EACA;CACD,CAAC;CAEF,OAAO,QAAQ,MAAM,IAAI;AAC1B;;;;;;;;;;;AAYA,SAAgB,oBACf,MACA,MACA,MACA,UACS;CACT,MAAM,eAAe,QAAQ,IAAI;CACjC,MAAM,cAAc,qBAAqB,cAAc,MAAM,MAAM,QAAQ;CAC3E,IAAI,gBAAgB,cAAc;EACjC,MAAM,SAAS,cAAc,UAAU,YAAY,CAAC;EACpD,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,YAAY,KAAK,OAAO,MAAM,eAAe,GACjF,MAAM,IAAI,cAAc,MAAM,GAAG,SAAS,gCAAgC;GACzE;GACA;GACA,GAAI,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;EACjD,CAAC;EAEF,OAAO;CACR;CACA,IAAI,SAAS,QAAQ,WAAW;CAChC,SAAS;EACR,IAAI,WAAW,MAAM,GAAG;GACvB,MAAM,SAAS,cAAc,UAAU,MAAM,CAAC;GAC9C,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,YAAY,KAAK,OAAO,MAAM,eAAe,GACjF,MAAM,IAAI,cAAc,MAAM,GAAG,SAAS,kCAAkC;IAC3E;IACA;IACA,GAAI,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;GACjD,CAAC;EAEH;EACA,IAAI,WAAW,cAAc;EAC7B,MAAM,OAAO,QAAQ,MAAM;EAC3B,IAAI,SAAS,QACZ,MAAM,IAAI,cAAc,MAAM,GAAG,SAAS,2BAA2B;GACpE;GACA;EACD,CAAC;EAEF,SAAS;CACV;CACA,OAAO;AACR;;;;;;;;AASA,SAAgB,oBAAoB,QAAqB,UAAwB;CAChF,MAAM,SAAS,cAAc,UAAU,OAAO,IAAI,CAAC;CACnD,IACC,CAAC,OAAO,WACR,CAAC,OAAO,MAAM,YAAY,KAC1B,OAAO,MAAM,eAAe,KAC5B,OAAO,MAAM,QAAQ,OAAO,UAC5B,OAAO,MAAM,QAAQ,OAAO,OAE5B,MAAM,IAAI,cAAc,SAAS,qBAAqB,SAAS,WAAW;EACzE,MAAM,OAAO;EACb,GAAI,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;CACjD,CAAC;AAEH;;;;;;;;AASA,SAAgB,qBAAqB,MAAc,UAAwC;CAC1F,MAAM,cAAc,QAAQ,IAAI;CAChC,MAAM,UAAoB,CAAC;CAC3B,IAAI,UAAU;CACd,IAAI;CACJ,SAAS;EACR,MAAM,SAAS,cAAc,UAAU,OAAO,CAAC;EAC/C,IAAI,OAAO,SAAS;GACnB,IAAI,CAAC,OAAO,MAAM,YAAY,KAAK,OAAO,MAAM,eAAe,GAC9D,MAAM,IAAI,cAAc,SAAS,GAAG,SAAS,+BAA+B,EAC3E,MAAM,QACP,CAAC;GAEF,WAAW,OAAO,OAAO;IACxB,MAAM;IACN,QAAQ,OAAO,MAAM;IACrB,OAAO,OAAO,MAAM;GACrB,CAAC;GACD;EACD;EACA,IAAI,CAAC,mBAAmB,OAAO,KAAK,GACnC,MAAM,IAAI,cAAc,SAAS,qBAAqB,YAAY;GACjE,MAAM;GACN,OAAO,OAAO;EACf,CAAC;EAEF,QAAQ,KAAK,OAAO;EACpB,MAAM,SAAS,QAAQ,OAAO;EAC9B,IAAI,WAAW,SACd,MAAM,IAAI,cAAc,SAAS,oBAAoB,YAAY,EAAE,MAAM,YAAY,CAAC;EAEvF,UAAU;CACX;CACA,MAAM,UAAyB,CAAC;CAChC,IAAI,SAAS;CACb,KAAK,MAAM,aAAa,CAAC,GAAG,OAAO,CAAC,CAAC,QAAQ,GAAG;EAC/C,oBAAoB,QAAQ,QAAQ;EACpC,UAAU,SAAS;EACnB,oBAAoB,QAAQ,QAAQ;EACpC,MAAM,SAAS,UAAU,SAAS;EAClC,IAAI,CAAC,OAAO,YAAY,KAAK,OAAO,eAAe,GAClD,MAAM,IAAI,cAAc,SAAS,GAAG,SAAS,6BAA6B,EACzE,MAAM,UACP,CAAC;EAEF,SAAS,OAAO,OAAO;GACtB,MAAM;GACN,QAAQ,OAAO;GACf,OAAO,OAAO;EACf,CAAC;EACD,QAAQ,KAAK,MAAM;CACpB;CACA,OAAO;EAAE;EAAQ;CAAQ;AAC1B;;;;;;;AAQA,SAAgB,yBAAyB,aAAqC;CAC7E,oBAAoB,YAAY,QAAQ,QAAQ;CAChD,KAAK,MAAM,UAAU,YAAY,SAAS,oBAAoB,QAAQ,QAAQ;CAC9E,KAAK,MAAM,aAAa,YAAY,aACnC,oBAAoB,WAAW,mBAAmB;AAEpD;;;;;;;;AASA,SAAgB,oBACf,aACA,OACO;CACP,yBAAyB,WAAW;CACpC,MAAM,WAAW,YAAY,YAAY;CACzC,MAAM,SAAS,cAAc,UAAU,YAAY,MAAM,CAAC;CAC1D,IAAI,aAAa,KAAA,GAAW;EAC3B,IAAI,OAAO,WAAW,CAAC,mBAAmB,OAAO,KAAK,GACrD,MAAM,IAAI,cAAc,SAAS,oCAAoC;GACpE,QAAQ,YAAY;GACpB,GAAI,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;EACjD,CAAC;EAEF;CACD;CACA,IACC,CAAC,OAAO,WACR,CAAC,OAAO,MAAM,YAAY,KAC1B,OAAO,MAAM,eAAe,KAC5B,OAAO,MAAM,QAAQ,SAAS,UAC9B,OAAO,MAAM,QAAQ,SAAS,OAE9B,MAAM,IAAI,cAAc,SAAS,oCAAoC;EACpE,QAAQ,YAAY;EACpB,GAAI,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;CACjD,CAAC;AAEH;;;;;;;AAQA,SAAgB,wBAAwB,aAAqC;CAC5E,IAAI,EAAE,uBAAuB,mBAC5B,MAAM,IAAI,cAAc,SAAS,uCAAuC;CAEzE,yBAAyB,WAAW;CACpC,MAAM,YAAY,cAAc,OAAO,YAAY,MAAM,EAAE,WAAW,KAAK,CAAC,CAAC;CAC7E,IAAI,CAAC,UAAU,SACd,MAAM,IAAI,cAAc,SAAS,uCAAuC;EACvE,QAAQ,YAAY;EACpB,MAAM,YAAY;EAClB,OAAO,UAAU;CAClB,CAAC;CAEF,KAAK,MAAM,UAAU,CAAC,GAAG,YAAY,OAAO,CAAC,CAAC,QAAQ,GAAG;EACxD,MAAM,UAAU,cAAc;GAC7B,MAAM,SAAS,UAAU,OAAO,IAAI;GACpC,IACC,CAAC,OAAO,YAAY,KACpB,OAAO,eAAe,KACtB,OAAO,QAAQ,OAAO,UACtB,OAAO,QAAQ,OAAO,OAEtB,MAAM,IAAI,MAAM,uCAAuC,OAAO,MAAM;GAErE,UAAU,OAAO,IAAI;EACtB,CAAC;EACD,IAAI,CAAC,QAAQ,WAAW,CAAC,mBAAmB,QAAQ,KAAK,GACxD,MAAM,IAAI,cAAc,SAAS,8CAA8C;GAC9E,QAAQ,YAAY;GACpB,MAAM,YAAY;GAClB,QAAQ,OAAO;GACf,OAAO,QAAQ;EAChB,CAAC;CAEH;AACD;;;;;;;;;AAUA,SAAgB,uBACf,aACA,OACO;CACP,IAAI,EAAE,uBAAuB,mBAC5B,MAAM,IAAI,cAAc,SAAS,uCAAuC;CAEzE,MAAM,YAAY,mBAAmB,OAAO,oBAAoB;CAChE,MAAM,WAAW,cAAc,KAAA,IAAY,KAAA,IAAY,iBAAiB,SAAS;CACjF,IACC,cAAc,KAAA,KACd,aAAa,KAAA,KACb,UAAU,WAAW,YAAY,aAAa,UAC9C,UAAU,MACR,SAAS,CAAC,YAAY,aAAa,MAAM,gBAAgB,YAAY,SAAS,IAAI,CACpF,KACA,YAAY,aAAa,MACvB,gBAAgB,CAAC,UAAU,MAAM,SAAS,SAAS,YAAY,IAAI,CACrE,GACC;EACD,wBAAwB,WAAW;EACnC,MAAM,IAAI,cACT,SACA,cAAc,KAAA,KAAa,aAAa,KAAA,IACrC,0DACA,cAAc,KAAA,IACb,wCAAwC,WAAW,GAAG,SAAS,WAAW,GAAG,KAC7E,yCACJ;GACC,OAAO,YAAY,aAAa,CAAC;GACjC,WAAW;EACZ,CACD;CACD;CACA,MAAM,YAAY,cAAc;EAC/B,oBAAoB,aAAa,KAAA,CAAS;EAC1C,yBAAyB,WAAW;EACpC,KAAK,MAAM,QAAQ,WAAW;GAC7B,IAAI,CAAC,eAAe,IAAI,GACvB,MAAM,IAAI,cAAc,SAAS,+BAA+B,QAAQ,EAAE,KAAK,CAAC;GAEjF,MAAM,cAAc,YAAY,aAAa,MAAM,cAAc,UAAU,SAAS,IAAI;GACxF,IAAI,gBAAgB,KAAA,GACnB,MAAM,IAAI,cAAc,SAAS,sCAAsC,QAAQ,EAAE,KAAK,CAAC;GAExF,MAAM,SAAS,oBAAoB,YAAY,OAAO,MAAM,SAAS,SAAS;GAC9E,MAAM,eAAe,cAAc,UAAU,MAAM,CAAC;GACpD,IACC,CAAC,aAAa,WACd,aAAa,MAAM,eAAe,KAClC,CAAC,aAAa,MAAM,OAAO,KAC3B,aAAa,MAAM,UAAU,GAE7B,MAAM,IAAI,cAAc,SAAS,uCAAuC,QAAQ;IAC/E;IACA,OAAO,aAAa,UAAU,KAAA,IAAY,aAAa;GACxD,CAAC;GAEF,MAAM,cAAc,oBAAoB,YAAY,QAAQ,MAAM,SAAS,QAAQ;GACnF,MAAM,UAAU,cAAc,UAAU,WAAW,CAAC;GACpD,IAAI,YAAY,UAAU,UAAU;IACnC,IAAI,QAAQ,WAAW,CAAC,mBAAmB,QAAQ,KAAK,GACvD,MAAM,IAAI,cAAc,SAAS,sCAAsC,QAAQ;KAC9E;KACA,OAAO,QAAQ,UAAU,KAAA,IAAY,QAAQ;IAC9C,CAAC;IAEF;GACD;GACA,IAAI,CAAC,QAAQ,SACZ,MAAM,IAAI,cAAc,SAAS,sCAAsC,QAAQ;IAC9E;IACA,OAAO,QAAQ;GAChB,CAAC;GAEF,MAAM,QAAQ,QAAQ,MAAM,YAAY,IAAI,cAAc;GAC1D,MAAM,UAAU,UAAU,SAAS,cAAc,WAAW,WAAW,CAAC,IAAI,KAAA;GAC5E,IACC,QAAQ,MAAM,eAAe,KAC5B,QAAQ,MAAM,OAAO,KAAK,QAAQ,MAAM,UAAU,KACnD,QAAQ,MAAM,YAAY,MAAM,aAAa,MAAM,YAAY,KAC/D,QAAQ,MAAM,YAAY,KAC1B,UAAU,YAAY,SACtB,QAAQ,MAAM,QAAQ,YAAY,UAClC,QAAQ,MAAM,QAAQ,YAAY,SAClC,QAAQ,MAAM,YAAY,YAAY,YACtC,QAAQ,MAAM,SAAS,YAAY,QAClC,YAAY,KAAA,MAAc,CAAC,QAAQ,WAAW,QAAQ,UAAU,YAAY,SAE7E,MAAM,IAAI,cAAc,SAAS,sCAAsC,QAAQ;IAC9E;IACA,GAAI,SAAS,YAAY,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;GAC9D,CAAC;EAEH;CACD,CAAC;CACD,IAAI,CAAC,UAAU,SAAS;EACvB,MAAM,UAAU,cAAc,wBAAwB,WAAW,CAAC;EAClE,MAAM,IAAI,cAAc,SAAS,sCAAsC;GACtE,QAAQ,YAAY;GACpB,OAAO,UAAU;GACjB,WAAW;GACX,GAAI,QAAQ,UAAU,CAAC,IAAI,EAAE,SAAS,QAAQ,MAAM;EACrD,CAAC;CACF;CACA,MAAM,YAAsB,CAAC;CAC7B,MAAM,WAA+B,CAAC;CACtC,MAAM,iBAAgC,CAAC;CACvC,IAAI;CACJ,MAAM,YAAY,cAAc;EAC/B,KAAK,MAAM,QAAQ,WAAW;GAC7B,oBAAoB,aAAa,WAAW;GAC5C,yBAAyB,WAAW;GACpC,IAAI,CAAC,eAAe,IAAI,GACvB,MAAM,IAAI,cAAc,SAAS,+BAA+B,QAAQ,EAAE,KAAK,CAAC;GAEjF,MAAM,SAAS,oBAAoB,YAAY,OAAO,MAAM,SAAS,SAAS;GAC9E,MAAM,eAAe,cAAc,UAAU,MAAM,CAAC;GACpD,IACC,CAAC,aAAa,WACd,aAAa,MAAM,eAAe,KAClC,CAAC,aAAa,MAAM,OAAO,KAC3B,aAAa,MAAM,UAAU,GAE7B,MAAM,IAAI,cAAc,SAAS,uCAAuC,QAAQ;IAC/E;IACA,OAAO,aAAa,UAAU,KAAA,IAAY,aAAa;GACxD,CAAC;GAEF,MAAM,cAAc,oBAAoB,YAAY,QAAQ,MAAM,SAAS,QAAQ;GACnF,MAAM,SAAS,oBAAoB,YAAY,QAAQ,MAAM,SAAS,QAAQ;GAC9E,MAAM,cAAc,YAAY,aAAa,MAAM,cAAc,UAAU,SAAS,IAAI;GACxF,IAAI,gBAAgB,KAAA,GACnB,MAAM,IAAI,cAAc,SAAS,sCAAsC,QAAQ,EAAE,KAAK,CAAC;GAExF,MAAM,UAAU,cAAc,UAAU,WAAW,CAAC;GACpD,IAAI,YAAY,UAAU,UACrB;QAAA,QAAQ,WAAW,CAAC,mBAAmB,QAAQ,KAAK,GACvD,MAAM,IAAI,cAAc,SAAS,sCAAsC,QAAQ;KAC9E;KACA,OAAO,QAAQ,UAAU,KAAA,IAAY,QAAQ;IAC9C,CAAC;GAAA,OAEI,IAAI,QAAQ,SAAS;IAC3B,MAAM,QAAQ,QAAQ,MAAM,YAAY,IAAI,cAAc;IAC1D,MAAM,UAAU,UAAU,SAAS,cAAc,WAAW,WAAW,CAAC,IAAI,KAAA;IAC5E,IACC,QAAQ,MAAM,eAAe,KAC5B,QAAQ,MAAM,OAAO,KAAK,QAAQ,MAAM,UAAU,KACnD,QAAQ,MAAM,YAAY,MAAM,aAAa,MAAM,YAAY,KAC/D,QAAQ,MAAM,YAAY,KAC1B,UAAU,YAAY,SACtB,QAAQ,MAAM,QAAQ,YAAY,UAClC,QAAQ,MAAM,QAAQ,YAAY,SAClC,QAAQ,MAAM,YAAY,YAAY,YACtC,QAAQ,MAAM,SAAS,YAAY,QAClC,YAAY,KAAA,MAAc,CAAC,QAAQ,WAAW,QAAQ,UAAU,YAAY,SAE7E,MAAM,IAAI,cAAc,SAAS,sCAAsC,QAAQ;KAC9E;KACA,GAAI,SAAS,YAAY,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;IAC9D,CAAC;IAEF,UAAU,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;IAC9C,WAAW,aAAa,MAAM;IAC9B,UAAU,KAAK,IAAI;IACnB,MAAM,iBAAiB,UAAU,MAAM;IACvC,MAAM,kBAAkB,WAAW,MAAM;IACzC,IACC,CAAC,eAAe,OAAO,KACvB,eAAe,eAAe,KAC9B,eAAe,UAAU,KACzB,eAAe,QAAQ,YAAY,UACnC,eAAe,QAAQ,YAAY,SACnC,eAAe,YAAY,YAAY,YACvC,eAAe,SAAS,YAAY,QACpC,oBAAoB,YAAY,QAEhC,MAAM,IAAI,cACT,SACA,0DAA0D,QAC1D,EAAE,KAAK,CACR;GAEF,OACC,MAAM,IAAI,cAAc,SAAS,sCAAsC,QAAQ;IAC9E;IACA,OAAO,QAAQ;GAChB,CAAC;GAEF,MAAM,iBAA2B,CAAC;GAClC,IAAI,SAAS,QAAQ,WAAW;GAChC,OAAO,WAAW,QAAQ,YAAY,MAAM,GAAG;IAC9C,MAAM,SAAS,cAAc,UAAU,MAAM,CAAC;IAC9C,IAAI,OAAO,SAAS;KACnB,IACC,YAAY,aAAa,KAAA,KACzB,gBAAgB,KAAA,KAChB,WAAW,YAAY,QAEvB,MAAM,IAAI,cAAc,SAAS,oCAAoC,EACpE,QAAQ,YAAY,OACrB,CAAC;KAEF;IACD;IACA,IAAI,CAAC,mBAAmB,OAAO,KAAK,GAAG,MAAM,OAAO;IACpD,eAAe,KAAK,MAAM;IAC1B,SAAS,QAAQ,MAAM;GACxB;GACA,KAAK,MAAM,iBAAiB,CAAC,GAAG,cAAc,CAAC,CAAC,QAAQ,GAAG;IAC1D,UAAU,aAAa;IACvB,MAAM,SAAS,UAAU,aAAa;IACtC,IAAI,CAAC,OAAO,YAAY,KAAK,OAAO,eAAe,GAClD,MAAM,IAAI,cAAc,SAAS,uCAAuC,iBAAiB;KACxF,QAAQ,YAAY;KACpB,QAAQ;IACT,CAAC;IAEF,IAAI,CAAC,eAAe,MAAM,cAAc,UAAU,SAAS,aAAa,GAAG;KAC1E,MAAM,WAAW,OAAO,OAAO;MAC9B,MAAM;MACN,QAAQ,OAAO;MACf,OAAO,OAAO;KACf,CAAC;KACD,eAAe,KAAK,QAAQ;KAC5B,IAAI,kBAAkB,YAAY,QAAQ,cAAc;IACzD;GACD;GACA,IAAI,YAAY,aAAa,KAAA,KAAa,gBAAgB,KAAA,GACzD,MAAM,IAAI,cAAc,SAAS,mDAAmD,EACnF,QAAQ,YAAY,OACrB,CAAC;GAEF,SAAS,QAAQ,WAAW;GAC5B,MAAM,eAAe,UAAU,WAAW;GAC1C,MAAM,kBAAkB,UAAU,MAAM;GACxC,IACC,CAAC,aAAa,OAAO,KACrB,aAAa,eAAe,KAC5B,aAAa,QAAQ,aAAa,MAAM,OACxC,aAAa,QAAQ,aAAa,MAAM,OACxC,gBAAgB,QAAQ,aAAa,OACrC,gBAAgB,QAAQ,aAAa,KAErC,MAAM,IAAI,cAAc,SAAS,+BAA+B,QAAQ,EAAE,KAAK,CAAC;GAEjF,MAAM,WAAW,cAAc,OAAO,MAAM,CAAC;GAC7C,IAAI,CAAC,SAAS,SAAS;IACtB,MAAM,UAAU,cAAc;KAC7B,MAAM,oBAAoB,UAAU,WAAW;KAC/C,IACC,kBAAkB,QAAQ,aAAa,OACvC,kBAAkB,QAAQ,aAAa,KAEvC,MAAM,IAAI,MAAM,4BAA4B,MAAM;KAEnD,OAAO,WAAW;IACnB,CAAC;IACD,MAAM,IAAI,cAAc,SAAS,oCAAoC,QAAQ;KAC5E;KACA,OAAO,SAAS;KAChB,SAAS,QAAQ,UAAU,KAAA,IAAY,QAAQ;IAChD,CAAC;GACF;GACA,MAAM,iBAAiB,UAAU,WAAW;GAC5C,SAAS,KACR,OAAO,OAAO;IACb;IACA,OAAO;IACP,QAAQ,eAAe;IACvB,OAAO,eAAe;IACtB,UAAU,eAAe;IACzB,MAAM,eAAe;IACrB,QAAQ,WAAW,WAAW;GAC/B,CAAC,CACF;EACD;CACD,CAAC;CACD,IAAI,CAAC,UAAU,SAAS;EACvB,MAAM,iBAA4B,CAAC;EACnC,IAAI,kBAAkB;EACtB,KAAK,MAAM,aAAa,CAAC,GAAG,QAAQ,CAAC,CAAC,QAAQ,GAAG;GAChD,MAAM,UAAU,cAAc;IAC7B,oBAAoB,aAAa,WAAW;IAC5C,MAAM,cAAc,oBACnB,YAAY,QACZ,UAAU,MACV,SACA,QACD;IACA,MAAM,SAAS,UAAU,WAAW;IACpC,MAAM,QAAQ,OAAO,YAAY,IAAI,cAAc;IACnD,MAAM,SAAS,UAAU,SAAS,cAAc,WAAW,WAAW,CAAC,IAAI,KAAA;IAC3E,IACC,OAAO,eAAe,KACtB,UAAU,UAAU,SACpB,OAAO,QAAQ,UAAU,UACzB,OAAO,QAAQ,UAAU,SACxB,WAAW,KAAA,MACV,CAAC,OAAO,WACR,OAAO,YAAY,UAAU,YAC7B,OAAO,SAAS,UAAU,QAC1B,OAAO,UAAU,UAAU,SAE7B,MAAM,IAAI,cACT,SACA,+CAA+C,UAAU,QACzD;KACC,MAAM,UAAU;KAChB,GAAI,QAAQ,YAAY,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;IAC5D,CACD;IAED,IAAI,UAAU,aAAa;KAC1B,MAAM,WAAW,oBAChB,YAAY,OACZ,aAAa,UAAU,QACvB,SACA,UACD;KACA,UAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;KAChD,oBAAoB,aAAa,WAAW;KAC5C,WAAW,aAAa,QAAQ;KAChC,kBAAkB;IACnB,OACC,OAAO,WAAW;GAEpB,CAAC;GACD,IAAI,CAAC,QAAQ,SAAS,eAAe,KAAK,QAAQ,KAAK;EACxD;EACA,KAAK,MAAM,QAAQ,CAAC,GAAG,SAAS,CAAC,CAAC,QAAQ,GAAG;GAC5C,MAAM,WAAW,cAAc;IAC9B,oBAAoB,aAAa,WAAW;IAC5C,yBAAyB,WAAW;IACpC,MAAM,cAAc,oBAAoB,YAAY,QAAQ,MAAM,SAAS,QAAQ;IACnF,MAAM,SAAS,oBAAoB,YAAY,QAAQ,MAAM,SAAS,QAAQ;IAC9E,UAAU,QAAQ,WAAW,GAAG,EAAE,WAAW,KAAK,CAAC;IACnD,SAAS,QAAQ,WAAW;IAC5B,OAAO,MAAM;GACd,CAAC;GACD,IAAI,CAAC,SAAS,SAAS,eAAe,KAAK,SAAS,KAAK;EAC1D;EACA,KAAK,MAAM,UAAU,CAAC,GAAG,cAAc,CAAC,CAAC,QAAQ,GAAG;GACnD,MAAM,UAAU,cAAc;IAC7B,oBAAoB,aAAa,WAAW;IAC5C,yBAAyB,WAAW;IACpC,oBAAoB,QAAQ,gBAAgB;IAC5C,UAAU,OAAO,IAAI;GACtB,CAAC;GACD,IAAI,CAAC,QAAQ,WAAW,CAAC,mBAAmB,QAAQ,KAAK,GAAG,eAAe,KAAK,QAAQ,KAAK;EAC9F;EACA,MAAM,UACL,eAAe,WAAW,KAAK,CAAC,kBAC7B,cAAc,wBAAwB,WAAW,CAAC,IAClD,KAAA;EACJ,MAAM,IAAI,cAAc,SAAS,0CAA0C;GAC1E,QAAQ,YAAY;GACpB,MAAM,YAAY;GAClB,OAAO,UAAU;GACjB,WAAW;GACX,UAAU;GACV,SAAS,kBAAkB,YAAY,OAAO,KAAA;GAC9C,SAAS,SAAS,YAAY,QAAQ,QAAQ,QAAQ,KAAA;EACvD,CAAC;CACF;CACA,yBAAyB,WAAW;CACpC,MAAM,UAAU,cAAc,OAAO,YAAY,MAAM,EAAE,WAAW,KAAK,CAAC,CAAC;CAC3E,IAAI,CAAC,QAAQ,SACZ,MAAM,IAAI,cAAc,SAAS,oDAAoD;EACpF,QAAQ,YAAY;EACpB,MAAM,YAAY;EAClB,OAAO,QAAQ;EACf,WAAW;CACZ,CAAC;AAEH;;;;;;;;;;AAWA,SAAgB,mBACf,QACA,QACwB;CACxB,MAAM,SAAS,cACd,OAAO,KAAK,UAAU;EACrB,MAAM,OAAO,MAAM;EACnB,MAAM,OAAO,MAAM;EACnB,MAAM,UAAU,MAAM;EACtB,MAAM,YAAY,MAAM;EACxB,MAAM,OAAO,MAAM;EACnB,MAAM,WAAW,MAAM;EACvB,OAAO;GACN;GACA;GACA;GACA;GACA,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;GACrC,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;EAC9C;CACD,CAAC,CACF;CACA,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,cAAc,SAAS,wCAAwC,EACxE,OAAO,OAAO,MACf,CAAC;CAEF,MAAM,SAAS,OAAO,MAAM,QAAQ,UAAU,MAAM,cAAc,QAAQ;CAC1E,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,SAAS,QAAQ;EAC3B,IAAI,CAAC,wBAAwB,KAAK,MAAM,IAAI,GAC3C,MAAM,IAAI,cAAc,SAAS,oCAAoC,MAAM,QAAQ,EAClF,MAAM,MAAM,KACb,CAAC;EAGF,MAAM,WAAW,cADH,iBAAiB,MAAM,IACN,EAAM;EACrC,IAAI,MAAM,SAAS,UAClB,MAAM,IAAI,cACT,SACA,eAAe,MAAM,KAAK,8BAA8B,MAAM,QAC9D;GAAE,MAAM,MAAM;GAAM;EAAS,CAC9B;EAED,MAAM,KAAK,MAAM,IAAI;CACtB;CACA,MAAM,WAAW,iBAAiB,KAAK;CACvC,IAAI,aAAa,KAAA,GAChB,MAAM,IAAI,cACT,SACA,wCAAwC,SAAS,GAAG,SAAS,SAAS,GAAG,IACzE,EAAE,OAAO,SAAS,CACnB;CAED,MAAM,iBAAiB,QAAQ,MAAM;CACrC,MAAM,eAAe,OAAO,KAAK,WAAW;EAC3C;EACA,aAAa,oBAAoB,QAAQ,MAAM,MAAM,SAAS,QAAQ;CACvE,EAAE;CACF,KAAK,MAAM,EAAE,OAAO,iBAAiB,cAAc;EAClD,IAAI,WAAW,WAAW,GAAG;GAC5B,MAAM,SAAS,cAAc,UAAU,WAAW,CAAC;GACnD,IACC,CAAC,OAAO,WACR,CAAC,OAAO,MAAM,OAAO,KACrB,OAAO,MAAM,eAAe,KAC5B,OAAO,MAAM,UAAU,GAEvB,MAAM,IAAI,cAAc,SAAS,sCAAsC,MAAM,QAAQ;IACpF,MAAM,MAAM;IACZ,GAAI,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;GACjD,CAAC;EAEH;EACA,IAAI,CAAC,YAAY,WAAW,iBAAiB,GAAG,GAC/C,MAAM,IAAI,cAAc,SAAS,4CAA4C,MAAM,QAAQ;GAC1F,MAAM,MAAM;GACZ;EACD,CAAC;CAEH;CACA,OAAO;AACR;;;;;;;;;AAUA,SAAgB,aAAa,aAA+B,OAAgC;CAC3F,MAAM,YAAY,mBAAmB,OAAO,oBAAoB;CAChE,IAAI,cAAc,KAAA,GACjB,MAAM,IAAI,cAAc,SAAS,0CAA0C,EAC1E,OAAO,qBACR,CAAC;CAEF,MAAM,SAAmB,CAAC;CAC1B,MAAM,SAAoB,CAAC;CAC3B,KAAK,MAAM,QAAQ,CAAC,GAAG,SAAS,CAAC,CAAC,QAAQ,GAAG;EAC5C,MAAM,WAAW,cAAc;GAC9B,oBAAoB,aAAa,KAAA,CAAS;GAC1C,MAAM,OAAO,oBAAoB,YAAY,QAAQ,MAAM,SAAS,YAAY;GAChF,MAAM,KAAK,oBAAoB,YAAY,QAAQ,MAAM,SAAS,QAAQ;GAC1E,MAAM,eAAe,UAAU,IAAI;GACnC,IAAI,CAAC,aAAa,OAAO,KAAK,aAAa,eAAe,KAAK,aAAa,UAAU,GACrF,MAAM,IAAI,cAAc,SAAS,+BAA+B,QAAQ,EAAE,KAAK,CAAC;GAEjF,UAAU,QAAQ,EAAE,GAAG,EAAE,WAAW,KAAK,CAAC;GAC1C,oBAAoB,aAAa,KAAA,CAAS;GAC1C,SAAS,MAAM,EAAE;GACjB,oBAAoB,aAAa,KAAA,CAAS;GAC1C,OAAO,IAAI;EACZ,CAAC;EACD,IAAI,CAAC,SAAS,SAAS;GACtB,OAAO,KAAK,IAAI;GAChB,OAAO,KAAK,SAAS,KAAK;EAC3B;CACD;CACA,IAAI,OAAO,SAAS,GACnB,MAAM,IAAI,cAAc,SAAS,uCAAuC;EACvE,QAAQ,YAAY;EACpB,QAAQ,YAAY;EACpB,OAAO;EACP;CACD,CAAC;AAEH;;;;;;;;;AAUA,SAAgB,iBAAiB,SAAiB,QAAgB,QAAsB;CACvF,MAAM,kBAAkB,QAAQ,OAAO;CACvC,MAAM,iBAAiB,QAAQ,MAAM;CACrC,MAAM,iBAAiB,QAAQ,MAAM;CACrC,MAAM,SAAS,QAAQ,cAAc;CACrC,MAAM,QAAQ;EAAC;EAAiB;EAAgB;CAAc;CAC9D,IAAI,QAAQ,eAAe,MAAM,UAAU,QAAQ,cAAc,MAAM,QACtE,MAAM,IAAI,cAAc,SAAS,qDAAqD;EACrF,SAAS;EACT,QAAQ;EACR,QAAQ;EACR,WAAW;CACZ,CAAC;CAEF,IAAI,IAAI,IAAI,MAAM,KAAK,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,QACnE,MAAM,IAAI,cAAc,SAAS,gDAAgD;EAChF,SAAS;EACT,QAAQ;EACR,QAAQ;EACR,WAAW;CACZ,CAAC;CAEF,MAAM,eAAe,cAAc,UAAU,MAAM,CAAC;CACpD,IACC,CAAC,aAAa,WACd,CAAC,aAAa,MAAM,YAAY,KAChC,aAAa,MAAM,eAAe,GAElC,MAAM,IAAI,cAAc,SAAS,yDAAyD;EACzF,SAAS;EACT,QAAQ;EACR,QAAQ;EACR,WAAW;EACX,GAAI,aAAa,UAAU,CAAC,IAAI,EAAE,OAAO,aAAa,MAAM;CAC7D,CAAC;CAEF,MAAM,eAA4B,OAAO,OAAO;EAC/C,MAAM;EACN,QAAQ,aAAa,MAAM;EAC3B,OAAO,aAAa,MAAM;CAC3B,CAAC;CACD,MAAM,WAAW,cAAc,UAAU,cAAc,CAAC;CACxD,IAAI,SAAS,SACZ,MAAM,IAAI,cAAc,SAAS,+CAA+C;EAC/E,SAAS;EACT,QAAQ;EACR,QAAQ;EACR,WAAW;CACZ,CAAC;CAEF,IAAI,CAAC,mBAAmB,SAAS,KAAK,GACrC,MAAM,IAAI,cAAc,SAAS,kDAAkD;EAClF,SAAS;EACT,QAAQ;EACR,QAAQ;EACR,WAAW;EACX,OAAO,SAAS;CACjB,CAAC;CAEF,MAAM,SAAS,cAAc,UAAU,eAAe,CAAC;CACvD,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,YAAY,KAAK,OAAO,MAAM,eAAe,GACjF,MAAM,IAAI,cAAc,SAAS,0DAA0D;EAC1F,SAAS;EACT,QAAQ;EACR,QAAQ;EACR,WAAW;EACX,OAAO,OAAO,UAAU,KAAA,IAAY,OAAO;CAC5C,CAAC;CAEF,MAAM,gBAA6B,OAAO,OAAO;EAChD,MAAM;EACN,QAAQ,OAAO,MAAM;EACrB,OAAO,OAAO,MAAM;CACrB,CAAC;CACD,MAAM,UAAU,cAAc,UAAU,cAAc,CAAC;CACvD,IAAI,CAAC,QAAQ,WAAW,CAAC,mBAAmB,QAAQ,KAAK,GACxD,MAAM,IAAI,cAAc,SAAS,kDAAkD;EAClF,SAAS;EACT,QAAQ;EACR,QAAQ;EACR,WAAW;EACX,OAAO,QAAQ;CAChB,CAAC;CAEF,IAAI,QAAQ,YAAY,CAAC,QAAQ,MAAM,YAAY,KAAK,QAAQ,MAAM,eAAe,IACpF,MAAM,IAAI,cAAc,SAAS,yDAAyD;EACzF,SAAS;EACT,QAAQ;EACR,QAAQ;EACR,WAAW;CACZ,CAAC;CAEF,MAAM,WAAW,QAAQ;CACzB,MAAM,eAAwC,QAAQ,UACnD,OAAO,OAAO;EACd,MAAM;EACN,QAAQ,QAAQ,MAAM;EACtB,OAAO,QAAQ,MAAM;CACtB,CAAC,IACA,KAAA;CACH,IAAI,YAAY;CAChB,IAAI,WAAW;CACf,MAAM,cAAc,cAAc;EACjC,oBAAoB,cAAc,8BAA8B;EAChE,oBAAoB,eAAe,+BAA+B;EAClE,IAAI,UAAU;GACb,IAAI,iBAAiB,KAAA,GACpB,MAAM,IAAI,MAAM,kDAAkD;GAEnE,oBAAoB,cAAc,8BAA8B;GAChE,WAAW,gBAAgB,cAAc;GACzC,YAAY;GACZ,oBAAoB,cAAc,8BAA8B;GAChE,oBACC,OAAO,OAAO;IAAE,GAAG;IAAc,MAAM;GAAe,CAAC,GACvD,8BACD;GACA,MAAM,UAAU,cAAc,UAAU,cAAc,CAAC;GACvD,IAAI,QAAQ,WAAW,CAAC,mBAAmB,QAAQ,KAAK,GACvD,MAAM,IAAI,MAAM,8CAA8C;EAEhE;EACA,oBAAoB,cAAc,8BAA8B;EAChE,oBAAoB,eAAe,+BAA+B;EAClE,WAAW,iBAAiB,cAAc;EAC1C,WAAW;EACX,oBAAoB,cAAc,8BAA8B;EAChE,oBACC,OAAO,OAAO;GAAE,GAAG;GAAe,MAAM;EAAe,CAAC,GACxD,8BACD;EACA,IAAI,UAAU;GACb,IAAI,iBAAiB,KAAA,GACpB,MAAM,IAAI,MAAM,kDAAkD;GAEnE,oBACC,OAAO,OAAO;IAAE,GAAG;IAAc,MAAM;GAAe,CAAC,GACvD,8BACD;GACA,OAAO,gBAAgB;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;GACvD,YAAY;EACb;EACA,oBAAoB,cAAc,8BAA8B;EAChE,oBACC,OAAO,OAAO;GAAE,GAAG;GAAe,MAAM;EAAe,CAAC,GACxD,8BACD;CACD,CAAC;CACD,IAAI,YAAY,SAAS;CACzB,MAAM,WACL,YAAY,aAAa,CAAC,WACvB,cAAc;EACd,IAAI,iBAAiB,KAAA,GACpB,MAAM,IAAI,MAAM,kDAAkD;EAEnE,oBAAoB,cAAc,8BAA8B;EAChE,oBACC,OAAO,OAAO;GAAE,GAAG;GAAc,MAAM;EAAe,CAAC,GACvD,8BACD;EACA,MAAM,cAAc,cAAc,UAAU,cAAc,CAAC;EAC3D,IAAI,YAAY,WAAW,CAAC,mBAAmB,YAAY,KAAK,GAC/D,MAAM,IAAI,MAAM,4CAA4C;EAE7D,WAAW,gBAAgB,cAAc;EACzC,oBAAoB,cAAc,8BAA8B;EAChE,YAAY;CACb,CAAC,IACA,KAAA;CACJ,MAAM,IAAI,cAAc,SAAS,gCAAgC;EAChE,SAAS;EACT,QAAQ;EACR,QAAQ,YAAY,iBAAiB,KAAA;EACrC,WAAW;EACX,OAAO,YAAY;EACnB,SAAS,UAAU,YAAY,QAAQ,SAAS,QAAQ,KAAA;CACzD,CAAC;AACF;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,uBAAuB,OAAwD;CAC9F,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO,CAAC;CAC9B,MAAM,WAAW,cAAc;EAC9B,MAAM,UAA8B,CAAC;EACrC,KAAK,MAAM,CAAC,MAAM,eAAe,OAAO,QAAQ,OAAO,0BAA0B,KAAK,CAAC,GAAG;GACzF,IAAI,CAAC,QAAQ,IAAI,YAAY,OAAO,GAAG,OAAO,CAAC;GAC/C,IAAI,OAAO,WAAW,UAAU,YAAY,wBAAwB,KAAK,IAAI,GAC5E,QAAQ,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC;EAEvC;EACA,OAAO;CACR,CAAC;CACD,OAAO,SAAS,UAAU,SAAS,QAAQ,CAAC;AAC7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+CA,SAAgB,gBAAgB,QAA2B;CAC1D,MAAM,OAAO,aAAa,MAAM;CAChC,MAAM,SAAS,UAAU,IAAI;CAC7B,IAAI,CAAC,SAAS,MAAM,GACnB,MAAM,IAAI,cAAc,UAAU,eAAe,OAAO,8BAA8B,EACrF,OACD,CAAC;CAEF,MAAM,MAAM,aAAa,QAAQ,gBAChC,gBAAgB,KAAK,QAAQ,OAAO,WAAW,CAAC,CACjD;CACA,MAAM,MAAM,aAAa,QAAQ,gBAChC,gBAAgB,KAAK,QAAQ,OAAO,WAAW,CAAC,CACjD;CACA,IAAI,IAAI,WAAW,KAAK,IAAI,WAAW,GACtC,MAAM,IAAI,cACT,UACA,8DAA8D,UAC9D,EAAE,OAAO,CACV;CAED,MAAM,UAAU,aAAa,QAAQ,MAAM;CAC3C,IAAI,OAAO,YAAY,UACtB,MAAM,IAAI,cAAc,UAAU,kCAAkC;EACnE;EACA,MAAM;CACP,CAAC;CAEF,MAAM,cAAc,QAAQ,WAAW,aAAa,IACjD,QAAQ,MAAM,EAAoB,IAClC,KAAA;CACH,MAAM,aAAa,gBAAgB,WAAW;CAC9C,MAAM,iBACL,IAAI,WAAW,KAAK,aAAa,QAAQ,SAAS,MAAM,QAAQ,gBAAgB,OAAO;CACxF,IAAI,CAAC,cAAc,CAAC,gBACnB,MAAM,IAAI,cACT,UACA,kBAAkB,OAAO,OAAO,EAAE,+DAClC;EAAE;EAAQ,MAAM;CAAQ,CACzB;CAED,MAAM,OAAO,aAAa,cAAc;CAExC,MAAM,iBAAiB,aAAa,QAAQ,aAAa;CACzD,MAAM,cAAc,OAAO,mBAAmB,WAAW,iBAAiB,KAAA;CAC1E,MAAM,cAAc,aAAa,QAAQ,UAAU;CACnD,MAAM,WACL,MAAM,QAAQ,WAAW,KAAK,YAAY,OAAO,SAAS,OAAO,SAAS,QAAQ,IAC/E,cACA,CAAC;CACL,MAAM,aAAa,aAAa,QAAQ,SAAS;CACjD,MAAM,UAAU,OAAO,eAAe,WAAW,aAAa;CAC9D,MAAM,aAAa,aAAa,QAAQ,SAAS;CACjD,MAAM,UAAU,aAAa,YAAY,MAAM;CAC/C,MAAM,UAAU,OAAO,YAAY,WAAW,UAAU;CAKxD,MAAM,MAAM,gBAAgB,KAAK,QAAQ,OAAO,KAAK,CAAC;CACtD,MAAM,cAAc,gBAAgB,KAAK,QAAQ,SAAS,aAAa,CAAC;CACxE,MAAM,cAAc,KAAK,QAAQ,SAAS,SAAS;CACnD,MAAM,WAAqB,CAAC;CAC5B,IAAI,WAAW,WAAW,GAAG;EAC5B,IAAI,CAAC,gBAAgB,WAAW,GAC/B,MAAM,IAAI,cACT,WACA,mBAAmB,YAAY,gCAC/B;GACC;GACA,MAAM;EACP,CACD;EAED,MAAM,iBAAiB,YAAY,aAAa,EAAE,eAAe,KAAK,CAAC;EACvE,MAAM,OAAO,eACX,QAAQ,UAAU,MAAM,KAAK,SAAS,UAAU,KAAK,CAAC,MAAM,YAAY,CAAC,CAAC,CAC1E,KAAK,UAAU,MAAM,IAAI,CAAC,CAC1B,KAAK;EACP,IAAI,KAAK,SAAS,GACjB,MAAM,IAAI,cACT,WACA,8CAA8C,KAAK,KAAK,IAAI,EAAE,gCAC9D;GAAE;GAAQ,OAAO,KAAK,KAAK,SAAS,iBAAiB,MAAM;EAAE,CAC9D;EAED,KAAK,MAAM,SAAS,gBAAgB;GACnC,MAAM,SAAS,KAAK,aAAa,MAAM,IAAI;GAC3C,IAAI,CAAC,gBAAgB,MAAM,GAAG;GAC9B,IAAI,CAAC,gBAAgB,MAAM,IAAI,GAC9B,MAAM,IAAI,cACT,WACA,6BAA6B,MAAM,KAAK,sCACxC;IAAE;IAAQ,MAAM,iBAAiB,MAAM;GAAO,CAC/C;GAGD,IADc,UAAU,MAAM,CAAC,CAAC,QAAQ,SAAS,KAAK,SAAS,UAAU,CACrE,CAAA,CAAM,WAAW,GACpB,MAAM,IAAI,cACT,WACA,mBAAmB,MAAM,KAAK,wCAAwC,MAAM,KAAK,wCACjF;IAAE;IAAQ,SAAS,MAAM;GAAK,CAC/B;GAED,MAAM,QAAQ,iBAAiB,MAAM,KAAK;GAC1C,IAAI,CAAC,WAAW,KAAK,QAAQ,KAAK,CAAC,GAClC,MAAM,IAAI,cACT,WACA,mBAAmB,MAAM,KAAK,eAAe,MAAM,wFACnD;IAAE;IAAQ,SAAS,MAAM;IAAM,SAAS;GAAM,CAC/C;GAED,SAAS,KAAK,MAAM,IAAI;EACzB;EACA,SAAS,KAAK;CACf;CACA,MAAM,eAAe,KAAK,QAAQ,QAAQ,oBAAoB,CAAC;CAC/D,MAAM,kBAAkB,cAAc,YAAY,YAAY,CAAC;CAC/D,MAAM,WACL,gBAAgB,WAChB,gBAAgB,MAAM,SAAS,SAAS,oBAAoB,CAAC,KAC7D,WAAW,KAAK,QAAQ,oBAAoB,CAAC;CAC9C,MAAM,QAAQ,KAAK,QAAQ,QAAQ,iBAAiB,CAAC;CACrD,MAAM,UAAU,cAAc,YAAY,KAAK,CAAC;CAChD,MAAM,SACL,QAAQ,WACR,QAAQ,MAAM,SAAS,SAAS,iBAAiB,CAAC,KAClD,WAAW,KAAK,QAAQ,iBAAiB,CAAC;CAC3C,MAAM,kBAAkB,aAAa,QAAQ,cAAc;CAC3D,MAAM,sBAAsB,aAAa,QAAQ,kBAAkB;CACnE,MAAM,eAA6B,uBAAuB,eAAe,CAAC,CAAC,KACzE,CAAC,SAAS,YAAY;EAAE,MAAM;EAAS;CAAM,EAC/C;CAEA,MAAM,eAAe,aAAa,QAAQ,sBAAsB;CAChE,MAAM,YAAY,SAAS,YAAY,IAAI,eAAe,KAAA;CAC1D,MAAM,QAAsB,uBAAuB,mBAAmB,CAAC,CAAC,KACtE,CAAC,SAAS,WAAW;EACrB,MAAM,OAAO,aAAa,WAAW,OAAO;EAC5C,OAAO,SAAS,IAAI,KAAK,aAAa,MAAM,UAAU,MAAM,OACzD;GAAE,MAAM;GAAS;GAAO,UAAU;EAAK,IACvC;GAAE,MAAM;GAAS;EAAM;CAC3B,CACD;CAOA,MAAM,yCAAyB,IAAI,IAAI,CACtC,GAAG,uBAAuB,mBAAmB,CAAC,CAAC,KAAK,CAAC,aAAa,OAAO,GACzE,GAAG,uBAAuB,eAAe,CAAC,CAAC,KAAK,CAAC,aAAa,OAAO,CACtE,CAAC;CACD,MAAM,2BAA2B,IAAI,IACpC,OAAO,KACN,mBACC,UAAU,MAAM;EACf;EACA;EACA;EACA;EACA,QAAQ,CAAC;EACT;EACA;EACA;EACA;EACA;CACD,CAAC,CACF,CACD,CACD;CAOA,MAAM,qBAAqB,aAAa,QAAQ,iBAAiB;CACjE,MAAM,kBAAkB,SAAS,kBAAkB,IAAI,qBAAqB,CAAC;CAC7E,MAAM,SAAuB,OAAO,QAAQ,eAAe,CAAC,CAC1D,QAAQ,UAAqC,OAAO,MAAM,OAAO,QAAQ,CAAC,CAC1E,QACC,CAAC,aAAa,CAAC,yBAAyB,IAAI,OAAO,KAAK,CAAC,uBAAuB,IAAI,OAAO,CAC7F,CAAC,CACA,KAAK,CAAC,SAAS,YAAY;EAAE,MAAM;EAAS;CAAM,EAAE;CACtD,OAAO,UAAU,MAAM;EACtB,GAAI,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY;EACnD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,CAAC;EACZ;EACA;EACA;EACA;EACA;CACD,CAAC;AACF;;;;;;;;;;;;;;;AAgBA,SAAgB,SAAS,QAAyB;CACjD,IAAI,CAAC,iBAAiB,MAAM,GAAG,OAAO;CACtC,MAAM,SAAS,cAAc,UAAU,MAAM,CAAC;CAC9C,IAAI,CAAC,OAAO,SAAS,OAAO,mBAAmB,OAAO,KAAK;CAC3D,IAAI,CAAC,OAAO,MAAM,YAAY,KAAK,OAAO,MAAM,eAAe,GAAG,OAAO;CACzE,MAAM,SAAS,YAAY,MAAM;CACjC,IAAI;CACJ,IAAI,SAAS;CACb,IAAI;EACH,QAAQ,OAAO,SAAS,CAAC,EAAE;EAC3B,SAAS,UAAU,KAAA,IAAY,QAAQ,OAAO,SAAS,MAAM;CAC9D,UAAU;EACT,OAAO,UAAU;CAClB;CACA,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,IAAI,UAAU,UAAU,QAAQ,OAAO;CACvC,MAAM,WAAW,UAAU,KAAK,QAAQ,MAAM,CAAC;CAC/C,OAAO,SAAS,YAAY,KAAK,CAAC,SAAS,eAAe;AAC3D;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,WAAW,QAAgB,OAAoC;CAC9E,IAAI,CAAC,iBAAiB,MAAM,GAC3B,MAAM,IAAI,cAAc,UAAU,kDAAkD,EAAE,OAAO,CAAC;CAE/F,MAAM,YAAY,mBAAmB,OAAO,oBAAoB;CAChE,IAAI,cAAc,KAAA,GACjB,MAAM,IAAI,cAAc,UAAU,uCAAuC;EACxE;EACA,OAAO;CACR,CAAC;CAEF,IAAI,YAAY;CAChB,MAAM,UAAyC,CAAC;CAChD,KAAK,MAAM,QAAQ,WAAW;EAC7B,MAAM,OAAO,oBAAoB,QAAQ,MAAM,UAAU,QAAQ;EACjE,IAAI,CAAC,WAAW,IAAI,GAAG;EACvB,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;EAC5C,IACC,CAAC,OAAO,WACR,OAAO,MAAM,eAAe,KAC3B,CAAC,OAAO,MAAM,YAAY,MACzB,CAAC,OAAO,MAAM,OAAO,KAAK,OAAO,MAAM,UAAU,KAAK,OAAO,MAAM,OAAO,YAE5E,MAAM,IAAI,cAAc,UAAU,iCAAiC,QAAQ;GAC1E;GACA;GACA,OAAO;GACP,GAAI,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;EACjD,CAAC;EAEF,IAAI,OAAO,MAAM,YAAY,GAAG;GAC/B,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;GACvB;EACD;EACA,MAAM,MAAM,YACX,QACA,MACA,UACA,UACA,KAAK,IAAI,oBAAoB,SAAS,CACvC;EACA,aAAa,IAAI,SAAS;EAC1B,QAAQ,KAAK,CAAC,MAAM,GAAG,CAAC;CACzB;CACA,OAAO,OAAO,YAAY,OAAO;AAClC;;;;;;;;;;;;;;;;;AAkBA,SAAgB,aAAa,QAAwB;CACpD,IAAI,CAAC,iBAAiB,MAAM,GAC3B,MAAM,IAAI,cAAc,UAAU,sDAAsD,EACvF,OACD,CAAC;CAEF,MAAM,OAAO,KAAK,QAAQ,cAAc;CACxC,MAAM,SAAS,cACd,aAAa,QAAQ,gBAAgB,UAAU,UAAU,kBAAkB,CAC5E;CACA,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,cAAc,UAAU,8BAA8B,QAAQ;EACvE;EACA;EACA,OAAO,OAAO;CACf,CAAC;CAEF,OAAO,OAAO;AACf;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,iBAAiB,MAAwC;CACxE,IAAI,CAAC,iBAAiB,IAAI,GACzB,MAAM,IAAI,cAAc,UAAU,gDAAgD,EAAE,KAAK,CAAC;CAE3F,MAAM,OAAO,oBAAoB,MAAM,oBAAoB,UAAU,MAAM;CAC3E,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,OAAO,cACZ,aAAa,MAAM,oBAAoB,UAAU,QAAQ,kBAAkB,CAC5E;CACA,IAAI,CAAC,KAAK,SACT,MAAM,IAAI,cAAc,UAAU,mCAAmC,QAAQ;EAC5E;EACA;EACA,OAAO,KAAK;CACb,CAAC;CAEF,MAAM,WAAW,YAAY,KAAK,OAAO,cAAc;CACvD,IAAI,aAAa,KAAA,GAChB,MAAM,IAAI,cAAc,UAAU,oBAAoB,KAAK,gBAAgB;EAAE;EAAM;CAAK,CAAC;CAE1F,IAAI,SAAS,WAAW,mBAAmB,SAAS,SAAS,SAAS,KAAK,GAC1E,MAAM,IAAI,cAAc,UAAU,+BAA+B,KAAK,gBAAgB;EACrF;EACA;CACD,CAAC;CAEF,MAAM,sBAAsB,iBAAiB,SAAS,QAAQ,KAAK,UAAU,MAAM,WAAW,CAAC;CAC/F,IAAI,wBAAwB,KAAA,GAC3B,MAAM,IAAI,cACT,UACA,gDAAgD,oBAAoB,GAAG,SAAS,oBAAoB,GAAG,IACvG;EAAE;EAAM;EAAM,OAAO;EAAe,OAAO;CAAoB,CAChE;CAED,MAAM,kBAAkB,iBAAiB,CACxC,oBACA,GAAG,SAAS,QAAQ,KAAK,UAAU,MAAM,OAAO,CACjD,CAAC;CACD,IAAI,oBAAoB,KAAA,GACvB,MAAM,IAAI,cACT,UACA,4CAA4C,gBAAgB,GAAG,SAAS,gBAAgB,GAAG,IAC3F;EAAE;EAAM;EAAM,OAAO;EAAW,OAAO;CAAgB,CACxD;CAED,MAAM,eAAe,iBAAiB,SAAS,KAAK;CACpD,IAAI,iBAAiB,KAAA,GACpB,MAAM,IAAI,cACT,UACA,yCAAyC,aAAa,GAAG,SAAS,aAAa,GAAG,IAClF;EAAE;EAAM;EAAM,OAAO;EAAQ,OAAO;CAAa,CAClD;CAED,MAAM,gBAAgB,IAAI,IAAI,SAAS,KAAK;CAC5C,KAAK,MAAM,SAAS,SAAS,SAAS;EACrC,MAAM,WAAW,MAAM,YAAY,MAAM,GAAG;EAC5C,KAAK,IAAI,QAAQ,GAAG,QAAQ,SAAS,QAAQ,SAAS,GAAG;GACxD,MAAM,OAAO,SAAS,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,GAAG;GAC9C,IAAI,CAAC,cAAc,IAAI,IAAI,GAC1B,MAAM,IAAI,cACT,UACA,oDAAoD,KAAK,IACzD;IAAE;IAAM;IAAM;IAAM,aAAa,MAAM;GAAY,CACpD;EAEF;CACD;CACA,KAAK,MAAM,QAAQ,SAAS,OAAO;EAClC,MAAM,aAAa,KAAK,YAAY;EACpC,MAAM,OAAO,SAAS,QAAQ,MAAM,UAAU;GAC7C,MAAM,cAAc,MAAM,YAAY,YAAY;GAClD,OAAO,eAAe,eAAe,WAAW,WAAW,GAAG,YAAY,EAAE;EAC7E,CAAC;EACD,IAAI,SAAS,KAAA,GACZ,MAAM,IAAI,cACT,UACA,4BAA4B,KAAK,yBAAyB,KAAK,YAAY,IAC3E;GAAE;GAAM;GAAM;GAAM,aAAa,KAAK;EAAY,CACnD;CAEF;CACA,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;CAC5C,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,cAAc,UAAU,uCAAuC,QAAQ;EAChF;EACA;EACA,OAAO,OAAO;CACf,CAAC;CAEF,MAAM,SAAS,OAAO,MAAM,QAAQ,SAAS,SAAS,kBAAkB;CACxE,MAAM,iBAAiB,iBAAiB,MAAM;CAC9C,IAAI,mBAAmB,KAAA,GACtB,MAAM,IAAI,cACT,UACA,mCAAmC,eAAe,GAAG,SAAS,eAAe,GAAG,IAChF;EAAE;EAAM;EAAM,OAAO;CAAe,CACrC;CAED,MAAM,eAAe,IAAI,IAAI,OAAO,KAAK,SAAS,CAAC,KAAK,YAAY,GAAG,IAAI,CAAC,CAAC;CAC7E,MAAM,kBAAkB,IAAI,IAAI,SAAS,QAAQ,KAAK,UAAU,MAAM,QAAQ,YAAY,CAAC,CAAC;CAC5F,KAAK,MAAM,QAAQ,QAClB,IAAI,CAAC,gBAAgB,IAAI,KAAK,YAAY,CAAC,GAC1C,MAAM,IAAI,cAAc,UAAU,sBAAsB,KAAK,oBAAoB;EAChF;EACA;EACA;CACD,CAAC;CAGH,KAAK,MAAM,SAAS,SAAS,SAAS;EACrC,MAAM,aAAa,aAAa,IAAI,MAAM,QAAQ,YAAY,CAAC;EAC/D,IAAI,eAAe,KAAA,KAAa,eAAe,MAAM,SACpD,MAAM,IAAI,cACT,UACA,sBAAsB,MAAM,QAAQ,kCACpC;GAAE;GAAM;GAAM,SAAS,MAAM;GAAS,QAAQ;EAAW,CAC1D;EAED,MAAM,UAAU,oBAAoB,MAAM,MAAM,SAAS,UAAU,MAAM;EACzE,MAAM,SAAS,cAAc,UAAU,OAAO,CAAC;EAC/C,IACC,CAAC,OAAO,WACR,CAAC,OAAO,MAAM,OAAO,KACrB,OAAO,MAAM,eAAe,KAC5B,OAAO,MAAM,UAAU,GAEvB,MAAM,IAAI,cAAc,UAAU,oBAAoB,MAAM,QAAQ,kBAAkB;GACrF;GACA;GACA,SAAS,MAAM;GACf,OAAO,OAAO,UAAU,KAAA,IAAY,OAAO;EAC5C,CAAC;CAEH;CACA,OAAO;AACR;;;;;;;;;;AAWA,SAAgB,YACf,MACA,MACA,MACA,UACA,QAAQ,oBACC;CACT,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,KAAK,QAAQ,oBACxD,MAAM,IAAI,cAAc,MAAM,8BAA8B,QAAQ;EAAE;EAAM;EAAM;CAAM,CAAC;CAE1F,IAAI,CAAC,eAAe,IAAI,GACvB,MAAM,IAAI,cAAc,MAAM,uBAAuB,QAAQ;EAAE;EAAM;CAAK,CAAC;CAE5E,MAAM,OAAO,oBAAoB,MAAM,MAAM,MAAM,QAAQ;CAC3D,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;CAC5C,IACC,CAAC,OAAO,WACR,CAAC,OAAO,MAAM,OAAO,KACrB,OAAO,MAAM,eAAe,KAC5B,OAAO,MAAM,UAAU,GAEvB,MAAM,IAAI,cAAc,MAAM,2CAA2C,QAAQ;EAChF;EACA;EACA,GAAI,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;CACjD,CAAC;CAEF,MAAM,SAAS,cAAc,SAAS,MAAM,GAAG,CAAC;CAChD,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,cAAc,MAAM,0BAA0B,QAAQ;EAC/D;EACA;EACA,OAAO,OAAO;CACf,CAAC;CAEF,MAAM,SAAS,OAAO;CACtB,MAAM,SAAS,cAAc;EAC5B,MAAM,UAAU,UAAU,MAAM;EAChC,IACC,CAAC,QAAQ,OAAO,KAChB,QAAQ,UAAU,KAClB,QAAQ,QAAQ,OAAO,MAAM,OAC7B,QAAQ,QAAQ,OAAO,MAAM,KAE7B,MAAM,IAAI,cAAc,MAAM,kCAAkC,QAAQ;GAAE;GAAM;EAAK,CAAC;EAEvF,IAAI,QAAQ,OAAO,OAClB,MAAM,IAAI,cAAc,MAAM,sCAAsC,QAAQ;GAC3E;GACA;GACA;GACA,MAAM,QAAQ;EACf,CAAC;EAEF,MAAM,QAAQ,OAAO,MAAM,QAAQ,IAAI;EACvC,IAAI,SAAS;EACb,OAAO,SAAS,MAAM,YAAY;GACjC,MAAM,SAAS,SAAS,QAAQ,OAAO,QAAQ,MAAM,aAAa,QAAQ,MAAM;GAChF,IAAI,WAAW,GAAG;GAClB,UAAU;EACX;EACA,MAAM,WAAW,OAAO,MAAM,CAAC;EAC/B,MAAM,QAAQ,SAAS,QAAQ,UAAU,GAAG,SAAS,YAAY,MAAM;EACvE,MAAM,QAAQ,UAAU,MAAM;EAC9B,MAAM,aAAa,UAAU,IAAI;EACjC,IACC,WAAW,MAAM,cACjB,UAAU,KACV,MAAM,QAAQ,QAAQ,OACtB,MAAM,QAAQ,QAAQ,OACtB,MAAM,YAAY,QAAQ,WAC1B,MAAM,SAAS,QAAQ,QACvB,CAAC,WAAW,OAAO,KACnB,WAAW,eAAe,KAC1B,WAAW,UAAU,KACrB,WAAW,QAAQ,QAAQ,OAC3B,WAAW,QAAQ,QAAQ,KAE3B,MAAM,IAAI,cAAc,MAAM,iCAAiC,QAAQ;GAAE;GAAM;EAAK,CAAC;EAEtF,OAAO,WAAW,KAAK;CACxB,CAAC;CACD,MAAM,SAAS,cAAc,UAAU,MAAM,CAAC;CAC9C,IAAI,CAAC,OAAO,SAAS,MAAM,OAAO;CAClC,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,cAAc,MAAM,2BAA2B,QAAQ;EAChE;EACA;EACA,OAAO,OAAO;CACf,CAAC;CAEF,OAAO,OAAO;AACf;;;;;;;;;;AAWA,SAAgB,aACf,MACA,MACA,MACA,UACA,QAAQ,oBACC;CACT,MAAM,UAAU,cACf,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OACzC,OAAO,KAAK,YAAY,MAAM,MAAM,MAAM,UAAU,KAAK,GAAG,KAAK,CAClE,CACD;CACA,IAAI,CAAC,QAAQ,SACZ,MAAM,IAAI,cAAc,MAAM,8BAA8B,QAAQ;EACnE;EACA;EACA,OAAO,QAAQ;CAChB,CAAC;CAEF,OAAO,QAAQ;AAChB;;;;;;;;;;;;;;;AAgBA,SAAgB,UAAU,MAAiC;CAC1D,IAAI,CAAC,iBAAiB,IAAI,GACzB,MAAM,IAAI,cAAc,UAAU,mDAAmD,EAAE,KAAK,CAAC;CAE9F,MAAM,aAAa,cAAc,UAAU,IAAI,CAAC;CAChD,IAAI,CAAC,WAAW,SAAS;EACxB,IAAI,mBAAmB,WAAW,KAAK,GAAG,OAAO,CAAC;EAClD,MAAM,IAAI,cAAc,UAAU,kCAAkC;GACnE;GACA,OAAO,WAAW;EACnB,CAAC;CACF;CACA,IAAI,CAAC,WAAW,MAAM,YAAY,KAAK,WAAW,MAAM,eAAe,GACtE,MAAM,IAAI,cAAc,UAAU,4CAA4C,EAAE,KAAK,CAAC;CAEvF,MAAM,QAAkB,CAAC;CACzB,MAAM,UAAU,CAAC;EAAE,MAAM;EAAM,MAAM;EAAI,OAAO;CAAE,CAAC;CACnD,IAAI,UAAU;CACd,OAAO,QAAQ,SAAS,GAAG;EAC1B,MAAM,UAAU,QAAQ,IAAI;EAC5B,IAAI,YAAY,KAAA,GAAW;EAC3B,MAAM,SAAS,YAAY,QAAQ,IAAI;EACvC,IAAI;GACH,SAAS;IACR,MAAM,QAAQ,OAAO,SAAS;IAC9B,IAAI,UAAU,MAAM;IACpB,WAAW;IACX,IAAI,UAAA,MACH,MAAM,IAAI,cAAc,UAAU,0BAA0B,iBAAiB,WAAW;KACvF;KACA,OAAO;IACR,CAAC;IAEF,MAAM,OAAO,QAAQ,SAAS,KAAK,MAAM,OAAO,GAAG,QAAQ,KAAK,GAAG,MAAM;IACzE,IAAI,CAAC,eAAe,IAAI,GACvB,MAAM,IAAI,cAAc,UAAU,gDAAgD;IAEnF,IAAI,MAAM,YAAY,KAAK,CAAC,MAAM,eAAe,GAAG;KACnD,MAAM,QAAQ,QAAQ,QAAQ;KAC9B,IAAI,QAAA,IACH,MAAM,IAAI,cAAc,UAAU,mCAAkD;MACnF;MACA;MACA,OAAA;KACD,CAAC;KAEF,QAAQ,KAAK;MAAE,MAAM,KAAK,QAAQ,MAAM,MAAM,IAAI;MAAG;MAAM;KAAM,CAAC;IACnE,OACC,MAAM,KAAK,IAAI;GAEjB;EACD,UAAU;GACT,OAAO,UAAU;EAClB;CACD;CACA,OAAO,MAAM,KAAK;AACnB;;;;;;;AAQA,SAAgB,gBAAgB,MAAiC;CAChE,IAAI,CAAC,iBAAiB,IAAI,GACzB,MAAM,IAAI,cAAc,UAAU,mDAAmD,EAAE,KAAK,CAAC;CAE9F,MAAM,aAAa,cAAc,UAAU,IAAI,CAAC;CAChD,IAAI,CAAC,WAAW,SAAS;EACxB,IAAI,mBAAmB,WAAW,KAAK,GAAG,OAAO,CAAC;EAClD,MAAM,IAAI,cAAc,UAAU,kCAAkC;GACnE;GACA,OAAO,WAAW;EACnB,CAAC;CACF;CACA,IAAI,CAAC,WAAW,MAAM,YAAY,KAAK,WAAW,MAAM,eAAe,GACtE,MAAM,IAAI,cAAc,UAAU,4CAA4C,EAAE,KAAK,CAAC;CAEvF,MAAM,cAAwB,CAAC;CAC/B,MAAM,UAAU,CAAC;EAAE,MAAM;EAAM,MAAM;EAAI,OAAO;CAAE,CAAC;CACnD,IAAI,UAAU;CACd,OAAO,QAAQ,SAAS,GAAG;EAC1B,MAAM,UAAU,QAAQ,IAAI;EAC5B,IAAI,YAAY,KAAA,GAAW;EAC3B,MAAM,SAAS,YAAY,QAAQ,IAAI;EACvC,IAAI;GACH,SAAS;IACR,MAAM,QAAQ,OAAO,SAAS;IAC9B,IAAI,UAAU,MAAM;IACpB,WAAW;IACX,IAAI,UAAA,MACH,MAAM,IAAI,cAAc,UAAU,0BAA0B,iBAAiB,WAAW;KACvF;KACA,OAAO;IACR,CAAC;IAEF,IAAI,CAAC,MAAM,YAAY,KAAK,MAAM,eAAe,GAAG;IACpD,MAAM,OAAO,QAAQ,SAAS,KAAK,MAAM,OAAO,GAAG,QAAQ,KAAK,GAAG,MAAM;IACzE,IAAI,CAAC,eAAe,IAAI,GACvB,MAAM,IAAI,cAAc,UAAU,gDAAgD;IAEnF,MAAM,QAAQ,QAAQ,QAAQ;IAC9B,IAAI,QAAA,IACH,MAAM,IAAI,cAAc,UAAU,mCAAkD;KACnF;KACA;KACA,OAAA;IACD,CAAC;IAEF,YAAY,KAAK,IAAI;IACrB,QAAQ,KAAK;KAAE,MAAM,KAAK,QAAQ,MAAM,MAAM,IAAI;KAAG;KAAM;IAAM,CAAC;GACnE;EACD,UAAU;GACT,OAAO,UAAU;EAClB;CACD;CACA,OAAO,YAAY,KAAK;AACzB;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,YAAY,MAAsB;CACjD,MAAM,WAAW,KAAK,MAAM,GAAG;CAC/B,IAAI,SAAS,WAAW,GAAG;EAC1B,MAAM,OAAO,SAAS;EACtB,IAAI,SAAS,KAAA,GAAW,OAAO;EAC/B,OAAO,KAAK,WAAW,GAAG,IAAI,YAAY,KAAK,MAAM,CAAC,MAAM;CAC7D;CACA,OAAO,SAAS,KAAK,YAAa,QAAQ,WAAW,GAAG,IAAI,QAAQ,MAAM,CAAC,IAAI,OAAQ,CAAC,CAAC,KAAK,GAAG;AAClG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,UACf,MACA,KACA,QAA2B,YACA;CAC3B,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC,iBAAiB,GAAG,GACnD,MAAM,IAAI,cAAc,UAAU,0DAA0D;EAC3F;EACA;CACD,CAAC;CAEF,MAAM,cAAc,mBAAmB,OAAO,gBAAgB;CAC9D,IAAI,gBAAgB,KAAA,GACnB,MAAM,IAAI,cAAc,UAAU,mCAAmC;EACpE;EACA;EACA,OAAO;CACR,CAAC;CAEF,MAAM,eAAyB,CAAC;CAChC,MAAM,QAAkB,CAAC;CACzB,MAAM,eAAe,gBAAgB,QAAQ,IAAI,CAAC;CAClD,MAAM,cAAc,gBAAgB,QAAQ,GAAG,CAAC;CAChD,IAAI,iBAAiB,eAAe,aAAa,WAAW,cAAc,GAAG,GAC5E,MAAM,IAAI,cAAc,UAAU,kBAAkB,IAAI,4BAA4B;EACnF;EACA;CACD,CAAC;CAEF,KAAK,MAAM,QAAQ,aAAa;EAC/B,IAAI,CAAC,eAAe,IAAI,KAAK,oBAAoB,IAAI,GACpD,MAAM,IAAI,cAAc,UAAU,+BAA+B,QAAQ;GAAE;GAAM;EAAK,CAAC;EAExF,MAAM,WAAW,oBAAoB,MAAM,MAAM,UAAU,MAAM;EACjE,IAAI,CAAC,WAAW,QAAQ,GACvB,MAAM,IAAI,cAAc,UAAU,0BAA0B,QAAQ;GAAE;GAAM;EAAK,CAAC;EAEnF,MAAM,SAAS,cAAc,UAAU,QAAQ,CAAC;EAChD,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,cAAc,UAAU,oCAAoC,QAAQ;GAC7E;GACA;GACA,OAAO,OAAO;EACf,CAAC;EAEF,IAAI,OAAO,MAAM,eAAe,GAC/B,MAAM,IAAI,cAAc,UAAU,4BAA4B,QAAQ;GAAE;GAAM;EAAK,CAAC;EAErF,IAAI,OAAO,MAAM,YAAY,GAAG;GAC/B,MAAM,iBAAiB,gBAAgB,QAAQ;GAC/C,IAAI,gBAAgB,kBAAkB,YAAY,WAAW,iBAAiB,GAAG,GAChF,MAAM,IAAI,cAAc,UAAU,kBAAkB,IAAI,oBAAoB,QAAQ;IACnF;IACA;IACA;GACD,CAAC;GAEF,MAAM,KAAK,IAAI;GACf,KAAK,MAAM,UAAU,gBAAgB,QAAQ,GAAG,MAAM,KAAK,GAAG,KAAK,GAAG,QAAQ;GAC9E,KAAK,MAAM,UAAU,UAAU,QAAQ,GAAG,aAAa,KAAK,GAAG,KAAK,GAAG,QAAQ;EAChF,OACC,aAAa,KAAK,IAAI;CAExB;CACA,IAAI,aAAa,SAAA,QAA6B,MAAM,SAAA,MACnD,MAAM,IAAI,cAAc,UAAU,iDAAiD;EAClF;EACA,OAAO;CACR,CAAC;CAGF,MAAM,UAA2B,CAAC;CAClC,MAAM,eAAmC,CAAC;CAC1C,IAAI,aAAa;CACjB,KAAK,MAAM,eAAe,cAAc;EACvC,IAAI,oBAAoB,WAAW,GAClC,MAAM,IAAI,cACT,UACA,8CAA8C,eAC9C;GACC;GACA;EACD,CACD;EAED,MAAM,SAAS,oBAAoB,MAAM,aAAa,UAAU,MAAM;EACtE,MAAM,SAAS,cAAc,UAAU,MAAM,CAAC;EAC9C,IACC,CAAC,OAAO,WACR,CAAC,OAAO,MAAM,OAAO,KACrB,OAAO,MAAM,eAAe,KAC5B,OAAO,MAAM,UAAU,GAEvB,MAAM,IAAI,cAAc,UAAU,yCAAyC,eAAe;GACzF;GACA;GACA,OAAO,OAAO,UAAU,KAAA,IAAY,OAAO;EAC5C,CAAC;EAEF,cAAc,OAAO,MAAM;EAC3B,IAAI,aAAa,0BAChB,MAAM,IAAI,cAAc,UAAU,0DAA0D;GAC3F;GACA,OAAO;EACR,CAAC;EAEF,aAAa,KACZ,OAAO,OAAO;GACb,MAAM;GACN,OAAO;GACP,QAAQ,OAAO,MAAM;GACrB,OAAO,OAAO,MAAM;GACpB,UAAU,OAAO,MAAM;GACvB,MAAM,OAAO,MAAM;GACnB,QAAQ,WAAW,MAAM;EAC1B,CAAC,CACF;EACA,MAAM,UAAU,YAAY,WAAW;EACvC,MAAM,aAAa,YAAY,SAAS,KAAK;EAC7C,QAAQ,KAAK;GAAE;GAAS;GAAa;EAAW,CAAC;EACjD,MAAM,WAAW,YAAY,MAAM,GAAG;EACtC,KAAK,IAAI,QAAQ,GAAG,QAAQ,SAAS,QAAQ,SAAS,GACrD,MAAM,KAAK,SAAS,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC;CAE/C;CACA,QAAQ,MAAM,GAAG,MAChB,EAAE,cAAc,EAAE,cAAc,KAAK,EAAE,cAAc,EAAE,cAAc,IAAI,CAC1E;CACA,MAAM,sBAAsB,iBAAiB,QAAQ,KAAK,UAAU,MAAM,WAAW,CAAC;CACtF,IAAI,wBAAwB,KAAA,GAC3B,MAAM,IAAI,cACT,UACA,kCAAkC,oBAAoB,GAAG,SAAS,oBAAoB,GAAG,IACzF,EAAE,OAAO,oBAAoB,CAC9B;CAED,MAAM,kBAAkB,iBAAiB,QAAQ,KAAK,UAAU,MAAM,OAAO,CAAC;CAC9E,IAAI,oBAAoB,KAAA,GAAW;EAClC,MAAM,sBAAsB,QAC1B,QAAQ,UAAU,MAAM,QAAQ,YAAY,MAAM,gBAAgB,EAAE,CAAC,YAAY,CAAC,CAAC,CACnF,KAAK,UAAU,MAAM,WAAW;EAClC,MAAM,IAAI,cACT,UACA,yBAAyB,gBAAgB,GAAG,0BAA0B,oBAAoB,MAAM,GAAG,SAAS,oBAAoB,MAAM,GAAG,IACzI;GAAE,SAAS,gBAAgB;GAAI,cAAc;EAAoB,CAClE;CACD;CACA,MAAM,mBAAmB,iBAAiB,CACzC,oBACA,GAAG,QAAQ,KAAK,UAAU,MAAM,OAAO,CACxC,CAAC;CACD,IAAI,qBAAqB,KAAA,GACxB,MAAM,IAAI,cACT,UACA,iBAAiB,iBAAiB,GAAG,yCACrC,EAAE,OAAO,iBAAiB,CAC3B;CAED,MAAM,cAAc,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK;CAC7C,IAAI,YAAY,SAAA,MACf,MAAM,IAAI,cAAc,UAAU,iDAAiD;EAClF;EACA,OAAO;CACR,CAAC;CAEF,MAAM,eAAe,iBAAiB,WAAW;CACjD,IAAI,iBAAiB,KAAA,GACpB,MAAM,IAAI,cACT,UACA,gCAAgC,aAAa,GAAG,SAAS,aAAa,GAAG,IACzE,EAAE,OAAO,aAAa,CACvB;CAED,MAAM,WAAyB;EAC9B;EACA,OAAO;EACP,QAAQ,mBAAmB,SAAS,WAAW;CAChD;CACA,MAAM,SAAS,QAAQ,QAAQ,GAAG,CAAC;CACnC,MAAM,OAAO,SAAS,QAAQ,GAAG,CAAC;CAClC,MAAM,QAAQ,WAAW;CACzB,MAAM,UAAU,qBAAqB,QAAQ,IAAI,KAAK,SAAS,SAAS,SAAS,QAAQ;CACzF,MAAM,SAAS,qBAAqB,QAAQ,IAAI,KAAK,UAAU,SAAS,SAAS,QAAQ;CACzF,IAAI;CACJ,IAAI;CACJ,MAAM,SAAS,cAAc;EAC5B,kBAAkB,qBAAqB,QAAQ,oBAAoB;EACnE,oBAAoB,gBAAgB,QAAQ,oBAAoB;EAChE,UAAU,SAAS,EAAE,WAAW,MAAM,CAAC;EACvC,oBAAoB,gBAAgB,QAAQ,oBAAoB;EAChE,MAAM,gBAAgB,UAAU,OAAO;EACvC,IAAI,CAAC,cAAc,YAAY,KAAK,cAAc,eAAe,GAChE,MAAM,IAAI,cAAc,SAAS,iDAAiD,EACjF,QACD,CAAC;EAEF,gBAAgB,OAAO,OAAO;GAC7B,MAAM;GACN,QAAQ,cAAc;GACtB,OAAO,cAAc;EACtB,CAAC;EACD,KAAK,MAAM,SAAS,SAAS;GAC5B,oBAAoB,gBAAgB,QAAQ,oBAAoB;GAChE,oBAAoB,eAAe,mBAAmB;GACtD,MAAM,SAAS,oBAAoB,MAAM,MAAM,aAAa,UAAU,MAAM;GAC5E,MAAM,cAAc,aAAa,MAAM,cAAc,UAAU,SAAS,MAAM,WAAW;GACzF,MAAM,eAAe,UAAU,MAAM;GACrC,MAAM,eAAe,WAAW,MAAM;GACtC,IACC,gBAAgB,KAAA,KAChB,CAAC,aAAa,OAAO,KACrB,aAAa,eAAe,KAC5B,aAAa,UAAU,KACvB,aAAa,QAAQ,YAAY,UACjC,aAAa,QAAQ,YAAY,SACjC,aAAa,YAAY,YAAY,YACrC,aAAa,SAAS,YAAY,QAClC,iBAAiB,YAAY,QAE7B,MAAM,IAAI,cAAc,UAAU,0BAA0B,MAAM,eAAe;IAChF;IACA,aAAa,MAAM;GACpB,CAAC;GAEF,MAAM,cAAc,oBAAoB,SAAS,MAAM,SAAS,SAAS,SAAS;GAClF,UAAU,QAAQ,WAAW,GAAG,EAAE,WAAW,KAAK,CAAC;GACnD,oBAAoB,eAAe,mBAAmB;GACtD,MAAM,uBAAuB,oBAAoB,SAAS,MAAM,SAAS,SAAS,SAAS;GAC3F,aAAa,QAAQ,sBAAsB,UAAa,aAAa;GACrE,MAAM,eAAe,UAAU,oBAAoB;GACnD,IACC,CAAC,aAAa,OAAO,KACrB,aAAa,eAAe,KAC5B,aAAa,UAAU,KACvB,WAAW,oBAAoB,MAAM,YAAY,QAEjD,MAAM,IAAI,cAAc,SAAS,gCAAgC,MAAM,eAAe;IACrF;IACA,aAAa,MAAM;GACpB,CAAC;EAEH;EACA,cAAc,KAAK,SAAS,kBAAkB,GAAG,GAAG,KAAK,UAAU,UAAU,MAAM,GAAI,EAAE,KAAK;GAC7F,UAAU;GACV,MAAM;EACP,CAAC;EACD,oBAAoB,gBAAgB,QAAQ,oBAAoB;EAChE,IAAI,iBAAiB,OAAO,MAAM,KAAA,GACjC,MAAM,IAAI,cAAc,SAAS,8CAA8C,EAC9E,QACD,CAAC;CAEH,CAAC;CACD,IAAI,CAAC,OAAO,SAAS;EACpB,MAAM,WAAW;EACjB,MAAM,UACL,aAAa,KAAA,IACV,KAAA,IACA,cAAc;GACd,oBAAoB,UAAU,mBAAmB;GACjD,OAAO,SAAS,EAAE,WAAW,KAAK,CAAC;EACpC,CAAC;EACJ,MAAM,gBAAgB,cAAc;GACnC,KAAK,MAAM,WAAW,CAAC,GAAI,iBAAiB,WAAW,CAAC,CAAE,CAAC,CAAC,QAAQ,GAAG;IACtE,oBAAoB,SAAS,oBAAoB;IACjD,UAAU,QAAQ,IAAI;GACvB;EACD,CAAC;EACD,MAAM,IAAI,cAAc,SAAS,kCAAkC,OAAO;GACzE;GACA;GACA,OAAO,OAAO;GACd,SAAS,SAAS,YAAY,QAAQ,QAAQ,QAAQ,KAAA;GACtD,eAAe,cAAc,UAAU,KAAA,IAAY,cAAc;EAClE,CAAC;CACF;CACA,IAAI,oBAAoB,KAAA,GACvB,MAAM,IAAI,cAAc,SAAS,0CAA0C,EAAE,IAAI,CAAC;CAEnF,oBAAoB,gBAAgB,QAAQ,oBAAoB;CAChE,iBAAiB,SAAS,KAAK,MAAM;CAErC,OAAO;AACR;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,SAAgB,iBACf,UACA,QACA,MACqB;CACrB,IAAI,aAAa,KAAA,GAAW,OAAO,KAAK,MAAM,MAAM;CACpD,MAAM,UAAU,SAAS,QAAQ,QAAQ,UAAU,MAAM,gBAAgB,MAAM;CAC/E,IAAI,QAAQ,WAAW,GAAG,OAAO,KAAA;CACjC,MAAM,CAAC,SAAS;CAChB,OAAO,UAAU,KAAA,IAAY,KAAA,IAAY,KAAK,MAAM,MAAM,OAAO;AAClE;;;;;;;;;AAUA,SAAgB,kBAAkB,UAAwB,aAA6B;CACtF,MAAM,SAAS,SAAS,UAAU,SAAS;CAC3C,IAAI,gBAAgB,QAAQ,OAAO,SAAS;CAC5C,IAAI,CAAC,YAAY,WAAW,GAAG,OAAO,EAAE,GACvC,MAAM,IAAI,cAAc,WAAW,uCAAuC,UAAU;EACnF;EACA;CACD,CAAC;CAEF,OAAO,GAAG,SAAS,KAAK,GAAG,YAAY,MAAM,OAAO,SAAS,CAAC;AAC/D;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,YAAY,MAAY,MAAoB;CAC3D,IAAI,CAAC,iBAAiB,IAAI,GACzB,MAAM,IAAI,cAAc,UAAU,gDAAgD,EAAE,KAAK,CAAC;CAE3F,MAAM,QAAQ,aAAa,IAAI;CAC/B,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;CAC5C,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,YAAY,KAAK,OAAO,MAAM,eAAe,GACjF,MAAM,IAAI,cAAc,UAAU,4CAA4C,QAAQ;EACrF;EACA,OAAO,OAAO,UAAU,KAAA,IAAY,OAAO;CAC5C,CAAC;CAEF,MAAM,WAAW,iBAAiB,IAAI;CACtC,MAAM,YAAwB,CAAC;CAC/B,IAAI,YAAY;CAChB,KAAK,MAAM,YAAY,MAAM,WAC5B,IAAI,SAAS,WAAW,QAAQ,aAAa,OAAO,WAAW,SAAS,SAAS,MAAM;CAExF,KAAK,MAAM,YAAY,MAAM,WAAW;EACvC,IAAI,SAAS,WAAW,QAAQ;GAC/B,UAAU,KAAK,QAAQ;GACvB;EACD;EACA,MAAM,SAAS,SAAS,UAAU,SAAS;EAC3C,IAAI,CAAC,eAAe,MAAM,KAAK,oBAAoB,MAAM,GACxD,MAAM,IAAI,cAAc,UAAU,kCAAkC,UAAU;GAC7E;GACA;EACD,CAAC;EAEF,MAAM,OAAO,iBAAiB,UAAU,QAAQ,IAAI;EACpD,MAAM,aAAW,SAAS,KAAA,IAAY,KAAA,IAAY,SAAW,MAAM,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;EAC5F,IAAI,eAAa,KAAA,GAAW;GAC3B,MAAM,YAAY,oBAAoB,MAAM,YAAU,UAAU,MAAM;GACtE,IAAI,WAAW,SAAS,GAAG;IAC1B,MAAM,QAAQ,cAAc,UAAU,SAAS,CAAC;IAChD,IAAI,CAAC,MAAM,SACV,MAAM,IAAI,cAAc,UAAU,6CAA6C,UAAU;KACxF;KACA;KACA,OAAO,MAAM;IACd,CAAC;IAEF,IAAI,MAAM,MAAM,OAAO,KAAK,CAAC,MAAM,MAAM,eAAe,KAAK,MAAM,MAAM,UAAU,GAAG;KACrF,MAAM,MAAM,YACX,MACA,YACA,UACA,QACA,KAAK,IAAI,oBAAoB,SAAS,CACvC;KACA,aAAa,IAAI,SAAS;KAC1B,UAAU,KAAK;MACd,GAAG;MACH;KACD,CAAC;KACD;IACD;IACA,IAAI,aAAa,KAAA,GAChB,MAAM,IAAI,cAAc,UAAU,yCAAyC,UAAU;KACpF;KACA;IACD,CAAC;GAEH;GACA,IAAI,aAAa,KAAA,GAChB,MAAM,IAAI,cAAc,UAAU,sCAAsC,UAAU;IACjF;IACA;GACD,CAAC;EAEH;EAEA,IAAI,aAAa,KAAA,GAAW;GAC3B,MAAM,UAAU,SAAS,QAAQ,QAAQ,UAAU,MAAM,YAAY,WAAW,GAAG,OAAO,EAAE,CAAC;GAC7F,IAAI,UAAU,SAAS,QAAQ,SAAS,sBACvC,MAAM,IAAI,cAAc,UAAU,kDAAkD;IACnF;IACA,OAAO;GACR,CAAC;GAEF,IAAI,QAAQ,WAAW,GAAG;IACzB,IAAI,OAAO,WAAW,aAAa,KAAK,OAAO,SAAS,KAAK,GAAG;KAI/D,MAAM,EAAE,KAAK,MAAM,GAAG,kBAAkB;KACxC,UAAU,KAAK,aAAa;KAC5B;IACD;IACA,MAAM,IAAI,cAAc,UAAU,kCAAkC,UAAU;KAC7E;KACA;IACD,CAAC;GACF;GACA,KAAK,MAAM,SAAS,SAAS;IAC5B,IAAI,oBAAoB,MAAM,WAAW,GACxC,MAAM,IAAI,cACT,UACA,qCAAqC,MAAM,eAC3C;KAAE;KAAM,QAAQ,MAAM;IAAY,CACnC;IAED,MAAM,aAAa,MAAM,YAAY,MAAM,OAAO,SAAS,CAAC;IAC5D,MAAM,MAAM,YACX,MACA,MAAM,SACN,UACA,QACA,KAAK,IAAI,oBAAoB,SAAS,CACvC;IACA,aAAa,IAAI,SAAS;IAC1B,UAAU,KAAK;KACd,GAAG;KACH,MAAM,GAAG,SAAS,KAAK,GAAG;KAC1B,QAAQ,MAAM;KACd;IACD,CAAC;GACF;GACA;EACD;EAEA,MAAM,YAAY,oBAAoB,MAAM,QAAQ,UAAU,MAAM;EACpE,IAAI,CAAC,WAAW,SAAS,GACxB,MAAM,IAAI,cAAc,UAAU,sCAAsC,UAAU;GACjF;GACA;EACD,CAAC;EAEF,MAAM,kBAAkB,cAAc,UAAU,SAAS,CAAC;EAC1D,IACC,CAAC,gBAAgB,WACjB,CAAC,gBAAgB,MAAM,YAAY,KACnC,gBAAgB,MAAM,eAAe,GAErC,MAAM,IAAI,cAAc,UAAU,8CAA8C,UAAU;GACzF;GACA;GACA,OAAO,gBAAgB,UAAU,KAAA,IAAY,gBAAgB;EAC9D,CAAC;EAEF,MAAM,YAAY,UAAU,SAAS;EACrC,IAAI,UAAU,SAAS,UAAU,SAAS,sBACzC,MAAM,IAAI,cAAc,UAAU,kDAAkD;GACnF;GACA,OAAO;EACR,CAAC;EAEF,IAAI,UAAU,WAAW,GAAG;GAC3B,UAAU,KAAK,QAAQ;GACvB;EACD;EACA,KAAK,MAAM,cAAc,WAAW;GACnC,MAAM,eAAe,GAAG,OAAO,GAAG;GAClC,IAAI,oBAAoB,YAAY,GACnC,MAAM,IAAI,cAAc,UAAU,qCAAqC,gBAAgB;IACtF;IACA,QAAQ;GACT,CAAC;GAEF,MAAM,MAAM,YACX,MACA,cACA,UACA,QACA,KAAK,IAAI,oBAAoB,SAAS,CACvC;GACA,aAAa,IAAI,SAAS;GAC1B,UAAU,KAAK;IACd,GAAG;IACH,MAAM,GAAG,SAAS,KAAK,GAAG;IAC1B,QAAQ;IACR;GACD,CAAC;EACF;CACD;CACA,MAAM,WAAW,iBAAiB,UAAU,KAAK,aAAa,SAAS,IAAI,CAAC;CAC5E,IAAI,aAAa,KAAA,GAChB,MAAM,IAAI,cACT,WACA,wCAAwC,SAAS,GAAG,SAAS,SAAS,GAAG,IACzE,EAAE,OAAO,SAAS,CACnB;CAED,MAAM,WAAW;EAAE,GAAG;EAAO;CAAU;CACvC,IAAI,CAAC,OAAO,QAAQ,GACnB,MAAM,IAAI,cAAc,WAAW,kDAAkD;CAEtF,OAAO;AACR;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,iBAAiB,MAAc,WAAwC;CACtF,IAAI,CAAC,WAAW,IAAI,GACnB,MAAM,IAAI,cACT,UACA,sEAAsE,QACtE;EAAE;EAAM;CAAU,CACnB;CAED,MAAM,WAAW,iBAAiB,IAAI;CACtC,IAAI,aAAa,KAAA,GAAW;EAC3B,IAAI,CAAC,SAAS,MAAM,SAAS,SAAS,GACrC,MAAM,IAAI,cACT,UACA,yEAAyE,aACzE;GAAE;GAAM;EAAU,CACnB;EAED,OAAO,IAAI,IACV,SAAS,QACP,QAAQ,UAAU,MAAM,YAAY,WAAW,GAAG,UAAU,EAAE,CAAC,CAAC,CAChE,KAAK,UAAU,MAAM,WAAW,CACnC;CACD;CACA,MAAM,gBAAgB,oBAAoB,MAAM,WAAW,UAAU,MAAM;CAC3E,IAAI,CAAC,WAAW,aAAa,GAC5B,MAAM,IAAI,cACT,UACA,yFAAyF,iBACzF;EAAE;EAAM;CAAU,CACnB;CAED,MAAM,aAAa,cAAc,UAAU,aAAa,CAAC;CACzD,IAAI,CAAC,WAAW,WAAW,CAAC,WAAW,MAAM,YAAY,KAAK,WAAW,MAAM,eAAe,GAC7F,MAAM,IAAI,cACT,UACA,iFAAiF,iBACjF;EAAE;EAAM;EAAW,GAAI,WAAW,UAAU,CAAC,IAAI,EAAE,OAAO,WAAW,MAAM;CAAG,CAC/E;CAED,OAAO,IAAI,IAAI,UAAU,aAAa,CAAC,CAAC,KAAK,aAAa,GAAG,UAAU,GAAG,UAAU,CAAC;AACtF;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,SAAgB,aAAa,QAAgB,MAAiC;CAC7E,IAAI,CAAC,iBAAiB,MAAM,KAAK,CAAC,iBAAiB,IAAI,GACtD,MAAM,IAAI,cAAc,UAAU,iDAAiD;EAClF;EACA;CACD,CAAC;CAEF,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,aAAa,mBAAmB;EAC1C,MAAM,OAAO,oBAAoB,QAAQ,WAAW,UAAU,QAAQ;EACtE,IAAI,CAAC,WAAW,IAAI,GAAG;EACvB,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;EAC5C,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,YAAY,KAAK,OAAO,MAAM,eAAe,GACjF,MAAM,IAAI,cAAc,UAAU,6CAA6C,QAAQ;GACtF;GACA;GACA,GAAI,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;EACjD,CAAC;EAEF,MAAM,UAAU,iBAAiB,MAAM,SAAS;EAChD,KAAK,MAAM,YAAY,UAAU,IAAI,GAAG;GACvC,MAAM,OAAO,GAAG,UAAU,GAAG;GAC7B,IAAI,CAAC,QAAQ,IAAI,IAAI,GAAG,MAAM,KAAK,IAAI;EACxC;CACD;CACA,OAAO;AACR;;AAGA,SAAgB,wBAAwB,WAA6B,MAAoB;CACxF,MAAM,WAAW,cAAc;EAC9B,IAAI,CAAC,mBAAmB,SAAS,GAAG,MAAM,IAAI,MAAM,oCAAoC;EACxF,MAAM,YAAY,UAAU;EAC5B,IACC,cAAc,KAAA,KACd,CAAC,OAAO,cAAc,SAAS,KAC/B,YAAY,KACZ,YAAA,MAEA,MAAM,IAAI,MAAM,iCAAiC;EAElD,MAAM,OAAO,YAAY;EACzB,UAAU,KAAK;EACf,IAAI,UAAU,OAAO,MAAM,MAAM,IAAI,MAAM,sCAAsC;CAClF,CAAC;CACD,IAAI,CAAC,SAAS,SACb,MAAM,IAAI,cAAc,UAAU,mDAAmD;EACpF;EACA,OAAO;EACP,OAAO,SAAS;CACjB,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,iBACf,MACA,YAA8B,IAAI,aAAa,CAAC,gBAAgB,CAAC,GAC7C;CACpB,IAAI,CAAC,mBAAmB,SAAS,GAChC,MAAM,IAAI,cAAc,UAAU,wCAAwC;EACzE;EACA,OAAO;CACR,CAAC;CAEF,IAAI,CAAC,iBAAiB,IAAI,GACzB,MAAM,IAAI,cAAc,UAAU,iDAAiD,EAAE,KAAK,CAAC;CAE5F,MAAM,aAAa,cAAc,UAAU,IAAI,CAAC;CAChD,IAAI,CAAC,WAAW,WAAW,CAAC,WAAW,MAAM,YAAY,KAAK,WAAW,MAAM,eAAe,GAC7F,MAAM,IAAI,cAAc,UAAU,6CAA6C,QAAQ;EACtF;EACA,GAAI,WAAW,UAAU,CAAC,IAAI,EAAE,OAAO,WAAW,MAAM;CACzD,CAAC;CAEF,MAAM,WAAqB,CAAC;CAC5B,MAAM,SAAS,YAAY,IAAI;CAC/B,IAAI;EACH,SAAS;GACR,MAAM,QAAQ,OAAO,SAAS;GAC9B,IAAI,UAAU,MAAM;GACpB,wBAAwB,WAAW,IAAI;GACvC,IAAI,CAAC,MAAM,YAAY,GAAG;GAC1B,IAAI,CAAC,eAAe,MAAM,IAAI,GAC7B,MAAM,IAAI,cAAc,UAAU,gDAAgD;GAEnF,MAAM,YAAY,KAAK,MAAM,MAAM,IAAI;GACvC,MAAM,OAAO,cACZ,aAAa,WAAW,gBAAgB,UAAU,WAAW,kBAAkB,CAChF;GACA,IAAI,CAAC,KAAK,SAAS;GACnB,MAAM,SAAS,UAAU,KAAK,KAAK;GACnC,IAAI,CAAC,SAAS,MAAM,GAAG;GACvB,MAAM,OAAO,aAAa,QAAQ,MAAM;GACxC,IAAI,OAAO,SAAS,YAAY,CAAC,wBAAwB,KAAK,IAAI,GAAG;GACrE,IAAI,CAAC,eAAe,MAAM,IAAI,GAC7B,MAAM,IAAI,cAAc,UAAU,gDAAgD;GAEnF,SAAS,KAAK,SAAS;EACxB;CACD,UAAU;EACT,OAAO,UAAU;CAClB;CACA,OAAO,SAAS,KAAK;AACtB;;;;;;;;;;;;;;;;AAiBA,SAAgB,mBAAmB,MAAkC;CACpE,IAAI,KAAK,SAAS,mBAAmB,kBAAkB,IAAI,IAAI,iBAC9D;CAED,MAAM,SAAS,cAAc,cAAc,IAAI,CAAC;CAChD,IAAI,CAAC,OAAO,SAAS,OAAO,KAAA;CAC5B,IAAI;CACJ,KAAK,MAAM,QAAQ,UAAU,OAAO,KAAK,GACxC,IAAI,iBAAiB,IAAI,GAAG;EAC3B,QAAQ;EACR;CACD;CAED,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,MAAM,YAAY,MAAM,SAAS,MAAM,UAAU,gBAAgB,KAAK,CAAC;CACvE,IAAI,cAAc,KAAA,GAAW,OAAO,KAAA;CACpC,MAAM,cAAc,YAAY,SAAS,CAAC,CAAC,QAAQ,QAAQ,GAAG,CAAC,CAAC,KAAK;CACrE,OAAO,YAAY,SAAS,KAAK,qBAAqB,WAAW,IAAI,cAAc,KAAA;AACpF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,SAAgB,gBACf,OACA,QAAQ,kBACkB;CAC1B,MAAM,YAAY,qBAAqB,OAAO,gBAAgB;CAC9D,IACC,cAAc,KAAA,KACd,CAAC,OAAO,cAAc,KAAK,KAC3B,QAAQ,KACR,QAAA,MAEA,MAAM,IAAI,cAAc,UAAU,+BAA+B,EAChE,OAAO,iBACR,CAAC;CAEF,MAAM,yBAAS,IAAI,IAA0B;CAC7C,MAAM,YAAY,IAAI,aAAa,CAAC,KAAK,CAAC;CAC1C,KAAK,MAAM,QAAQ,WAAW;EAC7B,wBAAwB,WAAW,IAAI;EACvC,KAAK,MAAM,aAAa,iBAAiB,MAAM,SAAS,GAAG;GAC1D,MAAM,OAAO,cACZ,aAAa,WAAW,gBAAgB,UAAU,WAAW,kBAAkB,CAChF;GACA,IAAI,CAAC,KAAK,SAAS;GACnB,MAAM,SAAS,UAAU,KAAK,KAAK;GACnC,IAAI,CAAC,SAAS,MAAM,GAAG;GACvB,MAAM,OAAO,aAAa,QAAQ,MAAM;GACxC,IAAI,OAAO,SAAS,YAAY,CAAC,wBAAwB,KAAK,IAAI,GAAG;GACrE,MAAM,UAAU,aAAa,QAAQ,SAAS;GAC9C,IAAI,OAAO,YAAY,YAAY,CAAC,gBAAgB,KAAK,OAAO,GAAG;GACnE,MAAM,QAAQ,iBAAiB,IAAI;GACnC,IAAI,cAAc;GAClB,MAAM,QAAQ,cACb,aAAa,WAAW,cAAc,MAAM,MAAM,UAAU,WAAW,eAAe,CACvF;GACA,IAAI,MAAM,SAAS,cAAc,mBAAmB,MAAM,KAAK,KAAK;GACpE,OAAO,IAAI,MAAM;IAAE;IAAM;IAAS;GAAY,CAAC;EAChD;CACD;CACA,OAAO,CAAC,GAAG,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,MAAO,EAAE,OAAO,EAAE,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,CAAE;AAC5F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACr8FA,IAAa,eAAb,MAA2D;CAC1D;CACA;CACA,kBAAkB;CAClB;CACA,aAAa;CAEb,YAAY,SAA+B;EAC1C,MAAM,SAAS,yBAAyB,OAAO;EAC/C,KAAKC,WAAW,IAAI,QAA8B;GACjD,GAAI,OAAO,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI,OAAO,GAAG;GACnD,GAAI,OAAO,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;EAC7D,CAAC;EAGD,KAAKC,QAAQ,OAAO,QAAQ,SAAS;CACtC;CAEA,IAAI,UAAkD;EACrD,OAAO,KAAKD;CACb;CAEA,YAAY,MAAY,QAAmC;EAC1D,KAAKE,aAAa;EAClB,MAAM,WAAW,KAAKC,SAAS,MAAM,MAAM;EAC3C,IAAI,CAAC,SAAS,MAAM,GACnB,MAAM,IAAI,cAAc,UAAU,wCAAwC,EAAE,OAAO,CAAC;EAErF,MAAM,EAAE,SAAS,WAAW,KAAKC,OAAO,UAAU,MAAM;EACxD,MAAM,SAA4B;GAAE;GAAQ;GAAS;GAAQ,SAAS,CAAC;GAAG,SAAS,CAAC;EAAE;EACtF,KAAKJ,SAAS,KAAK,QAAQ,MAAM;EACjC,OAAO;CACR;CAEA,OAAO,MAAY,OAAc,QAAgB,UAAU,OAA0B;EACpF,KAAKE,aAAa;EAClB,MAAM,UAAU,KAAKC,SAAS,MAAM,QAAQ,MAAM,KAAK;EACvD,IAAI,CAAC,sBAAsB,KAAK,KAAK,CAAC,mBAAmB,KAAK,GAC7D,MAAM,IAAI,cAAc,WAAW,0CAA0C;EAE9E,MAAM,UAAU,cAAc,gBAAgB,KAAK,CAAC;EACpD,IAAI,CAAC,QAAQ,WAAW,CAAC,MAAM,QAAQ,QAAQ,MAAM,QAAQ,GAC5D,MAAM,IAAI,cAAc,WAAW,8CAA8C,EAChF,GAAI,QAAQ,UAAU,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM,EACnD,CAAC;EAEF,MAAM,gBAAgB,IAAI,IACzB,QAAQ,MAAM,SACZ,QACC,YACA,QAAQ,UAAU,aAAc,YAAY,QAAQ,QAAQ,UAAU,OACxE,CAAC,CACA,KAAK,YAAY,QAAQ,IAAI,CAChC;EACA,MAAM,WAAW;GAChB,GAAG;GACH,WAAW,QAAQ,UAAU,QAAQ,aAAa,cAAc,IAAI,SAAS,IAAI,CAAC;EACnF;EACA,MAAM,WAAW,KAAKA,SAAS,UAAU,QAAQ,OAAO;EACxD,MAAM,iBAAiB,IAAI,IAAI,SAAS,UAAU,KAAK,aAAa,CAAC,SAAS,MAAM,QAAQ,CAAC,CAAC;EAC9F,MAAM,aAAa;GAClB,GAAG;GACH,WAAW,QAAQ,UAAU,KAAK,aAAa,eAAe,IAAI,SAAS,IAAI,KAAK,QAAQ;EAC7F;EACA,MAAM,UAAU,SACf,YACA,WACC,QACA,WAAW,UAAU,KAAK,aAAa,SAAS,IAAI,CACrD,CACD;EACA,IAAI,KAAK,UAAU,QAAQ,QAAQ,MAAM,KAAK,UAAU,QAAQ,MAAM,QAAQ,GAC7E,MAAM,IAAI,cAAc,UAAU,iDAAiD,EAClF,OACD,CAAC;EAEF,MAAM,gBAAqC,SAAS,UAAU,KAAK,aAAa;GAC/E,MAAM,UAAU,QAAQ,MAAM,SAAS,MAAM,cAAc,UAAU,SAAS,SAAS,IAAI;GAC3F,IAAI,SAAS,UAAU,WAAW,OAAO;IAAE,MAAM,SAAS;IAAM,OAAO;GAAS;GAChF,IAAI,SAAS,UAAU,WAAW,QAAQ,aAAa,KAAA,GACtD,OAAO;IACN,MAAM,SAAS;IACf,OAAO;IACP,QAAQ,UAAU,QAAQ,QAAQ;GACnC;GAED,MAAM,IAAI,cAAc,WAAW,qCAAqC,SAAS,QAAQ,EACxF,MAAM,SAAS,KAChB,CAAC;EACF,CAAC;EACD,MAAM,UAAoB,CAAC;EAC3B,KAAK,MAAM,YAAY,QAAQ,WAC9B,IAAI,CAAC,cAAc,IAAI,SAAS,IAAI,GACnC,QAAQ,KAAK,SAAS,IAAI;EAG5B,MAAM,EAAE,SAAS,WAAW,KAAKC,OAAO,UAAU,QAAQ,aAAa;EACvE,MAAM,SAA4B;GAAE;GAAQ;GAAS;GAAQ;GAAS,SAAS,CAAC;EAAE;EAClF,KAAKJ,SAAS,KAAK,QAAQ,MAAM;EACjC,OAAO;CACR;CAKA,MAAM,QAAgB,UAA+D;EACpF,KAAKE,aAAa;EAClB,IAAI,CAAC,iBAAiB,MAAM,GAC3B,MAAM,IAAI,cAAc,UAAU,mDAAmD,EACpF,OACD,CAAC;EAEF,MAAM,QAAQ,aAAa,QAAQ,KAAKD,KAAK;EAC7C,IAAI,CAAC,sBAAsB,QAAQ,KAAK,CAAC,sBAAsB,QAAQ,GACtE,MAAM,IAAI,cAAc,UAAU,2CAA2C,EAAE,OAAO,CAAC;EAExF,MAAM,UAAU,cAAc,gBAAgB,QAAQ,CAAC;EACvD,MAAM,gBAAgB,QAAQ,UAAU,OAAO,KAAK,QAAQ,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC;EAC7E,IACC,CAAC,QAAQ,WACT,KAAK,UAAU,aAAa,MAAM,KAAK,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAClE,KAAK,UAAU,WAAW,QAAQ,KAAK,CAAC,MAAM,KAAK,UAAU,QAAQ,KAAK,GAE1E,MAAM,IAAI,cAAc,UAAU,6CAA6C;GAC9E;GACA,GAAI,QAAQ,UAAU,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;EACnD,CAAC;EAEF,IAAI,MAAM,WAAW,GAAG;GACvB,MAAM,SAA4B;IACjC;IACA,SAAS,CAAC;IACV,QAAQ,CAAC;IACT,SAAS,CAAC;IACV,SAAS,CAAC;GACX;GACA,KAAKD,SAAS,KAAK,QAAQ,MAAM;GACjC,OAAO;EACR;EACA,MAAM,cAAc,iBAAiB,OAAO,QAAQ,CAAC,CAAC;EACtD,MAAM,QAAQ,MAAM,KAAK,SAAS;GACjC,oBAAoB,QAAQ,MAAM,SAAS,QAAQ;GACnD,OAAO,EAAE,KAAK;EACf,CAAC;EACD,MAAM,QAAsB,CAAC;EAC7B,MAAM,SAAS,cAAc;GAC5B,KAAK,MAAM,QAAQ,OAAO;IACzB,oBAAoB,aAAa,KAAA,CAAS;IAC1C,MAAM,SAAS,oBAAoB,QAAQ,KAAK,MAAM,SAAS,QAAQ;IACvE,MAAM,eAAe,UAAU,MAAM;IACrC,IAAI,CAAC,aAAa,OAAO,KAAK,aAAa,eAAe,KAAK,aAAa,UAAU,GACrF,MAAM,IAAI,cAAc,SAAS,0CAA0C,KAAK,QAAQ,EACvF,MAAM,KAAK,KACZ,CAAC;IAEF,MAAM,eAAe,WAAW,MAAM;IACtC,MAAM,cAAc,QAAQ,MAAM,KAAK;IACvC,IAAI,gBAAgB,KAAA,KAAa,iBAAiB,UAAU,WAAW,GACtE,MAAM,IAAI,cAAc,SAAS,2BAA2B,KAAK,QAAQ,EACxE,MAAM,KAAK,KACZ,CAAC;IAEF,MAAM,cAAc,oBACnB,YAAY,QACZ,KAAK,MACL,SACA,YACD;IACA,UAAU,QAAQ,WAAW,GAAG,EAAE,WAAW,KAAK,CAAC;IACnD,oBAAoB,aAAa,KAAA,CAAS;IAC1C,MAAM,uBAAuB,oBAC5B,YAAY,QACZ,KAAK,MACL,SACA,YACD;IACA,WAAW,QAAQ,oBAAoB;IACvC,MAAM,KAAK,IAAI;IACf,MAAM,iBAAiB,UAAU,oBAAoB;IACrD,MAAM,iBAAiB,WAAW,oBAAoB;IACtD,IACC,CAAC,eAAe,OAAO,KACvB,eAAe,eAAe,KAC9B,eAAe,UAAU,KACzB,eAAe,QAAQ,aAAa,OACpC,eAAe,QAAQ,aAAa,OACpC,eAAe,YAAY,aAAa,WACxC,eAAe,SAAS,aAAa,QACrC,mBAAmB,cAEnB,MAAM,IAAI,cAAc,SAAS,2BAA2B,KAAK,QAAQ,EACxE,MAAM,KAAK,KACZ,CAAC;GAEH;EACD,CAAC;EACD,IAAI,CAAC,OAAO,SAAS;GACpB,MAAM,WAAW,cAChB,aACC,aACA,MAAM,KAAK,SAAS,KAAK,IAAI,CAC9B,CACD;GACA,MAAM,UAAU,SAAS,UACtB,cAAc,wBAAwB,WAAW,CAAC,IAClD,KAAA;GACH,MAAM,IAAI,cAAc,SAAS,iCAAiC;IACjE;IACA,OAAO,OAAO;IACd,YAAY,YAAY;IACxB,WAAW;IACX,UAAU,SAAS,UAAU,KAAA,IAAY,SAAS;IAClD,SAAS,SAAS,YAAY,QAAQ,QAAQ,QAAQ,KAAA;GACvD,CAAC;EACF;EACA,MAAM,UAAU,MAAM,KAAK,SAAS,KAAK,IAAI;EAC7C,MAAM,UAAU,cAAc,wBAAwB,WAAW,CAAC;EAClE,IAAI,CAAC,QAAQ,SACZ,MAAM,IAAI,cAAc,SAAS,wCAAwC;GACxE;GACA,OAAO,QAAQ;GACf,YAAY,YAAY;GACxB,WAAW;GACX;EACD,CAAC;EAEF,KAAK,MAAM,QAAQ,SAAS,KAAKA,SAAS,KAAK,UAAU,IAAI;EAC7D,MAAM,SAA4B;GAAE;GAAQ,SAAS,CAAC;GAAG,QAAQ,CAAC;GAAG,SAAS,CAAC;GAAG;EAAQ;EAC1F,KAAKA,SAAS,KAAK,QAAQ,MAAM;EACjC,OAAO;CACR;CAEA,UAAgB;EACf,IAAI,KAAKK,YAAY;EACrB,KAAKA,aAAa;EAClB,KAAKL,SAAS,KAAK,SAAS;EAC5B,KAAKA,SAAS,QAAQ;CACvB;CAEA,OACC,MACA,QACA,eACgD;EAChD,IAAI,KAAK,UAAU,WAAW,GAAG,OAAO;GAAE,SAAS,CAAC;GAAG,QAAQ,CAAC;EAAE;EAClE,MAAM,QAAQ,KAAK,UAAU,KAAK,aAAa,SAAS,IAAI;EAC5D,MAAM,cAAc,iBAAiB,OAAO,QAAQ,OAAO,aAAa;EACxE,MAAM,SAAS,cAAc;GAC5B,KAAK,MAAM,YAAY,KAAK,WAAW;IACtC,yBAAyB,WAAW;IACpC,IAAI,SAAS,WAAW,QAAQ,KAAKM,MAAM,UAAU,WAAW;SAC3D,KAAKC,OAAO,UAAU,WAAW;GACvC;EACD,CAAC;EACD,IAAI,CAAC,OAAO,SAAS;GACpB,MAAM,UAAU,cAAc,wBAAwB,WAAW,CAAC;GAClE,KAAKP,SAAS,KAAK,SAAS,OAAO,KAAK;GACxC,MAAM,IAAI,cAAc,SAAS,mCAAmC;IACnE;IACA,OAAO,OAAO;IACd,SAAS,QAAQ,UAAU,KAAA,IAAY,QAAQ;GAChD,CAAC;EACF;EACA,MAAM,YAAY,cAAc,uBAAuB,aAAa,KAAK,CAAC;EAC1E,IAAI,CAAC,UAAU,SAAS;GACvB,KAAKA,SAAS,KAAK,SAAS,UAAU,KAAK;GAC3C,MAAM,UAAU;EACjB;EACA,MAAM,UAAU,KAAK,UACnB,QAAQ,aAAa,SAAS,WAAW,MAAM,CAAC,CAChD,KAAK,aAAa,SAAS,IAAI;EACjC,MAAM,SAAS,KAAK,UAClB,QAAQ,aAAa,SAAS,WAAW,MAAM,CAAC,CAChD,KAAK,aAAa,SAAS,IAAI;EACjC,KAAK,MAAM,QAAQ,SAAS,KAAKA,SAAS,KAAK,SAAS,IAAI;EAC5D,KAAK,MAAM,QAAQ,QAAQ,KAAKA,SAAS,KAAK,QAAQ,IAAI;EAC1D,OAAO;GAAE;GAAS;EAAO;CAC1B;CAEA,MAAM,UAAwB,aAAqC;EAClE,MAAM,SAAS,SAAS,UAAU,SAAS;EAC3C,MAAM,WAAW,KAAKQ,UAAU;EAChC,MAAM,UACL,UAAU,QAAQ,QAChB,UAAU,MAAM,gBAAgB,UAAU,MAAM,YAAY,WAAW,GAAG,OAAO,EAAE,CACrF,KAAK,CAAC;EACP,IAAI,aAAa,KAAA,KAAa,QAAQ,WAAW,GAAG;GACnD,IAAI,CAAC,OAAO,WAAW,aAAa,KAAK,CAAC,OAAO,SAAS,KAAK,GAK9D,MAAM,IAAI,cACT,UACA,uBAAuB,OAAO,qEAC9B;IAAE,QAAQ,YAAY;IAAO;GAAO,CACrC;GAKD,MAAM,KAAK,oBAAoB,YAAY,OAAO,SAAS,MAAM,SAAS,SAAS;GACnF,IAAI;IACH,UAAU,QAAQ,EAAE,GAAG,EAAE,WAAW,KAAK,CAAC;IAC1C,yBAAyB,WAAW;IACpC,MAAM,cAAc,oBACnB,YAAY,OACZ,SAAS,MACT,SACA,SACD;IACA,MAAM,UAAU,UAAU,MAAM;IAChC,cAAc,aAAa,SAAS;KAAE,UAAU;KAAQ,MAAM;IAAK,CAAC;IACpE,MAAM,SAAS,UAAU,WAAW;IACpC,IACC,CAAC,OAAO,OAAO,KACf,OAAO,eAAe,KACtB,OAAO,UAAU,KACjB,WAAW,WAAW,MAAM,WAAW,OAAO,GAE9C,MAAM,IAAI,MAAM,mCAAmC,SAAS,MAAM;IAEnE,yBAAyB,WAAW;GACrC,SAAS,OAAO;IACf,MAAM,IAAI,cAAc,SAAS,yCAAyC,SAAS,QAAQ;KAC1F,MAAM,SAAS;KACf;IACD,CAAC;GACF;GACA;EACD;EACA,IAAI,aAAa,KAAA,KAAa,SAAS,QAAQ,KAAA,GAAW;GACzD,MAAM,YAAY,oBAAoB,KAAKP,OAAO,QAAQ,UAAU,MAAM;GAC1E,MAAM,SAAS,UAAU,SAAS;GAClC,IAAI,CAAC,OAAO,YAAY,KAAK,OAAO,eAAe,GAClD,MAAM,IAAI,cACT,UACA,gDAAgD,UAChD,EACC,OACD,CACD;GAED,MAAM,cAAc,oBAAoB,YAAY,OAAO,SAAS,MAAM,SAAS,SAAS;GAC5F,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;GAC1C,yBAAyB,WAAW;GACpC,MAAM,SAAS,UAAU,WAAW;GACpC,IAAI,CAAC,OAAO,YAAY,KAAK,OAAO,eAAe,GAClD,MAAM,IAAI,cAAc,SAAS,oCAAoC,SAAS,QAAQ,EACrF,MAAM,SAAS,KAChB,CAAC;GAEF;EACD;EACA,MAAM,QAAQ,QAAQ;EACtB,MAAM,aAAa,UAAU,KAAA,IAAY,SAAS,MAAM;EACxD,MAAM,kBACL,UAAU,KAAA,IAAY,SAAS,OAAO,kBAAkB,UAAU,MAAM,WAAW;EACpF,MAAM,WAAW,SAAS;EAC1B,IAAI,aAAa,KAAA,GAChB,MAAM,IAAI,cAAc,UAAU,yCAAyC,UAAU,EACpF,OACD,CAAC;EAEF,MAAM,OAAO,oBAAoB,KAAKA,OAAO,YAAY,UAAU,MAAM;EACzE,MAAM,eAAe,UAAU,IAAI;EACnC,IACC,CAAC,aAAa,OAAO,KACrB,aAAa,eAAe,KAC5B,aAAa,UAAU,KACvB,WAAW,IAAI,MAAM,UAAU,QAAQ,GAEvC,MAAM,IAAI,cAAc,UAAU,4BAA4B,UAAU,EAAE,OAAO,CAAC;EAEnF,MAAM,KAAK,oBAAoB,YAAY,OAAO,iBAAiB,SAAS,SAAS;EACrF,IAAI;GACH,UAAU,QAAQ,EAAE,GAAG,EAAE,WAAW,KAAK,CAAC;GAC1C,yBAAyB,WAAW;GACpC,MAAM,cAAc,oBACnB,YAAY,OACZ,iBACA,SACA,SACD;GACA,aAAa,MAAM,aAAa,UAAa,aAAa;GAC1D,IAAI,OAAO,eAAe,MAAM,UAAU,aAAa,GAAK;GAC5D,MAAM,SAAS,UAAU,WAAW;GACpC,IACC,CAAC,OAAO,OAAO,KACf,OAAO,eAAe,KACtB,OAAO,UAAU,KACjB,WAAW,WAAW,MAAM,UAAU,QAAQ,GAE9C,MAAM,IAAI,MAAM,mCAAmC,SAAS,MAAM;GAEnE,yBAAyB,WAAW;EACrC,SAAS,OAAO;GACf,MAAM,IAAI,cAAc,SAAS,mCAAmC,SAAS,QAAQ;IACpF,MAAM,SAAS;IACf;GACD,CAAC;EACF;CACD;CAKA,SAAS,MAAY,QAAgB,UAAgB,MAAM,UAAU,MAAY;EAChF,IAAI,CAAC,iBAAiB,MAAM,GAC3B,MAAM,IAAI,cAAc,UAAU,0DAA0D,EAC3F,OACD,CAAC;EAEF,IAAI,CAAC,sBAAsB,IAAI,GAC9B,MAAM,IAAI,cAAc,WAAW,wCAAwC;EAE5E,MAAM,WAAW,cAAc,gBAAgB,IAAI,CAAC;EACpD,MAAM,SAAS,SAAS,UAAU,UAAU,SAAS,KAAK,IAAI,KAAA;EAC9D,IAAI,WAAW,KAAA,GACd,MAAM,IAAI,cAAc,WAAW,sCAAsC,EACxE,GAAI,SAAS,UAAU,CAAC,IAAI,EAAE,OAAO,SAAS,MAAM,EACrD,CAAC;EAEF,MAAM,kBACL,YAAY,OACT,WACA,sBAAsB,OAAO,IAC5B,cAAc,gBAAgB,OAAO,CAAC,IACtC,KAAA;EACL,MAAM,gBACL,YAAY,OACT,SACA,iBAAiB,YAAY,OAC5B,UAAU,gBAAgB,KAAK,IAC/B,KAAA;EACL,IAAI,kBAAkB,KAAA,GACrB,MAAM,IAAI,cAAc,WAAW,iDAAiD,EACnF,GAAI,iBAAiB,YAAY,QAAQ,EAAE,OAAO,gBAAgB,MAAM,IAAI,CAAC,EAC9E,CAAC;EAEF,MAAM,aAAa,aAAa,aAAa;EAC7C,IAAI,CAAC,WAAW,OACf,MAAM,IAAI,cACT,WACA,oEACA,EAAE,WAAW,WAAW,UAAU,CACnC;EAED,KAAK,MAAM,YAAY,OAAO,WAAW;GACxC,IAAI,CAAC,eAAe,SAAS,IAAI,GAChC,MAAM,IAAI,cAAc,SAAS,4BAA4B,SAAS,QAAQ,EAC7E,MAAM,SAAS,KAChB,CAAC;GAEF,IAAI,qBAAqB,SAAS,IAAI,GACrC,MAAM,IAAI,cACT,SACA,yDAAyD,SAAS,QAClE,EAAE,MAAM,SAAS,KAAK,CACvB;GAED,IAAI,SAAS,WAAW,KAAA,KAAa,CAAC,eAAe,SAAS,MAAM,GACnE,MAAM,IAAI,cAAc,UAAU,8BAA8B,SAAS,UAAU,EAClF,QAAQ,SAAS,OAClB,CAAC;EAEH;EACA,MAAM,SAAS,OAAO,UAAU,MAAM,aAAa,SAAS,WAAW,MAAM;EAC7E,MAAM,WAAW,WAAW,SAAS,YAAY,QAAQ,KAAKA,KAAK,IAAI;EACvE,MAAM,WAAW,iBAAiB,SAAS,UAAU,KAAK,aAAa,SAAS,IAAI,CAAC;EACrF,IAAI,aAAa,KAAA,GAChB,MAAM,IAAI,cACT,WACA,oCAAoC,SAAS,GAAG,SAAS,SAAS,GAAG,IACrE,EAAE,OAAO,SAAS,CACnB;EAED,IAAI,CAAC,SAAS,OAAO;EACrB,MAAM,WAAW,SAAS,KAAKO,UAAU,IAAI,KAAA;EAC7C,KAAK,MAAM,YAAY,SAAS,WAAW;GAC1C,MAAM,cAAc,oBAAoB,QAAQ,SAAS,MAAM,SAAS,QAAQ;GAChF,IAAI,CAAC,WAAW,WAAW,GAAG;GAC9B,MAAM,oBAAoB,cAAc,UAAU,WAAW,CAAC;GAC9D,IAAI,CAAC,kBAAkB,SACtB,MAAM,IAAI,cAAc,UAAU,wCAAwC,SAAS,QAAQ;IAC1F,MAAM,SAAS;IACf,OAAO,kBAAkB;GAC1B,CAAC;GAEF,IACC,kBAAkB,MAAM,eAAe,KACtC,kBAAkB,MAAM,OAAO,KAAK,kBAAkB,MAAM,UAAU,GAEvE,MAAM,IAAI,cAAc,UAAU,gCAAgC,SAAS,QAAQ,EAClF,MAAM,SAAS,KAChB,CAAC;GAEF,IAAI,YAAY;GAChB,IAAI,SAAS,WAAW,UAAU,aAAa,KAAA,KAAa,SAAS,QAAQ,KAAA,GAAW;IACvF,MAAM,SAAS,SAAS,UAAU,SAAS;IAC3C,MAAM,aAAa,oBAAoB,KAAKP,OAAO,QAAQ,UAAU,MAAM;IAC3E,MAAM,eAAe,cAAc,UAAU,UAAU,CAAC;IACxD,IAAI,CAAC,aAAa,SACjB,MAAM,IAAI,cAAc,UAAU,sCAAsC,UAAU;KACjF;KACA,OAAO,aAAa;IACrB,CAAC;IAEF,YAAY,aAAa,MAAM,YAAY,KAAK,CAAC,aAAa,MAAM,eAAe;GACpF;GACA,IAAI,kBAAkB,MAAM,YAAY,MAAM,WAC7C,MAAM,IAAI,cACT,UACA,gDAAgD,SAAS,QACzD;IACC,MAAM,SAAS;IACf;GACD,CACD;EAEF;EACA,OAAO;CACR;CAEA,YAAsC;EACrC,IAAI,CAAC,KAAKQ,iBAAiB;GAC1B,KAAKC,iBAAiB,iBAAiB,KAAKT,KAAK;GACjD,KAAKQ,kBAAkB;EACxB;EACA,OAAO,KAAKC;CACb;CAEA,OAAO,UAA2B,aAAqC;EACtE,MAAM,KAAK,oBAAoB,YAAY,OAAO,SAAS,MAAM,SAAS,SAAS;EACnF,IAAI;GACH,UAAU,QAAQ,EAAE,GAAG,EAAE,WAAW,KAAK,CAAC;GAC1C,yBAAyB,WAAW;GACpC,MAAM,cAAc,oBAAoB,YAAY,OAAO,SAAS,MAAM,SAAS,SAAS;GAC5F,cAAc,aAAa,SAAS,SAAS;IAAE,UAAU;IAAQ,MAAM;GAAK,CAAC;GAC7E,MAAM,SAAS,UAAU,WAAW;GACpC,IACC,CAAC,OAAO,OAAO,KACf,OAAO,eAAe,KACtB,OAAO,UAAU,KACjB,WAAW,WAAW,MAAM,WAAW,SAAS,OAAO,GAEvD,MAAM,IAAI,MAAM,8BAA8B,SAAS,MAAM;GAE9D,yBAAyB,WAAW;EACrC,SAAS,OAAO;GACf,MAAM,IAAI,cAAc,SAAS,+BAA+B,SAAS,QAAQ;IAChF,MAAM,SAAS;IACf;GACD,CAAC;EACF;CACD;CAEA,eAAqB;EACpB,IAAI,KAAKL,YAAY,MAAM,IAAI,cAAc,aAAa,iCAAiC;CAC5F;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC5lBA,IAAa,OAAb,MAAa,KAA8B;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,cAAuB,IAAI,gBAAgB;CAC3C,aAAa;CAEb,YAAY,SAAuB;EAClC,MAAM,SAAS,iBAAiB,OAAO;EACvC,KAAKM,WAAW,IAAI,QAAsB;GACzC,GAAI,OAAO,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI,OAAO,GAAG;GACnD,GAAI,OAAO,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;EAC7D,CAAC;EACD,KAAKC,cAAc,OAAO,QAAQ,QAAQ;EAC1C,KAAKC,UAAU,OAAO,QAAQ,UAAU;EACxC,KAAKC,iBAAiB,OAAO,QAAQ,WAAA;EACrC,KAAKC,gBAAgB,OAAO,UAAU,QAAQ;EAC9C,KAAKC,mBAAmB,OAAO,UAAU,WAAA;EACzC,KAAKC,eAAe,OAAO,eAAA;EAC3B,KAAKC,WAAW,OAAO,WAAW;EAClC,KAAKC,UAAU,OAAO,UAAU;EAChC,KAAKC,SAAS,OAAO,SAAS;EAC9B,KAAKC,SAAS,OAAO,SAAA;EACrB,KAAKC,UAAU,OAAO,UAAA;CACvB;CAEA,IAAI,UAA0C;EAC7C,OAAO,KAAKX;CACb;CAEA,MAAM,OAAO,OAA6D;EACzE,KAAKa,aAAa;EAClB,OAAO,KAAKC,QAAQ,OAAO,aAAa,GAAG,KAAKH,OAAO,CAAC;CACzD;CAEA,MAAM,OACL,MACA,SACgC;EAChC,KAAKE,aAAa;EAClB,MAAM,SAAS,sBAAsB,MAAM,KAAK;EAChD,OAAO,KAAKE,QACX,OAAO,KAAK,eAAe,WAAW,IAAI,GAC1C,SACA,aAAa,GAAG,KAAKJ,OAAO,CAC7B;CACD;CAEA,MAAM,SAAS,MAA8D;EAC5E,KAAKE,aAAa;EAClB,OAAO,KAAKG,UAAU,MAAM,aAAa,GAAG,KAAKL,OAAO,CAAC;CAC1D;CAEA,QACC,OACA,SACA,WACgC;EAChC,MAAM,SAAS,eAAe,KAAK;EACnC,IAAI,OAAO,SAAS,KAAKD,QACxB,MAAM,IAAI,cAAc,WAAW,gDAAgD;GAClF,OAAO,OAAO;GACd,OAAO,KAAKA;EACb,CAAC;EAEF,MAAM,YAAY,iBAAiB,SAAS,QAAQ,KAAKC,OAAO;EAChE,OAAO,KAAKM,SAAS,QAAQ,KAAKX,cAAc,OAAO,SAAS;GAC/D,MAAM,QAAQ,iBAAiB,IAAI;GACnC,MAAM,MAAM,KAAKY,UAAU,KAAK;GAChC,MAAM,UAAU,MAAM,KAAKC,WAC1B,KACA,KAAKhB,gBACL,KAAKI,UACL,KAAKE,QACL,WACA,KAAKG,YAAY,MAClB;GACA,MAAM,QAAQ,KAAKQ,aAAa,MAAM,OAAO,SAAS,SAAS;GAC/D,IAAI,QAAQ,SAAS,UAAU,KAAKpB,SAAS,KAAK,SAAS,QAAQ,KAAK;GACxE,KAAKA,SAAS,KAAK,SAAS,IAAI;GAChC,IAAI,KAAKQ,YAAY,MAAM,cAAc,aAAa,MAAM,cAAc,WACzE,MAAM,IAAI,cAAc,SAAS,4BAA4B,OAAO;IACnE;IACA;GACD,CAAC;GAEF,OAAO;EACR,CAAC;CACF;CAEA,MAAMQ,UACL,MACA,WACkC;EAClC,MAAM,SAAS,sBAAsB,MAAM,IAAI;EAC/C,MAAM,UAAU,MAAM,KAAKF,QAC1B,OAAO,KAAK,eAAe,WAAW,IAAI,GAC1C,SACD;EACA,MAAM,WAA0B,CAAC;EACjC,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;GACtD,MAAM,MAAM,OAAO;GACnB,MAAM,SAAS,QAAQ;GACvB,IAAI,QAAQ,KAAA,KAAa,WAAW,KAAA,GACnC,MAAM,IAAI,cAAc,WAAW,0CAA0C;GAE9E,SAAS,KAAK,KAAKO,eAAe,KAAK,MAAM,CAAC;EAC/C;EACA,OAAO,OAAO,OAAO,QAAQ;CAC9B;CAEA,QAAQ,OAA0B,WAA6D;EAC9F,MAAM,SAAS,eAAe,KAAK;EACnC,IAAI,OAAO,SAAS,KAAKX,QACxB,MAAM,IAAI,cAAc,WAAW,gDAAgD;GAClF,OAAO,OAAO;GACd,OAAO,KAAKA;EACb,CAAC;EAEF,OAAO,KAAKO,SAAS,QAAQ,KAAKX,cAAc,OAAO,SAAS;GAC/D,MAAM,MAAM,KAAKgB,aAAa,IAAI;GAClC,MAAM,UAAU,MAAM,KAAKH,WAC1B,KACA,KAAKd,kBACL,KAAKE,UACL,KAAKE,QACL,WACA,KAAKG,YAAY,MAClB;GACA,MAAM,UAAU,KAAKW,iBAAiB,MAAM,OAAO;GACnD,IAAI,QAAQ,SAAS,UAAU,KAAKvB,SAAS,KAAK,SAAS,QAAQ,KAAK;GACxE,KAAKA,SAAS,KAAK,WAAW,IAAI;GAClC,IAAI,KAAKQ,YAAY,QAAQ,cAAc,aAAa,QAAQ,cAAc,WAC7E,MAAM,IAAI,cAAc,SAAS,uCAAuC,OAAO;IAC9E;IACA;GACD,CAAC;GAEF,OAAO;EACR,CAAC;CACF;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BA,MAAM,UAA4C;EACjD,KAAKK,aAAa;EAClB,MAAM,YAA2B,aAAa,GAAG,KAAKF,OAAO;EAC7D,MAAM,QAAQ,MAAM,KAAKa,UAAU,SAAS;EA4B5C,OAAO,MA3Be,KAAKP,SAAS,OAAO,KAAKX,cAAc,OAAO,SAAS;GAC7E,MAAM,mBAAmB,MAAM,KAAKa,WACnC,KAAKG,aAAa,IAAI,GACtB,KAAKjB,kBACL,KAAKE,UACL,KAAKE,QACL,WACA,KAAKG,YAAY,MAClB;GACA,MAAM,YAAY,KAAKa,aAAa,gBAAgB;GACpD,MAAM,QAAQ,iBAAiB,IAAI;GACnC,MAAM,eAAe,MAAM,KAAKN,WAC/B,KAAKD,UAAU,KAAK,GACpB,KAAKf,gBACL,KAAKI,UACL,KAAKE,QACL,WACA,KAAKG,YAAY,MAClB;GACA,MAAM,QAAQ,KAAKc,oBAAoB,YAAY;GACnD,IAAI,iBAAiB,SAAS,UAAU,KAAK1B,SAAS,KAAK,SAAS,iBAAiB,KAAK;GAC1F,IAAI,aAAa,SAAS,UAAU,KAAKA,SAAS,KAAK,SAAS,aAAa,KAAK;GAClF,MAAM,cAAc,MAAM,eAAe,UAAU;GACnD,MAAM,OAAO,KAAK2B,aAAa,MAAM,MAAM,UAAU,IAAI;GACzD,KAAK3B,SAAS,KAAK,WAAW,MAAM,IAAI;GACxC,OAAO;IAAE;IAAM,SAAS,UAAU;IAAS;GAAY;EACxD,CAAC;CAEF;CAEA,MAAM,KAAK,QAAgB,cAA2D;EACrF,KAAKa,aAAa;EAClB,MAAM,WAAW,aAAa,MAAM;EACpC,MAAM,WAAW,uBAAuB,QAAQ;EAChD,MAAM,OAAO,iBAAiB,KAAA,IAAY,WAAW,sBAAsB,cAAc,KAAK;EAC9F,IACC,iBAAiB,KAAA,KACjB,KAAK,MACH,eACA,CAAC,SAAS,MACR,cACA,UAAU,SAAS,WAAW,QAAQ,UAAU,UAAU,WAAW,KACvE,CACF,GAEA,MAAM,IAAI,cAAc,WAAW,mDAAmD;EAEvF,MAAM,OAAO,eAAe,QAAQ;EACpC,MAAM,aAAa,KACjB,KAAK,eAAe,WAAW,IAAI,CAAC,CACpC,QAAQ,eAAe,eAAe,IAAI;EAC5C,MAAM,UAAU,oBAAoB,QAAQ,UAAU;EACtD,MAAM,YAA2B,aAAa,GAAG,KAAKF,OAAO;EAG7D,MAAM,SAAS,aAAa,QAAQ,MAFf,KAAKI,QAAQ,YAAY,SAAS,SAAS,GAEpB,MADrB,KAAKC,UAAU,MAAM,SAAS,CACD;EACpD,KAAKhB,SAAS,KAAK,QAAQ,MAAM;EACjC,OAAO;CACR;CAEA,MAAM,OAAO,QAAqC;EACjD,KAAKa,aAAa;EAClB,MAAM,WAAW,aAAa,MAAM;EACpC,MAAM,OAAO,eAAe,QAAQ;EACpC,MAAM,YAA2B,aAAa,GAAG,KAAKF,OAAO;EAC7D,MAAM,SAAS,MAAM,KAAKa,UAAU,SAAS,EAAA,CAAG,QAAQ,cAAc,cAAc,IAAI;EACxF,MAAM,UAAU,oBAAoB,QAAQ,KAAK;EAEjD,MAAM,SAAS,aAAa,QAAQ,MADf,KAAKT,QAAQ,OAAO,SAAS,SAAS,GACf,CAAC,CAAC;EAC9C,KAAKf,SAAS,KAAK,QAAQ,MAAM;EACjC,OAAO;CACR;CAEA,MAAM,MAAM,QAAoB,QAA4C;EAC3E,KAAKa,aAAa;EAClB,IAAI,CAAC,iBAAiB,MAAM,GAC3B,MAAM,IAAI,cAAc,SAAS,wDAAwD,EACxF,OACD,CAAC;EAEF,IAAI,CAAC,sBAAsB,MAAM,KAAK,CAAC,aAAa,MAAM,GACzD,MAAM,IAAI,cAAc,SAAS,0BAA0B;EAE5D,MAAM,WAAW,cAAc,gBAAgB,MAAM,CAAC;EACtD,MAAM,SAAS,SAAS,UAAU,gBAAgB,SAAS,KAAK,IAAI,KAAA;EACpE,IAAI,WAAW,KAAA,GACd,MAAM,IAAI,cAAc,SAAS,4BAA4B,EAC5D,GAAI,SAAS,UAAU,CAAC,IAAI,EAAE,OAAO,SAAS,MAAM,EACrD,CAAC;EAEF,MAAM,eAAe,mBAAmB,OAAO,QAAQ,MAAM;EAC7D,MAAM,UAAU,aAAa,KAAK,EAAE,YAAY,MAAM,IAAI;EAC1D,IAAI,QAAQ,WAAW,GAAG,OAAO;EACjC,MAAM,gBAAqC,CAAC;EAC5C,KAAK,MAAM,EAAE,OAAO,iBAAiB,cAAc;GAClD,IAAI,MAAM,aAAa,KAAA,KAAa,CAAC,sBAAsB,KAAK,MAAM,QAAQ,GAC7E,MAAM,IAAI,cACT,SACA,6CAA6C,MAAM,QACnD,EACC,MAAM,MAAM,KACb,CACD;GAED,MAAM,SAAS,cAAc,UAAU,WAAW,CAAC;GACnD,IAAI,MAAM,aAAa,UAAU;IAChC,IAAI,OAAO,WAAW,CAAC,mBAAmB,OAAO,KAAK,GACrD,MAAM,IAAI,cAAc,SAAS,gCAAgC,MAAM,QAAQ;KAC9E,MAAM,MAAM;KACZ,GAAI,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;IACjD,CAAC;IAEF,cAAc,KAAK;KAAE,MAAM,MAAM;KAAM,OAAO;IAAS,CAAC;GACzD,OAAO,IACN,CAAC,OAAO,WACR,CAAC,OAAO,MAAM,OAAO,KACrB,OAAO,MAAM,eAAe,KAC5B,OAAO,MAAM,UAAU,KACvB,WAAW,WAAW,MAAM,MAAM,UAElC,MAAM,IAAI,cAAc,SAAS,gCAAgC,MAAM,QAAQ;IAC9E,MAAM,MAAM;IACZ,GAAI,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;GACjD,CAAC;QAED,cAAc,KAAK;IAClB,MAAM,MAAM;IACZ,OAAO;IACP,QAAQ,MAAM;GACf,CAAC;EAEH;EACA,MAAM,cAAc,iBAAiB,OAAO,QAAQ,SAAS,aAAa;EAC1E,MAAM,SAAS,cAAc;GAC5B,KAAK,MAAM,EAAE,WAAW,cAAc;IACrC,IAAI,OAAO,WAAW,MAAM,SAAS,MAAM,IAAI,oBAC9C,MAAM,IAAI,cAAc,SAAS,uCAAuC,MAAM,QAAQ;KACrF,MAAM,MAAM;KACZ,OAAO;IACR,CAAC;IAEF,yBAAyB,WAAW;IACpC,MAAM,YAAY,oBAAoB,YAAY,OAAO,MAAM,MAAM,SAAS,SAAS;IACvF,UAAU,QAAQ,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;IACjD,yBAAyB,WAAW;IACpC,MAAM,cAAc,oBAAoB,YAAY,OAAO,MAAM,MAAM,SAAS,SAAS;IACzF,cAAc,aAAa,MAAM,SAAS;KACzC,UAAU;KACV,MAAM;IACP,CAAC;IACD,MAAM,SAAS,UAAU,WAAW;IACpC,IACC,CAAC,OAAO,OAAO,KACf,OAAO,eAAe,KACtB,OAAO,UAAU,KACjB,WAAW,WAAW,MAAM,WAAW,MAAM,OAAO,GAEpD,MAAM,IAAI,cAAc,SAAS,2BAA2B,MAAM,QAAQ,EACzE,MAAM,MAAM,KACb,CAAC;IAEF,yBAAyB,WAAW;GACrC;EACD,CAAC;EACD,IAAI,CAAC,OAAO,SAAS;GACpB,MAAM,UAAU,cAAc,wBAAwB,WAAW,CAAC;GAClE,KAAKb,SAAS,KAAK,SAAS,OAAO,KAAK;GACxC,MAAM,IAAI,cAAc,SAAS,yCAAyC;IACzE;IACA,OAAO,OAAO;IACd,SAAS,QAAQ,UAAU,KAAA,IAAY,QAAQ;GAChD,CAAC;EACF;EACA,MAAM,YAAY,cAAc,uBAAuB,aAAa,OAAO,CAAC;EAC5E,IAAI,CAAC,UAAU,SAAS;GACvB,KAAKA,SAAS,KAAK,SAAS,UAAU,KAAK;GAC3C,MAAM,UAAU;EACjB;EACA,KAAK,MAAM,QAAQ,SAAS,KAAKA,SAAS,KAAK,SAAS,IAAI;EAC5D,OAAO;CACR;CAEA,UAAgB;EACf,IAAI,KAAK4B,YAAY;EACrB,KAAKA,aAAa;EAClB,KAAKhB,YAAY,MAAM;EACvB,KAAKZ,SAAS,KAAK,SAAS;EAC5B,KAAKA,SAAS,QAAQ;CACvB;CAKA,UAAU,OAAuB;EAChC,MAAM,SAAS,KAAKE,QAClB,MAAM,GAAG,CAAC,CACV,KAAK,YAAY,mBAAmB,OAAO,CAAC,CAAC,CAC7C,KAAK,GAAG;EACV,MAAM,UAAU,mBAAmB,KAAK;EACxC,OAAO,GAAG,KAAKD,YAAY,aAAa,QAAQ,cAAc,OAAO,cAAc,QAAQ;CAC5F;CAUA,aAAa,MAAsB;EAClC,OAAO,GAAG,KAAKG,cAAc,GAAG,KAAK,QAAQ,KAAK,KAAK;CACxD;CAMA,UAAkB;EACjB,OAAO,GAAG,KAAKA,cAAc;CAC9B;CAEA,MAAMoB,UAAU,WAAsD;EACrE,MAAM,MAAM,KAAKK,QAAQ;EACzB,MAAM,UAAU,MAAM,KAAKV,WAC1B,KACA,KAAKd,kBACL,KAAKE,UACL,KAAKE,QACL,WACA,KAAKG,YAAY,MAClB;EACA,MAAM,QAAQ,KAAKkB,eAAe,SAAS,GAAG;EAC9C,IAAI,MAAM,SAAS,KAAKpB,QACvB,MAAM,IAAI,cAAc,SAAS,mBAAmB,IAAI,0BAA0B;GACjF;GACA,OAAO,MAAM;GACb,OAAO,KAAKA;EACb,CAAC;EAEF,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,MAAM,UAAW,OAAO,QAAQ,KAAK,OAAO,QAAQ,IAAI,CAAE;CACnF;CAWA,aAAaO,SACZ,OACA,aACA,QACe;EACf,MAAM,UAAe,IAAI,MAAM,MAAM,MAAM;EAC3C,MAAM,QAIF;GAAE,QAAQ;GAAG,SAAS;GAAO,YAAY,KAAA;EAAU;EACvD,MAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,aAAa,MAAM,MAAM,EAAE,SACxE,KAAKc,OAAO;GAAE;GAAO;GAAQ;GAAS;EAAM,CAAC,CAC9C;EACA,MAAM,QAAQ,WAAW,OAAO;EAChC,IAAI,MAAM,eAAe,KAAA,GAAW,MAAM,MAAM,WAAW;EAC3D,OAAO;CACR;CAOA,aAAaA,OAAa,MASR;EACjB,SAAS;GACR,IAAI,KAAK,MAAM,SAAS;GACxB,MAAM,QAAQ,KAAK,MAAM;GACzB,KAAK,MAAM,UAAU;GACrB,IAAI,SAAS,KAAK,MAAM,QAAQ;GAChC,MAAM,OAAO,KAAK,MAAM;GACxB,IAAI,SAAS,KAAA,GAAW;GACxB,IAAI;IACH,KAAK,QAAQ,SAAS,MAAM,KAAK,OAAO,IAAI;GAC7C,SAAS,OAAO;IACf,IAAI,KAAK,MAAM,eAAe,KAAA,GAAW,KAAK,MAAM,aAAa,EAAE,MAAM;IACzE,KAAK,MAAM,UAAU;IACrB;GACD;EACD;CACD;CAWA,aAAaZ,WACZ,KACA,SACA,SACA,OACA,WACA,QAKC;EACD,IAAI;EACJ,IAAI,WAAW;EACf,KAAK,IAAI,QAAQ,GAAG,SAAS,SAAS,SAAS,GAAG;GACjD,IAAI,OAAO,SACV,MAAM,IAAI,cAAc,aAAa,yBAAyB;GAE/D,IAAI;IAOH,MAAM,WAAW,MAAM,MAAM,KAAK;KACjC,QAAQ,YAAY,IAAI,CAAC,QAAQ,YAAY,QAAQ,OAAO,CAAC,CAAC;KAC9D,UAAU;IACX,CAAC;IACD,IAAI,SAAS,WAAW,KAAK;KAC5B,MAAM,KAAKa,QAAQ,QAAQ;KAC3B,OAAO,EAAE,MAAM,UAAU;IAC1B;IACA,IACC,SAAS,SAAS,oBACjB,SAAS,UAAU,OAAO,SAAS,SAAS,KAC5C;KACD,WAAW;KACX,4BAAY,IAAI,MAAM,wBAAwB,KAAK;KACnD,MAAM,KAAKA,QAAQ,QAAQ;KAC3B;IACD;IACA,IAAI,CAAC,SAAS,IAAI;KACjB,WAAW,QAAQ,OAAO,SAAS,MAAM;KACzC,4BAAY,IAAI,MAAM,0BAA0B,SAAS,OAAO,OAAO,KAAK;KAC5E,MAAM,KAAKA,QAAQ,QAAQ;KAC3B;IACD;IACA,MAAM,OAAO,MAAM,KAAKC,aAAa,UAAU,KAAK,OAAO,SAAS;IACpE,IAAI,CAAC,KAAK,IAAI;KACb,YAAY,KAAK;KACjB,WAAW,KAAK;KAChB;IACD;IACA,OAAO;KAAE,MAAM;KAAM,MAAM,KAAK;IAAK;GACtC,SAAS,OAAO;IACf,IAAI,OAAO,SACV,MAAM,IAAI,cAAc,aAAa,2BAA2B,EAAE,MAAM,CAAC;IAE1E,YAAY;IACZ,WAAW,KAAKC,eAAe,KAAK;GACrC;EACD;EACA,OAAO;GAAE,MAAM;GAAU,OAAO;GAAW,MAAM;EAAS;CAC3D;CAEA,aAAaF,QAAQ,UAAmC;EACvD,MAAM,SAAS,MAAM,OAAO;CAC7B;CAKA,OAAOE,eAAe,OAAwB;EAC7C,IAAI,EAAE,iBAAiB,QAAQ,OAAO,OAAO,KAAK;EAClD,MAAM,OAAO,KAAKC,WAAW,KAAK;EAClC,OAAO,SAAS,KAAA,IAAY,GAAG,MAAM,QAAQ,IAAI,SAAS,MAAM;CACjE;CAEA,OAAOA,WAAW,OAAkC;EACnD,MAAM,QAAQ,MAAM;EACpB,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO,KAAA;EACxD,IAAI,EAAE,UAAU,QAAQ,OAAO,KAAA;EAC/B,OAAO,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO,KAAA;CACtD;CAQA,aAAaF,aACZ,UACA,KACA,OACA,WAIC;EACD,MAAM,WAAW,SAAS,QAAQ,IAAI,gBAAgB;EACtD,IAAI,aAAa,MAAM;GACtB,MAAM,gBAAgB,OAAO,QAAQ;GACrC,IACC,OAAO,SAAS,aAAa,MAC5B,gBAAgB,SAAS,iBAAiB,UAAU,MAAM,KAC1D;IACD,MAAM,SAAS,MAAM,OAAO;IAC5B,MAAM,YAAY,KAAK,IAAI,OAAO,UAAU,MAAM,CAAC;IACnD,OAAO;KACN,IAAI;KACJ,uBAAO,IAAI,MACV,qBAAqB,IAAI,YAAY,OAAO,aAAa,EAAE,wBAAwB,OAAO,SAAS,EAAE,gBACtG;KACA,MAAM,gCAAgC,OAAO,SAAS,EAAE;IACzD;GACD;EACD;EACA,MAAM,OAAO,SAAS;EACtB,IAAI,SAAS,MAAM,OAAO;GAAE,IAAI;GAAM,MAAM;EAAG;EAC/C,MAAM,SAAS,KAAK,UAAU;EAC9B,MAAM,UAAU,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC;EACxD,MAAM,SAAmB,CAAC;EAC1B,IAAI,QAAQ;EACZ,IAAI;GACH,SAAS;IACR,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;IAC1C,IAAI,MAAM;IACV,SAAS,MAAM;IACf,IAAI,QAAQ,SAAS,MAAM,cAAc,UAAU,MAAM,IAAI;KAC5D,MAAM,OAAO,OAAO;KACpB,MAAM,YAAY,KAAK,IAAI,OAAO,SAAS,UAAU,MAAM,KAAK,MAAM,UAAU;KAChF,UAAU,KAAK,KAAK,IAAI,IAAI,UAAU,MAAM,KAAK,MAAM,UAAU;KACjE,OAAO;MACN,IAAI;MACJ,uBAAO,IAAI,MACV,qBAAqB,IAAI,gBAAgB,OAAO,SAAS,EAAE,gBAC5D;MACA,MAAM,gCAAgC,OAAO,SAAS,EAAE;KACzD;IACD;IACA,UAAU,MAAM,UAAU,MAAM,KAAK,MAAM;IAC3C,OAAO,KAAK,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC;GACpD;GACA,OAAO,KAAK,QAAQ,OAAO,CAAC;EAC7B,SAAS,OAAO;GACf,MAAM,OAAO,OAAO,KAAK,CAAC,CAAC,YAAY,KAAA,CAAS;GAChD,MAAM;EACP,UAAU;GACT,OAAO,YAAY;EACpB;EACA,OAAO;GAAE,IAAI;GAAM,MAAM,OAAO,KAAK,EAAE;EAAE;CAC1C;CAEA,OAAOb,aACN,MACA,OACA,SAIA,SACY;EACZ,MAAM,OAAO,cAAc,MAAM;EACjC,MAAM,QAAQ,UAAU;EACxB,MAAM,WACL,YAAY,KAAA,IAAY,KAAA,IAAY,UAAU,KAAA,IAAY,WAAW,WAAW,KAAK;EACtF,IAAI,QAAQ,SAAS,WACpB,OAAO;GACN;GACA;GACA,SAAS;GACT,WAAW;GACX,MAAM;GACN,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;EAC9C;EAED,IAAI,QAAQ,SAAS,UACpB,OAAO;GACN;GACA;GACA,SAAS;GACT,WAAW;GACX,MAAM,QAAQ;GACd,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;EAC9C;EAED,MAAM,YACL,YAAY,KAAA,KAAa,UAAU,KAAA,KAAa,UAAU,QAAQ,OAAO,YAAY;EACtF,OAAO;GACN;GACA;GACA,SAAS,QAAQ;GACjB;GACA,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;EAC9C;CACD;CAEA,OAAOG,iBACN,MACA,SAIgB;EAChB,IAAI,QAAQ,SAAS,WACpB,OAAO;GACN;GACA,WAAW;GACX,MAAM;EACP;EAED,IAAI,QAAQ,SAAS,UACpB,OAAO;GACN;GACA,WAAW;GACX,MAAM,QAAQ;EACf;EAED,MAAM,SAAS,KAAKa,aAAa,QAAQ,IAAI;EAC7C,IAAI,WAAW,KAAA,GACd,OAAO;GACN;GACA,WAAW;GACX,MAAM;EACP;EAED,OAAO;GACN;GACA;GACA,WAAW;EACZ;CACD;CAEA,OAAOf,eAAe,KAAiB,QAAoC;EAC1E,IAAI,OAAO,cAAc,UACxB,OAAO;GACN,MAAM,IAAI;GACV,OAAO,IAAI;GACX,QAAQ;GACR,WAAW,OAAO;GAClB,MAAM,OAAO;EACd;EAED,OAAO;GACN,MAAM,IAAI;GACV,OAAO,IAAI;GACX,QAAQ,OAAO;GACf,WAAW,iBAAiB,IAAI,OAAO,OAAO,MAAM;EACrD;CACD;CAMA,OAAOS,eACN,SAIA,KACoB;EACpB,IAAI,QAAQ,SAAS,aAAa,QAAQ,SAAS,UAAU;GAC5D,MAAM,OAAO,QAAQ,SAAS,YAAY,aAAa,QAAQ;GAC/D,MAAM,IAAI,cAAc,SAAS,uCAAuC,OAAO;IAAE;IAAK;GAAK,CAAC;EAC7F;EACA,MAAM,SAAS,UAAU,QAAQ,IAAI;EACrC,IAAI,CAAC,SAAS,MAAM,GACnB,MAAM,IAAI,cAAc,SAAS,sCAAsC,OAAO,EAAE,IAAI,CAAC;EAEtF,MAAM,QAAQ,OAAO,KAAK,MAAM;EAChC,IAAI,MAAM,WAAW,KAAK,MAAM,MAAM,SAAS,CAAC,wBAAwB,KAAK,IAAI,CAAC,GACjF,MAAM,IAAI,cAAc,SAAS,sCAAsC,OAAO,EAAE,IAAI,CAAC;EAEtF,OAAO;CACR;CAOA,OAAOL,aACN,SAIoF;EACpF,IAAI,QAAQ,SAAS,WAAW,OAAO;GAAE,SAAS;GAAI,aAAa;GAAI,MAAM;EAAW;EACxF,IAAI,QAAQ,SAAS,UACpB,OAAO;GAAE,SAAS;GAAI,aAAa;GAAI,MAAM,QAAQ;EAAK;EAE3D,MAAM,SAAS,UAAU,QAAQ,IAAI;EACrC,IAAI,WAAW,KAAA,GACd,OAAO;GACN,SAAS;GACT,aAAa;GACb,MAAM;EACP;EAED,IAAI,CAAC,SAAS,MAAM,GACnB,OAAO;GACN,SAAS;GACT,aAAa;GACb,MAAM;EACP;EAED,MAAM,WAAW,aAAa,QAAQ,WAAW;EACjD,MAAM,SAAS,aAAa,UAAU,QAAQ;EAC9C,MAAM,UACL,SAAS,QAAQ,KAAK,OAAO,WAAW,YAAY,gBAAgB,KAAK,MAAM,IAAI,SAAS;EAC7F,MAAM,iBAAiB,aAAa,QAAQ,aAAa;EAGzD,OAAO;GAAE;GAAS,aAFE,qBAAqB,cAAc,IAAI,iBAAiB;GAE7C,MADlB,YAAY,KAAK,2DAA2D;EACrD;CACrC;CAQA,OAAOC,oBACN,SAIsE;EACtE,IAAI,QAAQ,SAAS,WACpB,OAAO;GACN,aAAa,KAAA;GACb,MAAM;EACP;EAED,IAAI,QAAQ,SAAS,UAAU,OAAO;GAAE,aAAa,KAAA;GAAW,MAAM,QAAQ;EAAK;EACnF,MAAM,cAAc,mBAAmB,QAAQ,IAAI;EACnD,OAAO,gBAAgB,KAAA,IACpB;GAAE;GAAa,MAAM;EAAG,IACxB;GAAE,aAAa,KAAA;GAAW,MAAM;EAAsC;CAC1E;CAIA,OAAOC,aAAa,WAAmB,eAA+B;EACrE,MAAM,QAAkB,CAAC;EACzB,IAAI,kBAAkB,IAAI,MAAM,KAAK,yBAAyB,eAAe;EAC7E,IAAI,cAAc,IAAI,MAAM,KAAK,+BAA+B,WAAW;EAC3E,OAAO,MAAM,KAAK,IAAI;CACvB;CAEA,OAAOS,aAAa,MAAkC;EACrD,MAAM,SAAS,UAAU,IAAI;EAC7B,IAAI,CAAC,SAAS,MAAM,GAAG,OAAO,KAAA;EAC9B,MAAM,WAAW,aAAa,QAAQ,WAAW;EACjD,IAAI,CAAC,SAAS,QAAQ,GAAG,OAAO,KAAA;EAChC,MAAM,SAAS,aAAa,UAAU,QAAQ;EAC9C,OAAO,OAAO,WAAW,YAAY,gBAAgB,KAAK,MAAM,IAAI,SAAS,KAAA;CAC9E;CAEA,eAAqB;EACpB,IAAI,KAAKR,YAAY,MAAM,IAAI,cAAc,aAAa,yBAAyB;CACpF;AACD;;;;;;;;;;;;;;;;;;ACt6BA,SAAgB,mBAAmB,SAAsD;CACxF,OAAO,IAAI,aAAa,OAAO;AAChC;;;;;;;;;;;;;;;;AAiBA,SAAgB,WAAW,SAAsC;CAChE,OAAO,IAAI,KAAK,OAAO;AACxB"}
+{"version":3,"file":"index.js","names":["#target","#root","#stage","#backup","#expectations","#created","#staged","#established","#taken","#resolve","#establish","#open","#recover","#claim","#stagePath","#assertOpen","#expectation","#preflight","#promote","#take","#opening","#closing","#emitter","#host","#manifest","#entries","#error","#reconcile","#assertAlive","#accept","#derive","#empty","#hydrate","#apply","#reconfirm","#bind","#rewrite","#recatalog","#redeclare","#purge","#destroyed","#expand","#roots","#expandRaw","#remap","#deferred","#presence","#read","#hydrated","#finish","#open","#copy","#close","#cell","#span","#defaultGuide","#defaultRegistry","#defaultBranch","#defaultTimeout","#defaultConcurrency","#defaultRetries","#defaultBudget","#scope","#unreadable","#emitter","#guideBase","#guideBranch","#guideTimeout","#registryBase","#registryTimeout","#concurrency","#retries","#limit","#budget","#controller","#endpoint","#assertAlive","#accept","#gather","#release","#mirror","#packages","#entry","#destroyed","#error","#read","#registryURL","#latest","#guideURL","#request","#body","#note","#drain"],"sources":["../../../src/server/constants.ts","../../../src/server/validators.ts","../../../src/server/helpers.ts","../../../src/server/WriteTransaction.ts","../../../src/server/Materializer.ts","../../../src/server/Upstream.ts","../../../src/server/factories.ts"],"sourcesContent":["/**\n * The drive prefix a Windows host path may open with.\n *\n * @remarks\n * The one segment allowed to carry a colon. Every other segment is measured by\n * {@link INVALID_SEGMENT_CHARACTER_PATTERN}, which refuses one, so a stream name\n * such as `file.txt:stream` cannot be smuggled through a later segment.\n */\nexport const DRIVE_PATTERN = /^[A-Za-z]:$/\n\n/**\n * Visible characters no host path segment may carry.\n *\n * @remarks\n * Narrower than the core path law by exactly one character: a backslash is a\n * separator on a Windows host rather than a forbidden character, so it is\n * normalized to `/` before the segments are measured instead of refused here.\n */\nexport const INVALID_SEGMENT_CHARACTER_PATTERN = /[<>:\"|?*]/\n\n/**\n * The Windows device names that stay reserved even when an extension follows.\n *\n * @remarks\n * Refused on every host rather than only on Windows. A generated workspace is\n * checked out on all of them, so a directory this package writes on Linux must\n * still be a name Windows can hold.\n */\nexport const RESERVED_SEGMENT_PATTERN =\n\t/^(?:con|prn|aux|nul|com[1-9]|lpt[1-9]|conin\\$|conout\\$)(?:\\..*)?$/i\n\n/**\n * The exact SHA-256 syntax a digest is stated in: sixty-four lowercase hexadecimal digits.\n *\n * @remarks\n * Fixed length, unlike the core byte encoding, because a digest is one value of\n * one algorithm rather than a variable run of bytes. Lowercase only, so two\n * spellings of one digest can never compare unequal.\n */\nexport const DIGEST_PATTERN = /^[0-9a-f]{64}$/\n\n/**\n * The Git branch syntax the guide endpoint accepts.\n *\n * @remarks\n * A branch is caller-supplied and reaches a URL path, so it is closed to\n * alphanumerics, dot, underscore, hyphen, and the separator, must open with an\n * alphanumeric, and may carry no `..` anywhere. That last refusal is what stops\n * a branch from walking out of the guide directory it addresses.\n */\nexport const BRANCH_PATTERN = /^(?!.*\\.\\.)[A-Za-z0-9][A-Za-z0-9._/-]*$/\n\n/**\n * Maximum UTF-8 bytes one host path segment may encode to.\n *\n * @remarks\n * The limit every supported filesystem shares for a single name. It is a byte\n * count rather than a character count, because that is the unit the filesystem\n * imposes it in: eighty-six three-byte characters are already past it.\n */\nexport const MAX_PATH_SEGMENT_BYTES = 255\n\n/**\n * Maximum segments one host path may carry.\n *\n * @remarks\n * Bounds the work a path decision costs before any filesystem call is made. With\n * {@link MAX_PATH_SEGMENT_BYTES} it is also the real length ceiling of an\n * accepted path, well inside the core character ceiling.\n */\nexport const MAX_PATH_DEPTH = 64\n\n/**\n * Maximum paths one target's working-tree inventory may report.\n *\n * @remarks\n * Far above the core collection ceiling, and deliberately so. A tracked or dirty\n * path list is the target repository's own fact rather than an argument a caller\n * authored, so measuring it against the ceiling that bounds a public collection\n * would read a legitimately large checkout as hostile and refuse the deletion\n * verb on it.\n */\nexport const MAX_INVENTORY_PATHS = 100_000\n\n/** Maximum characters one caller-supplied upstream endpoint may carry. */\nexport const MAX_ENDPOINT_LENGTH = 2_048\n\n/** Maximum characters one guide branch may carry. */\nexport const MAX_BRANCH_LENGTH = 255\n\n/**\n * Maximum simultaneous upstream requests.\n *\n * @remarks\n * A ceiling rather than a default: the reader picks what it opens by, and this\n * is only what a caller may raise it to.\n */\nexport const MAX_UPSTREAM_CONCURRENCY = 64\n\n/** Maximum retries one upstream request may be given after a transport fault. */\nexport const MAX_UPSTREAM_RETRIES = 5\n\n/** Maximum timeout one upstream request may be given, in milliseconds. */\nexport const MAX_UPSTREAM_TIMEOUT = 300_000\n\n/**\n * The reserved metadata name a staged vendored host writes at its own root.\n *\n * @remarks\n * The one name a vendored file may never claim, because the staged root holds\n * the manifest under it. The producer refuses a storage name equal to it and the\n * reader looks for exactly this file, so both sides read one constant rather\n * than repeating a literal that only agrees by inspection.\n */\nexport const MANIFEST_NAME = 'manifest.json'\n","import type { Guard } from '@orkestrel/contract'\nimport type { EmitterHooks } from '@orkestrel/emitter'\nimport type { CatalogEntry, Dependency, Mirror } from '@src/core'\nimport type {\n\tHostManifest,\n\tManifestEntry,\n\tMaterializerEventMap,\n\tMaterializerOptions,\n\tRepository,\n\tUpstreamEventMap,\n\tUpstreamOptions,\n} from './types.js'\nimport {\n\tandOf,\n\tarrayOf,\n\tboundsOf,\n\tholds,\n\tisArray,\n\tisBoolean,\n\tisFunction,\n\tisInteger,\n\tisString,\n\trecordOf,\n\tstringOf,\n} from '@orkestrel/contract'\nimport {\n\tcomputeBytes,\n\tCONTROL_CHARACTER_PATTERN,\n\tisCatalogEntry,\n\tisCollection,\n\tisDependency,\n\tisDependencyName,\n\tisMirror,\n\tisPath,\n\tMAX_ARTIFACT_BYTES,\n\tMAX_PATH_LENGTH,\n\tMAX_TOTAL_ARTIFACT_BYTES,\n} from '@src/core'\nimport {\n\tBRANCH_PATTERN,\n\tDIGEST_PATTERN,\n\tDRIVE_PATTERN,\n\tINVALID_SEGMENT_CHARACTER_PATTERN,\n\tMAX_BRANCH_LENGTH,\n\tMAX_ENDPOINT_LENGTH,\n\tMAX_INVENTORY_PATHS,\n\tMAX_PATH_DEPTH,\n\tMAX_PATH_SEGMENT_BYTES,\n\tMAX_UPSTREAM_CONCURRENCY,\n\tMAX_UPSTREAM_RETRIES,\n\tMAX_UPSTREAM_TIMEOUT,\n\tRESERVED_SEGMENT_PATTERN,\n} from './constants.js'\n\n/**\n * Narrow a value to a path naming a location on this host.\n *\n * @param value - The candidate host path.\n * @returns `true` for a bounded absolute or relative path whose every segment is\n * portable across the supported filesystems.\n *\n * @remarks\n * The counterpart to the core path law, not a copy of it. A target directory and\n * the vendored host root are locations on the machine rather than paths inside a\n * workspace, so a drive prefix, a UNC share, and a backslash separator are all\n * admitted here and `..` is a legitimate way to name a sibling directory.\n * Containment is still enforced, but by the core law over the artifact paths\n * written beneath the target, not by this one.\n *\n * What it does refuse is a segment no supported filesystem can hold: an empty\n * one, a reserved Windows device name, a trailing dot or space, a wildcard or\n * redirection character, a colon anywhere but the drive prefix, and a name past\n * the byte ceiling. The character ceiling is read first so an oversized string is\n * refused before it is split.\n *\n * @example\n * ```ts\n * import { isFilesystemPath } from '@orkestrel/scaffold/server'\n *\n * isFilesystemPath('C:/Users/sample/project') // true\n * isFilesystemPath('../sibling') // true\n * isFilesystemPath('project/nul') // false\n * ```\n */\nexport function isFilesystemPath(value: unknown): value is string {\n\treturn holds(() => {\n\t\tif (!isString(value) || value.length === 0 || value.length > MAX_PATH_LENGTH) return false\n\t\tif (CONTROL_CHARACTER_PATTERN.test(value)) return false\n\t\tconst normalized = value.replaceAll('\\\\', '/')\n\t\t// A UNC share and a POSIX root are prefixes rather than segments, so the\n\t\t// root comes off before the segment law applies to what remains.\n\t\tconst rooted = normalized.startsWith('//')\n\t\t\t? normalized.slice(2)\n\t\t\t: normalized.startsWith('/')\n\t\t\t\t? normalized.slice(1)\n\t\t\t\t: normalized\n\t\tconst segments = rooted.split('/')\n\t\tif (segments.length > MAX_PATH_DEPTH) return false\n\t\tfor (const [index, segment] of segments.entries()) {\n\t\t\tif (segment === '.' || segment === '..') continue\n\t\t\tif (index === 0 && DRIVE_PATTERN.test(segment)) continue\n\t\t\tif (segment.length === 0) return false\n\t\t\tif (INVALID_SEGMENT_CHARACTER_PATTERN.test(segment)) return false\n\t\t\tif (segment.endsWith('.') || segment.endsWith(' ')) return false\n\t\t\tif (computeBytes(segment) > MAX_PATH_SEGMENT_BYTES) return false\n\t\t\tif (RESERVED_SEGMENT_PATTERN.test(segment)) return false\n\t\t}\n\t\treturn true\n\t})\n}\n\n/**\n * Narrow a value to one exact SHA-256 digest.\n *\n * @remarks\n * The identity a vendored host manifest and a write precondition are both stated\n * in. Fixed at sixty-four lowercase digits, so the value either is a digest of\n * that algorithm or is refused; there is no shorter or longer accepted form.\n *\n * @example\n * ```ts\n * import { isDigest } from '@orkestrel/scaffold/server'\n *\n * isDigest('e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855') // true\n * isDigest('E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855') // false\n * ```\n */\nexport const isDigest: Guard<string> = stringOf({ pattern: DIGEST_PATTERN })\n\n/**\n * Narrow a value to a working-tree inventory within the limit one target may report.\n *\n * @param value - The candidate inventory.\n * @returns `true` for an array of no more than `MAX_INVENTORY_PATHS` items.\n *\n * @remarks\n * Compose this ahead of an element guard exactly as the core collection guard is\n * composed, and for the same reason: the item count is settled before anything\n * walks the items, and a hostile `length` accessor answers `false` rather than\n * escaping as a throw. It exists beside that guard rather than reusing it\n * because the two bound different things — one bounds what a caller may hand a\n * public method, this one bounds what a checkout may contain.\n *\n * @example\n * ```ts\n * import { isInventory } from '@orkestrel/scaffold/server'\n *\n * isInventory(['AGENTS.md']) // true\n * isInventory('AGENTS.md') // false\n * ```\n */\nexport function isInventory(value: unknown): value is readonly unknown[] {\n\treturn holds(() => isArray(value) && value.length <= MAX_INVENTORY_PATHS)\n}\n\n/**\n * Narrow a value to a bounded upstream endpoint.\n *\n * @remarks\n * Length only. Which schemes and hosts an endpoint may name is the reader's law,\n * because it builds the request and can report why one was refused, where a\n * guard has only `false` to say.\n */\nexport const isEndpoint: Guard<string> = stringOf({ min: 1, max: MAX_ENDPOINT_LENGTH })\n\n/**\n * Narrow a value to a Git branch the guide endpoint accepts.\n *\n * @remarks\n * A branch reaches the guide URL's path, so the syntax is closed rather than\n * merely bounded and no `..` is admitted anywhere in it.\n *\n * @example\n * ```ts\n * import { isBranch } from '@orkestrel/scaffold/server'\n *\n * isBranch('main') // true\n * isBranch('main/../etc') // false\n * ```\n */\nexport const isBranch: Guard<string> = stringOf({\n\tmin: 1,\n\tmax: MAX_BRANCH_LENGTH,\n\tpattern: BRANCH_PATTERN,\n})\n\n/**\n * Narrow a value to a per-request timeout in milliseconds.\n *\n * @remarks\n * A whole number of milliseconds, at least one and no more than\n * {@link MAX_UPSTREAM_TIMEOUT}. Zero is refused because a request that may not\n * take any time is a request that cannot succeed.\n */\nexport const isTimeout: Guard<number> = andOf(isInteger, boundsOf(1, MAX_UPSTREAM_TIMEOUT))\n\n/**\n * Narrow a value to a bounded list of `@orkestrel` package names.\n *\n * @remarks\n * Composed from the core collection and dependency-name guards rather than\n * restated, so the scope law that keeps a derived guide mirror inside its\n * directory has exactly one home.\n *\n * @example\n * ```ts\n * import { isDependencyNames } from '@orkestrel/scaffold/server'\n *\n * isDependencyNames(['@orkestrel/router']) // true\n * isDependencyNames(['router']) // false\n * ```\n */\nexport const isDependencyNames: Guard<readonly string[]> = andOf(\n\tisCollection,\n\tarrayOf(isDependencyName),\n)\n\n/** Narrow a value to a bounded list of declared runtime dependencies. */\nexport const isDependencies: Guard<readonly Dependency[]> = andOf(\n\tisCollection,\n\tarrayOf(isDependency),\n)\n\n/** Narrow a value to a bounded list of fetched guide mirrors. */\nexport const isMirrors: Guard<readonly Mirror[]> = andOf(isCollection, arrayOf(isMirror))\n\n/** Narrow a value to a bounded list of fleet catalog rows. */\nexport const isCatalogEntries: Guard<readonly CatalogEntry[]> = andOf(\n\tisCollection,\n\tarrayOf(isCatalogEntry),\n)\n\n/**\n * Narrow a value to one {@link ManifestEntry}.\n *\n * @remarks\n * Both paths are measured by the core path law, because a vendored host's\n * storage name and the destination it maps to are each a path inside a\n * workspace. That is what stops a hand-edited manifest from mapping a vendored\n * file to a destination outside the target.\n *\n * @example\n * ```ts\n * import { isManifestEntry } from '@orkestrel/scaffold/server'\n *\n * isManifestEntry({ storage: 'AGENTS.md', destination: 'AGENTS.md', executable: false }) // true\n * ```\n */\nexport const isManifestEntry: Guard<ManifestEntry> = recordOf({\n\tstorage: isPath,\n\tdestination: isPath,\n\texecutable: isBoolean,\n})\n\n/**\n * Narrow a value to one {@link HostManifest}.\n *\n * @remarks\n * The manifest is read from a directory a caller named, so it is the least\n * trusted value the server face handles and is guarded whole: every entry, every\n * declared root, and the digest that authenticates their membership.\n */\nexport const isHostManifest: Guard<HostManifest> = recordOf({\n\tentries: andOf(isCollection, arrayOf(isManifestEntry)),\n\troots: andOf(isCollection, arrayOf(isPath)),\n\tdigest: isDigest,\n})\n\n/**\n * Narrow a value to a {@link Repository}.\n *\n * @remarks\n * Both path lists are target-relative, so both are measured by the core path\n * law: a reported path that is not one this package could have planned is not a\n * path it will delete. The inventory guard bounds the lists, because a checkout\n * is legitimately far larger than any collection a caller hands a method.\n *\n * @example\n * ```ts\n * import { isRepository } from '@orkestrel/scaffold/server'\n *\n * isRepository({ tracked: ['AGENTS.md'], dirty: [] }) // true\n * isRepository({ tracked: ['../secrets'], dirty: [] }) // false\n * ```\n */\nexport const isRepository: Guard<Repository> = recordOf({\n\ttracked: andOf(isInventory, arrayOf(isPath)),\n\tdirty: andOf(isInventory, arrayOf(isPath)),\n})\n\n/**\n * Narrow a value to the materializer's initial listener record.\n *\n * @remarks\n * Every event is optional and every declared value is a function. A key outside\n * the materializer's event map is refused, so a listener wired to a misspelled\n * event fails at construction instead of never firing.\n */\nexport const isMaterializerHooks: Guard<EmitterHooks<MaterializerEventMap>> = recordOf(\n\t{\n\t\twrite: isFunction,\n\t\tremove: isFunction,\n\t\tfinish: isFunction,\n\t\terror: isFunction,\n\t\tdestroy: isFunction,\n\t},\n\ttrue,\n)\n\n/**\n * Narrow a value to {@link MaterializerOptions}.\n *\n * @example\n * ```ts\n * import { isMaterializerOptions } from '@orkestrel/scaffold/server'\n *\n * isMaterializerOptions({}) // true\n * isMaterializerOptions({ host: 'dist/host*' }) // false\n * ```\n */\nexport const isMaterializerOptions: Guard<MaterializerOptions> = recordOf(\n\t{ host: isFilesystemPath, on: isMaterializerHooks, error: isFunction },\n\ttrue,\n)\n\n/**\n * Narrow a value to the upstream reader's initial listener record.\n *\n * @remarks\n * Closed to the reader's own four events for the same reason the materializer's\n * record is closed to its five.\n */\nexport const isUpstreamHooks: Guard<EmitterHooks<UpstreamEventMap>> = recordOf(\n\t{ release: isFunction, mirror: isFunction, error: isFunction, destroy: isFunction },\n\ttrue,\n)\n\n/**\n * Narrow a value to {@link UpstreamOptions}.\n *\n * @remarks\n * Each grouped endpoint is closed to its own leaves, so a setting written under\n * the wrong entity is refused rather than ignored. Every numeric leaf is a whole\n * number inside a ceiling: an unbounded concurrency, retry count, response\n * limit, or call budget is a way to exhaust the caller, so the ceiling is stated\n * here rather than left to the reader. The two byte ceilings are the core\n * artifact and total-artifact limits, because a fetched guide is an artifact and\n * a whole call retains no more than a whole plan.\n *\n * @example\n * ```ts\n * import { isUpstreamOptions } from '@orkestrel/scaffold/server'\n *\n * isUpstreamOptions({ guides: { branch: 'main' }, concurrency: 4 }) // true\n * isUpstreamOptions({ concurrency: 0 }) // false\n * ```\n */\nexport const isUpstreamOptions: Guard<UpstreamOptions> = recordOf(\n\t{\n\t\tguides: recordOf({ base: isEndpoint, branch: isBranch, timeout: isTimeout }, true),\n\t\tregistry: recordOf({ base: isEndpoint, timeout: isTimeout }, true),\n\t\tconcurrency: andOf(isInteger, boundsOf(1, MAX_UPSTREAM_CONCURRENCY)),\n\t\tretries: andOf(isInteger, boundsOf(0, MAX_UPSTREAM_RETRIES)),\n\t\tlimit: andOf(isInteger, boundsOf(1, MAX_ARTIFACT_BYTES)),\n\t\tbudget: andOf(isInteger, boundsOf(1, MAX_TOTAL_ARTIFACT_BYTES)),\n\t\ton: isUpstreamHooks,\n\t\terror: isFunction,\n\t},\n\ttrue,\n)\n","import type { Snapshot } from '@src/core'\nimport type {\n\tHostManifest,\n\tManifestEntry,\n\tWriteAnchor,\n\tWriteExpectation,\n\tWritePrecondition,\n} from './types.js'\nimport { createHash } from 'node:crypto'\nimport {\n\tchmodSync,\n\tcloseSync,\n\tconstants,\n\tcopyFileSync,\n\tfstatSync,\n\tlstatSync,\n\tmkdirSync,\n\topendirSync,\n\topenSync,\n\treaddirSync,\n\treadSync,\n\trealpathSync,\n\twriteFileSync,\n} from 'node:fs'\nimport { basename, dirname, join, parse, relative, resolve, sep } from 'node:path'\nimport { attempt, holds, isError, parseJSONAs } from '@orkestrel/contract'\nimport {\n\tbytesToHex,\n\tHOST_PATHS,\n\tisCollection,\n\tisPath,\n\tMAX_ARTIFACT_BYTES,\n\tMAX_COLLECTION_ITEMS,\n\tMAX_MANIFEST_BYTES,\n\tMAX_TOTAL_ARTIFACT_BYTES,\n\tScaffoldError,\n} from '@src/core'\nimport { isFilesystemPath, isHostManifest } from './validators.js'\nimport { MANIFEST_NAME, MAX_INVENTORY_PATHS, MAX_PATH_DEPTH } from './constants.js'\n\n/**\n * Test whether a caught filesystem error reports an absent path.\n *\n * @param error - The caught value.\n * @returns `true` only for an `Error` whose `code` is exactly `ENOENT`.\n *\n * @remarks\n * The one place absence is told apart from failure. Every read here answers\n * `undefined` or an empty result for a path that is not there and reports a path\n * that is there but unreadable, so the two must never be read from the same\n * caught value by eye. Total for any caught value, including a hostile one.\n *\n * @example\n * ```ts\n * import { matchesMissingPath } from '@orkestrel/scaffold/server'\n *\n * matchesMissingPath(Object.assign(new Error('gone'), { code: 'ENOENT' })) // true\n * matchesMissingPath(new Error('gone')) // false\n * ```\n */\nexport function matchesMissingPath(error: unknown): boolean {\n\treturn holds(() => isError(error) && Reflect.get(error, 'code') === 'ENOENT')\n}\n\n/**\n * Test whether a path addresses a target's own repository metadata.\n *\n * @param path - The path to classify; either separator is read.\n * @returns `true` for `.git` and for anything beneath it.\n *\n * @remarks\n * The one home of the `.git` membership rule, read from two directions. A target\n * holding nothing but this directory is still vacant, because a checkout of an\n * empty repository is where a fresh workspace legitimately starts. A path\n * beneath it is never removed and never vendored, because deleting a target's\n * history is not a repair.\n *\n * @example\n * ```ts\n * import { matchesGitPath } from '@orkestrel/scaffold/server'\n *\n * matchesGitPath('.git') // true\n * matchesGitPath('.git/config') // true\n * matchesGitPath('.gitignore') // false\n * ```\n */\nexport function matchesGitPath(path: string): boolean {\n\treturn /(?:^|\\/)\\.git(?:\\/|$)/i.test(path.replaceAll('\\\\', '/'))\n}\n\n/**\n * Test whether a target-relative path is one no verb may delete.\n *\n * @param path - The target-relative path to classify.\n * @returns `true` when the path must survive every verb this package runs.\n *\n * @remarks\n * The deletion deny-list, stated as a rule over paths rather than as a list of\n * directories. It is the inversion the contract asks for: the candidate set\n * comes from an audit's foreign findings narrowed by what git tracks, and this\n * is what that set is then measured against. Repository metadata is protected\n * because losing history is not a repair, and a target's own `src` and `app`\n * trees are protected because a workspace's source is the one thing scaffold\n * never plans and never owns, whatever an audit reports about it.\n *\n * @example\n * ```ts\n * import { matchesProtectedPath } from '@orkestrel/scaffold/server'\n *\n * matchesProtectedPath('src/core/index.ts') // true\n * matchesProtectedPath('.git/config') // true\n * matchesProtectedPath('.claude/agents/rogue.md') // false\n * ```\n */\nexport function matchesProtectedPath(path: string): boolean {\n\tconst normalized = path.replaceAll('\\\\', '/')\n\tif (matchesGitPath(normalized)) return true\n\tif (normalized === 'src' || normalized === 'app') return true\n\treturn normalized.startsWith('src/') || normalized.startsWith('app/')\n}\n\n/**\n * Test whether a path names local configuration or a credential.\n *\n * @param path - The path to classify; either separator is read.\n * @returns `true` when the path must never be copied into a vendored host.\n *\n * @remarks\n * The vendoring deny-list. A host root is staged from a real checkout, so the\n * refusal is stated over the path rather than over the file's content: a\n * credential is recognizable by where it sits and what it is called long before\n * anything reads it. Repository metadata is included through\n * {@link matchesGitPath}, so one call answers the whole question and no caller\n * has to remember to ask twice.\n *\n * @example\n * ```ts\n * import { matchesSensitivePath } from '@orkestrel/scaffold/server'\n *\n * matchesSensitivePath('.npmrc') // true\n * matchesSensitivePath('.claude/settings.local.json') // true\n * matchesSensitivePath('.claude/settings.json') // false\n * ```\n */\nexport function matchesSensitivePath(path: string): boolean {\n\tconst normalized = path.replaceAll('\\\\', '/')\n\tif (matchesGitPath(normalized)) return true\n\treturn /(?:^|\\/)(?:(?:\\.ssh|\\.aws|\\.azure|\\.docker|\\.kube|\\.gnupg|\\.env(?:\\.[^/]*)?)(?:\\/|$)|(?:\\.npmrc|\\.pypirc|\\.netrc|\\.git-credentials|settings\\.local\\.json|auth\\.json|credentials(?:\\.json)?|application_default_credentials\\.json|id_rsa|id_ed25519|kubeconfig)$|\\.config\\/(?:gh|gcloud)(?:\\/|$)|\\.local\\/share\\/keyrings(?:\\/|$)|[^/]*service-account[^/]*\\.json$|[^/]*\\.(?:jks|key|p12|pem|pfx|pkcs12)$)/i.test(\n\t\tnormalized,\n\t)\n}\n\n/**\n * Project a target-relative path to the storage name a vendored host holds it under.\n *\n * @param path - The target-relative path the file is written to.\n * @returns The storage name beneath the host root.\n *\n * @remarks\n * A staged host is a plain directory that npm packs, and npm's own ignore rules\n * would drop a leading-dot entry from the tarball. So every dot that opens a\n * segment comes off, and a dotted file at the root moves under `dotfiles/` to\n * keep it from colliding with an undotted sibling of the same name. The mapping\n * is one direction only: a staged host's manifest records the destination each\n * storage name answers for, so the reader never re-derives this.\n *\n * @example\n * ```ts\n * import { pathToStorage } from '@orkestrel/scaffold/server'\n *\n * pathToStorage('.gitignore') // 'dotfiles/gitignore'\n * pathToStorage('.claude/rules/names.md') // 'claude/rules/names.md'\n * pathToStorage('AGENTS.md') // 'AGENTS.md'\n * ```\n */\nexport function pathToStorage(path: string): string {\n\tconst segments = path.split('/')\n\tif (segments.length === 1) {\n\t\treturn path.startsWith('.') ? `dotfiles/${path.slice(1)}` : path\n\t}\n\treturn segments.map((segment) => (segment.startsWith('.') ? segment.slice(1) : segment)).join('/')\n}\n\n/**\n * Compute the SHA-256 digest of text.\n *\n * @param content - The text to digest.\n * @returns Sixty-four lowercase hexadecimal digits.\n *\n * @remarks\n * The identity the server face states, and the reason it differs from core's:\n * core settled on a folded 64-bit identity because compilation is synchronous by\n * contract and the only cryptographic digest a host-independent scope reaches is\n * asynchronous. A Node host reaches the real one synchronously, and\n * `HostManifest.digest` is documented as SHA-256, so this is what the server\n * uses everywhere a digest is claimed.\n *\n * @example\n * ```ts\n * import { computeDigest } from '@orkestrel/scaffold/server'\n *\n * computeDigest('hi\\n') // '98ea6e4f216f2fb4b69fff9b3a44842c38686ca685f3f55dc48c5d3fb1107be4'\n * ```\n */\nexport function computeDigest(content: string): string {\n\treturn createHash('sha256').update(content, 'utf8').digest('hex')\n}\n\n/**\n * Compute the digest of a vendored host's declared membership.\n *\n * @param entries - The ordered file membership declarations.\n * @param roots - The ordered directory membership declarations.\n * @returns The SHA-256 of that exact membership, in that exact order.\n *\n * @remarks\n * Independent of the manifest's own `digest` field, which is what lets a reader\n * detect a membership edit that did not update it. Order is part of the claim\n * rather than normalized away, because a staged manifest sorts its entries and\n * roots once and a reordered copy is a different file. Each entry is projected\n * to exactly the three declared fields, so a hand-added property cannot ride\n * into the digest and cannot change it either.\n *\n * @example\n * ```ts\n * import { computeManifestDigest } from '@orkestrel/scaffold/server'\n *\n * computeManifestDigest([], []) // the digest of the empty membership\n * ```\n */\nexport function computeManifestDigest(\n\tentries: readonly ManifestEntry[],\n\troots: readonly string[],\n): string {\n\treturn computeDigest(\n\t\tJSON.stringify({\n\t\t\tentries: entries.map((entry) => ({\n\t\t\t\tstorage: entry.storage,\n\t\t\t\tdestination: entry.destination,\n\t\t\t\texecutable: entry.executable,\n\t\t\t})),\n\t\t\troots: [...roots],\n\t\t}),\n\t)\n}\n\n/**\n * Test whether a path is a physical file this package will read or replace.\n *\n * @param path - The resolved host path to inspect, without following links.\n * @returns `true` only for a regular file that is neither a link nor hard-linked\n * elsewhere.\n *\n * @remarks\n * The link tests are the point. A symbolic link is a path pointing somewhere\n * else, so writing through one writes outside the target; a hard link means a\n * second name shares the same bytes, so replacing them changes a file nobody\n * asked about. Both are refused rather than followed.\n *\n * @example\n * ```ts\n * import { isPhysicalFile } from '@orkestrel/scaffold/server'\n *\n * isPhysicalFile('/tmp/project/AGENTS.md') // true for a plain file\n * ```\n */\nexport function isPhysicalFile(path: string): boolean {\n\tconst status = attempt(() => lstatSync(path))\n\treturn (\n\t\tstatus.success &&\n\t\tstatus.value.isFile() &&\n\t\t!status.value.isSymbolicLink() &&\n\t\tstatus.value.nlink === 1\n\t)\n}\n\n/**\n * Test whether a path is a physical file with exact on-disk casing.\n *\n * @param path - The host path to inspect segment by segment.\n * @returns `true` only for a physical file whose requested segments exactly\n * match the names each parent directory stores.\n *\n * @remarks\n * A direct file lookup follows the host's case-folding rules on Windows and\n * common macOS filesystems. Reading each parent directory supplies the stored\n * names, so this predicate can enforce the package's exact-case structural\n * contract on every supported host.\n *\n * @example\n * ```ts\n * import { isExactCaseFile } from '@orkestrel/scaffold/server'\n *\n * isExactCaseFile('/tmp/project/src/bin/main.ts') // true only for that exact spelling\n * ```\n */\nexport function isExactCaseFile(path: string): boolean {\n\tconst full = resolve(path)\n\tif (!isPhysicalFile(full)) return false\n\tconst root = parse(full).root\n\tconst segments = relative(root, full).split(sep)\n\tlet parent = root\n\tfor (const segment of segments) {\n\t\tconst entries = attempt(() => readdirSync(parent))\n\t\tif (entries.success) {\n\t\t\tif (!entries.value.includes(segment)) return false\n\t\t} else {\n\t\t\tconst actual = attempt(() => realpathSync.native(join(parent, segment)))\n\t\t\tif (!actual.success || basename(actual.value) !== segment) return false\n\t\t}\n\t\tparent = join(parent, segment)\n\t}\n\treturn true\n}\n\n/**\n * Test whether a path is a physical directory this package will read or write into.\n *\n * @param path - The resolved host path to inspect, without following links.\n * @returns `true` only for a directory that is not a link.\n *\n * @remarks\n * A junction and a directory symbolic link both report as directories once\n * followed, so the inspection deliberately does not follow: a redirected\n * directory is refused here rather than silently accepted as the one the caller\n * named.\n *\n * @example\n * ```ts\n * import { isPhysicalDirectory } from '@orkestrel/scaffold/server'\n *\n * isPhysicalDirectory('/tmp/project') // true for a plain directory\n * ```\n */\nexport function isPhysicalDirectory(path: string): boolean {\n\tconst status = attempt(() => lstatSync(path))\n\treturn status.success && status.value.isDirectory() && !status.value.isSymbolicLink()\n}\n\n/**\n * Compute the SHA-256 digest of one file's exact bytes.\n *\n * @param path - The resolved host path to digest.\n * @returns The digest, or `undefined` when the path is not a physical file, is\n * past the artifact ceiling, or moved while it was being read.\n *\n * @remarks\n * Read in bounded chunks rather than loaded whole, so digesting a large file\n * costs one buffer instead of its size. The file's identity and size are\n * measured before and after the read and a mismatch answers `undefined`, so a\n * digest is either of one settled file or is not produced at all.\n *\n * @example\n * ```ts\n * import { computeFileDigest } from '@orkestrel/scaffold/server'\n *\n * computeFileDigest('/tmp/project/AGENTS.md') // the file's SHA-256\n * computeFileDigest('/tmp/project/absent.md') // undefined\n * ```\n */\nexport function computeFileDigest(path: string): string | undefined {\n\tif (!isPhysicalFile(path)) return undefined\n\tconst opened = attempt(() => openSync(path, 'r'))\n\tif (!opened.success) return undefined\n\tconst handle = opened.value\n\tconst read = attempt(() => {\n\t\tconst before = fstatSync(handle)\n\t\tif (!before.isFile() || before.nlink !== 1 || before.size > MAX_ARTIFACT_BYTES) return undefined\n\t\tconst hash = createHash('sha256')\n\t\tconst buffer = Buffer.alloc(65_536)\n\t\tlet size = 0\n\t\tfor (;;) {\n\t\t\tconst length = readSync(handle, buffer, 0, buffer.byteLength, null)\n\t\t\tif (length === 0) break\n\t\t\tsize += length\n\t\t\tif (size > MAX_ARTIFACT_BYTES) return undefined\n\t\t\thash.update(buffer.subarray(0, length))\n\t\t}\n\t\tconst after = fstatSync(handle)\n\t\tif (size !== before.size || after.size !== before.size || after.mtimeMs !== before.mtimeMs) {\n\t\t\treturn undefined\n\t\t}\n\t\treturn hash.digest('hex')\n\t})\n\tattempt(() => closeSync(handle))\n\treturn read.success ? read.value : undefined\n}\n\n/**\n * Resolve a path through the real filesystem, keeping the part that does not exist yet.\n *\n * @param path - The absolute or relative host path to resolve.\n * @returns The path with its existing prefix resolved through every link, or\n * `undefined` when the text is not a host path, no bounded existing ancestor\n * resolves, or an ancestor cannot be read.\n *\n * @remarks\n * A containment decision has to be made about a destination that does not exist\n * yet, and a lexical answer is not enough: a link anywhere in the existing\n * prefix moves the destination somewhere the text never named. So the deepest\n * existing ancestor is resolved and the remaining segments are re-joined onto\n * it. The climb is bounded by the path-depth ceiling, so an adversarial path\n * cannot make it walk indefinitely.\n *\n * @example\n * ```ts\n * import { resolveRealPath } from '@orkestrel/scaffold/server'\n *\n * resolveRealPath('./packages/new/src') // the real path of `packages`, plus `new/src`\n * ```\n */\nexport function resolveRealPath(path: string): string | undefined {\n\tif (!isFilesystemPath(path)) return undefined\n\tlet current = resolve(path)\n\tconst pending: string[] = []\n\tfor (let depth = 0; depth <= MAX_PATH_DEPTH; depth += 1) {\n\t\tconst real = attempt(() => realpathSync(current))\n\t\tif (real.success) {\n\t\t\tlet physical = real.value\n\t\t\tfor (const segment of pending) physical = join(physical, segment)\n\t\t\treturn physical\n\t\t}\n\t\tif (!matchesMissingPath(real.error)) return undefined\n\t\tconst parent = dirname(current)\n\t\tif (parent === current) return undefined\n\t\tpending.unshift(relative(parent, current))\n\t\tcurrent = parent\n\t}\n\treturn undefined\n}\n\n/**\n * Resolve a root-relative path and refuse one that leaves its root.\n *\n * @param root - The containing host directory.\n * @param path - The portable root-relative path.\n * @returns The destination as this package will address it, or `undefined` when\n * either argument is off contract or the destination lies outside `root`.\n *\n * @remarks\n * The containment law, and the one door every read in this module goes through.\n * Both sides are resolved through the real filesystem before they are compared,\n * so a link planted inside the root cannot smuggle a destination out of it; the\n * answer is then the lexical join, so the caller operates on the path it named\n * rather than on a resolved form the target may not recognize.\n *\n * Comparison is exact text, which fails closed on a case-insensitive\n * filesystem: a root and a path spelled with different case resolve to\n * different strings there and are refused, never wrongly admitted.\n *\n * @example\n * ```ts\n * import { resolveContainedPath } from '@orkestrel/scaffold/server'\n *\n * resolveContainedPath('/tmp/project', 'guides/router.md') // '/tmp/project/guides/router.md'\n * resolveContainedPath('/tmp/project', '../secrets') // undefined\n * ```\n */\nexport function resolveContainedPath(root: string, path: string): string | undefined {\n\tif (!isFilesystemPath(root) || !isPath(path)) return undefined\n\tconst base = resolve(root)\n\tconst destination = join(base, path)\n\tconst physicalRoot = resolveRealPath(base)\n\tconst physical = resolveRealPath(destination)\n\tif (physicalRoot === undefined || physical === undefined) return undefined\n\tif (physical !== physicalRoot && !physical.startsWith(physicalRoot + sep)) return undefined\n\treturn destination\n}\n\n/**\n * Test whether a target is safe to write a fresh workspace into.\n *\n * @param target - The candidate target directory.\n * @returns `true` when the target is absent, empty, or holds nothing but its own\n * `.git` directory.\n *\n * @remarks\n * The green-field law. A checkout of an empty repository is where a new\n * workspace legitimately starts, so that one directory is admitted and nothing\n * else is; anything more means the caller is repairing a workspace rather than\n * creating one. Only the first two entries are read, so the answer costs the\n * same on an empty directory and on a full one.\n *\n * @example\n * ```ts\n * import { isVacant } from '@orkestrel/scaffold/server'\n *\n * isVacant('./packages/router-new') // true when absent, empty, or `.git` only\n * ```\n */\nexport function isVacant(target: string): boolean {\n\tif (!isFilesystemPath(target)) return false\n\tconst status = attempt(() => lstatSync(target))\n\tif (!status.success) return matchesMissingPath(status.error)\n\tif (!status.value.isDirectory() || status.value.isSymbolicLink()) return false\n\tconst opened = attempt(() => opendirSync(target))\n\tif (!opened.success) return false\n\tconst handle = opened.value\n\tconst read = attempt(() => {\n\t\tconst first = handle.readSync()\n\t\tif (first === null) return true\n\t\tif (handle.readSync() !== null) return false\n\t\treturn matchesGitPath(first.name) && first.isDirectory() && !first.isSymbolicLink()\n\t})\n\tattempt(() => handle.closeSync())\n\treturn read.success && read.value\n}\n\n/**\n * List a directory's files as sorted root-relative paths.\n *\n * @param root - The directory to inventory.\n * @returns Every descendant file as a `/`-separated root-relative path, in\n * code-unit order, and `[]` when `root` is absent.\n * @throws `ScaffoldError('INVALID', …)` when `root` is not a host path.\n * @throws `ScaffoldError('TARGET', …)` when `root` is present but is not a\n * physical directory, cannot be read, holds a name this package could not plan,\n * or carries more entries or more nesting than one inventory may report.\n *\n * @remarks\n * A whole-tree answer throws where a single-path answer returns `undefined`, and\n * the reason is that a partial inventory reads exactly like a complete one. A\n * caller comparing a target against a plan would treat a truncated listing as\n * proof that the missing files are not there.\n *\n * Absence is the one exception: nothing to inventory is a complete answer, so it\n * is the empty list. Links are listed as files rather than followed, so no\n * traversal can leave the root and no cycle can form.\n *\n * @example\n * ```ts\n * import { listFiles } from '@orkestrel/scaffold/server'\n *\n * listFiles('./dist/host') // ['AGENTS.md', 'claude/rules/names.md', …]\n * ```\n */\nexport function listFiles(root: string): readonly string[] {\n\tif (!isFilesystemPath(root)) {\n\t\tthrow new ScaffoldError('INVALID', 'Listing root is not a host path', { root })\n\t}\n\tconst status = attempt(() => lstatSync(root))\n\tif (!status.success) {\n\t\tif (matchesMissingPath(status.error)) return []\n\t\tthrow new ScaffoldError('TARGET', `Listing root cannot be inspected at ${root}`, {\n\t\t\troot,\n\t\t\terror: status.error,\n\t\t})\n\t}\n\tif (!status.value.isDirectory() || status.value.isSymbolicLink()) {\n\t\tthrow new ScaffoldError('TARGET', `Listing root is not a physical directory at ${root}`, {\n\t\t\troot,\n\t\t})\n\t}\n\tconst files: string[] = []\n\tconst pending = [{ full: root, path: '', depth: 0 }]\n\tlet visited = 0\n\twhile (pending.length > 0) {\n\t\tconst current = pending.pop()\n\t\tif (current === undefined) break\n\t\tconst opened = attempt(() => opendirSync(current.full))\n\t\tif (!opened.success) {\n\t\t\tthrow new ScaffoldError('TARGET', `Listing directory cannot be read at ${current.full}`, {\n\t\t\t\troot,\n\t\t\t\tpath: current.path,\n\t\t\t\terror: opened.error,\n\t\t\t})\n\t\t}\n\t\tconst handle = opened.value\n\t\tconst walked = attempt(() => {\n\t\t\tfor (;;) {\n\t\t\t\tconst entry = handle.readSync()\n\t\t\t\tif (entry === null) break\n\t\t\t\tvisited += 1\n\t\t\t\tif (visited > MAX_INVENTORY_PATHS) {\n\t\t\t\t\tthrow new ScaffoldError('TARGET', 'Listing exceeds the paths one inventory may report', {\n\t\t\t\t\t\troot,\n\t\t\t\t\t\tlimit: MAX_INVENTORY_PATHS,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tconst path = current.path === '' ? entry.name : `${current.path}/${entry.name}`\n\t\t\t\tif (!isPath(path)) {\n\t\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t\t'TARGET',\n\t\t\t\t\t\t`Listing found a path this package cannot plan at ${path}`,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\troot,\n\t\t\t\t\t\t\tpath,\n\t\t\t\t\t\t},\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t\tif (!entry.isDirectory() || entry.isSymbolicLink()) {\n\t\t\t\t\tfiles.push(path)\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\tconst depth = current.depth + 1\n\t\t\t\tif (depth >= MAX_PATH_DEPTH) {\n\t\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t\t'TARGET',\n\t\t\t\t\t\t`Listing exceeds the depth one path may carry at ${path}`,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\troot,\n\t\t\t\t\t\t\tpath,\n\t\t\t\t\t\t\tlimit: MAX_PATH_DEPTH,\n\t\t\t\t\t\t},\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t\tpending.push({ full: join(current.full, entry.name), path, depth })\n\t\t\t}\n\t\t})\n\t\tattempt(() => handle.closeSync())\n\t\tif (!walked.success) throw walked.error\n\t}\n\treturn files.sort()\n}\n\n/**\n * List a directory's descendant directories as sorted root-relative paths.\n *\n * @param root - The directory to inventory.\n * @returns Every descendant directory as a `/`-separated root-relative path, in\n * code-unit order, and `[]` when `root` is absent.\n * @throws `ScaffoldError('INVALID', …)` when `root` is not a host path.\n * @throws `ScaffoldError('TARGET', …)` when `root` is present but is not a\n * physical directory, cannot be read, holds a name this package could not plan,\n * or carries more entries or more nesting than one inventory may report.\n *\n * @remarks\n * The sibling of {@link listFiles}, under the same bounds and the same refusals,\n * and it exists because a directory holding no file is invisible to a file walk.\n * That is the half a vendored host's `roots` declares and the half a file\n * inventory cannot check, so a stager needs both walks to state a complete\n * membership.\n *\n * `root` itself is not listed, because the answer is root-relative and the root\n * has no root-relative name. A redirected directory is not listed and is not\n * walked into, so no traversal can leave the root and no cycle can form.\n *\n * @example\n * ```ts\n * import { listDirectories } from '@orkestrel/scaffold/server'\n *\n * listDirectories('./.claude') // ['agents', 'rules', 'skills', …]\n * ```\n */\nexport function listDirectories(root: string): readonly string[] {\n\tif (!isFilesystemPath(root)) {\n\t\tthrow new ScaffoldError('INVALID', 'Listing root is not a host path', { root })\n\t}\n\tconst status = attempt(() => lstatSync(root))\n\tif (!status.success) {\n\t\tif (matchesMissingPath(status.error)) return []\n\t\tthrow new ScaffoldError('TARGET', `Listing root cannot be inspected at ${root}`, {\n\t\t\troot,\n\t\t\terror: status.error,\n\t\t})\n\t}\n\tif (!status.value.isDirectory() || status.value.isSymbolicLink()) {\n\t\tthrow new ScaffoldError('TARGET', `Listing root is not a physical directory at ${root}`, {\n\t\t\troot,\n\t\t})\n\t}\n\tconst directories: string[] = []\n\tconst pending = [{ full: root, path: '', depth: 0 }]\n\tlet visited = 0\n\twhile (pending.length > 0) {\n\t\tconst current = pending.pop()\n\t\tif (current === undefined) break\n\t\tconst opened = attempt(() => opendirSync(current.full))\n\t\tif (!opened.success) {\n\t\t\tthrow new ScaffoldError('TARGET', `Listing directory cannot be read at ${current.full}`, {\n\t\t\t\troot,\n\t\t\t\tpath: current.path,\n\t\t\t\terror: opened.error,\n\t\t\t})\n\t\t}\n\t\tconst handle = opened.value\n\t\tconst walked = attempt(() => {\n\t\t\tfor (;;) {\n\t\t\t\tconst entry = handle.readSync()\n\t\t\t\tif (entry === null) break\n\t\t\t\tvisited += 1\n\t\t\t\tif (visited > MAX_INVENTORY_PATHS) {\n\t\t\t\t\tthrow new ScaffoldError('TARGET', 'Listing exceeds the paths one inventory may report', {\n\t\t\t\t\t\troot,\n\t\t\t\t\t\tlimit: MAX_INVENTORY_PATHS,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t\tconst path = current.path === '' ? entry.name : `${current.path}/${entry.name}`\n\t\t\t\tif (!isPath(path)) {\n\t\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t\t'TARGET',\n\t\t\t\t\t\t`Listing found a path this package cannot plan at ${path}`,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\troot,\n\t\t\t\t\t\t\tpath,\n\t\t\t\t\t\t},\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t\tif (!entry.isDirectory() || entry.isSymbolicLink()) continue\n\t\t\t\tconst depth = current.depth + 1\n\t\t\t\tif (depth >= MAX_PATH_DEPTH) {\n\t\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t\t'TARGET',\n\t\t\t\t\t\t`Listing exceeds the depth one path may carry at ${path}`,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\troot,\n\t\t\t\t\t\t\tpath,\n\t\t\t\t\t\t\tlimit: MAX_PATH_DEPTH,\n\t\t\t\t\t\t},\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t\tdirectories.push(path)\n\t\t\t\tpending.push({ full: join(current.full, entry.name), path, depth })\n\t\t\t}\n\t\t})\n\t\tattempt(() => handle.closeSync())\n\t\tif (!walked.success) throw walked.error\n\t}\n\treturn directories.sort()\n}\n\n/**\n * Read one contained file as its exact bytes in lowercase hexadecimal.\n *\n * @param root - The containing host directory.\n * @param path - The portable root-relative file path.\n * @param limit - The most bytes this read accepts; the artifact ceiling by default.\n * @returns The exact bytes as hexadecimal, or `undefined` when the file is\n * absent, is not a physical readable file, is past `limit`, or moved while it\n * was being read.\n * @throws `ScaffoldError('INVALID', …)` when the arguments are off contract or\n * `path` leaves `root`.\n *\n * @remarks\n * Hexadecimal rather than text, because this is what a byte comparison is stated\n * in everywhere in this package: a plan's artifact, an audit finding, and a\n * snapshot all compare as the same digits. The file's identity and size are\n * measured before and after the read, and one extra byte is requested past the\n * declared size, so a file that grew or was replaced mid-read answers\n * `undefined` rather than half of two files.\n *\n * @example\n * ```ts\n * import { readFileHex } from '@orkestrel/scaffold/server'\n *\n * readFileHex('/tmp/project', 'AGENTS.md') // '2320416765…'\n * ```\n */\nexport function readFileHex(\n\troot: string,\n\tpath: string,\n\tlimit: number = MAX_ARTIFACT_BYTES,\n): string | undefined {\n\tif (!Number.isSafeInteger(limit) || limit < 0 || limit > MAX_ARTIFACT_BYTES) {\n\t\tthrow new ScaffoldError('INVALID', `Byte limit is outside the artifact ceiling at ${path}`, {\n\t\t\troot,\n\t\t\tpath,\n\t\t\tlimit,\n\t\t})\n\t}\n\tconst full = resolveContainedPath(root, path)\n\tif (full === undefined) {\n\t\tthrow new ScaffoldError('INVALID', `Path is off contract or leaves its root at ${path}`, {\n\t\t\troot,\n\t\t\tpath,\n\t\t})\n\t}\n\tif (!isPhysicalFile(full)) return undefined\n\tconst opened = attempt(() => openSync(full, 'r'))\n\tif (!opened.success) return undefined\n\tconst handle = opened.value\n\tconst read = attempt(() => {\n\t\tconst before = fstatSync(handle)\n\t\tif (!before.isFile() || before.nlink !== 1 || before.size > limit) return undefined\n\t\tconst bytes = Buffer.alloc(before.size)\n\t\tlet offset = 0\n\t\twhile (offset < bytes.byteLength) {\n\t\t\tconst length = readSync(handle, bytes, offset, bytes.byteLength - offset, offset)\n\t\t\tif (length === 0) break\n\t\t\toffset += length\n\t\t}\n\t\tconst overflow = readSync(handle, Buffer.alloc(1), 0, 1, offset)\n\t\tconst after = fstatSync(handle)\n\t\tif (\n\t\t\toffset !== bytes.byteLength ||\n\t\t\toverflow !== 0 ||\n\t\t\tafter.size !== before.size ||\n\t\t\tafter.mtimeMs !== before.mtimeMs\n\t\t) {\n\t\t\treturn undefined\n\t\t}\n\t\treturn bytesToHex(bytes)\n\t})\n\tattempt(() => closeSync(handle))\n\treturn read.success ? read.value : undefined\n}\n\n/**\n * Read one contained file as bounded UTF-8 text.\n *\n * @param root - The containing host directory.\n * @param path - The portable root-relative file path.\n * @param limit - The most bytes this read accepts; the artifact ceiling by default.\n * @returns The decoded text, or `undefined` when {@link readFileHex} answers\n * nothing or the bytes are not valid UTF-8.\n * @throws `ScaffoldError('INVALID', …)` when the arguments are off contract or\n * `path` leaves `root`.\n *\n * @remarks\n * Decoding is strict, so a file carrying an invalid sequence answers `undefined`\n * rather than text carrying replacement characters. That matters because the\n * text is parsed next: a manifest silently repaired into valid JSON by lossy\n * decoding would be trusted.\n *\n * @example\n * ```ts\n * import { readFileText } from '@orkestrel/scaffold/server'\n *\n * readFileText('/tmp/project', 'package.json') // '{ \"name\": \"@orkestrel/router\", … }'\n * ```\n */\nexport function readFileText(\n\troot: string,\n\tpath: string,\n\tlimit: number = MAX_ARTIFACT_BYTES,\n): string | undefined {\n\tconst hex = readFileHex(root, path, limit)\n\tif (hex === undefined) return undefined\n\tconst decoded = attempt(() =>\n\t\tnew TextDecoder('utf-8', { fatal: true }).decode(Buffer.from(hex, 'hex')),\n\t)\n\treturn decoded.success ? decoded.value : undefined\n}\n\n/**\n * Read a target's current bytes at the paths a plan claims.\n *\n * @param target - The target directory to read.\n * @param paths - The plan-relative paths to probe.\n * @returns One entry per path that is there: a file maps to its exact bytes as\n * hexadecimal and a directory maps to `''`, which records presence with no bytes\n * to compare. An absent path is omitted.\n * @throws `ScaffoldError('INVALID', …)` when `target` is not a host path or\n * `paths` is not a bounded list of plannable paths.\n * @throws `ScaffoldError('TARGET', …)` when a path that is there cannot be read,\n * or when the whole read would retain more bytes than one plan may.\n *\n * @remarks\n * The one door from a real directory into the vocabulary an audit compares in.\n * Absence is omission rather than an empty value, because core reads a missing\n * key as a missing destination and an empty string as a present directory; the\n * two are different verdicts. A path that is there but unreadable throws instead\n * of being omitted, because omission would report it as missing and a repair\n * would then overwrite whatever is actually sitting there.\n *\n * @example\n * ```ts\n * import { readSnapshot } from '@orkestrel/scaffold/server'\n *\n * readSnapshot('./packages/router', ['package.json', 'guides'])\n * // { 'package.json': '7b226e…', guides: '' }\n * ```\n */\nexport function readSnapshot(target: string, paths: readonly string[]): Snapshot {\n\tif (!isFilesystemPath(target)) {\n\t\tthrow new ScaffoldError('INVALID', 'Snapshot target is not a host path', { target })\n\t}\n\tif (!isCollection(paths) || !paths.every((path) => isPath(path))) {\n\t\tthrow new ScaffoldError('INVALID', 'Snapshot paths are not a bounded list of plannable paths', {\n\t\t\ttarget,\n\t\t\tlimit: MAX_COLLECTION_ITEMS,\n\t\t})\n\t}\n\tlet remaining = MAX_TOTAL_ARTIFACT_BYTES\n\tconst snapshot: Record<string, string> = {}\n\tfor (const path of paths) {\n\t\tconst full = resolveContainedPath(target, path)\n\t\tif (full === undefined) {\n\t\t\tthrow new ScaffoldError('INVALID', `Snapshot path leaves its target at ${path}`, {\n\t\t\t\ttarget,\n\t\t\t\tpath,\n\t\t\t})\n\t\t}\n\t\tconst status = attempt(() => lstatSync(full))\n\t\tif (!status.success) {\n\t\t\tif (matchesMissingPath(status.error)) continue\n\t\t\tthrow new ScaffoldError('TARGET', `Snapshot path cannot be inspected at ${path}`, {\n\t\t\t\ttarget,\n\t\t\t\tpath,\n\t\t\t\terror: status.error,\n\t\t\t})\n\t\t}\n\t\tif (isPhysicalDirectory(full)) {\n\t\t\tsnapshot[path] = ''\n\t\t\tcontinue\n\t\t}\n\t\tconst hex = readFileHex(target, path, Math.min(MAX_ARTIFACT_BYTES, remaining))\n\t\tif (hex === undefined) {\n\t\t\tthrow new ScaffoldError('TARGET', `Snapshot path is not a readable file at ${path}`, {\n\t\t\t\ttarget,\n\t\t\t\tpath,\n\t\t\t\tlimit: MAX_TOTAL_ARTIFACT_BYTES,\n\t\t\t})\n\t\t}\n\t\tremaining -= hex.length / 2\n\t\tsnapshot[path] = hex\n\t}\n\treturn snapshot\n}\n\n/**\n * Read a vendored host's manifest, when it carries one.\n *\n * @param host - The vendored host root to read.\n * @returns The manifest, or `undefined` when the host carries none.\n * @throws `ScaffoldError('INVALID', …)` when `host` is not a host path.\n * @throws `ScaffoldError('TARGET', …)` when the manifest is there but cannot be\n * read, is not the declared shape, or does not match its own membership.\n *\n * @remarks\n * The two failures are held apart deliberately. A host with no manifest is a\n * raw checkout, and a caller reads it by mapping each path one to one. A host\n * with a manifest that does not verify is a staged host that has been edited,\n * and answering `undefined` there would degrade it to that same one-to-one\n * mapping — which is how an edited manifest would get a caller to read files it\n * never declared. So absence answers and corruption throws.\n *\n * Verification here is the manifest's own self-consistency: the digest against\n * the exact membership beside it. Whether that membership matches the files\n * actually stored is a separate question, and it belongs to the reader that\n * walks the host.\n *\n * @example\n * ```ts\n * import { readHostManifest } from '@orkestrel/scaffold/server'\n *\n * readHostManifest('./dist/host') // the manifest, or undefined for a raw root\n * ```\n */\nexport function readHostManifest(host: string): HostManifest | undefined {\n\tif (!isFilesystemPath(host)) {\n\t\tthrow new ScaffoldError('INVALID', 'Host root is not a host path', { host })\n\t}\n\t// The reserved metadata name a staged host writes at its own root.\n\tconst name = MANIFEST_NAME\n\tconst full = resolveContainedPath(host, name)\n\tif (full === undefined) {\n\t\tthrow new ScaffoldError('INVALID', `Host manifest leaves its root at ${host}`, { host })\n\t}\n\tconst status = attempt(() => lstatSync(full))\n\tif (!status.success) {\n\t\tif (matchesMissingPath(status.error)) return undefined\n\t\tthrow new ScaffoldError('TARGET', `Host manifest cannot be inspected at ${full}`, {\n\t\t\thost,\n\t\t\terror: status.error,\n\t\t})\n\t}\n\tconst text = readFileText(host, name, MAX_MANIFEST_BYTES)\n\tif (text === undefined) {\n\t\tthrow new ScaffoldError('TARGET', `Host manifest is not readable text at ${full}`, { host })\n\t}\n\tconst manifest = parseJSONAs(text, isHostManifest)\n\tif (manifest === undefined) {\n\t\tthrow new ScaffoldError('TARGET', `Host manifest is malformed at ${full}`, { host })\n\t}\n\tif (manifest.digest !== computeManifestDigest(manifest.entries, manifest.roots)) {\n\t\tthrow new ScaffoldError('TARGET', `Host manifest membership is corrupted at ${full}`, { host })\n\t}\n\treturn manifest\n}\n\n/**\n * Derive one vendored-host manifest entry from a file in a checkout.\n *\n * @param destination - The target-relative path the file is written to.\n * @param source - The resolved host path the bytes are read from.\n * @returns The entry, or `undefined` when `source` is not a physical file this\n * package will vendor or carries more bytes than one artifact may.\n *\n * @remarks\n * The one place the three declared fields are decided together, because they are\n * three readings of one file: {@link pathToStorage} decides where it is stored,\n * the destination is the path it answers for, and the executable bit is read\n * from the source's own mode.\n *\n * That mode is the honest limit of this reading. A Windows host reports no\n * executable bit at all, so a host staged there declares every entry\n * non-executable and a consumer receives scripts without it. Staging on a POSIX\n * host is what carries the bit through.\n *\n * @example\n * ```ts\n * import { readManifestEntry } from '@orkestrel/scaffold/server'\n *\n * readManifestEntry('.gitignore', '/tmp/checkout/.gitignore')\n * // { storage: 'dotfiles/gitignore', destination: '.gitignore', executable: false }\n * ```\n */\nexport function readManifestEntry(destination: string, source: string): ManifestEntry | undefined {\n\tif (!isPhysicalFile(source)) return undefined\n\tconst status = attempt(() => lstatSync(source))\n\tif (!status.success || status.value.size > MAX_ARTIFACT_BYTES) return undefined\n\treturn {\n\t\tstorage: pathToStorage(destination),\n\t\tdestination,\n\t\texecutable: (status.value.mode & 0o111) !== 0,\n\t}\n}\n\n/**\n * Stage a vendored host root from a real checkout.\n *\n * @param checkout - The checkout the vendored paths are read from.\n * @param host - The vendored host root to fill; it must be absent or empty.\n * @returns One entry per staged file, sorted by storage name.\n * @throws `ScaffoldError('INVALID', …)` when either argument is not a host path\n * or a vendored path leaves the checkout or the host root.\n * @throws `ScaffoldError('TARGET', …)` when the checkout is not a directory, the\n * host root is not vacant, the checkout does not carry every vendored path, two\n * vendored files claim one storage name, a vendored file is not a plain file\n * within the artifact ceiling, or the staged manifest does not read back.\n * @throws `ScaffoldError('WRITE', …)` when a staged file or the manifest cannot\n * be written.\n *\n * @remarks\n * This is the producer half of the vendored host, and it is not the mutation\n * contract `MaterializerInterface` states. That contract owns **target**\n * writes: it materializes a compiled plan into a consumer's workspace, binds\n * every destination to what the caller observed, and rolls a failed commit back.\n * This reads this package's own checkout at build time and fills its own build\n * output. Different direction, different lifetime, no consumer target involved,\n * so the two do not overlap and neither one belongs inside the other.\n *\n * Staging is plain rather than transactional for the same reason. A\n * `WriteTransaction` exists to hold a directory that already holds work\n * still; a build output holds nothing, is deleted whole before every build, and\n * has no concurrent reader. What replaces it is refusing early and ordering the\n * writes: the whole membership is derived before anything is created, so a\n * checkout this refuses leaves no host root at all, and `manifest.json` is\n * written last, so a stage that failed part way through leaves a root every\n * reader treats as a raw checkout and fails loudly on.\n *\n * A missing vendored path is refused rather than staged around. A partial root\n * is not detectably partial: it fails later, in a consumer's terminal, on\n * whichever path the plan reached first. Refusing here fails the build that\n * produced it, where the maintainer can act, and it names every missing path at\n * once. A directory is the same case — declaring an absent directory as an empty\n * root would create an empty directory in every generated workspace.\n *\n * The vendoring deny-list applies to what the walk discovers beneath a vendored\n * directory, where a maintainer's local credential can legitimately sit, and\n * such a path is skipped. A path `HOST_PATHS` names itself is curated data\n * rather than discovery, so it is staged or the stage is refused.\n *\n * @example\n * ```ts\n * import { stageHost } from '@orkestrel/scaffold/server'\n *\n * stageHost(process.cwd(), 'dist/host').length // the files staged\n * ```\n */\nexport function stageHost(checkout: string, host: string): readonly ManifestEntry[] {\n\tif (!isFilesystemPath(checkout)) {\n\t\tthrow new ScaffoldError('INVALID', 'Staging checkout is not a host path', { checkout })\n\t}\n\tif (!isFilesystemPath(host)) {\n\t\tthrow new ScaffoldError('INVALID', 'Staging host root is not a host path', { host })\n\t}\n\tconst source = resolve(checkout)\n\tif (!isPhysicalDirectory(source)) {\n\t\tthrow new ScaffoldError('TARGET', `Staging checkout is not a physical directory at ${source}`, {\n\t\t\tcheckout: source,\n\t\t})\n\t}\n\tif (!isVacant(host)) {\n\t\tthrow new ScaffoldError('TARGET', `Staging host root is not vacant at ${host}`, { host })\n\t}\n\tconst vendored: string[] = []\n\tconst roots: string[] = []\n\tconst missing: string[] = []\n\tfor (const path of HOST_PATHS) {\n\t\tconst full = resolveContainedPath(source, path)\n\t\tif (full === undefined) {\n\t\t\tthrow new ScaffoldError('INVALID', `Vendored path leaves its checkout at ${path}`, {\n\t\t\t\tcheckout: source,\n\t\t\t\tpath,\n\t\t\t})\n\t\t}\n\t\tif (isPhysicalFile(full)) {\n\t\t\tvendored.push(path)\n\t\t\tcontinue\n\t\t}\n\t\tif (!isPhysicalDirectory(full)) {\n\t\t\tmissing.push(path)\n\t\t\tcontinue\n\t\t}\n\t\troots.push(path)\n\t\tfor (const nested of listDirectories(full)) {\n\t\t\tconst rooted = `${path}/${nested}`\n\t\t\tif (!matchesSensitivePath(rooted)) roots.push(rooted)\n\t\t}\n\t\tfor (const name of listFiles(full)) {\n\t\t\tconst destination = `${path}/${name}`\n\t\t\tif (!matchesSensitivePath(destination)) vendored.push(destination)\n\t\t}\n\t}\n\tif (missing.length > 0) {\n\t\tthrow new ScaffoldError('TARGET', 'The checkout does not carry every vendored path', {\n\t\t\tcheckout: source,\n\t\t\tmissing,\n\t\t})\n\t}\n\t// Seeded with the reserved metadata name a staged host writes at its own root,\n\t// the same literal `readHostManifest` reads back, so a vendored file claiming it\n\t// is refused rather than silently replaced by the manifest.\n\tconst stored = new Set<string>([MANIFEST_NAME])\n\tconst entries: ManifestEntry[] = []\n\tfor (const destination of vendored) {\n\t\tconst full = resolveContainedPath(source, destination)\n\t\tif (full === undefined) {\n\t\t\tthrow new ScaffoldError('INVALID', `Vendored path leaves its checkout at ${destination}`, {\n\t\t\t\tcheckout: source,\n\t\t\t\tpath: destination,\n\t\t\t})\n\t\t}\n\t\tconst entry = readManifestEntry(destination, full)\n\t\tif (entry === undefined) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'TARGET',\n\t\t\t\t`Vendored path is not a plain file within the artifact ceiling at ${destination}`,\n\t\t\t\t{ checkout: source, path: destination, limit: MAX_ARTIFACT_BYTES },\n\t\t\t)\n\t\t}\n\t\tif (stored.has(entry.storage)) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'TARGET',\n\t\t\t\t`Two vendored paths claim the storage name ${entry.storage}`,\n\t\t\t\t{ checkout: source, path: destination, storage: entry.storage },\n\t\t\t)\n\t\t}\n\t\tstored.add(entry.storage)\n\t\tentries.push(entry)\n\t}\n\tentries.sort((first, second) => (first.storage < second.storage ? -1 : 1))\n\troots.sort()\n\tconst root = resolve(host)\n\tconst established = attempt(() => mkdirSync(root, { recursive: true }))\n\tif (!established.success || !isPhysicalDirectory(root)) {\n\t\tthrow new ScaffoldError('WRITE', `Staging host root could not be established at ${root}`, {\n\t\t\thost: root,\n\t\t\t...(established.success ? {} : { error: established.error }),\n\t\t})\n\t}\n\tfor (const entry of entries) {\n\t\tconst origin = resolveContainedPath(source, entry.destination)\n\t\tconst destination = resolveContainedPath(root, entry.storage)\n\t\tif (origin === undefined || destination === undefined) {\n\t\t\tthrow new ScaffoldError('INVALID', `Vendored path leaves its root at ${entry.destination}`, {\n\t\t\t\tcheckout: source,\n\t\t\t\thost: root,\n\t\t\t\tpath: entry.destination,\n\t\t\t\tstorage: entry.storage,\n\t\t\t})\n\t\t}\n\t\tconst copied = attempt(() => {\n\t\t\tmkdirSync(dirname(destination), { recursive: true })\n\t\t\tcopyFileSync(origin, destination, constants.COPYFILE_EXCL)\n\t\t\tif (entry.executable) chmodSync(destination, 0o755)\n\t\t})\n\t\tif (!copied.success) {\n\t\t\tthrow new ScaffoldError('WRITE', `Vendored file could not be staged at ${entry.storage}`, {\n\t\t\t\thost: root,\n\t\t\t\tstorage: entry.storage,\n\t\t\t\terror: copied.error,\n\t\t\t})\n\t\t}\n\t}\n\tconst manifest: HostManifest = {\n\t\tentries,\n\t\troots,\n\t\tdigest: computeManifestDigest(entries, roots),\n\t}\n\tconst metadata = resolveContainedPath(root, MANIFEST_NAME)\n\tif (metadata === undefined) {\n\t\tthrow new ScaffoldError('INVALID', `Host manifest leaves its root at ${root}`, { host: root })\n\t}\n\tconst published = attempt(() =>\n\t\twriteFileSync(metadata, `${JSON.stringify(manifest, null, '\\t')}\\n`, {\n\t\t\tencoding: 'utf8',\n\t\t\tflag: 'wx',\n\t\t}),\n\t)\n\tif (!published.success) {\n\t\tthrow new ScaffoldError('WRITE', `Host manifest could not be staged at ${metadata}`, {\n\t\t\thost: root,\n\t\t\terror: published.error,\n\t\t})\n\t}\n\tconst verified = readHostManifest(root)\n\tif (verified === undefined || verified.digest !== manifest.digest) {\n\t\tthrow new ScaffoldError('TARGET', `The staged host manifest does not read back at ${root}`, {\n\t\t\thost: root,\n\t\t})\n\t}\n\treturn entries\n}\n\n/**\n * Capture one directory's physical identity.\n *\n * @param path - The resolved directory path to capture.\n * @returns The anchor, or `undefined` when the path is not a physical directory.\n *\n * @remarks\n * Device and inode rather than the path, because the path is the thing that can\n * be swapped underneath a write. An anchor captured before a mutation and\n * checked again after it is what proves the directory written into is the\n * directory that was inspected.\n *\n * @example\n * ```ts\n * import { readAnchor } from '@orkestrel/scaffold/server'\n *\n * readAnchor('/tmp/project') // { path: '/tmp/project', device: 1, inode: 2 }\n * ```\n */\nexport function readAnchor(path: string): WriteAnchor | undefined {\n\tconst status = attempt(() => lstatSync(path))\n\tif (!status.success || !status.value.isDirectory() || status.value.isSymbolicLink()) {\n\t\treturn undefined\n\t}\n\treturn { path, device: status.value.dev, inode: status.value.ino }\n}\n\n/**\n * Test whether a captured directory is still the same directory.\n *\n * @param anchor - The identity captured earlier.\n * @returns `true` when the path still holds a physical directory of that exact\n * device and inode.\n *\n * @remarks\n * The check a write repeats between steps. A directory replaced by another\n * directory of the same name answers `false` here, which is the case a path\n * comparison alone cannot see.\n *\n * @example\n * ```ts\n * import { matchesAnchor, readAnchor } from '@orkestrel/scaffold/server'\n *\n * const anchor = readAnchor('/tmp/project')\n * anchor !== undefined && matchesAnchor(anchor) // true while it is untouched\n * ```\n */\nexport function matchesAnchor(anchor: WriteAnchor): boolean {\n\tconst current = readAnchor(anchor.path)\n\treturn current !== undefined && current.device === anchor.device && current.inode === anchor.inode\n}\n\n/**\n * Capture what one destination holds before a write.\n *\n * @param path - The resolved destination path to capture.\n * @returns The expectation, or `undefined` when the destination is a link or a\n * shape this package will not write over.\n *\n * @remarks\n * Absence is a captured state rather than a failure, because most writes expect\n * exactly that. Each shape carries only the facts it supplies: a directory\n * carries its identity, a file carries its identity, size, and bytes, and an\n * absent destination carries nothing at all. A file past the artifact ceiling\n * carries no digest and is bound by its identity, size, and modification time\n * alone, which is the strongest honest claim about bytes nobody read.\n *\n * @example\n * ```ts\n * import { readExpectation } from '@orkestrel/scaffold/server'\n *\n * readExpectation('/tmp/project/absent.md') // { path: …, shape: 'absent' }\n * ```\n */\nexport function readExpectation(path: string): WriteExpectation | undefined {\n\tconst status = attempt(() => lstatSync(path))\n\tif (!status.success) {\n\t\treturn matchesMissingPath(status.error) ? { path, shape: 'absent' } : undefined\n\t}\n\tconst stats = status.value\n\tif (stats.isSymbolicLink()) return undefined\n\tif (stats.isDirectory()) {\n\t\treturn {\n\t\t\tpath,\n\t\t\tshape: 'directory',\n\t\t\tdevice: stats.dev,\n\t\t\tinode: stats.ino,\n\t\t\tmodified: stats.mtimeMs,\n\t\t}\n\t}\n\tif (!stats.isFile() || stats.nlink !== 1) return undefined\n\tconst digest = computeFileDigest(path)\n\treturn {\n\t\tpath,\n\t\tshape: 'file',\n\t\tdevice: stats.dev,\n\t\tinode: stats.ino,\n\t\tmodified: stats.mtimeMs,\n\t\tsize: stats.size,\n\t\t...(digest === undefined ? {} : { digest }),\n\t}\n}\n\n/**\n * Test whether a destination still holds what was captured of it.\n *\n * @param expectation - The state captured earlier.\n * @returns `true` when re-reading the destination now produces that same state.\n *\n * @remarks\n * Compared field for field against a fresh {@link readExpectation}, so an\n * expectation recorded without a digest matches only a destination that still\n * has no digest to give. That is what keeps the comparison honest in both\n * directions: nothing is treated as satisfied because it was never measured.\n *\n * @example\n * ```ts\n * import { matchesExpectation, readExpectation } from '@orkestrel/scaffold/server'\n *\n * const expectation = readExpectation('/tmp/project/AGENTS.md')\n * expectation !== undefined && matchesExpectation(expectation) // true while untouched\n * ```\n */\nexport function matchesExpectation(expectation: WriteExpectation): boolean {\n\tconst current = readExpectation(expectation.path)\n\tif (current === undefined) return false\n\treturn (\n\t\tcurrent.shape === expectation.shape &&\n\t\tcurrent.device === expectation.device &&\n\t\tcurrent.inode === expectation.inode &&\n\t\tcurrent.modified === expectation.modified &&\n\t\tcurrent.size === expectation.size &&\n\t\tcurrent.digest === expectation.digest\n\t)\n}\n\n/**\n * Test whether a destination still matches the narrower state a caller observed.\n *\n * @param precondition - The caller-observed state the write is held to.\n * @returns `true` when the destination is absent as stated, or holds a physical\n * file whose bytes digest to the stated value.\n *\n * @remarks\n * Narrower than {@link matchesExpectation} on purpose. A caller observed bytes,\n * not inodes and timestamps, so binding a write to a device identity it never\n * saw would refuse writes that are perfectly safe — a file rewritten to\n * identical bytes by an editor is still the file the caller read. A precondition\n * that states no digest claims presence only.\n *\n * @example\n * ```ts\n * import { matchesPrecondition } from '@orkestrel/scaffold/server'\n *\n * matchesPrecondition({ path: '/tmp/project/new.md', shape: 'absent' }) // true while absent\n * ```\n */\nexport function matchesPrecondition(precondition: WritePrecondition): boolean {\n\tconst status = attempt(() => lstatSync(precondition.path))\n\tif (!status.success) {\n\t\treturn precondition.shape === 'absent' && matchesMissingPath(status.error)\n\t}\n\tif (precondition.shape !== 'file' || !isPhysicalFile(precondition.path)) return false\n\tif (precondition.digest === undefined) return true\n\treturn computeFileDigest(precondition.path) === precondition.digest\n}\n","import type {\n\tWriteAnchor,\n\tWriteDirectoryResult,\n\tWriteExpectation,\n\tWritePrecondition,\n} from './types.js'\nimport { randomUUID } from 'node:crypto'\nimport {\n\tchmodSync,\n\tconstants,\n\tcopyFileSync,\n\tlinkSync,\n\tmkdirSync,\n\trenameSync,\n\trmdirSync,\n\trmSync,\n\twriteFileSync,\n} from 'node:fs'\nimport { basename, dirname, join, resolve } from 'node:path'\nimport { attempt } from '@orkestrel/contract'\nimport { isCollection, isPath, ScaffoldError } from '@src/core'\nimport {\n\tcomputeDigest,\n\tcomputeFileDigest,\n\tisPhysicalFile,\n\tmatchesAnchor,\n\tmatchesExpectation,\n\tmatchesMissingPath,\n\tmatchesPrecondition,\n\treadAnchor,\n\treadExpectation,\n\tresolveContainedPath,\n} from './helpers.js'\nimport { isFilesystemPath } from './validators.js'\nimport { MAX_PATH_DEPTH } from './constants.js'\n\n/**\n * One staged, reversible mutation of one target directory.\n *\n * @remarks\n * The transaction owns a private root beside the target — a sibling directory on\n * the same volume, so every promotion is a rename rather than a copy. Staging\n * writes go into that root and nothing else, so a call that fails while staging\n * has not touched the target at all. Commit is the only step that mutates the\n * target, and it is the only step that can need rolling back.\n *\n * Two bindings hold a destination still. A **precondition** is what the caller\n * observed earlier and is checked once, at construction, so a target that moved\n * between the caller's read and this transaction fails before anything is\n * created. An **expectation** is captured here, at construction, and re-checked\n * at commit, so a target that moves while the write is being staged fails before\n * anything is promoted.\n *\n * What this provides, exactly:\n *\n * - **Across destinations, staged-then-swapped with rollback on a caught\n *   failure.** A failure part way through commit restores every destination it\n *   already promoted, restores every file it already took, and removes every\n *   directory it created, then reports what recovery could not undo. This is\n *   measured: a promotion is driven to fail after an earlier one landed, and the\n *   earlier destination is read back.\n * - **No partly written destination.** Every file is written whole into the\n *   private root and digested there before commit, so a destination never\n *   receives bytes that were still being produced.\n * - **No crash atomicity across destinations.** A process killed between two\n *   promotions leaves the target holding some new files and some old ones, and\n *   leaves the private root behind. Nothing here is a journal, and the private\n *   root's name is the only record a later run could read.\n *\n * A destination is preserved by hard link and then replaced by a single\n * `rename`, rather than moved aside and replaced, so the path continues to name\n * the old file right up to the swap. That is a property of `rename` on the host,\n * not one this package's tests measure: telling it apart from move-then-replace\n * needs a reader observing the destination inside the swap, and no test here\n * does that. Read the claim as the mechanism it describes, not as a proven\n * guarantee about a concurrent reader.\n *\n * A path names a file this transaction writes, takes, or establishes as a\n * directory; every path is target-relative and is measured by the portable-path\n * law. An expectation and a precondition both name the resolved destination\n * instead, because that is the path each is re-read at.\n *\n * @example\n * ```ts\n * import { WriteTransaction } from '@orkestrel/scaffold/server'\n *\n * const transaction = new WriteTransaction('./packages/router', ['AGENTS.md'])\n * try {\n * \ttransaction.write('AGENTS.md', '# Agents\\n')\n * \ttransaction.commit() // ['AGENTS.md']\n * } finally {\n * \ttransaction.discard()\n * }\n * ```\n */\nexport class WriteTransaction {\n\treadonly #target: string\n\treadonly #root: string\n\treadonly #stage: string\n\treadonly #backup: string\n\treadonly #expectations: ReadonlyMap<string, WriteExpectation>\n\treadonly #created: WriteAnchor[] = []\n\treadonly #staged: string[] = []\n\treadonly #established: string[] = []\n\treadonly #taken: string[] = []\n\t#open = true\n\n\t/**\n\t * Open a transaction over one target directory.\n\t *\n\t * @param target - The directory every path is written beneath.\n\t * @param paths - Every target-relative path this transaction may touch.\n\t * @param preconditions - The caller-observed destination states the whole\n\t * transaction is held to, each naming a resolved destination of `paths`.\n\t * @throws {@link ScaffoldError} coded `INVALID` when an argument is off\n\t * contract, `TARGET` when a destination is a shape this package will not write\n\t * over or no longer matches its precondition, and `WRITE` when the private\n\t * root cannot be established.\n\t *\n\t * @remarks\n\t * Nothing is created until every destination has been inspected and every\n\t * precondition has held, so a refused transaction leaves no residue at all.\n\t * The private root is created last and carries a random name, so two\n\t * transactions over one target never collide.\n\t */\n\tconstructor(\n\t\ttarget: string,\n\t\tpaths: readonly string[],\n\t\tpreconditions?: readonly WritePrecondition[],\n\t) {\n\t\tif (!isFilesystemPath(target)) {\n\t\t\tthrow new ScaffoldError('INVALID', 'The write target is not a host path.', { target })\n\t\t}\n\t\tif (!isCollection(paths) || !paths.every((path) => isPath(path))) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'INVALID',\n\t\t\t\t'The write paths are not a bounded list of plannable paths.',\n\t\t\t\t{\n\t\t\t\t\ttarget,\n\t\t\t\t},\n\t\t\t)\n\t\t}\n\t\tif (new Set(paths).size !== paths.length) {\n\t\t\tthrow new ScaffoldError('INVALID', 'The write paths repeat a destination.', { target, paths })\n\t\t}\n\t\tthis.#target = resolve(target)\n\t\tconst expectations = new Map<string, WriteExpectation>()\n\t\tfor (const path of paths) {\n\t\t\tconst destination = this.#resolve(this.#target, path)\n\t\t\tconst expectation = readExpectation(destination)\n\t\t\tif (expectation === undefined) {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'TARGET',\n\t\t\t\t\t`The destination at ${path} is a shape this package will not write over.`,\n\t\t\t\t\t{ target: this.#target, path },\n\t\t\t\t)\n\t\t\t}\n\t\t\texpectations.set(path, expectation)\n\t\t}\n\t\tthis.#expectations = expectations\n\t\tconst destinations = new Set([...expectations.values()].map((expectation) => expectation.path))\n\t\tfor (const precondition of preconditions ?? []) {\n\t\t\tif (!destinations.has(precondition.path)) {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'INVALID',\n\t\t\t\t\t`The precondition at ${precondition.path} names no destination of this transaction.`,\n\t\t\t\t\t{ target: this.#target, path: precondition.path },\n\t\t\t\t)\n\t\t\t}\n\t\t\tif (!matchesPrecondition(precondition)) {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'TARGET',\n\t\t\t\t\t`The destination at ${precondition.path} no longer holds what the caller observed.`,\n\t\t\t\t\t{ target: this.#target, path: precondition.path },\n\t\t\t\t)\n\t\t\t}\n\t\t}\n\t\tconst parent = dirname(this.#target)\n\t\tthis.#root = join(parent, `.${basename(this.#target)}.write-${randomUUID()}`)\n\t\tthis.#stage = join(this.#root, 'stage')\n\t\tthis.#backup = join(this.#root, 'backup')\n\t\tconst opened = attempt(() => {\n\t\t\tthis.#created.push(...this.#establish(parent).created)\n\t\t\tfor (const directory of [this.#root, this.#stage, this.#backup]) {\n\t\t\t\tmkdirSync(directory, { mode: 0o700 })\n\t\t\t\tif (readAnchor(directory) === undefined) {\n\t\t\t\t\tthrow new ScaffoldError('WRITE', 'The private write root is not a physical directory.', {\n\t\t\t\t\t\ttarget: this.#target,\n\t\t\t\t\t\troot: this.#root,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t}\n\t\t})\n\t\tif (!opened.success) {\n\t\t\tthis.#open = false\n\t\t\tthis.#recover([], [])\n\t\t\tthrow new ScaffoldError('WRITE', 'The private write root could not be established.', {\n\t\t\t\ttarget: this.#target,\n\t\t\t\troot: this.#root,\n\t\t\t\terror: opened.error,\n\t\t\t})\n\t\t}\n\t}\n\n\t/** The resolved directory every path is written beneath. */\n\tget target(): string {\n\t\treturn this.#target\n\t}\n\n\t/** What each destination held when the transaction opened, in path order. */\n\tget expectations(): readonly WriteExpectation[] {\n\t\treturn [...this.#expectations.values()]\n\t}\n\n\t/** Whether the transaction can still be committed or discarded. */\n\tget open(): boolean {\n\t\treturn this.#open\n\t}\n\n\t/**\n\t * Stage one text file.\n\t *\n\t * @param path - The target-relative path to write.\n\t * @param content - The exact UTF-8 text the destination should hold.\n\t * @returns Nothing.\n\t * @throws {@link ScaffoldError} coded `INVALID` when the path is not one this\n\t * transaction opened or is already staged, `TARGET` when the destination holds\n\t * a directory, and `WRITE` when the staged file cannot be written or does not\n\t * carry the bytes it was given.\n\t *\n\t * @remarks\n\t * The staged file is read back and digested against the text it was given, so\n\t * a partial or interrupted write is refused here rather than promoted later.\n\t */\n\twrite(path: string, content: string): void {\n\t\tconst expectation = this.#claim(path)\n\t\tif (expectation.shape === 'directory') {\n\t\t\tthrow new ScaffoldError('TARGET', `The destination at ${path} holds a directory.`, { path })\n\t\t}\n\t\tconst staged = this.#stagePath(path)\n\t\tconst written = attempt(() => {\n\t\t\twriteFileSync(staged, content, { encoding: 'utf8', flag: 'wx' })\n\t\t})\n\t\tif (!written.success) {\n\t\t\tthrow new ScaffoldError('WRITE', `The staged file at ${path} could not be written.`, {\n\t\t\t\tpath,\n\t\t\t\terror: written.error,\n\t\t\t})\n\t\t}\n\t\tif (computeFileDigest(staged) !== computeDigest(content)) {\n\t\t\tthrow new ScaffoldError('WRITE', `The staged file at ${path} does not carry its content.`, {\n\t\t\t\tpath,\n\t\t\t})\n\t\t}\n\t\tthis.#staged.push(path)\n\t}\n\n\t/**\n\t * Stage one byte-for-byte copy of a file that already exists on this host.\n\t *\n\t * @param path - The target-relative path to write.\n\t * @param source - The resolved absolute path to copy the bytes from.\n\t * @param executable - Whether the destination should carry the executable bit.\n\t * @returns Nothing.\n\t * @throws {@link ScaffoldError} coded `INVALID` when the path is not one this\n\t * transaction opened or is already staged, `TARGET` when the destination holds\n\t * a directory or the source is not a physical file, and `WRITE` when the copy\n\t * cannot be made or does not digest to the source's bytes.\n\t *\n\t * @remarks\n\t * The source is digested before the copy and the copy is digested after it, so\n\t * a source that changed mid-copy is refused instead of staged.\n\t */\n\tcopy(path: string, source: string, executable: boolean): void {\n\t\tconst expectation = this.#claim(path)\n\t\tif (expectation.shape === 'directory') {\n\t\t\tthrow new ScaffoldError('TARGET', `The destination at ${path} holds a directory.`, { path })\n\t\t}\n\t\tconst digest = isPhysicalFile(source) ? computeFileDigest(source) : undefined\n\t\tif (digest === undefined) {\n\t\t\tthrow new ScaffoldError('TARGET', `The copy source for ${path} is not a readable file.`, {\n\t\t\t\tpath,\n\t\t\t\tsource,\n\t\t\t})\n\t\t}\n\t\tconst staged = this.#stagePath(path)\n\t\tconst copied = attempt(() => {\n\t\t\tcopyFileSync(source, staged, constants.COPYFILE_EXCL)\n\t\t\tif (executable) chmodSync(staged, 0o755)\n\t\t})\n\t\tif (!copied.success) {\n\t\t\tthrow new ScaffoldError('WRITE', `The staged copy at ${path} could not be made.`, {\n\t\t\t\tpath,\n\t\t\t\tsource,\n\t\t\t\terror: copied.error,\n\t\t\t})\n\t\t}\n\t\tif (computeFileDigest(staged) !== digest) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'WRITE',\n\t\t\t\t`The staged copy at ${path} does not carry the source bytes.`,\n\t\t\t\t{\n\t\t\t\t\tpath,\n\t\t\t\t\tsource,\n\t\t\t\t},\n\t\t\t)\n\t\t}\n\t\tthis.#staged.push(path)\n\t}\n\n\t/**\n\t * Establish one directory inside the target, one segment at a time.\n\t *\n\t * @param path - The target-relative directory to establish.\n\t * @returns The directory's identity and every segment this call created.\n\t * @throws {@link ScaffoldError} coded `INVALID` when the path is not one this\n\t * transaction opened, `TARGET` when the destination holds a file, and `WRITE`\n\t * when a segment cannot be created or changed while it was being created.\n\t *\n\t * @remarks\n\t * A directory is created immediately rather than staged, because creating one\n\t * destroys nothing: rollback removes exactly the segments this call created,\n\t * innermost first, and leaves every segment that was already there. Each\n\t * created segment is captured by device and inode, so a segment swapped\n\t * underneath the transaction is detected rather than written into.\n\t */\n\tdirectory(path: string): WriteDirectoryResult {\n\t\tthis.#assertOpen()\n\t\tconst expectation = this.#expectation(path)\n\t\tif (expectation.shape === 'file') {\n\t\t\tthrow new ScaffoldError('TARGET', `The destination at ${path} holds a file.`, { path })\n\t\t}\n\t\tconst result = this.#establish(this.#resolve(this.#target, path))\n\t\tthis.#created.push(...result.created)\n\t\tif (result.created.length > 0 && !this.#established.includes(path)) this.#established.push(path)\n\t\treturn result\n\t}\n\n\t/**\n\t * Mark one file for deletion at commit.\n\t *\n\t * @param path - The target-relative file to delete.\n\t * @returns Nothing.\n\t * @throws {@link ScaffoldError} coded `INVALID` when the path is not one this\n\t * transaction opened or is already claimed, and `TARGET` when the destination\n\t * does not hold a file.\n\t *\n\t * @remarks\n\t * Nothing moves here. Commit renames the file into the private backup rather\n\t * than unlinking it, so a later failure in the same commit puts it back.\n\t */\n\tremove(path: string): void {\n\t\tconst expectation = this.#claim(path)\n\t\tif (expectation.shape !== 'file') {\n\t\t\tthrow new ScaffoldError('TARGET', `The destination at ${path} holds no file to remove.`, {\n\t\t\t\tpath,\n\t\t\t})\n\t\t}\n\t\tthis.#taken.push(path)\n\t}\n\n\t/**\n\t * Promote every staged file and take every marked file, or roll the whole call back.\n\t *\n\t * @returns Every target-relative path whose destination changed: the files\n\t * promoted, then the directories established, then the files taken.\n\t * @throws {@link ScaffoldError} coded `WRITE` when the transaction is closed,\n\t * when a destination moved since the transaction opened, or when the commit\n\t * failed; a failure reports what rollback could not undo in its context.\n\t *\n\t * @remarks\n\t * Every destination and every directory this transaction created is re-checked\n\t * before anything moves, so the common failure moves nothing at all. That\n\t * check runs inside the same rollback as the promotions, because a transaction\n\t * that refuses before it starts still has a private root and created\n\t * directories to clear. The transaction is closed either way: a committed one\n\t * has nothing left to undo and a failed one has already been rolled back.\n\t */\n\tcommit(): readonly string[] {\n\t\tthis.#assertOpen()\n\t\tconst promoted: string[] = []\n\t\tconst taken: string[] = []\n\t\tconst applied = attempt(() => {\n\t\t\tthis.#preflight()\n\t\t\tfor (const path of this.#staged) {\n\t\t\t\tthis.#promote(path)\n\t\t\t\tpromoted.push(path)\n\t\t\t}\n\t\t\tfor (const path of this.#taken) {\n\t\t\t\tthis.#take(path)\n\t\t\t\ttaken.push(path)\n\t\t\t}\n\t\t})\n\t\tthis.#open = false\n\t\tif (!applied.success) {\n\t\t\tconst residue = this.#recover(promoted, taken)\n\t\t\tthrow new ScaffoldError('WRITE', 'The commit failed and was rolled back.', {\n\t\t\t\ttarget: this.#target,\n\t\t\t\troot: this.#root,\n\t\t\t\terror: applied.error,\n\t\t\t\tcommitted: false,\n\t\t\t\tresidue,\n\t\t\t})\n\t\t}\n\t\tconst cleared = attempt(() => rmSync(this.#root, { recursive: true, force: true }))\n\t\tif (!cleared.success) {\n\t\t\tthrow new ScaffoldError('WRITE', 'The commit completed but left private residue.', {\n\t\t\t\ttarget: this.#target,\n\t\t\t\troot: this.#root,\n\t\t\t\terror: cleared.error,\n\t\t\t\tcommitted: true,\n\t\t\t})\n\t\t}\n\t\treturn [...this.#staged, ...this.#established, ...this.#taken]\n\t}\n\n\t/**\n\t * Abandon the transaction and remove everything it created.\n\t *\n\t * @returns Nothing.\n\t * @throws {@link ScaffoldError} coded `WRITE` when residue could not be\n\t * removed, naming the private root that still holds it.\n\t *\n\t * @remarks\n\t * Idempotent, and a no-op on a transaction that already committed or already\n\t * failed, so a caller can put it in a `finally` beside the work it guards.\n\t */\n\tdiscard(): void {\n\t\tif (!this.#open) return\n\t\tthis.#open = false\n\t\tconst residue = this.#recover([], [])\n\t\tif (residue.length > 0) {\n\t\t\tthrow new ScaffoldError('WRITE', 'The discarded transaction left residue.', {\n\t\t\t\ttarget: this.#target,\n\t\t\t\troot: this.#root,\n\t\t\t\tresidue,\n\t\t\t})\n\t\t}\n\t}\n\n\t// Resolve a root-relative path and refuse one whose existing ancestors are not\n\t// all physical directories. Containment alone is a read-time law: a link\n\t// planted between the root and the destination stays inside the root, so it\n\t// passes containment while still moving the write somewhere the caller never\n\t// named.\n\t#resolve(root: string, path: string): string {\n\t\tconst destination = resolveContainedPath(root, path)\n\t\tif (destination === undefined) {\n\t\t\tthrow new ScaffoldError('INVALID', `The path ${path} is off contract or leaves its root.`, {\n\t\t\t\troot,\n\t\t\t\tpath,\n\t\t\t})\n\t\t}\n\t\tconst base = resolve(root)\n\t\tlet ancestor = dirname(destination)\n\t\tfor (let depth = 0; depth <= MAX_PATH_DEPTH; depth += 1) {\n\t\t\tconst state = readExpectation(ancestor)\n\t\t\tif (state === undefined || state.shape === 'file') {\n\t\t\t\tthrow new ScaffoldError('WRITE', `The path ${path} passes through a link or a file.`, {\n\t\t\t\t\troot,\n\t\t\t\t\tpath,\n\t\t\t\t\tancestor,\n\t\t\t\t})\n\t\t\t}\n\t\t\tif (ancestor === base) return destination\n\t\t\tconst parent = dirname(ancestor)\n\t\t\tif (parent === ancestor) break\n\t\t\tancestor = parent\n\t\t}\n\t\tthrow new ScaffoldError('INVALID', `The path ${path} does not resolve beneath its root.`, {\n\t\t\troot,\n\t\t\tpath,\n\t\t})\n\t}\n\n\t// Create one absolute directory path segment by segment, revalidating the\n\t// deepest established segment before and after each `mkdir`, so a segment\n\t// swapped between two steps is caught rather than written into.\n\t#establish(path: string): WriteDirectoryResult {\n\t\tconst destination = resolve(path)\n\t\tconst missing: string[] = []\n\t\tlet current = destination\n\t\tlet anchor = readAnchor(current)\n\t\tfor (let depth = 0; anchor === undefined && depth <= MAX_PATH_DEPTH; depth += 1) {\n\t\t\tconst state = readExpectation(current)\n\t\t\tif (state === undefined || state.shape !== 'absent') {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'WRITE',\n\t\t\t\t\t`The directory at ${current} is not a physical directory.`,\n\t\t\t\t\t{\n\t\t\t\t\t\tpath: destination,\n\t\t\t\t\t},\n\t\t\t\t)\n\t\t\t}\n\t\t\tmissing.push(current)\n\t\t\tconst parent = dirname(current)\n\t\t\tif (parent === current) {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'WRITE',\n\t\t\t\t\t`The directory at ${destination} has no existing ancestor.`,\n\t\t\t\t\t{\n\t\t\t\t\t\tpath: destination,\n\t\t\t\t\t},\n\t\t\t\t)\n\t\t\t}\n\t\t\tcurrent = parent\n\t\t\tanchor = readAnchor(current)\n\t\t}\n\t\tif (anchor === undefined) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'WRITE',\n\t\t\t\t`The directory at ${destination} is nested past the ceiling.`,\n\t\t\t\t{\n\t\t\t\t\tpath: destination,\n\t\t\t\t\tlimit: MAX_PATH_DEPTH,\n\t\t\t\t},\n\t\t\t)\n\t\t}\n\t\tconst created: WriteAnchor[] = []\n\t\tfor (const segment of [...missing].reverse()) {\n\t\t\tif (!matchesAnchor(anchor)) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `The directory at ${anchor.path} changed while writing.`, {\n\t\t\t\t\tpath: destination,\n\t\t\t\t\tancestor: anchor.path,\n\t\t\t\t})\n\t\t\t}\n\t\t\tmkdirSync(segment)\n\t\t\tconst established = readAnchor(segment)\n\t\t\tif (established === undefined) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `The directory at ${segment} changed while writing.`, {\n\t\t\t\t\tpath: destination,\n\t\t\t\t})\n\t\t\t}\n\t\t\tanchor = established\n\t\t\tcreated.push(established)\n\t\t}\n\t\treturn { anchor, created }\n\t}\n\n\t// Every destination and every created directory, re-read once before the first\n\t// promotion. A failure here has moved nothing, so the caller still holds the\n\t// target exactly as it found it.\n\t#preflight(): void {\n\t\tfor (const anchor of this.#created) {\n\t\t\tif (!matchesAnchor(anchor)) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `The directory at ${anchor.path} changed while writing.`, {\n\t\t\t\t\ttarget: this.#target,\n\t\t\t\t\tpath: anchor.path,\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\t\tfor (const path of [...this.#staged, ...this.#taken]) {\n\t\t\tconst expectation = this.#expectation(path)\n\t\t\tif (!matchesExpectation(expectation)) {\n\t\t\t\tthrow new ScaffoldError('WRITE', `The destination at ${path} moved while writing.`, {\n\t\t\t\t\ttarget: this.#target,\n\t\t\t\t\tpath,\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\t\tfor (const path of this.#staged) {\n\t\t\tif (!isPhysicalFile(this.#resolve(this.#stage, path))) {\n\t\t\t\tthrow new ScaffoldError(\n\t\t\t\t\t'WRITE',\n\t\t\t\t\t`The staged file at ${path} is no longer a physical file.`,\n\t\t\t\t\t{\n\t\t\t\t\t\ttarget: this.#target,\n\t\t\t\t\t\tpath,\n\t\t\t\t\t},\n\t\t\t\t)\n\t\t\t}\n\t\t}\n\t}\n\n\t// Preserve the destination's bytes under a second name, then replace the\n\t// directory entry in one rename. The destination names the whole old file\n\t// until that rename lands and the whole new file after it.\n\t#promote(path: string): void {\n\t\tconst expectation = this.#expectation(path)\n\t\tif (!matchesExpectation(expectation)) {\n\t\t\tthrow new ScaffoldError('WRITE', `The destination at ${path} moved while writing.`, { path })\n\t\t}\n\t\tconst staged = this.#resolve(this.#stage, path)\n\t\tif (expectation.shape === 'absent') {\n\t\t\tthis.#created.push(...this.#establish(dirname(expectation.path)).created)\n\t\t} else {\n\t\t\tconst backup = this.#resolve(this.#backup, path)\n\t\t\tmkdirSync(dirname(backup), { recursive: true })\n\t\t\tlinkSync(expectation.path, backup)\n\t\t}\n\t\trenameSync(staged, expectation.path)\n\t}\n\n\t// Move the file out of the target rather than unlinking it, so a later failure\n\t// in the same commit can put the exact bytes back.\n\t#take(path: string): void {\n\t\tconst expectation = this.#expectation(path)\n\t\tif (!matchesExpectation(expectation)) {\n\t\t\tthrow new ScaffoldError('WRITE', `The destination at ${path} moved while writing.`, { path })\n\t\t}\n\t\tconst backup = this.#resolve(this.#backup, path)\n\t\tmkdirSync(dirname(backup), { recursive: true })\n\t\trenameSync(expectation.path, backup)\n\t}\n\n\t// Undo everything this transaction did, newest first, and report what it could\n\t// not undo instead of throwing over the failure that started the rollback.\n\t#recover(promoted: readonly string[], taken: readonly string[]): readonly unknown[] {\n\t\tconst residue: unknown[] = []\n\t\tfor (const path of [...taken].reverse()) {\n\t\t\tconst restored = attempt(() =>\n\t\t\t\trenameSync(this.#resolve(this.#backup, path), this.#expectation(path).path),\n\t\t\t)\n\t\t\tif (!restored.success) residue.push(restored.error)\n\t\t}\n\t\tfor (const path of [...promoted].reverse()) {\n\t\t\tconst expectation = this.#expectation(path)\n\t\t\tconst restored = attempt(() => {\n\t\t\t\tif (expectation.shape === 'absent') {\n\t\t\t\t\trmSync(expectation.path, { force: true })\n\t\t\t\t\treturn\n\t\t\t\t}\n\t\t\t\trenameSync(this.#resolve(this.#backup, path), expectation.path)\n\t\t\t})\n\t\t\tif (!restored.success) residue.push(restored.error)\n\t\t}\n\t\t// The private root holds every preserved copy, so it survives whenever a\n\t\t// restore failed: deleting it there would destroy the only remaining bytes.\n\t\tif (residue.length === 0) {\n\t\t\tconst cleared = attempt(() => rmSync(this.#root, { recursive: true, force: true }))\n\t\t\tif (!cleared.success) residue.push(cleared.error)\n\t\t}\n\t\tfor (const anchor of [...this.#created].reverse()) {\n\t\t\tconst removed = attempt(() => rmdirSync(anchor.path))\n\t\t\tif (!removed.success && !matchesMissingPath(removed.error)) residue.push(removed.error)\n\t\t}\n\t\treturn residue\n\t}\n\n\t// Establish the staged file's parents inside the private root and hand back the\n\t// path to write at. Nothing here reaches the target.\n\t#stagePath(path: string): string {\n\t\tconst staged = this.#resolve(this.#stage, path)\n\t\tmkdirSync(dirname(staged), { recursive: true })\n\t\treturn staged\n\t}\n\n\t// One path may be written, copied, or removed exactly once, and only while the\n\t// transaction is open.\n\t#claim(path: string): WriteExpectation {\n\t\tthis.#assertOpen()\n\t\tconst expectation = this.#expectation(path)\n\t\tif (this.#staged.includes(path) || this.#taken.includes(path)) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'INVALID',\n\t\t\t\t`The path ${path} is already claimed by this transaction.`,\n\t\t\t\t{\n\t\t\t\t\tpath,\n\t\t\t\t},\n\t\t\t)\n\t\t}\n\t\treturn expectation\n\t}\n\n\t#expectation(path: string): WriteExpectation {\n\t\tconst expectation = this.#expectations.get(path)\n\t\tif (expectation === undefined) {\n\t\t\tthrow new ScaffoldError('INVALID', `The path ${path} is not one this transaction opened.`, {\n\t\t\t\tpath,\n\t\t\t})\n\t\t}\n\t\treturn expectation\n\t}\n\n\t#assertOpen(): void {\n\t\tif (!this.#open) {\n\t\t\tthrow new ScaffoldError('WRITE', 'This write transaction is closed.', {\n\t\t\t\ttarget: this.#target,\n\t\t\t})\n\t\t}\n\t}\n}\n","import type { Guard, Result } from '@orkestrel/contract'\nimport type { EmitterInterface } from '@orkestrel/emitter'\nimport type {\n\tArtifact,\n\tAudit,\n\tCatalogEntry,\n\tDependency,\n\tDrift,\n\tFinding,\n\tHostArtifact,\n\tHydratedArtifact,\n\tMirror,\n\tPlan,\n\tScaffoldErrorCode,\n} from '@src/core'\nimport type {\n\tHostManifest,\n\tManifestEntry,\n\tMaterializeResult,\n\tMaterializerEventMap,\n\tMaterializerInterface,\n\tMaterializerOptions,\n\tRepository,\n\tWritePrecondition,\n} from './types.js'\nimport { dirname, resolve } from 'node:path'\nimport { fileURLToPath } from 'node:url'\nimport { attempt } from '@orkestrel/contract'\nimport { Emitter } from '@orkestrel/emitter'\nimport {\n\tCATALOG_AGENT_PATH,\n\tcloneValue,\n\tcomputeBytes,\n\tcontentToHex,\n\tinferGroup,\n\tisAudit,\n\tisPlan,\n\tMAX_ARTIFACT_BYTES,\n\tMAX_MANIFEST_BYTES,\n\tMAX_TOTAL_ARTIFACT_BYTES,\n\tplanToFindings,\n\tScaffoldError,\n} from '@src/core'\nimport {\n\tcomputeFileDigest,\n\tisPhysicalDirectory,\n\tisPhysicalFile,\n\tisVacant,\n\tlistFiles,\n\tmatchesProtectedPath,\n\treadFileHex,\n\treadFileText,\n\treadHostManifest,\n\treadSnapshot,\n\tresolveContainedPath,\n} from './helpers.js'\nimport {\n\tisCatalogEntries,\n\tisDependencies,\n\tisFilesystemPath,\n\tisMaterializerOptions,\n\tisMirrors,\n\tisRepository,\n} from './validators.js'\nimport { WriteTransaction } from './WriteTransaction.js'\n\n/**\n * The mutation spine: read the vendored host, re-derive the target, stage, swap.\n *\n * @remarks\n * Every verb runs the same three steps. It snapshots each caller-supplied value\n * and guards the snapshot, so a property backed by an accessor never reaches a\n * decision. It re-derives what it is about to touch and compares that against\n * the observation the caller handed in, refusing the whole call when anything\n * moved. Only then does it open a {@link WriteTransaction}, which stages every\n * byte in a private sibling directory and swaps them into place.\n *\n * The vendored host is read once, at construction, and cross-checked once. Its\n * manifest authenticates its own membership, which is all a checksum sitting\n * beside the data can do; matching that membership against the files actually\n * stored is this class's job. The comparison is exact text and therefore exact\n * case, so a manifest naming `agents.md` for a stored `AGENTS.md` is refused on\n * a case-insensitive filesystem rather than silently resolved.\n *\n * What a mutation guarantees is exactly what {@link WriteTransaction}\n * guarantees, and no more: a caught failure part way through a commit rolls the\n * whole commit back, no destination ever receives half-written bytes, and a\n * process killed mid-commit leaves a mixed target. This is not a journal and\n * does not claim to be one.\n *\n * Every error is emitted on `error` immediately before it is thrown, so an\n * observer sees a refusal even where the caller catches it.\n *\n * @example\n * ```ts\n * import type { Plan } from '@orkestrel/scaffold'\n * import { Materializer } from '@orkestrel/scaffold/server'\n *\n * declare const plan: Plan\n *\n * const materializer = new Materializer({ host: './dist/host' })\n * materializer.materialize(plan, './packages/router')\n * materializer.destroy()\n * ```\n */\nexport class Materializer implements MaterializerInterface {\n\t// The marker pair bounding the package table inside the catalog agent file.\n\t// It sits here rather than in `constants.ts` because that file is frozen; the\n\t// artifact that renders the file must read the same pair, so the pair belongs\n\t// in core as soon as both consumers exist.\n\tstatic readonly #opening = '<!-- orkestrel:catalog -->'\n\tstatic readonly #closing = '<!-- /orkestrel:catalog -->'\n\n\treadonly #emitter: Emitter<MaterializerEventMap>\n\treadonly #host: string\n\treadonly #manifest: HostManifest | undefined\n\treadonly #entries: ReadonlyMap<string, ManifestEntry>\n\t#destroyed = false\n\n\t/**\n\t * Construct a materializer over one vendored host root.\n\t *\n\t * @param options - The vendored host root, the initial listeners, and the\n\t * listener-error handler.\n\t * @throws {@link ScaffoldError} coded `INVALID` when `options` is present but\n\t * is not an option bag this materializer accepts, and `TARGET` when the host\n\t * carries a manifest that cannot be read or does not match what it stores.\n\t *\n\t * @remarks\n\t * `host` defaults to this package's own vendored root, resolved from this\n\t * module's own location so it never depends on the caller's working\n\t * directory. A host carrying no manifest is read as a raw checkout and every\n\t * artifact maps onto it one to one.\n\t *\n\t * The host is read here rather than on first use, so a broken vendored root\n\t * fails at construction where the caller can still act on it, and so nothing\n\t * has to carry a second flag recording whether the read has happened yet.\n\t */\n\tconstructor(options?: MaterializerOptions) {\n\t\tif (options !== undefined && !isMaterializerOptions(options)) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'INVALID',\n\t\t\t\t'The options argument is not the exact shape this materializer accepts.',\n\t\t\t\t{ field: 'options' },\n\t\t\t)\n\t\t}\n\t\tthis.#emitter = new Emitter<MaterializerEventMap>({\n\t\t\t...(options?.on === undefined ? {} : { on: options.on }),\n\t\t\t...(options?.error === undefined ? {} : { error: options.error }),\n\t\t})\n\t\tthis.#host = options?.host ?? resolve(dirname(fileURLToPath(import.meta.url)), '../../host')\n\t\tconst read = attempt(() => readHostManifest(this.#host))\n\t\tif (!read.success) {\n\t\t\tthrow this.#error('TARGET', 'The vendored host carries a manifest that cannot be read.', {\n\t\t\t\thost: this.#host,\n\t\t\t\terror: read.error,\n\t\t\t})\n\t\t}\n\t\tthis.#manifest = read.value\n\t\tthis.#entries = new Map<string, ManifestEntry>(\n\t\t\t(read.value?.entries ?? []).map((entry) => [entry.destination, entry]),\n\t\t)\n\t\tif (read.value !== undefined) this.#reconcile(read.value)\n\t}\n\n\t/** The materializer's observation channel. */\n\tget emitter(): EmitterInterface<MaterializerEventMap> {\n\t\treturn this.#emitter\n\t}\n\n\t/**\n\t * Compare a plan with a target through the vendored host that will repair it.\n\t *\n\t * @param plan - The compiled plan to compare.\n\t * @param target - The directory to inspect.\n\t * @returns One finding per hydrated planned path, plus foreign files beneath owned host roots.\n\t * @throws {@link ScaffoldError} coded `INVALID` when an argument is not the\n\t * exact shape, `TARGET` when the host or target cannot be read within its\n\t * bounds, and `DESTROYED` after teardown.\n\t *\n\t * @remarks\n\t * Host directories expand before the target is read, so this method and\n\t * {@link repair} compare the same paths with the same ownership. Foreign\n\t * candidates are files beneath those expanded roots only; a root file never\n\t * becomes a deletion candidate merely because its group is selected.\n\t */\n\taudit(plan: Plan, target: string): Audit {\n\t\tthis.#assertAlive()\n\t\tconst accepted = this.#accept(plan, isPlan, 'plan')\n\t\tconst directory = this.#accept(target, isFilesystemPath, 'target')\n\t\treturn this.#derive(accepted, directory)\n\t}\n\n\t/**\n\t * Write a plan into a vacant target.\n\t *\n\t * @param plan - The compiled plan to write.\n\t * @param target - The directory to write into; it must hold nothing the plan would collide with.\n\t * @returns The paths written and skipped.\n\t * @throws {@link ScaffoldError} coded `INVALID` when an argument is not the\n\t * exact shape, `TARGET` when the target is not vacant or the host does not\n\t * carry a planned artifact, `WRITE` when the write cannot be staged or\n\t * committed, and `DESTROYED` after teardown.\n\t *\n\t * @remarks\n\t * The plan's own bytes are not trusted: every host-origin artifact is re-read\n\t * from the vendored root, so what lands is what this package ships rather than\n\t * what a caller-built plan claimed it ships. A vendored directory expands into\n\t * one artifact per file beneath it, and a vendored directory holding no file\n\t * at all is created as an empty directory.\n\t */\n\tmaterialize(plan: Plan, target: string): MaterializeResult {\n\t\tthis.#assertAlive()\n\t\tconst accepted = this.#accept(plan, isPlan, 'plan')\n\t\tconst directory = this.#accept(target, isFilesystemPath, 'target')\n\t\tif (!isVacant(directory)) {\n\t\t\tthrow this.#error('TARGET', `The target at ${directory} is not vacant.`, {\n\t\t\t\ttarget: directory,\n\t\t\t})\n\t\t}\n\t\tconst empty = this.#empty(accepted)\n\t\tconst hydrated = this.#hydrate(accepted)\n\t\treturn this.#apply(directory, hydrated.artifacts, empty, [], [])\n\t}\n\n\t/**\n\t * Write a plan into an existing target, guided by an audit of it.\n\t *\n\t * @param plan - The compiled plan to write.\n\t * @param audit - The preview returned by this materializer's `audit` method.\n\t * @param target - The directory to write into.\n\t * @returns The paths written and skipped, each decided by its artifact's ownership.\n\t * @throws {@link ScaffoldError} coded `INVALID` when an argument is not the\n\t * exact shape, `TARGET` when the target moved since its audit, `WRITE` when\n\t * the write cannot be staged or committed, and `DESTROYED` after teardown.\n\t *\n\t * @remarks\n\t * The audit is a preview, not an instruction. The plan is hydrated and\n\t * compared against the target again here, and the verdicts that produces must\n\t * match the ones the audit carried for every path the plan owns; anything else\n\t * means the target moved, and the whole call is refused. A missing destination\n\t * is restored whatever its ownership; a stale one is replaced only where the\n\t * artifact claims its bytes, which is what leaves a presence-owned file a\n\t * consumer has edited exactly as it is.\n\t */\n\trepair(plan: Plan, audit: Audit, target: string): MaterializeResult {\n\t\tthis.#assertAlive()\n\t\tconst accepted = this.#accept(plan, isPlan, 'plan')\n\t\tconst preview = this.#accept(audit, isAudit, 'audit')\n\t\tconst directory = this.#accept(target, isFilesystemPath, 'target')\n\t\tconst hydrated = this.#hydrate(accepted)\n\t\tconst derived = this.#derive(accepted, directory, hydrated)\n\t\tthis.#reconfirm(derived.findings, preview.findings, directory)\n\t\tconst drifted = new Map<string, Drift>(\n\t\t\tderived.findings.map((finding) => [finding.path, finding.drift]),\n\t\t)\n\t\tconst writes: Artifact[] = []\n\t\tconst skipped: string[] = []\n\t\tconst preconditions: WritePrecondition[] = []\n\t\tfor (const artifact of hydrated.artifacts) {\n\t\t\tconst drift = drifted.get(artifact.path)\n\t\t\tif (drift !== 'missing' && drift !== 'stale') {\n\t\t\t\tskipped.push(artifact.path)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tpreconditions.push(this.#bind(directory, artifact.path, drift === 'missing'))\n\t\t\twrites.push(artifact)\n\t\t}\n\t\treturn this.#apply(directory, writes, [], skipped, preconditions)\n\t}\n\n\t/**\n\t * Write fetched dependency guides to their local mirrors.\n\t *\n\t * @param mirrors - The fetched guides; each carries the local bytes its write is held to.\n\t * @param target - The directory to write into.\n\t * @returns The mirror paths written and skipped; a mirror already current is skipped.\n\t * @throws {@link ScaffoldError} coded `INVALID` when an argument is not the\n\t * exact shape, `TARGET` when a mirror moved since it was fetched, `WRITE` when\n\t * the write cannot be staged or committed, and `DESTROYED` after teardown.\n\t *\n\t * @remarks\n\t * A verdict carrying no bytes carries a cause instead, so it is skipped rather\n\t * than written: one unreachable package never costs the caller the rest of the\n\t * fetch, and it never empties a mirror it could not replace.\n\t */\n\tmirror(mirrors: readonly Mirror[], target: string): MaterializeResult {\n\t\tthis.#assertAlive()\n\t\tconst accepted = this.#accept(mirrors, isMirrors, 'mirrors')\n\t\tconst directory = this.#accept(target, isFilesystemPath, 'target')\n\t\tconst writes: Artifact[] = []\n\t\tconst skipped: string[] = []\n\t\tconst preconditions: WritePrecondition[] = []\n\t\tfor (const fetched of accepted) {\n\t\t\tif (fetched.lookup !== 'found' || fetched.observed === contentToHex(fetched.content)) {\n\t\t\t\tskipped.push(fetched.path)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconst current = readFileHex(directory, fetched.path)\n\t\t\tif (current !== fetched.observed) {\n\t\t\t\tthrow this.#error('TARGET', `The mirror at ${fetched.path} moved since it was fetched.`, {\n\t\t\t\t\ttarget: directory,\n\t\t\t\t\tpath: fetched.path,\n\t\t\t\t})\n\t\t\t}\n\t\t\tpreconditions.push(this.#bind(directory, fetched.path, current === undefined))\n\t\t\twrites.push({\n\t\t\t\tpath: fetched.path,\n\t\t\t\tgroup: inferGroup(fetched.path),\n\t\t\t\townership: 'content',\n\t\t\t\torigin: 'computed',\n\t\t\t\tcontent: fetched.content,\n\t\t\t})\n\t\t}\n\t\treturn this.#apply(directory, writes, [], skipped, preconditions)\n\t}\n\n\t/**\n\t * Rewrite the marker-bounded package table in the target's catalog agent file.\n\t *\n\t * @param entries - The published packages the table should list.\n\t * @param target - The directory to write into.\n\t * @returns The catalog path, written when the region's bytes moved and skipped otherwise.\n\t * @throws {@link ScaffoldError} coded `INVALID` when an argument is not the\n\t * exact shape, `TARGET` when the file is unreadable or carries no marked\n\t * region, `WRITE` when the write cannot be staged or committed, and\n\t * `DESTROYED` after teardown.\n\t *\n\t * @remarks\n\t * Only the text between the two markers is replaced, so every word a consumer\n\t * wrote around the table survives the call. A row whose lookup produced no\n\t * version prints the cause it carries instead, because dropping the row would\n\t * hide a package the organization publishes behind one failed request.\n\t */\n\tcatalog(entries: readonly CatalogEntry[], target: string): MaterializeResult {\n\t\tthis.#assertAlive()\n\t\tconst accepted = this.#accept(entries, isCatalogEntries, 'entries')\n\t\tconst directory = this.#accept(target, isFilesystemPath, 'target')\n\t\treturn this.#rewrite(\n\t\t\tdirectory,\n\t\t\tCATALOG_AGENT_PATH,\n\t\t\tMAX_ARTIFACT_BYTES,\n\t\t\tthis.#recatalog(accepted),\n\t\t)\n\t}\n\n\t/**\n\t * Rewrite the `@orkestrel/*` range set in the target's manifest.\n\t *\n\t * @param dependencies - The names and ranges the manifest should declare.\n\t * @param target - The directory to write into.\n\t * @returns The manifest path, written when a declared range moved and skipped otherwise.\n\t * @throws {@link ScaffoldError} coded `INVALID` when an argument is not the\n\t * exact shape or names a package the manifest does not declare, `TARGET` when\n\t * the manifest is unreadable, `WRITE` when the write cannot be staged or\n\t * committed, and `DESTROYED` after teardown.\n\t *\n\t * @remarks\n\t * No other part of the manifest is read back out or rewritten, so a consumer's\n\t * own description, keywords, scripts, and formatting survive the call. Only a\n\t * range already declared is rewritten: inserting a package would mean\n\t * re-serializing the whole manifest, which is exactly the edit this verb\n\t * promises not to make, so an undeclared name is refused by name instead.\n\t */\n\tdeclare(dependencies: readonly Dependency[], target: string): MaterializeResult {\n\t\tthis.#assertAlive()\n\t\tconst accepted = this.#accept(dependencies, isDependencies, 'dependencies')\n\t\tconst directory = this.#accept(target, isFilesystemPath, 'target')\n\t\treturn this.#rewrite(directory, 'package.json', MAX_MANIFEST_BYTES, this.#redeclare(accepted))\n\t}\n\n\t/**\n\t * Delete the files the plan does not own.\n\t *\n\t * @param audit - The preview returned by this materializer's `audit` method; its foreign findings are the candidate set.\n\t * @param repository - The target's git state; only a tracked path is ever deleted.\n\t * @param target - The directory to delete from.\n\t * @returns The paths removed.\n\t * @throws {@link ScaffoldError} coded `INVALID` when an argument is not the\n\t * exact shape, `TARGET` when the tree carries uncommitted changes or a\n\t * candidate moved since its audit, `WRITE` when the deletion cannot be staged\n\t * or committed, and `DESTROYED` after teardown.\n\t *\n\t * @remarks\n\t * The candidate set is re-derived and compared against the audit before\n\t * anything moves, and every file is quarantined and re-verified rather than\n\t * unlinked, so a failure part way through restores what it already took. The\n\t * package's own source and application trees are never candidates, whatever\n\t * the audit reports, and neither is anything git does not track: git is the\n\t * recovery mechanism, so a path it cannot restore is not one this verb takes.\n\t * A tree carrying uncommitted work is refused whole for the same reason.\n\t */\n\tremove(audit: Audit, repository: Repository, target: string): MaterializeResult {\n\t\tthis.#assertAlive()\n\t\tconst preview = this.#accept(audit, isAudit, 'audit')\n\t\tconst state = this.#accept(repository, isRepository, 'repository')\n\t\tconst directory = this.#accept(target, isFilesystemPath, 'target')\n\t\tif (state.dirty.length > 0) {\n\t\t\tthrow this.#error('TARGET', `The target at ${directory} carries uncommitted changes.`, {\n\t\t\t\ttarget: directory,\n\t\t\t\tdirty: state.dirty.length,\n\t\t\t})\n\t\t}\n\t\tconst tracked = new Set(state.tracked)\n\t\tconst observed = new Map<string, string | undefined>()\n\t\tconst removals: string[] = []\n\t\tconst skipped: string[] = []\n\t\tfor (const finding of preview.findings) {\n\t\t\tif (finding.drift !== 'foreign') continue\n\t\t\tif (!tracked.has(finding.path) || matchesProtectedPath(finding.path)) {\n\t\t\t\tskipped.push(finding.path)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tobserved.set(finding.path, finding.observed)\n\t\t\tremovals.push(finding.path)\n\t\t}\n\t\tconst current = readSnapshot(directory, removals)\n\t\tconst preconditions: WritePrecondition[] = []\n\t\tfor (const path of removals) {\n\t\t\tif (current[path] !== observed.get(path)) {\n\t\t\t\tthrow this.#error('TARGET', `The path ${path} moved since its audit.`, {\n\t\t\t\t\ttarget: directory,\n\t\t\t\t\tpath,\n\t\t\t\t})\n\t\t\t}\n\t\t\tpreconditions.push(this.#bind(directory, path, false))\n\t\t}\n\t\treturn this.#purge(directory, removals, skipped, preconditions)\n\t}\n\n\t/**\n\t * Tear the materializer down. Every later call throws, and teardown is idempotent.\n\t *\n\t * @returns Nothing.\n\t *\n\t * @example\n\t * ```ts\n\t * import { Materializer } from '@orkestrel/scaffold/server'\n\t *\n\t * const materializer = new Materializer()\n\t * materializer.destroy()\n\t * materializer.emitter.destroyed // true\n\t * ```\n\t */\n\tdestroy(): void {\n\t\tif (this.#destroyed) return\n\t\tthis.#destroyed = true\n\t\tthis.#emitter.emit('destroy')\n\t\tthis.#emitter.destroy()\n\t}\n\n\t// The claim a manifest cannot make about itself: that what it declares is what\n\t// the host actually stores, one to one and spelled the same way. Compared as\n\t// exact text against a real directory walk, so a case-folded name on a\n\t// case-insensitive filesystem is a refusal rather than a silent resolution.\n\t#reconcile(manifest: HostManifest): void {\n\t\tconst walked = attempt(() => listFiles(this.#host))\n\t\tif (!walked.success) {\n\t\t\tthrow this.#error('TARGET', 'The vendored host cannot be inventoried.', {\n\t\t\t\thost: this.#host,\n\t\t\t\terror: walked.error,\n\t\t\t})\n\t\t}\n\t\tconst declared = [...manifest.entries.map((entry) => entry.storage), 'manifest.json'].sort()\n\t\tconst stored = walked.value\n\t\tif (\n\t\t\tstored.length !== declared.length ||\n\t\t\tstored.some((name, index) => name !== declared[index])\n\t\t) {\n\t\t\tthrow this.#error('TARGET', 'The vendored host does not store what its manifest declares.', {\n\t\t\t\thost: this.#host,\n\t\t\t\tstored: stored.length,\n\t\t\t\tdeclared: declared.length,\n\t\t\t})\n\t\t}\n\t\tif (this.#entries.size !== manifest.entries.length) {\n\t\t\tthrow this.#error('TARGET', 'The vendored host manifest maps two files to one destination.', {\n\t\t\t\thost: this.#host,\n\t\t\t})\n\t\t}\n\t}\n\n\t// Replace every host-origin artifact with what the vendored root actually\n\t// holds. A directory becomes one artifact per file beneath it; the destinations\n\t// another verb owns the bytes of stay presence-owned, because a byte claim this\n\t// verb cannot keep is one the audit beside it would immediately fail.\n\t#hydrate(plan: Plan): Plan {\n\t\tconst artifacts: Artifact[] = []\n\t\tlet remaining = MAX_TOTAL_ARTIFACT_BYTES\n\t\tfor (const artifact of plan.artifacts) {\n\t\t\tif (artifact.origin !== 'host') {\n\t\t\t\tremaining -= computeBytes(artifact.content)\n\t\t\t\tartifacts.push(artifact)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconst expanded = this.#expand(artifact, remaining)\n\t\t\tfor (const one of expanded) remaining -= (one.hex?.length ?? 0) / 2\n\t\t\tartifacts.push(...expanded)\n\t\t}\n\t\tif (remaining < 0) {\n\t\t\tthrow this.#error('TARGET', 'The hydrated plan retains more bytes than one plan may.', {\n\t\t\t\thost: this.#host,\n\t\t\t\tlimit: MAX_TOTAL_ARTIFACT_BYTES,\n\t\t\t})\n\t\t}\n\t\treturn { blueprint: plan.blueprint, groups: plan.groups, artifacts }\n\t}\n\n\t// Hydrate once, extend the target snapshot only beneath vendored directories\n\t// this plan expands, then run the core comparison over that one population.\n\t// Repair may supply the hydrated plan it already needs for writes, while the\n\t// public audit lets this method own the hydration itself.\n\t#derive(plan: Plan, target: string, hydrated = this.#hydrate(plan)): Audit {\n\t\tconst paths = new Set(hydrated.artifacts.map((artifact) => artifact.path))\n\t\tfor (const root of this.#roots(plan)) {\n\t\t\tconst directory = resolveContainedPath(target, root)\n\t\t\tif (directory === undefined) {\n\t\t\t\tthrow this.#error('TARGET', `The owned root at ${root} leaves its target.`, {\n\t\t\t\t\ttarget,\n\t\t\t\t\tpath: root,\n\t\t\t\t})\n\t\t\t}\n\t\t\tfor (const name of listFiles(directory)) paths.add(`${root}/${name}`)\n\t\t}\n\t\treturn {\n\t\t\tfindings: planToFindings(hydrated, readSnapshot(target, [...paths])),\n\t\t\tquestions: [],\n\t\t}\n\t}\n\n\t// The target roots scaffold owns completely are exactly the host directories\n\t// this plan expands. A manifest states the directory shape; a raw host is\n\t// inspected directly. Files and host roots outside the plan never enter the set.\n\t#roots(plan: Plan): readonly string[] {\n\t\tconst roots = new Set<string>()\n\t\tfor (const artifact of plan.artifacts) {\n\t\t\tif (artifact.origin !== 'host') continue\n\t\t\tconst source = artifact.source ?? artifact.path\n\t\t\tif (this.#manifest?.roots.includes(source) === true) {\n\t\t\t\troots.add(artifact.path)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (this.#manifest !== undefined) continue\n\t\t\tconst directory = resolveContainedPath(this.#host, source)\n\t\t\tif (directory !== undefined && isPhysicalDirectory(directory)) roots.add(artifact.path)\n\t\t}\n\t\treturn [...roots]\n\t}\n\n\t// One host artifact against the vendored root, through the manifest when the\n\t// root carries one and one to one when it does not.\n\t#expand(artifact: HostArtifact | HydratedArtifact, remaining: number): readonly Artifact[] {\n\t\tconst manifest = this.#manifest\n\t\tconst source = artifact.source ?? artifact.path\n\t\tif (manifest === undefined) return this.#expandRaw(artifact, source, remaining)\n\t\tconst matched = manifest.entries.filter(\n\t\t\t(entry) => entry.destination === source || entry.destination.startsWith(`${source}/`),\n\t\t)\n\t\tconst rooted = manifest.roots.some((root) => root === source || root.startsWith(`${source}/`))\n\t\tif (matched.length === 0 && !rooted) {\n\t\t\tthrow this.#error('TARGET', `The vendored host does not carry ${source}.`, {\n\t\t\t\thost: this.#host,\n\t\t\t\tsource,\n\t\t\t})\n\t\t}\n\t\tconst expanded: Artifact[] = []\n\t\tlet budget = remaining\n\t\tfor (const entry of matched) {\n\t\t\tconst path = this.#remap(artifact, entry.destination)\n\t\t\tif (this.#deferred(path)) {\n\t\t\t\texpanded.push(this.#presence(artifact, path, entry.destination))\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconst hex = this.#read(entry.storage, budget)\n\t\t\tbudget -= hex.length / 2\n\t\t\texpanded.push(this.#hydrated(artifact, path, entry.destination, hex))\n\t\t}\n\t\treturn expanded\n\t}\n\n\t// A host root with no manifest is a plain checkout, so a destination maps onto\n\t// it under the name it is written to and a directory is walked directly.\n\t#expandRaw(\n\t\tartifact: HostArtifact | HydratedArtifact,\n\t\tsource: string,\n\t\tremaining: number,\n\t): readonly Artifact[] {\n\t\tconst full = resolveContainedPath(this.#host, source)\n\t\tif (full === undefined) {\n\t\t\tthrow this.#error('TARGET', `The host source at ${source} leaves its root.`, {\n\t\t\t\thost: this.#host,\n\t\t\t\tsource,\n\t\t\t})\n\t\t}\n\t\tif (isPhysicalFile(full)) {\n\t\t\treturn [\n\t\t\t\tthis.#deferred(artifact.path)\n\t\t\t\t\t? this.#presence(artifact, artifact.path, source)\n\t\t\t\t\t: this.#hydrated(artifact, artifact.path, source, this.#read(source, remaining)),\n\t\t\t]\n\t\t}\n\t\tif (!isPhysicalDirectory(full)) {\n\t\t\tthrow this.#error('TARGET', `The host source at ${source} is not a readable file.`, {\n\t\t\t\thost: this.#host,\n\t\t\t\tsource,\n\t\t\t})\n\t\t}\n\t\tconst expanded: Artifact[] = []\n\t\tlet budget = remaining\n\t\tfor (const name of listFiles(full)) {\n\t\t\tconst path = `${artifact.path}/${name}`\n\t\t\tconst destination = `${source}/${name}`\n\t\t\tif (this.#deferred(path)) {\n\t\t\t\texpanded.push(this.#presence(artifact, path, destination))\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconst hex = this.#read(destination, budget)\n\t\t\tbudget -= hex.length / 2\n\t\t\texpanded.push(this.#hydrated(artifact, path, destination, hex))\n\t\t}\n\t\treturn expanded\n\t}\n\n\t// The vendored directories holding no file at all. They are the one thing a\n\t// file inventory cannot report, which is why the manifest declares them, and a\n\t// plan covering their parent covers them.\n\t#empty(plan: Plan): readonly string[] {\n\t\tconst manifest = this.#manifest\n\t\tif (manifest === undefined) return []\n\t\tconst directories = new Set<string>()\n\t\tfor (const artifact of plan.artifacts) {\n\t\t\tif (artifact.origin !== 'host') continue\n\t\t\tconst source = artifact.source ?? artifact.path\n\t\t\tfor (const root of manifest.roots) {\n\t\t\t\tif (root !== source && !root.startsWith(`${source}/`)) continue\n\t\t\t\tconst filled = manifest.entries.some(\n\t\t\t\t\t(entry) => entry.destination === root || entry.destination.startsWith(`${root}/`),\n\t\t\t\t)\n\t\t\t\tif (!filled) directories.add(this.#remap(artifact, root))\n\t\t\t}\n\t\t}\n\t\treturn [...directories].sort()\n\t}\n\n\t// Move one manifest destination from the artifact's source prefix onto its\n\t// target prefix, so a vendored directory expands under the path the plan wrote\n\t// rather than under the name the host stores it as.\n\t#remap(artifact: HostArtifact | HydratedArtifact, destination: string): string {\n\t\tconst source = artifact.source ?? artifact.path\n\t\tif (destination === source) return artifact.path\n\t\tif (!destination.startsWith(`${source}/`)) {\n\t\t\tthrow this.#error('TARGET', `The vendored destination ${destination} is outside ${source}.`, {\n\t\t\t\thost: this.#host,\n\t\t\t\tsource,\n\t\t\t\tdestination,\n\t\t\t})\n\t\t}\n\t\treturn `${artifact.path}/${destination.slice(source.length + 1)}`\n\t}\n\n\t// The destinations whose bytes belong to another verb: the catalog agent file,\n\t// whose marked region `catalog` owns, and every guide mirror, which `mirror`\n\t// refetches. Hydrating them would claim a byte comparison the verb that owns\n\t// them is about to break.\n\t#deferred(path: string): boolean {\n\t\treturn path === CATALOG_AGENT_PATH || (path.startsWith('guides/') && path.endsWith('.md'))\n\t}\n\n\t#presence(\n\t\tartifact: HostArtifact | HydratedArtifact,\n\t\tpath: string,\n\t\tdestination: string,\n\t): HostArtifact {\n\t\treturn {\n\t\t\tpath,\n\t\t\tgroup: artifact.group,\n\t\t\townership: 'presence',\n\t\t\torigin: 'host',\n\t\t\tsource: destination,\n\t\t\t...(artifact.environment === undefined ? {} : { environment: artifact.environment }),\n\t\t}\n\t}\n\n\t#hydrated(\n\t\tartifact: HostArtifact | HydratedArtifact,\n\t\tpath: string,\n\t\tdestination: string,\n\t\thex: string,\n\t): HydratedArtifact {\n\t\treturn {\n\t\t\tpath,\n\t\t\tgroup: artifact.group,\n\t\t\townership: 'content',\n\t\t\torigin: 'host',\n\t\t\tsource: destination,\n\t\t\t...(artifact.environment === undefined ? {} : { environment: artifact.environment }),\n\t\t\thex,\n\t\t}\n\t}\n\n\t#read(storage: string, budget: number): string {\n\t\tconst hex = readFileHex(this.#host, storage, Math.max(0, Math.min(MAX_ARTIFACT_BYTES, budget)))\n\t\tif (hex === undefined) {\n\t\t\tthrow this.#error('TARGET', `The vendored host cannot be read at ${storage}.`, {\n\t\t\t\thost: this.#host,\n\t\t\t\tstorage,\n\t\t\t})\n\t\t}\n\t\treturn hex\n\t}\n\n\t// The audit is a preview of the same comparison this call just made, so the two\n\t// must agree on every path the plan owns. A wider audit may also carry foreign\n\t// paths, which belong to the deletion verb and say nothing here.\n\t#reconfirm(derived: readonly Finding[], preview: readonly Finding[], target: string): void {\n\t\tconst previewed = new Map<string, Finding>(preview.map((finding) => [finding.path, finding]))\n\t\tfor (const finding of derived) {\n\t\t\tif (finding.drift === 'foreign') continue\n\t\t\tconst other = previewed.get(finding.path)\n\t\t\tif (other === undefined) {\n\t\t\t\tthrow this.#error('TARGET', `The path ${finding.path} is not covered by its audit.`, {\n\t\t\t\t\ttarget,\n\t\t\t\t\tpath: finding.path,\n\t\t\t\t})\n\t\t\t}\n\t\t\tif (other.drift === finding.drift && other.observed === finding.observed) continue\n\t\t\tthrow this.#error('TARGET', `The path ${finding.path} moved since its audit.`, {\n\t\t\t\ttarget,\n\t\t\t\tpath: finding.path,\n\t\t\t})\n\t\t}\n\t}\n\n\t// Bind one destination to what this call just observed at it. The digest is\n\t// taken now rather than derived from the observation, because a digest over\n\t// bytes nobody re-read would only restate what the comparison already proved.\n\t#bind(target: string, path: string, absent: boolean): WritePrecondition {\n\t\tconst destination = resolveContainedPath(target, path)\n\t\tif (destination === undefined) {\n\t\t\tthrow this.#error('INVALID', `The path ${path} is off contract or leaves its target.`, {\n\t\t\t\ttarget,\n\t\t\t\tpath,\n\t\t\t})\n\t\t}\n\t\tif (absent) return { path: destination, shape: 'absent' }\n\t\tconst digest = computeFileDigest(destination)\n\t\tif (digest === undefined) {\n\t\t\tthrow this.#error('TARGET', `The path ${path} moved while it was being bound.`, {\n\t\t\t\ttarget,\n\t\t\t\tpath,\n\t\t\t})\n\t\t}\n\t\treturn { path: destination, shape: 'file', digest }\n\t}\n\n\t// Read one whole text file, hand it to the rewrite that owns it, and write it\n\t// back only when its bytes actually moved.\n\t#rewrite(\n\t\ttarget: string,\n\t\tpath: string,\n\t\tlimit: number,\n\t\trewrite: (text: string) => string,\n\t): MaterializeResult {\n\t\tconst text = readFileText(target, path, limit)\n\t\tif (text === undefined) {\n\t\t\tthrow this.#error('TARGET', `The file at ${path} is not readable text.`, { target, path })\n\t\t}\n\t\tconst content = rewrite(text)\n\t\tif (content === text) {\n\t\t\treturn this.#finish({ target, written: [], skipped: [path], removed: [] })\n\t\t}\n\t\treturn this.#apply(\n\t\t\ttarget,\n\t\t\t[{ path, group: inferGroup(path), ownership: 'content', origin: 'computed', content }],\n\t\t\t[],\n\t\t\t[],\n\t\t\t[this.#bind(target, path, false)],\n\t\t)\n\t}\n\n\t// Stage every write in one transaction and swap them in together, so a target\n\t// either receives the whole set or is left as it was found.\n\t#apply(\n\t\ttarget: string,\n\t\twrites: readonly Artifact[],\n\t\tdirectories: readonly string[],\n\t\tskipped: readonly string[],\n\t\tpreconditions: readonly WritePrecondition[],\n\t): MaterializeResult {\n\t\tconst paths = [...writes.map((artifact) => artifact.path), ...directories]\n\t\tif (paths.length === 0) return this.#finish({ target, written: [], skipped, removed: [] })\n\t\tconst transaction = this.#open(target, paths, preconditions)\n\t\tconst staged = attempt(() => {\n\t\t\tfor (const artifact of writes) {\n\t\t\t\tif (artifact.origin === 'host') this.#copy(transaction, artifact)\n\t\t\t\telse transaction.write(artifact.path, artifact.content)\n\t\t\t}\n\t\t\tfor (const path of directories) transaction.directory(path)\n\t\t})\n\t\tconst written = this.#close(transaction, staged, target)\n\t\tfor (const path of written) this.#emitter.emit('write', path)\n\t\treturn this.#finish({ target, written, skipped, removed: [] })\n\t}\n\n\t// Quarantine every candidate in one transaction. A deletion that fails part way\n\t// through puts back what it already took.\n\t#purge(\n\t\ttarget: string,\n\t\tremovals: readonly string[],\n\t\tskipped: readonly string[],\n\t\tpreconditions: readonly WritePrecondition[],\n\t): MaterializeResult {\n\t\tif (removals.length === 0) return this.#finish({ target, written: [], skipped, removed: [] })\n\t\tconst transaction = this.#open(target, removals, preconditions)\n\t\tconst staged = attempt(() => {\n\t\t\tfor (const path of removals) transaction.remove(path)\n\t\t})\n\t\tconst removed = this.#close(transaction, staged, target)\n\t\tfor (const path of removed) this.#emitter.emit('remove', path)\n\t\treturn this.#finish({ target, written: [], skipped, removed })\n\t}\n\n\t#open(\n\t\ttarget: string,\n\t\tpaths: readonly string[],\n\t\tpreconditions: readonly WritePrecondition[],\n\t): WriteTransaction {\n\t\tconst opened = attempt(() => new WriteTransaction(target, paths, preconditions))\n\t\tif (opened.success) return opened.value\n\t\tthis.#emitter.emit('error', opened.error)\n\t\tthrow opened.error\n\t}\n\n\t// Commit a staged transaction, or discard it and republish whichever failure\n\t// the caller has to act on. The transaction's own coded reason survives, so a\n\t// destination that moved is still told apart from a write that could not land.\n\t#close(transaction: WriteTransaction, staged: Result<void>, target: string): readonly string[] {\n\t\tif (!staged.success) {\n\t\t\tconst cleared = attempt(() => transaction.discard())\n\t\t\tif (!cleared.success) {\n\t\t\t\tthrow this.#error('WRITE', `The write into ${target} could not be staged or cleared.`, {\n\t\t\t\t\ttarget,\n\t\t\t\t\terror: staged.error,\n\t\t\t\t\tcleanup: cleared.error,\n\t\t\t\t})\n\t\t\t}\n\t\t\tthis.#emitter.emit('error', staged.error)\n\t\t\tthrow staged.error\n\t\t}\n\t\tconst committed = attempt(() => transaction.commit())\n\t\tif (committed.success) return committed.value\n\t\tthis.#emitter.emit('error', committed.error)\n\t\tthrow committed.error\n\t}\n\n\t// Stage one vendored file, under the storage name the manifest holds it as and\n\t// with the executable bit that manifest records.\n\t#copy(transaction: WriteTransaction, artifact: HostArtifact | HydratedArtifact): void {\n\t\tconst destination = artifact.source ?? artifact.path\n\t\tconst entry = this.#entries.get(destination)\n\t\tconst storage = entry === undefined ? destination : entry.storage\n\t\tconst source = resolveContainedPath(this.#host, storage)\n\t\tif (source === undefined) {\n\t\t\tthrow this.#error('TARGET', `The vendored source at ${storage} leaves its root.`, {\n\t\t\t\thost: this.#host,\n\t\t\t\tstorage,\n\t\t\t})\n\t\t}\n\t\ttransaction.copy(artifact.path, source, entry?.executable === true)\n\t}\n\n\t// The catalog table, rendered between the markers that bound it.\n\t#recatalog(entries: readonly CatalogEntry[]): (text: string) => string {\n\t\tconst rows = entries.map(\n\t\t\t(entry) =>\n\t\t\t\t`| \\`${entry.name}\\` | ${entry.lookup === 'found' ? `\\`${entry.version}\\`` : this.#cell(entry.note)} |`,\n\t\t)\n\t\tconst table = ['| Package | Version |', '| --- | --- |', ...rows].join('\\n')\n\t\treturn (text: string) => {\n\t\t\tconst opening = text.indexOf(Materializer.#opening)\n\t\t\tconst closing = text.indexOf(Materializer.#closing, opening + Materializer.#opening.length)\n\t\t\tif (opening < 0 || closing < 0) {\n\t\t\t\tthrow this.#error('TARGET', 'The catalog agent file carries no marked region.', {\n\t\t\t\t\tpath: CATALOG_AGENT_PATH,\n\t\t\t\t})\n\t\t\t}\n\t\t\treturn `${text.slice(0, opening + Materializer.#opening.length)}\\n${table}\\n${text.slice(closing)}`\n\t\t}\n\t}\n\n\t// One note, flattened into something a table row can hold.\n\t#cell(note: string): string {\n\t\treturn note.replaceAll('|', '\\\\|').replaceAll(/\\s+/gu, ' ').trim()\n\t}\n\n\t// Every declared range replaced in place. The manifest's text is edited rather\n\t// than re-serialized, so nothing but the ranges moves.\n\t#redeclare(dependencies: readonly Dependency[]): (text: string) => string {\n\t\treturn (text: string) => {\n\t\t\tlet manifest = text\n\t\t\tfor (const dependency of dependencies) {\n\t\t\t\tconst key = JSON.stringify(dependency.name)\n\t\t\t\tconst range = JSON.stringify(dependency.range)\n\t\t\t\tlet index = manifest.indexOf(key)\n\t\t\t\tlet declared = false\n\t\t\t\twhile (index >= 0) {\n\t\t\t\t\tconst span = this.#span(manifest, index + key.length)\n\t\t\t\t\tif (span === undefined) {\n\t\t\t\t\t\tindex = manifest.indexOf(key, index + key.length)\n\t\t\t\t\t\tcontinue\n\t\t\t\t\t}\n\t\t\t\t\tmanifest = manifest.slice(0, span[0]) + range + manifest.slice(span[1])\n\t\t\t\t\tdeclared = true\n\t\t\t\t\tindex = manifest.indexOf(key, span[0] + range.length)\n\t\t\t\t}\n\t\t\t\tif (!declared) {\n\t\t\t\t\tthrow this.#error(\n\t\t\t\t\t\t'INVALID',\n\t\t\t\t\t\t`The manifest does not declare ${dependency.name}, so its range cannot be rewritten.`,\n\t\t\t\t\t\t{ name: dependency.name },\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn manifest\n\t\t}\n\t}\n\n\t// The quoted value a key introduces, as the half-open span it occupies, or\n\t// nothing when the text is a value rather than a key.\n\t#span(text: string, from: number): readonly [number, number] | undefined {\n\t\tlet index = from\n\t\twhile (index < text.length && /\\s/u.test(text.charAt(index))) index += 1\n\t\tif (text.charAt(index) !== ':') return undefined\n\t\tindex += 1\n\t\twhile (index < text.length && /\\s/u.test(text.charAt(index))) index += 1\n\t\tif (text.charAt(index) !== '\"') return undefined\n\t\tconst start = index\n\t\tindex += 1\n\t\twhile (index < text.length) {\n\t\t\tif (text.charAt(index) === '\\\\') {\n\t\t\t\tindex += 2\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (text.charAt(index) === '\"') return [start, index + 1]\n\t\t\tindex += 1\n\t\t}\n\t\treturn undefined\n\t}\n\n\t// Publish the outcome on the observation channel, then hand it back.\n\t#finish(result: MaterializeResult): MaterializeResult {\n\t\tthis.#emitter.emit('finish', result)\n\t\treturn result\n\t}\n\n\t// Snapshot the caller's value, then guard the snapshot. The snapshot is what\n\t// closes the guard/use race: a property backed by an accessor never reaches the\n\t// guard, so what the guard measured is what every later read returns.\n\t#accept<T>(value: unknown, guard: Guard<T>, field: string): T {\n\t\tconst snapshot = cloneValue(value)\n\t\tif (guard(snapshot)) return snapshot\n\t\tthrow this.#error(\n\t\t\t'INVALID',\n\t\t\t`The ${field} argument is not the exact shape this materializer accepts.`,\n\t\t\t{ field },\n\t\t)\n\t}\n\n\t#assertAlive(): void {\n\t\tif (this.#destroyed) throw this.#error('DESTROYED', 'This materializer has been destroyed.')\n\t}\n\n\t// Publish the failure on the observation channel, then hand it back to be\n\t// thrown at the site that decided it.\n\t#error(code: ScaffoldErrorCode, message: string, context?: unknown): ScaffoldError {\n\t\tconst error = new ScaffoldError(code, message, context)\n\t\tthis.#emitter.emit('error', error)\n\t\treturn error\n\t}\n}\n","import type { Guard } from '@orkestrel/contract'\nimport type { EmitterInterface } from '@orkestrel/emitter'\nimport type {\n\tCatalogEntry,\n\tDependency,\n\tLookup,\n\tMirror,\n\tRelease,\n\tScaffoldErrorCode,\n\tSnapshot,\n} from '@src/core'\nimport type { UpstreamEventMap, UpstreamInterface, UpstreamOptions } from './types.js'\nimport { isError, isRecord, isString, parseJSON, parseStringField } from '@orkestrel/contract'\nimport { Emitter } from '@orkestrel/emitter'\nimport {\n\tcloneValue,\n\tCONTROL_CHARACTER_PATTERN,\n\tisCollection,\n\tisDependencyName,\n\tisSnapshot,\n\tMAX_ARTIFACT_BYTES,\n\tMAX_RANGE_LENGTH,\n\tnameToGuide,\n\tScaffoldError,\n} from '@src/core'\nimport { isDependencies, isDependencyNames, isUpstreamOptions } from './validators.js'\n\n/**\n * The reading spine: one bounded, unauthenticated, redirect-free request per answer.\n *\n * @remarks\n * This is the package's only network reader, and it never writes. Every call\n * opens one byte allowance and spends it across every read the call makes, so a\n * caller is bounded twice over: `limit` refuses one oversized answer and\n * `budget` refuses many small ones. The two are separate exhaustion routes and\n * neither bound covers the other.\n *\n * A per-package failure never escapes as a throw. It is projected into the\n * verdict that package's row already carries — `missing` for an upstream `404`,\n * which is a definite answer, and `failed` for a transport fault, which is no\n * answer at all — so one unreachable package never costs the caller the rest of\n * the answer. The organization package list is the one exception: without it\n * there is no fleet to report, so an unreachable or malformed list is a coded\n * `FETCH` failure.\n *\n * Requests are unauthenticated because every fleet repository is public, and\n * they follow no redirect, so a misconfigured or hostile endpoint cannot move a\n * read to another host. Each one is bounded by its endpoint's timeout and by the\n * reader's own abort signal, so {@link Upstream.destroy} cancels what is in\n * flight instead of waiting for it.\n *\n * The allowance is threaded through the private reads as a mutable\n * `{ remaining: number }` carrier rather than held on the instance, because\n * concurrent calls each own their own budget and must not spend each other's.\n *\n * @example\n * ```ts\n * import { Upstream } from '@orkestrel/scaffold/server'\n *\n * const upstream = new Upstream({ registry: { timeout: 5_000 } })\n * const releases = await upstream.lookup([{ name: '@orkestrel/emitter', range: '^0.0.5' }])\n * upstream.destroy()\n * ```\n */\nexport class Upstream implements UpstreamInterface {\n\t// The defaults a request is built with, and the two fixed strings the fleet's\n\t// own addresses are assembled from. They sit here rather than in\n\t// `constants.ts` because that file is frozen, and each is read by exactly one\n\t// line of this class: a default is the entity's law applied when it builds a\n\t// request, so it belongs beside the law rather than in shared data.\n\tstatic readonly #defaultGuide = 'https://raw.githubusercontent.com'\n\tstatic readonly #defaultRegistry = 'https://registry.npmjs.org'\n\tstatic readonly #defaultBranch = 'main'\n\tstatic readonly #defaultTimeout = 10_000\n\tstatic readonly #defaultConcurrency = 6\n\tstatic readonly #defaultRetries = 0\n\tstatic readonly #defaultBudget = 16_777_216\n\tstatic readonly #scope = 'orkestrel'\n\tstatic readonly #unreadable = 'the answer carries no readable latest version'\n\n\treadonly #emitter: Emitter<UpstreamEventMap>\n\treadonly #guideBase: string\n\treadonly #guideBranch: string\n\treadonly #guideTimeout: number\n\treadonly #registryBase: string\n\treadonly #registryTimeout: number\n\treadonly #concurrency: number\n\treadonly #retries: number\n\treadonly #limit: number\n\treadonly #budget: number\n\treadonly #controller = new AbortController()\n\t#destroyed = false\n\n\t/**\n\t * Construct a reader over one guide host and one registry.\n\t *\n\t * @param options - The two endpoints, the request bounds, the initial\n\t * listeners, and the listener-error handler.\n\t * @throws {@link ScaffoldError} coded `INVALID` when `options` is present but\n\t * is not an option bag this reader accepts, or when either endpoint names a\n\t * scheme, host, or form this reader will not request.\n\t *\n\t * @remarks\n\t * `isEndpoint` bounds an endpoint's length and nothing else, so the scheme and\n\t * host law is settled here, where a refusal can say which endpoint was refused\n\t * and why. An endpoint must be HTTPS, or HTTP to a loopback host — the one\n\t * place an unencrypted request has no network between the two ends. That\n\t * refuses `file:`, `data:`, and plain HTTP to a real host, and it is what\n\t * keeps a fixture reachable without weakening transport security anywhere a\n\t * real request goes. An endpoint carrying credentials, a query, or a fragment\n\t * is refused too: this reader authenticates nothing and appends its own path.\n\t */\n\tconstructor(options?: UpstreamOptions) {\n\t\tif (options !== undefined && !isUpstreamOptions(options)) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'INVALID',\n\t\t\t\t'The options argument is not the exact shape this upstream reader accepts.',\n\t\t\t\t{ field: 'options' },\n\t\t\t)\n\t\t}\n\t\tthis.#emitter = new Emitter<UpstreamEventMap>({\n\t\t\t...(options?.on === undefined ? {} : { on: options.on }),\n\t\t\t...(options?.error === undefined ? {} : { error: options.error }),\n\t\t})\n\t\tthis.#guideBase = this.#endpoint(options?.guides?.base ?? Upstream.#defaultGuide, 'guides')\n\t\tthis.#guideBranch = options?.guides?.branch ?? Upstream.#defaultBranch\n\t\tthis.#guideTimeout = options?.guides?.timeout ?? Upstream.#defaultTimeout\n\t\tthis.#registryBase = this.#endpoint(\n\t\t\toptions?.registry?.base ?? Upstream.#defaultRegistry,\n\t\t\t'registry',\n\t\t)\n\t\tthis.#registryTimeout = options?.registry?.timeout ?? Upstream.#defaultTimeout\n\t\tthis.#concurrency = options?.concurrency ?? Upstream.#defaultConcurrency\n\t\tthis.#retries = options?.retries ?? Upstream.#defaultRetries\n\t\tthis.#limit = options?.limit ?? MAX_ARTIFACT_BYTES\n\t\tthis.#budget = options?.budget ?? Upstream.#defaultBudget\n\t}\n\n\t/** The upstream reader's observation channel. */\n\tget emitter(): EmitterInterface<UpstreamEventMap> {\n\t\treturn this.#emitter\n\t}\n\n\t/**\n\t * Look up the registry's latest release for each declared dependency.\n\t *\n\t * @param dependencies - The declared dependencies to look up.\n\t * @returns One release verdict per dependency, in input order.\n\t * @throws {@link ScaffoldError} coded `INVALID` when `dependencies` is not a\n\t * bounded list of declared dependencies, and `DESTROYED` when the reader is\n\t * torn down before or during the call.\n\t *\n\t * @remarks\n\t * Whether the declared range already admits the reported version is not\n\t * decided here and is not stored on the verdict: it is a function of the\n\t * `range` and `latest` sitting beside each other, and one centralized helper\n\t * answers it for every caller.\n\t *\n\t * @example\n\t * ```ts\n\t * import { Upstream } from '@orkestrel/scaffold/server'\n\t *\n\t * const upstream = new Upstream()\n\t * await upstream.lookup([{ name: '@orkestrel/router', range: '^0.0.8' }])\n\t * upstream.destroy()\n\t * ```\n\t */\n\tasync lookup(dependencies: readonly Dependency[]): Promise<readonly Release[]> {\n\t\tthis.#assertAlive()\n\t\tconst accepted = this.#accept(dependencies, isDependencies, 'dependencies')\n\t\tconst allowance = { remaining: this.#budget }\n\t\treturn this.#gather(accepted, (dependency) => this.#release(dependency, allowance))\n\t}\n\n\t/**\n\t * Fetch each named package's guide, beside the local mirror it answers for.\n\t *\n\t * @param names - The packages to fetch: the target's declared set, or the whole organization.\n\t * @param current - The target's local mirrors as exact bytes, keyed by mirror path.\n\t * @returns One mirror verdict per name, in input order.\n\t * @throws {@link ScaffoldError} coded `INVALID` when `names` is not a bounded\n\t * list of fleet package names or `current` is not a snapshot, and `DESTROYED`\n\t * when the reader is torn down before or during the call.\n\t *\n\t * @remarks\n\t * The mirror path is derived from the package name by the same helper the plan\n\t * derives it with, and the fetched URL ends in that exact path, so a verdict\n\t * always answers for the file it names. `observed` is carried through from\n\t * `current` whatever the lookup produced, because it is the precondition the\n\t * later write is held to and a failed fetch does not change what the target\n\t * currently holds.\n\t *\n\t * @example\n\t * ```ts\n\t * import { Upstream } from '@orkestrel/scaffold/server'\n\t *\n\t * const upstream = new Upstream()\n\t * await upstream.fetch(['@orkestrel/router'], { 'guides/router.md': '2320526f75746572' })\n\t * upstream.destroy()\n\t * ```\n\t */\n\tasync fetch(names: readonly string[], current: Snapshot): Promise<readonly Mirror[]> {\n\t\tthis.#assertAlive()\n\t\tconst accepted = this.#accept(names, isDependencyNames, 'names')\n\t\tconst observed = this.#accept(current, isSnapshot, 'current')\n\t\tconst allowance = { remaining: this.#budget }\n\t\treturn this.#gather(accepted, (name) => this.#mirror(name, observed, allowance))\n\t}\n\n\t/**\n\t * Catalog the published fleet from the registry's organization package list.\n\t *\n\t * @returns One row per published package, sorted by name.\n\t * @throws {@link ScaffoldError} coded `FETCH` when the organization package\n\t * list is unreachable, malformed, empty, or larger than one bounded\n\t * collection, and `DESTROYED` when the reader is torn down before or during\n\t * the call.\n\t *\n\t * @remarks\n\t * The organization list is the exact membership the registry publishes, not a\n\t * relevance search, and it is the whole reason this answer can claim to be the\n\t * fleet. So it fails hard where a per-package lookup fails soft: an empty or\n\t * unreadable list would otherwise be written into a target's catalog table as\n\t * a fleet with no packages in it. A package whose own version lookup then\n\t * fails still keeps its row, carrying the cause instead of a version, because\n\t * the list already proved the package is published.\n\t *\n\t * @example\n\t * ```ts\n\t * import { Upstream } from '@orkestrel/scaffold/server'\n\t *\n\t * const upstream = new Upstream()\n\t * const entries = await upstream.catalog()\n\t * upstream.destroy()\n\t * ```\n\t */\n\tasync catalog(): Promise<readonly CatalogEntry[]> {\n\t\tthis.#assertAlive()\n\t\tconst allowance = { remaining: this.#budget }\n\t\tconst names = await this.#packages(allowance)\n\t\treturn this.#gather(names, (name) => this.#entry(name, allowance))\n\t}\n\n\t/**\n\t * Tear the reader down, aborting every request in flight. Teardown is idempotent.\n\t *\n\t * @returns Nothing.\n\t *\n\t * @remarks\n\t * A call still in flight rejects with a `DESTROYED` error rather than\n\t * resolving to a partial answer, because half a fleet reads exactly like a\n\t * whole one.\n\t *\n\t * @example\n\t * ```ts\n\t * import { Upstream } from '@orkestrel/scaffold/server'\n\t *\n\t * const upstream = new Upstream()\n\t * upstream.destroy()\n\t * upstream.emitter.destroyed // true\n\t * ```\n\t */\n\tdestroy(): void {\n\t\tif (this.#destroyed) return\n\t\tthis.#destroyed = true\n\t\tthis.#controller.abort()\n\t\tthis.#emitter.emit('destroy')\n\t\tthis.#emitter.destroy()\n\t}\n\n\t// The scheme and host law `isEndpoint` deliberately leaves to this entity. A\n\t// guard has only `false` to say; this can name the endpoint and the reason.\n\t#endpoint(base: string, field: string): string {\n\t\tconst parsed = URL.parse(base)\n\t\tif (parsed === null) {\n\t\t\tthrow this.#error('INVALID', `The ${field} endpoint is not a URL.`, { field, base })\n\t\t}\n\t\tconst loopback =\n\t\t\tparsed.hostname === '127.0.0.1' ||\n\t\t\tparsed.hostname === 'localhost' ||\n\t\t\tparsed.hostname === '[::1]'\n\t\tif (parsed.protocol !== 'https:' && !(parsed.protocol === 'http:' && loopback)) {\n\t\t\tthrow this.#error(\n\t\t\t\t'INVALID',\n\t\t\t\t`The ${field} endpoint at ${base} is not HTTPS and is not a loopback host.`,\n\t\t\t\t{ field, base },\n\t\t\t)\n\t\t}\n\t\tif (\n\t\t\tparsed.username !== '' ||\n\t\t\tparsed.password !== '' ||\n\t\t\tparsed.search !== '' ||\n\t\t\tparsed.hash !== ''\n\t\t) {\n\t\t\tthrow this.#error(\n\t\t\t\t'INVALID',\n\t\t\t\t`The ${field} endpoint at ${base} carries credentials, a query, or a fragment.`,\n\t\t\t\t{ field, base },\n\t\t\t)\n\t\t}\n\t\treturn parsed.href.replace(/\\/+$/u, '')\n\t}\n\n\t// One dependency, read and projected into the verdict its row carries. A\n\t// found answer that states no readable version is a failed lookup rather than\n\t// a found one carrying nothing, because an empty version is not an answer.\n\tasync #release(dependency: Dependency, allowance: { remaining: number }): Promise<Release> {\n\t\tconst outcome = await this.#read(\n\t\t\tthis.#registryURL(dependency.name),\n\t\t\tthis.#registryTimeout,\n\t\t\tallowance,\n\t\t)\n\t\tconst latest = outcome.lookup === 'found' ? this.#latest(outcome.content) : undefined\n\t\tconst release: Release =\n\t\t\tlatest === undefined\n\t\t\t\t? {\n\t\t\t\t\t\tname: dependency.name,\n\t\t\t\t\t\trange: dependency.range,\n\t\t\t\t\t\tlookup: outcome.lookup === 'missing' ? 'missing' : 'failed',\n\t\t\t\t\t\tnote: outcome.lookup === 'found' ? Upstream.#unreadable : outcome.note,\n\t\t\t\t\t}\n\t\t\t\t: { name: dependency.name, range: dependency.range, lookup: 'found', latest }\n\t\tthis.#emitter.emit('release', release)\n\t\treturn release\n\t}\n\n\t// One guide, read and projected beside the local bytes it answers for.\n\tasync #mirror(\n\t\tname: string,\n\t\tcurrent: Snapshot,\n\t\tallowance: { remaining: number },\n\t): Promise<Mirror> {\n\t\tconst path = nameToGuide(name)\n\t\tconst outcome = await this.#read(this.#guideURL(name), this.#guideTimeout, allowance)\n\t\tconst observed = current[path]\n\t\tconst mirror: Mirror =\n\t\t\toutcome.lookup === 'found'\n\t\t\t\t? {\n\t\t\t\t\t\tname,\n\t\t\t\t\t\tpath,\n\t\t\t\t\t\tlookup: 'found',\n\t\t\t\t\t\tcontent: outcome.content,\n\t\t\t\t\t\t...(observed === undefined ? {} : { observed }),\n\t\t\t\t\t}\n\t\t\t\t: {\n\t\t\t\t\t\tname,\n\t\t\t\t\t\tpath,\n\t\t\t\t\t\tlookup: outcome.lookup,\n\t\t\t\t\t\tnote: outcome.note,\n\t\t\t\t\t\t...(observed === undefined ? {} : { observed }),\n\t\t\t\t\t}\n\t\tthis.#emitter.emit('mirror', mirror)\n\t\treturn mirror\n\t}\n\n\t// One catalog row. It publishes nothing on the observation channel: the\n\t// channel carries the two verdicts the writer binds to, and a catalog row is\n\t// neither, so the whole sorted list is the answer instead.\n\tasync #entry(name: string, allowance: { remaining: number }): Promise<CatalogEntry> {\n\t\tconst outcome = await this.#read(this.#registryURL(name), this.#registryTimeout, allowance)\n\t\tconst version = outcome.lookup === 'found' ? this.#latest(outcome.content) : undefined\n\t\tif (version !== undefined) return { name, lookup: 'found', version }\n\t\treturn {\n\t\t\tname,\n\t\t\tlookup: outcome.lookup === 'missing' ? 'missing' : 'failed',\n\t\t\tnote: outcome.lookup === 'found' ? Upstream.#unreadable : outcome.note,\n\t\t}\n\t}\n\n\t// The registry's exact organization membership, which is a flat name-to-access\n\t// map rather than a search. Every refusal here is coded rather than collected,\n\t// because a caller that received an empty or partial fleet could not tell it\n\t// from a fleet that shrank.\n\tasync #packages(allowance: { remaining: number }): Promise<readonly string[]> {\n\t\tconst url = `${this.#registryBase}/-/org/${Upstream.#scope}/package`\n\t\tconst outcome = await this.#read(url, this.#registryTimeout, allowance)\n\t\tif (outcome.lookup !== 'found') {\n\t\t\tthrow this.#error('FETCH', `The organization package list at ${url} produced no answer.`, {\n\t\t\t\turl,\n\t\t\t\tnote: outcome.note,\n\t\t\t})\n\t\t}\n\t\tconst parsed = parseJSON(outcome.content)\n\t\tif (!isRecord(parsed)) {\n\t\t\tthrow this.#error('FETCH', `The organization package list at ${url} is not a record.`, {\n\t\t\t\turl,\n\t\t\t})\n\t\t}\n\t\tconst names = Object.keys(parsed)\n\t\tif (\n\t\t\tnames.length === 0 ||\n\t\t\t!isCollection(names) ||\n\t\t\t!names.every((name) => isDependencyName(name))\n\t\t) {\n\t\t\tthrow this.#error(\n\t\t\t\t'FETCH',\n\t\t\t\t`The organization package list at ${url} does not name a bounded fleet.`,\n\t\t\t\t{ url, count: names.length },\n\t\t\t)\n\t\t}\n\t\treturn [...names].sort()\n\t}\n\n\t// The latest version the registry states, or nothing. The full packument is\n\t// read rather than the abbreviated form, because only the full one carries\n\t// `dist-tags`. The version is bounded and control-free before it is admitted,\n\t// so an upstream answer cannot smuggle text into a verdict a caller prints.\n\t#latest(content: string): string | undefined {\n\t\tconst parsed = parseJSON(content)\n\t\tif (!isRecord(parsed)) return undefined\n\t\tconst latest = parseStringField(parsed, ['dist-tags', 'latest'])\n\t\tif (latest === undefined || latest.length === 0 || latest.length > MAX_RANGE_LENGTH) {\n\t\t\treturn undefined\n\t\t}\n\t\treturn CONTROL_CHARACTER_PATTERN.test(latest) ? undefined : latest\n\t}\n\n\t// The canonical scoped-package registry path keeps the literal `@` and encodes\n\t// the scope boundary, which is the exact form registries publish. Everything\n\t// is encoded first and only `@` is restored, so the encoding is total rather\n\t// than a list of characters someone remembered: a declared dependency name is\n\t// bounded and non-empty but is otherwise the caller's text, and a name\n\t// carrying a separator, a dot segment, a query, or a fragment must address one\n\t// package rather than walking out of the endpoint's own path.\n\t#registryURL(name: string): string {\n\t\treturn `${this.#registryBase}/${encodeURIComponent(name).replaceAll('%40', '@')}`\n\t}\n\n\t// The canonical raw-content path is `/<scope>/<repository>/refs/heads/<branch>/<path>`.\n\t// The tail is the same mirror path the verdict carries, derived by the same\n\t// helper, so the file fetched and the file answered for cannot drift apart; it\n\t// is left unencoded because that helper's one separator is a real path\n\t// separator here. The branch and the repository are each a single segment and\n\t// each is encoded whole, because both reach the URL and only one of them is\n\t// closed by a guard.\n\t#guideURL(name: string): string {\n\t\tconst branch = this.#guideBranch\n\t\t\t.split('/')\n\t\t\t.map((segment) => encodeURIComponent(segment))\n\t\t\t.join('/')\n\t\tconst repository = encodeURIComponent(name.slice(name.lastIndexOf('/') + 1))\n\t\treturn `${this.#guideBase}/${Upstream.#scope}/${repository}/refs/heads/${branch}/${nameToGuide(name)}`\n\t}\n\n\t// One read, plus the retries a transport fault is given. A `404` is a definite\n\t// answer and is never retried; an exhausted allowance short-circuits the next\n\t// attempt rather than spending a request to be refused again. The fault is\n\t// published here, at the one place that knows the cause, which is what lets\n\t// every projection downstream stay a plain value.\n\tasync #read(\n\t\turl: string,\n\t\ttimeout: number,\n\t\tallowance: { remaining: number },\n\t): Promise<{ readonly lookup: Lookup; readonly content: string; readonly note: string }> {\n\t\tlet note = ''\n\t\tfor (let attempt = 0; attempt <= this.#retries; attempt += 1) {\n\t\t\tthis.#assertAlive()\n\t\t\tconst outcome = await this.#request(url, timeout, allowance)\n\t\t\tif (outcome.lookup !== 'failed') return outcome\n\t\t\tnote = outcome.note\n\t\t}\n\t\tthis.#error('FETCH', `The upstream read at ${url} produced no answer.`, { url, note })\n\t\treturn { lookup: 'failed', content: '', note }\n\t}\n\n\t// One request: unauthenticated, redirect-free, and bounded by both the\n\t// endpoint's timeout and this reader's own abort signal. Teardown is the only\n\t// outcome that escapes as a throw, because a cancelled call has no verdict.\n\tasync #request(\n\t\turl: string,\n\t\ttimeout: number,\n\t\tallowance: { remaining: number },\n\t): Promise<{ readonly lookup: Lookup; readonly content: string; readonly note: string }> {\n\t\tif (allowance.remaining <= 0) {\n\t\t\treturn {\n\t\t\t\tlookup: 'failed',\n\t\t\t\tcontent: '',\n\t\t\t\tnote: `the call spent its ${String(this.#budget)}-byte allowance`,\n\t\t\t}\n\t\t}\n\t\ttry {\n\t\t\tconst response = await fetch(url, {\n\t\t\t\tsignal: AbortSignal.any([this.#controller.signal, AbortSignal.timeout(timeout)]),\n\t\t\t\tredirect: 'manual',\n\t\t\t})\n\t\t\tif (response.status === 404) {\n\t\t\t\tawait response.body?.cancel()\n\t\t\t\treturn { lookup: 'missing', content: '', note: 'HTTP 404' }\n\t\t\t}\n\t\t\tif (response.status >= 300 && response.status < 400) {\n\t\t\t\tawait response.body?.cancel()\n\t\t\t\treturn {\n\t\t\t\t\tlookup: 'failed',\n\t\t\t\t\tcontent: '',\n\t\t\t\t\tnote: `HTTP ${String(response.status)}, and a redirect is never followed`,\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (!response.ok) {\n\t\t\t\tawait response.body?.cancel()\n\t\t\t\treturn { lookup: 'failed', content: '', note: `HTTP ${String(response.status)}` }\n\t\t\t}\n\t\t\treturn await this.#body(response, allowance)\n\t\t} catch (error) {\n\t\t\tthis.#assertAlive()\n\t\t\treturn { lookup: 'failed', content: '', note: this.#note(error) }\n\t\t}\n\t}\n\n\t// The body, read against both bounds at once. A declared length past either\n\t// one is refused before a byte is read; the stream is then counted chunk by\n\t// chunk against the response limit and against what the whole call has left,\n\t// so one oversized answer and many small ones are refused by different tests.\n\t// Every byte taken off the wire is spent whatever the verdict, because bytes\n\t// a failed read consumed are bytes the caller no longer has.\n\tasync #body(\n\t\tresponse: Response,\n\t\tallowance: { remaining: number },\n\t): Promise<{ readonly lookup: Lookup; readonly content: string; readonly note: string }> {\n\t\tconst declared = response.headers.get('content-length')\n\t\tconst stated = declared === null ? undefined : Number(declared)\n\t\tif (\n\t\t\tstated !== undefined &&\n\t\t\tNumber.isFinite(stated) &&\n\t\t\t(stated > this.#limit || stated > allowance.remaining)\n\t\t) {\n\t\t\tawait response.body?.cancel()\n\t\t\treturn {\n\t\t\t\tlookup: 'failed',\n\t\t\t\tcontent: '',\n\t\t\t\tnote: `the response declares ${String(stated)} bytes, past the ${String(Math.min(this.#limit, allowance.remaining))}-byte allowance`,\n\t\t\t}\n\t\t}\n\t\tconst body = response.body\n\t\tif (body === null) return { lookup: 'found', content: '', note: '' }\n\t\tconst reader = body.getReader()\n\t\tconst decoder = new TextDecoder('utf-8', { fatal: true })\n\t\tconst chunks: string[] = []\n\t\tlet total = 0\n\t\ttry {\n\t\t\tfor (;;) {\n\t\t\t\tconst chunk = await reader.read()\n\t\t\t\tif (chunk.done) break\n\t\t\t\ttotal += chunk.value.byteLength\n\t\t\t\tallowance.remaining -= chunk.value.byteLength\n\t\t\t\tif (total > this.#limit) {\n\t\t\t\t\tawait reader.cancel()\n\t\t\t\t\treturn {\n\t\t\t\t\t\tlookup: 'failed',\n\t\t\t\t\t\tcontent: '',\n\t\t\t\t\t\tnote: `the response passed the ${String(this.#limit)}-byte response limit`,\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tif (allowance.remaining < 0) {\n\t\t\t\t\tawait reader.cancel()\n\t\t\t\t\treturn {\n\t\t\t\t\t\tlookup: 'failed',\n\t\t\t\t\t\tcontent: '',\n\t\t\t\t\t\tnote: `the call spent its ${String(this.#budget)}-byte allowance`,\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tchunks.push(decoder.decode(chunk.value, { stream: true }))\n\t\t\t}\n\t\t\tchunks.push(decoder.decode())\n\t\t} catch (error) {\n\t\t\tawait reader.cancel().catch(() => undefined)\n\t\t\tthrow error\n\t\t} finally {\n\t\t\treader.releaseLock()\n\t\t}\n\t\treturn { lookup: 'found', content: chunks.join(''), note: '' }\n\t}\n\n\t// A caught transport fault, flattened into one line a caller can print. Node\n\t// wraps the real socket failure in `cause`, so its code is appended where the\n\t// runtime attached one — the difference between a refused connection and a\n\t// name that does not resolve is the part worth reading.\n\t#note(error: unknown): string {\n\t\tif (!isError(error)) return 'the request failed for an unreported reason'\n\t\tconst cause = error.cause\n\t\tconst code = isRecord(cause) && isString(cause.code) ? cause.code : undefined\n\t\tconst message = `${error.name}: ${error.message}`\n\t\treturn code === undefined ? message : `${message} (${code})`\n\t}\n\n\t// A bounded worker pool, never an unbounded parallel start. Results land at\n\t// their original index, so the answer is in input order however the reads\n\t// interleaved. Every worker is awaited whatever it did, so a sibling's later\n\t// rejection is observed rather than escaping as an unhandled one, and the\n\t// first failure is the one rethrown.\n\tasync #gather<T, R>(items: readonly T[], run: (item: T) => Promise<R>): Promise<readonly R[]> {\n\t\tconst results: R[] = []\n\t\tconst state: { cursor: number; failure: { readonly error: unknown } | undefined } = {\n\t\t\tcursor: 0,\n\t\t\tfailure: undefined,\n\t\t}\n\t\tconst workers = Array.from({ length: Math.min(this.#concurrency, items.length) }, () =>\n\t\t\tthis.#drain(items, run, results, state),\n\t\t)\n\t\tawait Promise.allSettled(workers)\n\t\tif (state.failure !== undefined) throw state.failure.error\n\t\treturn results\n\t}\n\n\t// One worker's pull-and-run loop over the shared cursor.\n\tasync #drain<T, R>(\n\t\titems: readonly T[],\n\t\trun: (item: T) => Promise<R>,\n\t\tresults: R[],\n\t\tstate: { cursor: number; failure: { readonly error: unknown } | undefined },\n\t): Promise<void> {\n\t\tfor (;;) {\n\t\t\tif (state.failure !== undefined) return\n\t\t\tconst index = state.cursor\n\t\t\tstate.cursor += 1\n\t\t\tif (index >= items.length) return\n\t\t\tconst item = items[index]\n\t\t\tif (item === undefined) return\n\t\t\ttry {\n\t\t\t\tresults[index] = await run(item)\n\t\t\t} catch (error) {\n\t\t\t\tstate.failure ??= { error }\n\t\t\t\treturn\n\t\t\t}\n\t\t}\n\t}\n\n\t// Snapshot the caller's value, then guard the snapshot, so a property backed\n\t// by an accessor never reaches a decision this reader later depends on.\n\t#accept<T>(value: unknown, guard: Guard<T>, field: string): T {\n\t\tconst snapshot = cloneValue(value)\n\t\tif (guard(snapshot)) return snapshot\n\t\tthrow this.#error(\n\t\t\t'INVALID',\n\t\t\t`The ${field} argument is not the exact shape this upstream reader accepts.`,\n\t\t\t{ field },\n\t\t)\n\t}\n\n\t#assertAlive(): void {\n\t\tif (this.#destroyed) throw this.#error('DESTROYED', 'This upstream reader has been destroyed.')\n\t}\n\n\t// Publish the failure on the observation channel, then hand it back to be\n\t// thrown at the site that decided it, or discarded where the failure is\n\t// collected into a verdict instead.\n\t#error(code: ScaffoldErrorCode, message: string, context?: unknown): ScaffoldError {\n\t\tconst error = new ScaffoldError(code, message, context)\n\t\tthis.#emitter.emit('error', error)\n\t\treturn error\n\t}\n}\n","import type {\n\tMaterializerInterface,\n\tMaterializerOptions,\n\tUpstreamInterface,\n\tUpstreamOptions,\n} from './types.js'\nimport { Materializer } from './Materializer.js'\nimport { Upstream } from './Upstream.js'\n\n/**\n * Construct a {@link Materializer}.\n *\n * @param options - The vendored host root, the initial listeners, and the listener-error handler.\n * @returns The materializer, typed as the contract consumers program against.\n * @throws {@link ScaffoldError} coded `INVALID` when `options` is present but is\n * not an option bag the materializer accepts, and `TARGET` when the host carries\n * a manifest that cannot be read or does not match what it stores.\n *\n * @example\n * ```ts\n * import { createMaterializer } from '@orkestrel/scaffold/server'\n *\n * const materializer = createMaterializer({ host: './dist/host' })\n * materializer.destroy()\n * ```\n */\nexport function createMaterializer(options?: MaterializerOptions): MaterializerInterface {\n\treturn new Materializer(options)\n}\n\n/**\n * Construct an {@link Upstream}.\n *\n * @param options - The two endpoints, the request bounds, the initial listeners,\n * and the listener-error handler.\n * @returns The reader, typed as the contract consumers program against.\n * @throws {@link ScaffoldError} coded `INVALID` when `options` is present but is\n * not an option bag the reader accepts, or when either endpoint names a scheme,\n * host, or form the reader will not request.\n *\n * @example\n * ```ts\n * import { createUpstream } from '@orkestrel/scaffold/server'\n *\n * const upstream = createUpstream({ guides: { branch: 'main' } })\n * upstream.destroy()\n * ```\n */\nexport function createUpstream(options?: UpstreamOptions): UpstreamInterface {\n\treturn new Upstream(options)\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAQA,IAAa,gBAAgB;;;;;;;;;AAU7B,IAAa,oCAAoC;;;;;;;;;AAUjD,IAAa,2BACZ;;;;;;;;;AAUD,IAAa,iBAAiB;;;;;;;;;;AAW9B,IAAa,iBAAiB;;;;;;;;;AAU9B,IAAa,yBAAyB;;;;;;;;;AAUtC,IAAa,iBAAiB;;;;;;;;;;;AAY9B,IAAa,sBAAsB;;AAGnC,IAAa,sBAAsB;;AAGnC,IAAa,oBAAoB;;;;;;;;AASjC,IAAa,2BAA2B;;AAGxC,IAAa,uBAAuB;;AAGpC,IAAa,uBAAuB;;;;;;;;;;AAWpC,IAAa,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC9B7B,SAAgB,iBAAiB,OAAiC;CACjE,OAAO,YAAY;EAClB,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,WAAW,KAAK,MAAM,SAAS,iBAAiB,OAAO;EACrF,IAAI,0BAA0B,KAAK,KAAK,GAAG,OAAO;EAClD,MAAM,aAAa,MAAM,WAAW,MAAM,GAAG;EAQ7C,MAAM,YALS,WAAW,WAAW,IAAI,IACtC,WAAW,MAAM,CAAC,IAClB,WAAW,WAAW,GAAG,IACxB,WAAW,MAAM,CAAC,IAClB,WAAA,CACoB,MAAM,GAAG;EACjC,IAAI,SAAS,SAAA,IAAyB,OAAO;EAC7C,KAAK,MAAM,CAAC,OAAO,YAAY,SAAS,QAAQ,GAAG;GAClD,IAAI,YAAY,OAAO,YAAY,MAAM;GACzC,IAAI,UAAU,KAAK,cAAc,KAAK,OAAO,GAAG;GAChD,IAAI,QAAQ,WAAW,GAAG,OAAO;GACjC,IAAI,kCAAkC,KAAK,OAAO,GAAG,OAAO;GAC5D,IAAI,QAAQ,SAAS,GAAG,KAAK,QAAQ,SAAS,GAAG,GAAG,OAAO;GAC3D,IAAI,aAAa,OAAO,IAAA,KAA4B,OAAO;GAC3D,IAAI,yBAAyB,KAAK,OAAO,GAAG,OAAO;EACpD;EACA,OAAO;CACR,CAAC;AACF;;;;;;;;;;;;;;;;;AAkBA,IAAa,WAA0B,SAAS,EAAE,SAAS,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;AAwB3E,SAAgB,YAAY,OAA6C;CACxE,OAAO,YAAY,QAAQ,KAAK,KAAK,MAAM,UAAA,GAA6B;AACzE;;;;;;;;;AAUA,IAAa,aAA4B,SAAS;CAAE,KAAK;CAAG,KAAK;AAAoB,CAAC;;;;;;;;;;;;;;;;AAiBtF,IAAa,WAA0B,SAAS;CAC/C,KAAK;CACL,KAAA;CACA,SAAS;AACV,CAAC;;;;;;;;;AAUD,IAAa,YAA2B,MAAM,WAAW,SAAS,GAAG,oBAAoB,CAAC;;;;;;;;;;;;;;;;;AAkB1F,IAAa,oBAA8C,MAC1D,cACA,QAAQ,gBAAgB,CACzB;;AAGA,IAAa,iBAA+C,MAC3D,cACA,QAAQ,YAAY,CACrB;;AAGA,IAAa,YAAsC,MAAM,cAAc,QAAQ,QAAQ,CAAC;;AAGxF,IAAa,mBAAmD,MAC/D,cACA,QAAQ,cAAc,CACvB;;;;;;;;;;;;;;;;;AAkBA,IAAa,kBAAwC,SAAS;CAC7D,SAAS;CACT,aAAa;CACb,YAAY;AACb,CAAC;;;;;;;;;AAUD,IAAa,iBAAsC,SAAS;CAC3D,SAAS,MAAM,cAAc,QAAQ,eAAe,CAAC;CACrD,OAAO,MAAM,cAAc,QAAQ,MAAM,CAAC;CAC1C,QAAQ;AACT,CAAC;;;;;;;;;;;;;;;;;;AAmBD,IAAa,eAAkC,SAAS;CACvD,SAAS,MAAM,aAAa,QAAQ,MAAM,CAAC;CAC3C,OAAO,MAAM,aAAa,QAAQ,MAAM,CAAC;AAC1C,CAAC;;;;;;;;;AAUD,IAAa,sBAAiE,SAC7E;CACC,OAAO;CACP,QAAQ;CACR,QAAQ;CACR,OAAO;CACP,SAAS;AACV,GACA,IACD;;;;;;;;;;;;AAaA,IAAa,wBAAoD,SAChE;CAAE,MAAM;CAAkB,IAAI;CAAqB,OAAO;AAAW,GACrE,IACD;;;;;;;;AASA,IAAa,kBAAyD,SACrE;CAAE,SAAS;CAAY,QAAQ;CAAY,OAAO;CAAY,SAAS;AAAW,GAClF,IACD;;;;;;;;;;;;;;;;;;;;;AAsBA,IAAa,oBAA4C,SACxD;CACC,QAAQ,SAAS;EAAE,MAAM;EAAY,QAAQ;EAAU,SAAS;CAAU,GAAG,IAAI;CACjF,UAAU,SAAS;EAAE,MAAM;EAAY,SAAS;CAAU,GAAG,IAAI;CACjE,aAAa,MAAM,WAAW,SAAS,GAAA,EAA2B,CAAC;CACnE,SAAS,MAAM,WAAW,SAAS,GAAA,CAAuB,CAAC;CAC3D,OAAO,MAAM,WAAW,SAAS,GAAG,kBAAkB,CAAC;CACvD,QAAQ,MAAM,WAAW,SAAS,GAAG,wBAAwB,CAAC;CAC9D,IAAI;CACJ,OAAO;AACR,GACA,IACD;;;;;;;;;;;;;;;;;;;;;;;ACrTA,SAAgB,mBAAmB,OAAyB;CAC3D,OAAO,YAAY,QAAQ,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,MAAM,QAAQ;AAC7E;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,eAAe,MAAuB;CACrD,OAAO,yBAAyB,KAAK,KAAK,WAAW,MAAM,GAAG,CAAC;AAChE;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,SAAgB,qBAAqB,MAAuB;CAC3D,MAAM,aAAa,KAAK,WAAW,MAAM,GAAG;CAC5C,IAAI,eAAe,UAAU,GAAG,OAAO;CACvC,IAAI,eAAe,SAAS,eAAe,OAAO,OAAO;CACzD,OAAO,WAAW,WAAW,MAAM,KAAK,WAAW,WAAW,MAAM;AACrE;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,SAAgB,qBAAqB,MAAuB;CAC3D,MAAM,aAAa,KAAK,WAAW,MAAM,GAAG;CAC5C,IAAI,eAAe,UAAU,GAAG,OAAO;CACvC,OAAO,6YAA6Y,KACnZ,UACD;AACD;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,SAAgB,cAAc,MAAsB;CACnD,MAAM,WAAW,KAAK,MAAM,GAAG;CAC/B,IAAI,SAAS,WAAW,GACvB,OAAO,KAAK,WAAW,GAAG,IAAI,YAAY,KAAK,MAAM,CAAC,MAAM;CAE7D,OAAO,SAAS,KAAK,YAAa,QAAQ,WAAW,GAAG,IAAI,QAAQ,MAAM,CAAC,IAAI,OAAQ,CAAC,CAAC,KAAK,GAAG;AAClG;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,cAAc,SAAyB;CACtD,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,SAAS,MAAM,CAAC,CAAC,OAAO,KAAK;AACjE;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,sBACf,SACA,OACS;CACT,OAAO,cACN,KAAK,UAAU;EACd,SAAS,QAAQ,KAAK,WAAW;GAChC,SAAS,MAAM;GACf,aAAa,MAAM;GACnB,YAAY,MAAM;EACnB,EAAE;EACF,OAAO,CAAC,GAAG,KAAK;CACjB,CAAC,CACF;AACD;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,eAAe,MAAuB;CACrD,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;CAC5C,OACC,OAAO,WACP,OAAO,MAAM,OAAO,KACpB,CAAC,OAAO,MAAM,eAAe,KAC7B,OAAO,MAAM,UAAU;AAEzB;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,gBAAgB,MAAuB;CACtD,MAAM,OAAO,QAAQ,IAAI;CACzB,IAAI,CAAC,eAAe,IAAI,GAAG,OAAO;CAClC,MAAM,OAAO,MAAM,IAAI,CAAC,CAAC;CACzB,MAAM,WAAW,SAAS,MAAM,IAAI,CAAC,CAAC,MAAM,GAAG;CAC/C,IAAI,SAAS;CACb,KAAK,MAAM,WAAW,UAAU;EAC/B,MAAM,UAAU,cAAc,YAAY,MAAM,CAAC;EACjD,IAAI,QAAQ,SACP;OAAA,CAAC,QAAQ,MAAM,SAAS,OAAO,GAAG,OAAO;EAAA,OACvC;GACN,MAAM,SAAS,cAAc,aAAa,OAAO,KAAK,QAAQ,OAAO,CAAC,CAAC;GACvE,IAAI,CAAC,OAAO,WAAW,SAAS,OAAO,KAAK,MAAM,SAAS,OAAO;EACnE;EACA,SAAS,KAAK,QAAQ,OAAO;CAC9B;CACA,OAAO;AACR;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,oBAAoB,MAAuB;CAC1D,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;CAC5C,OAAO,OAAO,WAAW,OAAO,MAAM,YAAY,KAAK,CAAC,OAAO,MAAM,eAAe;AACrF;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,kBAAkB,MAAkC;CACnE,IAAI,CAAC,eAAe,IAAI,GAAG,OAAO,KAAA;CAClC,MAAM,SAAS,cAAc,SAAS,MAAM,GAAG,CAAC;CAChD,IAAI,CAAC,OAAO,SAAS,OAAO,KAAA;CAC5B,MAAM,SAAS,OAAO;CACtB,MAAM,OAAO,cAAc;EAC1B,MAAM,SAAS,UAAU,MAAM;EAC/B,IAAI,CAAC,OAAO,OAAO,KAAK,OAAO,UAAU,KAAK,OAAO,OAAO,oBAAoB,OAAO,KAAA;EACvF,MAAM,OAAO,WAAW,QAAQ;EAChC,MAAM,SAAS,OAAO,MAAM,KAAM;EAClC,IAAI,OAAO;EACX,SAAS;GACR,MAAM,SAAS,SAAS,QAAQ,QAAQ,GAAG,OAAO,YAAY,IAAI;GAClE,IAAI,WAAW,GAAG;GAClB,QAAQ;GACR,IAAI,OAAO,oBAAoB,OAAO,KAAA;GACtC,KAAK,OAAO,OAAO,SAAS,GAAG,MAAM,CAAC;EACvC;EACA,MAAM,QAAQ,UAAU,MAAM;EAC9B,IAAI,SAAS,OAAO,QAAQ,MAAM,SAAS,OAAO,QAAQ,MAAM,YAAY,OAAO,SAClF;EAED,OAAO,KAAK,OAAO,KAAK;CACzB,CAAC;CACD,cAAc,UAAU,MAAM,CAAC;CAC/B,OAAO,KAAK,UAAU,KAAK,QAAQ,KAAA;AACpC;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,SAAgB,gBAAgB,MAAkC;CACjE,IAAI,CAAC,iBAAiB,IAAI,GAAG,OAAO,KAAA;CACpC,IAAI,UAAU,QAAQ,IAAI;CAC1B,MAAM,UAAoB,CAAC;CAC3B,KAAK,IAAI,QAAQ,GAAG,SAAA,IAAyB,SAAS,GAAG;EACxD,MAAM,OAAO,cAAc,aAAa,OAAO,CAAC;EAChD,IAAI,KAAK,SAAS;GACjB,IAAI,WAAW,KAAK;GACpB,KAAK,MAAM,WAAW,SAAS,WAAW,KAAK,UAAU,OAAO;GAChE,OAAO;EACR;EACA,IAAI,CAAC,mBAAmB,KAAK,KAAK,GAAG,OAAO,KAAA;EAC5C,MAAM,SAAS,QAAQ,OAAO;EAC9B,IAAI,WAAW,SAAS,OAAO,KAAA;EAC/B,QAAQ,QAAQ,SAAS,QAAQ,OAAO,CAAC;EACzC,UAAU;CACX;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,SAAgB,qBAAqB,MAAc,MAAkC;CACpF,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,OAAO,KAAA;CACrD,MAAM,OAAO,QAAQ,IAAI;CACzB,MAAM,cAAc,KAAK,MAAM,IAAI;CACnC,MAAM,eAAe,gBAAgB,IAAI;CACzC,MAAM,WAAW,gBAAgB,WAAW;CAC5C,IAAI,iBAAiB,KAAA,KAAa,aAAa,KAAA,GAAW,OAAO,KAAA;CACjE,IAAI,aAAa,gBAAgB,CAAC,SAAS,WAAW,eAAe,GAAG,GAAG,OAAO,KAAA;CAClF,OAAO;AACR;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,SAAS,QAAyB;CACjD,IAAI,CAAC,iBAAiB,MAAM,GAAG,OAAO;CACtC,MAAM,SAAS,cAAc,UAAU,MAAM,CAAC;CAC9C,IAAI,CAAC,OAAO,SAAS,OAAO,mBAAmB,OAAO,KAAK;CAC3D,IAAI,CAAC,OAAO,MAAM,YAAY,KAAK,OAAO,MAAM,eAAe,GAAG,OAAO;CACzE,MAAM,SAAS,cAAc,YAAY,MAAM,CAAC;CAChD,IAAI,CAAC,OAAO,SAAS,OAAO;CAC5B,MAAM,SAAS,OAAO;CACtB,MAAM,OAAO,cAAc;EAC1B,MAAM,QAAQ,OAAO,SAAS;EAC9B,IAAI,UAAU,MAAM,OAAO;EAC3B,IAAI,OAAO,SAAS,MAAM,MAAM,OAAO;EACvC,OAAO,eAAe,MAAM,IAAI,KAAK,MAAM,YAAY,KAAK,CAAC,MAAM,eAAe;CACnF,CAAC;CACD,cAAc,OAAO,UAAU,CAAC;CAChC,OAAO,KAAK,WAAW,KAAK;AAC7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,UAAU,MAAiC;CAC1D,IAAI,CAAC,iBAAiB,IAAI,GACzB,MAAM,IAAI,cAAc,WAAW,mCAAmC,EAAE,KAAK,CAAC;CAE/E,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;CAC5C,IAAI,CAAC,OAAO,SAAS;EACpB,IAAI,mBAAmB,OAAO,KAAK,GAAG,OAAO,CAAC;EAC9C,MAAM,IAAI,cAAc,UAAU,uCAAuC,QAAQ;GAChF;GACA,OAAO,OAAO;EACf,CAAC;CACF;CACA,IAAI,CAAC,OAAO,MAAM,YAAY,KAAK,OAAO,MAAM,eAAe,GAC9D,MAAM,IAAI,cAAc,UAAU,+CAA+C,QAAQ,EACxF,KACD,CAAC;CAEF,MAAM,QAAkB,CAAC;CACzB,MAAM,UAAU,CAAC;EAAE,MAAM;EAAM,MAAM;EAAI,OAAO;CAAE,CAAC;CACnD,IAAI,UAAU;CACd,OAAO,QAAQ,SAAS,GAAG;EAC1B,MAAM,UAAU,QAAQ,IAAI;EAC5B,IAAI,YAAY,KAAA,GAAW;EAC3B,MAAM,SAAS,cAAc,YAAY,QAAQ,IAAI,CAAC;EACtD,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,cAAc,UAAU,uCAAuC,QAAQ,QAAQ;GACxF;GACA,MAAM,QAAQ;GACd,OAAO,OAAO;EACf,CAAC;EAEF,MAAM,SAAS,OAAO;EACtB,MAAM,SAAS,cAAc;GAC5B,SAAS;IACR,MAAM,QAAQ,OAAO,SAAS;IAC9B,IAAI,UAAU,MAAM;IACpB,WAAW;IACX,IAAI,UAAA,KACH,MAAM,IAAI,cAAc,UAAU,sDAAsD;KACvF;KACA,OAAO;IACR,CAAC;IAEF,MAAM,OAAO,QAAQ,SAAS,KAAK,MAAM,OAAO,GAAG,QAAQ,KAAK,GAAG,MAAM;IACzE,IAAI,CAAC,OAAO,IAAI,GACf,MAAM,IAAI,cACT,UACA,oDAAoD,QACpD;KACC;KACA;IACD,CACD;IAED,IAAI,CAAC,MAAM,YAAY,KAAK,MAAM,eAAe,GAAG;KACnD,MAAM,KAAK,IAAI;KACf;IACD;IACA,MAAM,QAAQ,QAAQ,QAAQ;IAC9B,IAAI,SAAA,IACH,MAAM,IAAI,cACT,UACA,mDAAmD,QACnD;KACC;KACA;KACA,OAAA;IACD,CACD;IAED,QAAQ,KAAK;KAAE,MAAM,KAAK,QAAQ,MAAM,MAAM,IAAI;KAAG;KAAM;IAAM,CAAC;GACnE;EACD,CAAC;EACD,cAAc,OAAO,UAAU,CAAC;EAChC,IAAI,CAAC,OAAO,SAAS,MAAM,OAAO;CACnC;CACA,OAAO,MAAM,KAAK;AACnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,SAAgB,gBAAgB,MAAiC;CAChE,IAAI,CAAC,iBAAiB,IAAI,GACzB,MAAM,IAAI,cAAc,WAAW,mCAAmC,EAAE,KAAK,CAAC;CAE/E,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;CAC5C,IAAI,CAAC,OAAO,SAAS;EACpB,IAAI,mBAAmB,OAAO,KAAK,GAAG,OAAO,CAAC;EAC9C,MAAM,IAAI,cAAc,UAAU,uCAAuC,QAAQ;GAChF;GACA,OAAO,OAAO;EACf,CAAC;CACF;CACA,IAAI,CAAC,OAAO,MAAM,YAAY,KAAK,OAAO,MAAM,eAAe,GAC9D,MAAM,IAAI,cAAc,UAAU,+CAA+C,QAAQ,EACxF,KACD,CAAC;CAEF,MAAM,cAAwB,CAAC;CAC/B,MAAM,UAAU,CAAC;EAAE,MAAM;EAAM,MAAM;EAAI,OAAO;CAAE,CAAC;CACnD,IAAI,UAAU;CACd,OAAO,QAAQ,SAAS,GAAG;EAC1B,MAAM,UAAU,QAAQ,IAAI;EAC5B,IAAI,YAAY,KAAA,GAAW;EAC3B,MAAM,SAAS,cAAc,YAAY,QAAQ,IAAI,CAAC;EACtD,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,cAAc,UAAU,uCAAuC,QAAQ,QAAQ;GACxF;GACA,MAAM,QAAQ;GACd,OAAO,OAAO;EACf,CAAC;EAEF,MAAM,SAAS,OAAO;EACtB,MAAM,SAAS,cAAc;GAC5B,SAAS;IACR,MAAM,QAAQ,OAAO,SAAS;IAC9B,IAAI,UAAU,MAAM;IACpB,WAAW;IACX,IAAI,UAAA,KACH,MAAM,IAAI,cAAc,UAAU,sDAAsD;KACvF;KACA,OAAO;IACR,CAAC;IAEF,MAAM,OAAO,QAAQ,SAAS,KAAK,MAAM,OAAO,GAAG,QAAQ,KAAK,GAAG,MAAM;IACzE,IAAI,CAAC,OAAO,IAAI,GACf,MAAM,IAAI,cACT,UACA,oDAAoD,QACpD;KACC;KACA;IACD,CACD;IAED,IAAI,CAAC,MAAM,YAAY,KAAK,MAAM,eAAe,GAAG;IACpD,MAAM,QAAQ,QAAQ,QAAQ;IAC9B,IAAI,SAAA,IACH,MAAM,IAAI,cACT,UACA,mDAAmD,QACnD;KACC;KACA;KACA,OAAA;IACD,CACD;IAED,YAAY,KAAK,IAAI;IACrB,QAAQ,KAAK;KAAE,MAAM,KAAK,QAAQ,MAAM,MAAM,IAAI;KAAG;KAAM;IAAM,CAAC;GACnE;EACD,CAAC;EACD,cAAc,OAAO,UAAU,CAAC;EAChC,IAAI,CAAC,OAAO,SAAS,MAAM,OAAO;CACnC;CACA,OAAO,YAAY,KAAK;AACzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,SAAgB,YACf,MACA,MACA,QAAgB,oBACK;CACrB,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,KAAK,QAAQ,oBACxD,MAAM,IAAI,cAAc,WAAW,iDAAiD,QAAQ;EAC3F;EACA;EACA;CACD,CAAC;CAEF,MAAM,OAAO,qBAAqB,MAAM,IAAI;CAC5C,IAAI,SAAS,KAAA,GACZ,MAAM,IAAI,cAAc,WAAW,8CAA8C,QAAQ;EACxF;EACA;CACD,CAAC;CAEF,IAAI,CAAC,eAAe,IAAI,GAAG,OAAO,KAAA;CAClC,MAAM,SAAS,cAAc,SAAS,MAAM,GAAG,CAAC;CAChD,IAAI,CAAC,OAAO,SAAS,OAAO,KAAA;CAC5B,MAAM,SAAS,OAAO;CACtB,MAAM,OAAO,cAAc;EAC1B,MAAM,SAAS,UAAU,MAAM;EAC/B,IAAI,CAAC,OAAO,OAAO,KAAK,OAAO,UAAU,KAAK,OAAO,OAAO,OAAO,OAAO,KAAA;EAC1E,MAAM,QAAQ,OAAO,MAAM,OAAO,IAAI;EACtC,IAAI,SAAS;EACb,OAAO,SAAS,MAAM,YAAY;GACjC,MAAM,SAAS,SAAS,QAAQ,OAAO,QAAQ,MAAM,aAAa,QAAQ,MAAM;GAChF,IAAI,WAAW,GAAG;GAClB,UAAU;EACX;EACA,MAAM,WAAW,SAAS,QAAQ,OAAO,MAAM,CAAC,GAAG,GAAG,GAAG,MAAM;EAC/D,MAAM,QAAQ,UAAU,MAAM;EAC9B,IACC,WAAW,MAAM,cACjB,aAAa,KACb,MAAM,SAAS,OAAO,QACtB,MAAM,YAAY,OAAO,SAEzB;EAED,OAAO,WAAW,KAAK;CACxB,CAAC;CACD,cAAc,UAAU,MAAM,CAAC;CAC/B,OAAO,KAAK,UAAU,KAAK,QAAQ,KAAA;AACpC;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,SAAgB,aACf,MACA,MACA,QAAgB,oBACK;CACrB,MAAM,MAAM,YAAY,MAAM,MAAM,KAAK;CACzC,IAAI,QAAQ,KAAA,GAAW,OAAO,KAAA;CAC9B,MAAM,UAAU,cACf,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,KAAK,KAAK,KAAK,CAAC,CACzE;CACA,OAAO,QAAQ,UAAU,QAAQ,QAAQ,KAAA;AAC1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,SAAgB,aAAa,QAAgB,OAAoC;CAChF,IAAI,CAAC,iBAAiB,MAAM,GAC3B,MAAM,IAAI,cAAc,WAAW,sCAAsC,EAAE,OAAO,CAAC;CAEpF,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,MAAM,OAAO,SAAS,OAAO,IAAI,CAAC,GAC9D,MAAM,IAAI,cAAc,WAAW,4DAA4D;EAC9F;EACA,OAAO;CACR,CAAC;CAEF,IAAI,YAAY;CAChB,MAAM,WAAmC,CAAC;CAC1C,KAAK,MAAM,QAAQ,OAAO;EACzB,MAAM,OAAO,qBAAqB,QAAQ,IAAI;EAC9C,IAAI,SAAS,KAAA,GACZ,MAAM,IAAI,cAAc,WAAW,sCAAsC,QAAQ;GAChF;GACA;EACD,CAAC;EAEF,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;EAC5C,IAAI,CAAC,OAAO,SAAS;GACpB,IAAI,mBAAmB,OAAO,KAAK,GAAG;GACtC,MAAM,IAAI,cAAc,UAAU,wCAAwC,QAAQ;IACjF;IACA;IACA,OAAO,OAAO;GACf,CAAC;EACF;EACA,IAAI,oBAAoB,IAAI,GAAG;GAC9B,SAAS,QAAQ;GACjB;EACD;EACA,MAAM,MAAM,YAAY,QAAQ,MAAM,KAAK,IAAI,oBAAoB,SAAS,CAAC;EAC7E,IAAI,QAAQ,KAAA,GACX,MAAM,IAAI,cAAc,UAAU,2CAA2C,QAAQ;GACpF;GACA;GACA,OAAO;EACR,CAAC;EAEF,aAAa,IAAI,SAAS;EAC1B,SAAS,QAAQ;CAClB;CACA,OAAO;AACR;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,SAAgB,iBAAiB,MAAwC;CACxE,IAAI,CAAC,iBAAiB,IAAI,GACzB,MAAM,IAAI,cAAc,WAAW,gCAAgC,EAAE,KAAK,CAAC;CAG5E,MAAM,OAAO;CACb,MAAM,OAAO,qBAAqB,MAAM,IAAI;CAC5C,IAAI,SAAS,KAAA,GACZ,MAAM,IAAI,cAAc,WAAW,oCAAoC,QAAQ,EAAE,KAAK,CAAC;CAExF,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;CAC5C,IAAI,CAAC,OAAO,SAAS;EACpB,IAAI,mBAAmB,OAAO,KAAK,GAAG,OAAO,KAAA;EAC7C,MAAM,IAAI,cAAc,UAAU,wCAAwC,QAAQ;GACjF;GACA,OAAO,OAAO;EACf,CAAC;CACF;CACA,MAAM,OAAO,aAAa,MAAM,MAAM,kBAAkB;CACxD,IAAI,SAAS,KAAA,GACZ,MAAM,IAAI,cAAc,UAAU,yCAAyC,QAAQ,EAAE,KAAK,CAAC;CAE5F,MAAM,WAAW,YAAY,MAAM,cAAc;CACjD,IAAI,aAAa,KAAA,GAChB,MAAM,IAAI,cAAc,UAAU,iCAAiC,QAAQ,EAAE,KAAK,CAAC;CAEpF,IAAI,SAAS,WAAW,sBAAsB,SAAS,SAAS,SAAS,KAAK,GAC7E,MAAM,IAAI,cAAc,UAAU,4CAA4C,QAAQ,EAAE,KAAK,CAAC;CAE/F,OAAO;AACR;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,SAAgB,kBAAkB,aAAqB,QAA2C;CACjG,IAAI,CAAC,eAAe,MAAM,GAAG,OAAO,KAAA;CACpC,MAAM,SAAS,cAAc,UAAU,MAAM,CAAC;CAC9C,IAAI,CAAC,OAAO,WAAW,OAAO,MAAM,OAAO,oBAAoB,OAAO,KAAA;CACtE,OAAO;EACN,SAAS,cAAc,WAAW;EAClC;EACA,aAAa,OAAO,MAAM,OAAO,QAAW;CAC7C;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsDA,SAAgB,UAAU,UAAkB,MAAwC;CACnF,IAAI,CAAC,iBAAiB,QAAQ,GAC7B,MAAM,IAAI,cAAc,WAAW,uCAAuC,EAAE,SAAS,CAAC;CAEvF,IAAI,CAAC,iBAAiB,IAAI,GACzB,MAAM,IAAI,cAAc,WAAW,wCAAwC,EAAE,KAAK,CAAC;CAEpF,MAAM,SAAS,QAAQ,QAAQ;CAC/B,IAAI,CAAC,oBAAoB,MAAM,GAC9B,MAAM,IAAI,cAAc,UAAU,mDAAmD,UAAU,EAC9F,UAAU,OACX,CAAC;CAEF,IAAI,CAAC,SAAS,IAAI,GACjB,MAAM,IAAI,cAAc,UAAU,sCAAsC,QAAQ,EAAE,KAAK,CAAC;CAEzF,MAAM,WAAqB,CAAC;CAC5B,MAAM,QAAkB,CAAC;CACzB,MAAM,UAAoB,CAAC;CAC3B,KAAK,MAAM,QAAQ,YAAY;EAC9B,MAAM,OAAO,qBAAqB,QAAQ,IAAI;EAC9C,IAAI,SAAS,KAAA,GACZ,MAAM,IAAI,cAAc,WAAW,wCAAwC,QAAQ;GAClF,UAAU;GACV;EACD,CAAC;EAEF,IAAI,eAAe,IAAI,GAAG;GACzB,SAAS,KAAK,IAAI;GAClB;EACD;EACA,IAAI,CAAC,oBAAoB,IAAI,GAAG;GAC/B,QAAQ,KAAK,IAAI;GACjB;EACD;EACA,MAAM,KAAK,IAAI;EACf,KAAK,MAAM,UAAU,gBAAgB,IAAI,GAAG;GAC3C,MAAM,SAAS,GAAG,KAAK,GAAG;GAC1B,IAAI,CAAC,qBAAqB,MAAM,GAAG,MAAM,KAAK,MAAM;EACrD;EACA,KAAK,MAAM,QAAQ,UAAU,IAAI,GAAG;GACnC,MAAM,cAAc,GAAG,KAAK,GAAG;GAC/B,IAAI,CAAC,qBAAqB,WAAW,GAAG,SAAS,KAAK,WAAW;EAClE;CACD;CACA,IAAI,QAAQ,SAAS,GACpB,MAAM,IAAI,cAAc,UAAU,mDAAmD;EACpF,UAAU;EACV;CACD,CAAC;CAKF,MAAM,yBAAS,IAAI,IAAY,CAAC,aAAa,CAAC;CAC9C,MAAM,UAA2B,CAAC;CAClC,KAAK,MAAM,eAAe,UAAU;EACnC,MAAM,OAAO,qBAAqB,QAAQ,WAAW;EACrD,IAAI,SAAS,KAAA,GACZ,MAAM,IAAI,cAAc,WAAW,wCAAwC,eAAe;GACzF,UAAU;GACV,MAAM;EACP,CAAC;EAEF,MAAM,QAAQ,kBAAkB,aAAa,IAAI;EACjD,IAAI,UAAU,KAAA,GACb,MAAM,IAAI,cACT,UACA,oEAAoE,eACpE;GAAE,UAAU;GAAQ,MAAM;GAAa,OAAO;EAAmB,CAClE;EAED,IAAI,OAAO,IAAI,MAAM,OAAO,GAC3B,MAAM,IAAI,cACT,UACA,6CAA6C,MAAM,WACnD;GAAE,UAAU;GAAQ,MAAM;GAAa,SAAS,MAAM;EAAQ,CAC/D;EAED,OAAO,IAAI,MAAM,OAAO;EACxB,QAAQ,KAAK,KAAK;CACnB;CACA,QAAQ,MAAM,OAAO,WAAY,MAAM,UAAU,OAAO,UAAU,KAAK,CAAE;CACzE,MAAM,KAAK;CACX,MAAM,OAAO,QAAQ,IAAI;CACzB,MAAM,cAAc,cAAc,UAAU,MAAM,EAAE,WAAW,KAAK,CAAC,CAAC;CACtE,IAAI,CAAC,YAAY,WAAW,CAAC,oBAAoB,IAAI,GACpD,MAAM,IAAI,cAAc,SAAS,iDAAiD,QAAQ;EACzF,MAAM;EACN,GAAI,YAAY,UAAU,CAAC,IAAI,EAAE,OAAO,YAAY,MAAM;CAC3D,CAAC;CAEF,KAAK,MAAM,SAAS,SAAS;EAC5B,MAAM,SAAS,qBAAqB,QAAQ,MAAM,WAAW;EAC7D,MAAM,cAAc,qBAAqB,MAAM,MAAM,OAAO;EAC5D,IAAI,WAAW,KAAA,KAAa,gBAAgB,KAAA,GAC3C,MAAM,IAAI,cAAc,WAAW,oCAAoC,MAAM,eAAe;GAC3F,UAAU;GACV,MAAM;GACN,MAAM,MAAM;GACZ,SAAS,MAAM;EAChB,CAAC;EAEF,MAAM,SAAS,cAAc;GAC5B,UAAU,QAAQ,WAAW,GAAG,EAAE,WAAW,KAAK,CAAC;GACnD,aAAa,QAAQ,aAAa,UAAU,aAAa;GACzD,IAAI,MAAM,YAAY,UAAU,aAAa,GAAK;EACnD,CAAC;EACD,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,cAAc,SAAS,wCAAwC,MAAM,WAAW;GACzF,MAAM;GACN,SAAS,MAAM;GACf,OAAO,OAAO;EACf,CAAC;CAEH;CACA,MAAM,WAAyB;EAC9B;EACA;EACA,QAAQ,sBAAsB,SAAS,KAAK;CAC7C;CACA,MAAM,WAAW,qBAAqB,MAAM,aAAa;CACzD,IAAI,aAAa,KAAA,GAChB,MAAM,IAAI,cAAc,WAAW,oCAAoC,QAAQ,EAAE,MAAM,KAAK,CAAC;CAE9F,MAAM,YAAY,cACjB,cAAc,UAAU,GAAG,KAAK,UAAU,UAAU,MAAM,GAAI,EAAE,KAAK;EACpE,UAAU;EACV,MAAM;CACP,CAAC,CACF;CACA,IAAI,CAAC,UAAU,SACd,MAAM,IAAI,cAAc,SAAS,wCAAwC,YAAY;EACpF,MAAM;EACN,OAAO,UAAU;CAClB,CAAC;CAEF,MAAM,WAAW,iBAAiB,IAAI;CACtC,IAAI,aAAa,KAAA,KAAa,SAAS,WAAW,SAAS,QAC1D,MAAM,IAAI,cAAc,UAAU,kDAAkD,QAAQ,EAC3F,MAAM,KACP,CAAC;CAEF,OAAO;AACR;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,WAAW,MAAuC;CACjE,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;CAC5C,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,YAAY,KAAK,OAAO,MAAM,eAAe,GACjF;CAED,OAAO;EAAE;EAAM,QAAQ,OAAO,MAAM;EAAK,OAAO,OAAO,MAAM;CAAI;AAClE;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,cAAc,QAA8B;CAC3D,MAAM,UAAU,WAAW,OAAO,IAAI;CACtC,OAAO,YAAY,KAAA,KAAa,QAAQ,WAAW,OAAO,UAAU,QAAQ,UAAU,OAAO;AAC9F;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,gBAAgB,MAA4C;CAC3E,MAAM,SAAS,cAAc,UAAU,IAAI,CAAC;CAC5C,IAAI,CAAC,OAAO,SACX,OAAO,mBAAmB,OAAO,KAAK,IAAI;EAAE;EAAM,OAAO;CAAS,IAAI,KAAA;CAEvE,MAAM,QAAQ,OAAO;CACrB,IAAI,MAAM,eAAe,GAAG,OAAO,KAAA;CACnC,IAAI,MAAM,YAAY,GACrB,OAAO;EACN;EACA,OAAO;EACP,QAAQ,MAAM;EACd,OAAO,MAAM;EACb,UAAU,MAAM;CACjB;CAED,IAAI,CAAC,MAAM,OAAO,KAAK,MAAM,UAAU,GAAG,OAAO,KAAA;CACjD,MAAM,SAAS,kBAAkB,IAAI;CACrC,OAAO;EACN;EACA,OAAO;EACP,QAAQ,MAAM;EACd,OAAO,MAAM;EACb,UAAU,MAAM;EAChB,MAAM,MAAM;EACZ,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;CAC1C;AACD;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,mBAAmB,aAAwC;CAC1E,MAAM,UAAU,gBAAgB,YAAY,IAAI;CAChD,IAAI,YAAY,KAAA,GAAW,OAAO;CAClC,OACC,QAAQ,UAAU,YAAY,SAC9B,QAAQ,WAAW,YAAY,UAC/B,QAAQ,UAAU,YAAY,SAC9B,QAAQ,aAAa,YAAY,YACjC,QAAQ,SAAS,YAAY,QAC7B,QAAQ,WAAW,YAAY;AAEjC;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,oBAAoB,cAA0C;CAC7E,MAAM,SAAS,cAAc,UAAU,aAAa,IAAI,CAAC;CACzD,IAAI,CAAC,OAAO,SACX,OAAO,aAAa,UAAU,YAAY,mBAAmB,OAAO,KAAK;CAE1E,IAAI,aAAa,UAAU,UAAU,CAAC,eAAe,aAAa,IAAI,GAAG,OAAO;CAChF,IAAI,aAAa,WAAW,KAAA,GAAW,OAAO;CAC9C,OAAO,kBAAkB,aAAa,IAAI,MAAM,aAAa;AAC9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC7vCA,IAAa,mBAAb,MAA8B;CAC7B;CACA;CACA;CACA;CACA;CACA,WAAmC,CAAC;CACpC,UAA6B,CAAC;CAC9B,eAAkC,CAAC;CACnC,SAA4B,CAAC;CAC7B,QAAQ;;;;;;;;;;;;;;;;;;;CAoBR,YACC,QACA,OACA,eACC;EACD,IAAI,CAAC,iBAAiB,MAAM,GAC3B,MAAM,IAAI,cAAc,WAAW,wCAAwC,EAAE,OAAO,CAAC;EAEtF,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,MAAM,OAAO,SAAS,OAAO,IAAI,CAAC,GAC9D,MAAM,IAAI,cACT,WACA,8DACA,EACC,OACD,CACD;EAED,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM,QACjC,MAAM,IAAI,cAAc,WAAW,yCAAyC;GAAE;GAAQ;EAAM,CAAC;EAE9F,KAAKA,UAAU,QAAQ,MAAM;EAC7B,MAAM,+BAAe,IAAI,IAA8B;EACvD,KAAK,MAAM,QAAQ,OAAO;GAEzB,MAAM,cAAc,gBADA,KAAKS,SAAS,KAAKT,SAAS,IACZ,CAAW;GAC/C,IAAI,gBAAgB,KAAA,GACnB,MAAM,IAAI,cACT,UACA,sBAAsB,KAAK,gDAC3B;IAAE,QAAQ,KAAKA;IAAS;GAAK,CAC9B;GAED,aAAa,IAAI,MAAM,WAAW;EACnC;EACA,KAAKI,gBAAgB;EACrB,MAAM,eAAe,IAAI,IAAI,CAAC,GAAG,aAAa,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB,YAAY,IAAI,CAAC;EAC9F,KAAK,MAAM,gBAAgB,iBAAiB,CAAC,GAAG;GAC/C,IAAI,CAAC,aAAa,IAAI,aAAa,IAAI,GACtC,MAAM,IAAI,cACT,WACA,uBAAuB,aAAa,KAAK,6CACzC;IAAE,QAAQ,KAAKJ;IAAS,MAAM,aAAa;GAAK,CACjD;GAED,IAAI,CAAC,oBAAoB,YAAY,GACpC,MAAM,IAAI,cACT,UACA,sBAAsB,aAAa,KAAK,6CACxC;IAAE,QAAQ,KAAKA;IAAS,MAAM,aAAa;GAAK,CACjD;EAEF;EACA,MAAM,SAAS,QAAQ,KAAKA,OAAO;EACnC,KAAKC,QAAQ,KAAK,QAAQ,IAAI,SAAS,KAAKD,OAAO,EAAE,SAAS,WAAW,GAAG;EAC5E,KAAKE,SAAS,KAAK,KAAKD,OAAO,OAAO;EACtC,KAAKE,UAAU,KAAK,KAAKF,OAAO,QAAQ;EACxC,MAAM,SAAS,cAAc;GAC5B,KAAKI,SAAS,KAAK,GAAG,KAAKK,WAAW,MAAM,CAAC,CAAC,OAAO;GACrD,KAAK,MAAM,aAAa;IAAC,KAAKT;IAAO,KAAKC;IAAQ,KAAKC;GAAO,GAAG;IAChE,UAAU,WAAW,EAAE,MAAM,IAAM,CAAC;IACpC,IAAI,WAAW,SAAS,MAAM,KAAA,GAC7B,MAAM,IAAI,cAAc,SAAS,uDAAuD;KACvF,QAAQ,KAAKH;KACb,MAAM,KAAKC;IACZ,CAAC;GAEH;EACD,CAAC;EACD,IAAI,CAAC,OAAO,SAAS;GACpB,KAAKU,QAAQ;GACb,KAAKC,SAAS,CAAC,GAAG,CAAC,CAAC;GACpB,MAAM,IAAI,cAAc,SAAS,oDAAoD;IACpF,QAAQ,KAAKZ;IACb,MAAM,KAAKC;IACX,OAAO,OAAO;GACf,CAAC;EACF;CACD;;CAGA,IAAI,SAAiB;EACpB,OAAO,KAAKD;CACb;;CAGA,IAAI,eAA4C;EAC/C,OAAO,CAAC,GAAG,KAAKI,cAAc,OAAO,CAAC;CACvC;;CAGA,IAAI,OAAgB;EACnB,OAAO,KAAKO;CACb;;;;;;;;;;;;;;;;CAiBA,MAAM,MAAc,SAAuB;EAE1C,IADoB,KAAKE,OAAO,IAC5B,CAAA,CAAY,UAAU,aACzB,MAAM,IAAI,cAAc,UAAU,sBAAsB,KAAK,sBAAsB,EAAE,KAAK,CAAC;EAE5F,MAAM,SAAS,KAAKC,WAAW,IAAI;EACnC,MAAM,UAAU,cAAc;GAC7B,cAAc,QAAQ,SAAS;IAAE,UAAU;IAAQ,MAAM;GAAK,CAAC;EAChE,CAAC;EACD,IAAI,CAAC,QAAQ,SACZ,MAAM,IAAI,cAAc,SAAS,sBAAsB,KAAK,yBAAyB;GACpF;GACA,OAAO,QAAQ;EAChB,CAAC;EAEF,IAAI,kBAAkB,MAAM,MAAM,cAAc,OAAO,GACtD,MAAM,IAAI,cAAc,SAAS,sBAAsB,KAAK,+BAA+B,EAC1F,KACD,CAAC;EAEF,KAAKR,QAAQ,KAAK,IAAI;CACvB;;;;;;;;;;;;;;;;;CAkBA,KAAK,MAAc,QAAgB,YAA2B;EAE7D,IADoB,KAAKO,OAAO,IAC5B,CAAA,CAAY,UAAU,aACzB,MAAM,IAAI,cAAc,UAAU,sBAAsB,KAAK,sBAAsB,EAAE,KAAK,CAAC;EAE5F,MAAM,SAAS,eAAe,MAAM,IAAI,kBAAkB,MAAM,IAAI,KAAA;EACpE,IAAI,WAAW,KAAA,GACd,MAAM,IAAI,cAAc,UAAU,uBAAuB,KAAK,2BAA2B;GACxF;GACA;EACD,CAAC;EAEF,MAAM,SAAS,KAAKC,WAAW,IAAI;EACnC,MAAM,SAAS,cAAc;GAC5B,aAAa,QAAQ,QAAQ,UAAU,aAAa;GACpD,IAAI,YAAY,UAAU,QAAQ,GAAK;EACxC,CAAC;EACD,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,cAAc,SAAS,sBAAsB,KAAK,sBAAsB;GACjF;GACA;GACA,OAAO,OAAO;EACf,CAAC;EAEF,IAAI,kBAAkB,MAAM,MAAM,QACjC,MAAM,IAAI,cACT,SACA,sBAAsB,KAAK,oCAC3B;GACC;GACA;EACD,CACD;EAED,KAAKR,QAAQ,KAAK,IAAI;CACvB;;;;;;;;;;;;;;;;;CAkBA,UAAU,MAAoC;EAC7C,KAAKS,YAAY;EAEjB,IADoB,KAAKC,aAAa,IAClC,CAAA,CAAY,UAAU,QACzB,MAAM,IAAI,cAAc,UAAU,sBAAsB,KAAK,iBAAiB,EAAE,KAAK,CAAC;EAEvF,MAAM,SAAS,KAAKN,WAAW,KAAKD,SAAS,KAAKT,SAAS,IAAI,CAAC;EAChE,KAAKK,SAAS,KAAK,GAAG,OAAO,OAAO;EACpC,IAAI,OAAO,QAAQ,SAAS,KAAK,CAAC,KAAKE,aAAa,SAAS,IAAI,GAAG,KAAKA,aAAa,KAAK,IAAI;EAC/F,OAAO;CACR;;;;;;;;;;;;;;CAeA,OAAO,MAAoB;EAE1B,IADoB,KAAKM,OAAO,IAC5B,CAAA,CAAY,UAAU,QACzB,MAAM,IAAI,cAAc,UAAU,sBAAsB,KAAK,4BAA4B,EACxF,KACD,CAAC;EAEF,KAAKL,OAAO,KAAK,IAAI;CACtB;;;;;;;;;;;;;;;;;;CAmBA,SAA4B;EAC3B,KAAKO,YAAY;EACjB,MAAM,WAAqB,CAAC;EAC5B,MAAM,QAAkB,CAAC;EACzB,MAAM,UAAU,cAAc;GAC7B,KAAKE,WAAW;GAChB,KAAK,MAAM,QAAQ,KAAKX,SAAS;IAChC,KAAKY,SAAS,IAAI;IAClB,SAAS,KAAK,IAAI;GACnB;GACA,KAAK,MAAM,QAAQ,KAAKV,QAAQ;IAC/B,KAAKW,MAAM,IAAI;IACf,MAAM,KAAK,IAAI;GAChB;EACD,CAAC;EACD,KAAKR,QAAQ;EACb,IAAI,CAAC,QAAQ,SAAS;GACrB,MAAM,UAAU,KAAKC,SAAS,UAAU,KAAK;GAC7C,MAAM,IAAI,cAAc,SAAS,0CAA0C;IAC1E,QAAQ,KAAKZ;IACb,MAAM,KAAKC;IACX,OAAO,QAAQ;IACf,WAAW;IACX;GACD,CAAC;EACF;EACA,MAAM,UAAU,cAAc,OAAO,KAAKA,OAAO;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC,CAAC;EAClF,IAAI,CAAC,QAAQ,SACZ,MAAM,IAAI,cAAc,SAAS,kDAAkD;GAClF,QAAQ,KAAKD;GACb,MAAM,KAAKC;GACX,OAAO,QAAQ;GACf,WAAW;EACZ,CAAC;EAEF,OAAO;GAAC,GAAG,KAAKK;GAAS,GAAG,KAAKC;GAAc,GAAG,KAAKC;EAAM;CAC9D;;;;;;;;;;;;CAaA,UAAgB;EACf,IAAI,CAAC,KAAKG,OAAO;EACjB,KAAKA,QAAQ;EACb,MAAM,UAAU,KAAKC,SAAS,CAAC,GAAG,CAAC,CAAC;EACpC,IAAI,QAAQ,SAAS,GACpB,MAAM,IAAI,cAAc,SAAS,2CAA2C;GAC3E,QAAQ,KAAKZ;GACb,MAAM,KAAKC;GACX;EACD,CAAC;CAEH;CAOA,SAAS,MAAc,MAAsB;EAC5C,MAAM,cAAc,qBAAqB,MAAM,IAAI;EACnD,IAAI,gBAAgB,KAAA,GACnB,MAAM,IAAI,cAAc,WAAW,YAAY,KAAK,uCAAuC;GAC1F;GACA;EACD,CAAC;EAEF,MAAM,OAAO,QAAQ,IAAI;EACzB,IAAI,WAAW,QAAQ,WAAW;EAClC,KAAK,IAAI,QAAQ,GAAG,SAAA,IAAyB,SAAS,GAAG;GACxD,MAAM,QAAQ,gBAAgB,QAAQ;GACtC,IAAI,UAAU,KAAA,KAAa,MAAM,UAAU,QAC1C,MAAM,IAAI,cAAc,SAAS,YAAY,KAAK,oCAAoC;IACrF;IACA;IACA;GACD,CAAC;GAEF,IAAI,aAAa,MAAM,OAAO;GAC9B,MAAM,SAAS,QAAQ,QAAQ;GAC/B,IAAI,WAAW,UAAU;GACzB,WAAW;EACZ;EACA,MAAM,IAAI,cAAc,WAAW,YAAY,KAAK,sCAAsC;GACzF;GACA;EACD,CAAC;CACF;CAKA,WAAW,MAAoC;EAC9C,MAAM,cAAc,QAAQ,IAAI;EAChC,MAAM,UAAoB,CAAC;EAC3B,IAAI,UAAU;EACd,IAAI,SAAS,WAAW,OAAO;EAC/B,KAAK,IAAI,QAAQ,GAAG,WAAW,KAAA,KAAa,SAAA,IAAyB,SAAS,GAAG;GAChF,MAAM,QAAQ,gBAAgB,OAAO;GACrC,IAAI,UAAU,KAAA,KAAa,MAAM,UAAU,UAC1C,MAAM,IAAI,cACT,SACA,oBAAoB,QAAQ,gCAC5B,EACC,MAAM,YACP,CACD;GAED,QAAQ,KAAK,OAAO;GACpB,MAAM,SAAS,QAAQ,OAAO;GAC9B,IAAI,WAAW,SACd,MAAM,IAAI,cACT,SACA,oBAAoB,YAAY,6BAChC,EACC,MAAM,YACP,CACD;GAED,UAAU;GACV,SAAS,WAAW,OAAO;EAC5B;EACA,IAAI,WAAW,KAAA,GACd,MAAM,IAAI,cACT,SACA,oBAAoB,YAAY,+BAChC;GACC,MAAM;GACN,OAAA;EACD,CACD;EAED,MAAM,UAAyB,CAAC;EAChC,KAAK,MAAM,WAAW,CAAC,GAAG,OAAO,CAAC,CAAC,QAAQ,GAAG;GAC7C,IAAI,CAAC,cAAc,MAAM,GACxB,MAAM,IAAI,cAAc,SAAS,oBAAoB,OAAO,KAAK,0BAA0B;IAC1F,MAAM;IACN,UAAU,OAAO;GAClB,CAAC;GAEF,UAAU,OAAO;GACjB,MAAM,cAAc,WAAW,OAAO;GACtC,IAAI,gBAAgB,KAAA,GACnB,MAAM,IAAI,cAAc,SAAS,oBAAoB,QAAQ,0BAA0B,EACtF,MAAM,YACP,CAAC;GAEF,SAAS;GACT,QAAQ,KAAK,WAAW;EACzB;EACA,OAAO;GAAE;GAAQ;EAAQ;CAC1B;CAKA,aAAmB;EAClB,KAAK,MAAM,UAAU,KAAKI,UACzB,IAAI,CAAC,cAAc,MAAM,GACxB,MAAM,IAAI,cAAc,SAAS,oBAAoB,OAAO,KAAK,0BAA0B;GAC1F,QAAQ,KAAKL;GACb,MAAM,OAAO;EACd,CAAC;EAGH,KAAK,MAAM,QAAQ,CAAC,GAAG,KAAKM,SAAS,GAAG,KAAKE,MAAM,GAElD,IAAI,CAAC,mBADe,KAAKQ,aAAa,IACd,CAAW,GAClC,MAAM,IAAI,cAAc,SAAS,sBAAsB,KAAK,wBAAwB;GACnF,QAAQ,KAAKhB;GACb;EACD,CAAC;EAGH,KAAK,MAAM,QAAQ,KAAKM,SACvB,IAAI,CAAC,eAAe,KAAKG,SAAS,KAAKP,QAAQ,IAAI,CAAC,GACnD,MAAM,IAAI,cACT,SACA,sBAAsB,KAAK,iCAC3B;GACC,QAAQ,KAAKF;GACb;EACD,CACD;CAGH;CAKA,SAAS,MAAoB;EAC5B,MAAM,cAAc,KAAKgB,aAAa,IAAI;EAC1C,IAAI,CAAC,mBAAmB,WAAW,GAClC,MAAM,IAAI,cAAc,SAAS,sBAAsB,KAAK,wBAAwB,EAAE,KAAK,CAAC;EAE7F,MAAM,SAAS,KAAKP,SAAS,KAAKP,QAAQ,IAAI;EAC9C,IAAI,YAAY,UAAU,UACzB,KAAKG,SAAS,KAAK,GAAG,KAAKK,WAAW,QAAQ,YAAY,IAAI,CAAC,CAAC,CAAC,OAAO;OAClE;GACN,MAAM,SAAS,KAAKD,SAAS,KAAKN,SAAS,IAAI;GAC/C,UAAU,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;GAC9C,SAAS,YAAY,MAAM,MAAM;EAClC;EACA,WAAW,QAAQ,YAAY,IAAI;CACpC;CAIA,MAAM,MAAoB;EACzB,MAAM,cAAc,KAAKa,aAAa,IAAI;EAC1C,IAAI,CAAC,mBAAmB,WAAW,GAClC,MAAM,IAAI,cAAc,SAAS,sBAAsB,KAAK,wBAAwB,EAAE,KAAK,CAAC;EAE7F,MAAM,SAAS,KAAKP,SAAS,KAAKN,SAAS,IAAI;EAC/C,UAAU,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;EAC9C,WAAW,YAAY,MAAM,MAAM;CACpC;CAIA,SAAS,UAA6B,OAA8C;EACnF,MAAM,UAAqB,CAAC;EAC5B,KAAK,MAAM,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,GAAG;GACxC,MAAM,WAAW,cAChB,WAAW,KAAKM,SAAS,KAAKN,SAAS,IAAI,GAAG,KAAKa,aAAa,IAAI,CAAC,CAAC,IAAI,CAC3E;GACA,IAAI,CAAC,SAAS,SAAS,QAAQ,KAAK,SAAS,KAAK;EACnD;EACA,KAAK,MAAM,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,QAAQ,GAAG;GAC3C,MAAM,cAAc,KAAKA,aAAa,IAAI;GAC1C,MAAM,WAAW,cAAc;IAC9B,IAAI,YAAY,UAAU,UAAU;KACnC,OAAO,YAAY,MAAM,EAAE,OAAO,KAAK,CAAC;KACxC;IACD;IACA,WAAW,KAAKP,SAAS,KAAKN,SAAS,IAAI,GAAG,YAAY,IAAI;GAC/D,CAAC;GACD,IAAI,CAAC,SAAS,SAAS,QAAQ,KAAK,SAAS,KAAK;EACnD;EAGA,IAAI,QAAQ,WAAW,GAAG;GACzB,MAAM,UAAU,cAAc,OAAO,KAAKF,OAAO;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC,CAAC;GAClF,IAAI,CAAC,QAAQ,SAAS,QAAQ,KAAK,QAAQ,KAAK;EACjD;EACA,KAAK,MAAM,UAAU,CAAC,GAAG,KAAKI,QAAQ,CAAC,CAAC,QAAQ,GAAG;GAClD,MAAM,UAAU,cAAc,UAAU,OAAO,IAAI,CAAC;GACpD,IAAI,CAAC,QAAQ,WAAW,CAAC,mBAAmB,QAAQ,KAAK,GAAG,QAAQ,KAAK,QAAQ,KAAK;EACvF;EACA,OAAO;CACR;CAIA,WAAW,MAAsB;EAChC,MAAM,SAAS,KAAKI,SAAS,KAAKP,QAAQ,IAAI;EAC9C,UAAU,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;EAC9C,OAAO;CACR;CAIA,OAAO,MAAgC;EACtC,KAAKa,YAAY;EACjB,MAAM,cAAc,KAAKC,aAAa,IAAI;EAC1C,IAAI,KAAKV,QAAQ,SAAS,IAAI,KAAK,KAAKE,OAAO,SAAS,IAAI,GAC3D,MAAM,IAAI,cACT,WACA,YAAY,KAAK,2CACjB,EACC,KACD,CACD;EAED,OAAO;CACR;CAEA,aAAa,MAAgC;EAC5C,MAAM,cAAc,KAAKJ,cAAc,IAAI,IAAI;EAC/C,IAAI,gBAAgB,KAAA,GACnB,MAAM,IAAI,cAAc,WAAW,YAAY,KAAK,uCAAuC,EAC1F,KACD,CAAC;EAEF,OAAO;CACR;CAEA,cAAoB;EACnB,IAAI,CAAC,KAAKO,OACT,MAAM,IAAI,cAAc,SAAS,qCAAqC,EACrE,QAAQ,KAAKX,QACd,CAAC;CAEH;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AChkBA,IAAa,eAAb,MAAa,aAA8C;CAK1D,OAAgBoB,WAAW;CAC3B,OAAgBC,WAAW;CAE3B;CACA;CACA;CACA;CACA,aAAa;;;;;;;;;;;;;;;;;;;;CAqBb,YAAY,SAA+B;EAC1C,IAAI,YAAY,KAAA,KAAa,CAAC,sBAAsB,OAAO,GAC1D,MAAM,IAAI,cACT,WACA,0EACA,EAAE,OAAO,UAAU,CACpB;EAED,KAAKC,WAAW,IAAI,QAA8B;GACjD,GAAI,SAAS,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI,QAAQ,GAAG;GACtD,GAAI,SAAS,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;EAChE,CAAC;EACD,KAAKC,QAAQ,SAAS,QAAQ,QAAQ,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,YAAY;EAC3F,MAAM,OAAO,cAAc,iBAAiB,KAAKA,KAAK,CAAC;EACvD,IAAI,CAAC,KAAK,SACT,MAAM,KAAKG,OAAO,UAAU,6DAA6D;GACxF,MAAM,KAAKH;GACX,OAAO,KAAK;EACb,CAAC;EAEF,KAAKC,YAAY,KAAK;EACtB,KAAKC,WAAW,IAAI,KAClB,KAAK,OAAO,WAAW,CAAC,EAAA,CAAG,KAAK,UAAU,CAAC,MAAM,aAAa,KAAK,CAAC,CACtE;EACA,IAAI,KAAK,UAAU,KAAA,GAAW,KAAKE,WAAW,KAAK,KAAK;CACzD;;CAGA,IAAI,UAAkD;EACrD,OAAO,KAAKL;CACb;;;;;;;;;;;;;;;;;CAkBA,MAAM,MAAY,QAAuB;EACxC,KAAKM,aAAa;EAClB,MAAM,WAAW,KAAKC,QAAQ,MAAM,QAAQ,MAAM;EAClD,MAAM,YAAY,KAAKA,QAAQ,QAAQ,kBAAkB,QAAQ;EACjE,OAAO,KAAKC,QAAQ,UAAU,SAAS;CACxC;;;;;;;;;;;;;;;;;;;CAoBA,YAAY,MAAY,QAAmC;EAC1D,KAAKF,aAAa;EAClB,MAAM,WAAW,KAAKC,QAAQ,MAAM,QAAQ,MAAM;EAClD,MAAM,YAAY,KAAKA,QAAQ,QAAQ,kBAAkB,QAAQ;EACjE,IAAI,CAAC,SAAS,SAAS,GACtB,MAAM,KAAKH,OAAO,UAAU,iBAAiB,UAAU,kBAAkB,EACxE,QAAQ,UACT,CAAC;EAEF,MAAM,QAAQ,KAAKK,OAAO,QAAQ;EAClC,MAAM,WAAW,KAAKC,SAAS,QAAQ;EACvC,OAAO,KAAKC,OAAO,WAAW,SAAS,WAAW,OAAO,CAAC,GAAG,CAAC,CAAC;CAChE;;;;;;;;;;;;;;;;;;;;;CAsBA,OAAO,MAAY,OAAc,QAAmC;EACnE,KAAKL,aAAa;EAClB,MAAM,WAAW,KAAKC,QAAQ,MAAM,QAAQ,MAAM;EAClD,MAAM,UAAU,KAAKA,QAAQ,OAAO,SAAS,OAAO;EACpD,MAAM,YAAY,KAAKA,QAAQ,QAAQ,kBAAkB,QAAQ;EACjE,MAAM,WAAW,KAAKG,SAAS,QAAQ;EACvC,MAAM,UAAU,KAAKF,QAAQ,UAAU,WAAW,QAAQ;EAC1D,KAAKI,WAAW,QAAQ,UAAU,QAAQ,UAAU,SAAS;EAC7D,MAAM,UAAU,IAAI,IACnB,QAAQ,SAAS,KAAK,YAAY,CAAC,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAChE;EACA,MAAM,SAAqB,CAAC;EAC5B,MAAM,UAAoB,CAAC;EAC3B,MAAM,gBAAqC,CAAC;EAC5C,KAAK,MAAM,YAAY,SAAS,WAAW;GAC1C,MAAM,QAAQ,QAAQ,IAAI,SAAS,IAAI;GACvC,IAAI,UAAU,aAAa,UAAU,SAAS;IAC7C,QAAQ,KAAK,SAAS,IAAI;IAC1B;GACD;GACA,cAAc,KAAK,KAAKC,MAAM,WAAW,SAAS,MAAM,UAAU,SAAS,CAAC;GAC5E,OAAO,KAAK,QAAQ;EACrB;EACA,OAAO,KAAKF,OAAO,WAAW,QAAQ,CAAC,GAAG,SAAS,aAAa;CACjE;;;;;;;;;;;;;;;;CAiBA,OAAO,SAA4B,QAAmC;EACrE,KAAKL,aAAa;EAClB,MAAM,WAAW,KAAKC,QAAQ,SAAS,WAAW,SAAS;EAC3D,MAAM,YAAY,KAAKA,QAAQ,QAAQ,kBAAkB,QAAQ;EACjE,MAAM,SAAqB,CAAC;EAC5B,MAAM,UAAoB,CAAC;EAC3B,MAAM,gBAAqC,CAAC;EAC5C,KAAK,MAAM,WAAW,UAAU;GAC/B,IAAI,QAAQ,WAAW,WAAW,QAAQ,aAAa,aAAa,QAAQ,OAAO,GAAG;IACrF,QAAQ,KAAK,QAAQ,IAAI;IACzB;GACD;GACA,MAAM,UAAU,YAAY,WAAW,QAAQ,IAAI;GACnD,IAAI,YAAY,QAAQ,UACvB,MAAM,KAAKH,OAAO,UAAU,iBAAiB,QAAQ,KAAK,+BAA+B;IACxF,QAAQ;IACR,MAAM,QAAQ;GACf,CAAC;GAEF,cAAc,KAAK,KAAKS,MAAM,WAAW,QAAQ,MAAM,YAAY,KAAA,CAAS,CAAC;GAC7E,OAAO,KAAK;IACX,MAAM,QAAQ;IACd,OAAO,WAAW,QAAQ,IAAI;IAC9B,WAAW;IACX,QAAQ;IACR,SAAS,QAAQ;GAClB,CAAC;EACF;EACA,OAAO,KAAKF,OAAO,WAAW,QAAQ,CAAC,GAAG,SAAS,aAAa;CACjE;;;;;;;;;;;;;;;;;;CAmBA,QAAQ,SAAkC,QAAmC;EAC5E,KAAKL,aAAa;EAClB,MAAM,WAAW,KAAKC,QAAQ,SAAS,kBAAkB,SAAS;EAClE,MAAM,YAAY,KAAKA,QAAQ,QAAQ,kBAAkB,QAAQ;EACjE,OAAO,KAAKO,SACX,WACA,oBACA,oBACA,KAAKC,WAAW,QAAQ,CACzB;CACD;;;;;;;;;;;;;;;;;;;CAoBA,QAAQ,cAAqC,QAAmC;EAC/E,KAAKT,aAAa;EAClB,MAAM,WAAW,KAAKC,QAAQ,cAAc,gBAAgB,cAAc;EAC1E,MAAM,YAAY,KAAKA,QAAQ,QAAQ,kBAAkB,QAAQ;EACjE,OAAO,KAAKO,SAAS,WAAW,gBAAgB,oBAAoB,KAAKE,WAAW,QAAQ,CAAC;CAC9F;;;;;;;;;;;;;;;;;;;;;;CAuBA,OAAO,OAAc,YAAwB,QAAmC;EAC/E,KAAKV,aAAa;EAClB,MAAM,UAAU,KAAKC,QAAQ,OAAO,SAAS,OAAO;EACpD,MAAM,QAAQ,KAAKA,QAAQ,YAAY,cAAc,YAAY;EACjE,MAAM,YAAY,KAAKA,QAAQ,QAAQ,kBAAkB,QAAQ;EACjE,IAAI,MAAM,MAAM,SAAS,GACxB,MAAM,KAAKH,OAAO,UAAU,iBAAiB,UAAU,gCAAgC;GACtF,QAAQ;GACR,OAAO,MAAM,MAAM;EACpB,CAAC;EAEF,MAAM,UAAU,IAAI,IAAI,MAAM,OAAO;EACrC,MAAM,2BAAW,IAAI,IAAgC;EACrD,MAAM,WAAqB,CAAC;EAC5B,MAAM,UAAoB,CAAC;EAC3B,KAAK,MAAM,WAAW,QAAQ,UAAU;GACvC,IAAI,QAAQ,UAAU,WAAW;GACjC,IAAI,CAAC,QAAQ,IAAI,QAAQ,IAAI,KAAK,qBAAqB,QAAQ,IAAI,GAAG;IACrE,QAAQ,KAAK,QAAQ,IAAI;IACzB;GACD;GACA,SAAS,IAAI,QAAQ,MAAM,QAAQ,QAAQ;GAC3C,SAAS,KAAK,QAAQ,IAAI;EAC3B;EACA,MAAM,UAAU,aAAa,WAAW,QAAQ;EAChD,MAAM,gBAAqC,CAAC;EAC5C,KAAK,MAAM,QAAQ,UAAU;GAC5B,IAAI,QAAQ,UAAU,SAAS,IAAI,IAAI,GACtC,MAAM,KAAKA,OAAO,UAAU,YAAY,KAAK,0BAA0B;IACtE,QAAQ;IACR;GACD,CAAC;GAEF,cAAc,KAAK,KAAKS,MAAM,WAAW,MAAM,KAAK,CAAC;EACtD;EACA,OAAO,KAAKI,OAAO,WAAW,UAAU,SAAS,aAAa;CAC/D;;;;;;;;;;;;;;;CAgBA,UAAgB;EACf,IAAI,KAAKC,YAAY;EACrB,KAAKA,aAAa;EAClB,KAAKlB,SAAS,KAAK,SAAS;EAC5B,KAAKA,SAAS,QAAQ;CACvB;CAMA,WAAW,UAA8B;EACxC,MAAM,SAAS,cAAc,UAAU,KAAKC,KAAK,CAAC;EAClD,IAAI,CAAC,OAAO,SACX,MAAM,KAAKG,OAAO,UAAU,4CAA4C;GACvE,MAAM,KAAKH;GACX,OAAO,OAAO;EACf,CAAC;EAEF,MAAM,WAAW,CAAC,GAAG,SAAS,QAAQ,KAAK,UAAU,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,KAAK;EAC3F,MAAM,SAAS,OAAO;EACtB,IACC,OAAO,WAAW,SAAS,UAC3B,OAAO,MAAM,MAAM,UAAU,SAAS,SAAS,MAAM,GAErD,MAAM,KAAKG,OAAO,UAAU,gEAAgE;GAC3F,MAAM,KAAKH;GACX,QAAQ,OAAO;GACf,UAAU,SAAS;EACpB,CAAC;EAEF,IAAI,KAAKE,SAAS,SAAS,SAAS,QAAQ,QAC3C,MAAM,KAAKC,OAAO,UAAU,iEAAiE,EAC5F,MAAM,KAAKH,MACZ,CAAC;CAEH;CAMA,SAAS,MAAkB;EAC1B,MAAM,YAAwB,CAAC;EAC/B,IAAI,YAAY;EAChB,KAAK,MAAM,YAAY,KAAK,WAAW;GACtC,IAAI,SAAS,WAAW,QAAQ;IAC/B,aAAa,aAAa,SAAS,OAAO;IAC1C,UAAU,KAAK,QAAQ;IACvB;GACD;GACA,MAAM,WAAW,KAAKkB,QAAQ,UAAU,SAAS;GACjD,KAAK,MAAM,OAAO,UAAU,cAAc,IAAI,KAAK,UAAU,KAAK;GAClE,UAAU,KAAK,GAAG,QAAQ;EAC3B;EACA,IAAI,YAAY,GACf,MAAM,KAAKf,OAAO,UAAU,2DAA2D;GACtF,MAAM,KAAKH;GACX,OAAO;EACR,CAAC;EAEF,OAAO;GAAE,WAAW,KAAK;GAAW,QAAQ,KAAK;GAAQ;EAAU;CACpE;CAMA,QAAQ,MAAY,QAAgB,WAAW,KAAKS,SAAS,IAAI,GAAU;EAC1E,MAAM,QAAQ,IAAI,IAAI,SAAS,UAAU,KAAK,aAAa,SAAS,IAAI,CAAC;EACzE,KAAK,MAAM,QAAQ,KAAKU,OAAO,IAAI,GAAG;GACrC,MAAM,YAAY,qBAAqB,QAAQ,IAAI;GACnD,IAAI,cAAc,KAAA,GACjB,MAAM,KAAKhB,OAAO,UAAU,qBAAqB,KAAK,sBAAsB;IAC3E;IACA,MAAM;GACP,CAAC;GAEF,KAAK,MAAM,QAAQ,UAAU,SAAS,GAAG,MAAM,IAAI,GAAG,KAAK,GAAG,MAAM;EACrE;EACA,OAAO;GACN,UAAU,eAAe,UAAU,aAAa,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC;GACnE,WAAW,CAAC;EACb;CACD;CAKA,OAAO,MAA+B;EACrC,MAAM,wBAAQ,IAAI,IAAY;EAC9B,KAAK,MAAM,YAAY,KAAK,WAAW;GACtC,IAAI,SAAS,WAAW,QAAQ;GAChC,MAAM,SAAS,SAAS,UAAU,SAAS;GAC3C,IAAI,KAAKF,WAAW,MAAM,SAAS,MAAM,MAAM,MAAM;IACpD,MAAM,IAAI,SAAS,IAAI;IACvB;GACD;GACA,IAAI,KAAKA,cAAc,KAAA,GAAW;GAClC,MAAM,YAAY,qBAAqB,KAAKD,OAAO,MAAM;GACzD,IAAI,cAAc,KAAA,KAAa,oBAAoB,SAAS,GAAG,MAAM,IAAI,SAAS,IAAI;EACvF;EACA,OAAO,CAAC,GAAG,KAAK;CACjB;CAIA,QAAQ,UAA2C,WAAwC;EAC1F,MAAM,WAAW,KAAKC;EACtB,MAAM,SAAS,SAAS,UAAU,SAAS;EAC3C,IAAI,aAAa,KAAA,GAAW,OAAO,KAAKmB,WAAW,UAAU,QAAQ,SAAS;EAC9E,MAAM,UAAU,SAAS,QAAQ,QAC/B,UAAU,MAAM,gBAAgB,UAAU,MAAM,YAAY,WAAW,GAAG,OAAO,EAAE,CACrF;EACA,MAAM,SAAS,SAAS,MAAM,MAAM,SAAS,SAAS,UAAU,KAAK,WAAW,GAAG,OAAO,EAAE,CAAC;EAC7F,IAAI,QAAQ,WAAW,KAAK,CAAC,QAC5B,MAAM,KAAKjB,OAAO,UAAU,oCAAoC,OAAO,IAAI;GAC1E,MAAM,KAAKH;GACX;EACD,CAAC;EAEF,MAAM,WAAuB,CAAC;EAC9B,IAAI,SAAS;EACb,KAAK,MAAM,SAAS,SAAS;GAC5B,MAAM,OAAO,KAAKqB,OAAO,UAAU,MAAM,WAAW;GACpD,IAAI,KAAKC,UAAU,IAAI,GAAG;IACzB,SAAS,KAAK,KAAKC,UAAU,UAAU,MAAM,MAAM,WAAW,CAAC;IAC/D;GACD;GACA,MAAM,MAAM,KAAKC,MAAM,MAAM,SAAS,MAAM;GAC5C,UAAU,IAAI,SAAS;GACvB,SAAS,KAAK,KAAKC,UAAU,UAAU,MAAM,MAAM,aAAa,GAAG,CAAC;EACrE;EACA,OAAO;CACR;CAIA,WACC,UACA,QACA,WACsB;EACtB,MAAM,OAAO,qBAAqB,KAAKzB,OAAO,MAAM;EACpD,IAAI,SAAS,KAAA,GACZ,MAAM,KAAKG,OAAO,UAAU,sBAAsB,OAAO,oBAAoB;GAC5E,MAAM,KAAKH;GACX;EACD,CAAC;EAEF,IAAI,eAAe,IAAI,GACtB,OAAO,CACN,KAAKsB,UAAU,SAAS,IAAI,IACzB,KAAKC,UAAU,UAAU,SAAS,MAAM,MAAM,IAC9C,KAAKE,UAAU,UAAU,SAAS,MAAM,QAAQ,KAAKD,MAAM,QAAQ,SAAS,CAAC,CACjF;EAED,IAAI,CAAC,oBAAoB,IAAI,GAC5B,MAAM,KAAKrB,OAAO,UAAU,sBAAsB,OAAO,2BAA2B;GACnF,MAAM,KAAKH;GACX;EACD,CAAC;EAEF,MAAM,WAAuB,CAAC;EAC9B,IAAI,SAAS;EACb,KAAK,MAAM,QAAQ,UAAU,IAAI,GAAG;GACnC,MAAM,OAAO,GAAG,SAAS,KAAK,GAAG;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG;GACjC,IAAI,KAAKsB,UAAU,IAAI,GAAG;IACzB,SAAS,KAAK,KAAKC,UAAU,UAAU,MAAM,WAAW,CAAC;IACzD;GACD;GACA,MAAM,MAAM,KAAKC,MAAM,aAAa,MAAM;GAC1C,UAAU,IAAI,SAAS;GACvB,SAAS,KAAK,KAAKC,UAAU,UAAU,MAAM,aAAa,GAAG,CAAC;EAC/D;EACA,OAAO;CACR;CAKA,OAAO,MAA+B;EACrC,MAAM,WAAW,KAAKxB;EACtB,IAAI,aAAa,KAAA,GAAW,OAAO,CAAC;EACpC,MAAM,8BAAc,IAAI,IAAY;EACpC,KAAK,MAAM,YAAY,KAAK,WAAW;GACtC,IAAI,SAAS,WAAW,QAAQ;GAChC,MAAM,SAAS,SAAS,UAAU,SAAS;GAC3C,KAAK,MAAM,QAAQ,SAAS,OAAO;IAClC,IAAI,SAAS,UAAU,CAAC,KAAK,WAAW,GAAG,OAAO,EAAE,GAAG;IAIvD,IAAI,CAHW,SAAS,QAAQ,MAC9B,UAAU,MAAM,gBAAgB,QAAQ,MAAM,YAAY,WAAW,GAAG,KAAK,EAAE,CAE5E,GAAQ,YAAY,IAAI,KAAKoB,OAAO,UAAU,IAAI,CAAC;GACzD;EACD;EACA,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,KAAK;CAC9B;CAKA,OAAO,UAA2C,aAA6B;EAC9E,MAAM,SAAS,SAAS,UAAU,SAAS;EAC3C,IAAI,gBAAgB,QAAQ,OAAO,SAAS;EAC5C,IAAI,CAAC,YAAY,WAAW,GAAG,OAAO,EAAE,GACvC,MAAM,KAAKlB,OAAO,UAAU,4BAA4B,YAAY,cAAc,OAAO,IAAI;GAC5F,MAAM,KAAKH;GACX;GACA;EACD,CAAC;EAEF,OAAO,GAAG,SAAS,KAAK,GAAG,YAAY,MAAM,OAAO,SAAS,CAAC;CAC/D;CAMA,UAAU,MAAuB;EAChC,OAAO,SAAS,sBAAuB,KAAK,WAAW,SAAS,KAAK,KAAK,SAAS,KAAK;CACzF;CAEA,UACC,UACA,MACA,aACe;EACf,OAAO;GACN;GACA,OAAO,SAAS;GAChB,WAAW;GACX,QAAQ;GACR,QAAQ;GACR,GAAI,SAAS,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,SAAS,YAAY;EACnF;CACD;CAEA,UACC,UACA,MACA,aACA,KACmB;EACnB,OAAO;GACN;GACA,OAAO,SAAS;GAChB,WAAW;GACX,QAAQ;GACR,QAAQ;GACR,GAAI,SAAS,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,SAAS,YAAY;GAClF;EACD;CACD;CAEA,MAAM,SAAiB,QAAwB;EAC9C,MAAM,MAAM,YAAY,KAAKA,OAAO,SAAS,KAAK,IAAI,GAAG,KAAK,IAAI,oBAAoB,MAAM,CAAC,CAAC;EAC9F,IAAI,QAAQ,KAAA,GACX,MAAM,KAAKG,OAAO,UAAU,uCAAuC,QAAQ,IAAI;GAC9E,MAAM,KAAKH;GACX;EACD,CAAC;EAEF,OAAO;CACR;CAKA,WAAW,SAA6B,SAA6B,QAAsB;EAC1F,MAAM,YAAY,IAAI,IAAqB,QAAQ,KAAK,YAAY,CAAC,QAAQ,MAAM,OAAO,CAAC,CAAC;EAC5F,KAAK,MAAM,WAAW,SAAS;GAC9B,IAAI,QAAQ,UAAU,WAAW;GACjC,MAAM,QAAQ,UAAU,IAAI,QAAQ,IAAI;GACxC,IAAI,UAAU,KAAA,GACb,MAAM,KAAKG,OAAO,UAAU,YAAY,QAAQ,KAAK,gCAAgC;IACpF;IACA,MAAM,QAAQ;GACf,CAAC;GAEF,IAAI,MAAM,UAAU,QAAQ,SAAS,MAAM,aAAa,QAAQ,UAAU;GAC1E,MAAM,KAAKA,OAAO,UAAU,YAAY,QAAQ,KAAK,0BAA0B;IAC9E;IACA,MAAM,QAAQ;GACf,CAAC;EACF;CACD;CAKA,MAAM,QAAgB,MAAc,QAAoC;EACvE,MAAM,cAAc,qBAAqB,QAAQ,IAAI;EACrD,IAAI,gBAAgB,KAAA,GACnB,MAAM,KAAKA,OAAO,WAAW,YAAY,KAAK,yCAAyC;GACtF;GACA;EACD,CAAC;EAEF,IAAI,QAAQ,OAAO;GAAE,MAAM;GAAa,OAAO;EAAS;EACxD,MAAM,SAAS,kBAAkB,WAAW;EAC5C,IAAI,WAAW,KAAA,GACd,MAAM,KAAKA,OAAO,UAAU,YAAY,KAAK,mCAAmC;GAC/E;GACA;EACD,CAAC;EAEF,OAAO;GAAE,MAAM;GAAa,OAAO;GAAQ;EAAO;CACnD;CAIA,SACC,QACA,MACA,OACA,SACoB;EACpB,MAAM,OAAO,aAAa,QAAQ,MAAM,KAAK;EAC7C,IAAI,SAAS,KAAA,GACZ,MAAM,KAAKA,OAAO,UAAU,eAAe,KAAK,yBAAyB;GAAE;GAAQ;EAAK,CAAC;EAE1F,MAAM,UAAU,QAAQ,IAAI;EAC5B,IAAI,YAAY,MACf,OAAO,KAAKuB,QAAQ;GAAE;GAAQ,SAAS,CAAC;GAAG,SAAS,CAAC,IAAI;GAAG,SAAS,CAAC;EAAE,CAAC;EAE1E,OAAO,KAAKhB,OACX,QACA,CAAC;GAAE;GAAM,OAAO,WAAW,IAAI;GAAG,WAAW;GAAW,QAAQ;GAAY;EAAQ,CAAC,GACrF,CAAC,GACD,CAAC,GACD,CAAC,KAAKE,MAAM,QAAQ,MAAM,KAAK,CAAC,CACjC;CACD;CAIA,OACC,QACA,QACA,aACA,SACA,eACoB;EACpB,MAAM,QAAQ,CAAC,GAAG,OAAO,KAAK,aAAa,SAAS,IAAI,GAAG,GAAG,WAAW;EACzE,IAAI,MAAM,WAAW,GAAG,OAAO,KAAKc,QAAQ;GAAE;GAAQ,SAAS,CAAC;GAAG;GAAS,SAAS,CAAC;EAAE,CAAC;EACzF,MAAM,cAAc,KAAKC,MAAM,QAAQ,OAAO,aAAa;EAC3D,MAAM,SAAS,cAAc;GAC5B,KAAK,MAAM,YAAY,QACtB,IAAI,SAAS,WAAW,QAAQ,KAAKC,MAAM,aAAa,QAAQ;QAC3D,YAAY,MAAM,SAAS,MAAM,SAAS,OAAO;GAEvD,KAAK,MAAM,QAAQ,aAAa,YAAY,UAAU,IAAI;EAC3D,CAAC;EACD,MAAM,UAAU,KAAKC,OAAO,aAAa,QAAQ,MAAM;EACvD,KAAK,MAAM,QAAQ,SAAS,KAAK9B,SAAS,KAAK,SAAS,IAAI;EAC5D,OAAO,KAAK2B,QAAQ;GAAE;GAAQ;GAAS;GAAS,SAAS,CAAC;EAAE,CAAC;CAC9D;CAIA,OACC,QACA,UACA,SACA,eACoB;EACpB,IAAI,SAAS,WAAW,GAAG,OAAO,KAAKA,QAAQ;GAAE;GAAQ,SAAS,CAAC;GAAG;GAAS,SAAS,CAAC;EAAE,CAAC;EAC5F,MAAM,cAAc,KAAKC,MAAM,QAAQ,UAAU,aAAa;EAC9D,MAAM,SAAS,cAAc;GAC5B,KAAK,MAAM,QAAQ,UAAU,YAAY,OAAO,IAAI;EACrD,CAAC;EACD,MAAM,UAAU,KAAKE,OAAO,aAAa,QAAQ,MAAM;EACvD,KAAK,MAAM,QAAQ,SAAS,KAAK9B,SAAS,KAAK,UAAU,IAAI;EAC7D,OAAO,KAAK2B,QAAQ;GAAE;GAAQ,SAAS,CAAC;GAAG;GAAS;EAAQ,CAAC;CAC9D;CAEA,MACC,QACA,OACA,eACmB;EACnB,MAAM,SAAS,cAAc,IAAI,iBAAiB,QAAQ,OAAO,aAAa,CAAC;EAC/E,IAAI,OAAO,SAAS,OAAO,OAAO;EAClC,KAAK3B,SAAS,KAAK,SAAS,OAAO,KAAK;EACxC,MAAM,OAAO;CACd;CAKA,OAAO,aAA+B,QAAsB,QAAmC;EAC9F,IAAI,CAAC,OAAO,SAAS;GACpB,MAAM,UAAU,cAAc,YAAY,QAAQ,CAAC;GACnD,IAAI,CAAC,QAAQ,SACZ,MAAM,KAAKI,OAAO,SAAS,kBAAkB,OAAO,mCAAmC;IACtF;IACA,OAAO,OAAO;IACd,SAAS,QAAQ;GAClB,CAAC;GAEF,KAAKJ,SAAS,KAAK,SAAS,OAAO,KAAK;GACxC,MAAM,OAAO;EACd;EACA,MAAM,YAAY,cAAc,YAAY,OAAO,CAAC;EACpD,IAAI,UAAU,SAAS,OAAO,UAAU;EACxC,KAAKA,SAAS,KAAK,SAAS,UAAU,KAAK;EAC3C,MAAM,UAAU;CACjB;CAIA,MAAM,aAA+B,UAAiD;EACrF,MAAM,cAAc,SAAS,UAAU,SAAS;EAChD,MAAM,QAAQ,KAAKG,SAAS,IAAI,WAAW;EAC3C,MAAM,UAAU,UAAU,KAAA,IAAY,cAAc,MAAM;EAC1D,MAAM,SAAS,qBAAqB,KAAKF,OAAO,OAAO;EACvD,IAAI,WAAW,KAAA,GACd,MAAM,KAAKG,OAAO,UAAU,0BAA0B,QAAQ,oBAAoB;GACjF,MAAM,KAAKH;GACX;EACD,CAAC;EAEF,YAAY,KAAK,SAAS,MAAM,QAAQ,OAAO,eAAe,IAAI;CACnE;CAGA,WAAW,SAA4D;EAKtE,MAAM,QAAQ;GAAC;GAAyB;GAAiB,GAJ5C,QAAQ,KACnB,UACA,OAAO,MAAM,KAAK,OAAO,MAAM,WAAW,UAAU,KAAK,MAAM,QAAQ,MAAM,KAAK8B,MAAM,MAAM,IAAI,EAAE,GAE1C;EAAI,CAAC,CAAC,KAAK,IAAI;EAC3E,QAAQ,SAAiB;GACxB,MAAM,UAAU,KAAK,QAAQ,aAAajC,QAAQ;GAClD,MAAM,UAAU,KAAK,QAAQ,aAAaC,UAAU,UAAU,aAAaD,SAAS,MAAM;GAC1F,IAAI,UAAU,KAAK,UAAU,GAC5B,MAAM,KAAKM,OAAO,UAAU,oDAAoD,EAC/E,MAAM,mBACP,CAAC;GAEF,OAAO,GAAG,KAAK,MAAM,GAAG,UAAU,aAAaN,SAAS,MAAM,EAAE,IAAI,MAAM,IAAI,KAAK,MAAM,OAAO;EACjG;CACD;CAGA,MAAM,MAAsB;EAC3B,OAAO,KAAK,WAAW,KAAK,KAAK,CAAC,CAAC,WAAW,SAAS,GAAG,CAAC,CAAC,KAAK;CAClE;CAIA,WAAW,cAA+D;EACzE,QAAQ,SAAiB;GACxB,IAAI,WAAW;GACf,KAAK,MAAM,cAAc,cAAc;IACtC,MAAM,MAAM,KAAK,UAAU,WAAW,IAAI;IAC1C,MAAM,QAAQ,KAAK,UAAU,WAAW,KAAK;IAC7C,IAAI,QAAQ,SAAS,QAAQ,GAAG;IAChC,IAAI,WAAW;IACf,OAAO,SAAS,GAAG;KAClB,MAAM,OAAO,KAAKkC,MAAM,UAAU,QAAQ,IAAI,MAAM;KACpD,IAAI,SAAS,KAAA,GAAW;MACvB,QAAQ,SAAS,QAAQ,KAAK,QAAQ,IAAI,MAAM;MAChD;KACD;KACA,WAAW,SAAS,MAAM,GAAG,KAAK,EAAE,IAAI,QAAQ,SAAS,MAAM,KAAK,EAAE;KACtE,WAAW;KACX,QAAQ,SAAS,QAAQ,KAAK,KAAK,KAAK,MAAM,MAAM;IACrD;IACA,IAAI,CAAC,UACJ,MAAM,KAAK5B,OACV,WACA,iCAAiC,WAAW,KAAK,sCACjD,EAAE,MAAM,WAAW,KAAK,CACzB;GAEF;GACA,OAAO;EACR;CACD;CAIA,MAAM,MAAc,MAAqD;EACxE,IAAI,QAAQ;EACZ,OAAO,QAAQ,KAAK,UAAU,MAAM,KAAK,KAAK,OAAO,KAAK,CAAC,GAAG,SAAS;EACvE,IAAI,KAAK,OAAO,KAAK,MAAM,KAAK,OAAO,KAAA;EACvC,SAAS;EACT,OAAO,QAAQ,KAAK,UAAU,MAAM,KAAK,KAAK,OAAO,KAAK,CAAC,GAAG,SAAS;EACvE,IAAI,KAAK,OAAO,KAAK,MAAM,MAAK,OAAO,KAAA;EACvC,MAAM,QAAQ;EACd,SAAS;EACT,OAAO,QAAQ,KAAK,QAAQ;GAC3B,IAAI,KAAK,OAAO,KAAK,MAAM,MAAM;IAChC,SAAS;IACT;GACD;GACA,IAAI,KAAK,OAAO,KAAK,MAAM,MAAK,OAAO,CAAC,OAAO,QAAQ,CAAC;GACxD,SAAS;EACV;CAED;CAGA,QAAQ,QAA8C;EACrD,KAAKJ,SAAS,KAAK,UAAU,MAAM;EACnC,OAAO;CACR;CAKA,QAAW,OAAgB,OAAiB,OAAkB;EAC7D,MAAM,WAAW,WAAW,KAAK;EACjC,IAAI,MAAM,QAAQ,GAAG,OAAO;EAC5B,MAAM,KAAKI,OACV,WACA,OAAO,MAAM,8DACb,EAAE,MAAM,CACT;CACD;CAEA,eAAqB;EACpB,IAAI,KAAKc,YAAY,MAAM,KAAKd,OAAO,aAAa,uCAAuC;CAC5F;CAIA,OAAO,MAAyB,SAAiB,SAAkC;EAClF,MAAM,QAAQ,IAAI,cAAc,MAAM,SAAS,OAAO;EACtD,KAAKJ,SAAS,KAAK,SAAS,KAAK;EACjC,OAAO;CACR;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACn5BA,IAAa,WAAb,MAAa,SAAsC;CAMlD,OAAgBiC,gBAAgB;CAChC,OAAgBC,mBAAmB;CACnC,OAAgBC,iBAAiB;CACjC,OAAgBC,kBAAkB;CAClC,OAAgBC,sBAAsB;CACtC,OAAgBC,kBAAkB;CAClC,OAAgBC,iBAAiB;CACjC,OAAgBC,SAAS;CACzB,OAAgBC,cAAc;CAE9B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,cAAuB,IAAI,gBAAgB;CAC3C,aAAa;;;;;;;;;;;;;;;;;;;;CAqBb,YAAY,SAA2B;EACtC,IAAI,YAAY,KAAA,KAAa,CAAC,kBAAkB,OAAO,GACtD,MAAM,IAAI,cACT,WACA,6EACA,EAAE,OAAO,UAAU,CACpB;EAED,KAAKC,WAAW,IAAI,QAA0B;GAC7C,GAAI,SAAS,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI,QAAQ,GAAG;GACtD,GAAI,SAAS,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;EAChE,CAAC;EACD,KAAKC,aAAa,KAAKU,UAAU,SAAS,QAAQ,QAAQ,SAASpB,eAAe,QAAQ;EAC1F,KAAKW,eAAe,SAAS,QAAQ,UAAU,SAAST;EACxD,KAAKU,gBAAgB,SAAS,QAAQ,WAAW,SAAST;EAC1D,KAAKU,gBAAgB,KAAKO,UACzB,SAAS,UAAU,QAAQ,SAASnB,kBACpC,UACD;EACA,KAAKa,mBAAmB,SAAS,UAAU,WAAW,SAASX;EAC/D,KAAKY,eAAe,SAAS,eAAe,SAASX;EACrD,KAAKY,WAAW,SAAS,WAAW,SAASX;EAC7C,KAAKY,SAAS,SAAS,SAAS;EAChC,KAAKC,UAAU,SAAS,UAAU,SAASZ;CAC5C;;CAGA,IAAI,UAA8C;EACjD,OAAO,KAAKG;CACb;;;;;;;;;;;;;;;;;;;;;;;;;CA0BA,MAAM,OAAO,cAAkE;EAC9E,KAAKY,aAAa;EAClB,MAAM,WAAW,KAAKC,QAAQ,cAAc,gBAAgB,cAAc;EAC1E,MAAM,YAAY,EAAE,WAAW,KAAKJ,QAAQ;EAC5C,OAAO,KAAKK,QAAQ,WAAW,eAAe,KAAKC,SAAS,YAAY,SAAS,CAAC;CACnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BA,MAAM,MAAM,OAA0B,SAA+C;EACpF,KAAKH,aAAa;EAClB,MAAM,WAAW,KAAKC,QAAQ,OAAO,mBAAmB,OAAO;EAC/D,MAAM,WAAW,KAAKA,QAAQ,SAAS,YAAY,SAAS;EAC5D,MAAM,YAAY,EAAE,WAAW,KAAKJ,QAAQ;EAC5C,OAAO,KAAKK,QAAQ,WAAW,SAAS,KAAKE,QAAQ,MAAM,UAAU,SAAS,CAAC;CAChF;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BA,MAAM,UAA4C;EACjD,KAAKJ,aAAa;EAClB,MAAM,YAAY,EAAE,WAAW,KAAKH,QAAQ;EAC5C,MAAM,QAAQ,MAAM,KAAKQ,UAAU,SAAS;EAC5C,OAAO,KAAKH,QAAQ,QAAQ,SAAS,KAAKI,OAAO,MAAM,SAAS,CAAC;CAClE;;;;;;;;;;;;;;;;;;;;CAqBA,UAAgB;EACf,IAAI,KAAKC,YAAY;EACrB,KAAKA,aAAa;EAClB,KAAKT,YAAY,MAAM;EACvB,KAAKV,SAAS,KAAK,SAAS;EAC5B,KAAKA,SAAS,QAAQ;CACvB;CAIA,UAAU,MAAc,OAAuB;EAC9C,MAAM,SAAS,IAAI,MAAM,IAAI;EAC7B,IAAI,WAAW,MACd,MAAM,KAAKoB,OAAO,WAAW,OAAO,MAAM,0BAA0B;GAAE;GAAO;EAAK,CAAC;EAEpF,MAAM,WACL,OAAO,aAAa,eACpB,OAAO,aAAa,eACpB,OAAO,aAAa;EACrB,IAAI,OAAO,aAAa,YAAY,EAAE,OAAO,aAAa,WAAW,WACpE,MAAM,KAAKA,OACV,WACA,OAAO,MAAM,eAAe,KAAK,4CACjC;GAAE;GAAO;EAAK,CACf;EAED,IACC,OAAO,aAAa,MACpB,OAAO,aAAa,MACpB,OAAO,WAAW,MAClB,OAAO,SAAS,IAEhB,MAAM,KAAKA,OACV,WACA,OAAO,MAAM,eAAe,KAAK,gDACjC;GAAE;GAAO;EAAK,CACf;EAED,OAAO,OAAO,KAAK,QAAQ,SAAS,EAAE;CACvC;CAKA,MAAML,SAAS,YAAwB,WAAoD;EAC1F,MAAM,UAAU,MAAM,KAAKM,MAC1B,KAAKC,aAAa,WAAW,IAAI,GACjC,KAAKjB,kBACL,SACD;EACA,MAAM,SAAS,QAAQ,WAAW,UAAU,KAAKkB,QAAQ,QAAQ,OAAO,IAAI,KAAA;EAC5E,MAAM,UACL,WAAW,KAAA,IACR;GACA,MAAM,WAAW;GACjB,OAAO,WAAW;GAClB,QAAQ,QAAQ,WAAW,YAAY,YAAY;GACnD,MAAM,QAAQ,WAAW,UAAU,SAASxB,cAAc,QAAQ;EACnE,IACC;GAAE,MAAM,WAAW;GAAM,OAAO,WAAW;GAAO,QAAQ;GAAS;EAAO;EAC9E,KAAKC,SAAS,KAAK,WAAW,OAAO;EACrC,OAAO;CACR;CAGA,MAAMgB,QACL,MACA,SACA,WACkB;EAClB,MAAM,OAAO,YAAY,IAAI;EAC7B,MAAM,UAAU,MAAM,KAAKK,MAAM,KAAKG,UAAU,IAAI,GAAG,KAAKrB,eAAe,SAAS;EACpF,MAAM,WAAW,QAAQ;EACzB,MAAM,SACL,QAAQ,WAAW,UAChB;GACA;GACA;GACA,QAAQ;GACR,SAAS,QAAQ;GACjB,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;EAC9C,IACC;GACA;GACA;GACA,QAAQ,QAAQ;GAChB,MAAM,QAAQ;GACd,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;EAC9C;EACH,KAAKH,SAAS,KAAK,UAAU,MAAM;EACnC,OAAO;CACR;CAKA,MAAMkB,OAAO,MAAc,WAAyD;EACnF,MAAM,UAAU,MAAM,KAAKG,MAAM,KAAKC,aAAa,IAAI,GAAG,KAAKjB,kBAAkB,SAAS;EAC1F,MAAM,UAAU,QAAQ,WAAW,UAAU,KAAKkB,QAAQ,QAAQ,OAAO,IAAI,KAAA;EAC7E,IAAI,YAAY,KAAA,GAAW,OAAO;GAAE;GAAM,QAAQ;GAAS;EAAQ;EACnE,OAAO;GACN;GACA,QAAQ,QAAQ,WAAW,YAAY,YAAY;GACnD,MAAM,QAAQ,WAAW,UAAU,SAASxB,cAAc,QAAQ;EACnE;CACD;CAMA,MAAMkB,UAAU,WAA8D;EAC7E,MAAM,MAAM,GAAG,KAAKb,cAAc,SAAS,SAASN,OAAO;EAC3D,MAAM,UAAU,MAAM,KAAKuB,MAAM,KAAK,KAAKhB,kBAAkB,SAAS;EACtE,IAAI,QAAQ,WAAW,SACtB,MAAM,KAAKe,OAAO,SAAS,oCAAoC,IAAI,uBAAuB;GACzF;GACA,MAAM,QAAQ;EACf,CAAC;EAEF,MAAM,SAAS,UAAU,QAAQ,OAAO;EACxC,IAAI,CAAC,SAAS,MAAM,GACnB,MAAM,KAAKA,OAAO,SAAS,oCAAoC,IAAI,oBAAoB,EACtF,IACD,CAAC;EAEF,MAAM,QAAQ,OAAO,KAAK,MAAM;EAChC,IACC,MAAM,WAAW,KACjB,CAAC,aAAa,KAAK,KACnB,CAAC,MAAM,OAAO,SAAS,iBAAiB,IAAI,CAAC,GAE7C,MAAM,KAAKA,OACV,SACA,oCAAoC,IAAI,kCACxC;GAAE;GAAK,OAAO,MAAM;EAAO,CAC5B;EAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK;CACxB;CAMA,QAAQ,SAAqC;EAC5C,MAAM,SAAS,UAAU,OAAO;EAChC,IAAI,CAAC,SAAS,MAAM,GAAG,OAAO,KAAA;EAC9B,MAAM,SAAS,iBAAiB,QAAQ,CAAC,aAAa,QAAQ,CAAC;EAC/D,IAAI,WAAW,KAAA,KAAa,OAAO,WAAW,KAAK,OAAO,SAAS,kBAClE;EAED,OAAO,0BAA0B,KAAK,MAAM,IAAI,KAAA,IAAY;CAC7D;CASA,aAAa,MAAsB;EAClC,OAAO,GAAG,KAAKhB,cAAc,GAAG,mBAAmB,IAAI,CAAC,CAAC,WAAW,OAAO,GAAG;CAC/E;CASA,UAAU,MAAsB;EAC/B,MAAM,SAAS,KAAKF,aAClB,MAAM,GAAG,CAAC,CACV,KAAK,YAAY,mBAAmB,OAAO,CAAC,CAAC,CAC7C,KAAK,GAAG;EACV,MAAM,aAAa,mBAAmB,KAAK,MAAM,KAAK,YAAY,GAAG,IAAI,CAAC,CAAC;EAC3E,OAAO,GAAG,KAAKD,WAAW,GAAG,SAASH,OAAO,GAAG,WAAW,cAAc,OAAO,GAAG,YAAY,IAAI;CACpG;CAOA,MAAMuB,MACL,KACA,SACA,WACwF;EACxF,IAAI,OAAO;EACX,KAAK,IAAI,UAAU,GAAG,WAAW,KAAKd,UAAU,WAAW,GAAG;GAC7D,KAAKK,aAAa;GAClB,MAAM,UAAU,MAAM,KAAKa,SAAS,KAAK,SAAS,SAAS;GAC3D,IAAI,QAAQ,WAAW,UAAU,OAAO;GACxC,OAAO,QAAQ;EAChB;EACA,KAAKL,OAAO,SAAS,wBAAwB,IAAI,uBAAuB;GAAE;GAAK;EAAK,CAAC;EACrF,OAAO;GAAE,QAAQ;GAAU,SAAS;GAAI;EAAK;CAC9C;CAKA,MAAMK,SACL,KACA,SACA,WACwF;EACxF,IAAI,UAAU,aAAa,GAC1B,OAAO;GACN,QAAQ;GACR,SAAS;GACT,MAAM,sBAAsB,OAAO,KAAKhB,OAAO,EAAE;EAClD;EAED,IAAI;GACH,MAAM,WAAW,MAAM,MAAM,KAAK;IACjC,QAAQ,YAAY,IAAI,CAAC,KAAKC,YAAY,QAAQ,YAAY,QAAQ,OAAO,CAAC,CAAC;IAC/E,UAAU;GACX,CAAC;GACD,IAAI,SAAS,WAAW,KAAK;IAC5B,MAAM,SAAS,MAAM,OAAO;IAC5B,OAAO;KAAE,QAAQ;KAAW,SAAS;KAAI,MAAM;IAAW;GAC3D;GACA,IAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAAK;IACpD,MAAM,SAAS,MAAM,OAAO;IAC5B,OAAO;KACN,QAAQ;KACR,SAAS;KACT,MAAM,QAAQ,OAAO,SAAS,MAAM,EAAE;IACvC;GACD;GACA,IAAI,CAAC,SAAS,IAAI;IACjB,MAAM,SAAS,MAAM,OAAO;IAC5B,OAAO;KAAE,QAAQ;KAAU,SAAS;KAAI,MAAM,QAAQ,OAAO,SAAS,MAAM;IAAI;GACjF;GACA,OAAO,MAAM,KAAKgB,MAAM,UAAU,SAAS;EAC5C,SAAS,OAAO;GACf,KAAKd,aAAa;GAClB,OAAO;IAAE,QAAQ;IAAU,SAAS;IAAI,MAAM,KAAKe,MAAM,KAAK;GAAE;EACjE;CACD;CAQA,MAAMD,MACL,UACA,WACwF;EACxF,MAAM,WAAW,SAAS,QAAQ,IAAI,gBAAgB;EACtD,MAAM,SAAS,aAAa,OAAO,KAAA,IAAY,OAAO,QAAQ;EAC9D,IACC,WAAW,KAAA,KACX,OAAO,SAAS,MAAM,MACrB,SAAS,KAAKlB,UAAU,SAAS,UAAU,YAC3C;GACD,MAAM,SAAS,MAAM,OAAO;GAC5B,OAAO;IACN,QAAQ;IACR,SAAS;IACT,MAAM,yBAAyB,OAAO,MAAM,EAAE,mBAAmB,OAAO,KAAK,IAAI,KAAKA,QAAQ,UAAU,SAAS,CAAC,EAAE;GACrH;EACD;EACA,MAAM,OAAO,SAAS;EACtB,IAAI,SAAS,MAAM,OAAO;GAAE,QAAQ;GAAS,SAAS;GAAI,MAAM;EAAG;EACnE,MAAM,SAAS,KAAK,UAAU;EAC9B,MAAM,UAAU,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC;EACxD,MAAM,SAAmB,CAAC;EAC1B,IAAI,QAAQ;EACZ,IAAI;GACH,SAAS;IACR,MAAM,QAAQ,MAAM,OAAO,KAAK;IAChC,IAAI,MAAM,MAAM;IAChB,SAAS,MAAM,MAAM;IACrB,UAAU,aAAa,MAAM,MAAM;IACnC,IAAI,QAAQ,KAAKA,QAAQ;KACxB,MAAM,OAAO,OAAO;KACpB,OAAO;MACN,QAAQ;MACR,SAAS;MACT,MAAM,2BAA2B,OAAO,KAAKA,MAAM,EAAE;KACtD;IACD;IACA,IAAI,UAAU,YAAY,GAAG;KAC5B,MAAM,OAAO,OAAO;KACpB,OAAO;MACN,QAAQ;MACR,SAAS;MACT,MAAM,sBAAsB,OAAO,KAAKC,OAAO,EAAE;KAClD;IACD;IACA,OAAO,KAAK,QAAQ,OAAO,MAAM,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC;GAC1D;GACA,OAAO,KAAK,QAAQ,OAAO,CAAC;EAC7B,SAAS,OAAO;GACf,MAAM,OAAO,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;GAC3C,MAAM;EACP,UAAU;GACT,OAAO,YAAY;EACpB;EACA,OAAO;GAAE,QAAQ;GAAS,SAAS,OAAO,KAAK,EAAE;GAAG,MAAM;EAAG;CAC9D;CAMA,MAAM,OAAwB;EAC7B,IAAI,CAAC,QAAQ,KAAK,GAAG,OAAO;EAC5B,MAAM,QAAQ,MAAM;EACpB,MAAM,OAAO,SAAS,KAAK,KAAK,SAAS,MAAM,IAAI,IAAI,MAAM,OAAO,KAAA;EACpE,MAAM,UAAU,GAAG,MAAM,KAAK,IAAI,MAAM;EACxC,OAAO,SAAS,KAAA,IAAY,UAAU,GAAG,QAAQ,IAAI,KAAK;CAC3D;CAOA,MAAMK,QAAc,OAAqB,KAAqD;EAC7F,MAAM,UAAe,CAAC;EACtB,MAAM,QAA8E;GACnF,QAAQ;GACR,SAAS,KAAA;EACV;EACA,MAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,KAAKR,cAAc,MAAM,MAAM,EAAE,SAC9E,KAAKsB,OAAO,OAAO,KAAK,SAAS,KAAK,CACvC;EACA,MAAM,QAAQ,WAAW,OAAO;EAChC,IAAI,MAAM,YAAY,KAAA,GAAW,MAAM,MAAM,QAAQ;EACrD,OAAO;CACR;CAGA,MAAMA,OACL,OACA,KACA,SACA,OACgB;EAChB,SAAS;GACR,IAAI,MAAM,YAAY,KAAA,GAAW;GACjC,MAAM,QAAQ,MAAM;GACpB,MAAM,UAAU;GAChB,IAAI,SAAS,MAAM,QAAQ;GAC3B,MAAM,OAAO,MAAM;GACnB,IAAI,SAAS,KAAA,GAAW;GACxB,IAAI;IACH,QAAQ,SAAS,MAAM,IAAI,IAAI;GAChC,SAAS,OAAO;IACf,MAAM,YAAY,EAAE,MAAM;IAC1B;GACD;EACD;CACD;CAIA,QAAW,OAAgB,OAAiB,OAAkB;EAC7D,MAAM,WAAW,WAAW,KAAK;EACjC,IAAI,MAAM,QAAQ,GAAG,OAAO;EAC5B,MAAM,KAAKR,OACV,WACA,OAAO,MAAM,iEACb,EAAE,MAAM,CACT;CACD;CAEA,eAAqB;EACpB,IAAI,KAAKD,YAAY,MAAM,KAAKC,OAAO,aAAa,0CAA0C;CAC/F;CAKA,OAAO,MAAyB,SAAiB,SAAkC;EAClF,MAAM,QAAQ,IAAI,cAAc,MAAM,SAAS,OAAO;EACtD,KAAKpB,SAAS,KAAK,SAAS,KAAK;EACjC,OAAO;CACR;AACD;;;;;;;;;;;;;;;;;;;;AChnBA,SAAgB,mBAAmB,SAAsD;CACxF,OAAO,IAAI,aAAa,OAAO;AAChC;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,eAAe,SAA8C;CAC5E,OAAO,IAAI,SAAS,OAAO;AAC5B"}