@orquentra/codebuddy 0.0.0-stage → 2.4.1

package/dist/chunk-ITGRANYW.js

@@ -0,0 +1,63 @@
+import {
+  readConfigFile
+} from "./chunk-K63EOA4B.js";
+
+// src/llm/config.ts
+var BASE_URL = {
+  groq: "https://api.groq.com/openai/v1",
+  openrouter: "https://openrouter.ai/api/v1"
+};
+var KEY_ENV = {
+  groq: "GROQ_API_KEY",
+  openrouter: "OPENROUTER_API_KEY"
+};
+var DEFAULT_MODEL = {
+  groq: "llama-3.1-8b-instant",
+  openrouter: "meta-llama/llama-3.3-70b-instruct:free"
+};
+var DEFAULTS = { timeoutMs: 700, dailyTokenBudget: 4e5 };
+async function resolveLlmConfig(repositoryRoot, env = process.env) {
+  if (env.CODEBUDDY_LLM === "0") return { enabled: false, reason: "CODEBUDDY_LLM=0" };
+  const configured = (await readConfigFile(repositoryRoot)).llm;
+  const block = configured ?? (env.CODEBUDDY_LLM === "1" ? { enabled: true } : void 0);
+  if (!block?.enabled) return { enabled: false, reason: "llm not enabled" };
+  const provider = block.provider ?? "groq";
+  const apiKey = env.CODEBUDDY_LLM_API_KEY || env[KEY_ENV[provider]];
+  if (!apiKey) return { enabled: false, reason: `no API key in ${KEY_ENV[provider]}` };
+  const fallbackKey = block.fallback && env[KEY_ENV[block.fallback.provider]];
+  return {
+    enabled: true,
+    provider,
+    model: block.model ?? DEFAULT_MODEL[provider],
+    // Any OpenAI-compatible endpoint (a proxy, a test stub).
+    baseUrl: env.CODEBUDDY_LLM_BASE_URL?.replace(/\/+$/, "") || BASE_URL[provider],
+    apiKey,
+    timeoutMs: block.timeoutMs ?? DEFAULTS.timeoutMs,
+    dailyTokenBudget: block.dailyTokenBudget ?? DEFAULTS.dailyTokenBudget,
+    features: {
+      summaries: block.features?.summaries ?? true,
+      rerank: block.features?.rerank ?? true,
+      memory: block.features?.memory ?? false
+    },
+    fallback: block.fallback && fallbackKey ? {
+      provider: block.fallback.provider,
+      model: block.fallback.model,
+      baseUrl: BASE_URL[block.fallback.provider],
+      apiKey: fallbackKey
+    } : null
+  };
+}
+function redactLlmKeys(text, env = process.env) {
+  let redacted = text;
+  for (const name of ["CODEBUDDY_LLM_API_KEY", ...Object.values(KEY_ENV)]) {
+    const key = env[name];
+    if (key) redacted = redacted.split(key).join("[REDACTED]");
+  }
+  return redacted;
+}
+
+export {
+  resolveLlmConfig,
+  redactLlmKeys
+};
+//# sourceMappingURL=chunk-ITGRANYW.js.map

package/dist/chunk-ITGRANYW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/llm/config.ts"],"sourcesContent":["import { readConfigFile } from \"../core/config-file.js\";\n\n/**\n * Bring-your-own-key small-model layer. Off unless `.codebuddy/config.json`\n * has `llm.enabled` and the environment holds a key. Keys are read from the\n * environment only, never stored in config, and redacted from any error text.\n */\nexport type LlmProvider = \"groq\" | \"openrouter\";\nexport type LlmFeatures = { summaries: boolean; rerank: boolean; memory: boolean };\ntype Endpoint = { provider: LlmProvider; model: string; baseUrl: string; apiKey: string };\nexport type EnabledLlmConfig = Endpoint & {\n  enabled: true;\n  timeoutMs: number;\n  dailyTokenBudget: number;\n  features: LlmFeatures;\n  /** Background work only; never on the prompt path. */\n  fallback: Endpoint | null;\n};\nexport type LlmConfig = EnabledLlmConfig | { enabled: false; reason: string };\n\nconst BASE_URL: Record<LlmProvider, string> = {\n  groq: \"https://api.groq.com/openai/v1\",\n  openrouter: \"https://openrouter.ai/api/v1\",\n};\nconst KEY_ENV: Record<LlmProvider, string> = {\n  groq: \"GROQ_API_KEY\",\n  openrouter: \"OPENROUTER_API_KEY\",\n};\nconst DEFAULT_MODEL: Record<LlmProvider, string> = {\n  groq: \"llama-3.1-8b-instant\",\n  openrouter: \"meta-llama/llama-3.3-70b-instruct:free\",\n};\nconst DEFAULTS = { timeoutMs: 700, dailyTokenBudget: 400_000 } as const;\n\nexport async function resolveLlmConfig(\n  repositoryRoot: string,\n  env: NodeJS.ProcessEnv = process.env,\n): Promise<LlmConfig> {\n  if (env.CODEBUDDY_LLM === \"0\") return { enabled: false, reason: \"CODEBUDDY_LLM=0\" };\n  // CODEBUDDY_LLM=1 turns it on with defaults where no config says otherwise\n  // (eval copies, one-off runs); an explicit `enabled: false` still wins.\n  const configured = (await readConfigFile(repositoryRoot)).llm;\n  const block = configured ?? (env.CODEBUDDY_LLM === \"1\" ? { enabled: true } : undefined);\n  if (!block?.enabled) return { enabled: false, reason: \"llm not enabled\" };\n  const provider = block.provider ?? \"groq\";\n  const apiKey = env.CODEBUDDY_LLM_API_KEY || env[KEY_ENV[provider]];\n  if (!apiKey) return { enabled: false, reason: `no API key in ${KEY_ENV[provider]}` };\n  const fallbackKey = block.fallback && env[KEY_ENV[block.fallback.provider]];\n  return {\n    enabled: true,\n    provider,\n    model: block.model ?? DEFAULT_MODEL[provider],\n    // Any OpenAI-compatible endpoint (a proxy, a test stub).\n    baseUrl: env.CODEBUDDY_LLM_BASE_URL?.replace(/\\/+$/, \"\") || BASE_URL[provider],\n    apiKey,\n    timeoutMs: block.timeoutMs ?? DEFAULTS.timeoutMs,\n    dailyTokenBudget: block.dailyTokenBudget ?? DEFAULTS.dailyTokenBudget,\n    features: {\n      summaries: block.features?.summaries ?? true,\n      rerank: block.features?.rerank ?? true,\n      memory: block.features?.memory ?? false,\n    },\n    fallback:\n      block.fallback && fallbackKey\n        ? {\n            provider: block.fallback.provider,\n            model: block.fallback.model,\n            baseUrl: BASE_URL[block.fallback.provider],\n            apiKey: fallbackKey,\n          }\n        : null,\n  };\n}\n\n/** Replace every LLM key present in the environment with `[REDACTED]`. */\nexport function redactLlmKeys(text: string, env: NodeJS.ProcessEnv = process.env): string {\n  let redacted = text;\n  for (const name of [\"CODEBUDDY_LLM_API_KEY\", ...Object.values(KEY_ENV)]) {\n    const key = env[name];\n    if (key) redacted = redacted.split(key).join(\"[REDACTED]\");\n  }\n  return redacted;\n}\n"],"mappings":";;;;;AAoBA,IAAM,WAAwC;AAAA,EAC5C,MAAM;AAAA,EACN,YAAY;AACd;AACA,IAAM,UAAuC;AAAA,EAC3C,MAAM;AAAA,EACN,YAAY;AACd;AACA,IAAM,gBAA6C;AAAA,EACjD,MAAM;AAAA,EACN,YAAY;AACd;AACA,IAAM,WAAW,EAAE,WAAW,KAAK,kBAAkB,IAAQ;AAE7D,eAAsB,iBACpB,gBACA,MAAyB,QAAQ,KACb;AACpB,MAAI,IAAI,kBAAkB,IAAK,QAAO,EAAE,SAAS,OAAO,QAAQ,kBAAkB;AAGlF,QAAM,cAAc,MAAM,eAAe,cAAc,GAAG;AAC1D,QAAM,QAAQ,eAAe,IAAI,kBAAkB,MAAM,EAAE,SAAS,KAAK,IAAI;AAC7E,MAAI,CAAC,OAAO,QAAS,QAAO,EAAE,SAAS,OAAO,QAAQ,kBAAkB;AACxE,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,SAAS,IAAI,yBAAyB,IAAI,QAAQ,QAAQ,CAAC;AACjE,MAAI,CAAC,OAAQ,QAAO,EAAE,SAAS,OAAO,QAAQ,iBAAiB,QAAQ,QAAQ,CAAC,GAAG;AACnF,QAAM,cAAc,MAAM,YAAY,IAAI,QAAQ,MAAM,SAAS,QAAQ,CAAC;AAC1E,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,IACA,OAAO,MAAM,SAAS,cAAc,QAAQ;AAAA;AAAA,IAE5C,SAAS,IAAI,wBAAwB,QAAQ,QAAQ,EAAE,KAAK,SAAS,QAAQ;AAAA,IAC7E;AAAA,IACA,WAAW,MAAM,aAAa,SAAS;AAAA,IACvC,kBAAkB,MAAM,oBAAoB,SAAS;AAAA,IACrD,UAAU;AAAA,MACR,WAAW,MAAM,UAAU,aAAa;AAAA,MACxC,QAAQ,MAAM,UAAU,UAAU;AAAA,MAClC,QAAQ,MAAM,UAAU,UAAU;AAAA,IACpC;AAAA,IACA,UACE,MAAM,YAAY,cACd;AAAA,MACE,UAAU,MAAM,SAAS;AAAA,MACzB,OAAO,MAAM,SAAS;AAAA,MACtB,SAAS,SAAS,MAAM,SAAS,QAAQ;AAAA,MACzC,QAAQ;AAAA,IACV,IACA;AAAA,EACR;AACF;AAGO,SAAS,cAAc,MAAc,MAAyB,QAAQ,KAAa;AACxF,MAAI,WAAW;AACf,aAAW,QAAQ,CAAC,yBAAyB,GAAG,OAAO,OAAO,OAAO,CAAC,GAAG;AACvE,UAAM,MAAM,IAAI,IAAI;AACpB,QAAI,IAAK,YAAW,SAAS,MAAM,GAAG,EAAE,KAAK,YAAY;AAAA,EAC3D;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-K63EOA4B.js

@@ -0,0 +1,416 @@
+// src/core/markdown-store-fs.ts
+import { lstat, open, rename } from "fs/promises";
+import { join, relative, resolve, sep } from "path";
+async function assertNoSymlinkBetween(root, target) {
+  const absoluteRoot = resolve(root);
+  const absoluteTarget = resolve(target);
+  const relativeTarget = relative(absoluteRoot, absoluteTarget);
+  if (relativeTarget === ".." || relativeTarget.startsWith(`..${sep}`)) {
+    throw new Error(`Path escapes repository root: ${target}`);
+  }
+  let current = absoluteRoot;
+  const parts = relativeTarget.split(sep).filter(Boolean);
+  for (const part of parts) {
+    current = join(current, part);
+    try {
+      const info = await lstat(current);
+      if (info.isSymbolicLink()) {
+        throw new Error(`Refusing to use symlinked path: ${current}`);
+      }
+    } catch (error) {
+      if (error.code === "ENOENT") return;
+      throw error;
+    }
+  }
+}
+async function writeAtomic(path, document, options) {
+  const temporaryPath = `${path}.${process.pid}.${Date.now()}.tmp`;
+  const handle = await open(temporaryPath, "wx", options?.mode ?? 384);
+  try {
+    await handle.writeFile(document, "utf8");
+    await handle.sync();
+  } finally {
+    await handle.close();
+  }
+  await rename(temporaryPath, path);
+}
+function parseFrontMatter(document) {
+  if (!document.startsWith("---\n")) {
+    throw new Error("Markdown file must start with YAML front matter.");
+  }
+  const closingIndex = document.indexOf("\n---\n", 4);
+  if (closingIndex === -1) {
+    throw new Error("Markdown file has unterminated YAML front matter.");
+  }
+  return {
+    frontMatter: document.slice(4, closingIndex),
+    content: document.slice(closingIndex + 5)
+  };
+}
+function composeMarkdown(frontMatterYaml, body) {
+  const trimmedFrontMatter = frontMatterYaml.trimEnd();
+  const content = body.endsWith("\n") ? body : `${body}
+`;
+  return `---
+${trimmedFrontMatter}
+---
+${content}`;
+}
+
+// src/core/config-file.ts
+import { constants } from "fs";
+import { access, chmod, mkdir, readFile, stat, writeFile } from "fs/promises";
+import { basename, join as join2 } from "path";
+import { z } from "zod";
+var CONFIG_DIR = ".codebuddy";
+var CONFIG_FILE = "config.json";
+var POLICY_FILE = "policies.yaml";
+var PROJECT_GITIGNORE = [
+  "# CodeBuddy local-only files",
+  "/config.json",
+  "/cache/",
+  "/memory/review/",
+  "/memory/review-archive/",
+  "/plans/.locks/",
+  "/memory/.locks/",
+  "",
+  "# Keep these reviewable project artifacts shareable by default:",
+  "#   /memory/facts/*.md",
+  "#   /memory/summaries/*.md",
+  "#   /plans/*.md",
+  "# If your project memory is private, ignore /memory/ in the repo root .gitignore.",
+  ""
+].join("\n");
+var DEFAULT_POLICY_FILE = [
+  "rules:",
+  "  - id: auth-sensitive",
+  '    pattern: "src/auth/**"',
+  '    message: "Auth changes need careful review."',
+  "    weight: 70",
+  ""
+].join("\n");
+var PLAN_POLICIES = ["off", "suggest", "required"];
+var fileSchema = z.object({
+  postgresUrl: z.string().min(1).optional(),
+  namespace: z.string().min(1).optional(),
+  tokenBudget: z.number().int().positive().optional(),
+  provider: z.object({
+    type: z.literal("huggingface").default("huggingface"),
+    apiKey: z.string().min(1).optional()
+  }).optional(),
+  plan: z.object({
+    policy: z.enum(PLAN_POLICIES).default("suggest")
+  }).optional(),
+  graphify: z.object({
+    enabled: z.boolean(),
+    graphPath: z.string().min(1).optional()
+  }).optional(),
+  /**
+   * Optional hosted small-model layer (bring your own key). Keys are read from
+   * the environment only, never from this file (`src/llm/config.ts`).
+   */
+  llm: z.object({
+    enabled: z.boolean(),
+    provider: z.enum(["groq", "openrouter"]).optional(),
+    model: z.string().min(1).optional(),
+    fallback: z.object({ provider: z.enum(["groq", "openrouter"]), model: z.string().min(1) }).optional(),
+    timeoutMs: z.number().int().min(100).max(5e3).optional(),
+    dailyTokenBudget: z.number().int().positive().optional(),
+    features: z.object({
+      summaries: z.boolean().optional(),
+      rerank: z.boolean().optional(),
+      memory: z.boolean().optional()
+    }).optional()
+  }).optional(),
+  /** Optional local semantic retrieval via zvec-grep (`zg`). Off unless enabled. */
+  zvec: z.object({
+    enabled: z.boolean(),
+    binary: z.string().min(1).optional(),
+    timeoutMs: z.number().int().positive().max(1e4).optional()
+  }).optional()
+});
+function configPath(cwd = process.cwd()) {
+  return join2(cwd, CONFIG_DIR, CONFIG_FILE);
+}
+async function initProjectScaffold(cwd = process.cwd()) {
+  const codebuddyDir = join2(cwd, CONFIG_DIR);
+  await mkdir(join2(codebuddyDir, "memory", "facts"), { recursive: true, mode: 448 });
+  await mkdir(join2(codebuddyDir, "memory", "summaries"), { recursive: true, mode: 448 });
+  await mkdir(join2(codebuddyDir, "plans"), { recursive: true, mode: 448 });
+  const gitignorePath = join2(codebuddyDir, ".gitignore");
+  try {
+    await access(gitignorePath, constants.F_OK);
+    let gitignore = await readFile(gitignorePath, "utf8");
+    const lines = new Set(gitignore.split(/\r?\n/));
+    const missing = ["/memory/review/", "/memory/review-archive/"].filter(
+      (line) => !lines.has(line)
+    );
+    if (missing.length > 0) {
+      gitignore = `${gitignore.trimEnd()}
+${missing.join("\n")}
+`;
+      await writeFile(gitignorePath, gitignore, { mode: 420 });
+    }
+  } catch {
+    await writeFile(gitignorePath, PROJECT_GITIGNORE, { mode: 420 });
+  }
+  const policyPath = join2(codebuddyDir, POLICY_FILE);
+  try {
+    await access(policyPath, constants.F_OK);
+  } catch {
+    await writeFile(policyPath, DEFAULT_POLICY_FILE, { mode: 420 });
+  }
+  return { codebuddyDir, gitignorePath, policyPath };
+}
+async function initConfigFile(cwd = process.cwd()) {
+  const path = configPath(cwd);
+  await initProjectScaffold(cwd);
+  try {
+    await access(path, constants.F_OK);
+    await chmod(path, 384);
+    return { path, created: false };
+  } catch {
+    const template = {
+      postgresUrl: process.env.DATABASE_URL ?? "postgres://localhost:5432/codebuddy",
+      // Default to the folder name (sanitized) so a fresh scaffold agrees with
+      // doctor's expected default instead of warning immediately after init.
+      namespace: defaultNamespaceForCwd(cwd),
+      provider: { type: "huggingface" },
+      tokenBudget: 4e3
+    };
+    await writeFile(path, `${JSON.stringify(template, null, 2)}
+`, { mode: 384 });
+    await chmod(path, 384);
+    return { path, created: true };
+  }
+}
+async function writeConfigFile(config, cwd = process.cwd()) {
+  const path = configPath(cwd);
+  await initProjectScaffold(cwd);
+  await writeFile(path, `${JSON.stringify(config, null, 2)}
+`, { mode: 384 });
+  await chmod(path, 384);
+  return { path };
+}
+async function readConfigFile(cwd = process.cwd()) {
+  const path = configPath(cwd);
+  try {
+    const raw = await readFile(path, "utf8");
+    return fileSchema.parse(JSON.parse(raw));
+  } catch (error) {
+    if (error.code === "ENOENT") return {};
+    throw error;
+  }
+}
+function sanitizeNamespace(value) {
+  return value.replace(/[^a-zA-Z0-9_.:-]/g, "-").slice(0, 128);
+}
+function defaultNamespaceForCwd(cwd = process.cwd()) {
+  return sanitizeNamespace(basename(cwd)) || "default";
+}
+async function resolveNamespaceFrom(cwd = process.cwd()) {
+  if (process.env.CODEBUDDY_NAMESPACE) return process.env.CODEBUDDY_NAMESPACE;
+  const file = await readConfigFile(cwd);
+  return file.namespace ?? defaultNamespaceForCwd(cwd);
+}
+var MISSING_DATABASE_URL = "DATABASE_URL or .codebuddy/config.json postgresUrl is required.";
+async function loadRuntimeConfig(cwd = process.cwd(), options = {}) {
+  const projectRoot = process.env.CODEBUDDY_PROJECT_ROOT ?? cwd;
+  const file = await readConfigFile(projectRoot);
+  const postgresUrl = process.env.DATABASE_URL ?? file.postgresUrl ?? "";
+  if (!postgresUrl && options.requireDatabase !== false) {
+    throw new Error(MISSING_DATABASE_URL);
+  }
+  const hfToken = process.env.HF_TOKEN ?? file.provider?.apiKey;
+  return {
+    postgresUrl,
+    namespace: process.env.CODEBUDDY_NAMESPACE ?? file.namespace ?? defaultNamespaceForCwd(projectRoot),
+    projectRoot,
+    provider: {
+      type: "huggingface",
+      ...hfToken ? { apiKey: hfToken } : {}
+    },
+    ...file.tokenBudget ? { tokenBudget: file.tokenBudget } : {},
+    ...file.graphify ? { graphify: file.graphify } : {}
+  };
+}
+async function checkConfigPermissions(cwd = process.cwd()) {
+  const path = configPath(cwd);
+  try {
+    const info = await stat(path);
+    const modeNumber = info.mode & 511;
+    const mode = modeNumber.toString(8).padStart(4, "0");
+    const ok = modeNumber === 384;
+    return {
+      path,
+      exists: true,
+      mode,
+      ok,
+      ...ok ? {} : { warning: ".codebuddy/config.json should be chmod 0600." }
+    };
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { path, exists: false, mode: null, ok: true };
+    }
+    throw error;
+  }
+}
+async function checkProjectScaffold(cwd = process.cwd()) {
+  const codebuddyDir = join2(cwd, CONFIG_DIR);
+  const memoryFactsDir = join2(codebuddyDir, "memory", "facts");
+  const memorySummariesDir = join2(codebuddyDir, "memory", "summaries");
+  const plansDir = join2(codebuddyDir, "plans");
+  const gitignorePath = join2(codebuddyDir, ".gitignore");
+  const policyPath = join2(codebuddyDir, POLICY_FILE);
+  const [
+    codebuddyDirExists,
+    memoryFactsDirExists,
+    memorySummariesDirExists,
+    plansDirExists,
+    gitignoreExists,
+    policiesExist
+  ] = await Promise.all([
+    pathExists(codebuddyDir),
+    pathExists(memoryFactsDir),
+    pathExists(memorySummariesDir),
+    pathExists(plansDir),
+    pathExists(gitignorePath),
+    pathExists(policyPath)
+  ]);
+  return {
+    codebuddyDir: {
+      path: codebuddyDir,
+      exists: codebuddyDirExists,
+      ok: codebuddyDirExists,
+      ...codebuddyDirExists ? {} : { warning: "Run `codebuddy use` or `codebuddy init` to create the project scaffold." }
+    },
+    memoryFactsDir: {
+      path: memoryFactsDir,
+      exists: memoryFactsDirExists,
+      ok: memoryFactsDirExists,
+      ...memoryFactsDirExists ? {} : { warning: "Missing .codebuddy/memory/facts directory." }
+    },
+    memorySummariesDir: {
+      path: memorySummariesDir,
+      exists: memorySummariesDirExists,
+      ok: memorySummariesDirExists,
+      ...memorySummariesDirExists ? {} : { warning: "Missing .codebuddy/memory/summaries directory." }
+    },
+    plansDir: {
+      path: plansDir,
+      exists: plansDirExists,
+      ok: plansDirExists,
+      ...plansDirExists ? {} : { warning: "Missing .codebuddy/plans directory." }
+    },
+    gitignore: {
+      path: gitignorePath,
+      exists: gitignoreExists,
+      ok: gitignoreExists,
+      ...gitignoreExists ? {} : { warning: "Missing .codebuddy/.gitignore." }
+    },
+    policies: {
+      path: policyPath,
+      exists: policiesExist,
+      ok: policiesExist,
+      ...policiesExist ? {} : {
+        warning: "Missing .codebuddy/policies.yaml. Run `codebuddy use` or `codebuddy init` to scaffold it."
+      }
+    }
+  };
+}
+async function loadPlanPolicy(cwd = process.cwd()) {
+  const fromEnv = process.env.CODEBUDDY_PLAN_POLICY;
+  if (fromEnv && PLAN_POLICIES.includes(fromEnv)) {
+    return fromEnv;
+  }
+  const file = await readConfigFile(cwd);
+  return file.plan?.policy ?? "suggest";
+}
+async function setPlanPolicy(policy, cwd = process.cwd()) {
+  await initConfigFile(cwd);
+  const path = configPath(cwd);
+  const raw = JSON.parse(await readFile(path, "utf8"));
+  raw.plan = { ...raw.plan, policy };
+  await writeAtomic(path, `${JSON.stringify(raw, null, 2)}
+`, { mode: 384 });
+}
+async function setZvecEnabled(enabled, cwd = process.cwd()) {
+  await initConfigFile(cwd);
+  const path = configPath(cwd);
+  const raw = JSON.parse(await readFile(path, "utf8"));
+  raw.zvec = { ...raw.zvec, enabled };
+  await writeAtomic(path, `${JSON.stringify(raw, null, 2)}
+`, { mode: 384 });
+}
+async function setLlmEnabled(enabled, options = {}, cwd = process.cwd()) {
+  await initConfigFile(cwd);
+  const path = configPath(cwd);
+  const raw = JSON.parse(await readFile(path, "utf8"));
+  raw.llm = {
+    ...raw.llm,
+    enabled,
+    ...options.provider ? { provider: options.provider } : {},
+    ...options.model ? { model: options.model } : {}
+  };
+  await writeAtomic(path, `${JSON.stringify(raw, null, 2)}
+`, { mode: 384 });
+}
+function redactSecrets(value) {
+  if (typeof value === "string") {
+    let redacted = value;
+    for (const key of [
+      process.env.HF_TOKEN,
+      process.env.GROQ_API_KEY,
+      process.env.OPENROUTER_API_KEY,
+      process.env.CODEBUDDY_LLM_API_KEY
+    ]) {
+      if (key) redacted = redacted.split(key).join("[REDACTED]");
+    }
+    redacted = redacted.replace(
+      /(\b[a-z][a-z0-9+.-]*:\/\/[^:/\s@]+:)[^/\s@]+(@)/gi,
+      "$1[REDACTED]$2"
+    );
+    return redacted;
+  }
+  if (Array.isArray(value)) return value.map(redactSecrets);
+  if (!value || typeof value !== "object") return value;
+  return Object.fromEntries(
+    Object.entries(value).map(([key, nested]) => [
+      key,
+      /token|apiKey|authorization|secret/i.test(key) ? "[REDACTED]" : redactSecrets(nested)
+    ])
+  );
+}
+async function pathExists(path) {
+  try {
+    await access(path, constants.F_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+export {
+  assertNoSymlinkBetween,
+  writeAtomic,
+  parseFrontMatter,
+  composeMarkdown,
+  PLAN_POLICIES,
+  configPath,
+  initProjectScaffold,
+  initConfigFile,
+  writeConfigFile,
+  readConfigFile,
+  defaultNamespaceForCwd,
+  resolveNamespaceFrom,
+  MISSING_DATABASE_URL,
+  loadRuntimeConfig,
+  checkConfigPermissions,
+  checkProjectScaffold,
+  loadPlanPolicy,
+  setPlanPolicy,
+  setZvecEnabled,
+  setLlmEnabled,
+  redactSecrets
+};
+//# sourceMappingURL=chunk-K63EOA4B.js.map

package/dist/chunk-K63EOA4B.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/markdown-store-fs.ts","../src/core/config-file.ts"],"sourcesContent":["import { lstat, open, rename } from \"node:fs/promises\";\nimport { join, relative, resolve, sep } from \"node:path\";\n\n/**\n * Filesystem helpers shared by the Markdown-backed stores\n * (`MemoryFileStore`, `PlanFileStore`). These enforce the security\n * invariants that keep `.codebuddy/` writes inside the repository root:\n * no path traversal, no symlinked path components, and crash-safe atomic\n * writes. Keep this module small and audited; both stores depend on it.\n */\n\n/**\n * Resolve `path` and assert it stays inside `root`. Returns the absolute\n * path. Throws if the resolved path escapes the root.\n */\nexport function resolveWithinRoot(root: string, path: string): string {\n  const absoluteRoot = resolve(root);\n  const absolute = resolve(path);\n  const relativePath = relative(absoluteRoot, absolute);\n  if (relativePath === \"..\" || relativePath.startsWith(`..${sep}`) || relativePath === \"\") {\n    throw new Error(`Path escapes repository root: ${path}`);\n  }\n  return absolute;\n}\n\n/**\n * Walk each path component between `root` and `target` and refuse if any\n * component is a symbolic link. Prevents a planted symlink from\n * redirecting a write outside the repository. Missing components are\n * fine — the caller creates them.\n */\nexport async function assertNoSymlinkBetween(root: string, target: string): Promise<void> {\n  const absoluteRoot = resolve(root);\n  const absoluteTarget = resolve(target);\n  const relativeTarget = relative(absoluteRoot, absoluteTarget);\n  if (relativeTarget === \"..\" || relativeTarget.startsWith(`..${sep}`)) {\n    throw new Error(`Path escapes repository root: ${target}`);\n  }\n\n  let current = absoluteRoot;\n  const parts = relativeTarget.split(sep).filter(Boolean);\n  for (const part of parts) {\n    current = join(current, part);\n    try {\n      const info = await lstat(current);\n      if (info.isSymbolicLink()) {\n        throw new Error(`Refusing to use symlinked path: ${current}`);\n      }\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return;\n      throw error;\n    }\n  }\n}\n\n/**\n * Write `document` to `path` atomically: write to a unique temp file with\n * an exclusive (`wx`) create, fsync, then rename into place. A crash mid-\n * write leaves either the old file or nothing — never a partial file.\n *\n * `mode` sets permissions on NEWLY created files (an existing file keeps its\n * mode, matching rename semantics). Secrets-bearing configs should use 0o600.\n */\nexport async function writeAtomic(\n  path: string,\n  document: string,\n  options?: { mode?: number },\n): Promise<void> {\n  const temporaryPath = `${path}.${process.pid}.${Date.now()}.tmp`;\n  const handle = await open(temporaryPath, \"wx\", options?.mode ?? 0o600);\n  try {\n    await handle.writeFile(document, \"utf8\");\n    await handle.sync();\n  } finally {\n    await handle.close();\n  }\n  await rename(temporaryPath, path);\n}\n\n/**\n * Split a Markdown document with leading YAML front matter into its\n * front-matter text and body. Throws on malformed or unterminated\n * front matter so hand-edited files fail loudly rather than silently\n * losing fields.\n */\nexport function parseFrontMatter(document: string): { frontMatter: string; content: string } {\n  if (!document.startsWith(\"---\\n\")) {\n    throw new Error(\"Markdown file must start with YAML front matter.\");\n  }\n  const closingIndex = document.indexOf(\"\\n---\\n\", 4);\n  if (closingIndex === -1) {\n    throw new Error(\"Markdown file has unterminated YAML front matter.\");\n  }\n  return {\n    frontMatter: document.slice(4, closingIndex),\n    content: document.slice(closingIndex + 5),\n  };\n}\n\n/**\n * Compose a Markdown document from serialized front-matter YAML and a\n * body. Ensures exactly one trailing newline on the body so files are\n * stable across rewrites (minimal git diffs).\n */\nexport function composeMarkdown(frontMatterYaml: string, body: string): string {\n  const trimmedFrontMatter = frontMatterYaml.trimEnd();\n  const content = body.endsWith(\"\\n\") ? body : `${body}\\n`;\n  return `---\\n${trimmedFrontMatter}\\n---\\n${content}`;\n}\n","import { constants } from \"node:fs\";\nimport { access, chmod, mkdir, readFile, stat, writeFile } from \"node:fs/promises\";\nimport { basename, join } from \"node:path\";\nimport { z } from \"zod\";\nimport { writeAtomic } from \"./markdown-store-fs.js\";\nimport type { CodeBuddyConfig } from \"./types.js\";\n\nexport const CONFIG_DIR = \".codebuddy\";\nexport const CONFIG_FILE = \"config.json\";\nexport const POLICY_FILE = \"policies.yaml\";\n\nconst PROJECT_GITIGNORE = [\n  \"# CodeBuddy local-only files\",\n  \"/config.json\",\n  \"/cache/\",\n  \"/memory/review/\",\n  \"/memory/review-archive/\",\n  \"/plans/.locks/\",\n  \"/memory/.locks/\",\n  \"\",\n  \"# Keep these reviewable project artifacts shareable by default:\",\n  \"#   /memory/facts/*.md\",\n  \"#   /memory/summaries/*.md\",\n  \"#   /plans/*.md\",\n  \"# If your project memory is private, ignore /memory/ in the repo root .gitignore.\",\n  \"\",\n].join(\"\\n\");\n\nconst DEFAULT_POLICY_FILE = [\n  \"rules:\",\n  \"  - id: auth-sensitive\",\n  '    pattern: \"src/auth/**\"',\n  '    message: \"Auth changes need careful review.\"',\n  \"    weight: 70\",\n  \"\",\n].join(\"\\n\");\n\n/**\n * Plan policy controls how strongly CodeBuddy nudges agents toward writing\n * a plan before substantive work:\n *   - off:      plans are never suggested or required.\n *   - suggest:  agents are reminded to plan, but small tasks stay lightweight (default).\n *   - required: agents should refuse substantive changes without an active plan.\n */\nexport const PLAN_POLICIES = [\"off\", \"suggest\", \"required\"] as const;\nexport type PlanPolicy = (typeof PLAN_POLICIES)[number];\n\nconst fileSchema = z.object({\n  postgresUrl: z.string().min(1).optional(),\n  namespace: z.string().min(1).optional(),\n  tokenBudget: z.number().int().positive().optional(),\n  provider: z\n    .object({\n      type: z.literal(\"huggingface\").default(\"huggingface\"),\n      apiKey: z.string().min(1).optional(),\n    })\n    .optional(),\n  plan: z\n    .object({\n      policy: z.enum(PLAN_POLICIES).default(\"suggest\"),\n    })\n    .optional(),\n  graphify: z\n    .object({\n      enabled: z.boolean(),\n      graphPath: z.string().min(1).optional(),\n    })\n    .optional(),\n  /**\n   * Optional hosted small-model layer (bring your own key). Keys are read from\n   * the environment only, never from this file (`src/llm/config.ts`).\n   */\n  llm: z\n    .object({\n      enabled: z.boolean(),\n      provider: z.enum([\"groq\", \"openrouter\"]).optional(),\n      model: z.string().min(1).optional(),\n      fallback: z\n        .object({ provider: z.enum([\"groq\", \"openrouter\"]), model: z.string().min(1) })\n        .optional(),\n      timeoutMs: z.number().int().min(100).max(5_000).optional(),\n      dailyTokenBudget: z.number().int().positive().optional(),\n      features: z\n        .object({\n          summaries: z.boolean().optional(),\n          rerank: z.boolean().optional(),\n          memory: z.boolean().optional(),\n        })\n        .optional(),\n    })\n    .optional(),\n  /** Optional local semantic retrieval via zvec-grep (`zg`). Off unless enabled. */\n  zvec: z\n    .object({\n      enabled: z.boolean(),\n      binary: z.string().min(1).optional(),\n      timeoutMs: z.number().int().positive().max(10_000).optional(),\n    })\n    .optional(),\n});\n\nexport type CodeBuddyFileConfig = z.infer<typeof fileSchema>;\n\nexport type ConfigPermissionReport = {\n  path: string;\n  exists: boolean;\n  mode: string | null;\n  ok: boolean;\n  warning?: string;\n};\n\nexport type ProjectScaffoldReport = {\n  codebuddyDir: { path: string; exists: boolean; ok: boolean; warning?: string };\n  memoryFactsDir: { path: string; exists: boolean; ok: boolean; warning?: string };\n  memorySummariesDir: { path: string; exists: boolean; ok: boolean; warning?: string };\n  plansDir: { path: string; exists: boolean; ok: boolean; warning?: string };\n  gitignore: { path: string; exists: boolean; ok: boolean; warning?: string };\n  policies: { path: string; exists: boolean; ok: boolean; warning?: string };\n};\n\nexport function configPath(cwd = process.cwd()): string {\n  return join(cwd, CONFIG_DIR, CONFIG_FILE);\n}\n\nexport async function initProjectScaffold(cwd = process.cwd()): Promise<{\n  codebuddyDir: string;\n  gitignorePath: string;\n  policyPath: string;\n}> {\n  const codebuddyDir = join(cwd, CONFIG_DIR);\n  await mkdir(join(codebuddyDir, \"memory\", \"facts\"), { recursive: true, mode: 0o700 });\n  await mkdir(join(codebuddyDir, \"memory\", \"summaries\"), { recursive: true, mode: 0o700 });\n  await mkdir(join(codebuddyDir, \"plans\"), { recursive: true, mode: 0o700 });\n\n  const gitignorePath = join(codebuddyDir, \".gitignore\");\n  try {\n    await access(gitignorePath, constants.F_OK);\n    let gitignore = await readFile(gitignorePath, \"utf8\");\n    const lines = new Set(gitignore.split(/\\r?\\n/));\n    const missing = [\"/memory/review/\", \"/memory/review-archive/\"].filter(\n      (line) => !lines.has(line),\n    );\n    if (missing.length > 0) {\n      gitignore = `${gitignore.trimEnd()}\\n${missing.join(\"\\n\")}\\n`;\n      await writeFile(gitignorePath, gitignore, { mode: 0o644 });\n    }\n  } catch {\n    await writeFile(gitignorePath, PROJECT_GITIGNORE, { mode: 0o644 });\n  }\n\n  const policyPath = join(codebuddyDir, POLICY_FILE);\n  try {\n    await access(policyPath, constants.F_OK);\n  } catch {\n    await writeFile(policyPath, DEFAULT_POLICY_FILE, { mode: 0o644 });\n  }\n\n  return { codebuddyDir, gitignorePath, policyPath };\n}\n\nexport async function initConfigFile(\n  cwd = process.cwd(),\n): Promise<{ path: string; created: boolean }> {\n  const path = configPath(cwd);\n  await initProjectScaffold(cwd);\n  try {\n    await access(path, constants.F_OK);\n    await chmod(path, 0o600);\n    return { path, created: false };\n  } catch {\n    const template: CodeBuddyFileConfig = {\n      postgresUrl: process.env.DATABASE_URL ?? \"postgres://localhost:5432/codebuddy\",\n      // Default to the folder name (sanitized) so a fresh scaffold agrees with\n      // doctor's expected default instead of warning immediately after init.\n      namespace: defaultNamespaceForCwd(cwd),\n      provider: { type: \"huggingface\" },\n      tokenBudget: 4000,\n    };\n    await writeFile(path, `${JSON.stringify(template, null, 2)}\\n`, { mode: 0o600 });\n    await chmod(path, 0o600);\n    return { path, created: true };\n  }\n}\n\n/** Persist a complete project config without changing its private permissions. */\nexport async function writeConfigFile(\n  config: CodeBuddyFileConfig,\n  cwd = process.cwd(),\n): Promise<{ path: string }> {\n  const path = configPath(cwd);\n  await initProjectScaffold(cwd);\n  await writeFile(path, `${JSON.stringify(config, null, 2)}\\n`, { mode: 0o600 });\n  await chmod(path, 0o600);\n  return { path };\n}\n\nexport async function readConfigFile(cwd = process.cwd()): Promise<CodeBuddyFileConfig> {\n  const path = configPath(cwd);\n  try {\n    const raw = await readFile(path, \"utf8\");\n    return fileSchema.parse(JSON.parse(raw));\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return {};\n    throw error;\n  }\n}\n\n/**\n * The ONE namespace-resolution rule, shared by the DB/MCP runtime, every\n * file-based CLI command, and doctor. Precedence:\n *   1. CODEBUDDY_NAMESPACE env\n *   2. `.codebuddy/config.json` `namespace`\n *   3. the current folder name (sanitized) — matching what doctor reports as\n *      the expected default.\n */\nexport function sanitizeNamespace(value: string): string {\n  return value.replace(/[^a-zA-Z0-9_.:-]/g, \"-\").slice(0, 128);\n}\n\n/** Folder-name fallback used when neither env nor config specify a namespace. */\nexport function defaultNamespaceForCwd(cwd = process.cwd()): string {\n  return sanitizeNamespace(basename(cwd)) || \"default\";\n}\n\nexport async function resolveNamespaceFrom(cwd = process.cwd()): Promise<string> {\n  if (process.env.CODEBUDDY_NAMESPACE) return process.env.CODEBUDDY_NAMESPACE;\n  const file = await readConfigFile(cwd);\n  return file.namespace ?? defaultNamespaceForCwd(cwd);\n}\n\nexport const MISSING_DATABASE_URL =\n  \"DATABASE_URL or .codebuddy/config.json postgresUrl is required.\";\n\n/**\n * `requireDatabase: false` (the MCP server) returns an empty `postgresUrl`\n * instead of throwing, so file-based tools still run without PostgreSQL;\n * `createRuntime` rejects the empty URL with the same message.\n */\nexport async function loadRuntimeConfig(\n  cwd = process.cwd(),\n  options: { requireDatabase?: boolean } = {},\n): Promise<CodeBuddyConfig> {\n  const projectRoot = process.env.CODEBUDDY_PROJECT_ROOT ?? cwd;\n  const file = await readConfigFile(projectRoot);\n  const postgresUrl = process.env.DATABASE_URL ?? file.postgresUrl ?? \"\";\n  if (!postgresUrl && options.requireDatabase !== false) {\n    throw new Error(MISSING_DATABASE_URL);\n  }\n  const hfToken = process.env.HF_TOKEN ?? file.provider?.apiKey;\n  return {\n    postgresUrl,\n    namespace:\n      process.env.CODEBUDDY_NAMESPACE ?? file.namespace ?? defaultNamespaceForCwd(projectRoot),\n    projectRoot,\n    provider: {\n      type: \"huggingface\",\n      ...(hfToken ? { apiKey: hfToken } : {}),\n    },\n    ...(file.tokenBudget ? { tokenBudget: file.tokenBudget } : {}),\n    ...(file.graphify ? { graphify: file.graphify } : {}),\n  };\n}\n\nexport async function checkConfigPermissions(cwd = process.cwd()): Promise<ConfigPermissionReport> {\n  const path = configPath(cwd);\n  try {\n    const info = await stat(path);\n    const modeNumber = info.mode & 0o777;\n    const mode = modeNumber.toString(8).padStart(4, \"0\");\n    const ok = modeNumber === 0o600;\n    return {\n      path,\n      exists: true,\n      mode,\n      ok,\n      ...(ok ? {} : { warning: \".codebuddy/config.json should be chmod 0600.\" }),\n    };\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n      return { path, exists: false, mode: null, ok: true };\n    }\n    throw error;\n  }\n}\n\nexport async function checkProjectScaffold(cwd = process.cwd()): Promise<ProjectScaffoldReport> {\n  const codebuddyDir = join(cwd, CONFIG_DIR);\n  const memoryFactsDir = join(codebuddyDir, \"memory\", \"facts\");\n  const memorySummariesDir = join(codebuddyDir, \"memory\", \"summaries\");\n  const plansDir = join(codebuddyDir, \"plans\");\n  const gitignorePath = join(codebuddyDir, \".gitignore\");\n  const policyPath = join(codebuddyDir, POLICY_FILE);\n\n  const [\n    codebuddyDirExists,\n    memoryFactsDirExists,\n    memorySummariesDirExists,\n    plansDirExists,\n    gitignoreExists,\n    policiesExist,\n  ] = await Promise.all([\n    pathExists(codebuddyDir),\n    pathExists(memoryFactsDir),\n    pathExists(memorySummariesDir),\n    pathExists(plansDir),\n    pathExists(gitignorePath),\n    pathExists(policyPath),\n  ]);\n\n  return {\n    codebuddyDir: {\n      path: codebuddyDir,\n      exists: codebuddyDirExists,\n      ok: codebuddyDirExists,\n      ...(codebuddyDirExists\n        ? {}\n        : { warning: \"Run `codebuddy use` or `codebuddy init` to create the project scaffold.\" }),\n    },\n    memoryFactsDir: {\n      path: memoryFactsDir,\n      exists: memoryFactsDirExists,\n      ok: memoryFactsDirExists,\n      ...(memoryFactsDirExists ? {} : { warning: \"Missing .codebuddy/memory/facts directory.\" }),\n    },\n    memorySummariesDir: {\n      path: memorySummariesDir,\n      exists: memorySummariesDirExists,\n      ok: memorySummariesDirExists,\n      ...(memorySummariesDirExists\n        ? {}\n        : { warning: \"Missing .codebuddy/memory/summaries directory.\" }),\n    },\n    plansDir: {\n      path: plansDir,\n      exists: plansDirExists,\n      ok: plansDirExists,\n      ...(plansDirExists ? {} : { warning: \"Missing .codebuddy/plans directory.\" }),\n    },\n    gitignore: {\n      path: gitignorePath,\n      exists: gitignoreExists,\n      ok: gitignoreExists,\n      ...(gitignoreExists ? {} : { warning: \"Missing .codebuddy/.gitignore.\" }),\n    },\n    policies: {\n      path: policyPath,\n      exists: policiesExist,\n      ok: policiesExist,\n      ...(policiesExist\n        ? {}\n        : {\n            warning:\n              \"Missing .codebuddy/policies.yaml. Run `codebuddy use` or `codebuddy init` to scaffold it.\",\n          }),\n    },\n  };\n}\n\n/** Read the plan policy, honoring CODEBUDDY_PLAN_POLICY then the config file. */\nexport async function loadPlanPolicy(cwd = process.cwd()): Promise<PlanPolicy> {\n  const fromEnv = process.env.CODEBUDDY_PLAN_POLICY;\n  if (fromEnv && (PLAN_POLICIES as readonly string[]).includes(fromEnv)) {\n    return fromEnv as PlanPolicy;\n  }\n  const file = await readConfigFile(cwd);\n  return file.plan?.policy ?? \"suggest\";\n}\n\n/** Persist the plan policy into `.codebuddy/config.json`, creating it if needed. */\nexport async function setPlanPolicy(policy: PlanPolicy, cwd = process.cwd()): Promise<void> {\n  await initConfigFile(cwd);\n  const path = configPath(cwd);\n  const raw = JSON.parse(await readFile(path, \"utf8\")) as Record<string, unknown>;\n  raw.plan = { ...(raw.plan as Record<string, unknown> | undefined), policy };\n  // Atomic rewrite: this file holds the postgresUrl and provider apiKey.\n  await writeAtomic(path, `${JSON.stringify(raw, null, 2)}\\n`, { mode: 0o600 });\n}\n\n/** Turn optional zvec-grep retrieval on or off in `.codebuddy/config.json`. */\nexport async function setZvecEnabled(enabled: boolean, cwd = process.cwd()): Promise<void> {\n  await initConfigFile(cwd);\n  const path = configPath(cwd);\n  const raw = JSON.parse(await readFile(path, \"utf8\")) as Record<string, unknown>;\n  raw.zvec = { ...(raw.zvec as Record<string, unknown> | undefined), enabled };\n  await writeAtomic(path, `${JSON.stringify(raw, null, 2)}\\n`, { mode: 0o600 });\n}\n\n/** Turn the BYOK LLM layer on or off; never writes a key (keys live in the environment). */\nexport async function setLlmEnabled(\n  enabled: boolean,\n  options: { provider?: \"groq\" | \"openrouter\"; model?: string } = {},\n  cwd = process.cwd(),\n): Promise<void> {\n  await initConfigFile(cwd);\n  const path = configPath(cwd);\n  const raw = JSON.parse(await readFile(path, \"utf8\")) as Record<string, unknown>;\n  raw.llm = {\n    ...(raw.llm as Record<string, unknown> | undefined),\n    enabled,\n    ...(options.provider ? { provider: options.provider } : {}),\n    ...(options.model ? { model: options.model } : {}),\n  };\n  await writeAtomic(path, `${JSON.stringify(raw, null, 2)}\\n`, { mode: 0o600 });\n}\n\nexport function redactSecrets(value: unknown): unknown {\n  if (typeof value === \"string\") {\n    let redacted = value;\n    // Provider keys (HF, BYOK LLM) literally anywhere in a string.\n    for (const key of [\n      process.env.HF_TOKEN,\n      process.env.GROQ_API_KEY,\n      process.env.OPENROUTER_API_KEY,\n      process.env.CODEBUDDY_LLM_API_KEY,\n    ]) {\n      if (key) redacted = redacted.split(key).join(\"[REDACTED]\");\n    }\n    // Credentials embedded in connection URLs (postgres://user:pass@host…).\n    // The password — not the username — is the secret.\n    redacted = redacted.replace(\n      /(\\b[a-z][a-z0-9+.-]*:\\/\\/[^:/\\s@]+:)[^/\\s@]+(@)/gi,\n      \"$1[REDACTED]$2\",\n    );\n    return redacted;\n  }\n  if (Array.isArray(value)) return value.map(redactSecrets);\n  if (!value || typeof value !== \"object\") return value;\n  return Object.fromEntries(\n    Object.entries(value as Record<string, unknown>).map(([key, nested]) => [\n      key,\n      /token|apiKey|authorization|secret/i.test(key) ? \"[REDACTED]\" : redactSecrets(nested),\n    ]),\n  );\n}\n\nasync function pathExists(path: string): Promise<boolean> {\n  try {\n    await access(path, constants.F_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";AAAA,SAAS,OAAO,MAAM,cAAc;AACpC,SAAS,MAAM,UAAU,SAAS,WAAW;AA8B7C,eAAsB,uBAAuB,MAAc,QAA+B;AACxF,QAAM,eAAe,QAAQ,IAAI;AACjC,QAAM,iBAAiB,QAAQ,MAAM;AACrC,QAAM,iBAAiB,SAAS,cAAc,cAAc;AAC5D,MAAI,mBAAmB,QAAQ,eAAe,WAAW,KAAK,GAAG,EAAE,GAAG;AACpE,UAAM,IAAI,MAAM,iCAAiC,MAAM,EAAE;AAAA,EAC3D;AAEA,MAAI,UAAU;AACd,QAAM,QAAQ,eAAe,MAAM,GAAG,EAAE,OAAO,OAAO;AACtD,aAAW,QAAQ,OAAO;AACxB,cAAU,KAAK,SAAS,IAAI;AAC5B,QAAI;AACF,YAAM,OAAO,MAAM,MAAM,OAAO;AAChC,UAAI,KAAK,eAAe,GAAG;AACzB,cAAM,IAAI,MAAM,mCAAmC,OAAO,EAAE;AAAA,MAC9D;AAAA,IACF,SAAS,OAAO;AACd,UAAK,MAAgC,SAAS,SAAU;AACxD,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAUA,eAAsB,YACpB,MACA,UACA,SACe;AACf,QAAM,gBAAgB,GAAG,IAAI,IAAI,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC;AAC1D,QAAM,SAAS,MAAM,KAAK,eAAe,MAAM,SAAS,QAAQ,GAAK;AACrE,MAAI;AACF,UAAM,OAAO,UAAU,UAAU,MAAM;AACvC,UAAM,OAAO,KAAK;AAAA,EACpB,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACA,QAAM,OAAO,eAAe,IAAI;AAClC;AAQO,SAAS,iBAAiB,UAA4D;AAC3F,MAAI,CAAC,SAAS,WAAW,OAAO,GAAG;AACjC,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,QAAM,eAAe,SAAS,QAAQ,WAAW,CAAC;AAClD,MAAI,iBAAiB,IAAI;AACvB,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,SAAO;AAAA,IACL,aAAa,SAAS,MAAM,GAAG,YAAY;AAAA,IAC3C,SAAS,SAAS,MAAM,eAAe,CAAC;AAAA,EAC1C;AACF;AAOO,SAAS,gBAAgB,iBAAyB,MAAsB;AAC7E,QAAM,qBAAqB,gBAAgB,QAAQ;AACnD,QAAM,UAAU,KAAK,SAAS,IAAI,IAAI,OAAO,GAAG,IAAI;AAAA;AACpD,SAAO;AAAA,EAAQ,kBAAkB;AAAA;AAAA,EAAU,OAAO;AACpD;;;AC5GA,SAAS,iBAAiB;AAC1B,SAAS,QAAQ,OAAO,OAAO,UAAU,MAAM,iBAAiB;AAChE,SAAS,UAAU,QAAAA,aAAY;AAC/B,SAAS,SAAS;AAIX,IAAM,aAAa;AACnB,IAAM,cAAc;AACpB,IAAM,cAAc;AAE3B,IAAM,oBAAoB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAEX,IAAM,sBAAsB;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AASJ,IAAM,gBAAgB,CAAC,OAAO,WAAW,UAAU;AAG1D,IAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACxC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACtC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAClD,UAAU,EACP,OAAO;AAAA,IACN,MAAM,EAAE,QAAQ,aAAa,EAAE,QAAQ,aAAa;AAAA,IACpD,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACrC,CAAC,EACA,SAAS;AAAA,EACZ,MAAM,EACH,OAAO;AAAA,IACN,QAAQ,EAAE,KAAK,aAAa,EAAE,QAAQ,SAAS;AAAA,EACjD,CAAC,EACA,SAAS;AAAA,EACZ,UAAU,EACP,OAAO;AAAA,IACN,SAAS,EAAE,QAAQ;AAAA,IACnB,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACxC,CAAC,EACA,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKZ,KAAK,EACF,OAAO;AAAA,IACN,SAAS,EAAE,QAAQ;AAAA,IACnB,UAAU,EAAE,KAAK,CAAC,QAAQ,YAAY,CAAC,EAAE,SAAS;AAAA,IAClD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IAClC,UAAU,EACP,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,YAAY,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAC7E,SAAS;AAAA,IACZ,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,GAAK,EAAE,SAAS;AAAA,IACzD,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,IACvD,UAAU,EACP,OAAO;AAAA,MACN,WAAW,EAAE,QAAQ,EAAE,SAAS;AAAA,MAChC,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,MAC7B,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC/B,CAAC,EACA,SAAS;AAAA,EACd,CAAC,EACA,SAAS;AAAA;AAAA,EAEZ,MAAM,EACH,OAAO;AAAA,IACN,SAAS,EAAE,QAAQ;AAAA,IACnB,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IACnC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAM,EAAE,SAAS;AAAA,EAC9D,CAAC,EACA,SAAS;AACd,CAAC;AAqBM,SAAS,WAAW,MAAM,QAAQ,IAAI,GAAW;AACtD,SAAOC,MAAK,KAAK,YAAY,WAAW;AAC1C;AAEA,eAAsB,oBAAoB,MAAM,QAAQ,IAAI,GAIzD;AACD,QAAM,eAAeA,MAAK,KAAK,UAAU;AACzC,QAAM,MAAMA,MAAK,cAAc,UAAU,OAAO,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACnF,QAAM,MAAMA,MAAK,cAAc,UAAU,WAAW,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACvF,QAAM,MAAMA,MAAK,cAAc,OAAO,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAEzE,QAAM,gBAAgBA,MAAK,cAAc,YAAY;AACrD,MAAI;AACF,UAAM,OAAO,eAAe,UAAU,IAAI;AAC1C,QAAI,YAAY,MAAM,SAAS,eAAe,MAAM;AACpD,UAAM,QAAQ,IAAI,IAAI,UAAU,MAAM,OAAO,CAAC;AAC9C,UAAM,UAAU,CAAC,mBAAmB,yBAAyB,EAAE;AAAA,MAC7D,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI;AAAA,IAC3B;AACA,QAAI,QAAQ,SAAS,GAAG;AACtB,kBAAY,GAAG,UAAU,QAAQ,CAAC;AAAA,EAAK,QAAQ,KAAK,IAAI,CAAC;AAAA;AACzD,YAAM,UAAU,eAAe,WAAW,EAAE,MAAM,IAAM,CAAC;AAAA,IAC3D;AAAA,EACF,QAAQ;AACN,UAAM,UAAU,eAAe,mBAAmB,EAAE,MAAM,IAAM,CAAC;AAAA,EACnE;AAEA,QAAM,aAAaA,MAAK,cAAc,WAAW;AACjD,MAAI;AACF,UAAM,OAAO,YAAY,UAAU,IAAI;AAAA,EACzC,QAAQ;AACN,UAAM,UAAU,YAAY,qBAAqB,EAAE,MAAM,IAAM,CAAC;AAAA,EAClE;AAEA,SAAO,EAAE,cAAc,eAAe,WAAW;AACnD;AAEA,eAAsB,eACpB,MAAM,QAAQ,IAAI,GAC2B;AAC7C,QAAM,OAAO,WAAW,GAAG;AAC3B,QAAM,oBAAoB,GAAG;AAC7B,MAAI;AACF,UAAM,OAAO,MAAM,UAAU,IAAI;AACjC,UAAM,MAAM,MAAM,GAAK;AACvB,WAAO,EAAE,MAAM,SAAS,MAAM;AAAA,EAChC,QAAQ;AACN,UAAM,WAAgC;AAAA,MACpC,aAAa,QAAQ,IAAI,gBAAgB;AAAA;AAAA;AAAA,MAGzC,WAAW,uBAAuB,GAAG;AAAA,MACrC,UAAU,EAAE,MAAM,cAAc;AAAA,MAChC,aAAa;AAAA,IACf;AACA,UAAM,UAAU,MAAM,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,MAAM,IAAM,CAAC;AAC/E,UAAM,MAAM,MAAM,GAAK;AACvB,WAAO,EAAE,MAAM,SAAS,KAAK;AAAA,EAC/B;AACF;AAGA,eAAsB,gBACpB,QACA,MAAM,QAAQ,IAAI,GACS;AAC3B,QAAM,OAAO,WAAW,GAAG;AAC3B,QAAM,oBAAoB,GAAG;AAC7B,QAAM,UAAU,MAAM,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,MAAM,IAAM,CAAC;AAC7E,QAAM,MAAM,MAAM,GAAK;AACvB,SAAO,EAAE,KAAK;AAChB;AAEA,eAAsB,eAAe,MAAM,QAAQ,IAAI,GAAiC;AACtF,QAAM,OAAO,WAAW,GAAG;AAC3B,MAAI;AACF,UAAM,MAAM,MAAM,SAAS,MAAM,MAAM;AACvC,WAAO,WAAW,MAAM,KAAK,MAAM,GAAG,CAAC;AAAA,EACzC,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO,CAAC;AAChE,UAAM;AAAA,EACR;AACF;AAUO,SAAS,kBAAkB,OAAuB;AACvD,SAAO,MAAM,QAAQ,qBAAqB,GAAG,EAAE,MAAM,GAAG,GAAG;AAC7D;AAGO,SAAS,uBAAuB,MAAM,QAAQ,IAAI,GAAW;AAClE,SAAO,kBAAkB,SAAS,GAAG,CAAC,KAAK;AAC7C;AAEA,eAAsB,qBAAqB,MAAM,QAAQ,IAAI,GAAoB;AAC/E,MAAI,QAAQ,IAAI,oBAAqB,QAAO,QAAQ,IAAI;AACxD,QAAM,OAAO,MAAM,eAAe,GAAG;AACrC,SAAO,KAAK,aAAa,uBAAuB,GAAG;AACrD;AAEO,IAAM,uBACX;AAOF,eAAsB,kBACpB,MAAM,QAAQ,IAAI,GAClB,UAAyC,CAAC,GAChB;AAC1B,QAAM,cAAc,QAAQ,IAAI,0BAA0B;AAC1D,QAAM,OAAO,MAAM,eAAe,WAAW;AAC7C,QAAM,cAAc,QAAQ,IAAI,gBAAgB,KAAK,eAAe;AACpE,MAAI,CAAC,eAAe,QAAQ,oBAAoB,OAAO;AACrD,UAAM,IAAI,MAAM,oBAAoB;AAAA,EACtC;AACA,QAAM,UAAU,QAAQ,IAAI,YAAY,KAAK,UAAU;AACvD,SAAO;AAAA,IACL;AAAA,IACA,WACE,QAAQ,IAAI,uBAAuB,KAAK,aAAa,uBAAuB,WAAW;AAAA,IACzF;AAAA,IACA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,GAAI,UAAU,EAAE,QAAQ,QAAQ,IAAI,CAAC;AAAA,IACvC;AAAA,IACA,GAAI,KAAK,cAAc,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC;AAAA,IAC5D,GAAI,KAAK,WAAW,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;AAAA,EACrD;AACF;AAEA,eAAsB,uBAAuB,MAAM,QAAQ,IAAI,GAAoC;AACjG,QAAM,OAAO,WAAW,GAAG;AAC3B,MAAI;AACF,UAAM,OAAO,MAAM,KAAK,IAAI;AAC5B,UAAM,aAAa,KAAK,OAAO;AAC/B,UAAM,OAAO,WAAW,SAAS,CAAC,EAAE,SAAS,GAAG,GAAG;AACnD,UAAM,KAAK,eAAe;AAC1B,WAAO;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,GAAI,KAAK,CAAC,IAAI,EAAE,SAAS,+CAA+C;AAAA,IAC1E;AAAA,EACF,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,UAAU;AACtD,aAAO,EAAE,MAAM,QAAQ,OAAO,MAAM,MAAM,IAAI,KAAK;AAAA,IACrD;AACA,UAAM;AAAA,EACR;AACF;AAEA,eAAsB,qBAAqB,MAAM,QAAQ,IAAI,GAAmC;AAC9F,QAAM,eAAeA,MAAK,KAAK,UAAU;AACzC,QAAM,iBAAiBA,MAAK,cAAc,UAAU,OAAO;AAC3D,QAAM,qBAAqBA,MAAK,cAAc,UAAU,WAAW;AACnE,QAAM,WAAWA,MAAK,cAAc,OAAO;AAC3C,QAAM,gBAAgBA,MAAK,cAAc,YAAY;AACrD,QAAM,aAAaA,MAAK,cAAc,WAAW;AAEjD,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI,MAAM,QAAQ,IAAI;AAAA,IACpB,WAAW,YAAY;AAAA,IACvB,WAAW,cAAc;AAAA,IACzB,WAAW,kBAAkB;AAAA,IAC7B,WAAW,QAAQ;AAAA,IACnB,WAAW,aAAa;AAAA,IACxB,WAAW,UAAU;AAAA,EACvB,CAAC;AAED,SAAO;AAAA,IACL,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,IAAI;AAAA,MACJ,GAAI,qBACA,CAAC,IACD,EAAE,SAAS,0EAA0E;AAAA,IAC3F;AAAA,IACA,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,IAAI;AAAA,MACJ,GAAI,uBAAuB,CAAC,IAAI,EAAE,SAAS,6CAA6C;AAAA,IAC1F;AAAA,IACA,oBAAoB;AAAA,MAClB,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,IAAI;AAAA,MACJ,GAAI,2BACA,CAAC,IACD,EAAE,SAAS,iDAAiD;AAAA,IAClE;AAAA,IACA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,IAAI;AAAA,MACJ,GAAI,iBAAiB,CAAC,IAAI,EAAE,SAAS,sCAAsC;AAAA,IAC7E;AAAA,IACA,WAAW;AAAA,MACT,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,IAAI;AAAA,MACJ,GAAI,kBAAkB,CAAC,IAAI,EAAE,SAAS,iCAAiC;AAAA,IACzE;AAAA,IACA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,IAAI;AAAA,MACJ,GAAI,gBACA,CAAC,IACD;AAAA,QACE,SACE;AAAA,MACJ;AAAA,IACN;AAAA,EACF;AACF;AAGA,eAAsB,eAAe,MAAM,QAAQ,IAAI,GAAwB;AAC7E,QAAM,UAAU,QAAQ,IAAI;AAC5B,MAAI,WAAY,cAAoC,SAAS,OAAO,GAAG;AACrE,WAAO;AAAA,EACT;AACA,QAAM,OAAO,MAAM,eAAe,GAAG;AACrC,SAAO,KAAK,MAAM,UAAU;AAC9B;AAGA,eAAsB,cAAc,QAAoB,MAAM,QAAQ,IAAI,GAAkB;AAC1F,QAAM,eAAe,GAAG;AACxB,QAAM,OAAO,WAAW,GAAG;AAC3B,QAAM,MAAM,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;AACnD,MAAI,OAAO,EAAE,GAAI,IAAI,MAA8C,OAAO;AAE1E,QAAM,YAAY,MAAM,GAAG,KAAK,UAAU,KAAK,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,MAAM,IAAM,CAAC;AAC9E;AAGA,eAAsB,eAAe,SAAkB,MAAM,QAAQ,IAAI,GAAkB;AACzF,QAAM,eAAe,GAAG;AACxB,QAAM,OAAO,WAAW,GAAG;AAC3B,QAAM,MAAM,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;AACnD,MAAI,OAAO,EAAE,GAAI,IAAI,MAA8C,QAAQ;AAC3E,QAAM,YAAY,MAAM,GAAG,KAAK,UAAU,KAAK,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,MAAM,IAAM,CAAC;AAC9E;AAGA,eAAsB,cACpB,SACA,UAAgE,CAAC,GACjE,MAAM,QAAQ,IAAI,GACH;AACf,QAAM,eAAe,GAAG;AACxB,QAAM,OAAO,WAAW,GAAG;AAC3B,QAAM,MAAM,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;AACnD,MAAI,MAAM;AAAA,IACR,GAAI,IAAI;AAAA,IACR;AAAA,IACA,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,IACzD,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,EAClD;AACA,QAAM,YAAY,MAAM,GAAG,KAAK,UAAU,KAAK,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,MAAM,IAAM,CAAC;AAC9E;AAEO,SAAS,cAAc,OAAyB;AACrD,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI,WAAW;AAEf,eAAW,OAAO;AAAA,MAChB,QAAQ,IAAI;AAAA,MACZ,QAAQ,IAAI;AAAA,MACZ,QAAQ,IAAI;AAAA,MACZ,QAAQ,IAAI;AAAA,IACd,GAAG;AACD,UAAI,IAAK,YAAW,SAAS,MAAM,GAAG,EAAE,KAAK,YAAY;AAAA,IAC3D;AAGA,eAAW,SAAS;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,aAAa;AACxD,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,KAAgC,EAAE,IAAI,CAAC,CAAC,KAAK,MAAM,MAAM;AAAA,MACtE;AAAA,MACA,qCAAqC,KAAK,GAAG,IAAI,eAAe,cAAc,MAAM;AAAA,IACtF,CAAC;AAAA,EACH;AACF;AAEA,eAAe,WAAW,MAAgC;AACxD,MAAI;AACF,UAAM,OAAO,MAAM,UAAU,IAAI;AACjC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":["join","join"]}