@productbrain/cli 0.1.0-beta.55 → 0.1.0-beta.5504

package/dist/__tests__/tenant-notice-write-path.test.js

@@ -0,0 +1,169 @@
+/**
+ * TEN-3398 (WP-711 follow-up) — the write path (`kernelCallWithSession`) and the admin surface
+ * (`adminCall`) now announce their effective tenant, and `adminCall` is refused when the
+ * resolved credential has moved out from under an active session.
+ *
+ * Before this slice, `pb verify` / `pb rework report` (and 9 other write commands — see
+ * workspaceNotice.ts's doc comment on `emitEffectiveTenantNotice`) ran through
+ * `kernelCallWithSession` without ever printing a target-workspace line, and `pb admin`
+ * carried NEITHER the notice nor the tenant-binding guard at all — the one destructive door
+ * left both silent and unguarded.
+ *
+ * These tests exercise the REAL `client.ts`/`workspaceNotice.ts` implementations, mocking only
+ * their inputs (config/session resolution, the reportedProfile/adminConfig identity cascades,
+ * and global fetch) — so a regression that drops the notice call, re-splits the guard, or
+ * reverts to a per-command fix instead of the shared choke point turns one of these red.
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+const effectiveState = { value: { profile: 'acme', source: 'local' } };
+vi.mock('../lib/reportedProfile.js', () => ({
+    resolveReportedProfile: () => effectiveState.value,
+}));
+vi.mock('../lib/projectConfig.js', () => ({
+    readLocalProjectConfig: () => null,
+}));
+vi.mock('../lib/profiles.js', () => ({
+    getGlobalActiveProfile: () => null,
+}));
+const adminState = {
+    value: { apiKey: 'pb_sk_admin', siteUrl: 'https://admin.convex.site', source: 'local-profile', profileName: 'acme-admin' },
+};
+vi.mock('../lib/adminConfig.js', () => ({
+    resolveAdminConfig: () => adminState.value,
+}));
+// --- config / session -----------------------------------------------------------------------
+const getConfigMock = vi.fn();
+vi.mock('../lib/config.js', () => ({
+    getConfig: (...a) => getConfigMock(...a),
+    getConfigOrGuide: vi.fn(async () => ({ apiKey: 'pb_sk_test', siteUrl: 'https://test.convex.site' })),
+}));
+let mockSession;
+const readSessionMock = vi.fn();
+const readSessionBySessionIdMock = vi.fn();
+vi.mock('../lib/session.js', () => ({
+    readSession: (...a) => readSessionMock(...a),
+    readSessionBySessionId: (...a) => readSessionBySessionIdMock(...a),
+}));
+// --- binding guard: keep the REAL fingerprintOf (pure), control only the assertion ----------
+const assertSessionStillBoundMock = vi.fn();
+vi.mock('../lib/sessionBinding.js', async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        assertSessionStillBound: (...a) => assertSessionStillBoundMock(...a),
+    };
+});
+import { kernelCallWithSession, adminCall } from '../lib/client.js';
+import { runVerify } from '../commands/verify.js';
+import { runReworkReport } from '../commands/rework.js';
+import { resetEffectiveTenantNoticeForTests, resetAdminTenantNoticeForTests } from '../lib/workspaceNotice.js';
+import { fingerprintOf } from '../lib/sessionBinding.js';
+import { setOutputMode } from '../lib/runner.js';
+describe('write-path + admin tenant notice (TEN-3398)', () => {
+    let stderr;
+    let stderrSpy;
+    let fetchSpy;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        resetEffectiveTenantNoticeForTests();
+        resetAdminTenantNoticeForTests();
+        // Deterministic output mode — not gated by TTY auto-detection in a test runner. Since WP-721
+        // the mode no longer changes WHETHER the notice renders (the `--json` suppression of the
+        // plain line for an explicit binding is gone); this file just pins one mode so its exact
+        // stderr assertions have a single expected shape.
+        setOutputMode('pretty');
+        effectiveState.value = { profile: 'acme', source: 'local' };
+        adminState.value = { apiKey: 'pb_sk_admin', siteUrl: 'https://admin.convex.site', source: 'local-profile', profileName: 'acme-admin' };
+        assertSessionStillBoundMock.mockImplementation(() => { });
+        getConfigMock.mockReturnValue({ apiKey: 'pb_sk_test', siteUrl: 'https://test.convex.site' });
+        mockSession = { sessionId: 'sess-1', workspaceId: 'ws-1', workspaceName: 'Test WS', conversationId: 'conv-1' };
+        readSessionMock.mockImplementation(() => mockSession);
+        stderr = [];
+        stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation((c) => { stderr.push(String(c)); return true; });
+        fetchSpy = vi.fn();
+        vi.stubGlobal('fetch', fetchSpy);
+    });
+    afterEach(() => {
+        setOutputMode('auto');
+        stderrSpy.mockRestore();
+        vi.unstubAllGlobals();
+    });
+    it('pb verify announces its effective tenant (TEN-3398: was silent — chain.verifyEntry never called the notice)', async () => {
+        fetchSpy.mockResolvedValue({
+            ok: true, status: 200, headers: { get: () => null },
+            json: async () => ({ ok: true, data: { entryId: 'DEC-1', verificationStatus: 'verified', alreadyVerified: false } }),
+        });
+        await runVerify({ entryId: 'DEC-1' });
+        expect(stderr.join('')).toContain('→ acme');
+    });
+    it('pb rework report announces its effective tenant (TEN-3398: was silent — rework.report never called the notice)', async () => {
+        fetchSpy.mockResolvedValue({
+            ok: true, status: 200, headers: { get: () => null },
+            json: async () => ({ ok: true, data: { recorded: true, rowId: 'row-1' } }),
+        });
+        await runReworkReport({ entryId: 'STD-12', classification: 'revision' });
+        expect(stderr.join('')).toContain('→ acme');
+    });
+    it('ROOT PROPERTY: ANY call through kernelCallWithSession emits the notice — pins the fix at the shared choke point, not a per-command patch', async () => {
+        fetchSpy.mockResolvedValue({
+            ok: true, status: 200, headers: { get: () => null },
+            json: async () => ({ ok: true, data: {} }),
+        });
+        // A synthetic route name, deliberately not a real gateway route — the point is that
+        // kernelCallWithSession announces for ANY fn it is given, not just the ones a command file
+        // happens to call the notice around explicitly.
+        await kernelCallWithSession('test.rootPropertyRoute', {});
+        expect(stderr.join('')).toContain('→ acme');
+    });
+    it('kernelCallWithSession still fires the notice only ONCE per process across multiple write calls', async () => {
+        fetchSpy.mockResolvedValue({
+            ok: true, status: 200, headers: { get: () => null },
+            json: async () => ({ ok: true, data: {} }),
+        });
+        await kernelCallWithSession('test.rootPropertyRoute.a', {});
+        await kernelCallWithSession('test.rootPropertyRoute.b', {});
+        const lines = stderr.join('').split('\n').filter((l) => l.startsWith('→'));
+        expect(lines).toHaveLength(1);
+    });
+    describe('pb admin (adminCall)', () => {
+        it('announces its OWN effective tenant (TEN-3398: adminCall previously carried no notice at all)', async () => {
+            fetchSpy.mockResolvedValue({ ok: true, json: async () => ({ ok: true, data: { done: true } }) });
+            await adminCall('inspect:list-workspaces', {});
+            expect(stderr.join('')).toContain('→ acme-admin');
+        });
+        // WP-721 checked the admin path for the same json-suppression hole the read/write path had.
+        // It never had one: `emitAdminTenantNotice` takes no output-mode argument and reads no mode
+        // state, so `local-profile` (admin's EXPLICIT binding — the exact source that went dark on
+        // the other path) announces in every mode. This pins that structurally, so a future
+        // "quiet the admin line under --json" change has to turn a test red first.
+        it('WP-721: announces an EXPLICIT (local-profile) admin binding under --json too — no output-mode gate on this path', async () => {
+            setOutputMode('json');
+            fetchSpy.mockResolvedValue({ ok: true, json: async () => ({ ok: true, data: { done: true } }) });
+            await adminCall('inspect:list-workspaces', {});
+            expect(stderr.join('')).toBe('→ acme-admin\n');
+        });
+        it('is refused when the admin credential has moved since the session started (TEN-3398: adminCall previously carried no binding guard at all)', async () => {
+            assertSessionStillBoundMock.mockImplementation(() => {
+                throw new Error('CREDENTIAL_MOVED_FOR_TEST');
+            });
+            await expect(adminCall('manage:delete-workspace', { workspaceId: 'ws-x' })).rejects.toThrow('CREDENTIAL_MOVED_FOR_TEST');
+            expect(fetchSpy).not.toHaveBeenCalled();
+        });
+        it("fingerprints admin's OWN resolved apiKey/siteUrl — never the generic env-based default the read/write path uses", async () => {
+            fetchSpy.mockResolvedValue({ ok: true, json: async () => ({ ok: true, data: {} }) });
+            await adminCall('inspect:list-workspaces', {});
+            const expectedFingerprint = fingerprintOf(adminState.value.apiKey, adminState.value.siteUrl);
+            expect(assertSessionStillBoundMock).toHaveBeenCalledWith(mockSession, expectedFingerprint, expect.any(Function));
+        });
+        it("names admin's tenant in the refusal message via its OWN resolved identity, not the generic cascade", async () => {
+            let describeCurrentArg;
+            assertSessionStillBoundMock.mockImplementation((_session, _current, describeCurrent) => {
+                describeCurrentArg = describeCurrent;
+                throw new Error('refused');
+            });
+            await expect(adminCall('manage:delete-workspace', {})).rejects.toThrow();
+            expect(describeCurrentArg?.()).toBe('acme-admin');
+        });
+    });
+});
+//# sourceMappingURL=tenant-notice-write-path.test.js.map

package/dist/__tests__/tenant-notice-write-path.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-notice-write-path.test.js","sourceRoot":"","sources":["../../src/__tests__/tenant-notice-write-path.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAIzE,MAAM,cAAc,GAAwB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;AAC5F,EAAE,CAAC,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,sBAAsB,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK;CACnD,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,sBAAsB,EAAE,GAAG,EAAE,CAAC,IAAI;CACnC,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,sBAAsB,EAAE,GAAG,EAAE,CAAC,IAAI;CACnC,CAAC,CAAC,CAAC;AAIJ,MAAM,UAAU,GAA0B;IACxC,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE;CAC3H,CAAC;AACF,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK;CAC3C,CAAC,CAAC,CAAC;AAEJ,+FAA+F;AAC/F,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC9B,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjC,SAAS,EAAE,CAAC,GAAG,CAAY,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACnD,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;CACrG,CAAC,CAAC,CAAC;AAEJ,IAAI,WAAgH,CAAC;AACrH,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAChC,MAAM,0BAA0B,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC3C,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,WAAW,EAAE,CAAC,GAAG,CAAY,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACvD,sBAAsB,EAAE,CAAC,GAAG,CAAY,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC;CAC9E,CAAC,CAAC,CAAC;AAEJ,+FAA+F;AAC/F,MAAM,2BAA2B,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC5C,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC3D,MAAM,MAAM,GAAG,MAAM,cAAc,EAA6C,CAAC;IACjF,OAAO;QACL,GAAG,MAAM;QACT,uBAAuB,EAAE,CAAC,GAAG,CAAY,EAAE,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC;KAChF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,kCAAkC,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAC/G,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,IAAI,MAAgB,CAAC;IACrB,IAAI,SAAsC,CAAC;IAC3C,IAAI,QAAkC,CAAC;IAEvC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,kCAAkC,EAAE,CAAC;QACrC,8BAA8B,EAAE,CAAC;QACjC,6FAA6F;QAC7F,yFAAyF;QACzF,yFAAyF;QACzF,kDAAkD;QAClD,aAAa,CAAC,QAAQ,CAAC,CAAC;QAExB,cAAc,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC5D,UAAU,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;QACvI,2BAA2B,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzD,aAAa,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC7F,WAAW,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;QAC/G,eAAe,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;QAEtD,MAAM,GAAG,EAAE,CAAC;QACZ,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClH,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACnB,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,SAAS,CAAC,WAAW,EAAE,CAAC;QACxB,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6GAA6G,EAAE,KAAK,IAAI,EAAE;QAC3H,QAAQ,CAAC,iBAAiB,CAAC;YACzB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE;YACnD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC;SACrH,CAAC,CAAC;QAEH,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAEtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gHAAgH,EAAE,KAAK,IAAI,EAAE;QAC9H,QAAQ,CAAC,iBAAiB,CAAC;YACzB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE;YACnD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;SAC3E,CAAC,CAAC;QAEH,MAAM,eAAe,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;QAEzE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0IAA0I,EAAE,KAAK,IAAI,EAAE;QACxJ,QAAQ,CAAC,iBAAiB,CAAC;YACzB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE;YACnD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;SAC3C,CAAC,CAAC;QAEH,oFAAoF;QACpF,2FAA2F;QAC3F,gDAAgD;QAChD,MAAM,qBAAqB,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;QAE1D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,KAAK,IAAI,EAAE;QAC9G,QAAQ,CAAC,iBAAiB,CAAC;YACzB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE;YACnD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;SAC3C,CAAC,CAAC;QAEH,MAAM,qBAAqB,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,qBAAqB,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QAE5D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;YAC5G,QAAQ,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAEjG,MAAM,SAAS,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;YAE/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,4FAA4F;QAC5F,4FAA4F;QAC5F,2FAA2F;QAC3F,oFAAoF;QACpF,2EAA2E;QAC3E,EAAE,CAAC,iHAAiH,EAAE,KAAK,IAAI,EAAE;YAC/H,aAAa,CAAC,MAAM,CAAC,CAAC;YACtB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAEjG,MAAM,SAAS,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;YAE/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2IAA2I,EAAE,KAAK,IAAI,EAAE;YACzJ,2BAA2B,CAAC,kBAAkB,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,SAAS,CAAC,yBAAyB,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;YACzH,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iHAAiH,EAAE,KAAK,IAAI,EAAE;YAC/H,QAAQ,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAErF,MAAM,SAAS,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;YAE/C,MAAM,mBAAmB,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7F,MAAM,CAAC,2BAA2B,CAAC,CAAC,oBAAoB,CACtD,WAAW,EACX,mBAAmB,EACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CACrB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oGAAoG,EAAE,KAAK,IAAI,EAAE;YAClH,IAAI,kBAA8C,CAAC;YACnD,2BAA2B,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE;gBACrF,kBAAkB,GAAG,eAAe,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,SAAS,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACzE,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/update-check.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=update-check.test.d.ts.map

package/dist/__tests__/update-check.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-check.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/update-check.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/update-check.test.js

@@ -0,0 +1,215 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+const files = new Map();
+// Controllable npm registry response for resolveLatestVersion's live fetch. `null` => the
+// request yields an empty body (JSON.parse fails) so fetchLatestVersion resolves null.
+let npmResponseVersion = null;
+vi.mock('node:os', () => ({
+    homedir: () => '/mock-home',
+}));
+vi.mock('node:https', () => ({
+    request: (_url, _opts, cb) => {
+        const res = {
+            on: (event, handler) => {
+                if (event === 'data' && npmResponseVersion !== null) {
+                    handler(Buffer.from(JSON.stringify({ version: npmResponseVersion })));
+                }
+                if (event === 'end')
+                    handler();
+                return res;
+            },
+        };
+        cb(res);
+        const req = { on: () => req, setTimeout: () => req, destroy: () => { }, end: () => { } };
+        return req;
+    },
+}));
+vi.mock('node:fs', async () => ({
+    existsSync: (path) => files.has(path),
+    readFileSync: (path) => files.get(path) ?? '',
+    writeFileSync: (path, body) => { files.set(path, body); },
+    mkdirSync: vi.fn(),
+    unlinkSync: (path) => { files.delete(path); },
+    statSync: () => ({ mtimeMs: Date.now() }),
+    readdirSync: () => [...files.keys()].map((p) => p.split('/').pop()),
+    openSync: (path) => { if (files.has(path)) {
+        const e = new Error('EEXIST');
+        e.code = 'EEXIST';
+        throw e;
+    } files.set(path, ''); return 1; },
+    closeSync: vi.fn(),
+}));
+vi.mock('../lib/session.js', () => ({ readSession: () => ({ sessionId: 'sess-test' }) }));
+import { clearPendingUpgradeCache, isNewer, recordServerLatest, readCachedLatestVersion, writeUpgradePendingSentinel, recordNpmLatest, resolveCachedLatest, resolveLatestVersion, checkForUpdate, _resetProcessGuardsForTest, } from '../lib/update-check.js';
+import { setOutputMode } from '../lib/runner.js';
+describe('update-check', () => {
+    const originalEnv = { ...process.env };
+    beforeEach(() => {
+        _resetProcessGuardsForTest();
+        files.clear();
+        npmResponseVersion = null;
+        process.env = { ...originalEnv };
+        setOutputMode('auto');
+        vi.clearAllMocks();
+    });
+    afterEach(() => {
+        process.env = { ...originalEnv };
+        setOutputMode('auto');
+        vi.restoreAllMocks();
+    });
+    it('compares prerelease channels by alpha < beta < rc < release', () => {
+        expect(isNewer('0.1.0-beta.32', '0.1.0-beta.108')).toBe(true);
+        expect(isNewer('0.1.0-beta.5', '0.1.0-rc.1')).toBe(true);
+        expect(isNewer('0.1.0-rc.1', '0.1.0-beta.5')).toBe(false);
+        expect(isNewer('0.1.0-rc.1', '0.1.0')).toBe(true);
+    });
+    it('recordServerLatest updates cache silently in JSON mode', () => {
+        setOutputMode('json');
+        const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        recordServerLatest('0.1.0-beta.109');
+        expect(readCachedLatestVersion()).toBe('0.1.0-beta.109');
+        expect(stderrSpy).not.toHaveBeenCalled();
+    });
+    it('PB_NO_VERSION_CHECK disables cache writes and output', () => {
+        process.env.PB_NO_VERSION_CHECK = '1';
+        const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        recordServerLatest('0.1.0-beta.109');
+        expect(readCachedLatestVersion()).toBeNull();
+        expect(stderrSpy).not.toHaveBeenCalled();
+    });
+    it('next startup clears upgrade sentinel and stale update cache', () => {
+        recordServerLatest('0.1.0-beta.109');
+        expect(readCachedLatestVersion()).toBe('0.1.0-beta.109');
+        writeUpgradePendingSentinel();
+        clearPendingUpgradeCache();
+        expect(readCachedLatestVersion()).toBeNull();
+    });
+    it('newest of fresh server/npm wins; server still wins only when it is the highest', () => {
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109'); // (value, installed)
+        recordServerLatest('0.1.0-beta.130'); // fresh server, but LOWER than npm
+        expect(resolveCachedLatest()).toBe('0.1.0-beta.140'); // npm wins — server no longer masks a newer npm
+    });
+    it('a fresh server that LAGS npm cannot mask the true npm latest (TEN-2199 smoke-walk regression)', () => {
+        // The live failure mode: server header advertises the committed cliVersion.ts value (beta.108),
+        // which trails the run-numbered npm publish (beta.958). Newest-wins must surface 958, not 108.
+        recordNpmLatest('0.1.0-beta.958', '0.1.0-beta.109');
+        recordServerLatest('0.1.0-beta.108'); // fresh but stale-valued, < installed
+        expect(resolveCachedLatest()).toBe('0.1.0-beta.958');
+    });
+    it('server still wins when it is genuinely the newest source', () => {
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109');
+        recordServerLatest('0.1.0-beta.145'); // fresh server, HIGHER than npm
+        expect(resolveCachedLatest()).toBe('0.1.0-beta.145');
+    });
+    it('npm wins when the server header is stale (>48h)', () => {
+        const realNow = Date.now;
+        recordServerLatest('0.1.0-beta.130');
+        Date.now = () => realNow() + 49 * 60 * 60 * 1000;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109');
+        expect(resolveCachedLatest()).toBe('0.1.0-beta.140');
+        Date.now = realNow;
+    });
+    it('npm fallback is isNewer-gated against installed (never records older-or-equal)', () => {
+        recordNpmLatest('0.1.0-beta.1', '0.1.0-beta.109'); // stale tag, older than installed
+        expect(resolveCachedLatest()).toBeNull();
+    });
+    it('prints an update line to stderr in JSON mode (agent), once', () => {
+        setOutputMode('json');
+        recordServerLatest('0.1.0-beta.140');
+        const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        checkForUpdate('0.1.0-beta.109');
+        checkForUpdate('0.1.0-beta.109'); // same session => silent second time
+        expect(stderrSpy).toHaveBeenCalledTimes(1);
+        expect(stderrSpy.mock.calls[0][0]).toContain('pb:');
+        expect(stderrSpy.mock.calls[0][0]).toContain('pb upgrade');
+    });
+    it('prints nothing to stdout (stdout stays bare JSON)', () => {
+        setOutputMode('json');
+        recordServerLatest('0.1.0-beta.140');
+        const stdoutSpy = vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+        checkForUpdate('0.1.0-beta.109');
+        expect(stdoutSpy).not.toHaveBeenCalled();
+    });
+    it('cold cache → no print', () => {
+        setOutputMode('json');
+        const spy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        checkForUpdate('0.1.0-beta.109');
+        expect(spy).not.toHaveBeenCalled();
+    });
+    it('sentinel records the installed version and suppresses re-notify for it', () => {
+        setOutputMode('json');
+        recordServerLatest('0.1.0-beta.140');
+        writeUpgradePendingSentinel('0.1.0-beta.140'); // just installed 140
+        const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        checkForUpdate('0.1.0-beta.140'); // running 140, latest 140 -> no notice
+        expect(stderrSpy).not.toHaveBeenCalled();
+    });
+    it('resolveLatestVersion serves a within-window npm fallback without refetching (P2)', async () => {
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109'); // fresh (recordedAt = now)
+        npmResponseVersion = '0.1.0-beta.999'; // would win IF a fetch happened
+        const latest = await resolveLatestVersion('0.1.0-beta.109');
+        expect(latest).toBe('0.1.0-beta.140'); // fresh cache used, no network refresh
+    });
+    it('a lone fresh server header still triggers a live npm fetch — server-only cache is not trusted (P1)', async () => {
+        // Normal steady state: authenticated calls write a fresh server header, but the hot path never
+        // populates npm. If the server lags npm (108 vs 958), the live resolver must fetch npm rather
+        // than short-circuit on the server value, or pb doctor/upgrade would resolve the masked 108.
+        recordServerLatest('0.1.0-beta.108'); // fresh server only; no npm cache entry
+        npmResponseVersion = '0.1.0-beta.958'; // live npm is far newer
+        const latest = await resolveLatestVersion('0.1.0-beta.109');
+        expect(latest).toBe('0.1.0-beta.958'); // fetched + surfaced, not the masked server 108
+    });
+    it('resolveLatestVersion revalidates a stale npm fallback via a fresh fetch (P2)', async () => {
+        const realNow = Date.now;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109'); // recordedAt = now
+        Date.now = () => realNow() + 25 * 60 * 60 * 1000; // past the 24h npm window
+        npmResponseVersion = '0.1.0-beta.141'; // registry now serves a newer beta
+        try {
+            const latest = await resolveLatestVersion('0.1.0-beta.109');
+            expect(latest).toBe('0.1.0-beta.141'); // refreshed, not the stale 140
+        }
+        finally {
+            Date.now = realNow;
+        }
+    });
+    it('successful revalidation replaces a stale cache even when the live tag is not newer (P2)', async () => {
+        const realNow = Date.now;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109'); // seed npm cache at 140
+        Date.now = () => realNow() + 25 * 60 * 60 * 1000; // age it past the 24h window
+        npmResponseVersion = '0.1.0-beta.142'; // registry now points lower than installed
+        try {
+            // Installed is 145 (post-upgrade). The live tag (142) is <= installed, so recordNpmLatest
+            // refuses to overwrite — but the resolver must return the live truth (142), NOT the disproven
+            // stale 140 it would otherwise fall back to.
+            const latest = await resolveLatestVersion('0.1.0-beta.145');
+            expect(latest).toBe('0.1.0-beta.142');
+        }
+        finally {
+            Date.now = realNow;
+        }
+    });
+    it('falls back to a stale cached value only on fetch failure (offline backstop)', async () => {
+        const realNow = Date.now;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109');
+        Date.now = () => realNow() + 25 * 60 * 60 * 1000; // stale npm entry
+        npmResponseVersion = null; // registry unreachable → fetch resolves null
+        try {
+            const latest = await resolveLatestVersion('0.1.0-beta.109');
+            expect(latest).toBe('0.1.0-beta.140'); // offline → stale cache is better than nothing
+        }
+        finally {
+            Date.now = realNow;
+        }
+    });
+    it('hot-path resolveCachedLatest still returns a stale npm value (better than nothing)', () => {
+        const realNow = Date.now;
+        recordNpmLatest('0.1.0-beta.140', '0.1.0-beta.109');
+        Date.now = () => realNow() + 100 * 60 * 60 * 1000; // far past every freshness window
+        try {
+            expect(resolveCachedLatest()).toBe('0.1.0-beta.140'); // sync hot path never blocks/forgets
+        }
+        finally {
+            Date.now = realNow;
+        }
+    });
+});
+//# sourceMappingURL=update-check.test.js.map

package/dist/__tests__/update-check.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-check.test.js","sourceRoot":"","sources":["../../src/__tests__/update-check.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;AACxC,0FAA0F;AAC1F,uFAAuF;AACvF,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAE7C,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACxB,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY;CAC5B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,IAAa,EAAE,KAAc,EAAE,EAA0B,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG;YACV,EAAE,EAAE,CAAC,KAAa,EAAE,OAAgC,EAAE,EAAE;gBACtD,IAAI,KAAK,KAAK,MAAM,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;oBACpD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,IAAI,KAAK,KAAK,KAAK;oBAAE,OAAO,EAAE,CAAC;gBAC/B,OAAO,GAAG,CAAC;YACb,CAAC;SACF,CAAC;QACF,EAAE,CAAC,GAAG,CAAC,CAAC;QACR,MAAM,GAAG,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;QACvF,OAAO,GAAG,CAAC;IACb,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IAC7C,YAAY,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;IACrD,aAAa,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACzC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACnE,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,GAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC;QAAC,MAAM,CAAC,CAAC;IAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvJ,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;CACnB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAE1F,OAAO,EACL,wBAAwB,EACxB,OAAO,EACP,kBAAkB,EAClB,uBAAuB,EACvB,2BAA2B,EAC3B,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,MAAM,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEvC,UAAU,CAAC,GAAG,EAAE;QACd,0BAA0B,EAAE,CAAC;QAC7B,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,kBAAkB,GAAG,IAAI,CAAC;QAC1B,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnF,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAErC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACzD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;QACtC,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnF,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAErC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAEzD,2BAA2B,EAAE,CAAC;QAC9B,wBAAwB,EAAE,CAAC;QAE3B,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAG,qBAAqB;QAC5E,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAmB,mCAAmC;QAC3F,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAG,gDAAgD;IAC1G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACvG,gGAAgG;QAChG,+FAA+F;QAC/F,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAmB,sCAAsC;QAC9F,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAmB,gCAAgC;QACxF,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACjD,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,eAAe,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC,kCAAkC;QACrF,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnF,cAAc,CAAC,gBAAgB,CAAC,CAAC;QACjC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,qCAAqC;QAEvE,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnF,cAAc,CAAC,gBAAgB,CAAC,CAAC;QACjC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7E,cAAc,CAAC,gBAAgB,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACrC,2BAA2B,CAAC,gBAAgB,CAAC,CAAC,CAAC,qBAAqB;QACpE,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnF,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAc,uCAAuC;QACtF,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,2BAA2B;QAChF,kBAAkB,GAAG,gBAAgB,CAAC,CAAe,gCAAgC;QACrF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAe,uCAAuC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oGAAoG,EAAE,KAAK,IAAI,EAAE;QAClH,+FAA+F;QAC/F,8FAA8F;QAC9F,6FAA6F;QAC7F,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAG,wCAAwC;QAChF,kBAAkB,GAAG,gBAAgB,CAAC,CAAE,wBAAwB;QAChE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAE,gDAAgD;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,mBAAmB;QACxE,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAI,0BAA0B;QAC/E,kBAAkB,GAAG,gBAAgB,CAAC,CAAe,mCAAmC;QACxF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAa,+BAA+B;QACpF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,wBAAwB;QAC7E,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAK,6BAA6B;QACnF,kBAAkB,GAAG,gBAAgB,CAAC,CAAgB,2CAA2C;QACjG,IAAI,CAAC;YACH,0FAA0F;YAC1F,8FAA8F;YAC9F,6CAA6C;YAC7C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAK,kBAAkB;QACxE,kBAAkB,GAAG,IAAI,CAAC,CAA4B,6CAA6C;QACnG,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAc,+CAA+C;QACrG,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAG,kCAAkC;QACvF,IAAI,CAAC;YACH,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,qCAAqC;QAC7F,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}