@projitect/cli-internals 0.0.0-stage → 1.0.1

package/dist/loader.js

@@ -0,0 +1,65 @@
+import path from "node:path";
+import { promises as fs } from "node:fs";
+import { pathToFileURL } from "node:url";
+import { Array, Effect, Match, Predicate } from "effect";
+import { PredicateX, StructX } from "@nunofyobiz/effect-extras";
+import { Errors } from "@projitect/core";
+/**
+ * The user calls this in `.pjt.ts`:
+ *
+ *   export default pjt({ blueprints: [...] })
+ *
+ * It's an identity tag — we only inspect the default export for the `_tag` marker so we can
+ * distinguish accidental other exports from a real projitect config.
+ */
+export const pjt = (input) => ({
+    _tag: "ProjitectConfig",
+    blueprints: input.blueprints,
+    ...StructX.defined("config", input.config),
+});
+/** Type guard: did the user pass an Effect, or a literal array? */
+export const isEffectTree = (v) => !Array.isArray(v);
+/**
+ * Dynamic-import the user's `.pjt.ts` and return the typed default export.
+ *
+ * The user's file is TypeScript. On Node 23.6+ with `--experimental-strip-types`, the import
+ * succeeds natively. On older Node, the binary shim in `packages/projitect` registers `tsx` as
+ * a loader before reaching this function. Either way, by the time we get here, `import(path)`
+ * Just Works.
+ */
+export const loadBlueprintFile = (params) => {
+    const { blueprintFile, projectRoot } = params;
+    const full = path.resolve(projectRoot, blueprintFile);
+    return Effect.gen(function* () {
+        const exists = yield* Effect.promise(() => fs.access(full).then(() => true, () => false));
+        if (!exists) {
+            return yield* new Errors.ConfigBlueprintFileNotFound({
+                id: "pjt.config.blueprint-file-not-found",
+                blueprintFile,
+                message: `No blueprint file found at ${full}. Run \`pjt init\` to create one.`,
+            });
+        }
+        const module_ = yield* Effect.tryPromise({
+            try: () => import(pathToFileURL(full).href),
+            catch: (e) => new Errors.LoaderImportFailed({
+                id: "pjt.loader.import-failed",
+                blueprintFile,
+                cause: e instanceof Error ? e.message : String(e),
+                message: `Failed to import ${blueprintFile}: ${e instanceof Error ? e.message : String(e)}`,
+            }),
+        });
+        const value = module_.default;
+        if (!isProjitectFile(value)) {
+            return yield* new Errors.LoaderInvalidDefaultExport({
+                id: "pjt.loader.invalid-default-export",
+                blueprintFile,
+                received: describe(value),
+                message: `${blueprintFile} must \`export default pjt({...})\`. Received ${describe(value)}.`,
+            });
+        }
+        return value;
+    });
+};
+const isProjitectFile = (v) => PredicateX.unsafeIsRecord(v) && v["_tag"] === "ProjitectConfig";
+const describe = (v) => Match.value(v).pipe(Match.when(Predicate.isUndefined, () => "undefined"), Match.when(Predicate.isNull, () => "null"), Match.when(Array.isArray, () => "Array"), Match.when(PredicateX.unsafeIsRecord, () => 'object without `_tag: "ProjitectConfig"`'), Match.orElse((value) => typeof value));
+//# sourceMappingURL=loader.js.map

package/dist/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../src/loader.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAA;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAsBxC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,KAGnB,EAAiB,EAAE,CAAC,CAAC;IACpB,IAAI,EAAE,iBAAiB;IACvB,UAAU,EAAE,KAAK,CAAC,UAAU;IAC5B,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;CAC3C,CAAC,CAAA;AAEF,mEAAmE;AACnE,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,CAA8B,EACiD,EAAE,CACjF,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AAEnB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAGjC,EAGC,EAAE;IACF,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,MAAM,CAAA;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;IACrD,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CACxC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAClB,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CACF,CAAA;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,2BAA2B,CAAC;gBACnD,EAAE,EAAE,qCAAqC;gBACzC,aAAa;gBACb,OAAO,EAAE,8BAA8B,IAAI,mCAAmC;aAC/E,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YACvC,GAAG,EAAE,GAA4C,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;YACpF,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACX,IAAI,MAAM,CAAC,kBAAkB,CAAC;gBAC5B,EAAE,EAAE,0BAA0B;gBAC9B,aAAa;gBACb,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjD,OAAO,EAAE,oBAAoB,aAAa,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;aAC5F,CAAC;SACL,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAA;QAC7B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,0BAA0B,CAAC;gBAClD,EAAE,EAAE,mCAAmC;gBACvC,aAAa;gBACb,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC;gBACzB,OAAO,EAAE,GAAG,aAAa,iDAAiD,QAAQ,CAAC,KAAK,CAAC,GAAG;aAC7F,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,CAAU,EAAsB,EAAE,CACzD,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,iBAAiB,CAAA;AAEjE,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAU,EAAE,CACtC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,EACpD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAC1C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EACxC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,0CAA0C,CAAC,EACvF,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,CACtC,CAAA"}

package/dist/lockfile.d.ts

@@ -0,0 +1,22 @@
+import { Effect } from "effect";
+import { BlueprintFileSystem, Errors, PjtLock } from "@projitect/core";
+/**
+ * Read `.pjt.lock` from the project root of the provided `BlueprintFileSystem`. Returns `null` if the file doesn't exist (fresh project).
+ * Fails with `pjt.lock.parse-failed` on JSON or schema errors, `pjt.lock.version-mismatch` if
+ * the lockfile was written by a newer projitect.
+ */
+export declare const readLockfile: Effect.Effect<PjtLock.PjtLock | null, Errors.LockParseFailed | Errors.LockVersionMismatch, BlueprintFileSystem>;
+/**
+ * Write `.pjt.lock` through the provided `BlueprintFileSystem`. Always writes the current schema
+ * version.
+ */
+export declare const writeLockfile: (params: {
+    readonly lock: PjtLock.PjtLock;
+}) => Effect.Effect<void, Errors.FsWriteFailed | Errors.FsPermissionDenied, BlueprintFileSystem>;
+/**
+ * Build the set of blueprint ids currently expected to be present from a lockfile. Used by the
+ * planner to compute which blueprints have left the tree (their ops will be turned into
+ * removals on next apply).
+ */
+export declare const blueprintIds: (lock: PjtLock.PjtLock | null) => ReadonlySet<string>;
+//# sourceMappingURL=lockfile.d.ts.map

package/dist/lockfile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile.d.ts","sourceRoot":"","sources":["../src/lockfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAMtE;;;;GAIG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,CACtC,OAAO,CAAC,OAAO,GAAG,IAAI,EACtB,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,mBAAmB,EACnD,mBAAmB,CA6CnB,CAAA;AAEF;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,QAAQ;IACpC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAA;CAC/B,KAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,CAIzF,CAAA;AAEJ;;;;GAIG;AACH,eAAO,MAAM,YAAY,GAAI,MAAM,OAAO,CAAC,OAAO,GAAG,IAAI,KAAG,WAAW,CAAC,MAAM,CAClB,CAAA"}

package/dist/lockfile.js

@@ -0,0 +1,59 @@
+import { Effect, Schema } from "effect";
+import { BlueprintFileSystem, Errors, PjtLock } from "@projitect/core";
+import { readIfExists } from "./project-file.js";
+const LOCKFILE_NAME = ".pjt.lock";
+const CURRENT_VERSION = 1;
+/**
+ * Read `.pjt.lock` from the project root of the provided `BlueprintFileSystem`. Returns `null` if the file doesn't exist (fresh project).
+ * Fails with `pjt.lock.parse-failed` on JSON or schema errors, `pjt.lock.version-mismatch` if
+ * the lockfile was written by a newer projitect.
+ */
+export const readLockfile = Effect.gen(function* () {
+    const file = LOCKFILE_NAME;
+    const raw = yield* readIfExists(file);
+    if (raw === null) {
+        return null;
+    }
+    const parsed = yield* Effect.try({
+        try: () => JSON.parse(raw),
+        catch: (e) => new Errors.LockParseFailed({
+            id: "pjt.lock.parse-failed",
+            path: file,
+            cause: e instanceof Error ? e.message : String(e),
+            message: `Could not parse ${LOCKFILE_NAME}. The file is corrupted — delete it and rerun \`pjt remodel\` to rebuild.`,
+        }),
+    });
+    if (typeof parsed === "object" &&
+        parsed !== null &&
+        "version" in parsed &&
+        typeof parsed.version === "number" &&
+        parsed.version > CURRENT_VERSION) {
+        return yield* new Errors.LockVersionMismatch({
+            id: "pjt.lock.version-mismatch",
+            found: parsed.version,
+            expected: CURRENT_VERSION,
+            message: `${LOCKFILE_NAME} was written by a newer projitect (version ${parsed.version}). Upgrade the \`projitect\` devDep.`,
+        });
+    }
+    return yield* Schema.decodeUnknownEffect(PjtLock.PjtLock)(parsed).pipe(Effect.mapError((e) => new Errors.LockParseFailed({
+        id: "pjt.lock.parse-failed",
+        path: file,
+        cause: String(e),
+        message: `${LOCKFILE_NAME} does not match the expected schema. Delete it and rerun \`pjt remodel\` to rebuild.`,
+    })));
+});
+/**
+ * Write `.pjt.lock` through the provided `BlueprintFileSystem`. Always writes the current schema
+ * version.
+ */
+export const writeLockfile = (params) => Effect.gen(function* () {
+    const fs = yield* BlueprintFileSystem;
+    yield* fs.writeFile(LOCKFILE_NAME, `${JSON.stringify(params.lock, null, 2)}\n`);
+});
+/**
+ * Build the set of blueprint ids currently expected to be present from a lockfile. Used by the
+ * planner to compute which blueprints have left the tree (their ops will be turned into
+ * removals on next apply).
+ */
+export const blueprintIds = (lock) => new Set(lock === null ? [] : Object.keys(lock.blueprints));
+//# sourceMappingURL=lockfile.js.map

package/dist/lockfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile.js","sourceRoot":"","sources":["../src/lockfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,MAAM,aAAa,GAAG,WAAW,CAAA;AACjC,MAAM,eAAe,GAAG,CAAU,CAAA;AAElC;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAIrB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACtB,MAAM,IAAI,GAAG,aAAa,CAAA;IAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IACrC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAC/B,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY;QACrC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACX,IAAI,MAAM,CAAC,eAAe,CAAC;YACzB,EAAE,EAAE,uBAAuB;YAC3B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YACjD,OAAO,EAAE,mBAAmB,aAAa,2EAA2E;SACrH,CAAC;KACL,CAAC,CAAA;IAEF,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,SAAS,IAAI,MAAM;QACnB,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,MAAM,CAAC,OAAO,GAAG,eAAe,EAChC,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,mBAAmB,CAAC;YAC3C,EAAE,EAAE,2BAA2B;YAC/B,KAAK,EAAE,MAAM,CAAC,OAAO;YACrB,QAAQ,EAAE,eAAe;YACzB,OAAO,EAAE,GAAG,aAAa,8CAA8C,MAAM,CAAC,OAAO,sCAAsC;SAC5H,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,MAAM,CAAC,eAAe,CAAC;QACzB,EAAE,EAAE,uBAAuB;QAC3B,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAChB,OAAO,EAAE,GAAG,aAAa,sFAAsF;KAChH,CAAC,CACL,CACF,CAAA;AACH,CAAC,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAE7B,EAA8F,EAAE,CAC/F,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAA;IACrC,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;AACjF,CAAC,CAAC,CAAA;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAA4B,EAAuB,EAAE,CAChF,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA"}

package/dist/permissions.d.ts

@@ -0,0 +1,20 @@
+import type { Permission } from "@projitect/core";
+export type FsOp = "read" | "write" | "exists" | "remove" | "removeEmptyDir" | "mkdir" | "listDir";
+/**
+ * Returns `true` if the declared permissions cover the requested operation on the given path.
+ * `read`-permissioned globs cover `read | exists | listDir`. `write`-permissioned globs cover all
+ * write-side operations (`write | remove | removeEmptyDir | mkdir`) **and implicitly** the read operations on the
+ * same path — a blueprint that writes a file naturally needs to read it back for region updates.
+ */
+export declare const isPermitted: (permissions: readonly Permission.Permission[], op: FsOp, path: string) => boolean;
+/**
+ * Returns `true` if some declared `exec` permission names `command`.
+ *
+ * Decision: the permission's `command` matches by **exact string** against the full command line —
+ * no glob, no normalisation. A glob such as `pnpm *` would let a blueprint run any subcommand,
+ * which defeats declaring the permission; exact matching fails closed, so `pnpm lint:fix` is denied
+ * when only `pnpm lint` is declared. Relaxing to globs later is additive (the schema stores a plain
+ * string). `read`/`write` permissions never grant exec, and `exec` never grants file access.
+ */
+export declare const isCommandPermitted: (permissions: readonly Permission.Permission[], command: string) => boolean;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAkEjD,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,gBAAgB,GAAG,OAAO,GAAG,SAAS,CAAA;AAKlG;;;;;GAKG;AACH,eAAO,MAAM,WAAW,GACtB,aAAa,SAAS,UAAU,CAAC,UAAU,EAAE,EAC7C,IAAI,IAAI,EACR,MAAM,MAAM,KACX,OASF,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,GAC7B,aAAa,SAAS,UAAU,CAAC,UAAU,EAAE,EAC7C,SAAS,MAAM,KACd,OAAqF,CAAA"}

package/dist/permissions.js

@@ -0,0 +1,86 @@
+import { Array } from "effect";
+/**
+ * Finds the `}` closing the group opened at `open`, and the top-level comma positions between them.
+ * Returns `undefined` when the group is unbalanced or has no top-level comma (so `{a}` stays literal).
+ */
+const parseBraceGroup = (glob, open) => {
+    const commas = [];
+    let depth = 0;
+    for (let index = open; index < glob.length; index++) {
+        const ch = glob.charAt(index);
+        if (ch === "{") {
+            depth++;
+        }
+        else if (ch === "}") {
+            depth--;
+            if (depth === 0) {
+                return Array.isArrayNonEmpty(commas) ? { close: index, commas } : undefined;
+            }
+        }
+        else if (ch === "," && depth === 1) {
+            commas.push(index);
+        }
+    }
+    return undefined;
+};
+/**
+ * Minimal glob matcher for permission globs. Supports asterisk (any non-slash chars), double
+ * asterisk (any chars including slashes) and `{a,b}` alternation (alternatives may be empty or
+ * nested). A brace group needs a closing brace and at least one top-level comma; otherwise the
+ * braces and commas match literally. No character classes, `?`, negation or extglobs.
+ *
+ * Examples that match `src/(double-star)/*.{ts,tsx}`: `src/a.ts`, `src/foo/b.tsx`.
+ */
+const globToPattern = (glob) => {
+    let pattern = "";
+    for (let index = 0; index < glob.length; index++) {
+        const ch = glob.charAt(index);
+        const group = ch === "{" ? parseBraceGroup(glob, index) : undefined;
+        if (group !== undefined) {
+            const bounds = [index, ...group.commas, group.close];
+            const alternatives = Array.zipWith(bounds, bounds.slice(1), (start, end) => globToPattern(glob.slice(start + 1, end)));
+            pattern = `${pattern}(?:${alternatives.join("|")})`;
+            index = group.close;
+        }
+        else if (ch === "*" && glob.charAt(index + 1) === "*") {
+            pattern = `${pattern}.*`;
+            index++;
+        }
+        else if (ch === "*") {
+            pattern = `${pattern}[^/]*`;
+        }
+        else if (".+^${}()|[]\\".includes(ch)) {
+            pattern = `${pattern}\\${ch}`;
+        }
+        else {
+            pattern = pattern + ch;
+        }
+    }
+    return pattern;
+};
+const globToRegex = (glob) => new RegExp(`^${globToPattern(glob)}$`, "u");
+const matchesGlob = (path, glob) => globToRegex(glob).test(path);
+const opCategory = (op) => op === "read" || op === "exists" || op === "listDir" ? "read" : "write";
+/**
+ * Returns `true` if the declared permissions cover the requested operation on the given path.
+ * `read`-permissioned globs cover `read | exists | listDir`. `write`-permissioned globs cover all
+ * write-side operations (`write | remove | removeEmptyDir | mkdir`) **and implicitly** the read operations on the
+ * same path — a blueprint that writes a file naturally needs to read it back for region updates.
+ */
+export const isPermitted = (permissions, op, path) => {
+    const category = opCategory(op);
+    // A permission grants the op when its glob matches and it's a write (writes imply reads) or
+    // it's a read covering a read-category op.
+    return Array.some(permissions, (p) => p.kind !== "exec" && matchesGlob(path, p.glob) && (p.kind === "write" || category === "read"));
+};
+/**
+ * Returns `true` if some declared `exec` permission names `command`.
+ *
+ * Decision: the permission's `command` matches by **exact string** against the full command line —
+ * no glob, no normalisation. A glob such as `pnpm *` would let a blueprint run any subcommand,
+ * which defeats declaring the permission; exact matching fails closed, so `pnpm lint:fix` is denied
+ * when only `pnpm lint` is declared. Relaxing to globs later is additive (the schema stores a plain
+ * string). `read`/`write` permissions never grant exec, and `exec` never grants file access.
+ */
+export const isCommandPermitted = (permissions, command) => Array.some(permissions, (p) => p.kind === "exec" && p.command === command);
+//# sourceMappingURL=permissions.js.map

package/dist/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAG9B;;;GAGG;AACH,MAAM,eAAe,GAAG,CACtB,IAAY,EACZ,IAAY,EACgE,EAAE;IAC9E,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,IAAI,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,EAAE,CAAA;QACT,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,EAAE,CAAA;YACP,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;YAC7E,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE;IAC7C,IAAI,OAAO,GAAG,EAAE,CAAA;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC7B,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACnE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;YACpD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CACzE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAC1C,CAAA;YACD,OAAO,GAAG,GAAG,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;YACnD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;QACrB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACxD,OAAO,GAAG,GAAG,OAAO,IAAI,CAAA;YACxB,KAAK,EAAE,CAAA;QACT,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,OAAO,GAAG,GAAG,OAAO,OAAO,CAAA;QAC7B,CAAC;aAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACxC,OAAO,GAAG,GAAG,OAAO,KAAK,EAAE,EAAE,CAAA;QAC/B,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,OAAO,GAAG,EAAE,CAAA;QACxB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;AAEzF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,IAAY,EAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAIzF,MAAM,UAAU,GAAG,CAAC,EAAQ,EAAoB,EAAE,CAChD,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;AAEzE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,WAA6C,EAC7C,EAAQ,EACR,IAAY,EACH,EAAE;IACX,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,CAAC,CAAA;IAC/B,4FAA4F;IAC5F,2CAA2C;IAC3C,OAAO,KAAK,CAAC,IAAI,CACf,WAAW,EACX,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,CAAC,CAChG,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,WAA6C,EAC7C,OAAe,EACN,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAA"}

package/dist/plan.d.ts

@@ -0,0 +1,278 @@
+import { Data, Effect } from "effect";
+import { Errors, PjtLock } from "@projitect/core";
+import type { Blueprint, Permission } from "@projitect/core";
+import type { DirectoryBlueprint } from "@projitect/blueprint";
+export type FilePlan = Data.TaggedEnum<{
+    readonly Region: {
+        readonly path: string;
+        readonly commentPrefix: string;
+        /** Optional closing delimiter for HTML/MDX comments. Empty for `#`/`//`-style regions. */
+        readonly commentSuffix: string;
+        readonly regions: readonly {
+            readonly ownerId: string;
+            readonly content: string;
+        }[];
+    };
+    readonly Merge: {
+        readonly path: string;
+        readonly value: unknown;
+        /** Dotted-key → ownerId. Conflicts on identical keys are caught at reduction time. */
+        readonly ownership: ReadonlyMap<string, string>;
+    };
+    readonly Owned: {
+        readonly path: string;
+        readonly ownerId: string;
+        readonly content: string;
+    };
+    readonly Seed: {
+        readonly path: string;
+        readonly ownerId: string;
+        readonly content: string;
+    };
+}>;
+export declare const FilePlan: {
+    readonly Region: Data.TaggedEnum.ConstructorFrom<{
+        readonly _tag: "Region";
+        readonly path: string;
+        readonly commentPrefix: string;
+        readonly commentSuffix: string;
+        readonly regions: readonly {
+            readonly ownerId: string;
+            readonly content: string;
+        }[];
+    }, "_tag">;
+    readonly Merge: Data.TaggedEnum.ConstructorFrom<{
+        readonly _tag: "Merge";
+        readonly path: string;
+        readonly value: unknown;
+        readonly ownership: ReadonlyMap<string, string>;
+    }, "_tag">;
+    readonly Owned: Data.TaggedEnum.ConstructorFrom<{
+        readonly _tag: "Owned";
+        readonly path: string;
+        readonly ownerId: string;
+        readonly content: string;
+    }, "_tag">;
+    readonly Seed: Data.TaggedEnum.ConstructorFrom<{
+        readonly _tag: "Seed";
+        readonly path: string;
+        readonly ownerId: string;
+        readonly content: string;
+    }, "_tag">;
+    readonly $is: <Tag extends "Region" | "Merge" | "Owned" | "Seed">(tag: Tag) => (u: unknown) => u is Extract<{
+        readonly _tag: "Region";
+        readonly path: string;
+        readonly commentPrefix: string;
+        readonly commentSuffix: string;
+        readonly regions: readonly {
+            readonly ownerId: string;
+            readonly content: string;
+        }[];
+    }, {
+        readonly _tag: Tag;
+    }> | Extract<{
+        readonly _tag: "Merge";
+        readonly path: string;
+        readonly value: unknown;
+        readonly ownership: ReadonlyMap<string, string>;
+    }, {
+        readonly _tag: Tag;
+    }> | Extract<{
+        readonly _tag: "Owned";
+        readonly path: string;
+        readonly ownerId: string;
+        readonly content: string;
+    }, {
+        readonly _tag: Tag;
+    }> | Extract<{
+        readonly _tag: "Seed";
+        readonly path: string;
+        readonly ownerId: string;
+        readonly content: string;
+    }, {
+        readonly _tag: Tag;
+    }>;
+    readonly $match: {
+        <Cases extends {
+            readonly Region: (args: {
+                readonly _tag: "Region";
+                readonly path: string;
+                readonly commentPrefix: string;
+                readonly commentSuffix: string;
+                readonly regions: readonly {
+                    readonly ownerId: string;
+                    readonly content: string;
+                }[];
+            }) => any;
+            readonly Merge: (args: {
+                readonly _tag: "Merge";
+                readonly path: string;
+                readonly value: unknown;
+                readonly ownership: ReadonlyMap<string, string>;
+            }) => any;
+            readonly Owned: (args: {
+                readonly _tag: "Owned";
+                readonly path: string;
+                readonly ownerId: string;
+                readonly content: string;
+            }) => any;
+            readonly Seed: (args: {
+                readonly _tag: "Seed";
+                readonly path: string;
+                readonly ownerId: string;
+                readonly content: string;
+            }) => any;
+        }>(cases: Cases): (value: {
+            readonly _tag: "Region";
+            readonly path: string;
+            readonly commentPrefix: string;
+            readonly commentSuffix: string;
+            readonly regions: readonly {
+                readonly ownerId: string;
+                readonly content: string;
+            }[];
+        } | {
+            readonly _tag: "Merge";
+            readonly path: string;
+            readonly value: unknown;
+            readonly ownership: ReadonlyMap<string, string>;
+        } | {
+            readonly _tag: "Owned";
+            readonly path: string;
+            readonly ownerId: string;
+            readonly content: string;
+        } | {
+            readonly _tag: "Seed";
+            readonly path: string;
+            readonly ownerId: string;
+            readonly content: string;
+        }) => import("effect/Unify").Unify<ReturnType<Cases["Region" | "Merge" | "Owned" | "Seed"]>>;
+        <Cases extends {
+            readonly Region: (args: {
+                readonly _tag: "Region";
+                readonly path: string;
+                readonly commentPrefix: string;
+                readonly commentSuffix: string;
+                readonly regions: readonly {
+                    readonly ownerId: string;
+                    readonly content: string;
+                }[];
+            }) => any;
+            readonly Merge: (args: {
+                readonly _tag: "Merge";
+                readonly path: string;
+                readonly value: unknown;
+                readonly ownership: ReadonlyMap<string, string>;
+            }) => any;
+            readonly Owned: (args: {
+                readonly _tag: "Owned";
+                readonly path: string;
+                readonly ownerId: string;
+                readonly content: string;
+            }) => any;
+            readonly Seed: (args: {
+                readonly _tag: "Seed";
+                readonly path: string;
+                readonly ownerId: string;
+                readonly content: string;
+            }) => any;
+        }>(value: {
+            readonly _tag: "Region";
+            readonly path: string;
+            readonly commentPrefix: string;
+            readonly commentSuffix: string;
+            readonly regions: readonly {
+                readonly ownerId: string;
+                readonly content: string;
+            }[];
+        } | {
+            readonly _tag: "Merge";
+            readonly path: string;
+            readonly value: unknown;
+            readonly ownership: ReadonlyMap<string, string>;
+        } | {
+            readonly _tag: "Owned";
+            readonly path: string;
+            readonly ownerId: string;
+            readonly content: string;
+        } | {
+            readonly _tag: "Seed";
+            readonly path: string;
+            readonly ownerId: string;
+            readonly content: string;
+        }, cases: Cases): import("effect/Unify").Unify<ReturnType<Cases["Region" | "Merge" | "Owned" | "Seed"]>>;
+    };
+};
+export type RegionPlanFile = Extract<FilePlan, {
+    readonly _tag: "Region";
+}>;
+export type MergePlanFile = Extract<FilePlan, {
+    readonly _tag: "Merge";
+}>;
+export type OwnedPlanFile = Extract<FilePlan, {
+    readonly _tag: "Owned";
+}>;
+export type SeedPlanFile = Extract<FilePlan, {
+    readonly _tag: "Seed";
+}>;
+/**
+ * A post-apply command declared by a blueprint's `Exec` op, with the declaring blueprint's
+ * permissions so the final phase can check it before anything starts. Listed in tree order, then
+ * op order; duplicates are kept here and collapsed when the phase runs.
+ */
+export interface PlannedCommand {
+    readonly ownerId: string;
+    readonly command: string;
+    /** The op's check command; carried for `pjt inspect`, never run by build or remodel. */
+    readonly check?: string;
+    readonly permissions: readonly Permission.Permission[];
+}
+export interface ProjectPlan {
+    readonly files: readonly FilePlan[];
+    readonly commands: readonly PlannedCommand[];
+}
+/**
+ * Per-blueprint lockfile entries, derived from the same ops that fed the plan. Written to
+ * `.pjt.lock` after every successful apply.
+ */
+export type ByBlueprint = Readonly<Record<string, PjtLock.BlueprintLockEntry>>;
+/**
+ * Removal computed by diffing the previous lockfile against the current `byBlueprint` map.
+ * A blueprint that appears in the previous lockfile but not in the current map is "left the
+ * tree"; each of its prior operations becomes a removal target.
+ */
+export interface UpgradeRecord {
+    readonly blueprintId: string;
+    readonly from: string;
+    readonly to: string;
+}
+type RawTree = readonly (Blueprint.Blueprint | DirectoryBlueprint)[];
+/**
+ * Build the project plan by running every blueprint, collecting their ops, reducing them with
+ * conflict detection, and producing the per-blueprint lockfile entries.
+ */
+export declare const buildPlan: (params: {
+    readonly tree: RawTree;
+    readonly projectRoot: string;
+}) => Effect.Effect<{
+    readonly plan: ProjectPlan;
+    readonly byBlueprint: ByBlueprint;
+}, Errors.ProjitectError>;
+/**
+ * Diff the previous lockfile against the current blueprint set. Returns:
+ * - `removals`: ops from blueprints present in the lockfile but absent from the current tree,
+ *   plus owned files a still-present blueprint no longer ships (a new version dropping a file).
+ *   The applier deletes the matching regions / merge keys / owned files in a follow-up step.
+ * - `upgrades`: blueprints present in both, with different versions. Informational only — the
+ *   actual content is regenerated from the current blueprint, so applying handles upgrade
+ *   content automatically; this list is for `inspect`'s human output.
+ */
+export declare const diffLockfile: (params: {
+    readonly previous: PjtLock.PjtLock | null;
+    readonly current: ByBlueprint;
+}) => {
+    readonly removals: readonly PjtLock.LockOperation[];
+    readonly upgrades: readonly UpgradeRecord[];
+};
+export {};
+//# sourceMappingURL=plan.d.ts.map

package/dist/plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../src/plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,IAAI,EAAE,MAAM,EAA+C,MAAM,QAAQ,CAAA;AAEzF,OAAO,EAAa,MAAM,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAO9D,MAAM,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;QAC9B,0FAA0F;QAC1F,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS;YAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KACpF,CAAA;IACD,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;QACvB,sFAAsF;QACtF,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAChD,CAAA;IACD,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7F,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAC7F,CAAC,CAAA;AACF,eAAO,MAAM,QAAQ;;;uBAfF,MAAM;gCACG,MAAM;gCAEN,MAAM;0BACZ,SAAS;YAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;SAAE,EAAE;;;;uBAGpE,MAAM;wBACL,OAAO;4BAEH,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;;;;uBAEhB,MAAM;0BAAoB,MAAM;0BAAoB,MAAM;;;;uBAC3D,MAAM;0BAAoB,MAAM;0BAAoB,MAAM;;;;uBAbzE,MAAM;gCACG,MAAM;gCAEN,MAAM;0BACZ,SAAS;YAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;SAAE,EAAE;;;;;uBAGpE,MAAM;wBACL,OAAO;4BAEH,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;;;;;uBAEhB,MAAM;0BAAoB,MAAM;0BAAoB,MAAM;;;;;uBAC3D,MAAM;0BAAoB,MAAM;0BAAoB,MAAM;;;;;;;;+BAbzE,MAAM;wCACG,MAAM;wCAEN,MAAM;kCACZ,SAAS;oBAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;oBAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;iBAAE,EAAE;;;;+BAGpE,MAAM;gCACL,OAAO;oCAEH,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;;;;+BAEhB,MAAM;kCAAoB,MAAM;kCAAoB,MAAM;;;;+BAC3D,MAAM;kCAAoB,MAAM;kCAAoB,MAAM;;;;2BAbzE,MAAM;oCACG,MAAM;oCAEN,MAAM;8BACZ,SAAS;gBAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;aAAE,EAAE;;;2BAGpE,MAAM;4BACL,OAAO;gCAEH,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;;;2BAEhB,MAAM;8BAAoB,MAAM;8BAAoB,MAAM;;;2BAC3D,MAAM;8BAAoB,MAAM;8BAAoB,MAAM;;;;;+BAbzE,MAAM;wCACG,MAAM;wCAEN,MAAM;kCACZ,SAAS;oBAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;oBAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;iBAAE,EAAE;;;;+BAGpE,MAAM;gCACL,OAAO;oCAEH,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;;;;+BAEhB,MAAM;kCAAoB,MAAM;kCAAoB,MAAM;;;;+BAC3D,MAAM;kCAAoB,MAAM;kCAAoB,MAAM;;;;2BAbzE,MAAM;oCACG,MAAM;oCAEN,MAAM;8BACZ,SAAS;gBAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;aAAE,EAAE;;;2BAGpE,MAAM;4BACL,OAAO;gCAEH,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;;;2BAEhB,MAAM;8BAAoB,MAAM;8BAAoB,MAAM;;;2BAC3D,MAAM;8BAAoB,MAAM;8BAAoB,MAAM;;;CAEzC,CAAA;AAEnD,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,CAAA;AAC3E,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAAA;AACzE,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAAA;AACzE,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAEvE;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,wFAAwF;IACxF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,WAAW,EAAE,SAAS,UAAU,CAAC,UAAU,EAAE,CAAA;CACvD;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAA;IACnC,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAA;CAC7C;AAKD;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAA;AAE9E;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAMD,KAAK,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,SAAS,GAAG,kBAAkB,CAAC,EAAE,CAAA;AA+DpE;;;GAGG;AACH,eAAO,MAAM,SAAS,GAAI,QAAQ;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B,KAAG,MAAM,CAAC,MAAM,CACf;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;CAAE,EACjE,MAAM,CAAC,cAAc,CA4CtB,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,GAAI,QAAQ;IACnC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAA;IACzC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAC9B,KAAG;IACF,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,CAAC,aAAa,EAAE,CAAA;IACnD,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAA;CAmC5C,CAAA"}