@stigmer/cli 3.18.0-dev.20260918103812 → 3.18.0

package/src/marketplace/install.ts

@@ -22,10 +22,12 @@ import {
   type OpenMarketplaceOptions,
   openMarketplace,
 } from "./materialize.js";
+import { peekGitHubMarketplace } from "./github.js";
 import {
   type ReadMarketplaceTree,
   entryDirectory,
   findEntry,
+  marketplaceRefusal,
   readMarketplaceTree,
 } from "./read.js";
 import { type InstallRef, formatInstallRef } from "./ref.js";
@@ -38,12 +40,19 @@ export interface LocatedEntry {
 }
 
 /**
- * Find the marketplace a ref names. A prefixed ref names it outright; a bare
- * name is searched across every configured marketplace in listing order
- * (the official one first), and exactly one must offer it: none refuses
- * toward `marketplace show`, more than one refuses by naming each holder,
- * because "the first one wins" would make the answer depend on the order
- * the user added marketplaces in. The caller owns `open` and disposes it.
+ * Find the source a ref names. A prefixed ref names it outright; a bare
+ * name is searched across every known source in listing order (the official
+ * one first), and exactly one must offer it: none refuses toward
+ * `marketplace show`, more than one refuses by naming each holder, because
+ * "the first one wins" would make the answer depend on the order the user
+ * added sources in. The caller owns `open` and disposes it.
+ *
+ * The search is cheap by design: a GitHub source is asked through its
+ * marketplace file alone (`peekGitHubMarketplace`, a few KB), and only the
+ * one source that declares the name is opened as a tree and read whole,
+ * which is where "declared" becomes "offered" or the install refuses. With
+ * the vendors' catalogues built in, the alternative was three zipballs per
+ * bare install.
  */
 export async function locateEntry(
   ref: InstallRef,
@@ -77,20 +86,14 @@ export async function locateEntry(
 
   const holders: LocatedEntry[] = [];
   for (const marketplace of listing.known) {
-    const open = await openMarketplace(marketplace.source, options);
-    let tree: ReadMarketplaceTree;
+    let located: LocatedEntry | undefined;
     try {
-      tree = readMarketplaceTree(open.root, describeSource(marketplace.source));
+      located = await locateIn(marketplace, ref.name, options);
     } catch (error) {
-      open.dispose();
       for (const holder of holders) holder.open.dispose();
       throw error;
     }
-    if (findEntry(tree.marketplace, ref.name) === undefined) {
-      open.dispose();
-      continue;
-    }
-    holders.push({ marketplace, open, tree });
+    if (located !== undefined) holders.push(located);
   }
   if (holders.length === 1) return holders[0]!;
   for (const holder of holders) holder.open.dispose();
@@ -111,6 +114,61 @@ export async function locateEntry(
   );
 }
 
+/**
+ * The entry called `name` in one source, opened and read, or `undefined`
+ * when the source does not offer it. A GitHub source is first asked through
+ * its marketplace file alone (a few KB); its zipball is downloaded only when
+ * the file declares the name, and the tree read then decides whether it is
+ * held. A local or official tree is on disk and is read once. A GitHub
+ * repository with no marketplace file declares nothing (a built-in whose
+ * vendor moved the file must not break every bare install); one whose file
+ * the library refuses is a real fault and is said so.
+ */
+async function locateIn(
+  marketplace: KnownMarketplace,
+  name: string,
+  options: OpenMarketplaceOptions,
+): Promise<LocatedEntry | undefined> {
+  if (marketplace.source.type === "github") {
+    const peek = await peekGitHubMarketplace(
+      marketplace.source,
+      options.fetchImpl,
+    );
+    if (!peek.ok) {
+      switch (peek.kind) {
+        case "not-a-marketplace":
+          return undefined;
+        case "refused":
+          throw marketplaceRefusal(
+            `${describeSource(marketplace.source)} (${peek.location})`,
+            peek.errors,
+            peek.warnings,
+          );
+        default: {
+          const exhaustive: never = peek;
+          return exhaustive;
+        }
+      }
+    }
+    if (findEntry(peek.peeked.marketplace, name) === undefined) return undefined;
+  }
+
+  const open = await openMarketplace(marketplace.source, options);
+  try {
+    const tree = readMarketplaceTree(open.root, describeSource(marketplace.source));
+    if (findEntry(tree.marketplace, name) === undefined) {
+      // Declared by a file but not held by the tree, or simply absent: not a
+      // holder. The not-found sentence names every source searched.
+      open.dispose();
+      return undefined;
+    }
+    return { marketplace, open, tree };
+  } catch (error) {
+    open.dispose();
+    throw error;
+  }
+}
+
 /** Read, validate and zip the entry called `name`; refuses an entry the marketplace does not offer. */
 export async function prepareEntry(
   tree: ReadMarketplaceTree,

package/src/marketplace/official.ts

@@ -2,12 +2,12 @@
 //
 // The official catalogue (`plugins/` in the OSS repository, published as
 // `@stigmer/plugins`) is the content `stigmer up` bootstraps a backend with,
-// so it follows the seedpack's rule: acquired at the CLI's OWN version, so
-// the plugins a fresh install gets match the control plane that installs
-// them. A lean `npx @stigmer/cli` does not carry the content; it is fetched
+// so it follows the server's and the runner's rule: acquired at the CLI's OWN
+// version, so the plugins a fresh install gets match the control plane that
+// installs them. A lean `npx @stigmer/cli` does not carry the content; it is fetched
 // once into ~/.stigmer/runtimes/<version>/ like the server and the runner.
 //
-// Two sources, tried in order (mirrors runtime/server.ts and the seedpack):
+// Two sources, tried in order (mirrors runtime/server.ts and runtime/runner.ts):
 //   1. A repo-tree checkout (dev): `<repo>/plugins`, the tree itself.
 //   2. The published `@stigmer/plugins@<cli-version>`, whose package root IS
 //      the marketplace tree (`publish-libs.mjs` publishes from `dist/`, where

package/src/marketplace/read.test.ts

@@ -24,7 +24,7 @@ afterAll(() => {
 describe("readMarketplaceTree", () => {
   it("reads a Cursor-dialect tree into the one shape, dropping the missing entry with its sentence", () => {
     const tree = readMarketplaceTree(root);
-    expect(tree.marketplace.name).toBe("cursor-plugins");
+    expect(tree.marketplace.name).toBe("acme-plugins");
     expect(tree.marketplace.dialect).toBe("cursor");
     expect(tree.marketplace.plugins.map((entry) => entry.name)).toEqual([
       "thermos",

package/src/marketplace/render.ts

@@ -5,6 +5,7 @@
 // same kind of thing: client-side configuration, not a server collection.
 
 import { readPluginPackage } from "@stigmer/plugin-package";
+import { isBuiltInMarketplaceName } from "@stigmer/plugin-package/client";
 import { CommandResult } from "../output/index.js";
 import { count, readPluginDirectory } from "../resources/plugin.js";
 import {
@@ -20,13 +21,21 @@ export function renderMarketplaceList(
   const total = listing.known.length + listing.unreadable.length;
   const result =
     listing.unreadable.length === 0
-      ? CommandResult.success(`${count(total, "marketplace")} configured`)
+      ? CommandResult.success(`${count(total, "source")} known`)
       : CommandResult.warning(
-          `${count(total, "marketplace")} configured, ${count(listing.unreadable.length, "entry")} this CLI cannot read`,
+          `${count(total, "source")} known, ${count(listing.unreadable.length, "entry")} this CLI cannot read`,
         );
-  const section = result.addSection("Marketplaces");
+  const section = result.addSection("Sources");
   for (const marketplace of listing.known) {
-    section.field(marketplace.name, describeSource(marketplace.source));
+    // A built-in reads "built in" beside where it comes from, so the user
+    // knows which names `remove` will refuse.
+    section.field(
+      marketplace.name,
+      isBuiltInMarketplaceName(marketplace.name) &&
+        marketplace.source.type !== "official"
+        ? `${describeSource(marketplace.source)} (built in)`
+        : describeSource(marketplace.source),
+    );
   }
   for (const marketplace of listing.unreadable) {
     section.field(marketplace.name, `cannot be read: ${marketplace.reason}`);

package/src/program.ts

@@ -9,6 +9,7 @@
 import { Command } from "commander";
 import { registerApiKey } from "./commands/apikey/index.js";
 import { registerApply } from "./commands/apply.js";
+import { registerBootstrap } from "./commands/bootstrap.js";
 import { registerAuth } from "./commands/auth/index.js";
 import { registerCompletion } from "./commands/completion.js";
 import { registerConfig } from "./commands/config/index.js";
@@ -31,7 +32,6 @@ import { registerResume } from "./commands/resume.js";
 import { registerRun } from "./commands/run.js";
 import { registerSchedule } from "./commands/schedule.js";
 import { registerSearch } from "./commands/search.js";
-import { registerSeedpack } from "./commands/seedpack.js";
 import { registerSetup } from "./commands/setup.js";
 import { registerShare } from "./commands/share.js";
 import { registerStatus } from "./commands/status.js";
@@ -94,10 +94,10 @@ export function buildProgram(): Command {
   registerConnect(program);
   registerMcpServer(program);
   registerUp(program);
+  registerBootstrap(program);
   registerDown(program);
   registerStatus(program);
   registerLogs(program);
-  registerSeedpack(program);
   registerSetup(program);
   registerReset(program);
   registerInternalDaemon(program);

package/src/resources/apply/declarative.integration.test.ts

@@ -149,8 +149,8 @@ describe("applyDeclarative", () => {
     // (stigmer/stigmer#402): the server rejects agent enabled_tools against
     // STORED capabilities, so discovery must refresh them between the MCP
     // server applies and the applies that depend on them. Regressing to
-    // discovery-at-the-end resurrects the stale-capabilities race (a seedpack
-    // upgrade adding a tool + enabling it in an agent would fail bootstrap).
+    // discovery-at-the-end resurrects the stale-capabilities race (a project
+    // upgrade adding a tool + enabling it in an agent would fail its apply).
     const dir = mkdtempSync(join(tmpdir(), "decl-it-order-"));
     try {
       writeFileSync(

package/src/resources/apply/declarative.ts

@@ -318,8 +318,8 @@ export async function reconcileProjectMembers(
   // apply time (stigmer/stigmer#402), and the backend's own post-apply
   // connect is asynchronous; discovering here means agents in this apply
   // validate against the toolset this apply just shipped, not the previous
-  // generation's (which would falsely reject e.g. a seedpack upgrade that
-  // adds a tool and enables it in the same pass). Discovery stays
+  // generation's (which would falsely reject e.g. a project upgrade that
+  // adds a tool to a server and enables it in an agent in the same pass). Discovery stays
   // best-effort: a failed connect warns, capabilities stay stale, and the
   // dependent apply surfaces an actionable error listing last-known tools.
   for (const res of resources) {

package/src/resources/connect/discover.test.ts

@@ -22,7 +22,7 @@ function stdioSpec(scriptPath: string) {
 }
 
 // A spec whose args reference ${ALLOWED_DIR}, declared under spec.env — the shape
-// the seedpack filesystem server uses (issue #141).
+// a filesystem MCP server declares its root with (issue #141).
 function stdioSpecWithPlaceholderArg(scriptPath: string) {
   return create(McpServerSpecSchema, {
     serverType: { case: "stdio", value: { command: process.execPath, args: [scriptPath, "${ALLOWED_DIR}"] } },

package/src/resources/plugin.ts

@@ -29,15 +29,13 @@ import { join } from "node:path";
 import { create, toJson } from "@bufbuild/protobuf";
 import {
   MANIFEST_LOCATIONS,
-  readPluginPackage,
   type PluginFiles,
   type PluginFinding,
   type PluginPackage,
 } from "@stigmer/plugin-package";
 import {
   DIALECT_LABELS,
-  archivePlugin,
-  digestArchive,
+  preparePluginArchive,
   selectPluginFiles,
   type CandidateFile,
 } from "@stigmer/plugin-package/client";
@@ -319,20 +317,23 @@ export async function preparePluginPush(
   dir: string,
   ignoreOptions: IgnoreOptions = DEFAULT_IGNORE_OPTIONS,
 ): Promise<PreparedPluginPush> {
+  // The walk is the CLI's (it prunes directories before listing them, which
+  // a flat tree cannot); everything after it is the shared tail every client
+  // runs, so a folder pushed here and the same tree read by the console have
+  // one digest by construction.
   const directory = readPluginDirectory(dir, ignoreOptions);
-  const outcome = readPluginPackage(directory.files);
+  const outcome = await preparePluginArchive(directory);
   if (!outcome.ok) {
     throw pluginRefusal(dir, outcome.errors, outcome.warnings);
   }
-  const archive = archivePlugin(directory.files);
   return {
     dir,
-    files: directory.files,
+    files: outcome.prepared.files,
     stats: directory.stats,
-    plugin: outcome.plugin,
-    warnings: outcome.warnings,
-    archive,
-    digest: await digestArchive(archive),
+    plugin: outcome.prepared.plugin,
+    warnings: outcome.prepared.warnings,
+    archive: outcome.prepared.archive,
+    digest: outcome.prepared.digest,
   };
 }
 

package/commands/seedpack.d.ts

@@ -1,3 +0,0 @@
-import type { Command } from "commander";
-export declare function registerSeedpack(program: Command): void;
-//# sourceMappingURL=seedpack.d.ts.map

package/commands/seedpack.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"seedpack.d.ts","sourceRoot":"","sources":["../../src/commands/seedpack.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASzC,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAevD"}

package/commands/seedpack.js

@@ -1,98 +0,0 @@
-// `stigmer seedpack apply|status` — manage the embedded system seedpack.
-//
-// The seedpack (system agents, skills, MCP servers, workflows under the
-// "stigmer" org) is applied automatically on `stigmer up` in local mode; these
-// commands bootstrap it explicitly against whatever backend is configured
-// (local or cloud). Apply is content-hash idempotent: in cloud mode the truth
-// is the stigmer.ai/seedpack-hash label on the server's seedpack Project (any
-// machine sees the same applied state — cloud#429); in local mode it is a
-// marker file in the data dir, which lives and dies with the local backend.
-//
-// Heavy modules load lazily inside the action so `--help` stays fast (DD-001).
-import { configDir, dataDir, isCloudMode, load } from "../config/index.js";
-import { CommandResult, renderResult } from "../output/index.js";
-import { addResultFlags, resultFormat } from "./shared.js";
-export function registerSeedpack(program) {
-    const seedpack = program.command("seedpack").description("manage the embedded system seedpack");
-    const apply = seedpack
-        .command("apply")
-        .description("apply the seedpack to the configured backend")
-        .option("--force", "re-apply even if the seedpack has not changed", false)
-        .action((options) => runApply(options));
-    addResultFlags(apply);
-    const status = seedpack
-        .command("status")
-        .description("show seedpack bootstrap status")
-        .action((options) => runStatus(options));
-    addResultFlags(status);
-}
-async function runApply(flags) {
-    const [{ connectBackend }, { ensureAuthenticated }, { applySeedpack }] = await Promise.all([
-        import("../backend.js"),
-        import("../config/index.js"),
-        import("../local/seedpack/apply.js"),
-    ]);
-    const client = connectBackend();
-    ensureAuthenticated(client.config);
-    const result = await applySeedpack({
-        controller: client.controller,
-        stigmer: client.stigmer,
-        info: (line) => process.stderr.write(`${line}\n`),
-        warn: (line) => process.stderr.write(`${line}\n`),
-    }, {
-        markerDir: markerDir(),
-        force: flags.force === true,
-        useServerHash: isCloudMode(load()),
-    });
-    const label = backendLabel();
-    const message = result.applied
-        ? `Seedpack applied to ${label} backend`
-        : `Seedpack already up to date on ${label} backend (use --force to re-apply)`;
-    renderResult(CommandResult.success(message), resultFormat(flags));
-}
-async function runStatus(flags) {
-    const { readServerSeedpackHash, resolveSeedpackOrg, seedpackContentHash } = await import("../local/seedpack/apply.js");
-    const { readMarker } = await import("../local/seedpack/content.js");
-    const hash = seedpackContentHash();
-    // Cloud mode asks the server (the label on the seedpack Project) so status
-    // is truthful from ANY machine, not just the one that last ran apply.
-    let stored;
-    let storedLabel;
-    if (isCloudMode(load())) {
-        const { connectBackend } = await import("../backend.js");
-        const { ensureAuthenticated } = await import("../config/index.js");
-        const client = connectBackend();
-        ensureAuthenticated(client.config);
-        stored = await readServerSeedpackHash(client.stigmer, resolveSeedpackOrg());
-        storedLabel = "Applied Hash (server)";
-    }
-    else {
-        stored = readMarker(markerDir());
-        storedLabel = "Applied Hash";
-    }
-    const result = CommandResult.success("Seedpack status");
-    const section = result.addSection("");
-    section.field("Backend", backendLabel());
-    section.field("Embedded Hash", hash);
-    if (stored === null) {
-        section.field("Status", "Not applied (run 'stigmer seedpack apply')");
-    }
-    else {
-        section.field(storedLabel, stored);
-        section.field("Status", stored === hash ? "Up to date" : "Outdated (run 'stigmer seedpack apply' to update)");
-    }
-    renderResult(result, resultFormat(flags));
-}
-// Marker lives with the backend's state: the data dir for local, the config dir
-// for cloud (mirrors the Go CLI's resolveMarkerDir).
-function markerDir() {
-    return isCloudMode(load()) ? configDir() : dataDir();
-}
-function backendLabel() {
-    const config = load();
-    if (!isCloudMode(config))
-        return "local";
-    const endpoint = config.backend.cloud?.endpoint ?? "api.stigmer.ai:443";
-    return `cloud (${endpoint})`;
-}
-//# sourceMappingURL=seedpack.js.map

package/commands/seedpack.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"seedpack.js","sourceRoot":"","sources":["../../src/commands/seedpack.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,wEAAwE;AACxE,+EAA+E;AAC/E,0EAA0E;AAC1E,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAC5E,EAAE;AACF,+EAA+E;AAG/E,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAoB,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAM3D,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;IAEhG,MAAM,KAAK,GAAG,QAAQ;SACnB,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,8CAA8C,CAAC;SAC3D,MAAM,CAAC,SAAS,EAAE,+CAA+C,EAAE,KAAK,CAAC;SACzE,MAAM,CAAC,CAAC,OAAmB,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,cAAc,CAAC,KAAK,CAAC,CAAC;IAEtB,MAAM,MAAM,GAAG,QAAQ;SACpB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,gCAAgC,CAAC;SAC7C,MAAM,CAAC,CAAC,OAAoB,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,cAAc,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAAiB;IACvC,MAAM,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzF,MAAM,CAAC,eAAe,CAAC;QACvB,MAAM,CAAC,oBAAoB,CAAC;QAC5B,MAAM,CAAC,4BAA4B,CAAC;KACrC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEnC,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC;QACE,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC;QACjD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC;KAClD,EACD;QACE,SAAS,EAAE,SAAS,EAAE;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI;QAC3B,aAAa,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;KACnC,CACF,CAAC;IAEF,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO;QAC5B,CAAC,CAAC,uBAAuB,KAAK,UAAU;QACxC,CAAC,CAAC,kCAAkC,KAAK,oCAAoC,CAAC;IAChF,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAkB;IACzC,MAAM,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACvH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;IAEpE,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IAEnC,2EAA2E;IAC3E,sEAAsE;IACtE,IAAI,MAAqB,CAAC;IAC1B,IAAI,WAAmB,CAAC;IACxB,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QACzD,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC5E,WAAW,GAAG,uBAAuB,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC;QACjC,WAAW,GAAG,cAAc,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,4CAA4C,CAAC,CAAC;IACxE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,mDAAmD,CAAC,CAAC;IAChH,CAAC;IACD,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,gFAAgF;AAChF,qDAAqD;AACrD,SAAS,SAAS;IAChB,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,IAAI,oBAAoB,CAAC;IACxE,OAAO,UAAU,QAAQ,GAAG,CAAC;AAC/B,CAAC"}

package/local/seedpack/apply.d.ts

@@ -1,72 +0,0 @@
-import type { Stigmer } from "@stigmer/sdk";
-import type { ControllerFn } from "../../resources/apply/handlers.js";
-import { type SeedpackContent } from "./content.js";
-/**
- * Reserved label on the seedpack Project recording the last applied content
- * hash (cloud#429). Writing a NEW value requires `can_write_reserved_labels`
- * (the seeding identity's capability); re-sending an unchanged value is an
- * echo the cloud guard passes for any caller — so re-applies of identical
- * content are never treated as reserved-label writes.
- */
-export declare const SEEDPACK_HASH_LABEL = "stigmer.ai/seedpack-hash";
-/**
- * The seedpack Project's slug. The server derives it from the manifest's
- * `metadata.name` in `seedpack/stigmer.yaml` — "stigmer-seedpack" is already
- * slug-shaped, so name and slug coincide. Pinned by a test against the real
- * content so a rename there fails loudly here.
- */
-export declare const SEEDPACK_PROJECT_SLUG = "stigmer-seedpack";
-export interface SeedpackApplyDeps {
-    /** Raw command-controller accessor (full-proto apply, preserves metadata.id). */
-    readonly controller: ControllerFn;
-    /** High-level client for skill push + post-apply MCP discovery. */
-    readonly stigmer: Stigmer;
-    /** Human progress lines (stderr). */
-    readonly info: (line: string) => void;
-    /** Warnings (stderr). */
-    readonly warn: (line: string) => void;
-}
-export interface SeedpackApplyOptions {
-    /** Directory holding the idempotency marker (local mode only). */
-    readonly markerDir: string;
-    /** Target org slug. Defaults to STIGMER_SEEDPACK_ORG, then "stigmer". */
-    readonly org?: string;
-    /** Re-apply even when the content hash is unchanged. */
-    readonly force?: boolean;
-    /** Pre-resolved content (injectable for tests); resolved on demand otherwise. */
-    readonly content?: SeedpackContent;
-    readonly home?: string;
-    /**
-     * Cloud mode: the idempotency truth is the {@link SEEDPACK_HASH_LABEL} on the
-     * server's seedpack Project, read via {@link readServerSeedpackHash} — the
-     * local marker is neither read nor written, so a stateless machine (CI, a
-     * second operator laptop) still skips unchanged content correctly.
-     */
-    readonly useServerHash?: boolean;
-}
-export interface SeedpackApplyResult {
-    /** True when the seedpack was applied; false when skipped as up to date. */
-    readonly applied: boolean;
-    /** The current content hash (stored in the marker on a successful apply). */
-    readonly hash: string;
-    /** The resolved target org. */
-    readonly org: string;
-}
-/** Resolve the target org: explicit option > env var > "stigmer". */
-export declare function resolveSeedpackOrg(explicit?: string): string;
-/** Compute the current seedpack content hash without applying (drives `status`). */
-export declare function seedpackContentHash(opts?: Pick<SeedpackApplyOptions, "content" | "home">): string;
-/**
- * Read the applied content hash recorded on the backend's seedpack Project,
- * or null when it cannot be proven (project absent — never applied — or the
- * read failed). Null means "apply": the apply itself is idempotent server-side,
- * so an unprovable state costs one redundant pass, never a skipped update.
- */
-export declare function readServerSeedpackHash(stigmer: Stigmer, org: string): Promise<string | null>;
-/**
- * Apply the seedpack to the backend the deps connect to. Returns `applied:false`
- * (without touching the backend beyond the cloud-mode hash read) when the
- * recorded hash already matches the content hash and `force` is not set.
- */
-export declare function applySeedpack(deps: SeedpackApplyDeps, opts: SeedpackApplyOptions): Promise<SeedpackApplyResult>;
-//# sourceMappingURL=apply.d.ts.map

package/local/seedpack/apply.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/local/seedpack/apply.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAKL,KAAK,eAAe,EAErB,MAAM,cAAc,CAAC;AAKtB;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,6BAA6B,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AAExD,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC;IAClC,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,qCAAqC;IACrC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,yBAAyB;IACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,kEAAkE;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,qEAAqE;AACrE,wBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAK5D;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,MAAM,CAAM,GAAG,MAAM,CAGrG;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOlG;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6BrH"}

package/local/seedpack/apply.js

@@ -1,145 +0,0 @@
-// In-process seedpack apply.
-//
-// The TS equivalent of Go's seedpackbootstrap.Apply, with one deliberate
-// improvement: instead of shelling out to `stigmer apply` as a subprocess, this
-// drives the same in-process declarative-apply path that `stigmer apply` uses —
-// one code path, no recursion guard, no second process.
-//
-// Two phases respect the resource hierarchy (mirrors the Go bootstrap):
-//   1. organizations/ via file mode — the org must exist before its members.
-//   2. the project (stigmer.yaml + agents/skills/mcp-servers/workflows) via the
-//      declarative reconciler, under the target org.
-//
-// Idempotent, with the applied-hash truth living with the backend it describes
-// (cloud#429): every apply stamps the content hash as a reserved label on the
-// seedpack Project, and cloud-mode runs skip by reading that label back — so
-// any machine (operator laptop, CI) sees the same applied state. Local mode
-// keeps the original marker file (the local data dir lives and dies with the
-// local backend, so a local file IS backend-scoped state there).
-import { mkdtempSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { create } from "@bufbuild/protobuf";
-import { ApiResourceMetadataSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/metadata_pb";
-import { applyItem, resolveApplyItems } from "../../resources/apply/apply.js";
-import { applyDeclarative, detectTrack } from "../../resources/apply/declarative.js";
-import { extractSeedpack, hashSeedpackContent, readMarker, resolveSeedpackContent, writeMarker, } from "./content.js";
-const DEFAULT_ORG = "stigmer";
-const ORG_ENV_VAR = "STIGMER_SEEDPACK_ORG";
-/**
- * Reserved label on the seedpack Project recording the last applied content
- * hash (cloud#429). Writing a NEW value requires `can_write_reserved_labels`
- * (the seeding identity's capability); re-sending an unchanged value is an
- * echo the cloud guard passes for any caller — so re-applies of identical
- * content are never treated as reserved-label writes.
- */
-export const SEEDPACK_HASH_LABEL = "stigmer.ai/seedpack-hash";
-/**
- * The seedpack Project's slug. The server derives it from the manifest's
- * `metadata.name` in `seedpack/stigmer.yaml` — "stigmer-seedpack" is already
- * slug-shaped, so name and slug coincide. Pinned by a test against the real
- * content so a rename there fails loudly here.
- */
-export const SEEDPACK_PROJECT_SLUG = "stigmer-seedpack";
-/** Resolve the target org: explicit option > env var > "stigmer". */
-export function resolveSeedpackOrg(explicit) {
-    if (explicit !== undefined && explicit !== "")
-        return explicit;
-    const env = process.env[ORG_ENV_VAR];
-    if (env !== undefined && env !== "")
-        return env;
-    return DEFAULT_ORG;
-}
-/** Compute the current seedpack content hash without applying (drives `status`). */
-export function seedpackContentHash(opts = {}) {
-    const content = opts.content ?? resolveSeedpackContent({ home: opts.home });
-    return hashSeedpackContent(content.dir);
-}
-/**
- * Read the applied content hash recorded on the backend's seedpack Project,
- * or null when it cannot be proven (project absent — never applied — or the
- * read failed). Null means "apply": the apply itself is idempotent server-side,
- * so an unprovable state costs one redundant pass, never a skipped update.
- */
-export async function readServerSeedpackHash(stigmer, org) {
-    try {
-        const project = await stigmer.project.getByReference({ org, slug: SEEDPACK_PROJECT_SLUG });
-        return project.metadata?.labels?.[SEEDPACK_HASH_LABEL] ?? null;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Apply the seedpack to the backend the deps connect to. Returns `applied:false`
- * (without touching the backend beyond the cloud-mode hash read) when the
- * recorded hash already matches the content hash and `force` is not set.
- */
-export async function applySeedpack(deps, opts) {
-    const org = resolveSeedpackOrg(opts.org);
-    const content = opts.content ?? resolveSeedpackContent({ home: opts.home });
-    const hash = hashSeedpackContent(content.dir);
-    const appliedHash = opts.useServerHash === true
-        ? await readServerSeedpackHash(deps.stigmer, org)
-        : readMarker(opts.markerDir);
-    if (opts.force !== true && appliedHash === hash) {
-        return { applied: false, hash, org };
-    }
-    deps.info("Applying system resources (seedpack)…");
-    const stage = mkdtempSync(join(tmpdir(), "stigmer-seedpack-"));
-    try {
-        extractSeedpack(content.dir, stage);
-        await applyOrganizations(deps, stage);
-        await applyProject(deps, stage, org, hash);
-        // The Project label written above is the cloud-mode record; the marker
-        // stays the local-mode one. Never both — two records of one fact drift.
-        if (opts.useServerHash !== true) {
-            writeMarker(opts.markerDir, hash);
-        }
-    }
-    finally {
-        rmSync(stage, { recursive: true, force: true });
-    }
-    deps.info("System resources applied successfully");
-    return { applied: true, hash, org };
-}
-// Phase 1: organizations via file mode. Organizations sit above the project and
-// carry no org context themselves, so they apply with an empty org.
-async function applyOrganizations(deps, stageDir) {
-    const orgDir = join(stageDir, "organizations");
-    let items;
-    try {
-        items = resolveApplyItems(orgDir);
-    }
-    catch {
-        return; // No organizations to apply.
-    }
-    for (const item of items) {
-        const outcome = await applyItem(deps.controller, item, "", false);
-        if (outcome.warning !== undefined)
-            deps.warn(outcome.warning);
-    }
-}
-// Phase 2: the project (agents, skills, MCP servers, workflows) via the shared
-// declarative reconciler — the same path `stigmer apply` runs for a user project.
-//
-// The content hash is stamped as a reserved label on the Project HERE, in the
-// seedpack path only — general `stigmer apply` never writes reserved labels.
-// The stamp rides the project apply that happens anyway, so recording the hash
-// costs no extra RPC and can never succeed while the apply failed.
-async function applyProject(deps, stageDir, org, contentHash) {
-    const detect = detectTrack(stageDir);
-    if (detect.track !== "declarative" || detect.project === undefined) {
-        throw new Error(`seedpack is not a declarative project (detected '${detect.track}')`);
-    }
-    detect.project.metadata ??= create(ApiResourceMetadataSchema, {});
-    detect.project.metadata.labels[SEEDPACK_HASH_LABEL] = contentHash;
-    await applyDeclarative(detect, {
-        controller: deps.controller,
-        stigmer: deps.stigmer,
-        org,
-        info: deps.info,
-        warn: deps.warn,
-    });
-}
-//# sourceMappingURL=apply.js.map

package/local/seedpack/apply.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../../src/local/seedpack/apply.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,EAAE;AACF,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,wDAAwD;AACxD,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,gFAAgF;AAChF,qDAAqD;AACrD,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,iEAAiE;AAEjE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,4DAA4D,CAAC;AAEvG,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAErF,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,UAAU,EACV,sBAAsB,EAEtB,WAAW,GACZ,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,GAAG,SAAS,CAAC;AAC9B,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAyCxD,qEAAqE;AACrE,MAAM,UAAU,kBAAkB,CAAC,QAAiB;IAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAChD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,OAAuD,EAAE;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,OAAO,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAgB,EAAE,GAAW;IACxE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC3F,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB,EAAE,IAA0B;IACrF,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAE9C,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,KAAK,IAAI;QAC7C,CAAC,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC;QACjD,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3C,uEAAuE;QACvE,wEAAwE;QACxE,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YAChC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACtC,CAAC;AAED,gFAAgF;AAChF,oEAAoE;AACpE,KAAK,UAAU,kBAAkB,CAAC,IAAuB,EAAE,QAAgB;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC/C,IAAI,KAA2C,CAAC;IAChD,IAAI,CAAC;QACH,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,6BAA6B;IACvC,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,kFAAkF;AAClF,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,mEAAmE;AACnE,KAAK,UAAU,YAAY,CAAC,IAAuB,EAAE,QAAgB,EAAE,GAAW,EAAE,WAAmB;IACrG,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,GAAG,WAAW,CAAC;IAClE,MAAM,gBAAgB,CAAC,MAAM,EAAE;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG;QACH,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC,CAAC;AACL,CAAC"}