@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/core/preview-session-manager.js

@@ -0,0 +1,303 @@
+/*
+ * Preview dev-server spawn manager (iterate 3 section 03 / plan.md § 4.2).
+ *
+ * Contract: spawn(projectId, profile, opts?) → {url, sessionId};
+ *   get(projectId) → live entry | undefined; killAll() → SIGTERM all + clear.
+ *
+ * Security model (ADR-044 — `shell: false` on EVERY path). The win32 metachar
+ * fence is a BLOCKLIST (separators/substitution + `%`), not a total-safety proof
+ * (cmd builtins survive) — it stops the cmd.exe wrapper amplifying a `.cmd` shim
+ * into shell semantics or a repo-cwd binary hijack. POSIX: `shell-quote.parse`,
+ * operator token → refuse. win32: backslash-safe tokenizer (keeps `C:\…`) +
+ * PATH-only bare-name resolution + a `cmd.exe /d /s /c` wrapper (discrete argv,
+ * or a verbatim outer-quoted line for spaced paths) — see `preview-win32-spawn.ts`.
+ * spawn always runs `shell: false`; env drops `CLAUDE_*` / `SHIPWRIGHT_*`.
+ *
+ * Error codes (structured class instances handed to the route layer):
+ *   - PreviewProfileInvalidError (empty / operators / metachars),
+ *     PreviewSpawnFailedError (spawn threw), PreviewPortInUseError (EADDRINUSE),
+ *     PreviewExitedEarlyError (child exited pre-ready), PreviewTimeoutError.
+ *
+ * Dedup: a repeat spawn() for a live projectId returns the cached entry (key =
+ * projectId + `profileHash`). Shutdown: index.ts calls killAll(); none here.
+ */
+import { spawn as realSpawn, } from "node:child_process";
+import { randomUUID, createHash } from "node:crypto";
+import { parse as shellParse } from "shell-quote";
+import { resolveSpawn, splitWin32Command } from "./preview-win32-spawn.js";
+import { drainStdio, treeKill, awaitExit, defaultProbePort, defaultProbeReady, isValidPort, buildPreviewUrl, } from "./preview-child-lifecycle.js";
+export class PreviewProfileInvalidError extends Error {
+    detail;
+    constructor(detail) {
+        super(`Preview profile invalid: ${detail}`);
+        this.name = "PreviewProfileInvalidError";
+        this.detail = detail;
+    }
+}
+export class PreviewSpawnFailedError extends Error {
+    detail;
+    constructor(detail) {
+        super(`Preview spawn failed: ${detail}`);
+        this.name = "PreviewSpawnFailedError";
+        this.detail = detail;
+    }
+}
+export class PreviewPortInUseError extends Error {
+    port;
+    constructor(port) {
+        super(`Preview port ${port} is already in use`);
+        this.name = "PreviewPortInUseError";
+        this.port = port;
+    }
+}
+export class PreviewExitedEarlyError extends Error {
+    code;
+    /** Captured tail of the child's stdout/stderr (F11 diagnostic). */
+    tail;
+    constructor(code, tail = "") {
+        super(`Preview process exited early (code=${code})`);
+        this.name = "PreviewExitedEarlyError";
+        this.code = code;
+        this.tail = tail;
+    }
+}
+export class PreviewTimeoutError extends Error {
+    seconds;
+    /** Captured tail of the child's stdout/stderr (F11 diagnostic). */
+    tail;
+    constructor(seconds, tail = "") {
+        super(`Preview ready timeout after ${seconds}s`);
+        this.name = "PreviewTimeoutError";
+        this.seconds = seconds;
+        this.tail = tail;
+    }
+}
+function hashProfile(p) {
+    const payload = JSON.stringify({
+        cmd: p.dev_server?.command ?? "",
+        port: p.dev_server?.port ?? 0,
+        ready: p.dev_server?.ready_path ?? "/",
+        timeout: p.dev_server?.ready_timeout_seconds ?? 60,
+    });
+    return createHash("sha1").update(payload).digest("hex").slice(0, 12);
+}
+function sanitizeEnv(base) {
+    const out = {};
+    for (const [k, v] of Object.entries(base)) {
+        if (k.startsWith("SHIPWRIGHT_"))
+            continue;
+        if (k.startsWith("CLAUDE_"))
+            continue;
+        out[k] = v;
+    }
+    return out;
+}
+export class PreviewSessionManager {
+    lifecycle;
+    entries = new Map();
+    /** In-flight spawns keyed by projectId — dedup for concurrent clicks (F12). */
+    inFlight = new Map();
+    constructor(lifecycle = {}) {
+        this.lifecycle = lifecycle;
+    }
+    /**
+     * Validate + tokenize a dev command. Exposed for tests and for the
+     * routes layer, which can dry-validate without mutating state.
+     * Returns argv on success; throws PreviewProfileInvalidError otherwise.
+     */
+    static tokenizeCommand(command) {
+        if (!command || !command.trim()) {
+            throw new PreviewProfileInvalidError("dev_server.command is empty or missing");
+        }
+        // win32: backslash-safe tokenize (F31) + injection fence. `process.platform`
+        // is read at call time so tests can stub it; POSIX shell-quote path unchanged.
+        if (process.platform === "win32") {
+            if (/[&|;`$<>%\r\n]/.test(command)) {
+                throw new PreviewProfileInvalidError("dev_server.command contains a shell metacharacter — webui runs no shell");
+            }
+            return splitWin32Command(command);
+        }
+        const parsed = shellParse(command);
+        const argv = [];
+        for (const tok of parsed) {
+            if (typeof tok === "string") {
+                argv.push(tok);
+            }
+            else {
+                // Any non-string token = shell operator (`op`) or pattern glob — both
+                // require a shell to interpret, which we refuse to run.
+                throw new PreviewProfileInvalidError("dev_server.command must be a single executable plus args, not a shell pipeline");
+            }
+        }
+        if (argv.length === 0) {
+            throw new PreviewProfileInvalidError("dev_server.command tokenized to zero tokens");
+        }
+        return argv;
+    }
+    get(projectId) {
+        const entry = this.entries.get(projectId);
+        if (!entry)
+            return undefined;
+        // Purge dead entries on lookup — killAll() normally does this, but an
+        // unexpected exit outside our control should not return a stale URL.
+        if (entry.child.exitCode !== null || entry.child.killed) {
+            this.entries.delete(projectId);
+            return undefined;
+        }
+        return entry;
+    }
+    async spawn(projectId, profile, opts) {
+        const profileHash = hashProfile(profile);
+        // In-flight dedup (F12): same-profile concurrent spawns coalesce onto the
+        // pending child; a different profile serializes then respawns (no orphan).
+        const inflight = this.inFlight.get(projectId);
+        if (inflight?.hash === profileHash)
+            return inflight.promise;
+        if (inflight) {
+            await inflight.promise.catch(() => undefined);
+            return this.spawn(projectId, profile, opts);
+        }
+        const promise = this.doSpawn(projectId, profile, profileHash, opts);
+        this.inFlight.set(projectId, { hash: profileHash, promise });
+        try {
+            return await promise;
+        }
+        finally {
+            if (this.inFlight.get(projectId)?.promise === promise) {
+                this.inFlight.delete(projectId);
+            }
+        }
+    }
+    async doSpawn(projectId, profile, profileHash, opts) {
+        const spawnFn = opts.spawn ?? realSpawn;
+        const probePort = opts.probePort ?? defaultProbePort;
+        const probeReady = opts.probeReady ?? defaultProbeReady;
+        const now = opts.now ?? (() => Date.now());
+        // Dedup: live entry with matching profile hash → return cached.
+        const cached = this.get(projectId);
+        if (cached && cached.profileHash === profileHash) {
+            return cached;
+        }
+        // Profile changed under us — tree-kill the old child (npm + grandchildren)
+        // and WAIT for it to exit (release its port) before we probe/respawn (F13).
+        if (cached) {
+            treeKill(cached.child, "SIGTERM", this.lifecycle);
+            this.entries.delete(projectId);
+            await awaitExit(cached.child, this.lifecycle.awaitExitMs);
+        }
+        const argv = PreviewSessionManager.tokenizeCommand(profile.dev_server?.command);
+        const port = profile.dev_server?.port;
+        if (!isValidPort(port))
+            throw new PreviewProfileInvalidError("dev_server.port must be a positive integer");
+        const readyPath = profile.dev_server?.ready_path ?? "/";
+        const readyTimeoutSec = profile.dev_server?.ready_timeout_seconds ?? 60;
+        // Port probe before spawn — a port owned by another process is worse than a clear error.
+        const free = await probePort(port);
+        if (!free)
+            throw new PreviewPortInUseError(port);
+        const resolved = resolveSpawn(argv, opts.cwd);
+        let child;
+        try {
+            child = spawnFn(resolved.command, resolved.args, {
+                cwd: opts.cwd,
+                env: opts.env ?? sanitizeEnv(process.env),
+                shell: false,
+                // POSIX: lead our own group so treeKill can kill(-pid) the whole
+                // npm→sh→node tree (win32: taskkill /T). Same effective platform as
+                // treeKill, so spawn/kill agree on whether a group exists (F13).
+                detached: (this.lifecycle.platform ?? process.platform) !== "win32",
+                stdio: "pipe",
+                windowsVerbatimArguments: resolved.windowsVerbatimArguments,
+            });
+        }
+        catch (err) {
+            const detail = err?.code === "ENOENT"
+                ? `command not found: ${argv[0]}`
+                : String(err).slice(0, 200);
+            throw new PreviewSpawnFailedError(detail);
+        }
+        // Continuously drain stdout/stderr so a full OS pipe buffer can't freeze
+        // the dev server (F11); retain a bounded tail for the diagnostics below.
+        const drained = drainStdio(child);
+        // Spawn-time error event can still fire after the constructor returned
+        // (e.g. Windows sometimes reports ENOENT asynchronously). Race it
+        // against the readiness / exit probes below.
+        const earlyExit = new Promise((_resolve, reject) => {
+            child.once("error", (err) => {
+                const detail = err?.code === "ENOENT"
+                    ? `command not found: ${argv[0]}`
+                    : String(err).slice(0, 200);
+                reject(new PreviewSpawnFailedError(detail));
+            });
+            child.once("exit", (code) => {
+                reject(new PreviewExitedEarlyError(code, drained.tail()));
+            });
+        });
+        const readyAbort = new AbortController();
+        const readinessPoll = (async () => {
+            const deadline = now() + readyTimeoutSec * 1000;
+            while (now() < deadline) {
+                if (readyAbort.signal.aborted)
+                    return;
+                try {
+                    const ok = await probeReady({
+                        port,
+                        readyPath,
+                        signal: readyAbort.signal,
+                    });
+                    if (ok)
+                        return;
+                }
+                catch {
+                    // fall through and retry
+                }
+                await new Promise((r) => setTimeout(r, 500));
+            }
+            throw new PreviewTimeoutError(readyTimeoutSec, drained.tail());
+        })();
+        try {
+            await Promise.race([readinessPoll, earlyExit]);
+        }
+        catch (err) {
+            // Tree-kill on cleanup too: the child is spawned detached (POSIX), so a
+            // plain child.kill would orphan its grandchildren (F13). An ESRCH on an
+            // already-exited child is swallowed inside treeKill.
+            readyAbort.abort();
+            treeKill(child, "SIGTERM", this.lifecycle);
+            throw err;
+        }
+        readyAbort.abort();
+        // Readiness won; the child's later exit must not surface as an unhandled
+        // rejection through the (now-settled) earlyExit race loser.
+        void earlyExit.catch(() => { });
+        const entry = {
+            projectId,
+            pid: child.pid ?? -1,
+            url: buildPreviewUrl(port, readyPath),
+            sessionId: randomUUID(),
+            startedAt: now(),
+            profileHash,
+            child,
+        };
+        // Auto-purge the entry if the child exits after we've cached it.
+        child.once("exit", () => {
+            const current = this.entries.get(projectId);
+            if (current === entry)
+                this.entries.delete(projectId);
+        });
+        this.entries.set(projectId, entry);
+        return entry;
+    }
+    killAll() {
+        // Tree-kill every child so npm's grandchildren die with it (F13).
+        for (const entry of this.entries.values()) {
+            treeKill(entry.child, "SIGTERM", this.lifecycle);
+        }
+        this.entries.clear();
+    }
+    /** Test helper — exposes the internal map size without leaking entries. */
+    size() {
+        return this.entries.size;
+    }
+}
+//# sourceMappingURL=preview-session-manager.js.map

package/server/dist/core/preview-session-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-session-manager.js","sourceRoot":"","sources":["../../src/core/preview-session-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EACL,KAAK,IAAI,SAAS,GAEnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EACL,UAAU,EACV,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,eAAe,GAEhB,MAAM,8BAA8B,CAAC;AAwCtC,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,MAAM,CAAS;IACxB,YAAY,MAAc;QACxB,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,MAAM,CAAS;IACxB,YAAY,MAAc;QACxB,KAAK,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,CAAS;IACtB,YAAY,IAAY;QACtB,KAAK,CAAC,gBAAgB,IAAI,oBAAoB,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,CAAgB;IAC7B,mEAAmE;IAC1D,IAAI,CAAS;IACtB,YAAY,IAAmB,EAAE,IAAI,GAAG,EAAE;QACxC,KAAK,CAAC,sCAAsC,IAAI,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,OAAO,CAAS;IACzB,mEAAmE;IAC1D,IAAI,CAAS;IACtB,YAAY,OAAe,EAAE,IAAI,GAAG,EAAE;QACpC,KAAK,CAAC,+BAA+B,OAAO,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,SAAS,WAAW,CAAC,CAAiB;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,GAAG,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,IAAI,EAAE;QAChC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,IAAI,CAAC;QAC7B,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,IAAI,GAAG;QACtC,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,qBAAqB,IAAI,EAAE;KACnD,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,WAAW,CAAC,IAAuB;IAC1C,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,SAAS;QAC1C,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACtC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,MAAM,OAAO,qBAAqB;IAQH;IAPrB,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAClD,+EAA+E;IACvE,QAAQ,GAAG,IAAI,GAAG,EAGvB,CAAC;IAEJ,YAA6B,YAAkC,EAAE;QAApC,cAAS,GAAT,SAAS,CAA2B;IAAG,CAAC;IAErE;;;;OAIG;IACH,MAAM,CAAC,eAAe,CAAC,OAA2B;QAChD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,0BAA0B,CAClC,wCAAwC,CACzC,CAAC;QACJ,CAAC;QACD,6EAA6E;QAC7E,+EAA+E;QAC/E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,0BAA0B,CAClC,yEAAyE,CAC1E,CAAC;YACJ,CAAC;YACD,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,sEAAsE;gBACtE,wDAAwD;gBACxD,MAAM,IAAI,0BAA0B,CAClC,gFAAgF,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,0BAA0B,CAClC,6CAA6C,CAC9C,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,sEAAsE;QACtE,qEAAqE;QACrE,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACxD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,KAAK,CACT,SAAiB,EACjB,OAAuB,EACvB,IAAyB;QAEzB,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACzC,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,QAAQ,EAAE,IAAI,KAAK,WAAW;YAAE,OAAO,QAAQ,CAAC,OAAO,CAAC;QAC5D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,OAAO,EAAE,CAAC;gBACtD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,SAAiB,EACjB,OAAuB,EACvB,WAAmB,EACnB,IAAyB;QAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAE3C,gEAAgE;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACjD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,2EAA2E;QAC3E,4EAA4E;QAC5E,IAAI,MAAM,EAAE,CAAC;YACX,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,GAAG,qBAAqB,CAAC,eAAe,CAChD,OAAO,CAAC,UAAU,EAAE,OAAO,CAC5B,CAAC;QACF,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC;QACtC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,0BAA0B,CAAC,4CAA4C,CAAC,CAAC;QAC3G,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,UAAU,IAAI,GAAG,CAAC;QACxD,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,EAAE,qBAAqB,IAAI,EAAE,CAAC;QAExE,yFAAyF;QACzF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,KAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;gBAC/C,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC;gBACzC,KAAK,EAAE,KAAK;gBACZ,iEAAiE;gBACjE,oEAAoE;gBACpE,iEAAiE;gBACjE,QAAQ,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO;gBACnE,KAAK,EAAE,MAAM;gBACb,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;aAC5D,CAAmC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GACT,GAA6B,EAAE,IAAI,KAAK,QAAQ;gBAC/C,CAAC,CAAC,sBAAsB,IAAI,CAAC,CAAC,CAAC,EAAE;gBACjC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAChC,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,yEAAyE;QACzE,yEAAyE;QACzE,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAElC,uEAAuE;QACvE,kEAAkE;QAClE,6CAA6C;QAC7C,MAAM,SAAS,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACxD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC1B,MAAM,MAAM,GACT,GAA6B,EAAE,IAAI,KAAK,QAAQ;oBAC/C,CAAC,CAAC,sBAAsB,IAAI,CAAC,CAAC,CAAC,EAAE;oBACjC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAChC,MAAM,CAAC,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC1B,MAAM,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,aAAa,GAAG,CAAC,KAAK,IAAmB,EAAE;YAC/C,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,eAAe,GAAG,IAAI,CAAC;YAChD,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBACxB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBACtC,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC;wBAC1B,IAAI;wBACJ,SAAS;wBACT,MAAM,EAAE,UAAU,CAAC,MAAM;qBAC1B,CAAC,CAAC;oBACH,IAAI,EAAE;wBAAE,OAAO;gBACjB,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;gBACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,wEAAwE;YACxE,qDAAqD;YACrD,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,yEAAyE;QACzE,4DAA4D;QAC5D,KAAK,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAE/B,MAAM,KAAK,GAAiB;YAC1B,SAAS;YACT,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;YACpB,GAAG,EAAE,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC;YACrC,SAAS,EAAE,UAAU,EAAE;YACvB,SAAS,EAAE,GAAG,EAAE;YAChB,WAAW;YACX,KAAK;SACN,CAAC;QACF,iEAAiE;QACjE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC5C,IAAI,OAAO,KAAK,KAAK;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO;QACL,kEAAkE;QAClE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,2EAA2E;IAC3E,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF"}

package/server/dist/core/preview-win32-spawn.d.ts

@@ -0,0 +1,11 @@
+import { type ResolvedSpawn } from "./win32-spawn.js";
+export { splitWin32Command, type ResolvedSpawn } from "./win32-spawn.js";
+/**
+ * `win32-spawn.resolveSpawn` with the preview subsystem's failure mode: an
+ * unresolvable BARE command is a profile error, not a `null`.
+ *
+ * Identical to the core resolver on every other input — asserted directly by
+ * the core<->wrapper differential matrix in `win32-spawn.test.ts`.
+ */
+export declare function resolveSpawn(argv: string[], cwd: string): ResolvedSpawn;
+//# sourceMappingURL=preview-win32-spawn.d.ts.map

package/server/dist/core/preview-win32-spawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-win32-spawn.d.ts","sourceRoot":"","sources":["../../src/core/preview-win32-spawn.ts"],"names":[],"mappings":"AA2BA,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEzE;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,CAMvE"}

package/server/dist/core/preview-win32-spawn.js

@@ -0,0 +1,45 @@
+/*
+ * preview-win32-spawn.ts — the PREVIEW-facing face of the win32 spawn resolver.
+ *
+ * The resolution itself lives in `win32-spawn.ts` and is shared by three
+ * consumer classes (preview dev-server spawn, the boot-time Claude version
+ * probe, and — mirrored, not imported — the bootstrapper package). This module
+ * adds exactly one thing on top: the preview subsystem's error type.
+ *
+ * WHY THE SPLIT (iterate-2026-08-01-win32-spawn-followups). `PreviewProfileInvalidError`
+ * lives in `preview-session-manager.ts`, so ANY module that wants the throwing
+ * form also pulls the preview subsystem into its import closure. That is how
+ * `cli-compat.ts` — the BOOT path — became a MEMBER of the
+ * preview-win32-spawn <-> preview-session-manager ESM cycle when PR #340 made it
+ * a consumer of the resolver, which that PR recorded as a new fragility. Keeping
+ * the throw HERE and the resolution THERE means only callers that actually want
+ * a `PreviewProfileInvalidError` pay for the preview import. Note this file is
+ * still IN that cycle, by design — it is the module that needs the error type.
+ *
+ * ADR-044 / DO-NOT #9 are untouched: the preview path still receives a THROW for
+ * an unresolvable bare command (never a silent `cmd /d /s /c <bare>` delegation,
+ * which would hand cmd.exe its own cwd-first lookup inside an untrusted repo).
+ * The FROZEN guard `preview-win32-resolve.test.ts` — Guards 3-6 from security
+ * review rounds 2-3 — imports `resolveSpawn` from THIS module and is unmodified
+ * by that split; it passing verbatim is the proof the extraction preserved the
+ * preview contract.
+ */
+import { resolveSpawn as resolveSpawnOrNull, } from "./win32-spawn.js";
+// Intra-package import used only inside resolveSpawn's body (never at module
+// load), so the preview-session-manager <-> this-module cycle is ESM-safe.
+import { PreviewProfileInvalidError } from "./preview-session-manager.js";
+export { splitWin32Command } from "./win32-spawn.js";
+/**
+ * `win32-spawn.resolveSpawn` with the preview subsystem's failure mode: an
+ * unresolvable BARE command is a profile error, not a `null`.
+ *
+ * Identical to the core resolver on every other input — asserted directly by
+ * the core<->wrapper differential matrix in `win32-spawn.test.ts`.
+ */
+export function resolveSpawn(argv, cwd) {
+    const plan = resolveSpawnOrNull(argv, cwd);
+    if (plan)
+        return plan;
+    throw new PreviewProfileInvalidError(`dev_server.command not found on PATH: ${argv[0]}`);
+}
+//# sourceMappingURL=preview-win32-spawn.js.map

package/server/dist/core/preview-win32-spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-win32-spawn.js","sourceRoot":"","sources":["../../src/core/preview-win32-spawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EACL,YAAY,IAAI,kBAAkB,GAEnC,MAAM,kBAAkB,CAAC;AAC1B,6EAA6E;AAC7E,2EAA2E;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E,OAAO,EAAE,iBAAiB,EAAsB,MAAM,kBAAkB,CAAC;AAEzE;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAc,EAAE,GAAW;IACtD,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,0BAA0B,CAClC,yCAAyC,IAAI,CAAC,CAAC,CAAC,EAAE,CACnD,CAAC;AACJ,CAAC"}

package/server/dist/core/profile-loader.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Cached profile JSON loader.
+ *
+ * Reads profile definitions from a profiles directory, caches them in-memory
+ * keyed by profile name, and invalidates on file mtime change so hot reloads
+ * during dev pick up edits without a server restart.
+ *
+ * Used by:
+ *   - ProjectManager.hasPreviewCapability() — to check dev_server.command.
+ *   - GET /api/profiles route.
+ */
+export interface ProfileConfig {
+    name: string;
+    label?: string;
+    description?: string;
+    dev_server?: {
+        command: string;
+        port: number;
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+}
+/**
+ * Walk up from the given start directory until we find the WebUI server's
+ * own `package.json` (identified by its `name` field). Works for both the
+ * dev layout (`webui/server/src/core/`) and the build layout
+ * (`webui/server/dist/core/`), because both ancestor chains pass through
+ * `webui/server/` where the package.json lives.
+ *
+ * Exported so tests can drive it with a synthetic start directory.
+ */
+export declare function findServerRoot(startDir?: string): string | null;
+/**
+ * Resolve the profiles directory in priority order:
+ *
+ *   1. `SHIPWRIGHT_PROFILES_DIR` — explicit user/operator override.
+ *   2. `SHIPWRIGHT_MONOREPO_PATH` + `shared/profiles` — dev-loop helper so
+ *      the WebUI reads live profiles while iterating on the Shipwright
+ *      monorepo (instead of the stale bundled snapshot).
+ *   3. Bundled `<server-root>/profiles/` — the default once the WebUI
+ *      lives in its own repo. Resolution is layout-agnostic: see
+ *      `findServerRoot`.
+ *
+ * Returns a path even if it does not exist — `loadProfile` is fail-soft
+ * and will simply return `null` for unknown names.
+ */
+export declare function getProfilesDir(): string;
+/**
+ * Load a profile by name. Returns parsed ProfileConfig or null if the file
+ * does not exist or fails to parse. Fail-soft by design — a broken profile
+ * must never crash the server or break project listing.
+ */
+export declare function loadProfile(profileName: string, profilesDir: string): ProfileConfig | null;
+/** Test helper — drops the in-memory cache so tests can seed fresh state. */
+export declare function clearProfileCache(): void;
+/**
+ * Read `<profilesDir>/PROFILE_SCHEMA_VERSION` once and compare against
+ * the library's known max. Idempotent — subsequent calls are no-ops
+ * unless `clearProfileCache` is invoked (tests). No-op when the marker
+ * file is absent (older bundles / upstream monorepos without the
+ * marker). Call this at server startup or on first load — it is not
+ * required for correctness, only for drift visibility.
+ */
+export declare function verifyProfileSchemaVersion(profilesDir: string): void;
+//# sourceMappingURL=profile-loader.d.ts.map

package/server/dist/core/profile-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-loader.d.ts","sourceRoot":"","sources":["../../src/core/profile-loader.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACvE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AASD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAmB/D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAcvC;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB,aAAa,GAAG,IAAI,CActB;AAID,6EAA6E;AAC7E,wBAAgB,iBAAiB,IAAI,IAAI,CAGxC;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAoBpE"}

package/server/dist/core/profile-loader.js

@@ -0,0 +1,125 @@
+import { readFileSync, statSync } from "node:fs";
+import { join, dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { checkContractVersion, PROFILE_SCHEMA_VERSION, } from "./contract-version.js";
+const cache = new Map();
+/**
+ * Walk up from the given start directory until we find the WebUI server's
+ * own `package.json` (identified by its `name` field). Works for both the
+ * dev layout (`webui/server/src/core/`) and the build layout
+ * (`webui/server/dist/core/`), because both ancestor chains pass through
+ * `webui/server/` where the package.json lives.
+ *
+ * Exported so tests can drive it with a synthetic start directory.
+ */
+export function findServerRoot(startDir) {
+    const start = startDir ?? dirname(fileURLToPath(import.meta.url));
+    let current = start;
+    for (let i = 0; i < 12; i++) {
+        const pkg = join(current, "package.json");
+        try {
+            const raw = readFileSync(pkg, "utf-8");
+            const parsed = JSON.parse(raw);
+            if (parsed.name?.startsWith("shipwright-command-center-server")) {
+                return current;
+            }
+        }
+        catch {
+            // package.json not at this level (or unreadable); keep walking.
+        }
+        const parent = dirname(current);
+        if (parent === current)
+            return null; // reached filesystem root
+        current = parent;
+    }
+    return null;
+}
+/**
+ * Resolve the profiles directory in priority order:
+ *
+ *   1. `SHIPWRIGHT_PROFILES_DIR` — explicit user/operator override.
+ *   2. `SHIPWRIGHT_MONOREPO_PATH` + `shared/profiles` — dev-loop helper so
+ *      the WebUI reads live profiles while iterating on the Shipwright
+ *      monorepo (instead of the stale bundled snapshot).
+ *   3. Bundled `<server-root>/profiles/` — the default once the WebUI
+ *      lives in its own repo. Resolution is layout-agnostic: see
+ *      `findServerRoot`.
+ *
+ * Returns a path even if it does not exist — `loadProfile` is fail-soft
+ * and will simply return `null` for unknown names.
+ */
+export function getProfilesDir() {
+    const override = process.env.SHIPWRIGHT_PROFILES_DIR?.trim();
+    if (override)
+        return override;
+    const monorepoPath = process.env.SHIPWRIGHT_MONOREPO_PATH?.trim();
+    if (monorepoPath)
+        return resolve(monorepoPath, "shared", "profiles");
+    const serverRoot = findServerRoot();
+    if (serverRoot)
+        return resolve(serverRoot, "profiles");
+    // Last-resort fallback — if the marker walk ever fails we still return
+    // *something* so callers don't crash. loadProfile will null out cleanly.
+    const here = dirname(fileURLToPath(import.meta.url));
+    return resolve(here, "..", "..", "profiles");
+}
+/**
+ * Load a profile by name. Returns parsed ProfileConfig or null if the file
+ * does not exist or fails to parse. Fail-soft by design — a broken profile
+ * must never crash the server or break project listing.
+ */
+export function loadProfile(profileName, profilesDir) {
+    if (!profileName)
+        return null;
+    const path = join(profilesDir, `${profileName}.json`);
+    try {
+        const stat = statSync(path);
+        const cached = cache.get(profileName);
+        if (cached && cached.mtimeMs === stat.mtimeMs)
+            return cached.data;
+        const raw = readFileSync(path, "utf-8");
+        const data = JSON.parse(raw);
+        cache.set(profileName, { data, mtimeMs: stat.mtimeMs });
+        return data;
+    }
+    catch {
+        return null;
+    }
+}
+let profileSchemaVersionChecked = false;
+/** Test helper — drops the in-memory cache so tests can seed fresh state. */
+export function clearProfileCache() {
+    cache.clear();
+    profileSchemaVersionChecked = false;
+}
+/**
+ * Read `<profilesDir>/PROFILE_SCHEMA_VERSION` once and compare against
+ * the library's known max. Idempotent — subsequent calls are no-ops
+ * unless `clearProfileCache` is invoked (tests). No-op when the marker
+ * file is absent (older bundles / upstream monorepos without the
+ * marker). Call this at server startup or on first load — it is not
+ * required for correctness, only for drift visibility.
+ */
+export function verifyProfileSchemaVersion(profilesDir) {
+    if (profileSchemaVersionChecked)
+        return;
+    profileSchemaVersionChecked = true;
+    const markerPath = join(profilesDir, "PROFILE_SCHEMA_VERSION");
+    let raw;
+    try {
+        raw = readFileSync(markerPath, "utf-8").trim();
+    }
+    catch {
+        // Marker absent — nothing to verify, no warning needed.
+        return;
+    }
+    const declared = Number.parseInt(raw, 10);
+    checkContractVersion({
+        artefact: "PROFILE_SCHEMA_VERSION",
+        path: markerPath,
+        declared: Number.isFinite(declared) ? declared : raw,
+        knownMax: PROFILE_SCHEMA_VERSION,
+        fieldName: "PROFILE_SCHEMA_VERSION",
+    });
+}
+//# sourceMappingURL=profile-loader.js.map

package/server/dist/core/profile-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-loader.js","sourceRoot":"","sources":["../../src/core/profile-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AA2B/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE5C;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,MAAM,KAAK,GAAG,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;YACpD,IAAI,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,kCAAkC,CAAC,EAAE,CAAC;gBAChE,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,CAAC,0BAA0B;QAC/D,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,YAAY;QAAE,OAAO,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAErE,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,IAAI,UAAU;QAAE,OAAO,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAEvD,uEAAuE;IACvE,yEAAyE;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,WAAmB,EACnB,WAAmB;IAEnB,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,WAAW,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtC,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAClE,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;QAC9C,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,IAAI,2BAA2B,GAAG,KAAK,CAAC;AAExC,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB;IAC/B,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,2BAA2B,GAAG,KAAK,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,IAAI,2BAA2B;QAAE,OAAO;IACxC,2BAA2B,GAAG,IAAI,CAAC;IAEnC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;IAC/D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;QACxD,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1C,oBAAoB,CAAC;QACnB,QAAQ,EAAE,wBAAwB;QAClC,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG;QACpD,QAAQ,EAAE,sBAAsB;QAChC,SAAS,EAAE,wBAAwB;KACpC,CAAC,CAAC;AACL,CAAC"}