@svp-labs/talos 0.0.0 → 0.1.0

package/dist/checks/supply/settings.js

@@ -0,0 +1,129 @@
+import { readFile } from 'node:fs/promises';
+import { join, posix } from 'node:path';
+import { parse } from 'smol-toml';
+import { z } from 'zod';
+import { dependabotGaps } from './dependabot.js';
+import { lockfiles } from './lockfiles/index.js';
+import { PNPM_GUARDS, pnpmSettingsAt } from './pnpm-settings.js';
+import { DEPENDABOT_PATH, ecosystems } from '../../adopt/dependabot.js';
+import { APPLIES } from '../../core/check.js';
+const RULE = 'supply/setting';
+async function maybeRead(root, path) {
+    try {
+        return await readFile(join(root, path), 'utf8');
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The whole file, so a change to it touches the finding; nothing when it doesn't exist. */
+function wholeFile(path, text) {
+    if (text === undefined)
+        return {};
+    const lines = Math.max(1, text.replace(/\r?\n$/, '').split(/\r?\n/).length);
+    return { location: { file: path, line: 1, endLine: lines } };
+}
+async function pnpmFindings(ctx, lockfile) {
+    const dir = posix.dirname(lockfile);
+    const file = dir === '.' ? 'pnpm-workspace.yaml' : `${dir}/pnpm-workspace.yaml`;
+    const settings = await pnpmSettingsAt(ctx.root, lockfile);
+    const where = wholeFile(file, await maybeRead(ctx.root, file));
+    return PNPM_GUARDS.filter((guard) => !guard.holds(settings)).map((guard) => ({
+        rule: RULE,
+        key: `pnpm ${dir} ${guard.setting}`,
+        message: `${file} must set ${guard.wanted}; without it ${guard.risk}.`,
+        ...where,
+    }));
+}
+const DATE_HOURS = { Y: 365 * 24, M: 30 * 24, W: 7 * 24, D: 24 };
+const TIME_HOURS = { H: 1, M: 1 / 60, S: 1 / 3600 };
+/** One half of a duration (`1W2D` or `12H30M`) in hours; `undefined` when it isn't one. */
+function partHours(part, units) {
+    let hours = 0;
+    let amount = '';
+    for (const char of part) {
+        const per = units[char];
+        if (per === undefined) {
+            if (!/[\d.]/.test(char))
+                return undefined;
+            amount += char;
+            continue;
+        }
+        if (amount === '' || Number.isNaN(Number(amount)))
+            return undefined;
+        hours += Number(amount) * per;
+        amount = '';
+    }
+    return amount === '' ? hours : undefined;
+}
+/** An ISO 8601 duration such as uv's `P1D`, in hours; `undefined` when it isn't one. */
+export function durationHours(span) {
+    if (!span.startsWith('P') || span === 'P' || span.endsWith('T'))
+        return undefined;
+    const [date = '', time = '', extra] = span.slice(1).split('T');
+    if (extra !== undefined)
+        return undefined;
+    const dateHours = partHours(date, DATE_HOURS);
+    const timeHours = partHours(time, TIME_HOURS);
+    return dateHours === undefined || timeHours === undefined ? undefined : dateHours + timeHours;
+}
+const uvOptions = z.looseObject({
+    options: z.looseObject({ 'exclude-newer-span': z.string().optional() }).default({}),
+});
+/** uv records a relative `exclude-newer` in the lockfile's options, as `exclude-newer-span`. */
+export function uvHoldsADay(text) {
+    try {
+        const span = uvOptions.parse(parse(text)).options['exclude-newer-span'];
+        return span !== undefined && (durationHours(span) ?? 0) >= 24;
+    }
+    catch {
+        return false;
+    }
+}
+async function uvFindings(ctx, lockfile) {
+    const text = await maybeRead(ctx.root, lockfile);
+    if (text === undefined || uvHoldsADay(text))
+        return [];
+    return [
+        {
+            rule: RULE,
+            key: `uv ${posix.dirname(lockfile)} exclude-newer`,
+            message: `${lockfile} was resolved without a relative exclude-newer of a day or more; set ` +
+                'exclude-newer = "1 day" under [tool.uv] and lock again.',
+            ...wholeFile(lockfile, text),
+        },
+    ];
+}
+async function dependabotFindings(ctx) {
+    const text = await maybeRead(ctx.root, DEPENDABOT_PATH);
+    const wanted = ecosystems(ctx.config.components, ctx.facts.files);
+    return dependabotGaps(text, wanted).map((gap) => ({
+        rule: RULE,
+        key: gap.key,
+        message: `${DEPENDABOT_PATH} ${gap.message}`,
+        ...wholeFile(DEPENDABOT_PATH, text),
+    }));
+}
+/**
+ * The package manager settings that carry the supply-chain rules where the package manager has
+ * them, and Dependabot's one-day cooldown for every ecosystem the repository has.
+ */
+export function settingsCheck() {
+    return {
+        id: 'supply/settings',
+        tier: 'head',
+        scope: 'repo',
+        title: "the package managers' and Dependabot's supply-chain settings",
+        applies: () => APPLIES,
+        run: async (ctx) => {
+            const files = lockfiles(ctx.facts);
+            const found = await Promise.all([
+                ...files.filter((f) => f.endsWith('pnpm-lock.yaml')).map((f) => pnpmFindings(ctx, f)),
+                ...files.filter((f) => f.endsWith('uv.lock')).map((f) => uvFindings(ctx, f)),
+                dependabotFindings(ctx),
+            ]);
+            return found.flat();
+        },
+    };
+}
+//# sourceMappingURL=settings.js.map

package/dist/checks/supply/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../src/checks/supply/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,OAAO,EAAiC,MAAM,qBAAqB,CAAC;AAG7E,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAE9B,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY;IACjD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,SAAS,SAAS,CAAC,IAAY,EAAE,IAAwB;IACvD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5E,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAiB,EAAE,QAAgB;IAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,GAAG,sBAAsB,CAAC;IAChF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/D,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3E,IAAI,EAAE,IAAI;QACV,GAAG,EAAE,QAAQ,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE;QACnC,OAAO,EAAE,GAAG,IAAI,aAAa,KAAK,CAAC,MAAM,gBAAgB,KAAK,CAAC,IAAI,GAAG;QACtE,GAAG,KAAK;KACT,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,GAAqC,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;AACnG,MAAM,UAAU,GAAqC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;AAEtF,2FAA2F;AAC3F,SAAS,SAAS,CAAC,IAAY,EAAE,KAAuC;IACtE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC1C,MAAM,IAAI,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACpE,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;QAC9B,MAAM,GAAG,EAAE,CAAC;IACd,CAAC;IACD,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9C,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,GAAG,SAAS,CAAC;AAChG,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACpF,CAAC,CAAC;AAEH,gGAAgG;AAChG,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACxE,OAAO,IAAI,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAiB,EAAE,QAAgB;IAC3D,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACvD,OAAO;QACL;YACE,IAAI,EAAE,IAAI;YACV,GAAG,EAAE,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;YAClD,OAAO,EACL,GAAG,QAAQ,uEAAuE;gBAClF,yDAAyD;YAC3D,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC;SAC7B;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,GAAiB;IACjD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClE,OAAO,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,EAAE,IAAI;QACV,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,OAAO,EAAE,GAAG,eAAe,IAAI,GAAG,CAAC,OAAO,EAAE;QAC5C,GAAG,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC;KACpC,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,8DAA8D;QACrE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO;QACtB,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACjB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC9B,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACrF,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC5E,kBAAkB,CAAC,GAAG,CAAC;aACxB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/adopt.js

@@ -0,0 +1,269 @@
+import { readFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { RUN_FLAGS, targetRepository } from './govern.js';
+import { parse, UsageError } from './io.js';
+import { loadAdoptAssets } from '../adopt/assets.js';
+import { AdoptRefusal } from '../adopt/config.js';
+import { applyPlan, checkoutClaim, commitPaths, isClean, pushBranch, readTree, } from '../adopt/local.js';
+import { adoptPlan, executablePaths, touchedPaths, } from '../adopt/plan.js';
+import { openBootstrapPull, startAdoption } from '../adopt/remote.js';
+import { bootstrapSubject } from '../adopt/texts.js';
+import { PACKS } from '../core/registry.js';
+import { exec as realExec } from '../exec/exec.js';
+import { github, GitHubError, tokenFromEnvironment, } from '../github/api.js';
+import { identities } from '../github/identities.js';
+import { prefixesInUse } from '../govern/create.js';
+import { capped, clip } from '../govern/output.js';
+import { branchFor } from '../ticket/claim.js';
+import { ownVersion } from '../version/self.js';
+const USAGE = 'usage: talos adopt [plan|start|files|pr] [--repo owner/name] [--name <Name>] [--prefix <P>] ' +
+    '[--os [<lang>[@<root>]=]<os>,...] [--brief <file>] [--issue <N>] [--agent <id>] [--json]';
+const SCHEMA = 'talos.adopt/1';
+const LANGS = ['ts', 'py', 'php', 'lua', 'rust'];
+const OSES = ['linux', 'windows', 'macos'];
+function isLang(value) {
+    return LANGS.includes(value);
+}
+function isOs(value) {
+    return OSES.includes(value);
+}
+/** `--os linux,windows`, `--os rust=linux,windows` or `--os rust@apps/desktop=linux,windows`. */
+export function parseOs(specs) {
+    return specs.map((spec) => {
+        const match = /^(?:([a-z]+)(?:@([^=]+))?=)?([a-z,]+)$/.exec(spec);
+        const os = (match?.[3] ?? '').split(',');
+        const lang = match?.[1];
+        if (match === null || !os.every(isOs) || (lang !== undefined && !isLang(lang))) {
+            throw new UsageError(`--os ${spec}: [<lang>[@<root>]=]<os>,... with os linux, windows, macos`);
+        }
+        return {
+            ...(lang === undefined ? {} : { lang }),
+            ...(match[2] === undefined ? {} : { root: match[2] }),
+            os,
+        };
+    });
+}
+function issueOf(value) {
+    if (value === undefined || !/^[1-9]\d{0,8}$/.test(value)) {
+        throw new UsageError('--issue <N> is required: the bootstrap issue `talos adopt start` filed');
+    }
+    return Number(value);
+}
+async function planHere(session, args, prefixes) {
+    const tree = await readTree(session.io.cwd, session.run);
+    const brief = args.brief === undefined
+        ? undefined
+        : { fileName: args.brief, text: await readFile(resolve(session.io.cwd, args.brief), 'utf8') };
+    const input = {
+        repo: session.repo,
+        files: tree.files,
+        read: tree.read,
+        name: args.name,
+        prefix: args.prefix,
+        os: args.os,
+        brief,
+        now: session.now,
+        version: ownVersion(),
+        packs: session.deps.packs ?? PACKS,
+        assets: await (session.deps.assets ?? loadAdoptAssets)(),
+        prefixesInUse: prefixes,
+    };
+    return adoptPlan(input);
+}
+function planJson(plan) {
+    return {
+        name: plan.config.name,
+        prefix: plan.config.prefix,
+        talosYml: plan.talosYml,
+        components: capped(plan.config.components),
+        scaffold: plan.scaffold,
+        brief: plan.brief ?? null,
+        write: capped(plan.write.map((f) => ({ path: f.path, why: f.why }))),
+        delete: capped(plan.delete),
+        next: capped(plan.next.map((step) => clip(step))),
+    };
+}
+async function client(session) {
+    return github(await tokenFromEnvironment(session.io.env), session.deps);
+}
+/**
+ * The prefixes the organisation's other repositories use, as `talos new` reads them; `undefined`
+ * when the token can't read the organisation, and then the prefix goes unchecked.
+ */
+async function orgPrefixes(session) {
+    const org = session.repo.split('/')[0] ?? session.repo;
+    try {
+        return await prefixesInUse(await client(session), org);
+    }
+    catch (error) {
+        if (error instanceof GitHubError && [401, 403, 404].includes(error.status))
+            return undefined;
+        throw error;
+    }
+}
+function bootstrapText(plan) {
+    return { name: plan.config.name, brief: plan.brief, scaffold: plan.scaffold };
+}
+async function start(session, plan, agent) {
+    return startAdoption(await client(session), session.repo, identities(session.io.env), {
+        ...bootstrapText(plan),
+        prefix: plan.config.prefix,
+        agent,
+        now: session.now,
+    });
+}
+async function openPull(session, plan, issue) {
+    return openBootstrapPull(await client(session), session.repo, {
+        ...bootstrapText(plan),
+        prefix: plan.config.prefix,
+        issue,
+    });
+}
+function commitSteps(plan, issue) {
+    const branch = branchFor(plan.config.prefix, issue);
+    const executable = executablePaths(plan);
+    const chmod = executable.length === 0 ? '' : ` && git update-index --chmod=+x -- ${executable.join(' ')}`;
+    const subject = bootstrapSubject(plan.config.prefix, issue, plan.config.name);
+    return [
+        `git add -A${chmod} && git commit -m "${subject}"`,
+        `git push origin ${branch}`,
+        `talos adopt pr --issue ${issue}`,
+    ];
+}
+/**
+ * Every step at once, for a person in a clean clone. It stops before committing when a lock file
+ * must be refreshed first, and says how.
+ */
+async function everything(session, args, agent) {
+    if (!(await isClean(session.io.cwd, session.run))) {
+        throw new AdoptRefusal('the working tree has changes: commit or stash them first');
+    }
+    const prefixes = await orgPrefixes(session);
+    const started = await start(session, await planHere(session, args, prefixes), agent);
+    await checkoutClaim(session.io.cwd, session.run, started.branch);
+    const plan = await planHere(session, args, prefixes);
+    await applyPlan(session.io.cwd, plan);
+    const base = {
+        step: 'adopt',
+        ...started,
+        ...planJson(plan),
+        prefixChecked: prefixes !== undefined,
+    };
+    if (plan.next.length > 0) {
+        const next = [...plan.next, ...commitSteps(plan, started.issue)];
+        return { ...base, done: false, next: capped(next.map((s) => clip(s))) };
+    }
+    const subject = bootstrapSubject(plan.config.prefix, started.issue, plan.config.name);
+    const staging = { paths: touchedPaths(plan), executable: executablePaths(plan) };
+    await commitPaths(session.io.cwd, session.run, staging, subject);
+    await pushBranch(session.io.cwd, session.run, started.branch);
+    const pull = await openPull(session, plan, started.issue);
+    return { ...base, done: true, ...pull };
+}
+async function dispatch(sub, session, args, values) {
+    const agent = values.agent ?? identities(session.io.env).owner;
+    switch (sub) {
+        case 'plan': {
+            return { step: 'plan', ...planJson(await planHere(session, args)) };
+        }
+        case 'start': {
+            const prefixes = await orgPrefixes(session);
+            const plan = await planHere(session, args, prefixes);
+            return {
+                step: 'start',
+                ...(await start(session, plan, agent)),
+                prefixChecked: prefixes !== undefined,
+            };
+        }
+        case 'files': {
+            const issue = issueOf(values.issue);
+            const plan = await planHere(session, args);
+            await applyPlan(session.io.cwd, plan);
+            const next = [...plan.next, ...commitSteps(plan, issue)].map((s) => clip(s));
+            return {
+                step: 'files',
+                issue,
+                branch: branchFor(plan.config.prefix, issue),
+                ...planJson(plan),
+                next: capped(next),
+            };
+        }
+        case 'pr': {
+            const issue = issueOf(values.issue);
+            return {
+                step: 'pr',
+                issue,
+                ...(await openPull(session, await planHere(session, args), issue)),
+            };
+        }
+        case undefined: {
+            return everything(session, args, agent);
+        }
+        default: {
+            throw new UsageError(USAGE);
+        }
+    }
+}
+function text(output) {
+    return `${Object.entries(output)
+        .map(([key, value]) => `${key}: ${typeof value === 'string' ? value : JSON.stringify(value)}`)
+        .join('\n')}\n`;
+}
+/** `talos adopt` with a GitHub client, assets and packs of the caller's choosing (tests). */
+export function adoptWith(deps) {
+    return async (argv, io) => {
+        const { values, positionals } = parse(argv, {
+            repo: { type: 'string' },
+            name: { type: 'string' },
+            prefix: { type: 'string' },
+            os: { type: 'string', multiple: true, default: [] },
+            brief: { type: 'string' },
+            issue: { type: 'string' },
+            agent: { type: 'string' },
+            ...RUN_FLAGS,
+        }, true);
+        if (positionals.length > 1)
+            throw new UsageError(USAGE);
+        const sub = values['dry-run'] ? 'plan' : positionals[0];
+        const args = {
+            repo: values.repo,
+            name: values.name,
+            prefix: values.prefix,
+            os: parseOs(values.os),
+            brief: values.brief,
+        };
+        const repo = await targetRepository(values.repo, io);
+        const session = {
+            io,
+            deps,
+            run: deps.exec ?? realExec,
+            now: (deps.now ?? (() => new Date()))(),
+            repo,
+        };
+        try {
+            const output = {
+                schema: SCHEMA,
+                repo,
+                ...(await dispatch(sub, session, args, { issue: values.issue, agent: values.agent })),
+            };
+            io.out(values.json ? `${JSON.stringify(output)}\n` : text(output));
+            return 0;
+        }
+        catch (error) {
+            if (!(error instanceof AdoptRefusal))
+                throw error;
+            io.err(`talos adopt: ${error.message}\n`);
+            return 1;
+        }
+    };
+}
+/**
+ * `talos adopt`: brings a repository's files under Talos, and touches no setting, so Thea's App
+ * can run it. `plan` (or `--dry-run`) prints what it would do; `start` refuses a prefix another
+ * repository of the organisation uses, labels the repository, marks the old backlog `legacy`
+ * and files and claims the bootstrap issue; `files` writes the working tree (no token needed);
+ * `pr` opens the bootstrap PR. Without a step it does them all, stopping before the commit when
+ * lock files must be refreshed first.
+ */
+export const adopt = adoptWith({});
+//# sourceMappingURL=adopt.js.map

package/dist/cli/adopt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adopt.js","sourceRoot":"","sources":["../../src/cli/adopt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAyB,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EACL,SAAS,EACT,aAAa,EACb,WAAW,EACX,OAAO,EACP,UAAU,EACV,QAAQ,GACT,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAIL,SAAS,EACT,eAAe,EACf,YAAY,GACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAa,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EACL,MAAM,EAEN,WAAW,EAEX,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAkB,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,MAAM,KAAK,GACT,8FAA8F;IAC9F,0FAA0F,CAAC;AAE7F,MAAM,MAAM,GAAG,eAAe,CAAC;AAC/B,MAAM,KAAK,GAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACpE,MAAM,IAAI,GAAsB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAE9D,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,OAAO,CAAC,KAAwB;IAC9C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,MAAM,KAAK,GAAG,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,UAAU,CAClB,QAAQ,IAAI,4DAA4D,CACzE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,EAAE;SACH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,KAAyB;IACxC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,UAAU,CAAC,wEAAwE,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AA4BD,KAAK,UAAU,QAAQ,CAAC,OAAgB,EAAE,IAAU,EAAE,QAAmB;IACvE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,KAAK,SAAS;QACtB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;IAClG,MAAM,KAAK,GAAe;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,UAAU,EAAE;QACrB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK;QAClC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,EAAE;QACxD,aAAa,EAAE,QAAQ;KACxB,CAAC;IACF,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAe;IAC/B,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;QACtB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;QAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;QACzB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,OAAgB;IACpC,OAAO,MAAM,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,OAAgB;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7F,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAe;IAKpC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,OAAgB,EAAE,IAAe,EAAE,KAAa;IACnE,OAAO,aAAa,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE;QACpF,GAAG,aAAa,CAAC,IAAI,CAAC;QACtB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;QAC1B,KAAK;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAgB,EAAE,IAAe,EAAE,KAAa;IACtE,OAAO,iBAAiB,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE;QAC5D,GAAG,aAAa,CAAC,IAAI,CAAC;QACtB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;QAC1B,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,IAAe,EAAE,KAAa;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,KAAK,GACT,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sCAAsC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9F,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9E,OAAO;QACL,aAAa,KAAK,sBAAsB,OAAO,GAAG;QAClD,mBAAmB,MAAM,EAAE;QAC3B,0BAA0B,KAAK,EAAE;KAClC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,UAAU,CAAC,OAAgB,EAAE,IAAU,EAAE,KAAa;IACnE,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,YAAY,CAAC,0DAA0D,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACrF,MAAM,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,OAAO;QACb,GAAG,OAAO;QACV,GAAG,QAAQ,CAAC,IAAI,CAAC;QACjB,aAAa,EAAE,QAAQ,KAAK,SAAS;KACtC,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;IACjF,MAAM,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;AAC1C,CAAC;AAOD,KAAK,UAAU,QAAQ,CAAC,GAAuB,EAAE,OAAgB,EAAE,IAAU,EAAE,MAAc;IAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IAC/D,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACtE,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YACrD,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBACtC,aAAa,EAAE,QAAQ,KAAK,SAAS;aACtC,CAAC;QACJ,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC3C,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK;gBACL,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;gBAC5C,GAAG,QAAQ,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;aACnB,CAAC;QACJ,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,KAAK;gBACL,GAAG,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;aACnE,CAAC;QACJ,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,MAA+B;IAC3C,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;SAC7F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,SAAS,CAAC,IAAe;IACvC,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;QACxB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CACnC,IAAI,EACJ;YACE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;YACnD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,GAAG,SAAS;SACb,EACD,IAAI,CACL,CAAC;QACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,IAAI,GAAS;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,OAAO,GAAY;YACvB,EAAE;YACF,IAAI;YACJ,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ;YAC1B,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE;YACvC,IAAI;SACL,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG;gBACb,MAAM,EAAE,MAAM;gBACd,IAAI;gBACJ,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;aACtF,CAAC;YACF,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACnE,OAAO,CAAC,CAAC;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC;gBAAE,MAAM,KAAK,CAAC;YAClD,EAAE,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,KAAK,GAAY,SAAS,CAAC,EAAE,CAAC,CAAC"}

package/dist/cli/central.js

@@ -0,0 +1,201 @@
+import { appendFile } from 'node:fs/promises';
+import { parse, UsageError } from './io.js';
+import { runChannels } from '../central/channels-job.js';
+import { dispatchAllowed } from '../central/channels.js';
+import { expectedFromAssets, runChannelsFileDrift, runDrift } from '../central/drift-job.js';
+import { pickRepositories } from '../central/pick.js';
+import { maskNames, runPrivacy } from '../central/privacy.js';
+import { runtimeAssessor } from '../central/runtime-port.js';
+import { runSweep } from '../central/sweep-job.js';
+import { github } from '../github/api.js';
+import { downloader } from '../github/artifacts.js';
+import { identities } from '../github/identities.js';
+import { lookupMode } from '../version/pin.js';
+/** The version of the one JSON line `talos central` prints. */
+export const CENTRAL_SCHEMA = 'talos.central/1';
+const JOBS = ['channels', 'sweep', 'drift', 'privacy', 'pick'];
+/**
+ * What a failed job prints instead of its error: messages from git and the API name
+ * repositories, and these jobs run in a public repository.
+ */
+const GENERIC = {
+    channels: 'the channel job could not finish',
+    sweep: 'the runtime sweep could not finish',
+    drift: 'the drift report could not finish',
+    privacy: 'the privacy self-test could not finish',
+    pick: 'the repository lookup could not finish',
+};
+function jobOf(name) {
+    const job = JOBS.find((j) => j === name);
+    if (job === undefined)
+        throw new UsageError(`usage: talos central <${JOBS.join('|')}> [--json]`);
+    return job;
+}
+function token(env, name) {
+    const value = env[name];
+    if (value === undefined || value === '')
+        throw new UsageError(`${name} is not set`);
+    return value;
+}
+function optionalToken(env, name) {
+    const value = env[name];
+    return value === undefined || value === '' ? undefined : value;
+}
+function optionalGitHub(env, name, options) {
+    const value = optionalToken(env, name);
+    return value === undefined ? undefined : github(value, options);
+}
+async function channels(env, options) {
+    const who = identities(env);
+    const urgent = env.GITHUB_EVENT_NAME === 'workflow_dispatch';
+    const actors = { actor: env.GITHUB_ACTOR, triggering: env.GITHUB_TRIGGERING_ACTOR };
+    if (urgent && !dispatchAllowed(actors, who.owner)) {
+        return { ok: false, report: { refused: 'only the owner may dispatch the urgent promotion' } };
+    }
+    const mirror = lookupMode(env) === 'channels';
+    const report = await runChannels({
+        talos: github(token(env, 'GITHUB_TOKEN'), options),
+        release: github(token(env, 'TALOS_RELEASE_TOKEN'), options),
+        canary: optionalGitHub(env, 'TALOS_CANARY_TOKEN', options),
+        mirror: mirror ? github(token(env, 'TALOS_MIRROR_TOKEN'), options) : undefined,
+        who,
+        now: options.now?.() ?? new Date(),
+        urgent,
+    });
+    return { ok: report.missing === 0, report };
+}
+async function sweep(env, options) {
+    const report = await runSweep({
+        gh: github(token(env, 'TALOS_REVIEWER_TOKEN'), options),
+        who: identities(env),
+        assess: options.assess ?? runtimeAssessor(),
+    });
+    return { ok: report.errors === 0 && report.skipped === 0, report };
+}
+async function drift(env, options, flags) {
+    const who = identities(env);
+    const release = github(token(env, 'TALOS_RELEASE_TOKEN'), options);
+    const reviewer = github(token(env, 'TALOS_REVIEWER_TOKEN'), options);
+    const report = flags.channelsFile
+        ? await runChannelsFileDrift({ release, reviewer, who })
+        : await runDrift({ release, reviewer, who, expected: await expectedFromAssets(who.owner) });
+    return { ok: true, report };
+}
+/** What both privacy steps read: the organisation's names, and the canary's digest. */
+function privacyNames(io, options) {
+    const { env } = io;
+    return {
+        properties: github(token(env, 'TALOS_PROPERTIES_TOKEN'), options),
+        org: identities(env).org,
+        out: (text) => {
+            io.out(text);
+        },
+        canary: optionalToken(env, 'TALOS_PRIVACY_CANARY_SHA256')?.toLowerCase(),
+    };
+}
+/** `--mask`: masks every name and hands the canary's bare name to the job's later steps. */
+async function privacyMask(io, options) {
+    const target = token(io.env, 'GITHUB_OUTPUT');
+    const report = await maskNames({
+        ...privacyNames(io, options),
+        current: token(io.env, 'GITHUB_REPOSITORY'),
+        output: (key, value) => appendFile(target, `${key}=${value}\n`),
+    });
+    // The search in the last step decides; this step only prepares it.
+    return { ok: true, report };
+}
+async function privacy(io, options) {
+    const { env } = io;
+    const apps = ['TALOS_REVIEWER_TOKEN', 'TALOS_RELEASE_TOKEN'].flatMap((name) => {
+        const gh = optionalGitHub(env, name, options);
+        return gh === undefined ? [] : [gh];
+    });
+    const workflow = token(env, 'GITHUB_TOKEN');
+    const report = await runPrivacy({
+        ...privacyNames(io, options),
+        apps,
+        actions: github(workflow, options),
+        download: downloader(workflow, options),
+        run: {
+            repo: token(env, 'GITHUB_REPOSITORY'),
+            id: token(env, 'GITHUB_RUN_ID'),
+            attempt: env.GITHUB_RUN_ATTEMPT ?? '1',
+            self: env.TALOS_PRIVACY_JOB ?? 'privacy',
+        },
+    });
+    // Without the canary watched, a clean search proves nothing: it may have watched no private name.
+    return { ok: report.leaks === 0 && report.canary === true, report };
+}
+/**
+ * `pick`: masks the repositories a matrix job reads, the one its index names (`TALOS_INDEX`) or
+ * every one on `--channel`, then hands their bare names to the job's later steps.
+ */
+async function pick(io, options, flags) {
+    const { env } = io;
+    const target = token(env, 'GITHUB_OUTPUT');
+    const report = await pickRepositories({
+        properties: github(token(env, 'TALOS_PROPERTIES_TOKEN'), options),
+        org: identities(env).org,
+        index: env.TALOS_INDEX,
+        channel: flags.channel,
+        out: (text) => {
+            io.out(text);
+        },
+        output: (key, value) => appendFile(target, `${key}=${value}\n`),
+    });
+    return { ok: true, report };
+}
+function run(job, io, options, flags) {
+    switch (job) {
+        case 'channels':
+            return channels(io.env, options);
+        case 'sweep':
+            return sweep(io.env, options);
+        case 'drift':
+            return drift(io.env, options, flags);
+        case 'privacy':
+            return flags.mask ? privacyMask(io, options) : privacy(io, options);
+        case 'pick':
+            return pick(io, options, flags);
+    }
+}
+/** `talos central` with the GitHub client and runtime assessor of the caller's choosing (tests). */
+export function centralWith(options) {
+    return async (argv, io) => {
+        const { values, positionals } = parse(argv, {
+            json: { type: 'boolean', default: false },
+            'channels-file': { type: 'boolean', default: false },
+            mask: { type: 'boolean', default: false },
+            channel: { type: 'string' },
+        }, true);
+        const job = jobOf(positionals[0]);
+        const print = (line) => {
+            io.out(`${JSON.stringify({ schema: CENTRAL_SCHEMA, job, ...line })}\n`);
+        };
+        try {
+            const flags = {
+                channelsFile: values['channels-file'],
+                mask: values.mask,
+                channel: values.channel,
+            };
+            const outcome = await run(job, io, options, flags);
+            print({ ok: outcome.ok, ...outcome.report });
+            return outcome.ok ? 0 : 1;
+        }
+        catch (error) {
+            if (error instanceof UsageError)
+                throw error;
+            print({ ok: false, error: GENERIC[job] });
+            return 1;
+        }
+    };
+}
+/**
+ * `talos central <channels|sweep|drift|privacy|pick>`: the central jobs Talos's own workflows
+ * run. Each prints one JSON line (`talos.central/1`) of counts, Talos's own release tags at most,
+ * and never a repository's name, a path or a finding: these runs are public. `privacy --mask` is
+ * the privacy job's first step, which masks every name before the canary's tokens are minted;
+ * `pick` is how every other job learns the repositories it reads, masked before its tokens are.
+ */
+export const central = centralWith({});
+//# sourceMappingURL=central.js.map

package/dist/cli/central.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"central.js","sourceRoot":"","sources":["../../src/cli/central.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAyB,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAC7F,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAqB,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,eAAe,EAAwB,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAmC,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEhD,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAGxE;;;GAGG;AACH,MAAM,OAAO,GAAkC;IAC7C,QAAQ,EAAE,kCAAkC;IAC5C,KAAK,EAAE,oCAAoC;IAC3C,KAAK,EAAE,mCAAmC;IAC1C,OAAO,EAAE,wCAAwC;IACjD,IAAI,EAAE,wCAAwC;CAC/C,CAAC;AAiBF,SAAS,KAAK,CAAC,IAAwB;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACzC,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACjG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,KAAK,CAAC,GAAQ,EAAE,IAAY;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;IACpF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,GAAQ,EAAE,IAAY;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AACjE,CAAC;AAED,SAAS,cAAc,CAAC,GAAQ,EAAE,IAAY,EAAE,OAAuB;IACrE,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACvC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAQ,EAAE,OAAuB;IACvD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,iBAAiB,KAAK,mBAAmB,CAAC;IAC7D,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,CAAC,uBAAuB,EAAE,CAAC;IACpF,IAAI,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,EAAE,CAAC;IAChG,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC;QAClD,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,OAAO,CAAC;QAC3D,MAAM,EAAE,cAAc,CAAC,GAAG,EAAE,oBAAoB,EAAE,OAAO,CAAC;QAC1D,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC9E,GAAG;QACH,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE;QAClC,MAAM;KACP,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,GAAQ,EAAE,OAAuB;IACpD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;QAC5B,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACvD,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,eAAe,EAAE;KAC5C,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,GAAQ,EAAE,OAAuB,EAAE,KAAY;IAClE,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,OAAO,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY;QAC/B,CAAC,CAAC,MAAM,oBAAoB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QACxD,CAAC,CAAC,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,uFAAuF;AACvF,SAAS,YAAY,CAAC,EAAM,EAAE,OAAuB;IACnD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACnB,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC,EAAE,OAAO,CAAC;QACjE,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG;QACxB,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE;YACpB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QACD,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,6BAA6B,CAAC,EAAE,WAAW,EAAE;KACzE,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,KAAK,UAAU,WAAW,CAAC,EAAM,EAAE,OAAuB;IACxD,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;QAC7B,GAAG,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC;QAC5B,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,mBAAmB,CAAC;QAC3C,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,KAAK,IAAI,CAAC;KAChE,CAAC,CAAC;IACH,mEAAmE;IACnE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,EAAM,EAAE,OAAuB;IACpD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC5E,MAAM,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;QAC9B,GAAG,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC;QAC5B,IAAI;QACJ,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC;QAClC,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC;QACvC,GAAG,EAAE;YACH,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,mBAAmB,CAAC;YACrC,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC;YAC/B,OAAO,EAAE,GAAG,CAAC,kBAAkB,IAAI,GAAG;YACtC,IAAI,EAAE,GAAG,CAAC,iBAAiB,IAAI,SAAS;SACzC;KACF,CAAC,CAAC;IACH,kGAAkG;IAClG,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,MAAM,EAAE,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,IAAI,CAAC,EAAM,EAAE,OAAuB,EAAE,KAAY;IAC/D,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACnB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;QACpC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC,EAAE,OAAO,CAAC;QACjE,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG;QACxB,KAAK,EAAE,GAAG,CAAC,WAAW;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE;YACpB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QACD,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,KAAK,IAAI,CAAC;KAChE,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,GAAG,CAAC,GAAQ,EAAE,EAAM,EAAE,OAAuB,EAAE,KAAY;IAClE,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,UAAU;YACb,OAAO,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnC,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACvC,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACtE,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,WAAW,CAAC,OAAuB;IACjD,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;QACxB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CACnC,IAAI,EACJ;YACE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YACzC,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YACpD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YACzC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC5B,EACD,IAAI,CACL,CAAC;QACF,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,CAAC,IAA6B,EAAQ,EAAE;YACpD,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1E,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG;gBACZ,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC;gBACrC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACnD,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7C,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,UAAU;gBAAE,MAAM,KAAK,CAAC;YAC7C,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAY,WAAW,CAAC,EAAE,CAAC,CAAC"}