@theford/runly 0.0.0-stage → 0.20.0

package/dist/core/version.d.ts

@@ -0,0 +1,39 @@
+export declare const VERSION: string;
+export declare const BUILD: string;
+/** True only when both builds are known and differ — a same-version rebuild or reinstall. */
+export declare function rebuiltSince(cliBuild: string, daemonBuild: string | undefined): boolean;
+/**
+ * Order two versions, or return undefined when they cannot be ordered.
+ *
+ * Deliberately not a full semver implementation: the only question asked of it
+ * is "is the daemon behind or ahead of this CLI", and the answer drives a
+ * message plus a refusal, never an install decision. A prerelease suffix makes
+ * two versions UNORDERED rather than guessing at precedence — a wrong guess
+ * would let `update` silently downgrade a daemon.
+ */
+export declare function compareVersions(a: string, b: string): number | undefined;
+export type SkewDirection = 'daemon-older' | 'daemon-newer' | 'daemon-unversioned' | 'unordered';
+export interface VersionSkew {
+    cli: string;
+    daemon: string;
+    direction: SkewDirection;
+    /** Human sentence, ending in the remedy. Reused verbatim by CLI and doctor. */
+    message: string;
+}
+/**
+ * Compare this CLI against the daemon actually answering on the socket.
+ *
+ * This exists because `ensureDaemon` spawns the daemon from the CLI's own
+ * `dist/`, which means an upgrade replaces both files but does NOT replace the
+ * RUNNING daemon — it keeps serving old code for as long as it lives, and the
+ * socket carries no version. An old daemon does not reject arguments it has
+ * never heard of, it ignores them: a 0.8.0 daemon asked for `up --data-only`
+ * boots the whole application instead, and the caller is told nothing. That is
+ * the same failure shape as issue #41 — a wrong result that reads as a bug in
+ * a different subsystem — which is why skew is refused rather than warned
+ * about.
+ *
+ * `daemon` is undefined when the daemon predates version reporting (<= 0.8.0),
+ * which is itself proof of skew for any build that has this function.
+ */
+export declare function versionSkew(cli: string, daemon: string | undefined): VersionSkew | null;

package/dist/core/version.js

@@ -0,0 +1,144 @@
+/**
+ * The one place that knows what version this build is, and the only comparison
+ * of a CLI against the daemon it is talking to.
+ *
+ * Read from package.json rather than baked into a constant: the MCP adapter
+ * carried a hand-maintained version that drifted (0.4.0 while the package
+ * shipped 0.5.0), so clients were told the wrong version of the tool they were
+ * driving. One path serves both installs — the npm tarball ships package.json
+ * beside `dist/`, and a git checkout has it at the same relative position.
+ */
+import { readFileSync, statSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+function readVersion() {
+    // A test cannot provoke version skew from a single build any other way: the
+    // CLI spawns the daemon from its OWN dist, so both sides always agree. This
+    // lets a test stand up a daemon that CLAIMS a different version than the CLI
+    // driving it. Never set it in real use.
+    const fake = process.env.BACKLOT_FAKE_VERSION;
+    if (fake)
+        return fake;
+    try {
+        const pkg = join(dirname(fileURLToPath(import.meta.url)), '..', '..', 'package.json');
+        const v = JSON.parse(readFileSync(pkg, 'utf8')).version;
+        if (typeof v === 'string' && v !== '')
+            return v;
+    }
+    catch {
+        /* fall through — see below */
+    }
+    // A build whose package.json is missing or unreadable still has to work: the
+    // version is a diagnostic, and failing every verb over an unreadable
+    // diagnostic would be worse than not knowing. `doctor` reports the gap, and
+    // an unknown version never counts as skew (it cannot be compared, and
+    // refusing on "I don't know" would wedge such an install completely).
+    return 'unknown';
+}
+export const VERSION = readVersion();
+/**
+ * Which BUILD of this version is running — the modification time of this very
+ * module, as the process saw it when it loaded.
+ *
+ * The version alone cannot tell a rebuilt checkout from the build it replaced:
+ * `git pull && npm run build` on a checkout install keeps package.json at the
+ * same version while every file under dist/ changes, so `runly update` used to
+ * report "already runly 0.12.0 — nothing to do" and leave the old code serving.
+ * The daemon reads this once at start and keeps it; the CLI reads it fresh, so
+ * any rebuild or reinstall since the daemon started shows up as a difference.
+ * `unknown` (unreadable) never counts as a difference, for the same reason an
+ * unknown version never counts as skew.
+ */
+function readBuild() {
+    const fake = process.env.BACKLOT_FAKE_BUILD;
+    if (fake)
+        return fake;
+    try {
+        return String(Math.trunc(statSync(fileURLToPath(import.meta.url)).mtimeMs));
+    }
+    catch {
+        return 'unknown';
+    }
+}
+export const BUILD = readBuild();
+/** True only when both builds are known and differ — a same-version rebuild or reinstall. */
+export function rebuiltSince(cliBuild, daemonBuild) {
+    if (daemonBuild === undefined || daemonBuild === 'unknown' || cliBuild === 'unknown')
+        return false;
+    return cliBuild !== daemonBuild;
+}
+/**
+ * Order two versions, or return undefined when they cannot be ordered.
+ *
+ * Deliberately not a full semver implementation: the only question asked of it
+ * is "is the daemon behind or ahead of this CLI", and the answer drives a
+ * message plus a refusal, never an install decision. A prerelease suffix makes
+ * two versions UNORDERED rather than guessing at precedence — a wrong guess
+ * would let `update` silently downgrade a daemon.
+ */
+export function compareVersions(a, b) {
+    if (a === b)
+        return 0;
+    if (a === 'unknown' || b === 'unknown')
+        return undefined;
+    const parse = (v) => {
+        const m = /^(\d+)\.(\d+)\.(\d+)(.*)$/.exec(v.trim());
+        if (!m)
+            return undefined;
+        return { nums: [Number(m[1]), Number(m[2]), Number(m[3])], suffix: m[4] ?? '' };
+    };
+    const pa = parse(a);
+    const pb = parse(b);
+    if (!pa || !pb)
+        return undefined;
+    for (let i = 0; i < 3; i++) {
+        if (pa.nums[i] !== pb.nums[i])
+            return pa.nums[i] < pb.nums[i] ? -1 : 1;
+    }
+    // Same release numbers, different text (a prerelease against its release, or
+    // two prereleases): different builds, no defensible order.
+    return undefined;
+}
+/**
+ * Compare this CLI against the daemon actually answering on the socket.
+ *
+ * This exists because `ensureDaemon` spawns the daemon from the CLI's own
+ * `dist/`, which means an upgrade replaces both files but does NOT replace the
+ * RUNNING daemon — it keeps serving old code for as long as it lives, and the
+ * socket carries no version. An old daemon does not reject arguments it has
+ * never heard of, it ignores them: a 0.8.0 daemon asked for `up --data-only`
+ * boots the whole application instead, and the caller is told nothing. That is
+ * the same failure shape as issue #41 — a wrong result that reads as a bug in
+ * a different subsystem — which is why skew is refused rather than warned
+ * about.
+ *
+ * `daemon` is undefined when the daemon predates version reporting (<= 0.8.0),
+ * which is itself proof of skew for any build that has this function.
+ */
+export function versionSkew(cli, daemon) {
+    if (daemon === undefined) {
+        return {
+            cli,
+            daemon: 'pre-0.9.0',
+            direction: 'daemon-unversioned',
+            message: `the running daemon predates version reporting (runly <= 0.8.0) while this CLI is ${cli} — ` +
+                `it would serve your request with the old code, silently ignoring anything this version added. ` +
+                `Run 'runly update' to restart the daemon onto the installed version.`,
+        };
+    }
+    if (daemon === cli)
+        return null;
+    const order = compareVersions(daemon, cli);
+    const direction = order === undefined ? 'unordered' : order < 0 ? 'daemon-older' : 'daemon-newer';
+    const tail = direction === 'daemon-newer'
+        ? `You are running an OLDER CLI than the daemon; 'runly update' would DOWNGRADE it, so it refuses without --force. ` +
+            `Prefer invoking the newer CLI, or upgrade this one.`
+        : `Run 'runly update' to restart the daemon onto the installed version.`;
+    return {
+        cli,
+        daemon,
+        direction,
+        message: `the running daemon is runly ${daemon} but this CLI is ${cli} — it would serve your request with the other build's code. ${tail}`,
+    };
+}
+//# sourceMappingURL=version.js.map

package/dist/core/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/core/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,SAAS,WAAW;IAClB,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,wCAAwC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC9C,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACtF,MAAM,CAAC,GAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAA2B,CAAC,OAAO,CAAC;QACnF,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IACD,6EAA6E;IAC7E,qEAAqE;IACrE,4EAA4E;IAC5E,sEAAsE;IACtE,sEAAsE;IACtE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAW,WAAW,EAAE,CAAC;AAE7C;;;;;;;;;;;;GAYG;AACH,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC5C,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAW,SAAS,EAAE,CAAC;AAEzC,6FAA6F;AAC7F,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,WAA+B;IAC5E,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACnG,OAAO,QAAQ,KAAK,WAAW,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAkD,EAAE;QAC1E,MAAM,CAAC,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAClF,CAAC,CAAC;IACF,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE;YAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,6EAA6E;IAC7E,2DAA2D;IAC3D,OAAO,SAAS,CAAC;AACnB,CAAC;AAYD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,MAA0B;IACjE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;YACL,GAAG;YACH,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,oBAAoB;YAC/B,OAAO,EACL,oFAAoF,GAAG,KAAK;gBAC5F,gGAAgG;gBAChG,sEAAsE;SACzE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAkB,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC;IACjH,MAAM,IAAI,GACR,SAAS,KAAK,cAAc;QAC1B,CAAC,CAAC,kHAAkH;YAClH,qDAAqD;QACvD,CAAC,CAAC,sEAAsE,CAAC;IAC7E,OAAO;QACL,GAAG;QACH,MAAM;QACN,SAAS;QACT,OAAO,EAAE,+BAA+B,MAAM,oBAAoB,GAAG,+DAA+D,IAAI,EAAE;KAC3I,CAAC;AACJ,CAAC"}

package/dist/core/worktree.d.ts

@@ -0,0 +1,51 @@
+import type { Manifest } from './manifest.js';
+/**
+ * The literal directory (or file) each glob can only match under, as git
+ * pathspecs — or null when one of them can match anywhere (a bare name, a
+ * leading `**`), so the whole worktree has to be listed.
+ */
+export declare function globPathspecs(globs: string[]): string[] | null;
+/**
+ * The worktree's files that match `only` (globs relative to the stack root),
+ * or all of them when `only` is omitted.
+ *
+ * The listing is git's (one `ls-files`, limited to the globs' literal
+ * prefixes); the globs are applied BEFORE anything is stat'ed, so a bind
+ * whose upkeep rules name a lockfile and a migrations folder touches those
+ * files and nothing else of a 35k-file worktree.
+ *
+ * A submodule appears in ls-files only as its gitlink path, which stats as a
+ * directory, so a CHECKED-OUT submodule is enumerated recursively — a trigger
+ * inside it must fire like any other. An uninitialised submodule is an empty
+ * directory and contributes nothing. A repository without a .gitmodules has
+ * no gitlinks, and the second listing is skipped.
+ */
+export declare function enumerateSource(stackRoot: string, manifest: Manifest, only?: string[]): Promise<string[]>;
+/** Let the proxy and every other request run between two slices of a long loop. */
+export declare const yieldLoop: () => Promise<void>;
+/**
+ * `enumerateSource` with each file's size and mtime — ONE stat per file,
+ * which the build key needs anyway (decision 0038). The stats run in slices,
+ * yielding the event loop between them: on a 35k-file worktree the stat loop
+ * alone held every proxied connection of every environment for 100+ ms.
+ */
+export declare function enumerateSourceStats(stackRoot: string, manifest: Manifest, only?: string[]): Promise<Array<{
+    path: string;
+    size: number;
+    mtimeMs: number;
+}>>;
+/**
+ * A snapshot of a service's declared build outputs: every file matching the
+ * globs, with its size and mtime, as one comparable string. `up` takes one
+ * before and one after the service's build and restarts the service only when
+ * they differ (decision 0032). Path + size + mtime is what a build tool
+ * changes when it writes; content is read only with `compare: content`
+ * (decision 0038).
+ *
+ * Each glob is walked from its literal prefix only, so `backend/host/bin/**`
+ * never walks the rest of the worktree. A glob that escapes the worktree is
+ * ignored.
+ */
+export declare function snapshotOutputs(stackRoot: string, globs: string[], compare?: 'stat' | 'content'): Promise<string>;
+/** sha256 of a file, streamed; null when it cannot be read. */
+export declare function hashFile(path: string): Promise<string | null>;

package/dist/core/worktree.js

@@ -0,0 +1,309 @@
+/**
+ * What the worktree contains, for the few things runly still has to know about
+ * it (decision 0032). Environments run IN the caller's worktree and runly does
+ * not cache builds, so there is no whole-worktree source identity any more:
+ * MSBuild, pnpm and the Angular CLI decide their own incrementality.
+ *
+ * Two questions remain, and both are about DECLARED paths only:
+ *
+ * - which files match an upkeep rule's `when:` glob (and a datastore's
+ *   @rebake-template trigger) — `enumerateSource` lists the candidates the
+ *   globs are matched against; only the matching files are ever read;
+ * - whether a service's declared build `outputs:` changed across its build —
+ *   `snapshotOutputs`, which decides whether `up` restarts the service.
+ *
+ * Git decides what belongs to the worktree (tracked + untracked-unignored
+ * under the stack root, plus sync.include and checked-out submodules, minus
+ * declared `caches:`).
+ */
+import { execFile } from 'node:child_process';
+import { createReadStream, existsSync, lstatSync, readdirSync } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { dirname, join } from 'node:path';
+import { promisify } from 'node:util';
+import { isFile, matchesAny, safeJoin, statOf } from './util.js';
+const execFileP = promisify(execFile);
+/**
+ * git's file list under `root`, restricted to `pathspecs` when given (literal
+ * directory or file paths relative to `root`). Asynchronous: on a large
+ * worktree the listing takes long enough that a synchronous call stalled every
+ * proxied connection of every environment while it ran.
+ */
+async function gitFiles(root, pathspecs = ['.']) {
+    try {
+        const { stdout } = await execFileP('git', ['-C', root, 'ls-files', '-z', '--cached', '--others', '--exclude-standard', '--', ...pathspecs], { encoding: 'utf8', maxBuffer: 256 * 1024 * 1024, env: { ...process.env, GIT_LITERAL_PATHSPECS: '1' } });
+        return stdout.split('\0').filter(Boolean);
+    }
+    catch {
+        return null;
+    }
+}
+/** Does the repository `root` belongs to declare submodules at all? (No .gitmodules, no gitlinks to look for.) */
+function declaresSubmodules(root) {
+    for (let dir = root;; dir = dirname(dir)) {
+        if (existsSync(join(dir, '.gitmodules')))
+            return true;
+        if (existsSync(join(dir, '.git')) || dirname(dir) === dir)
+            return false;
+    }
+}
+/** Gitlink (submodule) paths under `root`, as `git ls-files -s` reports them. */
+async function gitlinks(root) {
+    try {
+        const { stdout } = await execFileP('git', ['-C', root, 'ls-files', '-s', '-z', '--', '.'], {
+            encoding: 'utf8',
+            maxBuffer: 256 * 1024 * 1024,
+        });
+        return stdout
+            .split('\0')
+            .filter((l) => l.startsWith('160000 '))
+            .map((l) => l.split('\t')[1] ?? '')
+            .filter(Boolean);
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * The literal directory (or file) each glob can only match under, as git
+ * pathspecs — or null when one of them can match anywhere (a bare name, a
+ * leading `**`), so the whole worktree has to be listed.
+ */
+export function globPathspecs(globs) {
+    const specs = new Set();
+    for (const g of globs) {
+        const p = g.replace(/^glob\((.*)\)$/, '$1').replace(/^\.\//, '');
+        const parts = p.split('/');
+        if (parts.length === 1 && !/[*?[]/.test(p))
+            return null; // a bare name matches a segment anywhere
+        const stop = parts.findIndex((seg) => /[*?[]/.test(seg));
+        const prefix = (stop === -1 ? parts : parts.slice(0, stop)).filter(Boolean).join('/');
+        if (!prefix || prefix.split('/').includes('..'))
+            return null;
+        specs.add(prefix);
+    }
+    return [...specs];
+}
+/**
+ * The worktree's files that match `only` (globs relative to the stack root),
+ * or all of them when `only` is omitted.
+ *
+ * The listing is git's (one `ls-files`, limited to the globs' literal
+ * prefixes); the globs are applied BEFORE anything is stat'ed, so a bind
+ * whose upkeep rules name a lockfile and a migrations folder touches those
+ * files and nothing else of a 35k-file worktree.
+ *
+ * A submodule appears in ls-files only as its gitlink path, which stats as a
+ * directory, so a CHECKED-OUT submodule is enumerated recursively — a trigger
+ * inside it must fire like any other. An uninitialised submodule is an empty
+ * directory and contributes nothing. A repository without a .gitmodules has
+ * no gitlinks, and the second listing is skipped.
+ */
+export async function enumerateSource(stackRoot, manifest, only) {
+    return (await enumerateSourceStats(stackRoot, manifest, only)).map((f) => f.path);
+}
+/** Files between two yields to the event loop while a listing is stat'ed. */
+const YIELD_EVERY = 2000;
+/** Let the proxy and every other request run between two slices of a long loop. */
+export const yieldLoop = () => new Promise((r) => setImmediate(r));
+/**
+ * `enumerateSource` with each file's size and mtime — ONE stat per file,
+ * which the build key needs anyway (decision 0038). The stats run in slices,
+ * yielding the event loop between them: on a 35k-file worktree the stat loop
+ * alone held every proxied connection of every environment for 100+ ms.
+ */
+export async function enumerateSourceStats(stackRoot, manifest, only) {
+    const pathspecs = only === undefined ? null : globPathspecs(only);
+    const narrowed = pathspecs !== null && pathspecs.length > 0;
+    const listed = (await gitFiles(stackRoot, narrowed ? pathspecs : undefined)) ?? walkAll(stackRoot);
+    const seen = new Set(listed);
+    const nested = async (root, prefix, depth) => {
+        if (depth > 8)
+            return; // a submodule cycle
+        if (!declaresSubmodules(root))
+            return;
+        for (const gl of await gitlinks(root)) {
+            const sub = join(root, gl);
+            if (!existsSync(join(sub, '.git')))
+                continue;
+            for (const f of (await gitFiles(sub)) ?? []) {
+                const rel = `${prefix}${gl}/${f}`;
+                if (!seen.has(rel)) {
+                    seen.add(rel);
+                    listed.push(rel);
+                }
+            }
+            await nested(sub, `${prefix}${gl}/`, depth + 1);
+        }
+    };
+    await nested(stackRoot, '', 0);
+    // sync.include: git-ignored files that still count as source (an .env.local
+    // an upkeep rule may name as its trigger).
+    for (const inc of manifest.sync?.include ?? []) {
+        safeJoin(stackRoot, inc, 'sync.include'); // reject ../ or absolute before use
+        if (isFile(join(stackRoot, inc)) && !seen.has(inc)) {
+            seen.add(inc);
+            listed.push(inc);
+        }
+    }
+    // `caches:` names what builds and installs write INTO the worktree. That is
+    // output, not source: a trigger glob like `**/package.json` must not fire
+    // because an install rewrote node_modules/. (git-ignored output is already
+    // absent; this covers a repo that has not ignored its own.) sync.include
+    // outranks it.
+    const caches = manifest.caches ?? [];
+    const included = new Set(manifest.sync?.include ?? []);
+    // Tracked-but-deleted files still appear in ls-files --cached.
+    const candidates = listed
+        .filter((f) => only === undefined || matchesAny(f, only))
+        .filter((f) => included.has(f) || caches.length === 0 || !matchesAny(f, caches))
+        .sort();
+    const out = [];
+    for (let i = 0; i < candidates.length; i++) {
+        if (i > 0 && i % YIELD_EVERY === 0)
+            await yieldLoop();
+        const f = candidates[i];
+        const st = statOf(join(stackRoot, f));
+        if (st?.isFile())
+            out.push({ path: f, size: st.size, mtimeMs: st.mtimeMs });
+    }
+    return out;
+}
+function walkAll(root, prefix = '') {
+    const out = [];
+    let names;
+    try {
+        names = readdirSync(join(root, prefix));
+    }
+    catch {
+        return out;
+    }
+    for (const name of names) {
+        if (name === '.git' || name === 'node_modules')
+            continue;
+        const rel = prefix ? `${prefix}/${name}` : name;
+        // lstat, not stat: a DANGLING symlink makes stat throw ENOENT, which took
+        // down the whole enumeration. Directory symlinks are listed but not
+        // followed, so a link pointing at an ancestor cannot recurse forever.
+        let st;
+        try {
+            st = lstatSync(join(root, rel));
+        }
+        catch {
+            continue; // vanished mid-walk
+        }
+        if (st.isSymbolicLink())
+            out.push(rel);
+        else if (st.isDirectory())
+            out.push(...walkAll(root, rel));
+        else
+            out.push(rel);
+    }
+    return out;
+}
+/**
+ * A snapshot of a service's declared build outputs: every file matching the
+ * globs, with its size and mtime, as one comparable string. `up` takes one
+ * before and one after the service's build and restarts the service only when
+ * they differ (decision 0032). Path + size + mtime is what a build tool
+ * changes when it writes; content is read only with `compare: content`
+ * (decision 0038).
+ *
+ * Each glob is walked from its literal prefix only, so `backend/host/bin/**`
+ * never walks the rest of the worktree. A glob that escapes the worktree is
+ * ignored.
+ */
+export async function snapshotOutputs(stackRoot, globs, compare = 'stat') {
+    const seen = new Map();
+    let visited = 0;
+    // Sliced like the source listing: a bin/ of thousands of files must not
+    // hold the daemon's event loop (and every proxied connection) for its walk.
+    const walk = async (dir, rel, all = false) => {
+        let names;
+        try {
+            names = readdirSync(dir);
+        }
+        catch {
+            return;
+        }
+        for (const name of names) {
+            if (name === '.git')
+                continue;
+            if (++visited % YIELD_EVERY === 0)
+                await yieldLoop();
+            const childRel = rel ? `${rel}/${name}` : name;
+            const full = join(dir, name);
+            let st;
+            try {
+                st = lstatSync(full);
+            }
+            catch {
+                continue; // vanished mid-walk
+            }
+            if (st.isDirectory())
+                await walk(full, childRel, all);
+            else if (all || matchesAny(childRel, globs))
+                seen.set(childRel, { full, size: st.size, mtimeMs: st.mtimeMs });
+        }
+    };
+    for (const glob of globs) {
+        const parts = glob.replace(/^\.\//, '').split('/');
+        const stop = parts.findIndex((seg) => /[*?[]/.test(seg));
+        const base = (stop === -1 ? parts.slice(0, -1) : parts.slice(0, stop)).join('/');
+        let start;
+        try {
+            start = base ? safeJoin(stackRoot, base, 'outputs') : stackRoot;
+        }
+        catch {
+            continue;
+        }
+        if (stop === -1) {
+            // A literal file path: stat it directly.
+            try {
+                const literal = safeJoin(stackRoot, parts.join('/'), 'outputs');
+                const st = lstatSync(literal);
+                if (st.isFile())
+                    seen.set(parts.join('/'), { full: literal, size: st.size, mtimeMs: st.mtimeMs });
+                else if (st.isDirectory())
+                    await walk(join(stackRoot, parts.join('/')), parts.join('/'), true); // a directory: everything under it
+            }
+            catch {
+                /* absent */
+            }
+            continue;
+        }
+        await walk(start, base);
+    }
+    const entries = [...seen].sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    // `content` (decision 0038): a build tool that rewrites identical files
+    // (the Angular CLI does) moves every mtime and would restart the service
+    // for nothing; hashing what is IN the files ignores that. Streamed, a few
+    // at a time, so a large bundle never blocks the daemon's event loop.
+    const prints = compare === 'stat'
+        ? entries.map(([, st]) => `${st.size}:${st.mtimeMs}`)
+        : await mapLimit(entries, 8, async ([, st]) => `${st.size}:${(await hashFile(st.full)) ?? 'unreadable'}`);
+    return entries.map(([f], i) => `${f}:${prints[i]}`).join('\n');
+}
+/** sha256 of a file, streamed; null when it cannot be read. */
+export function hashFile(path) {
+    return new Promise((resolve) => {
+        const hash = createHash('sha256');
+        const stream = createReadStream(path);
+        stream.on('data', (chunk) => hash.update(chunk));
+        stream.on('end', () => resolve(hash.digest('hex')));
+        stream.on('error', () => resolve(null));
+    });
+}
+async function mapLimit(items, limit, fn) {
+    const out = new Array(items.length);
+    let next = 0;
+    const worker = async () => {
+        while (next < items.length) {
+            const i = next++;
+            out[i] = await fn(items[i]);
+        }
+    };
+    await Promise.all(Array.from({ length: Math.min(limit, items.length) }, worker));
+    return out;
+}
+//# sourceMappingURL=worktree.js.map

package/dist/core/worktree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree.js","sourceRoot":"","sources":["../../src/core/worktree.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAGjE,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEtC;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,YAAsB,CAAC,GAAG,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAChC,KAAK,EACL,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,EAChG,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,qBAAqB,EAAE,GAAG,EAAE,EAAE,CACxG,CAAC;QACF,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,kHAAkH;AAClH,SAAS,kBAAkB,CAAC,IAAY;IACtC,KAAK,IAAI,GAAG,GAAG,IAAI,GAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE;YACzF,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;SAC7B,CAAC,CAAC;QACH,OAAO,MAAM;aACV,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAClC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAe;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,yCAAyC;QAClG,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7D,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,QAAkB,EAAE,IAAe;IAC1F,OAAO,CAAC,MAAM,oBAAoB,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACpF,CAAC;AAED,6EAA6E;AAC7E,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,mFAAmF;AACnF,MAAM,CAAC,MAAM,SAAS,GAAG,GAAkB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;AAElF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,QAAkB,EAAE,IAAe;IAC/F,MAAM,SAAS,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC;IACnG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAAE,MAAc,EAAE,KAAa,EAAiB,EAAE;QAClF,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,CAAC,oBAAoB;QAC3C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAAE,OAAO;QACtC,KAAK,MAAM,EAAE,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAAE,SAAS;YAC7C,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC5C,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACd,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;YACD,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/B,4EAA4E;IAC5E,2CAA2C;IAC3C,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;QAC/C,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,oCAAoC;QAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,eAAe;IACf,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IACvD,+DAA+D;IAC/D,MAAM,UAAU,GAAG,MAAM;SACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;SACxD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;SAC/E,IAAI,EAAE,CAAC;IACV,MAAM,GAAG,GAA2D,EAAE,CAAC;IACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,WAAW,KAAK,CAAC;YAAE,MAAM,SAAS,EAAE,CAAC;QACtD,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAW,CAAC;QAClC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,EAAE,EAAE,MAAM,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,MAAM,GAAG,EAAE;IACxC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,cAAc;YAAE,SAAS;QACzD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,0EAA0E;QAC1E,oEAAoE;QACpE,sEAAsE;QACtE,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,oBAAoB;QAChC,CAAC;QACD,IAAI,EAAE,CAAC,cAAc,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aAClC,IAAI,EAAE,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;;YACtD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,KAAe,EAAE,UAA8B,MAAM;IAC5G,MAAM,IAAI,GAAG,IAAI,GAAG,EAA2D,CAAC;IAChF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK,EAAiB,EAAE;QAC1E,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,MAAM;gBAAE,SAAS;YAC9B,IAAI,EAAE,OAAO,GAAG,WAAW,KAAK,CAAC;gBAAE,MAAM,SAAS,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,oBAAoB;YAChC,CAAC;YACD,IAAI,EAAE,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;iBACjD,IAAI,GAAG,IAAI,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChH,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjF,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YAChB,yCAAyC;YACzC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;gBAChE,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBAC9B,IAAI,EAAE,CAAC,MAAM,EAAE;oBAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;qBAC7F,IAAI,EAAE,CAAC,WAAW,EAAE;oBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,mCAAmC;YACrI,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,MAAM,GAAG,OAAO,KAAK,MAAM;QAC/B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QACrD,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;IAC5G,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,QAAQ,CAAO,KAAU,EAAE,KAAa,EAAE,EAA2B;IAClF,MAAM,GAAG,GAAG,IAAI,KAAK,CAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,OAAO,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;YACjB,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC;IACF,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC;AACb,CAAC"}