@vibe-agent-toolkit/utils 0.1.41 → 0.1.42-rc.1

package/README.md

@@ -1,12 +1,10 @@
 # @vibe-agent-toolkit/utils
 
-Core shared utilities with no dependencies on other packages.
+Cross-platform primitives for Node tooling that has to run correctly on both Windows and Linux — safe command execution, hardened process spawning, path normalization, and git introspection.
 
-## Philosophy
+Projects building skills and agent tooling with the vibe-agent-toolkit write exactly this kind of Node code and hit exactly these platform potholes: `.cmd` shims that need a shell on Windows, 8.3 short paths from `tmpdir()`, backslash-versus-forward-slash comparisons, and `import()` of an absolute path failing on Windows without a `file://` URL. This package is the shared answer.
 
-This package provides utilities that are needed by multiple packages in the toolkit. Utilities are **added as real needs arise**, not speculatively.
-
-If you need a utility function and multiple packages would benefit from it, add it here. Otherwise, keep it local to the package that needs it.
+**Node-only.** Requires Node >= 22. See [Runtime support](#runtime-support).
 
 ## Installation
 
@@ -14,19 +12,62 @@ If you need a utility function and multiple packages would benefit from it, add
 bun add @vibe-agent-toolkit/utils
 ```
 
-## Usage
+## Import narrowly
+
+Every area has its own subpath. Import the one you need.
+
+The package sets `"sideEffects": false`, so a modern bundler will tree-shake unused code out of the `.` barrel — importing `safePath` from `.` and from `./path` produce near-identical bundles. **Subpaths are not primarily a size optimization.** What they control is what your build has to *resolve* and what your module graph *reaches*: the `.` barrel reaches `yaml`, `handlebars`, and `node:fs` no matter what you destructure from it, so it cannot be bundled for a browser target and requires every dependency to be installed. A narrow entry reaches only what it needs.
+
+The last two columns are the ones that matter when choosing. **"Resolves with zero deps installed?"** is the sharper of the two: it separates an entry that is merely *heavy* from one that is *unbuildable* in an environment where the package's third-party dependencies are absent or unresolvable.
+
+| Subpath | Contents | Node builtins reached | Third-party | Resolves with zero deps installed? |
+|---|---|---|---|---|
+| `./path` | `safePath`, `toForwardSlash`, `isAbsolutePath`, `isAbsoluteAnyPlatform`, `hasParentTraversalSegment`, `toAbsolutePath`, `getRelativePath`, `issueLocation` | `path` only | — | **yes** |
+| `./zod` | `ZodTypeNames`, `getZodTypeName`, `isZodType`, `unwrapZodType`, `isZodOptional`, `isZodNullable` | **none** | — | **yes** |
+| `./glob` | `isGlob`, static base extraction, magic remainder | `path` only | — | **yes** |
+| `./fs` | `normalizePath`, `normalizedTmpdir`, `mkdirSyncReal`, `resolveFromImportMeta`, `dynamicImportPath`, `copyDirectory`, `verifyCaseSensitiveFilename`, `FsLookupCache` | `fs`, `fs/promises`, `os`, `path`, `url` | — | **yes** |
+| `./testing` | `getTestOutputDir`, `getTestOutputBase`, `setupAsyncTempDirSuite`, `setupSyncTempDirSuite` | `crypto`, `fs`, `fs/promises`, `os`, `path`, `url` | — | **yes** |
+| `./asset` | `resolveAssetReference` — paths and npm bare specifiers | `fs`, `module`, `os`, `path`, `url` | — | **yes** |
+| `./yaml` | `updateYamlIn`, `verifyConfinedYamlEdit` — byte-surgical YAML edits | **none** | `yaml` | no — needs `yaml` |
+| `./template` | `renderTemplate` — cached Handlebars | **none** | `handlebars` | no — needs `handlebars` |
+| `./process` | `safeExecSync`, `safeExecResult`, `safeExecFromString`, `isToolAvailable`, `getToolVersion`, `hasShellSyntax`, `CommandExecutionError`, `spawnHardened`, `shouldUseShell`, `windowsShellQuote`, `buildWindowsShellLine`, `resolveShellCommandToken`, `isPathLike`, `makeStdioBlocking`, `describeStdioBlocking` | `child_process`, `path` | `which` | no — needs `which` |
+| `./git` | `gitFindRoot`, `gitLsFiles`, `isGitIgnored`, `loadGitignoreRules`, `GitTracker`, `parseGitUrl`, `isGitUrl`, `nonInteractiveGitOverrides` | `child_process`, `fs`, `os`, `path`, `url` | `ignore`, `which` | no — needs `which`, `ignore` |
+| `./crawl` | `crawlDirectory`, `crawlDirectorySync`, `NEVER_CRAWL_GLOBS`, `BUILD_OUTPUT_GLOBS` | `child_process`, `fs`, `os`, `path`, `url` | `picomatch`, `which` | no — needs `picomatch`, `which` |
+| `./project` | `findProjectRoot`, `findConfigFile`, `findNodeWorkspaceRoot`, `resetProjectRootCaches` | `fs`, `path` | — | **yes** |
+| `./eslint` | the 21 ESLint rules that enforce everything above — see [ESLint rules](#eslint-rules--vibe-agent-toolkitutilseslint) | **none** | — | **yes** |
+| `.` | every runtime entry above (not `./eslint`) | all of the above, plus `stream` | `handlebars`, `ignore`, `picomatch`, `which`, `yaml` | no — needs all of them |
+| `./package.json` | the manifest itself, for version reporting and resolution assertions | — | — | **yes** |
+
+Note `./zod` reaches nothing at all: it detects Zod types by duck-typing `_def.typeName` rather than importing Zod, which is exactly why it works across Zod v3 and v4.
+
+`./crawl` is the only *subpath* that reaches `picomatch` (the `.` barrel also reaches it, via linkAuth's host-pattern matching), and it is deliberately *not* folded into `./glob` — `./glob` is guarded as portable (`node:path`, no third-party), and directory crawling would break both halves of that guarantee.
 
 ```typescript
-import {
-  safeExecSync,
-  toForwardSlash,
-  crawlDirectory,
-  isGitIgnored,
-  getGitRootDir,
-  setupTestTempDir,
-} from '@vibe-agent-toolkit/utils';
+// Reaches node:path and nothing else
+import { safePath, toForwardSlash } from '@vibe-agent-toolkit/utils/path';
+import { safeExecSync, spawnHardened } from '@vibe-agent-toolkit/utils/process';
+
+// Reaches yaml, handlebars, and node:fs regardless of what you destructure
+import { safePath } from '@vibe-agent-toolkit/utils';
 ```
 
+`./package.json` is exported as well, so `require('@vibe-agent-toolkit/utils/package.json')` (or a `with { type: 'json' }` import) works for version reporting and "which build am I on?" resolution assertions instead of failing with `ERR_PACKAGE_PATH_NOT_EXPORTED`.
+
+Consumers who prefer a single seam over direct dependencies can re-export the subpaths they want from their own internal module. That pattern works well — just wrap the subpaths rather than the `.` barrel, or the narrowing is lost.
+
+## Runtime support
+
+This package targets **Node >= 22** and is not published for browsers. Most entry points reach `node:fs`, `node:child_process`, or `node:os`.
+
+A guard test in `test/subpath-purity.test.ts` walks each entry's transitive source graph and enforces **both** of the table's last two columns:
+
+- **Third-party reach** — the "Resolves with zero deps installed?" column. Every entry's expected third-party set is asserted exactly, so every **yes** row above is a tested claim rather than a documented intention, and adding a dependency to any entry is a deliberate, reviewed edit.
+- **Builtin reach** — five entries are held to a stricter contract still: `./zod`, `./yaml`, `./template` reach **no Node builtin at all**, and `./path`, `./glob` reach **`node:path` and nothing else** — the one builtin every bundler shims.
+
+That is an enforced invariant, not a browser-support commitment: there are no browser export conditions and no browser test lane. The guard exists so the property can't regress silently — it fails loudly if it cannot resolve a module, so it can't pass vacuously; `test/fixtures/dangling-import/` exercises that failure so the guarantee is demonstrated, not just claimed. If you add a new entry, add it to that test or nothing protects it.
+
+`./eslint` is hand-written CommonJS rather than compiled TypeScript, so that walker cannot see it; `test/eslint/subpath-purity.test.ts` holds it to the same contract by walking its `require()` graph instead — no builtin, no third-party, and in particular never `eslint` itself.
+
 ## Available Utilities
 
 ### Zod Type Introspection (Version-Agnostic)
@@ -37,7 +78,7 @@ Uses duck typing via `_def.typeName` instead of `instanceof` checks, which fail
 
 **Quick Example**:
 ```typescript
-import { getZodTypeName, isZodType, ZodTypeNames } from '@vibe-agent-toolkit/utils';
+import { getZodTypeName, isZodType, ZodTypeNames } from '@vibe-agent-toolkit/utils/zod';
 import { z } from 'zod';
 
 const schema = z.string().optional();
@@ -67,31 +108,105 @@ UNION, INTERSECTION, TUPLE, RECORD, MAP, SET,
 FUNCTION, LAZY, PROMISE, and more...
 ```
 
-**See**: [docs/zod-compatibility.md](../../docs/zod-compatibility.md) for complete guide
+**See**: [docs/zod-compatibility.md](https://github.com/jdutton/vibe-agent-toolkit/blob/main/docs/zod-compatibility.md) for the complete guide
 
 **Peer Dependency**: Requires `zod ^3.25.0 || ^4.0.0`
 
 ---
 
-### Process Spawning
-- `safeExecSync()` - Cross-platform secure command execution without shell
+### Path strings — `@vibe-agent-toolkit/utils/path`
+
+These always return forward slashes on every platform, so they are safe for comparisons, `Map` keys, globs, and display.
+
+- `safePath.join()` / `.resolve()` / `.relative()` - forward-slash equivalents of the `node:path` functions
+- `toForwardSlash()` - explicit converter for any path string
+- `toAbsolutePath()` - resolve a path relative to a base directory
+- `getRelativePath()` - relative path between two absolute paths
+- `isAbsolutePath()` / `isAbsoluteAnyPlatform()` - absolute-path predicates
+- `hasParentTraversalSegment()` - detect `..` segments before using a caller-supplied path
+- `issueLocation()` - format a `file:line`-style location relative to a project root
+
+### Filesystem — `@vibe-agent-toolkit/utils/fs`
+
+These return **OS-native** separators, because they resolve real filesystem identity via `realpathSync.native()` (which is what resolves Windows 8.3 short names). Wrap with `toForwardSlash()` if you need forward slashes.
+
+⚠️ **`normalizePath()` has an input-dependent split personality.** It lives on `./fs` (rather than `./path`) for the right reason — it calls `realpathSync.native()` — but which of two different things it does depends on its argument: given a single *relative* path it is pure string work, equivalent to `path.normalize`, touching no filesystem; given anything else it resolves to absolute and performs a filesystem `realpath`, so it follows symlinks, resolves 8.3 short names, and — when the path does not exist — silently falls back to the merely-resolved path. Two semantics under one name: check which case you are in before relying on either.
+
+- `normalizePath()` - resolve 8.3 short names and return the real path (see the warning above)
+- `normalizedTmpdir()` - `os.tmpdir()` with short names resolved
+- `mkdirSyncReal()` - create a directory and return its real path
+- `resolveFromImportMeta()` - resolve paths relative to an `import.meta.url`
+- `dynamicImportPath()` - `import()` an absolute path (works on Windows, which rejects bare absolute paths)
+- `copyDirectory()`
+- `verifyCaseSensitiveFilename(filePath, fsCache)` - case-exact existence check; takes a per-run `FsLookupCache`
+- `FsLookupCache` - per-run memo for `realpath`/`readdir`, sharing in-flight promises. Construct one per
+  validation run and let it die with the run — never a module-level singleton, or a long-lived process
+  answers from a stale directory listing.
+
+### Processes — `@vibe-agent-toolkit/utils/process`
+
+- `safeExecSync()` / `safeExecResult()` / `safeExecFromString()` - cross-platform command execution with no shell injection
+- `spawnHardened()` - async spawn with streaming stdio and correct Windows `.cmd`/`.bat` launching
+- `shouldUseShell()` / `windowsShellQuote()` / `buildWindowsShellLine()` - Windows shell-invocation helpers
+- `isToolAvailable()` / `getToolVersion()` / `hasShellSyntax()`
+- `makeStdioBlocking()` - stop `process.exit()` truncating output in a published bin
+
+### Git — `@vibe-agent-toolkit/utils/git`
+
+- `gitFindRoot()` - find the repository root from a starting directory
+- `gitLsFiles()` - enumerate tracked files
+- `isGitIgnored()` - check whether a path is gitignored (outside a repository it answers from the filesystem, spawning nothing)
+- `loadGitignoreRules()` - load a repository's ignore rules
+- `GitTracker` - cached tracked-file lookups for repeated checks
+- `parseGitUrl()` / `isGitUrl()` - recognize and decompose git URLs, including `owner/repo` shorthand and `#ref:subpath` fragments
+- `nonInteractiveGitOverrides()` - env and `git -c` overrides that stop a clone blocking on a credential prompt
+
+**One root finder, on purpose.** `gitFindRoot()` is the only one in the package. There used to be a second name, `findGitRoot()`, whose entire body was `return gitFindRoot(startDir)`; two names for one function guarantees half of all callers pick each. Keeping it off this entry was not enough — it stayed on the `.` barrel, so both names were still one import away — so it has been removed outright. Replace any `findGitRoot(` with `gitFindRoot(`; the behavior is identical.
+
+### Test helpers — `@vibe-agent-toolkit/utils/testing`
+
+- `setupAsyncTempDirSuite()` / `setupSyncTempDirSuite()` - per-suite temp directories with cleanup
+- `getTestOutputDir()` / `getTestOutputBase()` - isolated test output paths
+
+### Project roots — `@vibe-agent-toolkit/utils` (barrel only)
+
+- `findProjectRoot()` - the VAT project root: nearest `vibe-agent-toolkit.config.yaml`, else nearest `.git/`, else `null`
+- `findConfigFile()` / `findNodeWorkspaceRoot()` - the narrower individual probes
+- `resetProjectRootCaches()` - invalidate the module-level walk-up cache (long-lived processes and tests that mutate fixtures)
+
+These are CLI-boundary functions: inner libraries should take a root as a parameter rather than discovering one. They return `string | null` with no internal fallback, so a caller with no root has to decide one rather than silently landing on an absolute path.
+
+**These four are VAT-shaped — read this before reaching for them.** `findProjectRoot()` looks for `vibe-agent-toolkit.config.yaml` and then `.git/`; if your repo's notion of "root" is a `pnpm-workspace.yaml`, a `turbo.json`, or a lockfile, that ladder is not your ladder — and for a *published* package, keying anything on `.git/` is a bug, since it will not be there at install time. `findNodeWorkspaceRoot()` is narrower still: it needs a `package.json` carrying a `"workspaces"` key, which pnpm and Bun workspaces do not have. `findConfigFile()` hardcodes VAT's config filename. If you want a git root, take `gitFindRoot()` from [`./git`](#git--vibe-agent-toolkitutilsgit); if you want your own marker, a six-line walk-up is more honest than a helper whose ladder you have to work around.
+
+They are nonetheless on their own [`./project`](#import-narrowly) entry rather than the barrel alone. The entry was briefly withdrawn on the grounds that the functions fit few repos — which is true, and is what the paragraph above says — but that answered the wrong question. What decides whether an *entry* exists is how heavy the only remaining door is: barrel-only, these four cost `handlebars`, `yaml`, `picomatch`, `ignore` and `which` to reach, while their own code imports nothing but `node:fs` and `node:path`. Publishing the entry is not a claim that the ladder fits you — only that finding out shouldn't cost five dependencies.
+
+### Directory crawling — `@vibe-agent-toolkit/utils/crawl`
+
+- `crawlDirectory()` / `crawlDirectorySync()` - gitignore-aware directory walks
+- `NEVER_CRAWL_GLOBS` / `BUILD_OUTPUT_GLOBS` - the standard exclusion sets
+
+Glob *pattern inspection* is a separate entry, `./glob`, and stays that way: `./glob` is dependency-free and reaches only `node:path`, whereas crawling reaches the filesystem, `git`, and `picomatch`.
+
+### ESLint rules — `@vibe-agent-toolkit/utils/eslint`
+
+A safety helper is only as good as its enforcement: `safePath.join()` prevents a class of Windows bug precisely once — the moment someone writes `path.join()` instead, the helper's existence has bought nothing. So the 21 rules that direct code to these helpers ship with them, on their own subpath:
+
+```js
+// eslint.config.js
+import vat from '@vibe-agent-toolkit/utils/eslint';
+
+export default [
+  vat.configs.recommended,
+];
+```
 
-### Path Utilities
-- `toForwardSlash()` - Convert paths to forward slashes (Windows/Unix compatibility)
-- `getRelativePath()` - Get relative path between two absolute paths
-- `normalizeFilePath()` - Normalize file paths for consistent comparisons
+`configs.recommended` registers the rules under the `@vibe-agent-toolkit` namespace and turns on the cross-platform safety core (18 of the 21 — three rules are opt-in). Most rules auto-fix, and every message names the replacement and the subpath it lives on. Rules that ban a primitive take an `exemptFiles` option naming the file that implements *your* wrapper; there are deliberately no built-in exemptions.
 
-### File System
-- `crawlDirectory()` - Recursively crawl directories with pattern filtering
-- `readFileContent()` - Read file content with encoding detection
+**[Full rule table, severities, and exemption semantics →](./eslint/README.md)**
 
-### Git Integration
-- `isGitIgnored()` - Check if file is gitignored (cached per directory)
-- `getGitRootDir()` - Find git repository root directory
-- `ensureGitRepository()` - Verify current directory is in a git repo
+Requires ESLint 9+ (flat config). `eslint` is an **optional** peer dependency and adds nothing to the entries above: an ESLint plugin is data, not code that runs — the rule modules export plain objects and none of them `require('eslint')` — so this subpath reaches no Node builtin and no third-party package at all, and installing `utils` for `safePath.join()` alone pulls in nothing extra.
 
-### Test Helpers
-- `setupTestTempDir()` - Create temp directory for tests with cleanup
+Shipping them here rather than as a separate `eslint-plugin` package is deliberate: one install, one version, and no way for a rule to name a helper signature the installed `utils` no longer has.
 
 ## License
 

package/dist/asset.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @vibe-agent-toolkit/utils/asset
+ *
+ * Asset reference resolution: accepts both filesystem paths (relative to a
+ * base directory, or absolute) and npm bare specifiers (`@scope/pkg/subpath`),
+ * honoring the target package's `exports` map. Node-only.
+ */
+export * from './asset-reference.js';
+//# sourceMappingURL=asset.d.ts.map

package/dist/asset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset.d.ts","sourceRoot":"","sources":["../src/asset.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,sBAAsB,CAAC"}

package/dist/asset.js

@@ -0,0 +1,9 @@
+/**
+ * @vibe-agent-toolkit/utils/asset
+ *
+ * Asset reference resolution: accepts both filesystem paths (relative to a
+ * base directory, or absolute) and npm bare specifiers (`@scope/pkg/subpath`),
+ * honoring the target package's `exports` map. Node-only.
+ */
+export * from './asset-reference.js';
+//# sourceMappingURL=asset.js.map

package/dist/asset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset.js","sourceRoot":"","sources":["../src/asset.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,sBAAsB,CAAC"}

package/dist/crawl.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @vibe-agent-toolkit/utils/crawl
+ *
+ * Directory crawling (`crawlDirectory`, `crawlDirectorySync`) plus the
+ * never-crawl / build-output glob constants. Node-only — reads the filesystem
+ * and shells out to `git` for the gitignore-aware fast path.
+ *
+ * This is the only *subpath* entry that reaches `picomatch` — `./crawl` is
+ * therefore the narrow entry that makes `picomatch` a required install. It is
+ * not the package's only consumer of it: `link-auth/select-provider.ts` uses
+ * `picomatch.isMatch` for host-pattern matching, and that is reachable from the
+ * `.` barrel.
+ *
+ * Deliberately NOT folded into `./glob`. `./glob` is guarded as portable —
+ * `node:path` and no third-party dependency (see `test/subpath-purity.test.ts`)
+ * — and file-crawler would break both halves of that guarantee.
+ */
+export * from './file-crawler.js';
+//# sourceMappingURL=crawl.d.ts.map

package/dist/crawl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crawl.d.ts","sourceRoot":"","sources":["../src/crawl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,cAAc,mBAAmB,CAAC"}

package/dist/crawl.js

@@ -0,0 +1,19 @@
+/**
+ * @vibe-agent-toolkit/utils/crawl
+ *
+ * Directory crawling (`crawlDirectory`, `crawlDirectorySync`) plus the
+ * never-crawl / build-output glob constants. Node-only — reads the filesystem
+ * and shells out to `git` for the gitignore-aware fast path.
+ *
+ * This is the only *subpath* entry that reaches `picomatch` — `./crawl` is
+ * therefore the narrow entry that makes `picomatch` a required install. It is
+ * not the package's only consumer of it: `link-auth/select-provider.ts` uses
+ * `picomatch.isMatch` for host-pattern matching, and that is reachable from the
+ * `.` barrel.
+ *
+ * Deliberately NOT folded into `./glob`. `./glob` is guarded as portable —
+ * `node:path` and no third-party dependency (see `test/subpath-purity.test.ts`)
+ * — and file-crawler would break both halves of that guarantee.
+ */
+export * from './file-crawler.js';
+//# sourceMappingURL=crawl.js.map

package/dist/crawl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crawl.js","sourceRoot":"","sources":["../src/crawl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,cAAc,mBAAmB,CAAC"}

package/dist/file-crawler.d.ts

@@ -48,10 +48,27 @@ export interface CrawlOptions {
  * worktrees at `.claude/worktrees/`, inside a dot-directory that `dot: true`
  * (see {@link PICOMATCH_OPTIONS}) deliberately makes reachable.
  *
+ * `.turbo` is here rather than in {@link BUILD_OUTPUT_GLOBS}, and the placement
+ * is the decision. The line between the two lists is not "who produced it" —
+ * `coverage/` is tool output too — it is *does any lane exist precisely to look
+ * at it*. Something does walk `dist/`; nothing walks `.turbo`, which holds
+ * `turbo-<task>.log` telemetry plus, when `cacheDir` points inside it,
+ * hash-keyed cache entries that are COPIES of package build output. That is the
+ * `.worktrees` failure two lines up, not the `dist` one: a crawl that descends
+ * into it reports the same file twice under two paths. Filing it as build
+ * output would have it exactly backwards, since a lane spreading only this list
+ * is by definition a lane that wants to see built output — and so is precisely
+ * the lane that must not walk a cache of copies. (Turborepo is a common enough
+ * monorepo layout that this is not hypothetical: every package in THIS repo has
+ * a `.turbo/`.)
+ *
  * Note these patterns only bite when `respectGitignore` is false; the fast
- * `git ls-files` path never sees ignored directories in the first place.
+ * `git ls-files` path never sees ignored directories in the first place. For
+ * `.turbo` that is the only path it could bite on — it is gitignored by every
+ * turborepo setup — which is the same position `coverage/` and `.test-output/`
+ * are in.
  */
-export declare const NEVER_CRAWL_GLOBS: readonly ["**/node_modules/**", "**/.git/**", "**/coverage/**", "**/.test-output/**", "**/.worktrees/**", "**/.claude/worktrees/**"];
+export declare const NEVER_CRAWL_GLOBS: readonly ["**/node_modules/**", "**/.git/**", "**/coverage/**", "**/.test-output/**", "**/.worktrees/**", "**/.claude/worktrees/**", "**/.turbo/**"];
 /**
  * Build output — excluded by DEFAULT, but deliberately NOT part of
  * {@link NEVER_CRAWL_GLOBS}.

package/dist/file-crawler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-crawler.d.ts","sourceRoot":"","sources":["../src/file-crawler.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,6CAA6C;IAC7C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAkBD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iBAAiB,sIAOpB,CAAC;AAEX;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,yBAA0B,CAAC;AAI1D;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAE7E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,EAAE,CA0KlE"}
+{"version":3,"file":"file-crawler.d.ts","sourceRoot":"","sources":["../src/file-crawler.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,6CAA6C;IAC7C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAkBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,iBAAiB,sJAQpB,CAAC;AAEX;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,yBAA0B,CAAC;AAI1D;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAE7E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,EAAE,CA0KlE"}

package/dist/file-crawler.js

@@ -29,8 +29,25 @@ const PICOMATCH_OPTIONS = { dot: true };
  * worktrees at `.claude/worktrees/`, inside a dot-directory that `dot: true`
  * (see {@link PICOMATCH_OPTIONS}) deliberately makes reachable.
  *
+ * `.turbo` is here rather than in {@link BUILD_OUTPUT_GLOBS}, and the placement
+ * is the decision. The line between the two lists is not "who produced it" —
+ * `coverage/` is tool output too — it is *does any lane exist precisely to look
+ * at it*. Something does walk `dist/`; nothing walks `.turbo`, which holds
+ * `turbo-<task>.log` telemetry plus, when `cacheDir` points inside it,
+ * hash-keyed cache entries that are COPIES of package build output. That is the
+ * `.worktrees` failure two lines up, not the `dist` one: a crawl that descends
+ * into it reports the same file twice under two paths. Filing it as build
+ * output would have it exactly backwards, since a lane spreading only this list
+ * is by definition a lane that wants to see built output — and so is precisely
+ * the lane that must not walk a cache of copies. (Turborepo is a common enough
+ * monorepo layout that this is not hypothetical: every package in THIS repo has
+ * a `.turbo/`.)
+ *
  * Note these patterns only bite when `respectGitignore` is false; the fast
- * `git ls-files` path never sees ignored directories in the first place.
+ * `git ls-files` path never sees ignored directories in the first place. For
+ * `.turbo` that is the only path it could bite on — it is gitignored by every
+ * turborepo setup — which is the same position `coverage/` and `.test-output/`
+ * are in.
  */
 export const NEVER_CRAWL_GLOBS = [
     '**/node_modules/**', // Dependencies (40K+ files), never user content
@@ -39,6 +56,7 @@ export const NEVER_CRAWL_GLOBS = [
     '**/.test-output/**', // Test artifacts
     '**/.worktrees/**', // Git worktrees are full repo copies — never traverse
     '**/.claude/worktrees/**', // Claude Code worktrees, same reason
+    '**/.turbo/**', // turborepo task logs + cache — see below
 ];
 /**
  * Build output — excluded by DEFAULT, but deliberately NOT part of

package/dist/file-crawler.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-crawler.js","sourceRoot":"","sources":["../src/file-crawler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,SAAS,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAyC3D;;;;;;;;;;;;;GAaG;AACH,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,IAAI,EAAW,CAAC;AAEjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,oBAAoB,EAAO,gDAAgD;IAC3E,YAAY,EAAe,kCAAkC;IAC7D,gBAAgB,EAAW,wBAAwB;IACnD,oBAAoB,EAAO,iBAAiB;IAC5C,kBAAkB,EAAS,sDAAsD;IACjF,yBAAyB,EAAE,qCAAqC;CACxD,CAAC;AAEX;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,YAAY,CAAU,CAAC;AAE1D,MAAM,eAAe,GAAa,CAAC,GAAG,iBAAiB,EAAE,GAAG,kBAAkB,CAAC,CAAC;AAEhF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAqB;IACxD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAqB;IACtD,MAAM,EACJ,OAAO,EACP,OAAO,GAAG,CAAC,MAAM,CAAC,EAClB,OAAO,GAAG,eAAe,EACzB,cAAc,GAAG,KAAK,EACtB,QAAQ,GAAG,IAAI,EACf,SAAS,GAAG,IAAI,EAChB,gBAAgB,GAAG,IAAI,EACvB,gBAAgB,GAAG,KAAK,GACzB,GAAG,OAAO,CAAC;IAEZ,MAAM,WAAW,GAAG,iBAAiB,CAAC;IAEtC,0CAA0C;IAC1C,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAElD,+BAA+B;IAC/B,wHAAwH;IACxH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kCAAkC,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,gDAAgD;IAChD,oGAAoG;IACpG,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,eAAe,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,4DAA4D;IAC5D,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,mDAAmD;YACnD,yEAAyE;YACzE,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC;gBAC1B,GAAG,EAAE,eAAe;gBACpB,gBAAgB;aACjB,CAAC,CAAC;YAEH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,sDAAsD;gBACtD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBACnD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAY,EAAE,CAAC,KAAK,CAAC;gBAE/F,OAAO,QAAQ;qBACZ,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE;oBACvB,MAAM,cAAc,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;oBACpD,0CAA0C;oBAC1C,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,CAAC;gBACxG,CAAC,CAAC;qBACD,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;oBACpB,6CAA6C;oBAC7C,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;gBACnF,CAAC,CAAC,CAAC;YACP,CAAC;YACD,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,wCAAwC;IACxC,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAY,EAAE,CAAC,KAAK,CAAC;IAE/F,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B;;OAEG;IACH,SAAS,aAAa,CAAC,cAAsB;QAC3C,kCAAkC;QAClC,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,SAAS,YAAY,CAAC,cAAsB,EAAE,QAAgB,EAAE,YAAoB;QAClF,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,cAAc,CAAC,QAAgB,EAAE,cAAsB,EAAE,YAAoB;QACpF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,IAAI,UAAoB,CAAC;QACzB,IAAI,CAAC;YACH,wHAAwH;YACxH,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;YACvB,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7B,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/B,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,gBAAgB,CAAC,QAAgB,EAAE,cAAsB,EAAE,YAAoB;QACtF,4BAA4B;QAC5B,aAAa,CAAC,QAAQ,CAAC,CAAC;QAExB,4CAA4C;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,WAAW,CAAC,cAAsB,EAAE,QAAgB,EAAE,YAAoB;QACjF,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,SAAS,aAAa,CAAC,UAAkB;QACvC,IAAI,OAAoB,CAAC;QAEzB,IAAI,CAAC;YACH,mIAAmI;YACnI,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;YACpD,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YAClE,MAAM,cAAc,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;YAEpD,sBAAsB;YACtB,IAAI,aAAa,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,sDAAsD;YACtD,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;YACzD,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,gBAAgB,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;YAC3D,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,WAAW,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,aAAa,CAAC,eAAe,CAAC,CAAC;IAE/B,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"file-crawler.js","sourceRoot":"","sources":["../src/file-crawler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,SAAS,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAyC3D;;;;;;;;;;;;;GAaG;AACH,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,IAAI,EAAW,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,oBAAoB,EAAO,gDAAgD;IAC3E,YAAY,EAAe,kCAAkC;IAC7D,gBAAgB,EAAW,wBAAwB;IACnD,oBAAoB,EAAO,iBAAiB;IAC5C,kBAAkB,EAAS,sDAAsD;IACjF,yBAAyB,EAAE,qCAAqC;IAChE,cAAc,EAAa,0CAA0C;CAC7D,CAAC;AAEX;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,YAAY,CAAU,CAAC;AAE1D,MAAM,eAAe,GAAa,CAAC,GAAG,iBAAiB,EAAE,GAAG,kBAAkB,CAAC,CAAC;AAEhF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAqB;IACxD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAqB;IACtD,MAAM,EACJ,OAAO,EACP,OAAO,GAAG,CAAC,MAAM,CAAC,EAClB,OAAO,GAAG,eAAe,EACzB,cAAc,GAAG,KAAK,EACtB,QAAQ,GAAG,IAAI,EACf,SAAS,GAAG,IAAI,EAChB,gBAAgB,GAAG,IAAI,EACvB,gBAAgB,GAAG,KAAK,GACzB,GAAG,OAAO,CAAC;IAEZ,MAAM,WAAW,GAAG,iBAAiB,CAAC;IAEtC,0CAA0C;IAC1C,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAElD,+BAA+B;IAC/B,wHAAwH;IACxH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kCAAkC,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,gDAAgD;IAChD,oGAAoG;IACpG,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,eAAe,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,4DAA4D;IAC5D,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,mDAAmD;YACnD,yEAAyE;YACzE,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC;gBAC1B,GAAG,EAAE,eAAe;gBACpB,gBAAgB;aACjB,CAAC,CAAC;YAEH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,sDAAsD;gBACtD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBACnD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAY,EAAE,CAAC,KAAK,CAAC;gBAE/F,OAAO,QAAQ;qBACZ,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE;oBACvB,MAAM,cAAc,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;oBACpD,0CAA0C;oBAC1C,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,CAAC;gBACxG,CAAC,CAAC;qBACD,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;oBACpB,6CAA6C;oBAC7C,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;gBACnF,CAAC,CAAC,CAAC;YACP,CAAC;YACD,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,wCAAwC;IACxC,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAY,EAAE,CAAC,KAAK,CAAC;IAE/F,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B;;OAEG;IACH,SAAS,aAAa,CAAC,cAAsB;QAC3C,kCAAkC;QAClC,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,SAAS,YAAY,CAAC,cAAsB,EAAE,QAAgB,EAAE,YAAoB;QAClF,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,cAAc,CAAC,QAAgB,EAAE,cAAsB,EAAE,YAAoB;QACpF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,IAAI,UAAoB,CAAC;QACzB,IAAI,CAAC;YACH,wHAAwH;YACxH,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;YACvB,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7B,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/B,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,gBAAgB,CAAC,QAAgB,EAAE,cAAsB,EAAE,YAAoB;QACtF,4BAA4B;QAC5B,aAAa,CAAC,QAAQ,CAAC,CAAC;QAExB,4CAA4C;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,WAAW,CAAC,cAAsB,EAAE,QAAgB,EAAE,YAAoB;QACjF,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,SAAS,aAAa,CAAC,UAAkB;QACvC,IAAI,OAAoB,CAAC;QAEzB,IAAI,CAAC;YACH,mIAAmI;YACnI,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;YACpD,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YAClE,MAAM,cAAc,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;YAEpD,sBAAsB;YACtB,IAAI,aAAa,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,sDAAsD;YACtD,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;YACzD,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,gBAAgB,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;YAC3D,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,WAAW,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,aAAa,CAAC,eAAe,CAAC,CAAC;IAE/B,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/fs-utils.d.ts

@@ -1,6 +1,51 @@
 /**
  * Filesystem utilities
  */
+/**
+ * Per-run memo for the two filesystem lookups that validation repeats on values
+ * which are constant for the whole run: `realpath` of roots, and `readdir` of the
+ * directories link targets live in.
+ *
+ * A markdown corpus resolves thousands of links into a few hundred directories, so
+ * the uncached form is an N+1: measured at 9,963 `readdir` calls on a 3,437-document
+ * tree and 7,443 on a 1,132-document monorepo. Concurrent callers share the
+ * in-flight promise rather than each starting their own syscall.
+ *
+ * **Instance-based on purpose — never make this a module-level singleton.** The
+ * cache holds a *snapshot* of directory contents, and a long-lived process (watch
+ * mode, a language server, a daemon) would then answer from a listing taken
+ * arbitrarily long ago. The intended lifetime is one instance per validation run,
+ * constructed as a local and collected with the run.
+ *
+ * @example
+ * ```typescript
+ * const fsCache = new FsLookupCache();          // one per run
+ * for (const link of links) {
+ *   await verifyCaseSensitiveFilename(link.target, fsCache);
+ * }
+ * ```
+ */
+export declare class FsLookupCache {
+    #private;
+    /**
+     * Canonical path for `targetPath`, falling back to `safePath.resolve()` when the
+     * path does not exist or cannot be resolved (a non-existent file has no realpath,
+     * and callers comparing paths still need an answer).
+     *
+     * @param targetPath - Path to canonicalize
+     * @returns Canonical path with forward slashes on every platform
+     */
+    realpath(targetPath: string): Promise<string>;
+    /**
+     * Entry names of `dirPath`, or `null` when it cannot be read (missing directory,
+     * no permission). The unreadable answer is cached too — re-asking is the same
+     * failed syscall.
+     *
+     * @param dirPath - Directory to list
+     * @returns Entry names, or `null` if the directory could not be read
+     */
+    readdir(dirPath: string): Promise<string[] | null>;
+}
 /**
  * Recursively copy a directory
  *
@@ -18,20 +63,32 @@ export declare function copyDirectory(src: string, dest: string): Promise<void>;
  * the case doesn't match. This function checks that the actual filename on disk
  * matches the requested path exactly (case-sensitive).
  *
+ * Answering requires listing the target's parent directory. Callers checking many
+ * paths (every link in a corpus) hit the same handful of directories over and over,
+ * so the listing comes from a caller-supplied {@link FsLookupCache}.
+ *
+ * The cache parameter is **required rather than defaulted on purpose**: a default
+ * would let an unmigrated call site silently keep the un-memoized behaviour, which
+ * is a no-op wearing the shape of a fix. `new FsLookupCache()` per call reproduces
+ * the old behaviour exactly, so migrating is mechanical — but it has to be a
+ * decision someone made.
+ *
  * @param filePath - Absolute path to the file to verify
+ * @param fsCache - Per-run lookup cache (one instance per validation run)
  * @returns Object with exists flag and actual filename (or null if not found)
  *
  * @example
  * ```typescript
  * // On case-insensitive filesystem with file "README.md"
- * const result1 = await verifyCaseSensitiveFilename('/project/README.md');
+ * const fsCache = new FsLookupCache();
+ * const result1 = await verifyCaseSensitiveFilename('/project/README.md', fsCache);
  * // { exists: true, actualName: 'README.md' }
  *
- * const result2 = await verifyCaseSensitiveFilename('/project/readme.md');
+ * const result2 = await verifyCaseSensitiveFilename('/project/readme.md', fsCache);
  * // { exists: false, actualName: 'README.md' } - case mismatch!
  * ```
  */
-export declare function verifyCaseSensitiveFilename(filePath: string): Promise<{
+export declare function verifyCaseSensitiveFilename(filePath: string, fsCache: FsLookupCache): Promise<{
     exists: boolean;
     actualName: string | null;
 }>;

package/dist/fs-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fs-utils.d.ts","sourceRoot":"","sources":["../src/fs-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB5E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAmCzD"}
+{"version":3,"file":"fs-utils.d.ts","sourceRoot":"","sources":["../src/fs-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAQH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,aAAa;;IAOxB;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAe7C;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;CASnD;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB5E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAgCzD"}

package/dist/fs-utils.js

@@ -3,7 +3,77 @@
  */
 import fs from 'node:fs/promises';
 import path from 'node:path';
+import { toForwardSlash } from './path-core.js';
 import { safePath } from './path-utils.js';
+/**
+ * Per-run memo for the two filesystem lookups that validation repeats on values
+ * which are constant for the whole run: `realpath` of roots, and `readdir` of the
+ * directories link targets live in.
+ *
+ * A markdown corpus resolves thousands of links into a few hundred directories, so
+ * the uncached form is an N+1: measured at 9,963 `readdir` calls on a 3,437-document
+ * tree and 7,443 on a 1,132-document monorepo. Concurrent callers share the
+ * in-flight promise rather than each starting their own syscall.
+ *
+ * **Instance-based on purpose — never make this a module-level singleton.** The
+ * cache holds a *snapshot* of directory contents, and a long-lived process (watch
+ * mode, a language server, a daemon) would then answer from a listing taken
+ * arbitrarily long ago. The intended lifetime is one instance per validation run,
+ * constructed as a local and collected with the run.
+ *
+ * @example
+ * ```typescript
+ * const fsCache = new FsLookupCache();          // one per run
+ * for (const link of links) {
+ *   await verifyCaseSensitiveFilename(link.target, fsCache);
+ * }
+ * ```
+ */
+export class FsLookupCache {
+    /** Directory path → its entry names, or `null` when the directory is unreadable. */
+    #listings = new Map();
+    /** Path → its canonical path, falling back to the resolved path. */
+    #realpaths = new Map();
+    /**
+     * Canonical path for `targetPath`, falling back to `safePath.resolve()` when the
+     * path does not exist or cannot be resolved (a non-existent file has no realpath,
+     * and callers comparing paths still need an answer).
+     *
+     * @param targetPath - Path to canonicalize
+     * @returns Canonical path with forward slashes on every platform
+     */
+    realpath(targetPath) {
+        const cached = this.#realpaths.get(targetPath);
+        if (cached !== undefined)
+            return cached;
+        // Stored before the first `await` anywhere can run, so concurrent callers
+        // reaching this method share the one in-flight promise.
+        // eslint-disable-next-line security/detect-non-literal-fs-filename -- caller-validated path
+        const pending = fs
+            .realpath(targetPath)
+            .then(toForwardSlash)
+            .catch(() => safePath.resolve(targetPath));
+        this.#realpaths.set(targetPath, pending);
+        return pending;
+    }
+    /**
+     * Entry names of `dirPath`, or `null` when it cannot be read (missing directory,
+     * no permission). The unreadable answer is cached too — re-asking is the same
+     * failed syscall.
+     *
+     * @param dirPath - Directory to list
+     * @returns Entry names, or `null` if the directory could not be read
+     */
+    readdir(dirPath) {
+        const cached = this.#listings.get(dirPath);
+        if (cached !== undefined)
+            return cached;
+        // eslint-disable-next-line security/detect-non-literal-fs-filename -- caller-validated path
+        const pending = fs.readdir(dirPath).catch(() => null);
+        this.#listings.set(dirPath, pending);
+        return pending;
+    }
+}
 /**
  * Recursively copy a directory
  *
@@ -36,31 +106,39 @@ export async function copyDirectory(src, dest) {
  * the case doesn't match. This function checks that the actual filename on disk
  * matches the requested path exactly (case-sensitive).
  *
+ * Answering requires listing the target's parent directory. Callers checking many
+ * paths (every link in a corpus) hit the same handful of directories over and over,
+ * so the listing comes from a caller-supplied {@link FsLookupCache}.
+ *
+ * The cache parameter is **required rather than defaulted on purpose**: a default
+ * would let an unmigrated call site silently keep the un-memoized behaviour, which
+ * is a no-op wearing the shape of a fix. `new FsLookupCache()` per call reproduces
+ * the old behaviour exactly, so migrating is mechanical — but it has to be a
+ * decision someone made.
+ *
  * @param filePath - Absolute path to the file to verify
+ * @param fsCache - Per-run lookup cache (one instance per validation run)
  * @returns Object with exists flag and actual filename (or null if not found)
  *
  * @example
  * ```typescript
  * // On case-insensitive filesystem with file "README.md"
- * const result1 = await verifyCaseSensitiveFilename('/project/README.md');
+ * const fsCache = new FsLookupCache();
+ * const result1 = await verifyCaseSensitiveFilename('/project/README.md', fsCache);
  * // { exists: true, actualName: 'README.md' }
  *
- * const result2 = await verifyCaseSensitiveFilename('/project/readme.md');
+ * const result2 = await verifyCaseSensitiveFilename('/project/readme.md', fsCache);
  * // { exists: false, actualName: 'README.md' } - case mismatch!
  * ```
  */
-export async function verifyCaseSensitiveFilename(filePath) {
+export async function verifyCaseSensitiveFilename(filePath, fsCache) {
     // Get parent directory and expected filename
     const parentDir = path.dirname(filePath);
     const expectedName = path.basename(filePath);
     // Read actual directory entries
-    let entries;
-    try {
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- parentDir from validated path
-        entries = await fs.readdir(parentDir);
-    }
-    catch {
-        // Parent directory doesn't exist
+    const entries = await fsCache.readdir(parentDir);
+    if (entries === null) {
+        // Parent directory doesn't exist (or can't be read)
         return { exists: false, actualName: null };
     }
     // Find the actual filename (case-sensitive exact match)

package/dist/fs-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"fs-utils.js","sourceRoot":"","sources":["../src/fs-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,IAAY;IAC3D,mGAAmG;IACnG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,mGAAmG;IACnG,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAAgB;IAEhB,6CAA6C;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE7C,gCAAgC;IAChC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,oGAAoG;QACpG,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;QACjC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,wDAAwD;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC;IAEjE,IAAI,UAAU,EAAE,CAAC;QACf,yDAAyD;QACzD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAClD,CAAC;IAED,oDAAoD;IACpD,MAAM,oBAAoB,GAAG,OAAO,CAAC,IAAI,CACvC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,WAAW,EAAE,CAC5D,CAAC;IAEF,iBAAiB;IACjB,oFAAoF;IACpF,sDAAsD;IACtD,OAAO;QACL,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,oBAAoB,IAAI,IAAI;KACzC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"fs-utils.js","sourceRoot":"","sources":["../src/fs-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,OAAO,aAAa;IACxB,oFAAoF;IAC3E,SAAS,GAAG,IAAI,GAAG,EAAoC,CAAC;IAEjE,oEAAoE;IAC3D,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEzD;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAkB;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAExC,0EAA0E;QAC1E,wDAAwD;QACxD,4FAA4F;QAC5F,MAAM,OAAO,GAAG,EAAE;aACf,QAAQ,CAAC,UAAU,CAAC;aACpB,IAAI,CAAC,cAAc,CAAC;aACpB,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,OAAe;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAExC,4FAA4F;QAC5F,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,IAAY;IAC3D,mGAAmG;IACnG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,mGAAmG;IACnG,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAAgB,EAChB,OAAsB;IAEtB,6CAA6C;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE7C,gCAAgC;IAChC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,oDAAoD;QACpD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,wDAAwD;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC;IAEjE,IAAI,UAAU,EAAE,CAAC;QACf,yDAAyD;QACzD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAClD,CAAC;IAED,oDAAoD;IACpD,MAAM,oBAAoB,GAAG,OAAO,CAAC,IAAI,CACvC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,WAAW,EAAE,CAC5D,CAAC;IAEF,iBAAiB;IACjB,oFAAoF;IACpF,sDAAsD;IACtD,OAAO;QACL,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,oBAAoB,IAAI,IAAI;KACzC,CAAC;AACJ,CAAC"}