@vibe-hero/server 0.1.0

package/dist/profile/migrate.d.ts

@@ -0,0 +1,122 @@
+/**
+ * @file Profile schema-version / migration policy (T056, analyze finding E6).
+ *
+ * Centralizes how a persisted {@link Profile} of *some* on-disk schema version is
+ * brought up to the version this build understands ({@link CURRENT_PROFILE_SCHEMA_VERSION}).
+ * Before this module the only version handling was an implicit Zod `safeParse`
+ * inside the store; there was no explicit forward/back-compat policy, so a
+ * profile written by a *newer* build would simply fail validation and be treated
+ * as "corrupt" — silently discarding data we don't understand (E6).
+ *
+ * The policy, expressed as one function ({@link migrateProfile}), is:
+ *
+ *   1. **Same version, valid** → pass through unchanged (`migrated: false`).
+ *   2. **Older known version** → run the ordered {@link MIGRATIONS} steps from the
+ *      on-disk version up to current, then validate (`migrated: true`). For v1
+ *      there is exactly one version so the registry is empty (a documented stub);
+ *      the SHAPE exists so future `v1 → v2` etc. steps slot in without touching
+ *      callers. Additive fields already default via Zod (e.g. `dwell`,
+ *      `candidateKeys`), so a forward-compatible additive change needs no step at
+ *      all — the registry is for *structural* migrations that Zod defaults can't
+ *      express.
+ *   3. **Newer (future) version** → do NOT crash and do NOT discard (FR-023
+ *      "tolerate gracefully"). We can't safely read a shape this build predates,
+ *      so we fall back to a fresh empty profile for *this* run and signal
+ *      `reset: true` with `preserved: true`. The store leaves the on-disk file
+ *      untouched — overwriting a newer profile we don't understand would destroy
+ *      a forward-compatible user's data, so we explicitly refuse to.
+ *   4. **Corrupt / invalid** (bad shape at the resolved version) → fresh empty
+ *      profile (`reset: true`), consistent with the store's prior behavior of
+ *      degrading an unreadable file to {@link emptyProfile}.
+ *
+ * `migrateProfile` is pure (no IO): the store decides what to persist based on
+ * the returned flags. This keeps the version policy unit-testable in isolation.
+ *
+ * Source of truth: specs/001-vibe-hero-mvp/spec.md (FR-023), data-model.md
+ * (§ Profile `schemaVersion` "migration guard"), tasks.md T056.
+ */
+import { type Profile } from "../schemas/profile.js";
+/**
+ * The profile schema version this build understands. Centralized here (re-exported
+ * from the single source, {@link PROFILE_SCHEMA_VERSION}) so version policy lives
+ * in one place; the store and tests import it from this module.
+ */
+export declare const CURRENT_PROFILE_SCHEMA_VERSION = 1;
+/**
+ * A single forward migration step: transforms a parsed profile document from
+ * `from` to `from + 1`. Steps operate on `unknown` (the raw parsed JSON, not a
+ * validated {@link Profile}) because an older document is, by definition, NOT yet
+ * shaped like the *current* schema — the step's job is to reshape it. The final
+ * shape is validated once, after all steps run.
+ */
+export interface MigrationStep {
+    /** The schema version this step upgrades FROM (it produces `from + 1`). */
+    readonly from: number;
+    /** Pure transform of the raw document toward the next version. */
+    readonly up: (raw: Record<string, unknown>) => Record<string, unknown>;
+}
+/**
+ * Ordered registry of forward migration steps, keyed by their `from` version.
+ *
+ * **v1 is the only version**, so this is intentionally empty — a documented stub.
+ * The registry SHAPE exists so a future schema bump is purely additive here:
+ * add a `{ from: 1, up }` step that reshapes a v1 document into v2 and bump
+ * {@link CURRENT_PROFILE_SCHEMA_VERSION} (via the source `PROFILE_SCHEMA_VERSION`).
+ * {@link migrateProfile} will then automatically chain `from` → current.
+ *
+ * Note: purely *additive* fields that a new field's Zod `.default(...)` can fill
+ * (the pattern already used for `dwell` and `candidateKeys`) need NO step — an old
+ * document validates forward for free. Steps are reserved for structural changes
+ * (renames, splits, type changes) Zod defaults cannot express.
+ */
+export declare const MIGRATIONS: readonly MigrationStep[];
+/** Result of {@link migrateProfile}. Discriminated on `reset`. */
+export type MigrateResult = {
+    /** No reset: the document was usable at (or migrated up to) current. */
+    readonly reset: false;
+    /** The validated, current-version profile. */
+    readonly profile: Profile;
+    /** `true` iff at least one migration step ran (older → current). */
+    readonly migrated: boolean;
+} | {
+    /** Reset: the document was unreadable at the current version. */
+    readonly reset: true;
+    /** A fresh empty profile to use for this run. */
+    readonly profile: Profile;
+    /**
+     * `true` when the reset is because the document is a NEWER version than
+     * this build understands — the on-disk file MUST be preserved (not
+     * overwritten). `false` for a corrupt/invalid document, which the store
+     * may overwrite on its next write as before.
+     */
+    readonly preserved: boolean;
+};
+/**
+ * Dependency-injection seam for {@link migrateProfile}. Both fields default to
+ * the shipped values; they exist ONLY so the older→migrated path is genuinely
+ * testable while v1 is the only real version (and so future contributors can
+ * unit-test a `v2`/`v3` step in isolation before wiring it in). Production
+ * callers pass nothing.
+ */
+export interface MigrateOptions {
+    /** Override the schema version this run targets (defaults to current). */
+    readonly currentVersion?: number;
+    /** Override the migration registry (defaults to {@link MIGRATIONS}). */
+    readonly migrations?: readonly MigrationStep[];
+}
+/**
+ * Route a parsed-JSON profile document of unknown schema version through the
+ * forward/back-compat policy documented at the top of this file.
+ *
+ * Pure: performs no IO and never throws for *data* reasons (only the internal
+ * programming-error guard in {@link applyMigrations} can throw, and only if the
+ * registry is left inconsistent with the current version). The store interprets
+ * the result's flags to decide whether to preserve or overwrite the file.
+ *
+ * @param raw - The already-parsed JSON of the on-disk profile (not the raw text).
+ * @param options - Test/forward-dev seam; production callers omit it.
+ * @returns A {@link MigrateResult}: pass-through, migrated, or reset (corrupt vs.
+ *   newer-preserved).
+ */
+export declare const migrateProfile: (raw: unknown, options?: MigrateOptions) => MigrateResult;
+//# sourceMappingURL=migrate.d.ts.map

package/dist/profile/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/profile/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAIL,KAAK,OAAO,EACb,MAAM,uBAAuB,CAAC;AAE/B;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,IAAyB,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxE;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,UAAU,EAAE,SAAS,aAAa,EAAO,CAAC;AAEvD,kEAAkE;AAClE,MAAM,MAAM,aAAa,GACrB;IACE,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B,GACD;IACE,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IACrB,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B,CAAC;AA2CN;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,wEAAwE;IACxE,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;CAChD;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,cAAc,GACzB,KAAK,OAAO,EACZ,UAAS,cAAmB,KAC3B,aAgDF,CAAC"}

package/dist/profile/migrate.js

@@ -0,0 +1,147 @@
+/**
+ * @file Profile schema-version / migration policy (T056, analyze finding E6).
+ *
+ * Centralizes how a persisted {@link Profile} of *some* on-disk schema version is
+ * brought up to the version this build understands ({@link CURRENT_PROFILE_SCHEMA_VERSION}).
+ * Before this module the only version handling was an implicit Zod `safeParse`
+ * inside the store; there was no explicit forward/back-compat policy, so a
+ * profile written by a *newer* build would simply fail validation and be treated
+ * as "corrupt" — silently discarding data we don't understand (E6).
+ *
+ * The policy, expressed as one function ({@link migrateProfile}), is:
+ *
+ *   1. **Same version, valid** → pass through unchanged (`migrated: false`).
+ *   2. **Older known version** → run the ordered {@link MIGRATIONS} steps from the
+ *      on-disk version up to current, then validate (`migrated: true`). For v1
+ *      there is exactly one version so the registry is empty (a documented stub);
+ *      the SHAPE exists so future `v1 → v2` etc. steps slot in without touching
+ *      callers. Additive fields already default via Zod (e.g. `dwell`,
+ *      `candidateKeys`), so a forward-compatible additive change needs no step at
+ *      all — the registry is for *structural* migrations that Zod defaults can't
+ *      express.
+ *   3. **Newer (future) version** → do NOT crash and do NOT discard (FR-023
+ *      "tolerate gracefully"). We can't safely read a shape this build predates,
+ *      so we fall back to a fresh empty profile for *this* run and signal
+ *      `reset: true` with `preserved: true`. The store leaves the on-disk file
+ *      untouched — overwriting a newer profile we don't understand would destroy
+ *      a forward-compatible user's data, so we explicitly refuse to.
+ *   4. **Corrupt / invalid** (bad shape at the resolved version) → fresh empty
+ *      profile (`reset: true`), consistent with the store's prior behavior of
+ *      degrading an unreadable file to {@link emptyProfile}.
+ *
+ * `migrateProfile` is pure (no IO): the store decides what to persist based on
+ * the returned flags. This keeps the version policy unit-testable in isolation.
+ *
+ * Source of truth: specs/001-vibe-hero-mvp/spec.md (FR-023), data-model.md
+ * (§ Profile `schemaVersion` "migration guard"), tasks.md T056.
+ */
+import { ProfileSchema, emptyProfile, PROFILE_SCHEMA_VERSION, } from "../schemas/profile.js";
+/**
+ * The profile schema version this build understands. Centralized here (re-exported
+ * from the single source, {@link PROFILE_SCHEMA_VERSION}) so version policy lives
+ * in one place; the store and tests import it from this module.
+ */
+export const CURRENT_PROFILE_SCHEMA_VERSION = PROFILE_SCHEMA_VERSION;
+/**
+ * Ordered registry of forward migration steps, keyed by their `from` version.
+ *
+ * **v1 is the only version**, so this is intentionally empty — a documented stub.
+ * The registry SHAPE exists so a future schema bump is purely additive here:
+ * add a `{ from: 1, up }` step that reshapes a v1 document into v2 and bump
+ * {@link CURRENT_PROFILE_SCHEMA_VERSION} (via the source `PROFILE_SCHEMA_VERSION`).
+ * {@link migrateProfile} will then automatically chain `from` → current.
+ *
+ * Note: purely *additive* fields that a new field's Zod `.default(...)` can fill
+ * (the pattern already used for `dwell` and `candidateKeys`) need NO step — an old
+ * document validates forward for free. Steps are reserved for structural changes
+ * (renames, splits, type changes) Zod defaults cannot express.
+ */
+export const MIGRATIONS = [];
+/**
+ * Read the declared `schemaVersion` from a parsed-JSON document, or `undefined`
+ * if the value is missing or not a positive integer. We read it leniently (not
+ * via the full {@link ProfileSchema}) precisely so we can route a *newer* document
+ * to the tolerate path rather than failing it as "corrupt".
+ */
+const readDeclaredVersion = (raw) => {
+    if (typeof raw !== "object" || raw === null)
+        return undefined;
+    const v = raw.schemaVersion;
+    return typeof v === "number" && Number.isInteger(v) && v > 0 ? v : undefined;
+};
+/**
+ * Apply migration steps in order from `fromVersion` up to `currentVersion`,
+ * picking each step from `migrations`. Returns the reshaped raw document and
+ * whether any step actually ran. Throws if a required step is missing (a
+ * programming error — a known-older version with a gap in the registry).
+ */
+const applyMigrations = (raw, fromVersion, currentVersion, migrations) => {
+    let doc = raw;
+    let migrated = false;
+    for (let v = fromVersion; v < currentVersion; v++) {
+        const step = migrations.find((s) => s.from === v);
+        if (step === undefined) {
+            throw new Error(`no migration step registered for profile schema v${v} → v${v + 1}`);
+        }
+        doc = step.up(doc);
+        migrated = true;
+    }
+    // Stamp the version the document now conforms to so the post-migration
+    // validation sees the current version regardless of what each step set.
+    return { doc: { ...doc, schemaVersion: currentVersion }, migrated };
+};
+/**
+ * Route a parsed-JSON profile document of unknown schema version through the
+ * forward/back-compat policy documented at the top of this file.
+ *
+ * Pure: performs no IO and never throws for *data* reasons (only the internal
+ * programming-error guard in {@link applyMigrations} can throw, and only if the
+ * registry is left inconsistent with the current version). The store interprets
+ * the result's flags to decide whether to preserve or overwrite the file.
+ *
+ * @param raw - The already-parsed JSON of the on-disk profile (not the raw text).
+ * @param options - Test/forward-dev seam; production callers omit it.
+ * @returns A {@link MigrateResult}: pass-through, migrated, or reset (corrupt vs.
+ *   newer-preserved).
+ */
+export const migrateProfile = (raw, options = {}) => {
+    const currentVersion = options.currentVersion ?? CURRENT_PROFILE_SCHEMA_VERSION;
+    const migrations = options.migrations ?? MIGRATIONS;
+    const declared = readDeclaredVersion(raw);
+    // --- newer than we understand → tolerate, preserve on disk (FR-023) -------
+    if (declared !== undefined && declared > currentVersion) {
+        process.stderr.write(`vibe-hero: profile schema v${declared} is newer than this build supports ` +
+            `(v${currentVersion}); using a temporary empty profile and ` +
+            `leaving the existing file untouched to avoid downgrading it.\n`);
+        return { reset: true, profile: emptyProfile(), preserved: true };
+    }
+    // --- known version (current or older) → migrate then validate -------------
+    if (declared !== undefined) {
+        let result;
+        try {
+            result = applyMigrations(raw, declared, currentVersion, migrations);
+        }
+        catch {
+            // A registry gap for a known-older version: treat as unreadable rather
+            // than crash the server (consistent with the corrupt-file degrade path).
+            return { reset: true, profile: emptyProfile(), preserved: false };
+        }
+        const parsed = ProfileSchema.safeParse(result.doc);
+        if (parsed.success) {
+            return { reset: false, profile: parsed.data, migrated: result.migrated };
+        }
+        // Migrated/same-version doc that still doesn't validate → corrupt.
+        return { reset: true, profile: emptyProfile(), preserved: false };
+    }
+    // --- no usable version (missing field / not an object / corrupt) ----------
+    // Last-chance validation: a well-formed current-version doc whose schemaVersion
+    // somehow read as non-positive would have been caught above; anything here is
+    // genuinely unreadable. Try a direct parse so a structurally-valid doc isn't
+    // discarded on a version-read technicality, then degrade to empty.
+    const parsed = ProfileSchema.safeParse(raw);
+    if (parsed.success) {
+        return { reset: false, profile: parsed.data, migrated: false };
+    }
+    return { reset: true, profile: emptyProfile(), preserved: false };
+};
+//# sourceMappingURL=migrate.js.map

package/dist/profile/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/profile/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EACL,aAAa,EACb,YAAY,EACZ,sBAAsB,GAEvB,MAAM,uBAAuB,CAAC;AAE/B;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,sBAAsB,CAAC;AAgBrE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,UAAU,GAA6B,EAAE,CAAC;AA0BvD;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,CAAC,GAAY,EAAsB,EAAE;IAC/D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,CAAC,GAAI,GAAmC,CAAC,aAAa,CAAC;IAC7D,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/E,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,eAAe,GAAG,CACtB,GAA4B,EAC5B,WAAmB,EACnB,cAAsB,EACtB,UAAoC,EACmC,EAAE;IACzE,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,WAAW,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;QAClD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,oDAAoD,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CACpE,CAAC;QACJ,CAAC;QACD,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACnB,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,uEAAuE;IACvE,wEAAwE;IACxE,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,CAAC;AACtE,CAAC,CAAC;AAgBF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,GAAY,EACZ,UAA0B,EAAE,EACb,EAAE;IACjB,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,8BAA8B,CAAC;IAChF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC;IACpD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAE1C,6EAA6E;IAC7E,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,cAAc,EAAE,CAAC;QACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B,QAAQ,qCAAqC;YACzE,KAAK,cAAc,yCAAyC;YAC5D,gEAAgE,CACnE,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,6EAA6E;IAC7E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,MAA6E,CAAC;QAClF,IAAI,CAAC;YACH,MAAM,GAAG,eAAe,CACtB,GAA8B,EAC9B,QAAQ,EACR,cAAc,EACd,UAAU,CACX,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,yEAAyE;YACzE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACpE,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC3E,CAAC;QACD,mEAAmE;QACnE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACpE,CAAC;IAED,6EAA6E;IAC7E,gFAAgF;IAChF,8EAA8E;IAC9E,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACpE,CAAC,CAAC"}

package/dist/profile/store.d.ts

@@ -0,0 +1,84 @@
+/**
+ * @file Learner-profile persistence (T013).
+ *
+ * The profile is a single Zod-validated JSON document at
+ * `${VIBE_HERO_HOME}/profile.json` (default `~/.vibe-hero/`). It may be written
+ * by multiple concurrent host sessions, so every mutation is **atomic and
+ * serialized**: writes go through a temp file + `fs.rename` under an advisory
+ * lock acquired via `proper-lockfile` (FR-023a). Reads never throw — a missing,
+ * unreadable, or corrupt file degrades to a fresh empty profile (FR-023).
+ *
+ * The fs/lock boundary is intentionally thin; everything else is pure data
+ * shuffling around {@link ProfileSchema}.
+ *
+ * Source of truth: specs/001-vibe-hero-mvp/data-model.md (§ Storage notes),
+ * spec.md FR-022 / FR-023 / FR-023a.
+ */
+import { type Profile } from "../schemas/profile.js";
+/**
+ * Resolve the directory that holds the profile document.
+ *
+ * @param dirOverride - Explicit directory (test seam). When omitted, falls back
+ *   to `VIBE_HERO_HOME`, then to `~/.vibe-hero`.
+ * @returns Absolute path to the profile directory.
+ */
+export declare const profileDir: (dirOverride?: string) => string;
+/**
+ * Resolve the absolute path to the profile JSON document.
+ *
+ * @param dirOverride - Explicit directory (test seam); see {@link profileDir}.
+ * @returns Absolute path to `profile.json`.
+ */
+export declare const profilePath: (dirOverride?: string) => string;
+/**
+ * Read and validate the profile.
+ *
+ * Never throws: a missing, unreadable, or schema-invalid file degrades to a
+ * fresh {@link emptyProfile} so the server can always operate (FR-023). Version
+ * handling is centralized in {@link migrateProfile} (T056): a same-version doc
+ * passes through, an older known version is migrated up, and a *newer* version
+ * (written by a future build) degrades to an empty profile for this run WITHOUT
+ * overwriting the file — `loadProfile` never writes, so a forward-compatible
+ * profile we don't understand is preserved on disk. A corrupt file is logged to
+ * stderr (without printing its contents — it may hold profile data) and left on
+ * disk untouched; the next successful {@link saveProfile} / {@link updateProfile}
+ * overwrites it.
+ *
+ * @param dirOverride - Explicit directory (test seam); see {@link profileDir}.
+ * @returns The validated profile, or an empty profile on any failure.
+ */
+export declare const loadProfile: (dirOverride?: string) => Promise<Profile>;
+/**
+ * Persist a profile atomically and serialized (FR-023a).
+ *
+ * Ensures the directory exists, acquires the advisory lock, writes to a unique
+ * temp file in the same directory, then `fs.rename`s it over `profile.json`
+ * (atomic on POSIX since both paths share a filesystem). `updatedAt` is bumped
+ * to now. The lock is always released, even on failure.
+ *
+ * Prefer {@link updateProfile} for read-modify-write mutations — calling
+ * {@link loadProfile} then `saveProfile` is racy (the load happens outside the
+ * lock and a concurrent writer can interleave).
+ *
+ * @param profile - The profile to persist.
+ * @param dirOverride - Explicit directory (test seam); see {@link profileDir}.
+ */
+export declare const saveProfile: (profile: Profile, dirOverride?: string) => Promise<void>;
+/**
+ * Read-modify-write the profile under the lock so concurrent updaters serialize
+ * and no update is lost (FR-023a / edge case E1). This is the primary mutation
+ * API.
+ *
+ * The sequence is: acquire lock → read the *current* on-disk profile (or empty
+ * if missing/corrupt) → apply `fn` → atomic write → release. Because both the
+ * read and the write happen inside the same lock, two concurrent callers run
+ * strictly one-after-another and each sees the other's committed result.
+ *
+ * @param fn - Pure-ish transform from the current profile to the next one. May
+ *   be async. It should return a new profile object rather than mutating the
+ *   argument, though either works since the result is what gets written.
+ * @param dirOverride - Explicit directory (test seam); see {@link profileDir}.
+ * @returns The profile that was written (with `updatedAt` bumped).
+ */
+export declare const updateProfile: (fn: (current: Profile) => Profile | Promise<Profile>, dirOverride?: string) => Promise<Profile>;
+//# sourceMappingURL=store.d.ts.map

package/dist/profile/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/profile/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAQH,OAAO,EAA+B,KAAK,OAAO,EAAE,MAAM,uBAAuB,CAAC;AA+BlF;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,GAAI,cAAc,MAAM,KAAG,MAKjD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,WAAW,GAAI,cAAc,MAAM,KAAG,MACG,CAAC;AAEvD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,WAAW,GAAU,cAAc,MAAM,KAAG,OAAO,CAAC,OAAO,CAkCvE,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,WAAW,GACtB,SAAS,OAAO,EAChB,cAAc,MAAM,KACnB,OAAO,CAAC,IAAI,CASd,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,aAAa,GACxB,IAAI,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EACpD,cAAc,MAAM,KACnB,OAAO,CAAC,OAAO,CAWjB,CAAC"}

package/dist/profile/store.js

@@ -0,0 +1,267 @@
+/**
+ * @file Learner-profile persistence (T013).
+ *
+ * The profile is a single Zod-validated JSON document at
+ * `${VIBE_HERO_HOME}/profile.json` (default `~/.vibe-hero/`). It may be written
+ * by multiple concurrent host sessions, so every mutation is **atomic and
+ * serialized**: writes go through a temp file + `fs.rename` under an advisory
+ * lock acquired via `proper-lockfile` (FR-023a). Reads never throw — a missing,
+ * unreadable, or corrupt file degrades to a fresh empty profile (FR-023).
+ *
+ * The fs/lock boundary is intentionally thin; everything else is pure data
+ * shuffling around {@link ProfileSchema}.
+ *
+ * Source of truth: specs/001-vibe-hero-mvp/data-model.md (§ Storage notes),
+ * spec.md FR-022 / FR-023 / FR-023a.
+ */
+import { randomBytes } from "node:crypto";
+import { homedir } from "node:os";
+import * as path from "node:path";
+import * as fs from "node:fs/promises";
+import * as lockfile from "proper-lockfile";
+import { ProfileSchema, emptyProfile } from "../schemas/profile.js";
+import { migrateProfile } from "./migrate.js";
+/** Basename of the profile document within the profile directory. */
+const PROFILE_FILENAME = "profile.json";
+/** Default profile home when `VIBE_HERO_HOME` is unset (`~/.vibe-hero`). */
+const DEFAULT_DIRNAME = ".vibe-hero";
+/**
+ * Lock-acquisition tuning. `proper-lockfile` treats the lock as *stale* after
+ * `stale` ms (so a crashed writer can never wedge the profile forever), and a
+ * contending writer retries with exponential backoff up to `retries.retries`
+ * times. The window is generous enough to serialize bursts of concurrent
+ * `updateProfile` calls (FR-023a / edge case E1) without spuriously failing.
+ */
+const LOCK_OPTIONS = {
+    stale: 15_000,
+    // Resolve against the literal path we pass; the file is guaranteed to exist
+    // before we lock (see `acquireLock`), but skipping realpath avoids symlink
+    // surprises (e.g. macOS `/var` → `/private/var` under os.tmpdir()).
+    realpath: false,
+    retries: {
+        retries: 50,
+        factor: 1.5,
+        minTimeout: 10,
+        maxTimeout: 200,
+        randomize: true,
+    },
+};
+/**
+ * Resolve the directory that holds the profile document.
+ *
+ * @param dirOverride - Explicit directory (test seam). When omitted, falls back
+ *   to `VIBE_HERO_HOME`, then to `~/.vibe-hero`.
+ * @returns Absolute path to the profile directory.
+ */
+export const profileDir = (dirOverride) => {
+    if (dirOverride !== undefined && dirOverride !== "")
+        return path.resolve(dirOverride);
+    const fromEnv = process.env["VIBE_HERO_HOME"];
+    if (fromEnv !== undefined && fromEnv !== "")
+        return path.resolve(fromEnv);
+    return path.join(homedir(), DEFAULT_DIRNAME);
+};
+/**
+ * Resolve the absolute path to the profile JSON document.
+ *
+ * @param dirOverride - Explicit directory (test seam); see {@link profileDir}.
+ * @returns Absolute path to `profile.json`.
+ */
+export const profilePath = (dirOverride) => path.join(profileDir(dirOverride), PROFILE_FILENAME);
+/**
+ * Read and validate the profile.
+ *
+ * Never throws: a missing, unreadable, or schema-invalid file degrades to a
+ * fresh {@link emptyProfile} so the server can always operate (FR-023). Version
+ * handling is centralized in {@link migrateProfile} (T056): a same-version doc
+ * passes through, an older known version is migrated up, and a *newer* version
+ * (written by a future build) degrades to an empty profile for this run WITHOUT
+ * overwriting the file — `loadProfile` never writes, so a forward-compatible
+ * profile we don't understand is preserved on disk. A corrupt file is logged to
+ * stderr (without printing its contents — it may hold profile data) and left on
+ * disk untouched; the next successful {@link saveProfile} / {@link updateProfile}
+ * overwrites it.
+ *
+ * @param dirOverride - Explicit directory (test seam); see {@link profileDir}.
+ * @returns The validated profile, or an empty profile on any failure.
+ */
+export const loadProfile = async (dirOverride) => {
+    const file = profilePath(dirOverride);
+    let raw;
+    try {
+        raw = await fs.readFile(file, "utf8");
+    }
+    catch (err) {
+        // ENOENT is the normal first-run path; anything else (perms, etc.) is also
+        // non-fatal — we still hand back a usable empty profile.
+        if (!isNotFound(err)) {
+            process.stderr.write(`vibe-hero: could not read profile at ${file}; starting from an empty profile.\n`);
+        }
+        return emptyProfile();
+    }
+    const json = parseJson(raw);
+    if (json === undefined) {
+        process.stderr.write(`vibe-hero: profile at ${file} is corrupt or invalid; starting from an empty profile (file left untouched).\n`);
+        return emptyProfile();
+    }
+    // Centralized version policy (T056). migrateProfile owns same/older/newer
+    // routing and emits its own newer-version warning. We only add a stderr note
+    // for the corrupt-at-version case to preserve the prior diagnostic.
+    const result = migrateProfile(json);
+    if (result.reset && !result.preserved) {
+        process.stderr.write(`vibe-hero: profile at ${file} is corrupt or invalid; starting from an empty profile (file left untouched).\n`);
+    }
+    return result.profile;
+};
+/**
+ * Persist a profile atomically and serialized (FR-023a).
+ *
+ * Ensures the directory exists, acquires the advisory lock, writes to a unique
+ * temp file in the same directory, then `fs.rename`s it over `profile.json`
+ * (atomic on POSIX since both paths share a filesystem). `updatedAt` is bumped
+ * to now. The lock is always released, even on failure.
+ *
+ * Prefer {@link updateProfile} for read-modify-write mutations — calling
+ * {@link loadProfile} then `saveProfile` is racy (the load happens outside the
+ * lock and a concurrent writer can interleave).
+ *
+ * @param profile - The profile to persist.
+ * @param dirOverride - Explicit directory (test seam); see {@link profileDir}.
+ */
+export const saveProfile = async (profile, dirOverride) => {
+    const dir = profileDir(dirOverride);
+    const file = path.join(dir, PROFILE_FILENAME);
+    const release = await acquireLock(dir, file);
+    try {
+        await writeAtomic(dir, file, profile);
+    }
+    finally {
+        await release();
+    }
+};
+/**
+ * Read-modify-write the profile under the lock so concurrent updaters serialize
+ * and no update is lost (FR-023a / edge case E1). This is the primary mutation
+ * API.
+ *
+ * The sequence is: acquire lock → read the *current* on-disk profile (or empty
+ * if missing/corrupt) → apply `fn` → atomic write → release. Because both the
+ * read and the write happen inside the same lock, two concurrent callers run
+ * strictly one-after-another and each sees the other's committed result.
+ *
+ * @param fn - Pure-ish transform from the current profile to the next one. May
+ *   be async. It should return a new profile object rather than mutating the
+ *   argument, though either works since the result is what gets written.
+ * @param dirOverride - Explicit directory (test seam); see {@link profileDir}.
+ * @returns The profile that was written (with `updatedAt` bumped).
+ */
+export const updateProfile = async (fn, dirOverride) => {
+    const dir = profileDir(dirOverride);
+    const file = path.join(dir, PROFILE_FILENAME);
+    const release = await acquireLock(dir, file);
+    try {
+        const current = await readUnderLock(file);
+        const next = await fn(current);
+        return await writeAtomic(dir, file, next);
+    }
+    finally {
+        await release();
+    }
+};
+// --- internals (thin fs/lock boundary) ------------------------------------
+/**
+ * Acquire the advisory lock for the profile file.
+ *
+ * `proper-lockfile` locks by creating `${file}.lock`, but it requires the
+ * target path to exist first, so we `mkdir -p` the directory and ensure
+ * `profile.json` is present (an empty placeholder is fine — it will be
+ * overwritten by the atomic rename, and `readUnderLock` tolerates empty/invalid
+ * content).
+ */
+const acquireLock = async (dir, file) => {
+    await fs.mkdir(dir, { recursive: true });
+    await ensureExists(file);
+    return lockfile.lock(file, LOCK_OPTIONS);
+};
+/**
+ * Read the on-disk profile while holding the lock, degrading to an empty
+ * profile if the file is missing, unreadable, or invalid. Unlike
+ * {@link loadProfile} this stays quiet (no stderr) — it runs inside the
+ * write path where a fresh-start is expected on first write. Version handling
+ * goes through the same {@link migrateProfile} policy so an older profile is
+ * migrated forward before a read-modify-write, and a newer one degrades to
+ * empty (the subsequent write is the caller's explicit choice).
+ */
+const readUnderLock = async (file) => {
+    let raw;
+    try {
+        raw = await fs.readFile(file, "utf8");
+    }
+    catch {
+        return emptyProfile();
+    }
+    const json = parseJson(raw);
+    if (json === undefined)
+        return emptyProfile();
+    return migrateProfile(json).profile;
+};
+/**
+ * Write `profile` (with a refreshed `updatedAt`) atomically: serialize → write
+ * a unique temp file in the same directory → `fs.rename` over the target. The
+ * rename is atomic on the same filesystem, so a concurrent reader sees either
+ * the old or the new file, never a partial one.
+ *
+ * @returns The exact profile object that was persisted.
+ */
+const writeAtomic = async (dir, file, profile) => {
+    const toWrite = { ...profile, updatedAt: new Date().toISOString() };
+    // Validate before persisting so we never write a malformed document.
+    const validated = ProfileSchema.parse(toWrite);
+    const json = `${JSON.stringify(validated, null, 2)}\n`;
+    const tmp = path.join(dir, `.${PROFILE_FILENAME}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`);
+    try {
+        await fs.writeFile(tmp, json, { encoding: "utf8", mode: 0o600 });
+        await fs.rename(tmp, file);
+    }
+    catch (err) {
+        // Best-effort cleanup of the temp file if the rename never happened.
+        await fs.rm(tmp, { force: true }).catch(() => undefined);
+        throw err;
+    }
+    return validated;
+};
+/** Create an empty file if it does not already exist (no-op otherwise). */
+const ensureExists = async (file) => {
+    // wx = create + fail if exists; swallow EEXIST so this is idempotent.
+    let handle;
+    try {
+        handle = await fs.open(file, "wx", 0o600);
+    }
+    catch (err) {
+        if (isExists(err))
+            return;
+        throw err;
+    }
+    finally {
+        await handle?.close();
+    }
+};
+/**
+ * Parse raw profile text into a JSON value, or `undefined` if it is not valid
+ * JSON. Schema/version validation is deferred to {@link migrateProfile} so the
+ * version policy (same/older/newer) is centralized in one place (T056).
+ */
+const parseJson = (raw) => {
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+};
+/** Type-narrowing helper: is this a Node `ENOENT` error? */
+const isNotFound = (err) => hasCode(err, "ENOENT");
+/** Type-narrowing helper: is this a Node `EEXIST` error? */
+const isExists = (err) => hasCode(err, "EEXIST");
+const hasCode = (err, code) => typeof err === "object" && err !== null && err.code === code;
+//# sourceMappingURL=store.js.map

package/dist/profile/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/profile/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAgB,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,qEAAqE;AACrE,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAExC,4EAA4E;AAC5E,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,YAAY,GAAyB;IACzC,KAAK,EAAE,MAAM;IACb,4EAA4E;IAC5E,2EAA2E;IAC3E,oEAAoE;IACpE,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE;QACP,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,GAAG;QACX,UAAU,EAAE,EAAE;QACd,UAAU,EAAE,GAAG;QACf,SAAS,EAAE,IAAI;KAChB;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,WAAoB,EAAU,EAAE;IACzD,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AAC/C,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,WAAoB,EAAU,EAAE,CAC1D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC,CAAC;AAEvD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,WAAoB,EAAoB,EAAE;IAC1E,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,yDAAyD;QACzD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wCAAwC,IAAI,qCAAqC,CAClF,CAAC;QACJ,CAAC;QACD,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yBAAyB,IAAI,iFAAiF,CAC/G,CAAC;QACF,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IAED,0EAA0E;IAC1E,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yBAAyB,IAAI,iFAAiF,CAC/G,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,OAAgB,EAChB,WAAoB,EACL,EAAE;IACjB,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,EAAoD,EACpD,WAAoB,EACF,EAAE;IACpB,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC,CAAC;AAEF,6EAA6E;AAE7E;;;;;;;;GAQG;AACH,MAAM,WAAW,GAAG,KAAK,EAAE,GAAW,EAAE,IAAY,EAAgC,EAAE;IACpF,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AAC3C,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAAoB,EAAE;IAC7D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,YAAY,EAAE,CAAC;IAC9C,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;AACtC,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,KAAK,EAAE,GAAW,EAAE,IAAY,EAAE,OAAgB,EAAoB,EAAE;IAC1F,MAAM,OAAO,GAAY,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7E,qEAAqE;IACrE,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAEvD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,gBAAgB,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxG,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,qEAAqE;QACrE,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,2EAA2E;AAC3E,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;IACzD,sEAAsE;IACtE,IAAI,MAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO;QAC1B,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,SAAS,GAAG,CAAC,GAAW,EAAW,EAAE;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF,4DAA4D;AAC5D,MAAM,UAAU,GAAG,CAAC,GAAY,EAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAErE,4DAA4D;AAC5D,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAEnE,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,IAAY,EAAW,EAAE,CACtD,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAK,GAA0B,CAAC,IAAI,KAAK,IAAI,CAAC"}