@vibgrate/cli 2026.721.3 → 2026.722.1

package/dist/chunk-2EVQKZTO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/util/logo.ts","../src/engine/attest.ts","../src/commands/attest-actions.ts","../src/util/progress.ts","../src/cli-options.ts","../src/commands/build.ts","../src/code/router.ts"],"names":["crypto2","resolve","path2","rel","fs2","locals","basename","out"],"mappings":";;;;;;;;;;;;AAgBA,IAAM,OAAO,CAAC,CAAA,KAAsB,EAAE,GAAA,CAAI,SAAS,EAAE,CAAC,CAAA;AACtD,IAAM,OAAO,CAAC,CAAA,KAAsB,EAAE,GAAA,CAAI,SAAS,EAAE,CAAC,CAAA;AAGtD,IAAM,KAAA,GAAQ;AAAA,EACZ,KAAA,GAAQ,IAAA,CAAK,kDAAU,CAAA,GAAI,KAAK,QAAG,CAAA;AAAA,EACnC,IAAA,GAAO,EAAE,GAAA,CAAI,QAAG,IAAI,IAAA,CAAK,QAAG,CAAA,GAAI,GAAA,GAAM,IAAA,CAAK,QAAG,IAAI,IAAA,GAAO,IAAA,CAAK,QAAG,CAAA,GAAI,GAAA,GAAM,KAAK,QAAG,CAAA,GAAI,CAAA,CAAE,GAAA,CAAI,QAAG,CAAA;AAAA,EAChG,OAAO,CAAA,CAAE,GAAA,CAAI,QAAG,CAAA,GAAI,IAAA,CAAK,QAAG,CAAA,GAAI,IAAA,GAAO,EAAE,GAAA,CAAI,cAAI,IAAI,IAAA,GAAO,IAAA,CAAK,QAAG,CAAA,GAAI,CAAA,CAAE,IAAI,QAAG,CAAA;AAAA,EACjF,KAAA,GAAQ,KAAK,kDAAU;AACzB,CAAA;AAOO,SAAS,SAAA,CAAU,IAAA,EAAe,IAAA,GAA+C,EAAC,EAAa;AACpG,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,OAAA;AAChC,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,0BAAA;AAChC,EAAA,OAAO;AAAA,IACL,EAAA;AAAA,IACA,CAAA,EAAA,EAAK,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAAA,IACb,CAAA,EAAA,EAAK,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAAA,IACb,CAAA,EAAA,EAAK,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAAA,IACb,CAAA,EAAA,EAAK,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAAA,IACb,KAAK,CAAA,CAAE,IAAA,CAAK,MAAM,UAAU,CAAC,IAAI,IAAA,CAAK,OAAO,CAAC,CAAA,EAAA,EAAK,EAAE,GAAA,CAAI,CAAA,KAAA,EAAK,OAAO,CAAA,OAAA,EAAO,OAAO,EAAE,CAAC,CAAA,CAAA;AAAA,IACtF,GAAI,IAAA,GAAO,CAAC,CAAA,EAAA,EAAK,CAAA,CAAE,IAAI,IAAI,CAAC,CAAA,CAAE,CAAA,GAAI,EAAC;AAAA,IACnC;AAAA,GACF;AACF;AAGO,SAAS,SAAA,CAAU,IAAA,EAAe,IAAA,GAA+C,EAAC,EAAS;AAChG,EAAA,IAAI,CAAC,OAAA,CAAQ,MAAA,CAAO,KAAA,EAAO;AAC3B,EAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,EAAG,SAAA,CAAU,MAAM,IAAI,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC;AAAA,CAAI,CAAA;AAC9D;AAOO,SAAS,cAAc,IAAA,EAAyB;AACrD,EAAA,OAAO;AAAA,IACL,EAAA;AAAA,IACA,CAAA,EAAA,EAAK,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAAA,IACb,CAAA,EAAA,EAAK,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAAA,IACb,CAAA,EAAA,EAAK,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAAA,IACb,CAAA,EAAA,EAAK,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAAA,IACb,KAAK,CAAA,CAAE,IAAA,CAAK,KAAA,CAAM,IAAI,CAAC,CAAA,CAAA,EAAI,IAAA,CAAK,MAAM,CAAC,KAAK,CAAA,CAAE,GAAA,CAAI,CAAA,iCAAA,EAA8B,OAAO,EAAE,CAAC,CAAA,CAAA;AAAA,IAC1F,GAAI,IAAA,GAAO,CAAC,CAAA,EAAA,EAAK,CAAA,CAAE,IAAI,IAAI,CAAC,CAAA,CAAE,CAAA,GAAI,EAAC;AAAA,IACnC;AAAA,GACF;AACF;AAGO,SAAS,cAAc,IAAA,EAAqB;AACjD,EAAA,IAAI,CAAC,OAAA,CAAQ,MAAA,CAAO,KAAA,EAAO;AAC3B,EAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,EAAG,aAAA,CAAc,IAAI,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC;AAAA,CAAI,CAAA;AAC5D;ACvDO,IAAM,iBAAA,GAAoB;AAC1B,IAAM,sBAAA,GAAyB,iCAAA;AAC/B,IAAM,iBAAA,GAAoB,gDAAA;AAuC1B,SAAS,UAAU,KAAA,EAAoC;AAC5D,EAAA,OAAc,kBAAW,QAAQ,CAAA,CAAE,OAAO,KAAK,CAAA,CAAE,OAAO,KAAK,CAAA;AAC/D;AAMO,SAAS,mBAAmB,KAAA,EAAwB;AACzD,EAAA,MAAM,EAAE,WAAA,EAAa,KAAA,EAAO,GAAG,MAAK,GAAI,KAAA;AACxC,EAAA,OAAO,SAAA,CAAU,YAAA,CAAa,IAAI,CAAC,CAAA;AACrC;AAGO,SAAS,MAAM,SAAA,EAAqC;AACzD,EAAA,OAAO,SAAA,CAAU,SAAA,CAAU,MAAA,CAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAA,EAAQ,KAAA,EAAO,CAAC,CAAA,CAAE,KAAA,CAAM,GAAG,EAAE,CAAA;AACjF;AAQO,SAAS,cAAA,CAAe,KAAA,EAAgB,KAAA,GAAwB,EAAC,EAAoB;AAC1F,EAAA,MAAM,WAAA,GAAc,mBAAmB,KAAK,CAAA;AAC5C,EAAA,MAAM,SAAA,GAA6B;AAAA,IACjC,IAAA,EAAM,EAAE,IAAA,EAAM,IAAA,EAAM,SAAS,OAAA,EAAQ;AAAA,IACrC,SAAA,EAAW,MAAM,UAAA,CAAW,SAAA;AAAA,IAC5B,UAAA,EAAY,MAAM,UAAA,CAAW,UAAA;AAAA,IAC7B,WAAA;AAAA,IACA,MAAA,EAAQ,MAAM,IAAA,CAAK;AAAA,GACrB;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,EAAQ,SAAA,CAAU,MAAA,GAAS,KAAA,CAAM,MAAA;AAC3C,EAAA,IAAI,KAAA,CAAM,UAAA,EAAY,SAAA,CAAU,UAAA,GAAa,KAAA,CAAM,UAAA;AACnD,EAAA,IAAI,KAAA,CAAM,SAAA,EAAW,SAAA,CAAU,SAAA,GAAY,KAAA,CAAM,SAAA;AACjD,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,sBAAA;AAAA,IACP,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,YAAA,EAAc,QAAQ,EAAE,MAAA,EAAQ,WAAA,EAAY,EAAG,CAAA;AAAA,IACjE,aAAA,EAAe,iBAAA;AAAA,IACf;AAAA,GACF;AACF;AAQO,SAAS,OAAA,CAAQ,aAAqB,IAAA,EAA0B;AACrE,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,IAAA,CAAK,WAAA,EAAa,MAAM,CAAA;AACjD,EAAA,MAAM,SAAS,MAAA,CAAO,IAAA;AAAA,IACpB,UAAU,SAAA,CAAU,MAAM,IAAI,WAAW,CAAA,CAAA,EAAI,KAAK,MAAM,CAAA,CAAA,CAAA;AAAA,IACxD;AAAA,GACF;AACA,EAAA,OAAO,MAAA,CAAO,OAAO,CAAC,MAAA,EAAQ,OAAO,IAAA,CAAK,IAAI,CAAC,CAAC,CAAA;AAClD;AAGO,SAAS,aAAA,CAAc,WAA4B,UAAA,EAA4C;AACpG,EAAA,MAAM,OAAO,MAAA,CAAO,IAAA,CAAK,KAAK,SAAA,CAAU,SAAS,GAAG,MAAM,CAAA;AAC1D,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,iBAAA,EAAmB,IAAI,CAAA;AAC3C,EAAA,MAAM,GAAA,GAAa,MAAA,CAAA,IAAA,CAAK,IAAA,EAAM,GAAA,EAAK,UAAU,CAAA;AAE7C,EAAA,MAAM,SAAA,GAAmB,MAAA,CAAA,eAAA,CAAgB,UAAA,CAAW,MAAA,CAAO,EAAE,IAAA,EAAM,OAAA,EAAS,MAAA,EAAQ,KAAA,EAAO,CAAA,CAAE,QAAA,EAAU,CAAA;AACvG,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,iBAAA;AAAA,IACb,OAAA,EAAS,IAAA,CAAK,QAAA,CAAS,QAAQ,CAAA;AAAA,IAC/B,UAAA,EAAY;AAAA,MACV;AAAA,QACE,KAAA,EAAO,MAAM,SAAS,CAAA;AAAA,QACtB,GAAA,EAAK,GAAA,CAAI,QAAA,CAAS,QAAQ,CAAA;AAAA,QAC1B,SAAA,EAAW,SAAA,CAAU,MAAA,CAAO,EAAE,IAAA,EAAM,QAAQ,MAAA,EAAQ,KAAA,EAAO,CAAA,CAAE,QAAA;AAAS;AACxE;AACF,GACF;AACF;AAsBA,SAAS,cAAA,GAAkC;AACzC,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,EAAA;AAAA,IACP,SAAS,EAAC;AAAA,IACV,aAAA,EAAe,EAAA;AAAA,IACf,SAAA,EAAW;AAAA,MACT,IAAA,EAAM,EAAE,IAAA,EAAM,IAAA,EAAM,SAAS,EAAA,EAAG;AAAA,MAChC,UAAA,EAAY,EAAA;AAAA,MACZ,WAAA,EAAa,EAAA;AAAA,MACb,MAAA,EAAQ,EAAE,KAAA,EAAO,CAAA,EAAG,KAAA,EAAO,CAAA,EAAG,KAAA,EAAO,CAAA,EAAG,KAAA,EAAO,CAAA,EAAG,QAAA,EAAU,CAAA;AAAE;AAChE,GACF;AACF;AAEA,SAAS,aAAa,MAAA,EAA8B;AAClD,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,QAAA;AAAA,IACR,cAAA,EAAgB,KAAA;AAAA,IAChB,YAAA,EAAc,KAAA;AAAA,IACd,KAAA,EAAO,EAAA;AAAA,IACP,MAAA;AAAA,IACA,WAAW,cAAA;AAAe,GAC5B;AACF;AAEO,SAAS,cAAA,CACd,GAAA,EACA,IAAA,GAAmD,EAAC,EACtC;AAGd,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,GAAA,EAAK,OAAA,IAAW,IAAI,QAAQ,CAAA;AAC/C,IAAA,MAAM,SAAS,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,QAAA,CAAS,MAAM,CAAC,CAAA;AAC/C,IAAA,IAAI,CAAC,MAAA,IAAU,OAAO,WAAW,QAAA,IAAY,CAAC,OAAO,SAAA,EAAW;AAC9D,MAAA,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAAA,IACrC;AACA,IAAA,SAAA,GAAY,MAAA;AAAA,EACd,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,aAAa,+DAA+D,CAAA;AAAA,EACrF;AAEA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,WAAA,EAAa,IAAI,CAAA;AACzC,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,UAAA,GAAa,CAAC,CAAA;AAC/B,EAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,IAAS,EAAA;AAC7B,EAAA,MAAM,GAAA,GAAM,IAAA,EAAM,GAAA,GAAM,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,GAAA,EAAK,QAAQ,CAAA,GAAI,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA;AAExE,EAAA,IAAI,cAAA,GAAiB,KAAA;AACrB,EAAA,IAAI,YAAA,GAAe,KAAA;AACnB,EAAA,IAAI;AACF,IAAA,IAAI,IAAA,IAAQ,IAAI,MAAA,EAAQ;AACtB,MAAA,IAAI,KAAK,YAAA,EAAc;AACrB,QAAA,MAAM,SAAA,GAAmB,MAAA,CAAA,eAAA,CAAgB,IAAA,CAAK,YAAY,CAAA;AAC1D,QAAA,cAAA,GAAwB,MAAA,CAAA,MAAA,CAAO,IAAA,EAAM,GAAA,EAAK,SAAA,EAAW,GAAG,CAAA;AACxD,QAAA,YAAA,GAAe,cAAA;AAAA,MACjB,CAAA,MAAA,IAAW,KAAK,SAAA,EAAW;AACzB,QAAA,MAAM,WAAA,GAAqB,MAAA,CAAA,eAAA,CAAgB,IAAA,CAAK,SAAS,CAAA;AACzD,QAAA,cAAA,GAAwB,MAAA,CAAA,MAAA,CAAO,IAAA,EAAM,GAAA,EAAK,WAAA,EAAa,GAAG,CAAA;AAAA,MAC5D;AAAA,IACF;AAAA,EACF,CAAA,CAAA,MAAQ;AAEN,IAAA,cAAA,GAAiB,KAAA;AACjB,IAAA,YAAA,GAAe,KAAA;AAAA,EACjB;AAEA,EAAA,MAAM,aAAA,GAAgB,KAAK,KAAA,GACvB,kBAAA,CAAmB,KAAK,KAAK,CAAA,KAAM,SAAA,CAAU,SAAA,CAAU,WAAA,GACvD,MAAA;AACJ,EAAA,MAAM,KAAA,GAAQ,SAAA,CAAU,SAAA,CAAU,MAAA,EAAQ,KAAA;AAE1C,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI,CAAC,cAAA,EAAgB;AACnB,IAAA,MAAA,GAAS,QAAA;AACT,IAAA,MAAA,GAAS,OAAO,+BAAA,GAAkC,0BAAA;AAAA,EACpD,CAAA,MAAA,IAAW,kBAAkB,KAAA,EAAO;AAClC,IAAA,MAAA,GAAS,QAAA;AACT,IAAA,MAAA,GAAS,kFAAA;AAAA,EACX,CAAA,MAAA,IAAW,YAAA,IAAgB,CAAC,KAAA,EAAO;AACjC,IAAA,MAAA,GAAS,UAAA;AACT,IAAA,MAAA,GACE,aAAA,KAAkB,OACd,uDAAA,GACA,iCAAA;AAAA,EACR,CAAA,MAAO;AACL,IAAA,MAAA,GAAS,iBAAA;AACT,IAAA,MAAA,GAAS,QACL,uEAAA,GACA,4EAAA;AAAA,EACN;AAEA,EAAA,OAAO,EAAE,QAAQ,cAAA,EAAgB,YAAA,EAAc,eAAe,KAAA,EAAO,KAAA,EAAO,QAAQ,SAAA,EAAU;AAChG;AASO,SAAS,eAAA,GAAoC;AAClD,EAAA,MAAM,EAAE,SAAA,EAAW,UAAA,EAAW,GAAW,2BAAoB,SAAS,CAAA;AACtE,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,UAAA,CAAW,MAAA,CAAO,EAAE,IAAA,EAAM,SAAS,MAAA,EAAQ,KAAA,EAAO,CAAA,CAAE,QAAA,EAAS;AAAA,IACzE,SAAA,EAAW,SAAA,CAAU,MAAA,CAAO,EAAE,IAAA,EAAM,QAAQ,MAAA,EAAQ,KAAA,EAAO,CAAA,CAAE,QAAA,EAAS;AAAA,IACtE,KAAA,EAAO,MAAM,SAAS;AAAA,GACxB;AACF;AAGO,SAAS,kBAAkB,GAAA,EAA2B;AAC3D,EAAA,OAAO,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,GAAG,CAAC;AAAA,CAAA;AAC/B;AAEO,SAAS,cAAc,IAAA,EAA4B;AACxD,EAAA,MAAM,OAAO,IAAA,CAAK,IAAA,GAAO,KAAA,CAAM,IAAI,EAAE,CAAC,CAAA;AACtC,EAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AACxB;;;AChQA,IAAM,mBAAA,GAAsB,0BAAA;AAC5B,IAAM,WAAA,GAAc,gBAAA;AAoBpB,eAAsB,oBAAA,CACpB,IAAA,EACA,KAAA,EACA,IAAA,EACsD;AACtD,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,GAAA,IAAO,OAAA,CAAQ,GAAA,CAAI,aAAA;AAC5C,EAAA,MAAM,OAAA,GAAU,cAAmB,IAAA,CAAA,OAAA,CAAQ,WAAW,IAAS,IAAA,CAAA,IAAA,CAAK,IAAA,EAAM,aAAa,WAAW,CAAA;AAElG,EAAA,IAAI,cAAA;AACJ,EAAA,IAAI,CAAI,EAAA,CAAA,UAAA,CAAW,OAAO,CAAA,EAAG;AAC3B,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,MAAM,IAAI,QAAA,CAAS,CAAA,uBAAA,EAA0B,WAAW,CAAA,CAAA,EAAI,SAAS,WAAW,CAAA;AAAA,IAClF;AAGA,IAAA,MAAM,KAAK,eAAA,EAAgB;AAC3B,IAAG,aAAe,IAAA,CAAA,OAAA,CAAQ,OAAO,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AACvD,IAAG,iBAAc,OAAA,EAAS,EAAA,CAAG,YAAY,EAAE,IAAA,EAAM,KAAO,CAAA;AACxD,IAAG,EAAA,CAAA,aAAA,CAAc,CAAA,EAAG,OAAO,CAAA,IAAA,CAAA,EAAQ,GAAG,SAAS,CAAA;AAC/C,IAAA,cAAA,GAAiB,OAAA;AACjB,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN,uCAAuC,GAAA,CAAI,IAAA,EAAM,OAAO,CAAC,CAAA,QAAA,EAAW,GAAG,KAAK,CAAA,4EAAA;AAAA,KAE9E;AAAA,EACF;AAEA,EAAA,IAAI,UAAA;AACJ,EAAA,IAAI;AACF,IAAA,UAAA,GAAoBA,MAAA,CAAA,gBAAA,CAAoB,EAAA,CAAA,YAAA,CAAa,OAAA,EAAS,MAAM,CAAC,CAAA;AAAA,EACvE,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,SAAS,CAAA,2CAAA,EAA8C,GAAA,CAAI,MAAM,OAAO,CAAC,CAAA,CAAA,EAAI,QAAA,CAAS,WAAW,CAAA;AAAA,EAC7G;AACA,EAAA,IAAI,UAAA,CAAW,sBAAsB,SAAA,EAAW;AAC9C,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,CAAA,oCAAA,EAAuC,IAAI,IAAA,EAAM,OAAO,CAAC,CAAA,IAAA,EAAO,UAAA,CAAW,qBAAqB,SAAS,CAAA,CAAA;AAAA,MACzG,QAAA,CAAS;AAAA,KACX;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,IAAI,CAAA;AACvC,EAAA,MAAM,SAAA,GAAY,cAAA,CAAe,KAAA,EAAO,EAAE,QAAQ,CAAA;AAClD,EAAA,MAAM,QAAA,GAAW,aAAA,CAAc,SAAA,EAAW,UAAU,CAAA;AACpD,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,WAAA,GACZ,IAAA,CAAA,OAAA,CAAQ,IAAA,CAAK,WAAW,CAAA,GACxB,IAAA,CAAA,IAAA,CAAK,IAAA,EAAM,WAAA,EAAa,mBAAmB,CAAA;AACpD,EAAG,aAAe,IAAA,CAAA,OAAA,CAAQ,OAAO,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AACvD,EAAG,EAAA,CAAA,aAAA,CAAc,OAAA,EAAS,iBAAA,CAAkB,QAAQ,CAAC,CAAA;AAErD,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,KAAA,EAAO,QAAA,CAAS,UAAA,CAAW,CAAC,GAAG,KAAA,IAAS,EAAA;AAAA,MACxC,WAAA,EAAa,UAAU,SAAA,CAAU,WAAA;AAAA,MACjC,WAAA,EAAa,SAAA,CAAU,SAAA,CAAU,SAAA,EAAW,WAAA;AAAA,MAC5C,MAAA;AAAA,MACA,GAAA,EAAK,GAAA,CAAI,IAAA,EAAM,OAAO,CAAA;AAAA,MACtB,cAAA,EAAgB,cAAA,GAAiB,GAAA,CAAI,IAAA,EAAM,cAAc,CAAA,GAAI;AAAA,KAC/D;AAAA,IACA;AAAA,GACF;AACF;AAmBO,SAAS,sBAAA,CAAuB,MAAc,IAAA,EAAuC;AAC1F,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,WAAA,GACf,IAAA,CAAA,OAAA,CAAQ,IAAA,CAAK,WAAW,CAAA,GACxB,IAAA,CAAA,IAAA,CAAK,IAAA,EAAM,WAAA,EAAa,mBAAmB,CAAA;AACpD,EAAA,IAAI,CAAI,EAAA,CAAA,UAAA,CAAW,UAAU,CAAA,EAAG;AAC9B,IAAA,IAAI,IAAA,CAAK,WAAA,IAAe,IAAA,CAAK,GAAA,EAAK;AAChC,MAAA,MAAM,IAAI,QAAA;AAAA,QACR,CAAA,kBAAA,EAAqB,GAAA,CAAI,IAAA,EAAM,UAAU,CAAC,CAAA,2CAAA,CAAA;AAAA,QAC1C,QAAA,CAAS;AAAA,OACX;AAAA,IACF;AACA,IAAA,OAAO,EAAE,UAAA,EAAY,OAAA,EAAS,IAAA,EAAK;AAAA,EACrC;AACA,EAAA,MAAM,QAAA,GAAW,aAAA,CAAiB,EAAA,CAAA,YAAA,CAAa,UAAA,EAAY,MAAM,CAAC,CAAA;AAClE,EAAA,MAAM,YAAA,GAAe,KAAK,GAAA,GAAS,EAAA,CAAA,YAAA,CAAkB,aAAQ,IAAA,CAAK,GAAG,CAAA,EAAG,MAAM,CAAA,GAAI,MAAA;AAClF,EAAA,MAAM,KAAA,GAAQ,SAAA,CAAU,IAAI,CAAA,IAAK,MAAA;AACjC,EAAA,OAAO,EAAE,UAAA,EAAY,OAAA,EAAS,KAAA,EAAO,MAAA,EAAQ,cAAA,CAAe,QAAA,EAAU,EAAE,YAAA,EAAc,KAAA,EAAO,CAAA,EAAE;AACjG;AAEA,eAAe,cAAc,IAAA,EAA+C;AAC1E,EAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAY,IAAI,CAAA;AAClC,EAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,EAAA,MAAM,KAAA,GAAQ,MAAM,gBAAA,CAAiB,IAAI,CAAA;AACzC,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,CAAU,IAAI,CAAA;AACnC,EAAA,OAAO,EAAE,GAAA,EAAK,QAAA,EAAU,GAAA,CAAI,KAAA,CAAM,GAAG,CAAC,CAAA,EAAG,MAAA,EAAQ,KAAA,EAAO,UAAU,IAAA,GAAO,IAAA,GAAO,KAAA,KAAU,KAAA,GAAQ,QAAQ,MAAA,EAAU;AACtH;AAGA,SAAS,UAAU,IAAA,EAA2C;AAC5D,EAAA,OAAO,IAAI,OAAA,CAAQ,CAACC,QAAAA,KAAY;AAC9B,IAAA,QAAA;AAAA,MACE,KAAA;AAAA,MACA,CAAC,WAAA,EAAa,cAAA,EAAgB,MAAM,CAAA;AAAA,MACpC,EAAE,KAAK,IAAA,EAAM,OAAA,EAAS,KAAM,WAAA,EAAa,IAAA,EAAM,UAAU,MAAA,EAAO;AAAA,MAChE,CAAC,KAAK,MAAA,KAAW;AACf,QAAA,IAAI,GAAA,EAAK,OAAOA,QAAAA,CAAQ,MAAS,CAAA;AACjC,QAAA,MAAM,IAAA,GAAO,MAAA,CAAO,MAAM,CAAA,CAAE,IAAA,EAAK;AACjC,QAAAA,QAAAA,CAAQ,IAAA,IAAQ,IAAA,KAAS,MAAA,GAAS,OAAO,MAAS,CAAA;AAAA,MACpD;AAAA,KACF;AAAA,EACF,CAAC,CAAA;AACH;AAEA,SAAS,GAAA,CAAI,MAAc,CAAA,EAAmB;AAC5C,EAAA,MAAM,CAAA,GAAS,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,CAAC,CAAA;AAC/B,EAAA,OAAO,CAAA,CAAE,UAAA,CAAW,IAAI,CAAA,GAAI,CAAA,GAAI,CAAA;AAClC;;;AChKA,IAAM,MAAA,GAAS,CAAC,QAAA,EAAK,QAAA,EAAK,QAAA,EAAK,QAAA,EAAK,QAAA,EAAK,QAAA,EAAK,QAAA,EAAK,QAAA,EAAK,QAAA,EAAK,QAAG,CAAA;AAChE,IAAM,KAAA,GAAQ,EAAA;AAEd,SAAS,YAAY,EAAA,EAAoB;AACvC,EAAA,MAAM,CAAA,GAAI,KAAK,GAAA,CAAI,CAAA,EAAG,KAAK,KAAA,CAAM,EAAA,GAAK,GAAI,CAAC,CAAA;AAC3C,EAAA,IAAI,CAAA,GAAI,EAAA,EAAI,OAAO,CAAA,EAAG,CAAC,CAAA,CAAA,CAAA;AACvB,EAAA,OAAO,CAAA,EAAG,IAAA,CAAK,KAAA,CAAM,CAAA,GAAI,EAAE,CAAC,CAAA,CAAA,EAAI,MAAA,CAAO,CAAA,GAAI,EAAE,CAAA,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA,CAAA;AACjE;AAMO,SAAS,kBAAA,CACd,KAAA,EACA,IAAA,EACA,KAAA,EACA,WACA,KAAA,EACQ;AACR,EAAA,MAAM,KAAA,GAAQ,QAAQ,CAAA,GAAI,IAAA,CAAK,IAAI,IAAA,GAAO,KAAA,EAAO,CAAC,CAAA,GAAI,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,gBAAA,CAAiB,KAAA,EAAO,KAAK,CAAA;AACzC,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,GAAG,CAAA;AAClC,EAAA,MAAM,IAAA,GAAO,CAAA,CAAE,IAAA,CAAK,MAAA,CAAA,CAAS,KAAA,GAAQ,MAAA,CAAO,MAAA,GAAU,MAAA,CAAO,MAAA,IAAU,MAAA,CAAO,MAAM,CAAC,CAAA;AACrF,EAAA,MAAM,GAAA,GAAM,KAAA,GAAQ,IAAA,IAAQ,KAAA,GAAQ,CAAA,GAAI,CAAA,UAAA,EAAU,WAAA,CAAa,SAAA,GAAY,KAAA,IAAU,CAAA,GAAI,KAAA,CAAM,CAAC,CAAA,CAAA,GAAK,EAAA;AACrG,EAAA,OAAO,CAAA,EAAA,EAAK,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,EAAI,CAAA,CAAE,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,CAAA,CAAG,CAAC,CAAA,CAAA,EAAI,CAAA,CAAE,GAAA,CAAI,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,MAAA,EAAM,WAAA,CAAY,SAAS,CAAC,CAAA,EAAG,GAAG,CAAA,CAAE,CAAC,CAAA,CAAA;AACtH;AAGO,IAAM,cAAN,MAAkB;AAAA,EAKvB,YAA6B,KAAA,EAAe;AAAf,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AAAA,EAAgB;AAAA,EAAhB,KAAA;AAAA,EAJZ,KAAA,GAAQ,KAAK,GAAA,EAAI;AAAA,EAC1B,KAAA,GAAQ,CAAA;AAAA,EACC,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,KAAK,CAAA;AAAA,EAInD,MAAA,CAAO,MAAc,KAAA,EAAqB;AACxC,IAAA,IAAI,CAAC,KAAK,GAAA,EAAK;AACf,IAAA,MAAM,IAAA,GAAO,kBAAA,CAAmB,IAAA,CAAK,KAAA,EAAO,IAAA,EAAM,KAAA,EAAO,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,CAAA;AAC9F,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,SAAA,EAAY,IAAI,CAAA,CAAE,CAAA;AAAA,EACzC;AAAA;AAAA,EAGA,KAAK,OAAA,EAAwB;AAC3B,IAAA,IAAI,CAAC,KAAK,GAAA,EAAK;AACf,IAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,WAAW,CAAA;AAChC,IAAA,IAAI,OAAA,EAAS,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,GAAG,OAAO;AAAA,CAAI,CAAA;AAAA,EAClD;AACF;;;ACxBO,SAAS,mBAAmB,GAAA,EAAuB;AACxD,EAAA,OAAO,IACJ,MAAA,CAAO,iBAAA,EAAmB,8BAA8B,GAAG,CAAA,CAC3D,OAAO,QAAA,EAAU,wDAAwD,CAAA,CACzE,MAAA,CAAO,UAAU,iCAAiC,CAAA,CAClD,OAAO,sBAAA,EAAwB,0DAA0D,EACzF,MAAA,CAAO,gBAAA,EAAkB,uBAAuB,CAAA,CAChD,OAAO,YAAA,EAAc,6CAA6C,EAClE,MAAA,CAAO,SAAA,EAAW,iDAAiD,CAAA,CACnE,MAAA,CAAO,SAAA,EAAW,0BAA0B,EAC5C,MAAA,CAAO,iBAAA,EAAmB,oFAAoF,CAAA,CAC9G,MAAA,CAAO,cAAc,wBAAwB,CAAA;AAClD;AAGO,SAAS,WAAW,GAAA,EAA0B;AACnD,EAAA,MAAM,CAAA,GAAI,IAAI,IAAA,EAA8B;AAC5C,EAAA,OAAO;AAAA,IACL,KAAK,CAAA,CAAE,GAAA;AAAA,IACP,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,aAAa,CAAA,CAAE,WAAA;AAAA,IACf,OAAO,CAAA,CAAE,KAAA;AAAA,IACT,OAAA,EAAS,EAAE,KAAA,KAAU,KAAA;AAAA,IACrB,OAAO,CAAA,CAAE,KAAA;AAAA,IACT,OAAO,CAAA,CAAE,KAAA;AAAA,IACT,QAAQ,CAAA,CAAE;AAAA,GACZ;AACF;;;ACpBO,SAAS,cAAc,OAAA,EAAwB;AACpD,EAAA,MAAM,MAAM,OAAA,CACT,OAAA,CAAQ,OAAO,CAAA,CACf,WAAA,CAAY,0DAA0D,CAAA,CACtE,QAAA,CAAS,YAAA,EAAc,mDAAmD,EAC1E,MAAA,CAAO,gBAAA,EAAkB,sCAAsC,CAAA,CAC/D,MAAA,CAAO,oBAAoB,gCAAA,EAAkC,OAAA,EAAS,EAAE,EACxE,MAAA,CAAO,WAAA,EAAa,yBAAyB,CAAA,CAC7C,MAAA,CAAO,eAAe,8BAA8B,CAAA,CACpD,OAAO,aAAA,EAAe,mCAAmC,EACzD,MAAA,CAAO,YAAA,EAAc,oCAAoC,CAAA,CACzD,MAAA,CAAO,iBAAiB,8EAA8E,CAAA,CACtG,MAAA,CAAO,WAAA,EAAa,uBAAuB,CAAA,CAC3C,MAAA,CAAO,YAAY,gEAAgE,CAAA,CACnF,OAAO,WAAA,EAAa,iEAAiE,CAAA,CACrF,MAAA,CAAO,oBAAoB,yDAAyD,CAAA,CACpF,OAAO,qBAAA,EAAuB,gDAAgD,EAC9E,MAAA,CAAO,UAAA,EAAY,gEAA2D,CAAA,CAC9E,OAAO,UAAA,EAAY,+DAA+D,EAClF,MAAA,CAAO,qBAAA,EAAuB,sEAAsE,CAAA,CACpG,MAAA,CAAO,wBAAwB,sDAAsD,CAAA,CACrF,OAAO,cAAA,EAAgB,kDAAkD,EACzE,MAAA,CAAO,eAA+B,OAAiB,IAAA,EAAoB;AAC1E,IAAA,MAAM,QAAA,CAAS,KAAA,EAAO,IAAA,EAAM,UAAA,CAAW,IAAI,CAAC,CAAA;AAAA,EAC9C,CAAC,CAAA;AACH,EAAA,kBAAA,CAAmB,GAAG,CAAA;AACxB;AAEA,eAAsB,QAAA,CACpB,KAAA,EACA,IAAA,EACA,MAAA,EACe;AACf,EAAA,MAAM,IAAA,GAAYC,IAAA,CAAA,OAAA,CAAQ,MAAA,CAAO,GAAA,IAAO,GAAG,CAAA;AAI3C,EAAA,IAAI,KAAK,MAAA,EAAQ;AACf,IAAA,MAAM,WAAA,CAAY,IAAA,EAAM,IAAA,EAAM,MAAM,CAAA;AACpC,IAAA;AAAA,EACF;AAKA,EAAA,MAAM,WAAA,GAAc,CAAC,MAAA,CAAO,IAAA,IAAQ,CAAC,MAAA,CAAO,KAAA;AAC5C,EAAA,IAAI,WAAA,EAAa,SAAA,CAAeA,IAAA,CAAA,QAAA,CAAS,IAAI,KAAK,IAAI,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,cAAc,IAAI,WAAA,CAAY,EAAE,GAAA,CAAI,SAAS,CAAC,CAAA,GAAI,MAAA;AAC9D,EAAA,MAAM,OAAO,IAAA,CAAK,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,GAAI,MAAA;AAC7C,EAAA,IAAI,IAAA,KAAS,WAAc,CAAC,MAAA,CAAO,UAAU,IAAI,CAAA,IAAK,OAAO,CAAA,CAAA,EAAI;AAC/D,IAAA,MAAM,UAAA,CAAW,CAAA,wCAAA,EAA2C,IAAA,CAAK,IAAI,CAAA,EAAA,CAAI,CAAA;AAAA,EAC3E;AAEA,EAAA,MAAM,OAAO,IAAA,CAAK,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,MAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,IAAA,EAAM,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,GAAI,MAAA;AACrF,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,MAAM,UAAA,CAAW;AAAA,MACxB,IAAA;AAAA,MACA,KAAA,EAAO,KAAA,CAAM,MAAA,GAAS,KAAA,GAAQ,KAAA,CAAA;AAAA,MAC9B,IAAA;AAAA,MACA,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,IAAA;AAAA,MACA,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,QAAA,EAAU,KAAK,MAAA,KAAW,KAAA;AAAA,MAC1B,MAAM,OAAO,IAAA,CAAK,IAAA,KAAS,QAAA,GAAW,KAAK,IAAA,GAAO,KAAA,CAAA;AAAA,MAClD,MAAA,EAAQ,KAAK,IAAA,KAAS,KAAA;AAAA,MACtB,KAAA,EAAO,KAAK,GAAA,KAAQ,KAAA;AAAA,MACpB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,eAAA,EAAiB,MAAM,CAAC,IAAA,EAAM,UAAU,GAAA,CAAI,MAAA,CAAO,IAAA,EAAM,KAAK,CAAA,GAAI,KAAA,CAAA;AAAA,MAClE,aAAa,IAAA,CAAK;AAAA,KACnB,CAAA;AAAA,EACH,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,EAAK,IAAA,EAAK;AACV,IAAA,IAAI,GAAA,YAAe,UAAA,EAAY,MAAM,UAAA,CAAW,IAAI,OAAO,CAAA;AAG3D,IAAA,IAAI,GAAA,YAAe,oBAAoB,MAAM,IAAI,SAAS,GAAA,CAAI,OAAA,EAAS,SAAS,KAAK,CAAA;AACrF,IAAA,MAAM,GAAA;AAAA,EACR;AACA,EAAA,GAAA,EAAK,IAAA,EAAK;AAEV,EAAA,MAAM,OAAA,GAAU,cAAA,CAAe,MAAA,CAAO,KAAA,EAAO;AAAA,IAC3C,IAAA;AAAA,IACA,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,QAAQ,IAAA,CAAK,MAAA;AAAA,IACb,WAAW,MAAA,CAAO;AAAA,GACnB,CAAA;AAMD,EAAA,IAAI,CAAC,OAAO,KAAA,EAAO;AACjB,IAAA,aAAA,CAAc,MAAM,MAAA,CAAO,KAAA,CAAM,UAAA,CAAW,UAAA,EAAY,OAAO,SAAA,EAAW;AAAA,MACxE,IAAA;AAAA,MACA,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,KAAA,EAAO,KAAA,CAAM,MAAA,GAAS,KAAA,GAAQ,MAAA;AAAA,MAC9B,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,QAAA,EAAU,KAAK,MAAA,KAAW,KAAA;AAAA,MAC1B,MAAM,OAAO,IAAA,CAAK,IAAA,KAAS,QAAA,GAAW,KAAK,IAAA,GAAO,MAAA;AAAA,MAClD,MAAA,EAAQ,KAAK,IAAA,KAAS,KAAA;AAAA,MACtB,KAAA,EAAO,KAAK,GAAA,KAAQ,KAAA;AAAA,MACpB,aAAa,IAAA,CAAK;AAAA,KACnB,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,KAAK,MAAA,EAAQ,WAAA,CAAY,MAAA,CAAO,KAAA,EAAO,KAAK,MAAM,CAAA;AAOtD,EAAA,IAAI,CAAC,OAAO,KAAA,EAAO;AACjB,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,CAAM,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,MAAM,CAAA,CAAE,MAAA;AACtE,IAAA,MAAM,YAAY,4BAAA,CAA6B,IAAA,EAAM,SAAA,GAAY,CAAA,IAAK,YAAY,gBAAgB,CAAA;AAClG,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,KAAA,MAAW,KAAK,SAAA,EAAW;AACzB,QAAA,IAAA,CAAK,CAAA,CAAE,GAAA,CAAI,CAAA,yCAAA,EAAyC,CAAA,CAAE,IAAI,CAAA,GAAA,EAAM,CAAA,CAAE,IAAI,CAAA,SAAA,EAAO,CAAA,CAAE,EAAE,CAAA,CAAA,CAAG,CAAC,CAAA;AAAA,MACvF;AAAA,IACF;AAAA,EACF;AAGA,EAAA,IAAI,WAAA;AACJ,EAAA,MAAM,gBAA0B,EAAC;AACjC,EAAA,IAAI,KAAK,MAAA,EAAQ;AACf,IAAA,MAAM,MAAA,GAAS,MAAM,oBAAA,CAAqB,IAAA,EAAM,OAAO,KAAA,EAAO;AAAA,MAC5D,KAAK,IAAA,CAAK,SAAA;AAAA,MACV,aAAa,IAAA,CAAK;AAAA,KACnB,CAAA;AACD,IAAA,WAAA,GAAc,MAAA,CAAO,OAAA;AACrB,IAAA,aAAA,CAAc,IAAA,CAAK,GAAG,MAAA,CAAO,OAAO,CAAA;AAAA,EACtC;AAEA,EAAA,IAAI,OAAO,IAAA,EAAM;AACf,IAAA,IAAA,CAAK;AAAA,MACH,EAAA,EAAI,IAAA;AAAA,MACJ,MAAA,EAAQ,MAAA,CAAO,KAAA,CAAM,IAAA,CAAK,MAAA;AAAA,MAC1B,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,IAAA,CAAK,SAAA;AAAA,MAC7B,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,SAAS,MAAA,CAAO,YAAA;AAAA,MAChB,KAAK,MAAA,CAAO,GAAA;AAAA,MACZ,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,SAAA,EAAW,kBAAA,CAAmB,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA;AAAA,MAChD,SAAA,EAAW,OAAA;AAAA,MACX,UAAA,EAAY,MAAA,CAAO,KAAA,CAAM,UAAA,CAAW,UAAA;AAAA,MACpC,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,UAAA,CAAW,SAAA;AAAA,MACnC,WAAA;AAAA,MACA,QAAA,EAAU,OAAO,MAAA,CAAO,OAAA;AAAA,MACxB,UAAU,MAAA,CAAO;AAAA,KAClB,CAAA;AACD,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAA,CAAO,KAAA,CAAM,IAAA;AAChC,EAAA,MAAM,WAAA,GACJ,MAAA,CAAO,MAAA,GAAS,CAAA,GACZ,CAAA,aAAA,EAAgB,MAAA,CAAO,QAAQ,CAAA,IAAA,EAAO,MAAA,CAAO,UAAU,CAAA,gBAAA,CAAA,GACvD,CAAA,EAAG,OAAO,UAAU,CAAA,aAAA,CAAA;AAC1B,EAAA,MAAM,WAAW,MAAA,CAAO,MAAA,CAAO,OAAA,GAAU,GAAA,EAAM,QAAQ,CAAC,CAAA;AACxD,EAAA,IAAA,CAAK,CAAA,EAAG,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,aAAA,EAAaC,IAAAA,CAAI,IAAI,CAAC,CAAA,IAAA,EAAO,OAAO,CAAA,GAAA,EAAM,WAAW,CAAA,CAAA,CAAG,CAAA;AAC5E,EAAA,IAAA;AAAA,IACE,CAAA,QAAA,EAAW,CAAA,CAAE,IAAA,CAAK,MAAA,CAAO,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA,SAAA,EAAY,CAAA,CAAE,IAAA,CAAK,MAAA,CAAO,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA,SAAA,EACpE,MAAA,CAAO,KAAK,CAAA,SAAA,EAAY,MAAA,CAAO,KAAA,CAAM,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,GAAG,CAAA,IAAK,QAAG,CAAA;AAAA,GACjF;AACA,EAAA,MAAM,OAAA,GACJ,OAAO,YAAA,CAAa,aAAA,GAAgB,OAAO,YAAA,CAAa,eAAA,GAAkB,IACtE,IAAA,CAAK,KAAA;AAAA,IACF,GAAA,GAAM,OAAO,YAAA,CAAa,aAAA,IACxB,OAAO,YAAA,CAAa,aAAA,GAAgB,OAAO,YAAA,CAAa,eAAA;AAAA,GAC7D,GACA,GAAA;AAGN,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,GAAA,IAAO,MAAA,CAAO,IAAA;AACrC,EAAA,MAAM,YAAY,OAAA,GAAU,CAAA,gBAAA,EAAmB,OAAO,CAAA,CAAA,CAAA,GAAM,kBAAkB,OAAO,CAAA,CAAA,CAAA;AACrF,EAAA,IAAA,CAAK,CAAA,CAAE,GAAA,CAAI,CAAA,EAAA,EAAK,SAAS,CAAA,eAAA,EAAe,MAAA,CAAO,KAAA,CAAM,UAAA,CAAW,QAAA,CAAS,IAAA,CAAK,GAAG,CAAC,EAAE,CAAC,CAAA;AACrF,EAAA,IAAI,OAAO,GAAA,EAAK;AACd,IAAA,MAAM,GAAA,GAAM,OAAO,GAAA,CAAI,GAAA,GAAM,IAAI,CAAA,EAAA,EAAK,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA,IAAA,CAAA,GAAS,EAAA;AAC7D,IAAA,IAAA,CAAK,EAAE,GAAA,CAAI,CAAA,OAAA,EAAU,MAAA,CAAO,GAAA,CAAI,QAAQ,CAAA,sBAAA,EAAyB,MAAA,CAAO,GAAA,CAAI,KAAK,iBAAiB,MAAA,CAAO,GAAA,CAAI,KAAK,CAAA,MAAA,EAAS,GAAG,GAAG,CAAC,CAAA;AAAA,EACpI;AACA,EAAA,IAAI,OAAO,IAAA,EAAM;AACf,IAAA,IAAA,CAAK,EAAE,GAAA,CAAI,CAAA,QAAA,EAAW,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA,oBAAA,EAAuB,MAAA,CAAO,IAAA,CAAK,IAAA,IAAQ,OAAO,CAAA,EAAA,EAAK,MAAA,CAAO,IAAA,CAAK,SAAS,QAAQ,CAAC,CAAA;AAAA,EACjI;AACA,EAAA,MAAM,EAAA,GAAK,kBAAA,CAAmB,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA;AAChD,EAAA,IAAA;AAAA,IACE,CAAA,CAAE,GAAA;AAAA,MACA,CAAA,kCAAA,EAAkC,GAAG,QAAQ,CAAA,mBAAA,EAAmB,GAAG,cAAc,CAAC,CAAA,eAAA,EAAe,EAAA,CAAG,QAAQ,CAAA;AAAA;AAC9G,GACF;AACA,EAAA,MAAM,YAAA,GAAe,CAAC,OAAA,CAAQ,SAAA,EAAW,QAAQ,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA,CAC1E,MAAA,CAAO,OAAO,CAAA,CACd,GAAA,CAAI,CAAC,CAAA,KAAWD,IAAA,CAAA,QAAA,CAAS,MAAM,CAAW,CAAC,CAAA,CAC3C,IAAA,CAAK,IAAI,CAAA;AACZ,EAAA,IAAA,CAAK,CAAA,SAAA,EAAO,YAAY,CAAA,CAAE,CAAA;AAC1B,EAAA,IAAI,MAAA,CAAO,SAAS,MAAA,EAAQ;AAC1B,IAAA,IAAA,CAAK,EAAE,MAAA,CAAO,CAAA,EAAA,EAAK,OAAO,QAAA,CAAS,MAAM,qDAAgD,CAAC,CAAA;AAAA,EAC5F;AACA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,KAAA,MAAW,CAAA,IAAK,eAAe,IAAA,CAAK,CAAA,CAAE,OAAO,CAAA,EAAA,EAAK,CAAC,EAAE,CAAC,CAAA;AACtD,IAAA,IAAA;AAAA,MACE,CAAA,CAAE,GAAA;AAAA,QACA,CAAA,sBAAA,EAAsB,WAAA,CAAY,KAAK,CAAA,aAAA,EAAa,WAAA,CAAY,WAAA,CAAY,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,cAAA,EAAO,WAAA,CAAY,GAAG,CAAA;AAAA;AAChH,KACF;AAAA,EACF;AAEA,EAAA,mBAAA,CAAoB,MAAM,MAAA,CAAO,KAAA,EAAO,MAAA,EAAQ,IAAA,CAAK,SAAS,KAAK,CAAA;AACrE;AAQA,eAAe,WAAA,CAAY,IAAA,EAAc,IAAA,EAAoB,MAAA,EAAmC;AAC9F,EAAA,MAAM,OAAO,IAAA,CAAK,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,MAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,IAAA,EAAM,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,GAAI,MAAA;AACrF,EAAA,MAAM,OAAO,IAAA,CAAK,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,GAAI,MAAA;AAC7C,EAAA,MAAM,GAAA,GAAM,MAAM,iBAAA,CAAkB,EAAE,IAAA,EAAM,MAAM,OAAA,EAAS,IAAA,CAAK,OAAA,EAAS,IAAA,EAAM,CAAA;AAC/E,EAAA,MAAM,MAAA,GAAS,sBAAA,CAAuB,IAAA,EAAM,EAAE,WAAA,EAAa,KAAK,WAAA,EAAa,GAAA,EAAK,IAAA,CAAK,GAAA,EAAK,CAAA;AAC5F,EAAA,MAAM,eAAe,CAAC,MAAA,CAAO,OAAA,IAAW,MAAA,CAAO,QAAQ,MAAA,KAAW,QAAA;AAElE,EAAA,IAAI,OAAO,IAAA,EAAM;AACf,IAAA,IAAA,CAAK;AAAA,MACH,EAAA,EAAI,GAAA,CAAI,EAAA,IAAM,CAAC,YAAA;AAAA,MACf,WAAA,EAAa,EAAE,EAAA,EAAI,GAAA,CAAI,EAAA,EAAI,QAAQ,GAAA,CAAI,MAAA,EAAQ,MAAA,EAAQ,GAAA,CAAI,MAAA,EAAO;AAAA,MAClE,WAAA,EAAa,MAAA,CAAO,OAAA,GAChB,IAAA,GACA;AAAA,QACE,MAAA,EAAQ,OAAO,MAAA,EAAQ,MAAA;AAAA,QACvB,cAAA,EAAgB,OAAO,MAAA,EAAQ,cAAA;AAAA,QAC/B,YAAA,EAAc,OAAO,MAAA,EAAQ,YAAA;AAAA,QAC7B,aAAA,EAAe,OAAO,MAAA,EAAQ,aAAA;AAAA,QAC9B,KAAA,EAAO,OAAO,MAAA,EAAQ,KAAA;AAAA,QACtB,KAAA,EAAO,OAAO,MAAA,EAAQ,KAAA;AAAA,QACtB,MAAA,EAAQ,OAAO,MAAA,EAAQ;AAAA;AACzB,KACL,CAAA;AAAA,EACH,CAAA,MAAO;AACL,IAAA,IAAA,CAAK,CAAA,EAAG,CAAA,CAAE,IAAA,CAAK,mBAAmB,CAAC,CAAA,MAAA,EAAWA,IAAA,CAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,EAAI,EAAG,IAAI,CAAA,IAAK,GAAG,CAAA,CAAE,CAAA;AACpF,IAAA,KAAA,MAAW,KAAA,IAAS,IAAI,MAAA,EAAQ;AAC9B,MAAA,MAAM,IAAA,GAAO,MAAM,EAAA,GAAK,CAAA,CAAE,MAAM,QAAG,CAAA,GAAI,CAAA,CAAE,GAAA,CAAI,QAAG,CAAA;AAChD,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,GAAS,CAAA,CAAE,IAAI,CAAA,EAAA,EAAK,KAAA,CAAM,MAAM,CAAA,CAAA,CAAG,CAAA,GAAI,EAAA;AAC5D,MAAA,IAAA,CAAK,KAAK,IAAI,CAAA,CAAA,EAAI,MAAM,IAAI,CAAA,EAAG,MAAM,CAAA,CAAE,CAAA;AAAA,IACzC;AACA,IAAA,IAAA,CAAK,IAAI,EAAA,GAAK,CAAA,CAAE,KAAA,CAAM,CAAA,4BAAA,EAA4B,IAAI,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,MAAA,CAAG,CAAA,GAAI,CAAA,CAAE,GAAA,CAAI,qBAAqB,CAAC,CAAA;AAC5G,IAAA,IAAI,OAAO,OAAA,EAAS;AAClB,MAAA,IAAA,CAAK,CAAA,CAAE,GAAA,CAAI,CAAA,yDAAA,CAA2D,CAAC,CAAA;AAAA,IACzE,CAAA,MAAO;AACL,MAAA,MAAM,IAAI,MAAA,CAAO,MAAA;AACjB,MAAA,MAAM,QACJ,CAAA,EAAG,MAAA,KAAW,UAAA,GACV,CAAA,CAAE,MAAM,6BAAwB,CAAA,GAChC,CAAA,EAAG,MAAA,KAAW,oBACZ,CAAA,CAAE,MAAA,CAAO,+BAA+B,CAAA,GACxC,CAAA,CAAE,IAAI,2BAAsB,CAAA;AACpC,MAAA,IAAA,CAAK,CAAA,EAAA,EAAK,KAAK,CAAA,EAAG,CAAA,EAAG,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,CAAA,YAAA,EAAY,CAAA,CAAE,KAAK,CAAA,CAAE,CAAA,GAAI,EAAE,CAAA,CAAE,CAAA;AAChE,MAAA,IAAA,CAAK,EAAE,GAAA,CAAI,CAAA,IAAA,EAAO,GAAG,MAAA,IAAU,EAAE,EAAE,CAAC,CAAA;AAAA,IACtC;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI,MAAM,IAAI,QAAA,CAAS,+BAAA,EAAiC,SAAS,iBAAiB,CAAA;AAC3F,EAAA,IAAI,cAAc,MAAM,IAAI,QAAA,CAAS,iCAAA,EAAmC,SAAS,WAAW,CAAA;AAC9F;AAYA,SAAS,mBAAA,CAAoB,IAAA,EAAc,KAAA,EAAgB,MAAA,EAAoB,IAAA,EAAqB;AAClG,EAAA,IAAI,CAAC,IAAA,IAAQ,MAAA,CAAO,QAAQ,MAAA,CAAO,KAAA,IAAS,OAAO,KAAA,EAAO;AAC1D,EAAA,IAAI,CAAC,OAAA,CAAQ,MAAA,CAAO,SAAS,CAAC,OAAA,CAAQ,OAAO,KAAA,EAAO;AACpD,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA;AAC1B,EAAA,IAAI,CAAC,GAAA,EAAK;AACV,EAAA,MAAM,UAAU,iBAAA,EAAkB;AAClC,EAAA,MAAM,KAAA,GAAQ,aAAa,OAAO,CAAA;AAElC,EAAA,IAAI,SAAS,YAAA,CAAa,KAAA,EAAO,IAAA,EAAM,OAAO,MAAM,CAAA,EAAG;AAGvD,EAAA,MAAM,IAAA,GAAO,KAAA,GACT,CAAC,GAAA,EAAK,SAAS,IAAA,EAAM,IAAA,EAAM,MAAM,CAAA,GACjC,CAAC,GAAA,EAAK,OAAA,EAAS,IAAA,EAAM,IAAA,EAAM,QAAQ,YAAY,CAAA;AACnD,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,QAAA,EAAU,IAAA,EAAM,EAAE,QAAA,EAAU,IAAA,EAAM,KAAA,EAAO,QAAA,EAAU,CAAA;AAC/E,IAAA,KAAA,CAAM,KAAA,EAAM;AACZ,IAAA,IAAA;AAAA,MACE,CAAA,CAAE,GAAA;AAAA,QACA,QACI,gFAAA,GACA;AAAA;AACN,KACF;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAEA,SAAS,WAAA,CAAY,OAA6C,MAAA,EAAsB;AACtF,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,GAAA,CAAI,cAAA,CAAe,KAAK,CAAA,CAAE,OAAA,EAAS,CAAA;AACnC,IAAA;AAAA,EACF;AACA,EAAA,MAAM,GAAA,GAAWA,IAAA,CAAA,OAAA,CAAQ,MAAM,CAAA,CAAE,WAAA,EAAY;AAC7C,EAAA,IAAI,OAAA;AACJ,EAAA,QAAQ,GAAA;AAAK,IACX,KAAK,OAAA;AACH,MAAA,OAAA,GAAU,eAAe,KAAK,CAAA;AAC9B,MAAA;AAAA,IACF,KAAK,KAAA;AACH,MAAA,OAAA,GAAU,aAAa,KAAK,CAAA;AAC5B,MAAA;AAAA,IACF,KAAK,OAAA;AACH,MAAA,OAAA,GAAU,WAAW,KAAK,CAAA;AAC1B,MAAA;AAAA,IACF;AACE,MAAA,MAAM,IAAI,QAAA;AAAA,QACR,CAAA,kBAAA,EAAqB,OAAO,MAAM,CAAA,6IAAA,CAAA;AAAA,QAElC,QAAA,CAAS;AAAA,OACX;AAAA;AAEJ,EAAGE,EAAA,CAAA,SAAA,CAAeF,aAAaA,IAAA,CAAA,OAAA,CAAQ,MAAM,CAAC,CAAA,EAAG,EAAE,SAAA,EAAW,IAAA,EAAM,CAAA;AACpE,EAAGE,EAAA,CAAA,aAAA,CAAc,QAAQ,OAAO,CAAA;AAClC;AAEA,SAAS,OAAA,CAAQ,OAAe,IAAA,EAA0B;AACxD,EAAA,OAAO,CAAC,GAAG,IAAA,EAAM,KAAK,CAAA;AACxB;AAEA,SAASD,KAAI,IAAA,EAAsB;AACjC,EAAA,MAAM,CAAA,GAASD,IAAA,CAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,IAAO,IAAI,CAAA;AAC3C,EAAA,OAAO,CAAA,KAAM,KAAK,GAAA,GAAM,CAAA;AAC1B;;;ACzUA,IAAM,UAAA,uBAAiB,GAAA,CAAI,CAAC,cAAc,SAAA,EAAW,QAAA,EAAU,UAAU,CAAC,CAAA;AAGnE,SAAS,gBAAA,CAAiB,IAAA,EAAoB,IAAA,GAAkB,EAAC,EAAgB;AACtF,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,IAAO,OAAA,CAAQ,GAAA;AAChC,EAAA,MAAM,QAAA,GAAW,KAAK,QAAA,IAAY,cAAA;AAGlC,EAAA,IAAI,IAAA,CAAK,cAAc,MAAA,EAAW;AAChC,IAAA,OAAO,EAAE,SAAA,EAAW,CAAC,IAAI,YAAA,CAAa,IAAA,CAAK,KAAA,IAAS,QAAA,EAAU,IAAA,CAAK,SAAS,CAAC,CAAA,EAAG,QAAQ,mCAAA,EAAoC;AAAA,EAC9H;AAGA,EAAA,IAAI,KAAK,QAAA,EAAU;AACjB,IAAA,MAAM,WAAW,aAAA,CAAc,IAAA,CAAK,QAAA,EAAU,IAAA,EAAM,KAAK,QAAQ,CAAA;AACjE,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,IAAS,QAAA,CAAS,KAAA,GAAQ,cAAA,CAAe,IAAA,EAAM,GAAA,EAAK,QAAA,EAAU,QAAA,CAAS,EAAE,CAAA,GAAI,EAAC;AACrG,IAAA,OAAO,EAAE,SAAA,EAAW,CAAC,QAAA,EAAU,GAAG,SAAS,CAAA,EAAG,MAAA,EAAQ,CAAA,oBAAA,EAAuB,IAAA,CAAK,QAAQ,CAAA,CAAA,EAAG;AAAA,EAC/F;AAGA,EAAA,IAAI,KAAK,KAAA,EAAO;AACd,IAAA,MAAMG,OAAAA,GAAS,cAAA,CAAe,IAAA,EAAM,GAAA,EAAK,UAAU,EAAE,CAAA;AACrD,IAAA,IAAIA,OAAAA,CAAO,WAAW,CAAA,EAAG;AACvB,MAAA,MAAM,IAAI,QAAA;AAAA,QACR,+KAAA;AAAA,QACA,QAAA,CAAS;AAAA,OACX;AAAA,IACF;AACA,IAAA,OAAO,EAAE,SAAA,EAAWA,OAAAA,EAAQ,MAAA,EAAQ,mCAAA,EAAoC;AAAA,EAC1E;AAIA,EAAA,IAAI,IAAI,kBAAA,EAAoB;AAC1B,IAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,IAAA,EAAM,GAAA,EAAK,YAAY,CAAA;AACxD,IAAA,MAAM,OAAA,GAAU,WAAA,CAAY,YAAA,EAAc,KAAK,CAAA;AAC/C,IAAA,OAAO,EAAE,SAAA,EAAW,CAAC,OAAA,EAAS,GAAG,cAAA,CAAe,IAAA,EAAM,GAAA,EAAK,QAAA,EAAU,YAAY,CAAC,CAAA,EAAG,QAAQ,mEAAA,EAA+D;AAAA,EAC9J;AAEA,EAAA,MAAM,MAAA,GAAS,cAAA,CAAe,IAAA,EAAM,GAAA,EAAK,UAAU,EAAE,CAAA;AACrD,EAAA,IAAI,OAAO,MAAA,EAAQ,OAAO,EAAE,SAAA,EAAW,MAAA,EAAQ,QAAQ,6DAAA,EAAyD;AAEhH,EAAA,KAAA,MAAW,EAAA,IAAM,CAAC,SAAA,EAAW,QAAA,EAAU,UAAU,CAAA,EAAY;AAC3D,IAAA,MAAM,MAAA,GAAS,iBAAA,CAAkB,EAAE,CAAA,CAAE,SAAA;AACrC,IAAA,IAAI,MAAA,IAAU,GAAA,CAAI,MAAM,CAAA,EAAG;AACzB,MAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,IAAA,EAAM,GAAA,EAAK,EAAE,CAAA;AAC9C,MAAA,OAAO,EAAE,SAAA,EAAW,CAAC,WAAA,CAAY,EAAA,EAAI,KAAK,CAAC,CAAA,EAAG,MAAA,EAAQ,CAAA,EAAG,MAAM,CAAA,eAAA,EAAa,iBAAA,CAAkB,EAAE,CAAA,CAAE,KAAK,CAAA,CAAA,EAAG;AAAA,IAC5G;AAAA,EACF;AAEA,EAAA,MAAM,IAAI,QAAA;AAAA,IACR,kPAAA;AAAA,IACA,QAAA,CAAS;AAAA,GACX;AACF;AAEA,SAAS,aAAA,CAAc,EAAA,EAAY,IAAA,EAAoB,GAAA,EAAwB,QAAA,EAAwC;AACrH,EAAA,IAAI,EAAA,KAAO,QAAA,EAAU,OAAO,IAAI,cAAA,CAAe,iBAAA,CAAkB,IAAA,EAAM,QAAA,EAAU,QAAQ,CAAA,EAAG,GAAA,CAAI,WAAW,CAAA;AAC3G,EAAA,IAAI,OAAO,WAAA,EAAa;AACtB,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,IAAa,GAAA,CAAI,kBAAA;AACxC,IAAA,IAAI,CAAC,SAAA,EAAW,MAAM,IAAI,QAAA,CAAS,2IAAA,EAA6I,SAAS,WAAW,CAAA;AACpM,IAAA,OAAO,IAAI,kBAAA,CAAmB,IAAA,CAAK,KAAA,IAASC,SAAAA,CAAS,SAAS,CAAA,EAAG,SAAA,EAAW,MAAA,EAAW,CAAC,CAAC,IAAA,CAAK,OAAO,CAAA;AAAA,EACvG;AACA,EAAA,IAAI,EAAA,KAAO,YAAY,OAAO,WAAA,CAAY,YAAY,kBAAA,CAAmB,IAAA,EAAM,GAAA,EAAK,UAAU,CAAC,CAAA;AAC/F,EAAA,IAAI,UAAA,CAAW,GAAA,CAAI,EAAE,CAAA,EAAG,OAAO,WAAA,CAAY,EAAA,EAAI,kBAAA,CAAmB,IAAA,EAAM,GAAA,EAAK,EAAE,CAAC,CAAA;AAChF,EAAA,MAAM,IAAI,QAAA,CAAS,CAAA,oBAAA,EAAuB,EAAE,CAAA,6EAAA,CAAA,EAAiF,SAAS,WAAW,CAAA;AACnJ;AAEA,SAAS,WAAA,CAAY,IAAY,KAAA,EAAyC;AACxE,EAAA,MAAM,IAAA,GAAO,kBAAkB,EAAE,CAAA;AACjC,EAAA,MAAM,MAAA,GAAiC,EAAE,GAAG,IAAA,EAAM,EAAA,EAAG;AACrD,EAAA,OAAO,IAAI,wBAAA,CAAyB,KAAA,EAAO,MAAM,CAAA;AACnD;AAGA,SAAS,cAAA,CAAe,IAAA,EAAoB,GAAA,EAAwB,QAAA,EAA8B,OAAA,EAA6B;AAC7H,EAAA,MAAMC,OAAkB,EAAC;AACzB,EAAA,MAAM,MAAA,GAAS,aAAa,QAAQ,CAAA;AACpC,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,KAAA,IAAS,cAAA,CAAe,QAAQ,QAAQ,CAAA;AACjE,EAAA,IAAI,OAAA,KAAY,QAAA,IAAY,WAAA,EAAaA,IAAAA,CAAI,IAAA,CAAK,IAAI,cAAA,CAAe,WAAA,EAAa,GAAA,CAAI,WAAW,CAAC,CAAA;AAElG,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,IAAS,cAAA,CAAe,QAAQ,WAAW,CAAA;AAChE,EAAA,IAAI,OAAA,KAAY,cAAc,OAAA,EAASA,KAAI,IAAA,CAAK,WAAA,CAAY,UAAA,EAAY,OAAO,CAAC,CAAA;AAChF,EAAA,OAAOA,IAAAA;AACT;AAEA,SAAS,iBAAA,CAAkB,IAAA,EAAoB,QAAA,EAA8B,OAAA,EAAwC;AACnH,EAAA,IAAI,IAAA,CAAK,KAAA,EAAO,OAAO,IAAA,CAAK,KAAA;AAC5B,EAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,YAAA,CAAa,QAAQ,GAAG,OAAO,CAAA;AAC5D,EAAA,IAAI,OAAO,OAAO,KAAA;AAClB,EAAA,MAAM,IAAI,QAAA,CAAS,CAAA,WAAA,EAAc,OAAO,CAAA,mGAAA,CAAA,EAAuG,SAAS,SAAS,CAAA;AACnK;AAEA,SAAS,kBAAA,CAAmB,IAAA,EAAoB,GAAA,EAAwB,EAAA,EAAoB;AAC1F,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,IAAS,GAAA,CAAI,aAAA;AAChC,EAAA,IAAI,OAAO,OAAO,KAAA;AAClB,EAAA,MAAM,IAAI,QAAA;AAAA,IACR,CAAA,EAAG,iBAAA,CAAkB,EAAE,CAAA,CAAE,KAAK,CAAA,2KAAA,CAAA;AAAA,IAC9B,QAAA,CAAS;AAAA,GACX;AACF;AAEA,SAAS,cAAA,CAAe,QAAsB,OAAA,EAAoD;AAEhG,EAAA,MAAM,IAAI,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,YAAY,OAAO,CAAA;AAClD,EAAA,OAAO,CAAA,EAAG,IAAA;AACZ;AAEA,SAAS,aAAa,QAAA,EAA4C;AAChE,EAAA,IAAI;AACF,IAAA,OAAO,QAAA,EAAS;AAAA,EAClB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAEA,SAASD,UAAS,CAAA,EAAmB;AACnC,EAAA,OAAO,CAAA,CAAE,QAAQ,KAAA,EAAO,GAAG,EAAE,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,EAAI,IAAK,CAAA;AACnD","file":"chunk-2EVQKZTO.js","sourcesContent":["import { c } from './output.js';\nimport { VERSION } from '../version.js';\n\n/**\n * The `vg` brand banner — the same boxy robot mark and brand colours (teal/mint)\n * as the Vibgrate scanner (`vibgrate-cli/src/ui/progress.ts`), replicated here so\n * the open graph package stays standalone.\n *\n * The wordmark is stacked BELOW the mark rather than beside it: the robot's eye\n * (`◼`) and arrow (`➜`) glyphs are East-Asian \"ambiguous\"/wide, so terminals that\n * render them double-width make the rows unequal — text placed to their right\n * (the scanner's layout) then misaligns. Nothing sits beside the art here, so the\n * banner lines up in every terminal. Shown on `vg build` for a human at a TTY;\n * never on `--json`, `--quiet`, or under a pipe.\n */\n\nconst teal = (s: string): string => c.hex('#3FB0A4')(s);\nconst mint = (s: string): string => c.hex('#4FE3C1')(s);\n\n// ── Boxy robot mark — identical glyphs/colours to the scanner's ROBOT ──\nconst ROBOT = [\n  '   ' + teal('╭──────╮') + mint('➜'),\n  '  ' + c.dim('┤') + teal('│') + ' ' + mint('◼') + '  ' + mint('◼') + ' ' + teal('│') + c.dim('├'),\n  '  ' + c.dim('┤') + teal('│') + '  ' + c.dim('▁▁') + '  ' + teal('│') + c.dim('├'),\n  '   ' + teal('╰──────╯'),\n] as const;\n\n/**\n * The banner as lines (no I/O) so it is unit-testable. The robot mark is a\n * self-contained block; the wordmark/tagline sit on their OWN lines beneath it\n * (never beside the variable-width glyphs), so the banner aligns in any terminal.\n */\nexport function logoLines(root?: string, opts: { product?: string; tagline?: string } = {}): string[] {\n  const product = opts.product ?? 'Graph';\n  const tagline = opts.tagline ?? 'Code Intelligence Engine';\n  return [\n    '',\n    `  ${ROBOT[0]}`,\n    `  ${ROBOT[1]}`,\n    `  ${ROBOT[2]}`,\n    `  ${ROBOT[3]}`,\n    `  ${c.bold.white('Vibgrate')} ${teal(product)}  ${c.dim(`· ${tagline} · v${VERSION}`)}`,\n    ...(root ? [`  ${c.dim(root)}`] : []),\n    '',\n  ];\n}\n\n/** Print the banner to stderr, only for an interactive human (TTY). */\nexport function printLogo(root?: string, opts: { product?: string; tagline?: string } = {}): void {\n  if (!process.stderr.isTTY) return;\n  process.stderr.write(`${logoLines(root, opts).join('\\n')}\\n`);\n}\n\n/**\n * The **VG Code** banner (the approved marketing name for the code-editing\n * capability; see docs/NAMING-AND-MARKETING-STRATEGY.md). Same robot mark, but\n * the wordmark reads \"VG Code\" rather than \"Vibgrate Graph\".\n */\nexport function codeLogoLines(root?: string): string[] {\n  return [\n    '',\n    `  ${ROBOT[0]}`,\n    `  ${ROBOT[1]}`,\n    `  ${ROBOT[2]}`,\n    `  ${ROBOT[3]}`,\n    `  ${c.bold.white('VG')} ${teal('Code')}  ${c.dim(`· graph-grounded coding · v${VERSION}`)}`,\n    ...(root ? [`  ${c.dim(root)}`] : []),\n    '',\n  ];\n}\n\n/** Print the VG Code banner to stderr, only for an interactive human (TTY). */\nexport function printCodeLogo(root?: string): void {\n  if (!process.stderr.isTTY) return;\n  process.stderr.write(`${codeLogoLines(root).join('\\n')}\\n`);\n}\n","import * as crypto from 'node:crypto';\nimport { canonicalize } from './hash.js';\nimport { VERSION } from '../version.js';\nimport type { Toolchain, VgGraph } from '../schema.js';\n\n/**\n * `vg attest` — a signed, reproducible attestation over the code graph.\n *\n * This is the moat made load-bearing: a consumer can cryptographically verify,\n * offline, that a graph was produced by a named toolchain over a named commit and\n * has not changed since. We sign an in-toto Statement wrapped in a DSSE envelope\n * with Ed25519 (`node:crypto`, zero dependencies) — interoperable with\n * `cosign verify-blob-attestation`. Ed25519 signatures are deterministic\n * (RFC 8032), so the same graph + key produce a byte-identical envelope.\n *\n * The subject digest excludes the graph's volatile `generatedAt`, so it is\n * reproducible across rebuilds of identical content — which is exactly what makes\n * the attestation verifiable rather than a timestamped snapshot.\n */\n\nexport const DSSE_PAYLOAD_TYPE = 'application/vnd.in-toto+json';\nexport const IN_TOTO_STATEMENT_TYPE = 'https://in-toto.io/Statement/v1';\nexport const VG_PREDICATE_TYPE = 'https://vibgrate.com/attestation/code-graph/v1';\n\nexport interface CommitInfo {\n  sha?: string;\n  shortSha?: string;\n  branch?: string;\n  dirty?: boolean; // uncommitted changes vs sha — never verified-clean when true\n}\n\nexport interface AttestPredicate {\n  tool: { name: 'vg'; version: string };\n  toolchain?: Toolchain;\n  corpusHash: string;\n  graphDigest: string; // sha256 of the canonical graph (generatedAt excluded)\n  counts: VgGraph['meta']['counts'];\n  commit?: CommitInfo;\n  sbomDigest?: string; // sha256 of an accompanying SBOM, if attested together\n  timestamp?: string; // optional, opt-in (omitted by default for determinism)\n}\n\nexport interface InTotoStatement {\n  _type: string;\n  subject: { name: string; digest: { sha256: string } }[];\n  predicateType: string;\n  predicate: AttestPredicate;\n}\n\nexport interface DsseSignature {\n  keyid: string;\n  sig: string; // base64\n  publicKey?: string; // PEM, embedded so the envelope self-verifies for integrity\n}\n\nexport interface DsseEnvelope {\n  payloadType: string;\n  payload: string; // base64 of the Statement JSON\n  signatures: DsseSignature[];\n}\n\nexport function sha256Hex(input: string | Uint8Array): string {\n  return crypto.createHash('sha256').update(input).digest('hex');\n}\n\n/**\n * sha256 over the canonical graph with the volatile `generatedAt` excluded, so\n * two builds of identical content attest to the same digest.\n */\nexport function graphSubjectDigest(graph: VgGraph): string {\n  const { generatedAt: _omit, ...rest } = graph;\n  return sha256Hex(canonicalize(rest));\n}\n\n/** The 16-hex key id: a truncated sha256 over the SPKI DER public key. */\nexport function keyId(publicKey: crypto.KeyObject): string {\n  return sha256Hex(publicKey.export({ type: 'spki', format: 'der' })).slice(0, 16);\n}\n\nexport interface StatementInput {\n  commit?: CommitInfo;\n  sbomDigest?: string;\n  timestamp?: string;\n}\n\nexport function buildStatement(graph: VgGraph, input: StatementInput = {}): InTotoStatement {\n  const graphDigest = graphSubjectDigest(graph);\n  const predicate: AttestPredicate = {\n    tool: { name: 'vg', version: VERSION },\n    toolchain: graph.provenance.toolchain,\n    corpusHash: graph.provenance.corpusHash,\n    graphDigest,\n    counts: graph.meta.counts,\n  };\n  if (input.commit) predicate.commit = input.commit;\n  if (input.sbomDigest) predicate.sbomDigest = input.sbomDigest;\n  if (input.timestamp) predicate.timestamp = input.timestamp;\n  return {\n    _type: IN_TOTO_STATEMENT_TYPE,\n    subject: [{ name: 'graph.json', digest: { sha256: graphDigest } }],\n    predicateType: VG_PREDICATE_TYPE,\n    predicate,\n  };\n}\n\n/**\n * DSSE Pre-Authentication Encoding:\n *   \"DSSEv1\" SP len(type) SP type SP len(body) SP body\n * with lengths as ASCII decimal byte counts. Signing the PAE (not the raw body)\n * is what binds the payloadType to the signature.\n */\nexport function dssePae(payloadType: string, body: Uint8Array): Buffer {\n  const typeBytes = Buffer.from(payloadType, 'utf8');\n  const header = Buffer.from(\n    `DSSEv1 ${typeBytes.length} ${payloadType} ${body.length} `,\n    'utf8',\n  );\n  return Buffer.concat([header, Buffer.from(body)]);\n}\n\n/** Sign a statement, returning a self-contained DSSE envelope. */\nexport function signStatement(statement: InTotoStatement, privateKey: crypto.KeyObject): DsseEnvelope {\n  const body = Buffer.from(JSON.stringify(statement), 'utf8');\n  const pae = dssePae(DSSE_PAYLOAD_TYPE, body);\n  const sig = crypto.sign(null, pae, privateKey);\n  // Derive the public key from the private key (via its PEM, for @types/node compat).\n  const publicKey = crypto.createPublicKey(privateKey.export({ type: 'pkcs8', format: 'pem' }).toString());\n  return {\n    payloadType: DSSE_PAYLOAD_TYPE,\n    payload: body.toString('base64'),\n    signatures: [\n      {\n        keyid: keyId(publicKey),\n        sig: sig.toString('base64'),\n        publicKey: publicKey.export({ type: 'spki', format: 'pem' }).toString(),\n      },\n    ],\n  };\n}\n\nexport type AttestStatus = 'verified' | 'signature-valid' | 'failed';\n\nexport interface VerifyResult {\n  status: AttestStatus;\n  signatureValid: boolean;\n  signerPinned: boolean; // signature verified against a caller-supplied trusted key\n  digestMatches?: boolean; // recomputed graph digest matches the attested one\n  dirty?: boolean; // the attested commit had uncommitted changes\n  keyid: string;\n  reason: string;\n  statement: InTotoStatement;\n}\n\n/**\n * Verify an envelope. Honest states, never a fabricated pass:\n *   failed          — bad signature, or the on-disk graph no longer matches.\n *   signature-valid — cryptographically intact, but signer not pinned (or dirty).\n *   verified        — pinned signer + matching digest + clean tree.\n */\n/** An empty statement for results where the envelope could not even be parsed. */\nfunction emptyStatement(): InTotoStatement {\n  return {\n    _type: '',\n    subject: [],\n    predicateType: '',\n    predicate: {\n      tool: { name: 'vg', version: '' },\n      corpusHash: '',\n      graphDigest: '',\n      counts: { nodes: 0, edges: 0, areas: 0, tests: 0, untested: 0 },\n    },\n  };\n}\n\nfunction failedResult(reason: string): VerifyResult {\n  return {\n    status: 'failed',\n    signatureValid: false,\n    signerPinned: false,\n    keyid: '',\n    reason,\n    statement: emptyStatement(),\n  };\n}\n\nexport function verifyEnvelope(\n  env: DsseEnvelope,\n  opts: { publicKeyPem?: string; graph?: VgGraph } = {},\n): VerifyResult {\n  // A `.intoto.jsonl` is attacker-supplied input: every decode/parse/key step\n  // must degrade to an honest `failed`, never crash the command.\n  let body: Buffer;\n  let statement: InTotoStatement;\n  try {\n    body = Buffer.from(env?.payload ?? '', 'base64');\n    const parsed = JSON.parse(body.toString('utf8')) as InTotoStatement;\n    if (!parsed || typeof parsed !== 'object' || !parsed.predicate) {\n      throw new Error('missing predicate');\n    }\n    statement = parsed;\n  } catch {\n    return failedResult('malformed attestation payload (not a valid in-toto statement)');\n  }\n\n  const pae = dssePae(env.payloadType, body);\n  const sig0 = env.signatures?.[0];\n  const keyid = sig0?.keyid ?? '';\n  const sig = sig0?.sig ? Buffer.from(sig0.sig, 'base64') : Buffer.alloc(0);\n\n  let signatureValid = false;\n  let signerPinned = false;\n  try {\n    if (sig0 && sig.length) {\n      if (opts.publicKeyPem) {\n        const pinnedKey = crypto.createPublicKey(opts.publicKeyPem);\n        signatureValid = crypto.verify(null, pae, pinnedKey, sig);\n        signerPinned = signatureValid;\n      } else if (sig0.publicKey) {\n        const embeddedKey = crypto.createPublicKey(sig0.publicKey);\n        signatureValid = crypto.verify(null, pae, embeddedKey, sig);\n      }\n    }\n  } catch {\n    // Malformed key or signature bytes → not a valid signature (not a crash).\n    signatureValid = false;\n    signerPinned = false;\n  }\n\n  const digestMatches = opts.graph\n    ? graphSubjectDigest(opts.graph) === statement.predicate.graphDigest\n    : undefined;\n  const dirty = statement.predicate.commit?.dirty;\n\n  let status: AttestStatus;\n  let reason: string;\n  if (!signatureValid) {\n    status = 'failed';\n    reason = sig0 ? 'signature verification failed' : 'no signature in envelope';\n  } else if (digestMatches === false) {\n    status = 'failed';\n    reason = 'graph.json no longer matches the attested digest (content changed since signing)';\n  } else if (signerPinned && !dirty) {\n    status = 'verified';\n    reason =\n      digestMatches === true\n        ? 'signature valid, signer trusted, graph digest matches'\n        : 'signature valid, signer trusted';\n  } else {\n    status = 'signature-valid';\n    reason = dirty\n      ? 'signature valid but the attested tree was dirty (uncommitted changes)'\n      : 'signature valid but signer not pinned — pass --pub to establish trust';\n  }\n\n  return { status, signatureValid, signerPinned, digestMatches, dirty, keyid, reason, statement };\n}\n\nexport interface GeneratedKeypair {\n  privatePem: string;\n  publicPem: string;\n  keyid: string;\n}\n\n/** Mint a fresh Ed25519 keypair for signing attestations. */\nexport function generateKeypair(): GeneratedKeypair {\n  const { publicKey, privateKey } = crypto.generateKeyPairSync('ed25519');\n  return {\n    privatePem: privateKey.export({ type: 'pkcs8', format: 'pem' }).toString(),\n    publicPem: publicKey.export({ type: 'spki', format: 'pem' }).toString(),\n    keyid: keyId(publicKey),\n  };\n}\n\n/** Serialize an envelope as a single-line `.intoto.jsonl` record (deterministic). */\nexport function serializeEnvelope(env: DsseEnvelope): string {\n  return `${JSON.stringify(env)}\\n`;\n}\n\nexport function parseEnvelope(text: string): DsseEnvelope {\n  const line = text.trim().split('\\n')[0];\n  return JSON.parse(line) as DsseEnvelope;\n}\n","import * as fs from 'node:fs';\nimport * as path from 'node:path';\nimport * as crypto from 'node:crypto';\nimport { execFile } from 'node:child_process';\nimport { loadGraph } from '../engine/load.js';\nimport { resolveHead, workingTreeDirty } from '../core-open/utils/git-history.js';\nimport {\n  buildStatement,\n  signStatement,\n  verifyEnvelope,\n  generateKeypair,\n  serializeEnvelope,\n  parseEnvelope,\n  type CommitInfo,\n  type VerifyResult,\n} from '../engine/attest.js';\nimport { CliError, ExitCode } from '../util/exit.js';\nimport type { VgGraph } from '../schema.js';\n\n/**\n * Attestation actions folded into the graph lifecycle: `vg build --attest` signs\n * the graph it just built; `vg build --verify` checks a committed attestation.\n * The crypto lives in engine/attest.ts; this is the file/key/git glue + output.\n */\n\nconst DEFAULT_ATTESTATION = 'attestation.intoto.jsonl';\nconst DEFAULT_KEY = 'attest-key.pem';\n\nexport interface SignOpts {\n  /** Signing key PEM path; else $VG_ATTEST_KEY; else .vibgrate/attest-key.pem (auto-minted). */\n  key?: string;\n  /** Output path for the attestation (default .vibgrate/attestation.intoto.jsonl). */\n  attestation?: string;\n}\n\nexport interface SignSummary {\n  keyid: string;\n  graphDigest: string;\n  fingerprint?: string;\n  commit?: CommitInfo;\n  out: string;\n  keyGeneratedAt?: string;\n}\n\n/** Sign an already-built graph, writing a DSSE attestation. Returns a summary +\n *  human notices (the caller decides how to render them alongside build output). */\nexport async function signGraphAttestation(\n  root: string,\n  graph: VgGraph,\n  opts: SignOpts,\n): Promise<{ summary: SignSummary; notices: string[] }> {\n  const notices: string[] = [];\n  const explicitKey = opts.key ?? process.env.VG_ATTEST_KEY;\n  const keyPath = explicitKey ? path.resolve(explicitKey) : path.join(root, '.vibgrate', DEFAULT_KEY);\n\n  let keyGeneratedAt: string | undefined;\n  if (!fs.existsSync(keyPath)) {\n    if (explicitKey) {\n      throw new CliError(`signing key not found: ${explicitKey}`, ExitCode.USAGE_ERROR);\n    }\n    // First use with no key: mint one at the default path (loud — it must be kept\n    // and gitignored to re-sign reproducibly).\n    const kp = generateKeypair();\n    fs.mkdirSync(path.dirname(keyPath), { recursive: true });\n    fs.writeFileSync(keyPath, kp.privatePem, { mode: 0o600 });\n    fs.writeFileSync(`${keyPath}.pub`, kp.publicPem);\n    keyGeneratedAt = keyPath;\n    notices.push(\n      `minted a new Ed25519 signing key at ${rel(root, keyPath)} (keyid ${kp.keyid}) — ` +\n        `keep it, add it to .gitignore, and reuse it to re-sign reproducibly`,\n    );\n  }\n\n  let privateKey: crypto.KeyObject;\n  try {\n    privateKey = crypto.createPrivateKey(fs.readFileSync(keyPath, 'utf8'));\n  } catch {\n    throw new CliError(`could not read an Ed25519 private key from ${rel(root, keyPath)}`, ExitCode.USAGE_ERROR);\n  }\n  if (privateKey.asymmetricKeyType !== 'ed25519') {\n    throw new CliError(\n      `attest requires an Ed25519 key, but ${rel(root, keyPath)} is ${privateKey.asymmetricKeyType ?? 'unknown'}`,\n      ExitCode.USAGE_ERROR,\n    );\n  }\n\n  const commit = await gitCommitInfo(root);\n  const statement = buildStatement(graph, { commit });\n  const envelope = signStatement(statement, privateKey);\n  const outPath = opts.attestation\n    ? path.resolve(opts.attestation)\n    : path.join(root, '.vibgrate', DEFAULT_ATTESTATION);\n  fs.mkdirSync(path.dirname(outPath), { recursive: true });\n  fs.writeFileSync(outPath, serializeEnvelope(envelope));\n\n  return {\n    summary: {\n      keyid: envelope.signatures[0]?.keyid ?? '',\n      graphDigest: statement.predicate.graphDigest,\n      fingerprint: statement.predicate.toolchain?.fingerprint,\n      commit,\n      out: rel(root, outPath),\n      keyGeneratedAt: keyGeneratedAt ? rel(root, keyGeneratedAt) : undefined,\n    },\n    notices,\n  };\n}\n\nexport interface VerifyOpts {\n  /** Attestation path (default .vibgrate/attestation.intoto.jsonl). */\n  attestation?: string;\n  /** Public key PEM to pin the signer (else integrity-only verification). */\n  pub?: string;\n}\n\nexport interface AttestVerifyOutcome {\n  bundlePath: string;\n  /** True when no attestation exists at the default path (and none was required). */\n  missing: boolean;\n  result?: VerifyResult;\n}\n\n/** Verify a committed attestation against the on-disk graph. Returns the outcome\n *  (the caller renders + decides the exit code). Throws only when an attestation\n *  was explicitly requested but is absent. */\nexport function verifyGraphAttestation(root: string, opts: VerifyOpts): AttestVerifyOutcome {\n  const bundlePath = opts.attestation\n    ? path.resolve(opts.attestation)\n    : path.join(root, '.vibgrate', DEFAULT_ATTESTATION);\n  if (!fs.existsSync(bundlePath)) {\n    if (opts.attestation || opts.pub) {\n      throw new CliError(\n        `no attestation at ${rel(root, bundlePath)} — sign one with \\`vg build --attest\\``,\n        ExitCode.NOT_FOUND,\n      );\n    }\n    return { bundlePath, missing: true };\n  }\n  const envelope = parseEnvelope(fs.readFileSync(bundlePath, 'utf8'));\n  const publicKeyPem = opts.pub ? fs.readFileSync(path.resolve(opts.pub), 'utf8') : undefined;\n  const graph = loadGraph(root) ?? undefined;\n  return { bundlePath, missing: false, result: verifyEnvelope(envelope, { publicKeyPem, graph }) };\n}\n\nasync function gitCommitInfo(root: string): Promise<CommitInfo | undefined> {\n  const sha = await resolveHead(root);\n  if (!sha) return undefined;\n  const dirty = await workingTreeDirty(root);\n  const branch = await gitBranch(root);\n  return { sha, shortSha: sha.slice(0, 7), branch, dirty: dirty === true ? true : dirty === false ? false : undefined };\n}\n\n/** Best-effort current branch name; undefined on detached HEAD or no git. */\nfunction gitBranch(root: string): Promise<string | undefined> {\n  return new Promise((resolve) => {\n    execFile(\n      'git',\n      ['rev-parse', '--abbrev-ref', 'HEAD'],\n      { cwd: root, timeout: 5000, windowsHide: true, encoding: 'utf8' },\n      (err, stdout) => {\n        if (err) return resolve(undefined);\n        const name = String(stdout).trim();\n        resolve(name && name !== 'HEAD' ? name : undefined);\n      },\n    );\n  });\n}\n\nfunction rel(root: string, p: string): string {\n  const r = path.relative(root, p);\n  return r.startsWith('..') ? p : r;\n}\n","import { c } from './output.js';\nimport { brandProgressBar } from '../core-open/ui/bar.js';\n\n/**\n * A small progress bar matching the scanner's style\n * (`vibgrate-core-open/src/ui/progress.ts`): a smooth sub-cell gradient bar\n * (shared `brandProgressBar`), a braille spinner, percent, elapsed and ETA.\n * Renders to **stderr** in place, and only when stderr is a TTY — under a\n * pipe/CI it stays silent so logs aren't polluted.\n */\n\nconst FRAMES = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏'] as const;\nconst WIDTH = 30;\n\nfunction fmtDuration(ms: number): string {\n  const s = Math.max(0, Math.round(ms / 1000));\n  if (s < 60) return `${s}s`;\n  return `${Math.floor(s / 60)}m${String(s % 60).padStart(2, '0')}s`;\n}\n\n/**\n * Pure render of one progress line (no I/O, no clock) so it is unit-testable.\n * `elapsedMs` and `frame` are passed in by the caller.\n */\nexport function formatProgressLine(\n  label: string,\n  done: number,\n  total: number,\n  elapsedMs: number,\n  frame: number,\n): string {\n  const ratio = total > 0 ? Math.min(done / total, 1) : 0;\n  const bar = brandProgressBar(ratio, WIDTH);\n  const pct = Math.round(ratio * 100);\n  const spin = c.cyan(FRAMES[((frame % FRAMES.length) + FRAMES.length) % FRAMES.length]);\n  const eta = ratio > 0.02 && ratio < 1 ? ` · eta ${fmtDuration((elapsedMs / ratio) * (1 - ratio))}` : '';\n  return `  ${spin} ${label} ${bar} ${c.bold(`${pct}%`)} ${c.dim(`${done}/${total} · ${fmtDuration(elapsedMs)}${eta}`)}`;\n}\n\n/** Live, in-place progress bar on stderr (no-op when stderr isn't a TTY). */\nexport class ProgressBar {\n  private readonly start = Date.now();\n  private frame = 0;\n  private readonly tty = Boolean(process.stderr.isTTY);\n\n  constructor(private readonly label: string) {}\n\n  update(done: number, total: number): void {\n    if (!this.tty) return;\n    const line = formatProgressLine(this.label, done, total, Date.now() - this.start, this.frame++);\n    process.stderr.write(`\\r\\x1b[2K${line}`);\n  }\n\n  /** Clear the bar; optionally print a final summary line. */\n  done(summary?: string): void {\n    if (!this.tty) return;\n    process.stderr.write('\\r\\x1b[2K');\n    if (summary) process.stderr.write(`${summary}\\n`);\n  }\n}\n","import type { Command } from 'commander';\n\n/** Global flags shared across all `vg` commands (VG-CLI-SPEC §1.1). */\nexport interface GlobalOpts {\n  /** -C, --cwd <dir> */\n  cwd?: string;\n  /** --deep */\n  deep?: boolean;\n  /** --json */\n  json?: boolean;\n  /** --generated-at <iso> */\n  generatedAt?: string;\n  /** --graph <file> (override the map path) */\n  graph?: string;\n  /** --no-cache (commander exposes this as `cache: false`) */\n  noCache?: boolean;\n  /** --local (never touch the network) */\n  local?: boolean;\n  /** --quiet */\n  quiet?: boolean;\n  /**\n   * --client <name> — the AI on the other end (e.g. `claude`, `cursor`). When an\n   * AI host runs `vg`, passing this lets navigation calls be counted in the local\n   * savings ledger with the command-vs-MCP split, so `vg savings` and the opt-in\n   * share-stats upload can attribute usage. Counts only; a coarse label, not\n   * identity (sanitized before it's recorded). Absent for human-run commands.\n   */\n  client?: string;\n}\n\n/**\n * Attach the global flags to a command. They live on every subcommand (rather\n * than only the program) so the \"simple as Google\" dispatch can put the command\n * token first and let flags appear in any order after it.\n */\nexport function applyGlobalOptions(cmd: Command): Command {\n  return cmd\n    .option('-C, --cwd <dir>', 'run as if started in <dir>', '.')\n    .option('--deep', 'do more: precise resolution, all edges, semantic links')\n    .option('--json', 'machine-readable JSON on stdout')\n    .option('--generated-at <iso>', 'pin the artifact timestamp for byte-deterministic output')\n    .option('--graph <file>', 'override the map path')\n    .option('--no-cache', 'full rebuild (ignore the incremental cache)')\n    .option('--local', 'never touch the network (lexical-only semantic)')\n    .option('--quiet', 'suppress progress output')\n    .option('--client <name>', 'identify the AI client (e.g. claude) so navigation calls are counted in vg savings')\n    .option('--no-color', 'disable colored output');\n}\n\n/** Read the global subset from a command's parsed options. */\nexport function readGlobal(cmd: Command): GlobalOpts {\n  const o = cmd.opts<Record<string, unknown>>();\n  return {\n    cwd: o.cwd as string | undefined,\n    deep: o.deep as boolean | undefined,\n    json: o.json as boolean | undefined,\n    generatedAt: o.generatedAt as string | undefined,\n    graph: o.graph as string | undefined,\n    noCache: o.cache === false,\n    local: o.local as boolean | undefined,\n    quiet: o.quiet as boolean | undefined,\n    client: o.client as string | undefined,\n  };\n}\n","import * as path from 'node:path';\nimport * as fs from 'node:fs';\nimport { spawn } from 'node:child_process';\nimport { Command } from 'commander';\nimport { buildGraph } from '../engine/build.js';\nimport { verifyDeterminism } from '../engine/verify.js';\nimport { epistemicBreakdown } from '../engine/epistemic.js';\nimport { signGraphAttestation, verifyGraphAttestation, type SignSummary } from './attest-actions.js';\nimport { isModelReady, countPending, resolveEmbedModel } from '../engine/embeddings.js';\nimport type { VgGraph } from '../schema.js';\nimport { writeArtifacts } from '../engine/artifacts.js';\nimport { writeSnapshot } from '../engine/freshness.js';\nimport { refreshInstalledInstructions, SMALL_REPO_FILES } from '../install/registry.js';\nimport { serializeGraph } from '../engine/serialize.js';\nimport { renderReport } from '../engine/report.js';\nimport { renderHtml } from '../engine/html.js';\nimport { UsageError } from '../engine/discover.js';\nimport { ResourceLimitError } from '../engine/limits.js';\nimport { CliError, ExitCode, usageError } from '../util/exit.js';\nimport { c, info, out, json } from '../util/output.js';\nimport { printLogo } from '../util/logo.js';\nimport { ProgressBar } from '../util/progress.js';\nimport { applyGlobalOptions, readGlobal, type GlobalOpts } from '../cli-options.js';\n\ninterface BuildCmdOpts {\n  only?: string;\n  exclude?: string[];\n  html?: boolean;\n  report?: boolean;\n  ground?: boolean;\n  jobs?: string;\n  scip?: string | boolean;\n  tsc?: boolean;\n  export?: string;\n  warm?: boolean;\n  grammars?: string;\n  attest?: boolean;\n  verify?: boolean;\n  attestKey?: string;\n  attestation?: string;\n  pub?: string;\n}\n\nexport function registerBuild(program: Command): void {\n  const cmd = program\n    .command('build')\n    .description('build / update the code map (incremental, deterministic)')\n    .argument('[paths...]', 'folders or files to map (default: current folder)')\n    .option('--only <langs>', 'restrict to languages, e.g. ts,py,go')\n    .option('--exclude <glob>', 'extra ignore glob (repeatable)', collect, [])\n    .option('--no-html', 'do not write graph.html')\n    .option('--no-report', 'do not write GRAPH_REPORT.md')\n    .option('--no-ground', 'do not attach grounding (Phase 2)')\n    .option('--jobs <n>', 'worker count (1 = single-threaded)')\n    .option('--scip <file>', 'ingest a SCIP index for precise resolution (default: auto-detect index.scip)')\n    .option('--no-scip', 'ignore any SCIP index')\n    .option('--no-tsc', 'skip the in-process TypeScript resolver (heuristic floor only)')\n    .option('--no-warm', 'do not warm the semantic index in the background after building')\n    .option('--grammars <dir>', 'directory of grammar .wasm files (offline / air-gapped)')\n    .option('-o, --export <file>', 'also write the map to a file (format inferred)')\n    .option('--attest', 'sign the built graph → .vibgrate/attestation.intoto.jsonl')\n    .option('--verify', 'verify a committed attestation against the graph (no rebuild)')\n    .option('--attest-key <path>', 'signing key PEM (else $VG_ATTEST_KEY, else .vibgrate/attest-key.pem)')\n    .option('--attestation <file>', 'attestation path (out for --attest, in for --verify)')\n    .option('--pub <path>', 'public key PEM to pin the signer (with --verify)')\n    .action(async function (this: Command, paths: string[], opts: BuildCmdOpts) {\n      await runBuild(paths, opts, readGlobal(this));\n    });\n  applyGlobalOptions(cmd);\n}\n\nexport async function runBuild(\n  paths: string[],\n  opts: BuildCmdOpts,\n  global: GlobalOpts,\n): Promise<void> {\n  const root = path.resolve(global.cwd ?? '.');\n\n  // `vg build --verify`: the single verification entry point — determinism\n  // self-check plus (if present) attestation verification.\n  if (opts.verify) {\n    await verifyGraph(root, opts, global);\n    return;\n  }\n\n  // Brand banner + live parse progress for an interactive human while the index\n  // builds (TTY only; both are no-ops under --json/--quiet/pipe so machine output\n  // stays clean).\n  const interactive = !global.json && !global.quiet;\n  if (interactive) printLogo(path.basename(root) || root);\n  const bar = interactive ? new ProgressBar(c.dim('parsing')) : undefined;\n  const jobs = opts.jobs ? Number(opts.jobs) : undefined;\n  if (jobs !== undefined && (!Number.isInteger(jobs) || jobs < 1)) {\n    throw usageError(`--jobs must be a positive integer (got \"${opts.jobs}\")`);\n  }\n\n  const only = opts.only ? opts.only.split(',').map((s) => s.trim()).filter(Boolean) : undefined;\n  let result;\n  try {\n    result = await buildGraph({\n      root,\n      paths: paths.length ? paths : undefined,\n      only,\n      exclude: opts.exclude,\n      jobs,\n      noCache: global.noCache,\n      deep: global.deep,\n      noGround: opts.ground === false,\n      scip: typeof opts.scip === 'string' ? opts.scip : undefined,\n      noScip: opts.scip === false,\n      noTsc: opts.tsc === false,\n      generatedAt: global.generatedAt,\n      onParseProgress: bar ? (done, total) => bar.update(done, total) : undefined,\n      grammarsDir: opts.grammars,\n    });\n  } catch (err) {\n    bar?.done();\n    if (err instanceof UsageError) throw usageError(err.message);\n    // A resource safeguard fired (file-count cap, heap budget, worker OOM) —\n    // the message already carries the remedy; surface it without a stack.\n    if (err instanceof ResourceLimitError) throw new CliError(err.message, ExitCode.ERROR);\n    throw err;\n  }\n  bar?.done();\n\n  const written = writeArtifacts(result.graph, {\n    root,\n    html: opts.html,\n    report: opts.report,\n    graphPath: global.graph,\n  });\n\n  // Record the freshness snapshot (stat+hash per corpus file, plus this build's\n  // scope) so `vg serve`/`vg ask` can auto-refresh the map when the tree drifts.\n  // Skipped for a custom --graph target: that is an explicit artifact the\n  // auto-refresh machinery must not manage.\n  if (!global.graph) {\n    writeSnapshot(root, result.graph.provenance.corpusHash, result.fileStats, {\n      only,\n      exclude: opts.exclude,\n      paths: paths.length ? paths : undefined,\n      deep: global.deep,\n      noGround: opts.ground === false,\n      scip: typeof opts.scip === 'string' ? opts.scip : undefined,\n      noScip: opts.scip === false,\n      noTsc: opts.tsc === false,\n      grammarsDir: opts.grammars,\n    });\n  }\n\n  if (opts.export) writeExport(result.graph, opts.export);\n\n  // Bring previously-installed assistant instructions (skill/nudge files from\n  // `vg install`) up to the current content version — so evolved instructions\n  // reach this repo the first time a new CLI builds here. Only files carrying\n  // vg's own version marker (or the exact legacy generated content) are\n  // touched; a custom --graph build is an explicit artifact and skips this.\n  if (!global.graph) {\n    const fileCount = result.graph.nodes.filter((n) => n.kind === 'file').length;\n    const refreshed = refreshInstalledInstructions(root, fileCount > 0 && fileCount < SMALL_REPO_FILES);\n    if (interactive) {\n      for (const r of refreshed) {\n        info(c.dim(`vg · refreshed assistant instructions ${r.file} (v${r.from} → v${r.to})`));\n      }\n    }\n  }\n\n  // `--attest`: sign the freshly-built graph → .vibgrate/attestation.intoto.jsonl.\n  let attestation: SignSummary | undefined;\n  const attestNotices: string[] = [];\n  if (opts.attest) {\n    const signed = await signGraphAttestation(root, result.graph, {\n      key: opts.attestKey,\n      attestation: opts.attestation,\n    });\n    attestation = signed.summary;\n    attestNotices.push(...signed.notices);\n  }\n\n  if (global.json) {\n    json({\n      ok: true,\n      counts: result.graph.meta.counts,\n      languages: result.graph.meta.languages,\n      reparsed: result.reparsed,\n      reused: result.reused,\n      totalFiles: result.totalFiles,\n      resolve: result.resolveStats,\n      tsc: result.tsc,\n      scip: result.scip,\n      epistemic: epistemicBreakdown(result.graph.edges),\n      artifacts: written,\n      corpusHash: result.graph.provenance.corpusHash,\n      toolchain: result.graph.provenance.toolchain,\n      attestation,\n      timingMs: result.timing.totalMs,\n      warnings: result.warnings,\n    });\n    return;\n  }\n\n  const { counts } = result.graph.meta;\n  const incremental =\n    result.reused > 0\n      ? `incremental: ${result.reparsed} of ${result.totalFiles} files re-parsed`\n      : `${result.totalFiles} files parsed`;\n  const seconds = (result.timing.totalMs / 1000).toFixed(2);\n  info(`${c.cyan('vg')} · mapped ${rel(root)} in ${seconds}s (${incremental})`);\n  info(\n    `  nodes ${c.bold(String(counts.nodes))}   edges ${c.bold(String(counts.edges))}   ` +\n      `areas ${counts.areas}   langs ${result.graph.meta.languages.join(',') || '—'}`,\n  );\n  const callPct =\n    result.resolveStats.callsResolved + result.resolveStats.callsUnresolved > 0\n      ? Math.round(\n          (100 * result.resolveStats.callsResolved) /\n            (result.resolveStats.callsResolved + result.resolveStats.callsUnresolved),\n        )\n      : 100;\n  // When a precise rung ran it is authoritative; callPct is only the heuristic\n  // floor (label it so, to avoid understating the precise result below).\n  const precise = result.tsc || result.scip;\n  const callLabel = precise ? `heuristic floor ${callPct}%` : `calls resolved ${callPct}%`;\n  info(c.dim(`  ${callLabel} · resolver ${result.graph.provenance.resolver.join(',')}`));\n  if (result.tsc) {\n    const jsx = result.tsc.jsx > 0 ? `, ${result.tsc.jsx} JSX` : '';\n    info(c.dim(`  tsc: ${result.tsc.resolved} precise edges across ${result.tsc.files} TS/JS files (${result.tsc.calls} calls${jsx})`));\n  }\n  if (result.scip) {\n    info(c.dim(`  scip: ${result.scip.resolved} precise edges from ${result.scip.tool ?? 'index'} (${result.scip.documents} docs)`));\n  }\n  const ep = epistemicBreakdown(result.graph.edges);\n  info(\n    c.dim(\n      `  edges by evidence · observed ${ep.observed} · name-matched ${ep['name-matched']} · declared ${ep.declared}`,\n    ),\n  );\n  const artifactList = [written.graphPath, written.htmlPath, written.reportPath]\n    .filter(Boolean)\n    .map((p) => path.relative(root, p as string))\n    .join('  ');\n  info(`  → ${artifactList}`);\n  if (result.warnings.length) {\n    info(c.yellow(`  ${result.warnings.length} parse warning(s) — run with --json for detail`));\n  }\n  if (attestation) {\n    for (const n of attestNotices) info(c.yellow(`  ${n}`));\n    info(\n      c.dim(\n        `  attested · keyid ${attestation.keyid} · digest ${attestation.graphDigest.slice(0, 16)}… → ${attestation.out}`,\n      ),\n    );\n  }\n\n  maybeWarmEmbeddings(root, result.graph, global, opts.warm !== false);\n}\n\n/**\n * `vg build --verify` — the single verification entry point. Runs the determinism\n * self-check (byte-identical rebuilds + toolchain fingerprint) and, when an\n * attestation is present, verifies it against the on-disk graph. Exit 4 on a\n * determinism failure, exit 2 on an attestation failure.\n */\nasync function verifyGraph(root: string, opts: BuildCmdOpts, global: GlobalOpts): Promise<void> {\n  const only = opts.only ? opts.only.split(',').map((s) => s.trim()).filter(Boolean) : undefined;\n  const jobs = opts.jobs ? Number(opts.jobs) : undefined;\n  const det = await verifyDeterminism({ root, only, exclude: opts.exclude, jobs });\n  const attest = verifyGraphAttestation(root, { attestation: opts.attestation, pub: opts.pub });\n  const attestFailed = !attest.missing && attest.result?.status === 'failed';\n\n  if (global.json) {\n    json({\n      ok: det.ok && !attestFailed,\n      determinism: { ok: det.ok, checks: det.checks, digest: det.digest },\n      attestation: attest.missing\n        ? null\n        : {\n            status: attest.result?.status,\n            signatureValid: attest.result?.signatureValid,\n            signerPinned: attest.result?.signerPinned,\n            digestMatches: attest.result?.digestMatches,\n            dirty: attest.result?.dirty,\n            keyid: attest.result?.keyid,\n            reason: attest.result?.reason,\n          },\n    });\n  } else {\n    info(`${c.cyan('vg build --verify')} · ${path.relative(process.cwd(), root) || '.'}`);\n    for (const check of det.checks) {\n      const mark = check.ok ? c.green('✔') : c.red('✘');\n      const detail = check.detail ? c.dim(` (${check.detail})`) : '';\n      info(`  ${mark} ${check.name}${detail}`);\n    }\n    info(det.ok ? c.green(`  deterministic · digest ${det.digest.slice(0, 16)}…`) : c.red('  NON-DETERMINISTIC'));\n    if (attest.missing) {\n      info(c.dim(`  attestation: none (sign one with \\`vg build --attest\\`)`));\n    } else {\n      const r = attest.result;\n      const badge =\n        r?.status === 'verified'\n          ? c.green('✔ attestation verified')\n          : r?.status === 'signature-valid'\n            ? c.yellow('~ attestation signature valid')\n            : c.red('✘ attestation failed');\n      info(`  ${badge}${r?.keyid ? c.dim(` · keyid ${r.keyid}`) : ''}`);\n      info(c.dim(`    ${r?.reason ?? ''}`));\n    }\n  }\n\n  if (!det.ok) throw new CliError('determinism self-check failed', ExitCode.NON_DETERMINISTIC);\n  if (attestFailed) throw new CliError('attestation verification failed', ExitCode.GATE_FAILED);\n}\n\n/**\n * After an interactive build we have just committed to a code graph, so the\n * user is likely to run `vg ask`/`vg serve` next — start warming the semantic\n * index in the background now so that first semantic call is instant instead of\n * paying a cold model load. If the model isn't downloaded yet, the background\n * warm fetches it (once, centrally) rather than deferring the whole cost to the\n * first `ask`. Disabled with `--no-warm`; skipped under --json/--quiet/--local\n * and when not at a TTY (so CI never auto-downloads). The detached child runs\n * `vg embed --bg [--download]`; a lock prevents it racing a foreground `ask`.\n */\nfunction maybeWarmEmbeddings(root: string, graph: VgGraph, global: GlobalOpts, warm: boolean): void {\n  if (!warm || global.json || global.quiet || global.local) return;\n  if (!process.stdout.isTTY && !process.stderr.isTTY) return;\n  const cli = process.argv[1];\n  if (!cli) return;\n  const modelId = resolveEmbedModel();\n  const ready = isModelReady(modelId);\n  // Already fully warm: model present and every node embedded → nothing to do.\n  if (ready && countPending(graph, root, modelId) === 0) return;\n  // When the model isn't on this machine yet, start the one-time download now\n  // (the graph is built; the next semantic call shouldn't wait for it).\n  const args = ready\n    ? [cli, 'embed', '-C', root, '--bg']\n    : [cli, 'embed', '-C', root, '--bg', '--download'];\n  try {\n    const child = spawn(process.execPath, args, { detached: true, stdio: 'ignore' });\n    child.unref();\n    info(\n      c.dim(\n        ready\n          ? '  warming the semantic index in the background — `vg ask` will be instant'\n          : '  downloading the semantic model in the background (once) — `vg ask`/`vg serve` will be instant; disable with --no-warm',\n      ),\n    );\n  } catch {\n    /* warm-up is best-effort */\n  }\n}\n\nfunction writeExport(graph: Parameters<typeof serializeGraph>[0], target: string): void {\n  if (target === '-') {\n    out(serializeGraph(graph).trimEnd());\n    return;\n  }\n  const ext = path.extname(target).toLowerCase();\n  let content: string;\n  switch (ext) {\n    case '.json':\n      content = serializeGraph(graph);\n      break;\n    case '.md':\n      content = renderReport(graph);\n      break;\n    case '.html':\n      content = renderHtml(graph);\n      break;\n    default:\n      throw new CliError(\n        `cannot export to \"${ext || target}\" yet — supported in Phase 0: .json, .md, .html, \"-\" (stdout). ` +\n          `More formats (graphml, dot, cypher) arrive with \\`vg export\\` in Phase 1.`,\n        ExitCode.USAGE_ERROR,\n      );\n  }\n  fs.mkdirSync(path.dirname(path.resolve(target)), { recursive: true });\n  fs.writeFileSync(target, content);\n}\n\nfunction collect(value: string, prev: string[]): string[] {\n  return [...prev, value];\n}\n\nfunction rel(root: string): string {\n  const r = path.relative(process.cwd(), root);\n  return r === '' ? '.' : r;\n}\n","/**\n * Model routing for `vg code` (VG-CLI-CODE §5.2).\n *\n * The \"best in breed\" story is an ordered set of backends with automatic\n * fallback — the OpenRouter/LiteLLM model — expressed as a *scheduling* decision\n * the session can execute: try the preferred provider, and on a transport\n * failure fall through to the next available one. This resolver is pure over its\n * injected inputs (flags, environment, the discovered local fleet), so it is\n * fully testable, and it holds two hard rules from the guardrails:\n *\n *   - **No surprise egress or install.** With no explicit selection it picks a\n *     backend only from signals already present (a configured hosted key, or a\n *     model already pulled locally). It never dials a default cloud endpoint you\n *     didn't configure, and never triggers an install to pick a default.\n *   - **`--local` stays local.** Under `--local` only on-device backends are\n *     eligible; if none are available it fails with an actionable message rather\n *     than silently reaching the network.\n */\n\nimport { CliError, ExitCode } from '../util/exit.js';\nimport { discoverModels, type LocalModel } from '../engine/models.js';\nimport {\n  LocalLlamaProvider,\n  MockProvider,\n  OllamaProvider,\n  OpenAiCompatibleProvider,\n  OPENAI_COMPATIBLE,\n  type OpenAiCompatibleConfig,\n} from './providers.js';\nimport type { Provider } from './types.js';\n\nexport interface RouteOptions {\n  /** Explicit `--provider` (ollama, lmstudio, openrouter, litellm, openai, together, llama-cpp). */\n  provider?: string;\n  /** Explicit `--model`. */\n  model?: string;\n  /** `--local`: on-device backends only. */\n  local?: boolean;\n  /** `--yes`: consent to a first-use install (only relevant to llama-cpp). */\n  consent?: boolean;\n  /** Path to a gguf for the llama-cpp backend. */\n  modelPath?: string;\n  /** A scripted reply → force the deterministic MockProvider (tests/`--mock`). */\n  mockReply?: string;\n}\n\nexport interface RouteDeps {\n  env?: NodeJS.ProcessEnv;\n  discover?: () => LocalModel[];\n}\n\nexport interface RouteResult {\n  /** Providers to try in order; the session falls through on transport failure. */\n  providers: Provider[];\n  /** A short, human explanation of the choice (for the run header / --json). */\n  reason: string;\n}\n\nconst HOSTED_IDS = new Set(['openrouter', 'litellm', 'openai', 'together']);\n\n/** Resolve the ordered provider list for a run. Throws an actionable CliError when nothing is eligible. */\nexport function resolveProviders(opts: RouteOptions, deps: RouteDeps = {}): RouteResult {\n  const env = deps.env ?? process.env;\n  const discover = deps.discover ?? discoverModels;\n\n  // Deterministic offline floor — used by tests, the benchmark, and `--mock`.\n  if (opts.mockReply !== undefined) {\n    return { providers: [new MockProvider(opts.model ?? 'mock-1', opts.mockReply)], reason: 'mock provider (scripted, offline)' };\n  }\n\n  // Explicit provider wins.\n  if (opts.provider) {\n    const provider = buildExplicit(opts.provider, opts, env, discover);\n    const fallbacks = opts.local || provider.local ? localFallbacks(opts, env, discover, provider.id) : [];\n    return { providers: [provider, ...fallbacks], reason: `explicit --provider ${opts.provider}` };\n  }\n\n  // --local: on-device only, in preference order.\n  if (opts.local) {\n    const locals = localFallbacks(opts, env, discover, '');\n    if (locals.length === 0) {\n      throw new CliError(\n        'no local model backend available for --local. Start Ollama (`ollama serve` + `ollama pull <model>`), run LM Studio, or point --provider llama-cpp at a gguf. See `vg models`.',\n        ExitCode.NOT_FOUND,\n      );\n    }\n    return { providers: locals, reason: '--local (on-device backends only)' };\n  }\n\n  // No explicit selection: choose from signals already present, best first.\n  // 1) A configured hosted router key (OpenRouter is the reference best-in-breed router).\n  if (env.OPENROUTER_API_KEY) {\n    const model = resolveHostedModel(opts, env, 'openrouter');\n    const primary = buildHosted('openrouter', model);\n    return { providers: [primary, ...localFallbacks(opts, env, discover, 'openrouter')], reason: 'OPENROUTER_API_KEY is set → OpenRouter (with local fallback)' };\n  }\n  // 2) A locally-pulled model.\n  const locals = localFallbacks(opts, env, discover, '');\n  if (locals.length) return { providers: locals, reason: 'a local model is available → on-device (no key needed)' };\n  // 3) Any other configured hosted key.\n  for (const id of ['litellm', 'openai', 'together'] as const) {\n    const keyEnv = OPENAI_COMPATIBLE[id].apiKeyEnv;\n    if (keyEnv && env[keyEnv]) {\n      const model = resolveHostedModel(opts, env, id);\n      return { providers: [buildHosted(id, model)], reason: `${keyEnv} is set → ${OPENAI_COMPATIBLE[id].label}` };\n    }\n  }\n\n  throw new CliError(\n    'no model backend configured. Do one of: set OPENROUTER_API_KEY for the hosted router, run Ollama locally (`ollama serve`), or use --local with a local model. Set the model with --model or VG_CODE_MODEL. (No models are installed by default.)',\n    ExitCode.NOT_FOUND,\n  );\n}\n\nfunction buildExplicit(id: string, opts: RouteOptions, env: NodeJS.ProcessEnv, discover: () => LocalModel[]): Provider {\n  if (id === 'ollama') return new OllamaProvider(resolveLocalModel(opts, discover, 'ollama'), env.OLLAMA_HOST);\n  if (id === 'llama-cpp') {\n    const modelPath = opts.modelPath || env.VG_CODE_MODEL_PATH;\n    if (!modelPath) throw new CliError('--provider llama-cpp needs a gguf path via --model-path or VG_CODE_MODEL_PATH (no weights are downloaded automatically; see `vg models`).', ExitCode.USAGE_ERROR);\n    return new LocalLlamaProvider(opts.model ?? basename(modelPath), modelPath, undefined, !!opts.consent);\n  }\n  if (id === 'lmstudio') return buildHosted('lmstudio', resolveHostedModel(opts, env, 'lmstudio'));\n  if (HOSTED_IDS.has(id)) return buildHosted(id, resolveHostedModel(opts, env, id));\n  throw new CliError(`unknown --provider \"${id}\". Known: ollama, lmstudio, openrouter, litellm, openai, together, llama-cpp.`, ExitCode.USAGE_ERROR);\n}\n\nfunction buildHosted(id: string, model: string): OpenAiCompatibleProvider {\n  const base = OPENAI_COMPATIBLE[id];\n  const config: OpenAiCompatibleConfig = { ...base, id };\n  return new OpenAiCompatibleProvider(model, config);\n}\n\n/** On-device backends in preference order, skipping the one already chosen as primary. */\nfunction localFallbacks(opts: RouteOptions, env: NodeJS.ProcessEnv, discover: () => LocalModel[], exclude: string): Provider[] {\n  const out: Provider[] = [];\n  const models = safeDiscover(discover);\n  const ollamaModel = opts.model ?? firstOfRuntime(models, 'ollama');\n  if (exclude !== 'ollama' && ollamaModel) out.push(new OllamaProvider(ollamaModel, env.OLLAMA_HOST));\n  // LM Studio serves an OpenAI-compatible endpoint locally; include if a model id is known.\n  const lmModel = opts.model ?? firstOfRuntime(models, 'lm-studio');\n  if (exclude !== 'lmstudio' && lmModel) out.push(buildHosted('lmstudio', lmModel));\n  return out;\n}\n\nfunction resolveLocalModel(opts: RouteOptions, discover: () => LocalModel[], runtime: LocalModel['runtime']): string {\n  if (opts.model) return opts.model;\n  const found = firstOfRuntime(safeDiscover(discover), runtime);\n  if (found) return found;\n  throw new CliError(`--provider ${runtime} needs a model. Pull one (\\`ollama pull <model>\\`) then re-run, or pass --model. See \\`vg models\\`.`, ExitCode.NOT_FOUND);\n}\n\nfunction resolveHostedModel(opts: RouteOptions, env: NodeJS.ProcessEnv, id: string): string {\n  const model = opts.model || env.VG_CODE_MODEL;\n  if (model) return model;\n  throw new CliError(\n    `${OPENAI_COMPATIBLE[id].label} needs a model id — pass --model (e.g. a current best-in-breed coding model) or set VG_CODE_MODEL. We don't hard-code a model so you always pick the current best one.`,\n    ExitCode.USAGE_ERROR,\n  );\n}\n\nfunction firstOfRuntime(models: LocalModel[], runtime: LocalModel['runtime']): string | undefined {\n  // Deterministic: discoverModels() already returns a sorted list.\n  const m = models.find((x) => x.runtime === runtime);\n  return m?.name;\n}\n\nfunction safeDiscover(discover: () => LocalModel[]): LocalModel[] {\n  try {\n    return discover();\n  } catch {\n    return [];\n  }\n}\n\nfunction basename(p: string): string {\n  return p.replace(/\\\\/g, '/').split('/').pop() ?? p;\n}\n"]}

package/dist/chunk-6CXTPC74.js

@@ -0,0 +1,234 @@
+import { buildCodeContext, buildMessages, parseEdits, applyEdits, unifiedDiff, redactSecrets } from './chunk-CS37OBE3.js';
+import { recordCliCall, CLI_TOOL_ALIASES } from './chunk-WNIIKCNF.js';
+import * as fs from 'fs';
+import * as path from 'path';
+
+async function runCodeSession(options) {
+  const {
+    graph,
+    root,
+    instruction,
+    providers,
+    apply = false,
+    consent = false,
+    files,
+    budget,
+    chatOptions,
+    now = () => 0,
+    onPhase = () => {
+    }
+  } = options;
+  const fsImpl = options.fsImpl ?? nodeCodeFs(root);
+  const correlationId = options.correlationId ?? shortId();
+  const phasesRun = [];
+  const phase = (p, detail) => {
+    phasesRun.push(p);
+    onPhase(p, detail);
+  };
+  phase("inspect", "building graph-grounded context");
+  const context = buildCodeContext(graph, instruction, { budget, files });
+  if (options.attribution?.client) {
+    const seedFiles = new Set(context.seeds.map((s) => s.node.file).filter(Boolean));
+    recordCliCall(
+      root,
+      {
+        tool: CLI_TOOL_ALIASES.ask,
+        client: options.attribution.client,
+        provider: options.attribution.provider,
+        model: options.attribution.model,
+        outcome: context.seeds.length ? "complete" : "miss",
+        vgTokens: context.tokensEstimate,
+        baselineFiles: seedFiles.size
+      },
+      now()
+    );
+  }
+  phase("assess", "asking the routed model for a minimal edit");
+  const messages = buildMessages(context);
+  const { result, provider, fellBack } = await complete(providers, messages, chatOptions, correlationId);
+  const edits = parseEdits(result.text);
+  const spans = spanIndex(graph);
+  const applied = applyEdits(
+    edits,
+    (file) => fsImpl.read(file),
+    (file) => spans.get(normalize(file)) ?? []
+  );
+  const changes = [];
+  for (const [file, entry] of [...applied.entries()].sort((a, b) => a[0].localeCompare(b[0]))) {
+    changes.push({
+      file,
+      before: entry.before,
+      after: entry.after,
+      outcomes: entry.outcomes,
+      diff: unifiedDiff(entry.before, entry.after, file)
+    });
+  }
+  phase("dry-run", `${changes.length} file(s) would change`);
+  const anyApplicable = changes.some((c) => c.diff !== "" && c.outcomes.some((o) => o.status === "applied"));
+  const base = {
+    instruction,
+    provider: { id: provider.id, model: provider.model, local: provider.local, fellBack },
+    phasesRun,
+    changes,
+    applied: false,
+    verification: { ran: false, ok: false, detail: "dry-run \u2014 no changes written" },
+    correlationId
+  };
+  if (!apply) {
+    if (!options.noAudit) writeAudit(fsImpl, base, now());
+    return base;
+  }
+  if (!consent) {
+    const stopped = { ...base, verification: { ran: false, ok: false, detail: "apply requested without consent \u2014 re-run with --yes to write these changes" } };
+    if (!options.noAudit) writeAudit(fsImpl, stopped, now());
+    return stopped;
+  }
+  if (!anyApplicable) {
+    const nothing = { ...base, verification: { ran: false, ok: false, detail: "nothing to write \u2014 no edit applied cleanly" } };
+    if (!options.noAudit) writeAudit(fsImpl, nothing, now());
+    return nothing;
+  }
+  phase("approve", "consent given (--yes)");
+  phase("execute", "writing approved changes");
+  for (const change of changes) {
+    if (change.diff === "") continue;
+    if (!change.outcomes.some((o) => o.status === "applied")) continue;
+    if (change.after === null) fsImpl.remove(change.file);
+    else fsImpl.write(change.file, change.after);
+  }
+  phase("verify", "confirming on-disk content matches the approved change");
+  const verification = verifyWrites(fsImpl, changes);
+  phase("log", "recording an audit entry");
+  const final = { ...base, applied: true, verification };
+  if (!options.noAudit) writeAudit(fsImpl, final, now());
+  return final;
+}
+function commitChanges(result, fsImpl, now = () => 0) {
+  const anyApplicable = result.changes.some((c) => c.diff !== "" && c.outcomes.some((o) => o.status === "applied"));
+  if (!anyApplicable) {
+    return { ...result, applied: false, verification: { ran: false, ok: false, detail: "nothing to write \u2014 no edit applied cleanly" } };
+  }
+  for (const change of result.changes) {
+    if (change.diff === "" || !change.outcomes.some((o) => o.status === "applied")) continue;
+    if (change.after === null) fsImpl.remove(change.file);
+    else fsImpl.write(change.file, change.after);
+  }
+  const verification = verifyWrites(fsImpl, result.changes);
+  const final = { ...result, applied: true, verification, phasesRun: [...result.phasesRun, "approve", "execute", "verify", "log"] };
+  writeAudit(fsImpl, final, now());
+  return final;
+}
+function undoChanges(changes, fsImpl) {
+  const restored = [];
+  for (const ch of changes) {
+    if (!ch.outcomes.some((o) => o.status === "applied")) continue;
+    if (ch.before === null) fsImpl.remove(ch.file);
+    else fsImpl.write(ch.file, ch.before);
+    restored.push(ch.file);
+  }
+  return restored;
+}
+async function complete(providers, messages, chatOptions, correlationId) {
+  if (providers.length === 0) throw new Error(`no model provider available (ref ${correlationId})`);
+  let lastErr;
+  for (let i = 0; i < providers.length; i++) {
+    const provider = providers[i];
+    try {
+      const result = await provider.chat(messages, { temperature: 0, ...chatOptions });
+      return { result, provider, fellBack: i > 0 };
+    } catch (e) {
+      lastErr = e;
+    }
+  }
+  const message = lastErr instanceof Error ? redactSecrets(lastErr.message) : String(lastErr);
+  throw new Error(`${message} (ref ${correlationId})`);
+}
+function verifyWrites(fsImpl, changes) {
+  let checked = 0;
+  const mismatches = [];
+  for (const change of changes) {
+    if (change.diff === "" || !change.outcomes.some((o) => o.status === "applied")) continue;
+    checked++;
+    const onDisk = fsImpl.read(change.file);
+    if (onDisk !== change.after) mismatches.push(change.file);
+  }
+  if (mismatches.length) return { ran: true, ok: false, detail: `on-disk content differs for: ${mismatches.join(", ")}` };
+  return { ran: true, ok: true, detail: `wrote and verified ${checked} file(s)` };
+}
+function writeAudit(fsImpl, r, ts) {
+  const record = {
+    ts,
+    correlationId: r.correlationId,
+    instruction: r.instruction.slice(0, 500),
+    provider: r.provider.id,
+    model: r.provider.model,
+    local: r.provider.local,
+    applied: r.applied,
+    files: r.changes.map((c) => ({ file: c.file, statuses: c.outcomes.map((o) => o.status) })),
+    verification: r.verification,
+    phases: r.phasesRun
+  };
+  try {
+    fsImpl.appendAudit(JSON.stringify(record));
+  } catch {
+  }
+}
+function spanIndex(graph) {
+  const map = /* @__PURE__ */ new Map();
+  for (const n of graph.nodes) {
+    if (n.kind === "file" || n.kind === "external") continue;
+    const file = normalize(n.file);
+    const list = map.get(file) ?? [];
+    list.push({ qualifiedName: n.qualifiedName, file, start: n.span.start, end: n.span.end });
+    map.set(file, list);
+  }
+  return map;
+}
+function normalize(file) {
+  return file.replace(/\\/g, "/").replace(/^\.\//, "");
+}
+function nodeCodeFs(root) {
+  const resolve2 = (file) => {
+    const abs = path.resolve(root, file);
+    const rel = path.relative(root, abs);
+    if (rel.startsWith("..") || path.isAbsolute(rel)) {
+      throw new Error(`edit path escapes the project root: ${file} \u2014 refusing to touch files outside ${root}`);
+    }
+    return abs;
+  };
+  return {
+    read(file) {
+      try {
+        return fs.readFileSync(resolve2(file), "utf8");
+      } catch {
+        return null;
+      }
+    },
+    write(file, content) {
+      const abs = resolve2(file);
+      fs.mkdirSync(path.dirname(abs), { recursive: true });
+      fs.writeFileSync(abs, content);
+    },
+    remove(file) {
+      try {
+        fs.rmSync(resolve2(file));
+      } catch {
+      }
+    },
+    appendAudit(line) {
+      const dir = path.join(root, ".vibgrate");
+      fs.mkdirSync(dir, { recursive: true });
+      fs.appendFileSync(path.join(dir, "code-audit.jsonl"), line + "\n");
+    }
+  };
+}
+function shortId() {
+  let s = "";
+  const alphabet = "abcdefghijklmnopqrstuvwxyz0123456789";
+  for (let i = 0; i < 8; i++) s += alphabet[Math.floor(Math.random() * alphabet.length)];
+  return s;
+}
+
+export { commitChanges, nodeCodeFs, runCodeSession, undoChanges };
+//# sourceMappingURL=chunk-6CXTPC74.js.map
+//# sourceMappingURL=chunk-6CXTPC74.js.map

package/dist/chunk-6CXTPC74.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/code/session.ts"],"names":["resolve"],"mappings":";;;;;AA4EA,eAAsB,eAAe,OAAA,EAAwD;AAC3F,EAAA,MAAM;AAAA,IACJ,KAAA;AAAA,IACA,IAAA;AAAA,IACA,WAAA;AAAA,IACA,SAAA;AAAA,IACA,KAAA,GAAQ,KAAA;AAAA,IACR,OAAA,GAAU,KAAA;AAAA,IACV,KAAA;AAAA,IACA,MAAA;AAAA,IACA,WAAA;AAAA,IACA,MAAM,MAAM,CAAA;AAAA,IACZ,UAAU,MAAM;AAAA,IAAC;AAAA,GACnB,GAAI,OAAA;AACJ,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,IAAU,UAAA,CAAW,IAAI,CAAA;AAChD,EAAA,MAAM,aAAA,GAAgB,OAAA,CAAQ,aAAA,IAAiB,OAAA,EAAQ;AACvD,EAAA,MAAM,YAA8B,EAAC;AACrC,EAAA,MAAM,KAAA,GAAQ,CAAC,CAAA,EAAmB,MAAA,KAAyB;AACzD,IAAA,SAAA,CAAU,KAAK,CAAC,CAAA;AAChB,IAAA,OAAA,CAAQ,GAAG,MAAM,CAAA;AAAA,EACnB,CAAA;AAGA,EAAA,KAAA,CAAM,WAAW,iCAAiC,CAAA;AAClD,EAAA,MAAM,UAAU,gBAAA,CAAiB,KAAA,EAAO,aAAa,EAAE,MAAA,EAAQ,OAAO,CAAA;AAKtE,EAAA,IAAI,OAAA,CAAQ,aAAa,MAAA,EAAQ;AAC/B,IAAA,MAAM,SAAA,GAAY,IAAI,GAAA,CAAI,OAAA,CAAQ,MAAM,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA,CAAE,MAAA,CAAO,OAAO,CAAC,CAAA;AAC/E,IAAA,aAAA;AAAA,MACE,IAAA;AAAA,MACA;AAAA,QACE,MAAM,gBAAA,CAAiB,GAAA;AAAA,QACvB,MAAA,EAAQ,QAAQ,WAAA,CAAY,MAAA;AAAA,QAC5B,QAAA,EAAU,QAAQ,WAAA,CAAY,QAAA;AAAA,QAC9B,KAAA,EAAO,QAAQ,WAAA,CAAY,KAAA;AAAA,QAC3B,OAAA,EAAS,OAAA,CAAQ,KAAA,CAAM,MAAA,GAAS,UAAA,GAAa,MAAA;AAAA,QAC7C,UAAU,OAAA,CAAQ,cAAA;AAAA,QAClB,eAAe,SAAA,CAAU;AAAA,OAC3B;AAAA,MACA,GAAA;AAAI,KACN;AAAA,EACF;AAGA,EAAA,KAAA,CAAM,UAAU,4CAA4C,CAAA;AAC5D,EAAA,MAAM,QAAA,GAAW,cAAc,OAAO,CAAA;AACtC,EAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAS,GAAI,MAAM,QAAA,CAAS,SAAA,EAAW,QAAA,EAAU,WAAA,EAAa,aAAa,CAAA;AAErG,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,MAAA,CAAO,IAAI,CAAA;AACpC,EAAA,MAAM,KAAA,GAAQ,UAAU,KAAK,CAAA;AAC7B,EAAA,MAAM,OAAA,GAAU,UAAA;AAAA,IACd,KAAA;AAAA,IACA,CAAC,IAAA,KAAS,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA;AAAA,IAC1B,CAAC,SAAS,KAAA,CAAM,GAAA,CAAI,UAAU,IAAI,CAAC,KAAK;AAAC,GAC3C;AAEA,EAAA,MAAM,UAAwB,EAAC;AAC/B,EAAA,KAAA,MAAW,CAAC,MAAM,KAAK,CAAA,IAAK,CAAC,GAAG,OAAA,CAAQ,OAAA,EAAS,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,EAAE,CAAC,CAAA,CAAE,cAAc,CAAA,CAAE,CAAC,CAAC,CAAC,CAAA,EAAG;AAC3F,IAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,MACX,IAAA;AAAA,MACA,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,OAAO,KAAA,CAAM,KAAA;AAAA,MACb,UAAU,KAAA,CAAM,QAAA;AAAA,MAChB,MAAM,WAAA,CAAY,KAAA,CAAM,MAAA,EAAQ,KAAA,CAAM,OAAO,IAAI;AAAA,KAClD,CAAA;AAAA,EACH;AAGA,EAAA,KAAA,CAAM,SAAA,EAAW,CAAA,EAAG,OAAA,CAAQ,MAAM,CAAA,qBAAA,CAAuB,CAAA;AAEzD,EAAA,MAAM,gBAAgB,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,EAAE,IAAA,KAAS,EAAA,IAAM,CAAA,CAAE,QAAA,CAAS,KAAK,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,SAAS,CAAC,CAAA;AACzG,EAAA,MAAM,IAAA,GAA0B;AAAA,IAC9B,WAAA;AAAA,IACA,QAAA,EAAU,EAAE,EAAA,EAAI,QAAA,CAAS,EAAA,EAAI,KAAA,EAAO,QAAA,CAAS,KAAA,EAAO,KAAA,EAAO,QAAA,CAAS,KAAA,EAAO,QAAA,EAAS;AAAA,IACpF,SAAA;AAAA,IACA,OAAA;AAAA,IACA,OAAA,EAAS,KAAA;AAAA,IACT,cAAc,EAAE,GAAA,EAAK,OAAO,EAAA,EAAI,KAAA,EAAO,QAAQ,mCAAA,EAA+B;AAAA,IAC9E;AAAA,GACF;AAMA,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,IAAI,CAAC,OAAA,CAAQ,OAAA,aAAoB,MAAA,EAAQ,IAAA,EAAM,KAAK,CAAA;AACpD,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,OAAA,GAAU,EAAE,GAAG,IAAA,EAAM,YAAA,EAAc,EAAE,GAAA,EAAK,KAAA,EAAO,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,iFAAA,EAA6E,EAAE;AACzJ,IAAA,IAAI,CAAC,OAAA,CAAQ,OAAA,aAAoB,MAAA,EAAQ,OAAA,EAAS,KAAK,CAAA;AACvD,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,aAAA,EAAe;AAClB,IAAA,MAAM,OAAA,GAAU,EAAE,GAAG,IAAA,EAAM,YAAA,EAAc,EAAE,GAAA,EAAK,KAAA,EAAO,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,iDAAA,EAA6C,EAAE;AACzH,IAAA,IAAI,CAAC,OAAA,CAAQ,OAAA,aAAoB,MAAA,EAAQ,OAAA,EAAS,KAAK,CAAA;AACvD,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,KAAA,CAAM,WAAW,uBAAuB,CAAA;AAGxC,EAAA,KAAA,CAAM,WAAW,0BAA0B,CAAA;AAC3C,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,IAAI,MAAA,CAAO,SAAS,EAAA,EAAI;AACxB,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,SAAS,CAAA,EAAG;AAC1D,IAAA,IAAI,OAAO,KAAA,KAAU,IAAA,EAAM,MAAA,CAAO,MAAA,CAAO,OAAO,IAAI,CAAA;AAAA,SAC/C,MAAA,CAAO,KAAA,CAAM,MAAA,CAAO,IAAA,EAAM,OAAO,KAAK,CAAA;AAAA,EAC7C;AAGA,EAAA,KAAA,CAAM,UAAU,wDAAwD,CAAA;AACxE,EAAA,MAAM,YAAA,GAAe,YAAA,CAAa,MAAA,EAAQ,OAAO,CAAA;AAGjD,EAAA,KAAA,CAAM,OAAO,0BAA0B,CAAA;AACvC,EAAA,MAAM,QAA2B,EAAE,GAAG,IAAA,EAAM,OAAA,EAAS,MAAM,YAAA,EAAa;AACxE,EAAA,IAAI,CAAC,OAAA,CAAQ,OAAA,aAAoB,MAAA,EAAQ,KAAA,EAAO,KAAK,CAAA;AACrD,EAAA,OAAO,KAAA;AACT;AASO,SAAS,aAAA,CAAc,MAAA,EAA2B,MAAA,EAAgB,GAAA,GAAoB,MAAM,CAAA,EAAsB;AACvH,EAAA,MAAM,gBAAgB,MAAA,CAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,IAAA,KAAS,EAAA,IAAM,CAAA,CAAE,SAAS,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,MAAA,KAAW,SAAS,CAAC,CAAA;AAChH,EAAA,IAAI,CAAC,aAAA,EAAe;AAClB,IAAA,OAAO,EAAE,GAAG,MAAA,EAAQ,OAAA,EAAS,KAAA,EAAO,YAAA,EAAc,EAAE,GAAA,EAAK,KAAA,EAAO,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,mDAA6C,EAAE;AAAA,EACpI;AACA,EAAA,KAAA,MAAW,MAAA,IAAU,OAAO,OAAA,EAAS;AACnC,IAAA,IAAI,MAAA,CAAO,IAAA,KAAS,EAAA,IAAM,CAAC,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,SAAS,CAAA,EAAG;AAChF,IAAA,IAAI,OAAO,KAAA,KAAU,IAAA,EAAM,MAAA,CAAO,MAAA,CAAO,OAAO,IAAI,CAAA;AAAA,SAC/C,MAAA,CAAO,KAAA,CAAM,MAAA,CAAO,IAAA,EAAM,OAAO,KAAK,CAAA;AAAA,EAC7C;AACA,EAAA,MAAM,YAAA,GAAe,YAAA,CAAa,MAAA,EAAQ,MAAA,CAAO,OAAO,CAAA;AACxD,EAAA,MAAM,QAA2B,EAAE,GAAG,MAAA,EAAQ,OAAA,EAAS,MAAM,YAAA,EAAc,SAAA,EAAW,CAAC,GAAG,OAAO,SAAA,EAAW,SAAA,EAAW,SAAA,EAAW,QAAA,EAAU,KAAK,CAAA,EAAE;AACnJ,EAAA,UAAA,CAAW,MAAA,EAAQ,KAAA,EAAO,GAAA,EAAK,CAAA;AAC/B,EAAA,OAAO,KAAA;AACT;AAQO,SAAS,WAAA,CAAY,SAAuB,MAAA,EAA0B;AAC3E,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,MAAM,OAAA,EAAS;AACxB,IAAA,IAAI,CAAC,GAAG,QAAA,CAAS,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,SAAS,CAAA,EAAG;AACtD,IAAA,IAAI,GAAG,MAAA,KAAW,IAAA,EAAM,MAAA,CAAO,MAAA,CAAO,GAAG,IAAI,CAAA;AAAA,SACxC,MAAA,CAAO,KAAA,CAAM,EAAA,CAAG,IAAA,EAAM,GAAG,MAAM,CAAA;AACpC,IAAA,QAAA,CAAS,IAAA,CAAK,GAAG,IAAI,CAAA;AAAA,EACvB;AACA,EAAA,OAAO,QAAA;AACT;AAGA,eAAe,QAAA,CACb,SAAA,EACA,QAAA,EACA,WAAA,EACA,aAAA,EAC4E;AAC5E,EAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,iCAAA,EAAoC,aAAa,CAAA,CAAA,CAAG,CAAA;AAChG,EAAA,IAAI,OAAA;AACJ,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,SAAA,CAAU,QAAQ,CAAA,EAAA,EAAK;AACzC,IAAA,MAAM,QAAA,GAAW,UAAU,CAAC,CAAA;AAC5B,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,IAAA,CAAK,QAAA,EAAU,EAAE,WAAA,EAAa,CAAA,EAAG,GAAG,WAAA,EAAa,CAAA;AAC/E,MAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAU,IAAI,CAAA,EAAE;AAAA,IAC7C,SAAS,CAAA,EAAG;AACV,MAAA,OAAA,GAAU,CAAA;AAAA,IACZ;AAAA,EACF;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,KAAA,GAAQ,aAAA,CAAc,QAAQ,OAAO,CAAA,GAAI,OAAO,OAAO,CAAA;AAC1F,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,OAAO,CAAA,MAAA,EAAS,aAAa,CAAA,CAAA,CAAG,CAAA;AACrD;AAGA,SAAS,YAAA,CAAa,QAAgB,OAAA,EAAsE;AAC1G,EAAA,IAAI,OAAA,GAAU,CAAA;AACd,EAAA,MAAM,aAAuB,EAAC;AAC9B,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,IAAI,MAAA,CAAO,IAAA,KAAS,EAAA,IAAM,CAAC,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,SAAS,CAAA,EAAG;AAChF,IAAA,OAAA,EAAA;AACA,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,IAAI,CAAA;AACtC,IAAA,IAAI,WAAW,MAAA,CAAO,KAAA,EAAO,UAAA,CAAW,IAAA,CAAK,OAAO,IAAI,CAAA;AAAA,EAC1D;AACA,EAAA,IAAI,UAAA,CAAW,MAAA,EAAQ,OAAO,EAAE,KAAK,IAAA,EAAM,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,6BAAA,EAAgC,UAAA,CAAW,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,EAAG;AACtH,EAAA,OAAO,EAAE,KAAK,IAAA,EAAM,EAAA,EAAI,MAAM,MAAA,EAAQ,CAAA,mBAAA,EAAsB,OAAO,CAAA,QAAA,CAAA,EAAW;AAChF;AAGA,SAAS,UAAA,CAAW,MAAA,EAAgB,CAAA,EAAsB,EAAA,EAAkB;AAC1E,EAAA,MAAM,MAAA,GAAS;AAAA,IACb,EAAA;AAAA,IACA,eAAe,CAAA,CAAE,aAAA;AAAA,IACjB,WAAA,EAAa,CAAA,CAAE,WAAA,CAAY,KAAA,CAAM,GAAG,GAAG,CAAA;AAAA,IACvC,QAAA,EAAU,EAAE,QAAA,CAAS,EAAA;AAAA,IACrB,KAAA,EAAO,EAAE,QAAA,CAAS,KAAA;AAAA,IAClB,KAAA,EAAO,EAAE,QAAA,CAAS,KAAA;AAAA,IAClB,SAAS,CAAA,CAAE,OAAA;AAAA,IACX,OAAO,CAAA,CAAE,OAAA,CAAQ,IAAI,CAAC,CAAA,MAAO,EAAE,IAAA,EAAM,CAAA,CAAE,MAAM,QAAA,EAAU,CAAA,CAAE,SAAS,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,MAAM,GAAE,CAAE,CAAA;AAAA,IACzF,cAAc,CAAA,CAAE,YAAA;AAAA,IAChB,QAAQ,CAAA,CAAE;AAAA,GACZ;AACA,EAAA,IAAI;AACF,IAAA,MAAA,CAAO,WAAA,CAAY,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAGA,SAAS,UAAU,KAAA,EAA2C;AAC5D,EAAA,MAAM,GAAA,uBAAU,GAAA,EAA0B;AAC1C,EAAA,KAAA,MAAW,CAAA,IAAK,MAAM,KAAA,EAAO;AAC3B,IAAA,IAAI,CAAA,CAAE,IAAA,KAAS,MAAA,IAAU,CAAA,CAAE,SAAS,UAAA,EAAY;AAChD,IAAA,MAAM,IAAA,GAAO,SAAA,CAAU,CAAA,CAAE,IAAI,CAAA;AAC7B,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,GAAA,CAAI,IAAI,KAAK,EAAC;AAC/B,IAAA,IAAA,CAAK,IAAA,CAAK,EAAE,aAAA,EAAe,CAAA,CAAE,eAAe,IAAA,EAAM,KAAA,EAAO,CAAA,CAAE,IAAA,CAAK,KAAA,EAAO,GAAA,EAAK,CAAA,CAAE,IAAA,CAAK,KAAK,CAAA;AACxF,IAAA,GAAA,CAAI,GAAA,CAAI,MAAM,IAAI,CAAA;AAAA,EACpB;AACA,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,UAAU,IAAA,EAAsB;AACvC,EAAA,OAAO,KAAK,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,SAAS,EAAE,CAAA;AACrD;AAGO,SAAS,WAAW,IAAA,EAAsB;AAC/C,EAAA,MAAMA,QAAAA,GAAU,CAAC,IAAA,KAAyB;AACxC,IAAA,MAAM,GAAA,GAAW,IAAA,CAAA,OAAA,CAAQ,IAAA,EAAM,IAAI,CAAA;AACnC,IAAA,MAAM,GAAA,GAAW,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,GAAG,CAAA;AACnC,IAAA,IAAI,IAAI,UAAA,CAAW,IAAI,CAAA,IAAU,IAAA,CAAA,UAAA,CAAW,GAAG,CAAA,EAAG;AAChD,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oCAAA,EAAuC,IAAI,CAAA,wCAAA,EAAsC,IAAI,CAAA,CAAE,CAAA;AAAA,IACzG;AACA,IAAA,OAAO,GAAA;AAAA,EACT,CAAA;AACA,EAAA,OAAO;AAAA,IACL,KAAK,IAAA,EAAM;AACT,MAAA,IAAI;AACF,QAAA,OAAU,EAAA,CAAA,YAAA,CAAaA,QAAAA,CAAQ,IAAI,CAAA,EAAG,MAAM,CAAA;AAAA,MAC9C,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,IACF,CAAA;AAAA,IACA,KAAA,CAAM,MAAM,OAAA,EAAS;AACnB,MAAA,MAAM,GAAA,GAAMA,SAAQ,IAAI,CAAA;AACxB,MAAG,aAAe,IAAA,CAAA,OAAA,CAAQ,GAAG,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AACnD,MAAG,EAAA,CAAA,aAAA,CAAc,KAAK,OAAO,CAAA;AAAA,IAC/B,CAAA;AAAA,IACA,OAAO,IAAA,EAAM;AACX,MAAA,IAAI;AACF,QAAG,EAAA,CAAA,MAAA,CAAOA,QAAAA,CAAQ,IAAI,CAAC,CAAA;AAAA,MACzB,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF,CAAA;AAAA,IACA,YAAY,IAAA,EAAM;AAChB,MAAA,MAAM,GAAA,GAAW,IAAA,CAAA,IAAA,CAAK,IAAA,EAAM,WAAW,CAAA;AACvC,MAAG,EAAA,CAAA,SAAA,CAAU,GAAA,EAAK,EAAE,SAAA,EAAW,MAAM,CAAA;AACrC,MAAG,kBAAoB,IAAA,CAAA,IAAA,CAAK,GAAA,EAAK,kBAAkB,CAAA,EAAG,OAAO,IAAI,CAAA;AAAA,IACnE;AAAA,GACF;AACF;AAGA,SAAS,OAAA,GAAkB;AACzB,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,MAAM,QAAA,GAAW,sCAAA;AACjB,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,KAAK,CAAA,IAAK,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,MAAA,EAAO,GAAI,QAAA,CAAS,MAAM,CAAC,CAAA;AACrF,EAAA,OAAO,CAAA;AACT","file":"chunk-6CXTPC74.js","sourcesContent":["/**\n * The `vg code` governance session (VG-CLI-CODE §7).\n *\n * This is the load-bearing rule the whole platform is built on, applied to code\n * edits: a state-altering change goes **through** the lifecycle, never around it\n * (GUARDRAILS §5). One run walks inspect → assess → dry-run → approve → execute\n * → verify → log:\n *\n *   inspect  build the graph-grounded context for the instruction\n *   assess   ask the routed model for a terse edit; apply it deterministically\n *            (in memory); compute the diff and the blast radius\n *   dry-run  the DEFAULT terminal state — propose the change, write nothing\n *   approve  writing requires explicit consent; without it we stop at dry-run\n *   execute  write the approved changes to disk\n *   verify   confirm the files on disk match what was approved (+ optional cmd)\n *   log      append an immutable, secret-free audit record with a correlation id\n *\n * Everything is deterministic except the single model call, which is isolated\n * behind the provider list (tried in order, falling back on transport failure).\n * The filesystem and clock are injectable so the whole session is testable\n * offline with no writes escaping a temp dir.\n */\n\nimport * as fs from 'node:fs';\nimport * as path from 'node:path';\nimport { buildCodeContext } from './context.js';\nimport { recordCliCall, CLI_TOOL_ALIASES } from '../engine/savings.js';\nimport { parseEdits, applyEdits, type SymbolSpan } from './apply.js';\nimport { unifiedDiff } from './diff.js';\nimport { buildMessages } from './prompt.js';\nimport { redactSecrets } from './providers.js';\nimport type { ChatOptions, CodeSessionResult, FileChange, LifecyclePhase, Provider, ProviderResult } from './types.js';\nimport type { VgGraph } from '../schema.js';\n\n/** Minimal filesystem seam so the session is testable without touching real disk. */\nexport interface CodeFs {\n  read(file: string): string | null;\n  write(file: string, content: string): void;\n  remove(file: string): void;\n  appendAudit(line: string): void;\n}\n\nexport interface RunSessionOptions {\n  graph: VgGraph;\n  root: string;\n  instruction: string;\n  /** Providers to try in order (from the router); the first that answers wins. */\n  providers: Provider[];\n  /** Write to disk? Default false — dry-run is the safe default (GUARDRAILS §3.2). */\n  apply?: boolean;\n  /** Explicit consent for the write (`--yes`); without it, a requested apply stops at dry-run. */\n  consent?: boolean;\n  /** Restrict the edit surface to these files. */\n  files?: string[];\n  /** Context token budget. */\n  budget?: number;\n  chatOptions?: ChatOptions;\n  /** Injectable filesystem (defaults to a real, root-scoped fs). */\n  fsImpl?: CodeFs;\n  /** Injectable clock (ms) for the audit timestamp. */\n  now?: () => number;\n  /** Injectable correlation id (defaults to a random short id). */\n  correlationId?: string;\n  /** Progress callback per phase. */\n  onPhase?: (phase: LifecyclePhase, detail: string) => void;\n  /** Skip appending to the audit log (used by tests/dry programmatic calls). */\n  noAudit?: boolean;\n  /**\n   * Who is making the graph-backed call, for per-model savings auditing. When\n   * `client` is set, the context-assembly step (a `query_graph`-equivalent) is\n   * recorded to the local savings ledger tagged with the provider + model, so\n   * `vg savings` can break usage down per model. VG Code always sets this.\n   */\n  attribution?: { client: string; provider?: string; model?: string };\n}\n\nexport async function runCodeSession(options: RunSessionOptions): Promise<CodeSessionResult> {\n  const {\n    graph,\n    root,\n    instruction,\n    providers,\n    apply = false,\n    consent = false,\n    files,\n    budget,\n    chatOptions,\n    now = () => 0,\n    onPhase = () => {},\n  } = options;\n  const fsImpl = options.fsImpl ?? nodeCodeFs(root);\n  const correlationId = options.correlationId ?? shortId();\n  const phasesRun: LifecyclePhase[] = [];\n  const phase = (p: LifecyclePhase, detail: string): void => {\n    phasesRun.push(p);\n    onPhase(p, detail);\n  };\n\n  // ── inspect ──────────────────────────────────────────────────────────────\n  phase('inspect', 'building graph-grounded context');\n  const context = buildCodeContext(graph, instruction, { budget, files });\n\n  // Per-model savings: the context build is VG Code's `query_graph`-equivalent.\n  // Record it (counts only — never code or the instruction) tagged with the\n  // model, so `vg savings` audits usage per model. Local-only, best-effort.\n  if (options.attribution?.client) {\n    const seedFiles = new Set(context.seeds.map((s) => s.node.file).filter(Boolean));\n    recordCliCall(\n      root,\n      {\n        tool: CLI_TOOL_ALIASES.ask,\n        client: options.attribution.client,\n        provider: options.attribution.provider,\n        model: options.attribution.model,\n        outcome: context.seeds.length ? 'complete' : 'miss',\n        vgTokens: context.tokensEstimate,\n        baselineFiles: seedFiles.size,\n      },\n      now(),\n    );\n  }\n\n  // ── assess ──────────────────────────────────────────────────────────────\n  phase('assess', 'asking the routed model for a minimal edit');\n  const messages = buildMessages(context);\n  const { result, provider, fellBack } = await complete(providers, messages, chatOptions, correlationId);\n\n  const edits = parseEdits(result.text);\n  const spans = spanIndex(graph);\n  const applied = applyEdits(\n    edits,\n    (file) => fsImpl.read(file),\n    (file) => spans.get(normalize(file)) ?? [],\n  );\n\n  const changes: FileChange[] = [];\n  for (const [file, entry] of [...applied.entries()].sort((a, b) => a[0].localeCompare(b[0]))) {\n    changes.push({\n      file,\n      before: entry.before,\n      after: entry.after,\n      outcomes: entry.outcomes,\n      diff: unifiedDiff(entry.before, entry.after, file),\n    });\n  }\n\n  // ── dry-run (always produced) ─────────────────────────────────────────────\n  phase('dry-run', `${changes.length} file(s) would change`);\n\n  const anyApplicable = changes.some((c) => c.diff !== '' && c.outcomes.some((o) => o.status === 'applied'));\n  const base: CodeSessionResult = {\n    instruction,\n    provider: { id: provider.id, model: provider.model, local: provider.local, fellBack },\n    phasesRun,\n    changes,\n    applied: false,\n    verification: { ran: false, ok: false, detail: 'dry-run — no changes written' },\n    correlationId,\n  };\n\n  // ── approve ───────────────────────────────────────────────────────────────\n  // Writing is opt-in AND consent-gated. A requested apply without consent is\n  // not an error — it degrades to a dry-run so the caller can review, then\n  // re-run with --yes. This is the \"never destructive-by-default\" guardrail.\n  if (!apply) {\n    if (!options.noAudit) writeAudit(fsImpl, base, now());\n    return base;\n  }\n  if (!consent) {\n    const stopped = { ...base, verification: { ran: false, ok: false, detail: 'apply requested without consent — re-run with --yes to write these changes' } };\n    if (!options.noAudit) writeAudit(fsImpl, stopped, now());\n    return stopped;\n  }\n  if (!anyApplicable) {\n    const nothing = { ...base, verification: { ran: false, ok: false, detail: 'nothing to write — no edit applied cleanly' } };\n    if (!options.noAudit) writeAudit(fsImpl, nothing, now());\n    return nothing;\n  }\n  phase('approve', 'consent given (--yes)');\n\n  // ── execute ───────────────────────────────────────────────────────────────\n  phase('execute', 'writing approved changes');\n  for (const change of changes) {\n    if (change.diff === '') continue; // no-op file\n    if (!change.outcomes.some((o) => o.status === 'applied')) continue; // nothing applied cleanly here\n    if (change.after === null) fsImpl.remove(change.file);\n    else fsImpl.write(change.file, change.after);\n  }\n\n  // ── verify ────────────────────────────────────────────────────────────────\n  phase('verify', 'confirming on-disk content matches the approved change');\n  const verification = verifyWrites(fsImpl, changes);\n\n  // ── log ───────────────────────────────────────────────────────────────────\n  phase('log', 'recording an audit entry');\n  const final: CodeSessionResult = { ...base, applied: true, verification };\n  if (!options.noAudit) writeAudit(fsImpl, final, now());\n  return final;\n}\n\n/**\n * Commit an already-computed dry-run result: write the cleanly-applied changes,\n * verify them on disk, and append the audit record — the \"approve → execute →\n * verify → log\" tail of the lifecycle, run against a proposal the caller has\n * already shown and had approved (the interactive REPL uses this so it never\n * calls the model twice or writes something different from what was reviewed).\n */\nexport function commitChanges(result: CodeSessionResult, fsImpl: CodeFs, now: () => number = () => 0): CodeSessionResult {\n  const anyApplicable = result.changes.some((c) => c.diff !== '' && c.outcomes.some((o) => o.status === 'applied'));\n  if (!anyApplicable) {\n    return { ...result, applied: false, verification: { ran: false, ok: false, detail: 'nothing to write — no edit applied cleanly' } };\n  }\n  for (const change of result.changes) {\n    if (change.diff === '' || !change.outcomes.some((o) => o.status === 'applied')) continue;\n    if (change.after === null) fsImpl.remove(change.file);\n    else fsImpl.write(change.file, change.after);\n  }\n  const verification = verifyWrites(fsImpl, result.changes);\n  const final: CodeSessionResult = { ...result, applied: true, verification, phasesRun: [...result.phasesRun, 'approve', 'execute', 'verify', 'log'] };\n  writeAudit(fsImpl, final, now());\n  return final;\n}\n\n/**\n * Undo a set of applied changes by restoring each file's prior content — the\n * `/undo` command. A created file (before === null) is removed; an edited or\n * deleted file is restored to its `before`. Only cleanly-applied changes are\n * reverted. Returns the files it restored.\n */\nexport function undoChanges(changes: FileChange[], fsImpl: CodeFs): string[] {\n  const restored: string[] = [];\n  for (const ch of changes) {\n    if (!ch.outcomes.some((o) => o.status === 'applied')) continue;\n    if (ch.before === null) fsImpl.remove(ch.file);\n    else fsImpl.write(ch.file, ch.before);\n    restored.push(ch.file);\n  }\n  return restored;\n}\n\n/** Try each provider in order; fall back on transport failure. Throws the last actionable error. */\nasync function complete(\n  providers: Provider[],\n  messages: ReturnType<typeof buildMessages>,\n  chatOptions: ChatOptions | undefined,\n  correlationId: string,\n): Promise<{ result: ProviderResult; provider: Provider; fellBack: boolean }> {\n  if (providers.length === 0) throw new Error(`no model provider available (ref ${correlationId})`);\n  let lastErr: unknown;\n  for (let i = 0; i < providers.length; i++) {\n    const provider = providers[i];\n    try {\n      const result = await provider.chat(messages, { temperature: 0, ...chatOptions });\n      return { result, provider, fellBack: i > 0 };\n    } catch (e) {\n      lastErr = e;\n    }\n  }\n  const message = lastErr instanceof Error ? redactSecrets(lastErr.message) : String(lastErr);\n  throw new Error(`${message} (ref ${correlationId})`);\n}\n\n/** Confirm each written file's on-disk content equals what we approved. */\nfunction verifyWrites(fsImpl: CodeFs, changes: FileChange[]): { ran: boolean; ok: boolean; detail: string } {\n  let checked = 0;\n  const mismatches: string[] = [];\n  for (const change of changes) {\n    if (change.diff === '' || !change.outcomes.some((o) => o.status === 'applied')) continue;\n    checked++;\n    const onDisk = fsImpl.read(change.file);\n    if (onDisk !== change.after) mismatches.push(change.file);\n  }\n  if (mismatches.length) return { ran: true, ok: false, detail: `on-disk content differs for: ${mismatches.join(', ')}` };\n  return { ran: true, ok: true, detail: `wrote and verified ${checked} file(s)` };\n}\n\n/** An append-only, secret-free audit record (GUARDRAILS §2.6 / §5). No file contents, no keys. */\nfunction writeAudit(fsImpl: CodeFs, r: CodeSessionResult, ts: number): void {\n  const record = {\n    ts,\n    correlationId: r.correlationId,\n    instruction: r.instruction.slice(0, 500),\n    provider: r.provider.id,\n    model: r.provider.model,\n    local: r.provider.local,\n    applied: r.applied,\n    files: r.changes.map((c) => ({ file: c.file, statuses: c.outcomes.map((o) => o.status) })),\n    verification: r.verification,\n    phases: r.phasesRun,\n  };\n  try {\n    fsImpl.appendAudit(JSON.stringify(record));\n  } catch {\n    /* audit is best-effort; never fail the run on a logging problem */\n  }\n}\n\n/** Build a per-file map of symbol spans for graph-scoped edit disambiguation. */\nfunction spanIndex(graph: VgGraph): Map<string, SymbolSpan[]> {\n  const map = new Map<string, SymbolSpan[]>();\n  for (const n of graph.nodes) {\n    if (n.kind === 'file' || n.kind === 'external') continue;\n    const file = normalize(n.file);\n    const list = map.get(file) ?? [];\n    list.push({ qualifiedName: n.qualifiedName, file, start: n.span.start, end: n.span.end });\n    map.set(file, list);\n  }\n  return map;\n}\n\nfunction normalize(file: string): string {\n  return file.replace(/\\\\/g, '/').replace(/^\\.\\//, '');\n}\n\n/** Default filesystem impl, scoped to `root`. Refuses paths that escape the root. */\nexport function nodeCodeFs(root: string): CodeFs {\n  const resolve = (file: string): string => {\n    const abs = path.resolve(root, file);\n    const rel = path.relative(root, abs);\n    if (rel.startsWith('..') || path.isAbsolute(rel)) {\n      throw new Error(`edit path escapes the project root: ${file} — refusing to touch files outside ${root}`);\n    }\n    return abs;\n  };\n  return {\n    read(file) {\n      try {\n        return fs.readFileSync(resolve(file), 'utf8');\n      } catch {\n        return null;\n      }\n    },\n    write(file, content) {\n      const abs = resolve(file);\n      fs.mkdirSync(path.dirname(abs), { recursive: true });\n      fs.writeFileSync(abs, content);\n    },\n    remove(file) {\n      try {\n        fs.rmSync(resolve(file));\n      } catch {\n        /* already gone */\n      }\n    },\n    appendAudit(line) {\n      const dir = path.join(root, '.vibgrate');\n      fs.mkdirSync(dir, { recursive: true });\n      fs.appendFileSync(path.join(dir, 'code-audit.jsonl'), line + '\\n');\n    },\n  };\n}\n\n/** Short, URL-safe correlation id. Not a graph artifact, so runtime randomness is fine here. */\nfunction shortId(): string {\n  let s = '';\n  const alphabet = 'abcdefghijklmnopqrstuvwxyz0123456789';\n  for (let i = 0; i < 8; i++) s += alphabet[Math.floor(Math.random() * alphabet.length)];\n  return s;\n}\n"]}