@volter/live 0.5.211 → 0.5.213

package/dist/workbench-locator.js

@@ -0,0 +1,416 @@
+import {
+  PRODUCT_DECLARATION_KEY,
+  workbenchProductId
+} from "./chunk-PC56TDHV.js";
+import "./chunk-JFAHP5CC.js";
+import "./chunk-7WKVJGHZ.js";
+
+// src/workbench-locator.ts
+import { execFileSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import {
+  createWriteStream,
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  renameSync,
+  rmSync,
+  writeFileSync
+} from "node:fs";
+import { homedir } from "node:os";
+import { basename, isAbsolute, join, resolve, sep } from "node:path";
+import { Readable } from "node:stream";
+import { pipeline } from "node:stream/promises";
+var WORKBENCH_LOCATOR_PATH = ".volter/workbench.json";
+var RELEASE_RECORD = "BUILD.json";
+var SOURCES_LAUNCHER = join("scripts", "code-server.sh");
+var OVERLAY_RECORD = ".volter-overlay.json";
+function workbenchDeclarationExample(projectRoot) {
+  return `${join(projectRoot, WORKBENCH_LOCATOR_PATH)}:
+  { "workbench": "<path to an extracted Code-OSS release, or to a fork checkout>" }`;
+}
+function readWorkbenchDeclaration(projectRoot) {
+  const file = join(projectRoot, WORKBENCH_LOCATOR_PATH);
+  if (!existsSync(file)) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync(file, "utf8"));
+  } catch (error) {
+    throw new Error(
+      `${file} is not valid JSON (${error instanceof Error ? error.message : String(error)}). It says which Code-OSS workbench this project opens in, and nothing else:
+${workbenchDeclarationExample(projectRoot)}`
+    );
+  }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    throw new Error(
+      `${file} must be a JSON object naming one workbench:
+${workbenchDeclarationExample(projectRoot)}`
+    );
+  }
+  const record = parsed;
+  const extra = Object.keys(record).filter((key) => key !== "workbench");
+  if (extra.length > 0) {
+    throw new Error(
+      `${file} carries ${extra.map((key) => `"${key}"`).join(", ")}, which this document has no meaning for. It names ONE key:
+${workbenchDeclarationExample(projectRoot)}`
+    );
+  }
+  const declared = record["workbench"];
+  if (typeof declared !== "string" || declared.trim() === "") {
+    throw new Error(
+      `${file} names no workbench directory:
+${workbenchDeclarationExample(projectRoot)}`
+    );
+  }
+  return isAbsolute(declared) ? resolve(declared) : resolve(projectRoot, declared);
+}
+function writeWorkbenchDeclaration(projectRoot, workbenchDir) {
+  mkdirSync(join(projectRoot, ".volter"), { recursive: true });
+  writeFileSync(
+    join(projectRoot, WORKBENCH_LOCATOR_PATH),
+    `${JSON.stringify({ workbench: resolve(workbenchDir) }, null, 2)}
+`
+  );
+}
+function workbenchUrl(proxyPort, projectRoot) {
+  const id = basename(resolve(projectRoot));
+  return `http://editor-${projectKey(projectRoot)}.localhost:${proxyPort}/?project=${encodeURIComponent(id)}`;
+}
+function projectKey(projectRoot) {
+  return createHash("sha256").update(resolve(projectRoot)).digest("hex").slice(0, 16);
+}
+function machinePlatform() {
+  return `${process.platform}-${process.arch}`;
+}
+function resolveWorkbench(dir, expectedProduct) {
+  const root = resolve(dir);
+  const resolved = existsSync(join(root, RELEASE_RECORD)) ? resolveRelease(root) : existsSync(join(root, SOURCES_LAUNCHER)) ? resolveSources(root) : null;
+  if (resolved === null) {
+    throw new Error(
+      `${root} is neither a Code-OSS release nor a fork checkout: it carries no ${RELEASE_RECORD} (the record scripts/workbench/build-release.mjs writes beside its tarball) and no ${SOURCES_LAUNCHER}. Name the directory the release was extracted into, or the fork checkout itself.`
+    );
+  }
+  if (expectedProduct !== void 0 && resolved.product !== expectedProduct) {
+    throw new Error(
+      `${root} is a ${resolved.product} workbench and this project opens in ${expectedProduct}. A workbench is built for ONE product \u2014 the editor kit and that product's workbench half are overlaid on the fork together \u2014 so its title, its look and its commands are the other product's, whatever this session serves into it. ${resolved.kind === "sources" ? `Re-overlay the checkout:
+  node scripts/workbench/dev.mjs --checkout ${root} --product ${expectedProduct}` : `Name a ${expectedProduct} release in .volter/workbench.json, or cut one:
+  node scripts/workbench/build-release.mjs --product ${expectedProduct} --platform ${machinePlatform()} --checkout <fork dir>`}`
+    );
+  }
+  return resolved;
+}
+function resolveRelease(dir) {
+  const record = join(dir, RELEASE_RECORD);
+  const cut = `node scripts/workbench/build-release.mjs --product <id> --platform ${machinePlatform()} --checkout <fork dir> --out ${dir}`;
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync(record, "utf8"));
+  } catch (error) {
+    throw new Error(`${record} could not be read: ${String(error)}`);
+  }
+  const needed = ["target", "platform", "commit", "serverBin", "product"];
+  const missing = needed.filter((key) => typeof parsed[key] !== "string");
+  if (missing.length > 0) {
+    throw new Error(
+      `${record} is not a release record this understands: ${missing.join(", ")} ${missing.length === 1 ? "is" : "are"} missing or not a string. A release names ${needed.join(", ")} \u2014 the five fields scripts/workbench/build-release.mjs writes and this one spawns from. The record must name the product compiled into the workbench. Re-cut it:
+  ` + cut
+    );
+  }
+  const target = parsed["target"];
+  const platform = parsed["platform"];
+  const commit = parsed["commit"];
+  const serverBin = parsed["serverBin"];
+  const product = parsed["product"];
+  const machine = machinePlatform();
+  if (platform !== machine) {
+    throw new Error(
+      `${dir} was built for ${platform} and this machine is ${machine}. A Code-OSS server package carries its own platform's node binary and native modules, so it cannot run here \u2014 and this never falls back to a source checkout, because a boot that silently was not the release measures nothing. Cut the ${machine} release:
+  node scripts/workbench/build-release.mjs --product ${product} --platform ${machine} --checkout <fork dir>`
+    );
+  }
+  const packageRoot = join(dir, target);
+  const serverBinPath = join(packageRoot, serverBin);
+  if (!existsSync(serverBinPath)) {
+    const tarball = typeof parsed["tarball"] === "string" ? parsed["tarball"] : `${target}-<commit>.tar.gz`;
+    throw new Error(
+      `${dir} records ${target}, but ${serverBinPath} is not there \u2014 the tarball has not been extracted beside ${RELEASE_RECORD}. Run:
+  tar -xzf ${join(dir, tarball)} -C ${dir}`
+    );
+  }
+  return { kind: "release", dir, commit, product, serverBin: serverBinPath, cwd: packageRoot };
+}
+function resolveSources(dir) {
+  let commit;
+  try {
+    commit = execFileSync("git", ["rev-parse", "HEAD"], { windowsHide: true, cwd: dir, encoding: "utf8" }).trim();
+  } catch (error) {
+    throw new Error(
+      `${dir} carries ${SOURCES_LAUNCHER}, so it reads as a Code-OSS fork checkout, but \`git rev-parse HEAD\` there failed (${error instanceof Error ? error.message : String(error)}). A checkout's commit is the only record of which fork this workbench is.`
+    );
+  }
+  const marker = join(dir, OVERLAY_RECORD);
+  if (!existsSync(marker)) {
+    throw new Error(
+      `${dir} is a Code-OSS checkout with no volter overlay: ${OVERLAY_RECORD} is not there, so nothing of the editor is compiled into it and the workbench would come up as plain Code-OSS. Overlay and compile it:
+  node scripts/workbench/dev.mjs --checkout ${dir} --product <product>`
+    );
+  }
+  let product;
+  try {
+    product = JSON.parse(readFileSync(marker, "utf8"))["product"];
+  } catch (error) {
+    throw new Error(`${marker} could not be read: ${String(error)}`);
+  }
+  if (typeof product !== "string" || product === "") {
+    throw new Error(
+      `${marker} names no product. It is written by scripts/workbench/overlay.mjs and says which product's workbench half is in this checkout; re-run the overlay rather than editing it.`
+    );
+  }
+  return {
+    kind: "sources",
+    dir,
+    commit,
+    product,
+    serverBin: join(dir, SOURCES_LAUNCHER),
+    cwd: dir
+  };
+}
+var RELEASE_REPO = "volter-ai/code-oss";
+var WORKBENCH_CACHE_ROOT = join(homedir(), ".volter", "workbenches");
+async function resolveWorkbenchForProject(options) {
+  const { projectRoot, product, override, io } = options;
+  const productId = workbenchProductId(product.name);
+  if (override !== void 0) return resolveWorkbench(resolve(override), productId);
+  const declared = readWorkbenchDeclaration(projectRoot);
+  const fetchRecord = declared !== null && product.workbench !== null && declared.startsWith(`${WORKBENCH_CACHE_ROOT}${sep}`);
+  if (declared !== null && !fetchRecord) return resolveWorkbench(declared, productId);
+  if (product.workbench === null) throw new Error(
+    `${product.name} is a private source product with no released workbench. Pass --workbench <compiled checkout> or declare it in ${WORKBENCH_LOCATOR_PATH}. Public distribution requires a pinned workbench release and checksum.`
+  );
+  const tag = product.workbench.release;
+  const dir = join(WORKBENCH_CACHE_ROOT, tag);
+  const fetched = !existsSync(join(dir, RELEASE_RECORD));
+  if (fetched) await fetchDeclaredRelease(product, tag, dir, io);
+  else io.log(`Workbench ${tag} is already installed (${dir}).`);
+  const workbench = resolveWorkbench(dir, productId);
+  writeWorkbenchDeclaration(projectRoot, dir);
+  io.log(`Declared in ${WORKBENCH_LOCATOR_PATH}: ${dir}`);
+  return workbench;
+}
+function githubToken() {
+  const fromEnv = process.env["GITHUB_TOKEN"];
+  if (typeof fromEnv === "string" && fromEnv.trim() !== "") return fromEnv.trim();
+  try {
+    const out = execFileSync("gh", ["auth", "token"], {
+      windowsHide: true,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+    return out === "" ? null : out;
+  } catch {
+    return null;
+  }
+}
+function apiHeaders(token) {
+  return {
+    Accept: "application/vnd.github+json",
+    "X-GitHub-Api-Version": "2022-11-28",
+    "User-Agent": "volter-workbench-locator",
+    ...token === null ? {} : { Authorization: `Bearer ${token}` }
+  };
+}
+function megabytes(bytes) {
+  return (bytes / 1024 ** 2).toFixed(0);
+}
+function tokenDoors() {
+  return "  GITHUB_TOKEN=<a token with repo scope>   \u2014 in this shell, or\n  gh auth login                            \u2014 so `gh auth token` answers";
+}
+async function downloadOperation(stage, url, token, operation) {
+  try {
+    return await operation();
+  } catch (cause) {
+    const seen = /* @__PURE__ */ new Set();
+    const redact = (text) => {
+      const withoutToken = token === null ? text : text.replaceAll(token, "[redacted]");
+      return withoutToken.replace(/https?:\/\/[^\s"<>]+/gi, (raw) => {
+        try {
+          const parsed = new URL(raw);
+          parsed.username = "";
+          parsed.password = "";
+          parsed.search = "";
+          parsed.hash = "";
+          return parsed.href;
+        } catch {
+          return "[redacted URL]";
+        }
+      }).slice(0, 1e3);
+    };
+    const describe = (error, depth) => {
+      if (seen.has(error) || depth > 4) return "[cause omitted]";
+      seen.add(error);
+      if (typeof error !== "object" || error === null) return redact(String(error));
+      const fields = error;
+      const name = typeof fields.name === "string" ? fields.name : "Error";
+      const message = typeof fields.message === "string" ? fields.message : "Unknown transport error";
+      const code = typeof fields.code === "string" ? ` [${fields.code}]` : "";
+      let detail = redact(`${name}${code}: ${message}`);
+      if (fields.cause !== void 0) detail += `; caused by ${describe(fields.cause, depth + 1)}`;
+      if (Array.isArray(fields.errors))
+        detail += `; ${fields.errors.slice(0, 4).map((error2) => describe(error2, depth + 1)).join("; ")}`;
+      return detail;
+    };
+    throw new Error(`Workbench download failed during ${stage} at ${url}: ${describe(cause, 0)}`, { cause });
+  }
+}
+function assetUrl(asset) {
+  return `https://api.github.com/repos/${RELEASE_REPO}/releases/assets/${asset.id}`;
+}
+async function fetchDeclaredRelease(product, tag, dir, io) {
+  if (product.workbench === null) throw new Error("Cannot download an unpinned workbench.");
+  const productId = workbenchProductId(product.name);
+  const machine = machinePlatform();
+  const token = githubToken();
+  const partial = join(WORKBENCH_CACHE_ROOT, `.${tag}.${process.pid}.partial`);
+  const cutLine = `  node scripts/workbench/build-release.mjs --product ${productId} --platform ${machine} --checkout <fork dir> --publish`;
+  const releaseUrl = `https://api.github.com/repos/${RELEASE_REPO}/releases/tags/${encodeURIComponent(tag)}`;
+  const response = await downloadOperation(
+    "release metadata request",
+    releaseUrl,
+    token,
+    () => fetch(releaseUrl, { headers: apiHeaders(token) })
+  );
+  if (response.status === 404 && token === null)
+    throw new Error(
+      `${product.name} opens in the Code-OSS workbench published as ${tag} on ${RELEASE_REPO}, and that repository answers 404 to this machine \u2014 it is private, and nothing here has a GitHub token to read it with. Two doors, either one:
+${tokenDoors()}
+Or name a workbench you already have, which needs no network at all:
+  ${product.command} edit --workbench <dir>`
+    );
+  if (response.status === 404)
+    throw new Error(
+      `${RELEASE_REPO} has no release tagged ${tag}, and that is the workbench ${product.name} declares (package.json#${PRODUCT_DECLARATION_KEY}.workbench). Either the declaration names a tag that was never published, or this token cannot see the repository. Cut and publish it:
+${cutLine}`
+    );
+  if (!response.ok)
+    throw new Error(
+      `${RELEASE_REPO}'s release ${tag} answered ${response.status} ${response.statusText}. That is the workbench ${product.name} declares; ${token === null ? "no token was found" : "the token this machine has was used"}.` + (token === null ? `
+${tokenDoors()}` : "")
+    );
+  const metadata = await downloadOperation("release metadata response", releaseUrl, token, () => response.json());
+  const assets = metadata.assets ?? [];
+  const record = assets.find((asset) => asset.name === RELEASE_RECORD);
+  const tarball = assets.find((asset) => asset.name.endsWith(".tar.gz"));
+  if (record === void 0 || tarball === void 0)
+    throw new Error(
+      `Release ${tag} on ${RELEASE_REPO} carries ${assets.length === 0 ? "no assets" : assets.map((asset) => asset.name).join(", ")}. A workbench release is a tarball and its ${RELEASE_RECORD}, both uploaded by \`build-release.mjs --publish\`; re-publish it:
+${cutLine}`
+    );
+  rmSync(partial, { recursive: true, force: true });
+  mkdirSync(partial, { recursive: true });
+  try {
+    const recordText = await downloadAssetText(record, token);
+    const built = await downloadOperation(
+      "BUILD.json parse",
+      assetUrl(record),
+      token,
+      async () => JSON.parse(recordText)
+    );
+    if (built["platform"] !== machine)
+      throw new Error(
+        `Release ${tag} was built for ${String(built["platform"])} and this machine is ${machine}. A Code-OSS server package carries its own platform's node binary and native modules, so it cannot run here, and nothing falls back. Cut and publish the ${machine} release:
+${cutLine}`
+      );
+    if (built["tarballSha256"] !== product.workbench.tarballSha256)
+      throw new Error(
+        `Release ${tag}'s own ${RELEASE_RECORD} records tarballSha256 ${String(built["tarballSha256"])} and ${product.name} pins ${product.workbench.tarballSha256}. A release is immutable, so these two cannot disagree about one tag: either the product declares the wrong release, or the release was replaced. Nothing was downloaded.`
+      );
+    writeFileSync(join(partial, RELEASE_RECORD), recordText);
+    io.log(
+      `Fetching the ${productId} workbench ${tag} from ${RELEASE_REPO} \u2014 ${megabytes(tarball.size)} MB, once for this user on this computer.`
+    );
+    const tarballPath = join(partial, tarball.name);
+    let announced = 0;
+    const sha = await downloadAsset(tarball, token, tarballPath, (received) => {
+      if (received - announced < 4 * 1024 ** 2 && received !== tarball.size) return;
+      announced = received;
+      io.progress?.(
+        `  ${megabytes(received)} / ${megabytes(tarball.size)} MB  (${Math.floor(received / tarball.size * 100)}%)`
+      );
+    });
+    if (sha !== product.workbench.tarballSha256)
+      throw new Error(
+        `The download of ${tag} hashes to ${sha} and ${product.name} pins ${product.workbench.tarballSha256}. These are not the bytes this product runs in; the partial download was deleted and nothing was extracted.`
+      );
+    io.log(`  sha256 ${sha.slice(0, 12)}\u2026 matches the pin. Extracting\u2026`);
+    const tar = process.platform === "win32" ? join(process.env["SystemRoot"] ?? "C:\\Windows", "System32", "tar.exe") : "tar";
+    execFileSync(tar, ["-xzf", tarballPath, "-C", partial], {
+      windowsHide: true,
+      stdio: ["ignore", "ignore", "pipe"]
+    });
+    rmSync(tarballPath, { force: true });
+    if (existsSync(join(dir, RELEASE_RECORD))) {
+      rmSync(partial, { recursive: true, force: true });
+    } else {
+      rmSync(dir, { recursive: true, force: true });
+      renameSync(partial, dir);
+    }
+    io.log(`Workbench installed at ${dir}.`);
+  } catch (error) {
+    rmSync(partial, { recursive: true, force: true });
+    throw error;
+  }
+}
+async function downloadAssetText(asset, token) {
+  const url = assetUrl(asset);
+  const response = await downloadOperation(
+    "BUILD.json request",
+    url,
+    token,
+    () => fetch(url, { headers: { ...apiHeaders(token), Accept: "application/octet-stream" } })
+  );
+  if (!response.ok)
+    throw new Error(
+      `${asset.name} of ${RELEASE_REPO} answered ${response.status} ${response.statusText}.`
+    );
+  return await downloadOperation("BUILD.json response", url, token, () => response.text());
+}
+async function downloadAsset(asset, token, destination, onProgress) {
+  const url = assetUrl(asset);
+  const response = await downloadOperation(
+    "archive request",
+    url,
+    token,
+    () => fetch(url, { headers: { ...apiHeaders(token), Accept: "application/octet-stream" } })
+  );
+  if (!response.ok || response.body === null)
+    throw new Error(
+      `${asset.name} of ${RELEASE_REPO} answered ${response.status} ${response.statusText}.`
+    );
+  const hash = createHash("sha256");
+  let received = 0;
+  await downloadOperation("archive transfer", url, token, () => pipeline(
+    Readable.fromWeb(response.body),
+    async function* (source) {
+      for await (const chunk of source) {
+        hash.update(chunk);
+        received += chunk.length;
+        onProgress(received);
+        yield chunk;
+      }
+    },
+    createWriteStream(destination)
+  ));
+  return hash.digest("hex");
+}
+export {
+  WORKBENCH_CACHE_ROOT,
+  WORKBENCH_LOCATOR_PATH,
+  projectKey,
+  readWorkbenchDeclaration,
+  resolveWorkbench,
+  resolveWorkbenchForProject,
+  workbenchDeclarationExample,
+  workbenchUrl,
+  writeWorkbenchDeclaration
+};
+//# sourceMappingURL=workbench-locator.js.map

package/dist/workbench-locator.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/workbench-locator.ts"],
+  "sourcesContent": ["\n\nimport { execFileSync } from 'node:child_process';\nimport { createHash } from 'node:crypto';\nimport {\n  createWriteStream,\n  existsSync,\n  mkdirSync,\n  readFileSync,\n  renameSync,\n  rmSync,\n  writeFileSync,\n} from 'node:fs';\nimport { homedir } from 'node:os';\nimport { basename, isAbsolute, join, resolve, sep } from 'node:path';\nimport { Readable } from 'node:stream';\nimport { pipeline } from 'node:stream/promises';\nimport {\n  PRODUCT_DECLARATION_KEY,\n  type ProductIdentity,\n  workbenchProductId,\n} from './product-locator';\n\n/** Where a project declares its workbench, relative to the project root. */\nexport const WORKBENCH_LOCATOR_PATH = '.volter/workbench.json';\n\n/** The release's own record, written beside the tarball by\n *  `scripts/workbench/build-release.mjs`. */\nconst RELEASE_RECORD = 'BUILD.json';\n/** The REH launcher inside a fork checkout \u2014 the marker that says \"sources\". */\nconst SOURCES_LAUNCHER = join('scripts', 'code-server.sh');\n/** What `scripts/workbench/overlay.mjs` leaves in a checkout it has overlaid. */\nconst OVERLAY_RECORD = '.volter-overlay.json';\n\n/** What the session reports about the workbench it is running. */\nexport interface WorkbenchIdentity {\n  readonly kind: 'release' | 'sources';\n  /** The directory named by the declaration or the flag, resolved absolute. */\n  readonly dir: string;\n  /** The Code-OSS fork commit these bytes are. */\n  readonly commit: string;\n\n  readonly product: string;\n}\n\n/** Everything the session needs to run it, identity included. */\nexport interface ResolvedWorkbench extends WorkbenchIdentity {\n  /** The executable to spawn, already known to exist. */\n  readonly serverBin: string;\n  /** Its working directory \u2014 the package root, or the checkout. */\n  readonly cwd: string;\n}\n\n/** The exact file to write, quoted in every refusal that wants one. */\nexport function workbenchDeclarationExample(projectRoot: string): string {\n  return (\n    `${join(projectRoot, WORKBENCH_LOCATOR_PATH)}:\\n` +\n    '  { \"workbench\": \"<path to an extracted Code-OSS release, or to a fork checkout>\" }'\n  );\n}\n\n/**\n * The workbench directory this project declares, or `null` when it declares\n * none. Throws when the file exists and is not exactly `{ \"workbench\": <path> }`\n * \u2014 unrecognized keys are refused.\n */\nexport function readWorkbenchDeclaration(projectRoot: string): string | null {\n  const file = join(projectRoot, WORKBENCH_LOCATOR_PATH);\n  if (!existsSync(file)) return null;\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(readFileSync(file, 'utf8'));\n  } catch (error) {\n    throw new Error(\n      `${file} is not valid JSON (${error instanceof Error ? error.message : String(error)}). It says ` +\n        `which Code-OSS workbench this project opens in, and nothing else:\\n${workbenchDeclarationExample(projectRoot)}`,\n    );\n  }\n  if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {\n    throw new Error(\n      `${file} must be a JSON object naming one workbench:\\n${workbenchDeclarationExample(projectRoot)}`,\n    );\n  }\n  const record = parsed as Record<string, unknown>;\n  const extra = Object.keys(record).filter((key) => key !== 'workbench');\n  if (extra.length > 0) {\n    throw new Error(\n      `${file} carries ${extra.map((key) => `\"${key}\"`).join(', ')}, which this document has no meaning for. ` +\n        `It names ONE key:\\n${workbenchDeclarationExample(projectRoot)}`,\n    );\n  }\n  const declared = record['workbench'];\n  if (typeof declared !== 'string' || declared.trim() === '') {\n    throw new Error(\n      `${file} names no workbench directory:\\n${workbenchDeclarationExample(projectRoot)}`,\n    );\n  }\n  return isAbsolute(declared) ? resolve(declared) : resolve(projectRoot, declared);\n}\n\n/**\n * WRITE THE DECLARATION \u2014 the one record of which workbench THIS machine opens\n * this project in. Written by `<product> create --workbench <dir>`, and written\n * by the fetch below, so the two paths cannot leave two different shapes of\n * file behind.\n */\nexport function writeWorkbenchDeclaration(projectRoot: string, workbenchDir: string): void {\n  mkdirSync(join(projectRoot, '.volter'), { recursive: true });\n  writeFileSync(\n    join(projectRoot, WORKBENCH_LOCATOR_PATH),\n    `${JSON.stringify({ workbench: resolve(workbenchDir) }, null, 2)}\\n`,\n  );\n}\n\n/**\n * The url the workbench answers on \u2014 the ONE url a person opens under the\n * frame. Spelled here so the CLI's launch line and the session's tab bijection\n * cannot disagree about it.\n *\n * `?project=<id>` is the one boot param the Volter editor carries; the session's\n * one-origin proxy redirects it to the workbench's own `?folder=`, and\n * `frame-proxy.ts` says why it must be a redirect.\n */\nexport function workbenchUrl(proxyPort: number, projectRoot: string): string {\n  const id = basename(resolve(projectRoot));\n  // Cookies ignore ports. A shared loopback hostname can inherit another\n  // local VS Code app's secret-storage cookie and select its absent key server.\n  // Give each project a stable host; browsers resolve *.localhost to loopback.\n  return `http://editor-${projectKey(projectRoot)}.localhost:${proxyPort}/?project=${encodeURIComponent(id)}`;\n}\n\n/** A project's stable key on this machine: its page's host, and its workbench extensions folder. */\nexport function projectKey(projectRoot: string): string {\n  return createHash('sha256').update(resolve(projectRoot)).digest('hex').slice(0, 16);\n}\n\n/** This machine in the build script's own platform vocabulary. */\nfunction machinePlatform(): string {\n  return `${process.platform}-${process.arch}`;\n}\n\n\n/** The workbench at `dir`, refused where it is built for another product than `expectedProduct`; none named (a session\n *  whose project's product cannot be resolved, which `/__editor/served-modules` explains) is not judged. */\nexport function resolveWorkbench(dir: string, expectedProduct?: string): ResolvedWorkbench {\n  const root = resolve(dir);\n  const resolved = existsSync(join(root, RELEASE_RECORD))\n    ? resolveRelease(root)\n    : existsSync(join(root, SOURCES_LAUNCHER))\n      ? resolveSources(root)\n      : null;\n  if (resolved === null) {\n    throw new Error(\n      `${root} is neither a Code-OSS release nor a fork checkout: it carries no ${RELEASE_RECORD} (the record ` +\n        `scripts/workbench/build-release.mjs writes beside its tarball) and no ${SOURCES_LAUNCHER}. Name the ` +\n        'directory the release was extracted into, or the fork checkout itself.',\n    );\n  }\n  if (expectedProduct !== undefined && resolved.product !== expectedProduct) {\n    throw new Error(\n      `${root} is a ${resolved.product} workbench and this project opens in ${expectedProduct}. A workbench is ` +\n        \"built for ONE product \u2014 the editor kit and that product's workbench half are overlaid on the fork \" +\n        \"together \u2014 so its title, its look and its commands are the other product's, whatever this session \" +\n        `serves into it. ${\n          resolved.kind === 'sources'\n            ? `Re-overlay the checkout:\\n  node scripts/workbench/dev.mjs --checkout ${root} --product ${expectedProduct}`\n            : `Name a ${expectedProduct} release in .volter/workbench.json, or cut one:\\n  node scripts/workbench/build-release.mjs --product ${expectedProduct} --platform ${machinePlatform()} --checkout <fork dir>`\n        }`,\n    );\n  }\n  return resolved;\n}\n\n/**\n * The five fields the launch depends on \u2014 `target`, `platform`, `commit`,\n * `serverBin` and `product`. The rest of `BUILD.json` is the build's own\n * provenance (sizes, sha256, the node it was built with) and is read by a\n * person, not by this.\n */\nfunction resolveRelease(dir: string): ResolvedWorkbench {\n  const record = join(dir, RELEASE_RECORD);\n  const cut = `node scripts/workbench/build-release.mjs --product <id> --platform ${machinePlatform()} --checkout <fork dir> --out ${dir}`;\n  let parsed: Record<string, unknown>;\n  try {\n    parsed = JSON.parse(readFileSync(record, 'utf8')) as Record<string, unknown>;\n  } catch (error) {\n    throw new Error(`${record} could not be read: ${String(error)}`);\n  }\n  const needed = ['target', 'platform', 'commit', 'serverBin', 'product'] as const;\n  const missing = needed.filter((key) => typeof parsed[key] !== 'string');\n  if (missing.length > 0) {\n    throw new Error(\n      `${record} is not a release record this understands: ${missing.join(', ')} ` +\n        `${missing.length === 1 ? 'is' : 'are'} missing or not a string. A release names ${needed.join(', ')} \u2014 ` +\n        'the five fields scripts/workbench/build-release.mjs writes and this one spawns from. ' +\n        'The record must name the product compiled into the workbench. Re-cut it:\\n  ' +\n        cut,\n    );\n  }\n  const target = parsed['target'] as string;\n  const platform = parsed['platform'] as string;\n  const commit = parsed['commit'] as string;\n  const serverBin = parsed['serverBin'] as string;\n  const product = parsed['product'] as string;\n\n  const machine = machinePlatform();\n  if (platform !== machine) {\n    throw new Error(\n      `${dir} was built for ${platform} and this machine is ${machine}. A Code-OSS server package carries its ` +\n        \"own platform's node binary and native modules, so it cannot run here \u2014 and this never falls back to a \" +\n        `source checkout, because a boot that silently was not the release measures nothing. Cut the ${machine} ` +\n        `release:\\n  node scripts/workbench/build-release.mjs --product ${product} --platform ${machine} --checkout <fork dir>`,\n    );\n  }\n\n  const packageRoot = join(dir, target);\n  const serverBinPath = join(packageRoot, serverBin);\n  if (!existsSync(serverBinPath)) {\n    const tarball =\n      typeof parsed['tarball'] === 'string'\n        ? (parsed['tarball'] as string)\n        : `${target}-<commit>.tar.gz`;\n    throw new Error(\n      `${dir} records ${target}, but ${serverBinPath} is not there \u2014 the tarball has not been extracted beside ` +\n        `${RELEASE_RECORD}. Run:\\n  tar -xzf ${join(dir, tarball)} -C ${dir}`,\n    );\n  }\n  return { kind: 'release', dir, commit, product, serverBin: serverBinPath, cwd: packageRoot };\n}\n\n/**\n * A fork checkout. The commit is the working tree's, read with git: a checkout\n * has no file that states it, and a stale one would name bytes nobody is\n * running. The PRODUCT is the overlay's own record \u2014 a checkout with none has\n * no volter tier in it at all, and that is refused here rather than left to\n * surface as a workbench where `Volter: Open Workspace` does not exist.\n */\nfunction resolveSources(dir: string): ResolvedWorkbench {\n  let commit: string;\n  try {\n    commit = execFileSync('git', ['rev-parse', 'HEAD'], { windowsHide: true, cwd: dir, encoding: 'utf8' }).trim();\n  } catch (error) {\n    throw new Error(\n      `${dir} carries ${SOURCES_LAUNCHER}, so it reads as a Code-OSS fork checkout, but \\`git rev-parse HEAD\\` ` +\n        `there failed (${error instanceof Error ? error.message : String(error)}). A checkout's commit is the ` +\n        'only record of which fork this workbench is.',\n    );\n  }\n  const marker = join(dir, OVERLAY_RECORD);\n  if (!existsSync(marker)) {\n    throw new Error(\n      `${dir} is a Code-OSS checkout with no volter overlay: ${OVERLAY_RECORD} is not there, so nothing of the ` +\n        'editor is compiled into it and the workbench would come up as plain Code-OSS. Overlay and compile it:\\n' +\n        `  node scripts/workbench/dev.mjs --checkout ${dir} --product <product>`,\n    );\n  }\n  let product: unknown;\n  try {\n    product = (JSON.parse(readFileSync(marker, 'utf8')) as Record<string, unknown>)['product'];\n  } catch (error) {\n    throw new Error(`${marker} could not be read: ${String(error)}`);\n  }\n  if (typeof product !== 'string' || product === '') {\n    throw new Error(\n      `${marker} names no product. It is written by scripts/workbench/overlay.mjs and says which product's ` +\n        'workbench half is in this checkout; re-run the overlay rather than editing it.',\n    );\n  }\n  return {\n    kind: 'sources',\n    dir,\n    commit,\n    product,\n    serverBin: join(dir, SOURCES_LAUNCHER),\n    cwd: dir,\n  };\n}\n\n// ---------------------------------------------------------------------------\n// THE PRODUCT'S OWN WORKBENCH \u2014 the third resolution step, and the only one\n// that needs nothing on the machine but the product.\n// ---------------------------------------------------------------------------\n\n/** The fork's own repository, where a cut release is published. Private today;\n *  the fetch below is the same call either way, with a token or without one. */\nconst RELEASE_REPO = 'volter-ai/code-oss';\n\n/**\n * WHERE FETCHED BYTES LIVE \u2014 one directory per release tag, per user (`~/.volter/workbenches`).\n *\n * Keyed by the TAG and nothing else, because that is what makes it a cache and\n * not a decision: two projects on the same release share one directory,\n * a second `create` consults no network, and a release is immutable, so a tag\n * that is here is the tag that was published. Which workbench a project opens\n * in is still recorded in the PROJECT (`.volter/workbench.json`, written the\n * moment this resolves) \u2014 nothing ever searches this directory.\n */\nexport const WORKBENCH_CACHE_ROOT = join(homedir(), '.volter', 'workbenches');\n\n/** Where the fetch talks. `log` is a line; `progress` is ONE line rewritten in\n *  place (216 MB is a wait, and a wait with no number is a hang). */\nexport interface WorkbenchFetchIO {\n  readonly log: (line: string) => void;\n  readonly progress?: (line: string) => void;\n}\n\n/**\n * THE WORKBENCH THIS PROJECT OPENS IN, resolved in three steps:\n *\n *   1. `--workbench <dir>` \u2014 one launch, writes nothing.\n *   2. `<project>/.volter/workbench.json` \u2014 this machine's record for this project.\n *   3. the PRODUCT's declared release \u2014 fetched once, then written into (2).\n *\n * Step 3 is what makes the product's `create` open something\n * on a machine that has never built anything, and it is why the CLI resolves\n * the product BEFORE the workbench.\n */\nexport async function resolveWorkbenchForProject(options: {\n  projectRoot: string;\n  product: ProductIdentity;\n  /** `--workbench <dir>`, when the person passed one. */\n  override?: string | undefined;\n  io: WorkbenchFetchIO;\n}): Promise<ResolvedWorkbench> {\n  const { projectRoot, product, override, io } = options;\n  const productId = workbenchProductId(product.name);\n  if (override !== undefined) return resolveWorkbench(resolve(override), productId);\n  // A declaration under the cache root is the one the fetch below wrote: the\n  // product's pin decides it, so a pin that moved, or a cache that was\n  // cleared, fetches again instead of opening a stale release or refusing a\n  // directory that is gone.\n  const declared = readWorkbenchDeclaration(projectRoot);\n  const fetchRecord = declared !== null && product.workbench !== null && declared.startsWith(`${WORKBENCH_CACHE_ROOT}${sep}`);\n  if (declared !== null && !fetchRecord) return resolveWorkbench(declared, productId);\n\n  if (product.workbench === null) throw new Error(\n    `${product.name} is a private source product with no released workbench. ` +\n    `Pass --workbench <compiled checkout> or declare it in ${WORKBENCH_LOCATOR_PATH}. ` +\n    'Public distribution requires a pinned workbench release and checksum.',\n  );\n  const tag = product.workbench.release;\n  const dir = join(WORKBENCH_CACHE_ROOT, tag);\n  // A CACHED TAG IS NEVER RE-FETCHED. The marker is the release's own record,\n  // so a directory that lost its extraction reads as absent and is fetched\n  // again rather than resolving into a refusal a person cannot act on.\n  const fetched = !existsSync(join(dir, RELEASE_RECORD));\n  if (fetched) await fetchDeclaredRelease(product, tag, dir, io);\n  else io.log(`Workbench ${tag} is already installed (${dir}).`);\n  const workbench = resolveWorkbench(dir, productId);\n  writeWorkbenchDeclaration(projectRoot, dir);\n  io.log(`Declared in ${WORKBENCH_LOCATOR_PATH}: ${dir}`);\n  return workbench;\n}\n\n/** A GitHub release asset, as much of one as this reads. */\ninterface ReleaseAsset {\n  readonly id: number;\n  readonly name: string;\n  readonly size: number;\n}\n\n/**\n * The token, from the two doors a person has: the environment, or the `gh` they\n * are already logged into. Deliberately not a file of ours, not a setting and\n * not a prompt \u2014 a credential this reads is one somebody else's tool already\n * owns.\n */\nfunction githubToken(): string | null {\n  const fromEnv = process.env['GITHUB_TOKEN'];\n  if (typeof fromEnv === 'string' && fromEnv.trim() !== '') return fromEnv.trim();\n  try {\n    const out = execFileSync('gh', ['auth', 'token'], {\n      windowsHide: true,\n      encoding: 'utf8',\n      stdio: ['ignore', 'pipe', 'ignore'],\n    }).trim();\n    return out === '' ? null : out;\n  } catch {\n    return null;\n  }\n}\n\nfunction apiHeaders(token: string | null): Record<string, string> {\n  return {\n    Accept: 'application/vnd.github+json',\n    'X-GitHub-Api-Version': '2022-11-28',\n    'User-Agent': 'volter-workbench-locator',\n    ...(token === null ? {} : { Authorization: `Bearer ${token}` }),\n  };\n}\n\nfunction megabytes(bytes: number): string {\n  return (bytes / 1024 ** 2).toFixed(0);\n}\n\n/** The line a refusal prints when the release is not reachable \u2014 both doors,\n *  named, because \"no credentials\" with no names is the same as no message. */\nfunction tokenDoors(): string {\n  return (\n    '  GITHUB_TOKEN=<a token with repo scope>   \u2014 in this shell, or\\n' +\n    '  gh auth login                            \u2014 so `gh auth token` answers'\n  );\n}\n\n/** The CLI prints only Error.message. Keep the public request/stage and Node's\n * nested transport code there, without printing auth headers or signed redirects.\n * The original thrown value is retained as cause for callers that can inspect it. */\nasync function downloadOperation<T>(\n  stage: string,\n  url: string,\n  token: string | null,\n  operation: () => Promise<T>,\n): Promise<T> {\n  try {\n    return await operation();\n  } catch (cause) {\n    const seen = new Set<unknown>();\n    const redact = (text: string): string => {\n      const withoutToken = token === null ? text : text.replaceAll(token, '[redacted]');\n      return withoutToken.replace(/https?:\\/\\/[^\\s\"<>]+/gi, (raw) => {\n        try {\n          const parsed = new URL(raw);\n          parsed.username = '';\n          parsed.password = '';\n          parsed.search = '';\n          parsed.hash = '';\n          return parsed.href;\n        } catch { return '[redacted URL]'; }\n      }).slice(0, 1000);\n    };\n    const describe = (error: unknown, depth: number): string => {\n      if (seen.has(error) || depth > 4) return '[cause omitted]';\n      seen.add(error);\n      if (typeof error !== 'object' || error === null) return redact(String(error));\n      const fields = error as { name?: unknown; message?: unknown; code?: unknown; cause?: unknown; errors?: unknown };\n      const name = typeof fields.name === 'string' ? fields.name : 'Error';\n      const message = typeof fields.message === 'string' ? fields.message : 'Unknown transport error';\n      const code = typeof fields.code === 'string' ? ` [${fields.code}]` : '';\n      let detail = redact(`${name}${code}: ${message}`);\n      if (fields.cause !== undefined) detail += `; caused by ${describe(fields.cause, depth + 1)}`;\n      if (Array.isArray(fields.errors))\n        detail += `; ${fields.errors.slice(0, 4).map((error) => describe(error, depth + 1)).join('; ')}`;\n      return detail;\n    };\n    throw new Error(`Workbench download failed during ${stage} at ${url}: ${describe(cause, 0)}`, { cause });\n  }\n}\n\nfunction assetUrl(asset: ReleaseAsset): string {\n  return `https://api.github.com/repos/${RELEASE_REPO}/releases/assets/${asset.id}`;\n}\n\n/**\n * FETCH ONE PUBLISHED RELEASE into `dir`, atomically: everything lands in a\n * sibling `.partial` directory and is renamed into place at the end, so a\n * directory under `~/.volter/workbenches` either is a whole workbench or is not\n * there. Any failure \u2014 a refused download, a sha that does not match the\n * product's pin, a tar that dies \u2014 deletes the partial and refuses.\n */\nasync function fetchDeclaredRelease(\n  product: ProductIdentity,\n  tag: string,\n  dir: string,\n  io: WorkbenchFetchIO,\n): Promise<void> {\n  if (product.workbench === null) throw new Error('Cannot download an unpinned workbench.');\n  const productId = workbenchProductId(product.name);\n  const machine = machinePlatform();\n  const token = githubToken();\n  const partial = join(WORKBENCH_CACHE_ROOT, `.${tag}.${process.pid}.partial`);\n  const cutLine =\n    `  node scripts/workbench/build-release.mjs --product ${productId} --platform ${machine} ` +\n    '--checkout <fork dir> --publish';\n\n  const releaseUrl = `https://api.github.com/repos/${RELEASE_REPO}/releases/tags/${encodeURIComponent(tag)}`;\n  const response = await downloadOperation('release metadata request', releaseUrl, token,\n    () => fetch(releaseUrl, { headers: apiHeaders(token) }));\n  if (response.status === 404 && token === null)\n    throw new Error(\n      `${product.name} opens in the Code-OSS workbench published as ${tag} on ${RELEASE_REPO}, and ` +\n        'that repository answers 404 to this machine \u2014 it is private, and nothing here has a ' +\n        'GitHub token to read it with. Two doors, either one:\\n' +\n        `${tokenDoors()}\\n` +\n        'Or name a workbench you already have, which needs no network at all:\\n' +\n        `  ${product.command} edit --workbench <dir>`,\n    );\n  if (response.status === 404)\n    throw new Error(\n      `${RELEASE_REPO} has no release tagged ${tag}, and that is the workbench ${product.name} ` +\n        `declares (package.json#${PRODUCT_DECLARATION_KEY}.workbench). Either the declaration names ` +\n        'a tag that was never published, or this token cannot see the repository. Cut and publish ' +\n        `it:\\n${cutLine}`,\n    );\n  if (!response.ok)\n    throw new Error(\n      `${RELEASE_REPO}'s release ${tag} answered ${response.status} ${response.statusText}. That is ` +\n        `the workbench ${product.name} declares; ` +\n        `${token === null ? 'no token was found' : 'the token this machine has was used'}.` +\n        (token === null ? `\\n${tokenDoors()}` : ''),\n    );\n  const metadata = await downloadOperation('release metadata response', releaseUrl, token, () => response.json());\n  const assets = (metadata as { assets?: ReleaseAsset[] }).assets ?? [];\n  const record = assets.find((asset) => asset.name === RELEASE_RECORD);\n  const tarball = assets.find((asset) => asset.name.endsWith('.tar.gz'));\n  if (record === undefined || tarball === undefined)\n    throw new Error(\n      `Release ${tag} on ${RELEASE_REPO} carries ` +\n        `${assets.length === 0 ? 'no assets' : assets.map((asset) => asset.name).join(', ')}. ` +\n        `A workbench release is a tarball and its ${RELEASE_RECORD}, both uploaded by ` +\n        `\\`build-release.mjs --publish\\`; re-publish it:\\n${cutLine}`,\n    );\n\n  rmSync(partial, { recursive: true, force: true });\n  mkdirSync(partial, { recursive: true });\n  try {\n    // Read the compatibility record before downloading the workbench artifact.\n    const recordText = await downloadAssetText(record, token);\n    const built = await downloadOperation('BUILD.json parse', assetUrl(record), token,\n      async () => JSON.parse(recordText) as Record<string, unknown>);\n    if (built['platform'] !== machine)\n      throw new Error(\n        `Release ${tag} was built for ${String(built['platform'])} and this machine is ${machine}. A ` +\n          \"Code-OSS server package carries its own platform's node binary and native modules, so it \" +\n          `cannot run here, and nothing falls back. Cut and publish the ${machine} release:\\n${cutLine}`,\n      );\n    if (built['tarballSha256'] !== product.workbench.tarballSha256)\n      throw new Error(\n        `Release ${tag}'s own ${RELEASE_RECORD} records tarballSha256 ${String(built['tarballSha256'])} ` +\n          `and ${product.name} pins ${product.workbench.tarballSha256}. A release is immutable, so these ` +\n          'two cannot disagree about one tag: either the product declares the wrong release, or the ' +\n          'release was replaced. Nothing was downloaded.',\n      );\n    writeFileSync(join(partial, RELEASE_RECORD), recordText);\n\n    io.log(\n      `Fetching the ${productId} workbench ${tag} from ${RELEASE_REPO} \u2014 ` +\n        `${megabytes(tarball.size)} MB, once for this user on this computer.`,\n    );\n    const tarballPath = join(partial, tarball.name);\n    let announced = 0;\n    const sha = await downloadAsset(tarball, token, tarballPath, (received) => {\n      if (received - announced < 4 * 1024 ** 2 && received !== tarball.size) return;\n      announced = received;\n      io.progress?.(\n        `  ${megabytes(received)} / ${megabytes(tarball.size)} MB  ` +\n          `(${Math.floor((received / tarball.size) * 100)}%)`,\n      );\n    });\n    if (sha !== product.workbench.tarballSha256)\n      throw new Error(\n        `The download of ${tag} hashes to ${sha} and ${product.name} pins ` +\n          `${product.workbench.tarballSha256}. These are not the bytes this product runs in; the ` +\n          'partial download was deleted and nothing was extracted.',\n      );\n    io.log(`  sha256 ${sha.slice(0, 12)}\u2026 matches the pin. Extracting\u2026`);\n    // Windows' own tar (bsdtar, System32) \u2014 Git's GNU tar, often first on PATH, reads the\n    // \"C:\" of a path as a remote host.\n    const tar = process.platform === 'win32'\n      ? join(process.env['SystemRoot'] ?? 'C:\\\\Windows', 'System32', 'tar.exe') : 'tar';\n    execFileSync(tar, ['-xzf', tarballPath, '-C', partial], {\n      windowsHide: true,\n      stdio: ['ignore', 'ignore', 'pipe'],\n    });\n    // The tarball has done its job and is 216 MB; the extraction is what runs.\n    rmSync(tarballPath, { force: true });\n    if (existsSync(join(dir, RELEASE_RECORD))) {\n      // Another process won the same race. A release is immutable, so its\n      // directory is ours too \u2014 take it and drop this copy.\n      rmSync(partial, { recursive: true, force: true });\n    } else {\n      rmSync(dir, { recursive: true, force: true });\n      renameSync(partial, dir);\n    }\n    io.log(`Workbench installed at ${dir}.`);\n  } catch (error) {\n    rmSync(partial, { recursive: true, force: true });\n    throw error;\n  }\n}\n\n/** One asset's bytes as text \u2014 for `BUILD.json`, which is a kilobyte. */\nasync function downloadAssetText(asset: ReleaseAsset, token: string | null): Promise<string> {\n  const url = assetUrl(asset);\n  const response = await downloadOperation('BUILD.json request', url, token,\n    () => fetch(url, { headers: { ...apiHeaders(token), Accept: 'application/octet-stream' } }));\n  if (!response.ok)\n    throw new Error(\n      `${asset.name} of ${RELEASE_REPO} answered ${response.status} ${response.statusText}.`,\n    );\n  return await downloadOperation('BUILD.json response', url, token, () => response.text());\n}\n\n/**\n * One asset's bytes to a file, hashing them ON THE WAY THROUGH \u2014 a 216 MB\n * tarball is not read twice, and it is never held in memory.\n */\nasync function downloadAsset(\n  asset: ReleaseAsset,\n  token: string | null,\n  destination: string,\n  onProgress: (received: number) => void,\n): Promise<string> {\n  const url = assetUrl(asset);\n  const response = await downloadOperation('archive request', url, token,\n    () => fetch(url, { headers: { ...apiHeaders(token), Accept: 'application/octet-stream' } }));\n  if (!response.ok || response.body === null)\n    throw new Error(\n      `${asset.name} of ${RELEASE_REPO} answered ${response.status} ${response.statusText}.`,\n    );\n  const hash = createHash('sha256');\n  let received = 0;\n  await downloadOperation('archive transfer', url, token, () => pipeline(\n    Readable.fromWeb(response.body as never),\n    async function* (source: AsyncIterable<Buffer>) {\n      for await (const chunk of source) {\n        hash.update(chunk);\n        received += chunk.length;\n        onProgress(received);\n        yield chunk;\n      }\n    },\n    createWriteStream(destination),\n  ));\n  return hash.digest('hex');\n}\n"],
+  "mappings": ";;;;;;;;AAEA,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,eAAe;AACxB,SAAS,UAAU,YAAY,MAAM,SAAS,WAAW;AACzD,SAAS,gBAAgB;AACzB,SAAS,gBAAgB;AAQlB,IAAM,yBAAyB;AAItC,IAAM,iBAAiB;AAEvB,IAAM,mBAAmB,KAAK,WAAW,gBAAgB;AAEzD,IAAM,iBAAiB;AAsBhB,SAAS,4BAA4B,aAA6B;AACvE,SACE,GAAG,KAAK,aAAa,sBAAsB,CAAC;AAAA;AAGhD;AAOO,SAAS,yBAAyB,aAAoC;AAC3E,QAAM,OAAO,KAAK,aAAa,sBAAsB;AACrD,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,EAChD,SAAS,OAAO;AACd,UAAM,IAAI;AAAA,MACR,GAAG,IAAI,uBAAuB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,EACZ,4BAA4B,WAAW,CAAC;AAAA,IAClH;AAAA,EACF;AACA,MAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GAAG;AAC1E,UAAM,IAAI;AAAA,MACR,GAAG,IAAI;AAAA,EAAiD,4BAA4B,WAAW,CAAC;AAAA,IAClG;AAAA,EACF;AACA,QAAM,SAAS;AACf,QAAM,QAAQ,OAAO,KAAK,MAAM,EAAE,OAAO,CAAC,QAAQ,QAAQ,WAAW;AACrE,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,IAAI;AAAA,MACR,GAAG,IAAI,YAAY,MAAM,IAAI,CAAC,QAAQ,IAAI,GAAG,GAAG,EAAE,KAAK,IAAI,CAAC;AAAA,EACpC,4BAA4B,WAAW,CAAC;AAAA,IAClE;AAAA,EACF;AACA,QAAM,WAAW,OAAO,WAAW;AACnC,MAAI,OAAO,aAAa,YAAY,SAAS,KAAK,MAAM,IAAI;AAC1D,UAAM,IAAI;AAAA,MACR,GAAG,IAAI;AAAA,EAAmC,4BAA4B,WAAW,CAAC;AAAA,IACpF;AAAA,EACF;AACA,SAAO,WAAW,QAAQ,IAAI,QAAQ,QAAQ,IAAI,QAAQ,aAAa,QAAQ;AACjF;AAQO,SAAS,0BAA0B,aAAqB,cAA4B;AACzF,YAAU,KAAK,aAAa,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;AAC3D;AAAA,IACE,KAAK,aAAa,sBAAsB;AAAA,IACxC,GAAG,KAAK,UAAU,EAAE,WAAW,QAAQ,YAAY,EAAE,GAAG,MAAM,CAAC,CAAC;AAAA;AAAA,EAClE;AACF;AAWO,SAAS,aAAa,WAAmB,aAA6B;AAC3E,QAAM,KAAK,SAAS,QAAQ,WAAW,CAAC;AAIxC,SAAO,iBAAiB,WAAW,WAAW,CAAC,cAAc,SAAS,aAAa,mBAAmB,EAAE,CAAC;AAC3G;AAGO,SAAS,WAAW,aAA6B;AACtD,SAAO,WAAW,QAAQ,EAAE,OAAO,QAAQ,WAAW,CAAC,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACpF;AAGA,SAAS,kBAA0B;AACjC,SAAO,GAAG,QAAQ,QAAQ,IAAI,QAAQ,IAAI;AAC5C;AAKO,SAAS,iBAAiB,KAAa,iBAA6C;AACzF,QAAM,OAAO,QAAQ,GAAG;AACxB,QAAM,WAAW,WAAW,KAAK,MAAM,cAAc,CAAC,IAClD,eAAe,IAAI,IACnB,WAAW,KAAK,MAAM,gBAAgB,CAAC,IACrC,eAAe,IAAI,IACnB;AACN,MAAI,aAAa,MAAM;AACrB,UAAM,IAAI;AAAA,MACR,GAAG,IAAI,qEAAqE,cAAc,sFACf,gBAAgB;AAAA,IAE7F;AAAA,EACF;AACA,MAAI,oBAAoB,UAAa,SAAS,YAAY,iBAAiB;AACzE,UAAM,IAAI;AAAA,MACR,GAAG,IAAI,SAAS,SAAS,OAAO,wCAAwC,eAAe,kPAInF,SAAS,SAAS,YACd;AAAA,8CAAyE,IAAI,cAAc,eAAe,KAC1G,UAAU,eAAe;AAAA,uDAAyG,eAAe,eAAe,gBAAgB,CAAC,wBACvL;AAAA,IACJ;AAAA,EACF;AACA,SAAO;AACT;AAQA,SAAS,eAAe,KAAgC;AACtD,QAAM,SAAS,KAAK,KAAK,cAAc;AACvC,QAAM,MAAM,sEAAsE,gBAAgB,CAAC,gCAAgC,GAAG;AACtI,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,aAAa,QAAQ,MAAM,CAAC;AAAA,EAClD,SAAS,OAAO;AACd,UAAM,IAAI,MAAM,GAAG,MAAM,uBAAuB,OAAO,KAAK,CAAC,EAAE;AAAA,EACjE;AACA,QAAM,SAAS,CAAC,UAAU,YAAY,UAAU,aAAa,SAAS;AACtE,QAAM,UAAU,OAAO,OAAO,CAAC,QAAQ,OAAO,OAAO,GAAG,MAAM,QAAQ;AACtE,MAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,IAAI;AAAA,MACR,GAAG,MAAM,8CAA8C,QAAQ,KAAK,IAAI,CAAC,IACpE,QAAQ,WAAW,IAAI,OAAO,KAAK,6CAA6C,OAAO,KAAK,IAAI,CAAC;AAAA,MAGpG;AAAA,IACJ;AAAA,EACF;AACA,QAAM,SAAS,OAAO,QAAQ;AAC9B,QAAM,WAAW,OAAO,UAAU;AAClC,QAAM,SAAS,OAAO,QAAQ;AAC9B,QAAM,YAAY,OAAO,WAAW;AACpC,QAAM,UAAU,OAAO,SAAS;AAEhC,QAAM,UAAU,gBAAgB;AAChC,MAAI,aAAa,SAAS;AACxB,UAAM,IAAI;AAAA,MACR,GAAG,GAAG,kBAAkB,QAAQ,wBAAwB,OAAO,kPAEkC,OAAO;AAAA,uDACpC,OAAO,eAAe,OAAO;AAAA,IACnG;AAAA,EACF;AAEA,QAAM,cAAc,KAAK,KAAK,MAAM;AACpC,QAAM,gBAAgB,KAAK,aAAa,SAAS;AACjD,MAAI,CAAC,WAAW,aAAa,GAAG;AAC9B,UAAM,UACJ,OAAO,OAAO,SAAS,MAAM,WACxB,OAAO,SAAS,IACjB,GAAG,MAAM;AACf,UAAM,IAAI;AAAA,MACR,GAAG,GAAG,YAAY,MAAM,SAAS,aAAa,kEACzC,cAAc;AAAA,aAAsB,KAAK,KAAK,OAAO,CAAC,OAAO,GAAG;AAAA,IACvE;AAAA,EACF;AACA,SAAO,EAAE,MAAM,WAAW,KAAK,QAAQ,SAAS,WAAW,eAAe,KAAK,YAAY;AAC7F;AASA,SAAS,eAAe,KAAgC;AACtD,MAAI;AACJ,MAAI;AACF,aAAS,aAAa,OAAO,CAAC,aAAa,MAAM,GAAG,EAAE,aAAa,MAAM,KAAK,KAAK,UAAU,OAAO,CAAC,EAAE,KAAK;AAAA,EAC9G,SAAS,OAAO;AACd,UAAM,IAAI;AAAA,MACR,GAAG,GAAG,YAAY,gBAAgB,uFACf,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IAE3E;AAAA,EACF;AACA,QAAM,SAAS,KAAK,KAAK,cAAc;AACvC,MAAI,CAAC,WAAW,MAAM,GAAG;AACvB,UAAM,IAAI;AAAA,MACR,GAAG,GAAG,mDAAmD,cAAc;AAAA,8CAEtB,GAAG;AAAA,IACtD;AAAA,EACF;AACA,MAAI;AACJ,MAAI;AACF,cAAW,KAAK,MAAM,aAAa,QAAQ,MAAM,CAAC,EAA8B,SAAS;AAAA,EAC3F,SAAS,OAAO;AACd,UAAM,IAAI,MAAM,GAAG,MAAM,uBAAuB,OAAO,KAAK,CAAC,EAAE;AAAA,EACjE;AACA,MAAI,OAAO,YAAY,YAAY,YAAY,IAAI;AACjD,UAAM,IAAI;AAAA,MACR,GAAG,MAAM;AAAA,IAEX;AAAA,EACF;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,KAAK,KAAK,gBAAgB;AAAA,IACrC,KAAK;AAAA,EACP;AACF;AASA,IAAM,eAAe;AAYd,IAAM,uBAAuB,KAAK,QAAQ,GAAG,WAAW,aAAa;AAoB5E,eAAsB,2BAA2B,SAMlB;AAC7B,QAAM,EAAE,aAAa,SAAS,UAAU,GAAG,IAAI;AAC/C,QAAM,YAAY,mBAAmB,QAAQ,IAAI;AACjD,MAAI,aAAa,OAAW,QAAO,iBAAiB,QAAQ,QAAQ,GAAG,SAAS;AAKhF,QAAM,WAAW,yBAAyB,WAAW;AACrD,QAAM,cAAc,aAAa,QAAQ,QAAQ,cAAc,QAAQ,SAAS,WAAW,GAAG,oBAAoB,GAAG,GAAG,EAAE;AAC1H,MAAI,aAAa,QAAQ,CAAC,YAAa,QAAO,iBAAiB,UAAU,SAAS;AAElF,MAAI,QAAQ,cAAc,KAAM,OAAM,IAAI;AAAA,IACxC,GAAG,QAAQ,IAAI,kHAC0C,sBAAsB;AAAA,EAEjF;AACA,QAAM,MAAM,QAAQ,UAAU;AAC9B,QAAM,MAAM,KAAK,sBAAsB,GAAG;AAI1C,QAAM,UAAU,CAAC,WAAW,KAAK,KAAK,cAAc,CAAC;AACrD,MAAI,QAAS,OAAM,qBAAqB,SAAS,KAAK,KAAK,EAAE;AAAA,MACxD,IAAG,IAAI,aAAa,GAAG,0BAA0B,GAAG,IAAI;AAC7D,QAAM,YAAY,iBAAiB,KAAK,SAAS;AACjD,4BAA0B,aAAa,GAAG;AAC1C,KAAG,IAAI,eAAe,sBAAsB,KAAK,GAAG,EAAE;AACtD,SAAO;AACT;AAeA,SAAS,cAA6B;AACpC,QAAM,UAAU,QAAQ,IAAI,cAAc;AAC1C,MAAI,OAAO,YAAY,YAAY,QAAQ,KAAK,MAAM,GAAI,QAAO,QAAQ,KAAK;AAC9E,MAAI;AACF,UAAM,MAAM,aAAa,MAAM,CAAC,QAAQ,OAAO,GAAG;AAAA,MAChD,aAAa;AAAA,MACb,UAAU;AAAA,MACV,OAAO,CAAC,UAAU,QAAQ,QAAQ;AAAA,IACpC,CAAC,EAAE,KAAK;AACR,WAAO,QAAQ,KAAK,OAAO;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WAAW,OAA8C;AAChE,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,wBAAwB;AAAA,IACxB,cAAc;AAAA,IACd,GAAI,UAAU,OAAO,CAAC,IAAI,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,EAC/D;AACF;AAEA,SAAS,UAAU,OAAuB;AACxC,UAAQ,QAAQ,QAAQ,GAAG,QAAQ,CAAC;AACtC;AAIA,SAAS,aAAqB;AAC5B,SACE;AAGJ;AAKA,eAAe,kBACb,OACA,KACA,OACA,WACY;AACZ,MAAI;AACF,WAAO,MAAM,UAAU;AAAA,EACzB,SAAS,OAAO;AACd,UAAM,OAAO,oBAAI,IAAa;AAC9B,UAAM,SAAS,CAAC,SAAyB;AACvC,YAAM,eAAe,UAAU,OAAO,OAAO,KAAK,WAAW,OAAO,YAAY;AAChF,aAAO,aAAa,QAAQ,0BAA0B,CAAC,QAAQ;AAC7D,YAAI;AACF,gBAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,iBAAO,WAAW;AAClB,iBAAO,WAAW;AAClB,iBAAO,SAAS;AAChB,iBAAO,OAAO;AACd,iBAAO,OAAO;AAAA,QAChB,QAAQ;AAAE,iBAAO;AAAA,QAAkB;AAAA,MACrC,CAAC,EAAE,MAAM,GAAG,GAAI;AAAA,IAClB;AACA,UAAM,WAAW,CAAC,OAAgB,UAA0B;AAC1D,UAAI,KAAK,IAAI,KAAK,KAAK,QAAQ,EAAG,QAAO;AACzC,WAAK,IAAI,KAAK;AACd,UAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO,OAAO,OAAO,KAAK,CAAC;AAC5E,YAAM,SAAS;AACf,YAAM,OAAO,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAC7D,YAAM,UAAU,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU;AACtE,YAAM,OAAO,OAAO,OAAO,SAAS,WAAW,KAAK,OAAO,IAAI,MAAM;AACrE,UAAI,SAAS,OAAO,GAAG,IAAI,GAAG,IAAI,KAAK,OAAO,EAAE;AAChD,UAAI,OAAO,UAAU,OAAW,WAAU,eAAe,SAAS,OAAO,OAAO,QAAQ,CAAC,CAAC;AAC1F,UAAI,MAAM,QAAQ,OAAO,MAAM;AAC7B,kBAAU,KAAK,OAAO,OAAO,MAAM,GAAG,CAAC,EAAE,IAAI,CAACA,WAAU,SAASA,QAAO,QAAQ,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC;AAChG,aAAO;AAAA,IACT;AACA,UAAM,IAAI,MAAM,oCAAoC,KAAK,OAAO,GAAG,KAAK,SAAS,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC;AAAA,EACzG;AACF;AAEA,SAAS,SAAS,OAA6B;AAC7C,SAAO,gCAAgC,YAAY,oBAAoB,MAAM,EAAE;AACjF;AASA,eAAe,qBACb,SACA,KACA,KACA,IACe;AACf,MAAI,QAAQ,cAAc,KAAM,OAAM,IAAI,MAAM,wCAAwC;AACxF,QAAM,YAAY,mBAAmB,QAAQ,IAAI;AACjD,QAAM,UAAU,gBAAgB;AAChC,QAAM,QAAQ,YAAY;AAC1B,QAAM,UAAU,KAAK,sBAAsB,IAAI,GAAG,IAAI,QAAQ,GAAG,UAAU;AAC3E,QAAM,UACJ,wDAAwD,SAAS,eAAe,OAAO;AAGzF,QAAM,aAAa,gCAAgC,YAAY,kBAAkB,mBAAmB,GAAG,CAAC;AACxG,QAAM,WAAW,MAAM;AAAA,IAAkB;AAAA,IAA4B;AAAA,IAAY;AAAA,IAC/E,MAAM,MAAM,YAAY,EAAE,SAAS,WAAW,KAAK,EAAE,CAAC;AAAA,EAAC;AACzD,MAAI,SAAS,WAAW,OAAO,UAAU;AACvC,UAAM,IAAI;AAAA,MACR,GAAG,QAAQ,IAAI,iDAAiD,GAAG,OAAO,YAAY;AAAA,EAGjF,WAAW,CAAC;AAAA;AAAA,IAEV,QAAQ,OAAO;AAAA,IACxB;AACF,MAAI,SAAS,WAAW;AACtB,UAAM,IAAI;AAAA,MACR,GAAG,YAAY,0BAA0B,GAAG,+BAA+B,QAAQ,IAAI,2BAC3D,uBAAuB;AAAA,EAEzC,OAAO;AAAA,IACnB;AACF,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR,GAAG,YAAY,cAAc,GAAG,aAAa,SAAS,MAAM,IAAI,SAAS,UAAU,2BAChE,QAAQ,IAAI,cAC1B,UAAU,OAAO,uBAAuB,qCAAqC,OAC/E,UAAU,OAAO;AAAA,EAAK,WAAW,CAAC,KAAK;AAAA,IAC5C;AACF,QAAM,WAAW,MAAM,kBAAkB,6BAA6B,YAAY,OAAO,MAAM,SAAS,KAAK,CAAC;AAC9G,QAAM,SAAU,SAAyC,UAAU,CAAC;AACpE,QAAM,SAAS,OAAO,KAAK,CAAC,UAAU,MAAM,SAAS,cAAc;AACnE,QAAM,UAAU,OAAO,KAAK,CAAC,UAAU,MAAM,KAAK,SAAS,SAAS,CAAC;AACrE,MAAI,WAAW,UAAa,YAAY;AACtC,UAAM,IAAI;AAAA,MACR,WAAW,GAAG,OAAO,YAAY,YAC5B,OAAO,WAAW,IAAI,cAAc,OAAO,IAAI,CAAC,UAAU,MAAM,IAAI,EAAE,KAAK,IAAI,CAAC,8CACvC,cAAc;AAAA,EACN,OAAO;AAAA,IAC/D;AAEF,SAAO,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAChD,YAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACtC,MAAI;AAEF,UAAM,aAAa,MAAM,kBAAkB,QAAQ,KAAK;AACxD,UAAM,QAAQ,MAAM;AAAA,MAAkB;AAAA,MAAoB,SAAS,MAAM;AAAA,MAAG;AAAA,MAC1E,YAAY,KAAK,MAAM,UAAU;AAAA,IAA4B;AAC/D,QAAI,MAAM,UAAU,MAAM;AACxB,YAAM,IAAI;AAAA,QACR,WAAW,GAAG,kBAAkB,OAAO,MAAM,UAAU,CAAC,CAAC,wBAAwB,OAAO,6JAEtB,OAAO;AAAA,EAAc,OAAO;AAAA,MAChG;AACF,QAAI,MAAM,eAAe,MAAM,QAAQ,UAAU;AAC/C,YAAM,IAAI;AAAA,QACR,WAAW,GAAG,UAAU,cAAc,0BAA0B,OAAO,MAAM,eAAe,CAAC,CAAC,QACrF,QAAQ,IAAI,SAAS,QAAQ,UAAU,aAAa;AAAA,MAG/D;AACF,kBAAc,KAAK,SAAS,cAAc,GAAG,UAAU;AAEvD,OAAG;AAAA,MACD,gBAAgB,SAAS,cAAc,GAAG,SAAS,YAAY,WAC1D,UAAU,QAAQ,IAAI,CAAC;AAAA,IAC9B;AACA,UAAM,cAAc,KAAK,SAAS,QAAQ,IAAI;AAC9C,QAAI,YAAY;AAChB,UAAM,MAAM,MAAM,cAAc,SAAS,OAAO,aAAa,CAAC,aAAa;AACzE,UAAI,WAAW,YAAY,IAAI,QAAQ,KAAK,aAAa,QAAQ,KAAM;AACvE,kBAAY;AACZ,SAAG;AAAA,QACD,KAAK,UAAU,QAAQ,CAAC,MAAM,UAAU,QAAQ,IAAI,CAAC,SAC/C,KAAK,MAAO,WAAW,QAAQ,OAAQ,GAAG,CAAC;AAAA,MACnD;AAAA,IACF,CAAC;AACD,QAAI,QAAQ,QAAQ,UAAU;AAC5B,YAAM,IAAI;AAAA,QACR,mBAAmB,GAAG,cAAc,GAAG,QAAQ,QAAQ,IAAI,SACtD,QAAQ,UAAU,aAAa;AAAA,MAEtC;AACF,OAAG,IAAI,YAAY,IAAI,MAAM,GAAG,EAAE,CAAC,0CAAgC;AAGnE,UAAM,MAAM,QAAQ,aAAa,UAC7B,KAAK,QAAQ,IAAI,YAAY,KAAK,eAAe,YAAY,SAAS,IAAI;AAC9E,iBAAa,KAAK,CAAC,QAAQ,aAAa,MAAM,OAAO,GAAG;AAAA,MACtD,aAAa;AAAA,MACb,OAAO,CAAC,UAAU,UAAU,MAAM;AAAA,IACpC,CAAC;AAED,WAAO,aAAa,EAAE,OAAO,KAAK,CAAC;AACnC,QAAI,WAAW,KAAK,KAAK,cAAc,CAAC,GAAG;AAGzC,aAAO,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IAClD,OAAO;AACL,aAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC5C,iBAAW,SAAS,GAAG;AAAA,IACzB;AACA,OAAG,IAAI,0BAA0B,GAAG,GAAG;AAAA,EACzC,SAAS,OAAO;AACd,WAAO,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAChD,UAAM;AAAA,EACR;AACF;AAGA,eAAe,kBAAkB,OAAqB,OAAuC;AAC3F,QAAM,MAAM,SAAS,KAAK;AAC1B,QAAM,WAAW,MAAM;AAAA,IAAkB;AAAA,IAAsB;AAAA,IAAK;AAAA,IAClE,MAAM,MAAM,KAAK,EAAE,SAAS,EAAE,GAAG,WAAW,KAAK,GAAG,QAAQ,2BAA2B,EAAE,CAAC;AAAA,EAAC;AAC7F,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR,GAAG,MAAM,IAAI,OAAO,YAAY,aAAa,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,IACrF;AACF,SAAO,MAAM,kBAAkB,uBAAuB,KAAK,OAAO,MAAM,SAAS,KAAK,CAAC;AACzF;AAMA,eAAe,cACb,OACA,OACA,aACA,YACiB;AACjB,QAAM,MAAM,SAAS,KAAK;AAC1B,QAAM,WAAW,MAAM;AAAA,IAAkB;AAAA,IAAmB;AAAA,IAAK;AAAA,IAC/D,MAAM,MAAM,KAAK,EAAE,SAAS,EAAE,GAAG,WAAW,KAAK,GAAG,QAAQ,2BAA2B,EAAE,CAAC;AAAA,EAAC;AAC7F,MAAI,CAAC,SAAS,MAAM,SAAS,SAAS;AACpC,UAAM,IAAI;AAAA,MACR,GAAG,MAAM,IAAI,OAAO,YAAY,aAAa,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,IACrF;AACF,QAAM,OAAO,WAAW,QAAQ;AAChC,MAAI,WAAW;AACf,QAAM,kBAAkB,oBAAoB,KAAK,OAAO,MAAM;AAAA,IAC5D,SAAS,QAAQ,SAAS,IAAa;AAAA,IACvC,iBAAiB,QAA+B;AAC9C,uBAAiB,SAAS,QAAQ;AAChC,aAAK,OAAO,KAAK;AACjB,oBAAY,MAAM;AAClB,mBAAW,QAAQ;AACnB,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,kBAAkB,WAAW;AAAA,EAC/B,CAAC;AACD,SAAO,KAAK,OAAO,KAAK;AAC1B;",
+  "names": ["error"]
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@volter/live",
   "author": "Volter AI, Inc.",
-  "version": "0.5.211",
+  "version": "0.5.213",
   "publishConfig": {
     "access": "public"
   },
@@ -24,14 +24,50 @@
     ".": {
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "default": "./dist/client.js"
+    },
+    "./asset-library": {
+      "types": "./dist/asset-library.d.ts",
+      "default": "./dist/asset-library.js"
+    },
+    "./registry-format": {
+      "types": "./dist/registry-format.d.ts",
+      "default": "./dist/registry-format.js"
+    },
+    "./discovery": {
+      "types": "./dist/discovery.d.ts",
+      "default": "./dist/discovery.js"
+    },
+    "./product-locator": {
+      "types": "./dist/product-locator.d.ts",
+      "default": "./dist/product-locator.js"
+    },
+    "./workbench-locator": {
+      "types": "./dist/workbench-locator.d.ts",
+      "default": "./dist/workbench-locator.js"
+    },
+    "./installed-package": {
+      "types": "./dist/installed-package.d.ts",
+      "default": "./dist/installed-package.js"
+    },
+    "./volter-manifest": {
+      "types": "./dist/volter-manifest.d.ts",
+      "default": "./dist/volter-manifest.js"
+    },
+    "./product-create": {
+      "types": "./dist/product-create.d.ts",
+      "default": "./dist/product-create.js"
     }
   },
   "engines": {
     "node": ">=22"
   },
   "dependencies": {
-    "@volter/sdk": "0.5.211",
-    "@volter/project": "0.5.211",
+    "@volter/sdk": "0.5.213",
+    "@volter/project": "0.5.213",
     "undici": "^7.28.0"
   },
   "devDependencies": {