autoremediator 0.21.2 → 0.22.0

package/dist/api/bisect/index.js

@@ -0,0 +1,463 @@
+import { spawnSync } from "node:child_process";
+import { existsSync, readFileSync, realpathSync, rmSync } from "node:fs";
+import { join, relative, resolve, sep } from "node:path";
+import { resolveInstallCommand } from "../../platform/package-manager/index.js";
+import { safeExeca } from "../../platform/safe-exec.js";
+import { LONG_RUNNING_TIMEOUT_MS } from "../../platform/timeouts.js";
+import { createRefWorktree } from "../../runs/worktree.js";
+import { directDependencyNames, lockfileChanges } from "./changes.js";
+import { ddmin } from "./ddmin.js";
+import { applyPins, checkLockedVersions } from "./pins.js";
+import { planRemedy } from "./remedy.js";
+import { runProcess, sanitizeOutput } from "./shell.js";
+export const DEFAULT_COMMAND_TIMEOUT_SECONDS = 600;
+export const DEFAULT_MAX_STEPS = 30;
+const LOCKFILES = [
+    ["pnpm-lock.yaml", "pnpm"],
+    ["package-lock.json", "npm"],
+    ["yarn.lock", "yarn"],
+    ["bun.lock", "bun"],
+    ["bun.lockb", "bun"],
+];
+async function git(cwd, args) {
+    const result = await safeExeca("git", args, {
+        cwd,
+        stdio: "pipe",
+        reject: false,
+        stripFinalNewline: false,
+    });
+    return { ok: result.exitCode === 0, stdout: result.stdout, stderr: result.stderr };
+}
+async function showAt(top, commit, path) {
+    const result = await git(top, ["show", `${commit}:${path}`]);
+    return result.ok ? result.stdout : undefined;
+}
+function parseManifest(text) {
+    if (text === undefined)
+        return undefined;
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+}
+function hasControlCharacter(value) {
+    for (let index = 0; index < value.length; index++) {
+        const code = value.codePointAt(index) ?? 0;
+        if (code < 32 || code === 127)
+            return true;
+    }
+    return false;
+}
+function checkRef(name, value) {
+    if (!value.trim())
+        throw new Error(`${name} is required: a git ref (commit, tag or branch).`);
+    if (value.startsWith("-") || hasControlCharacter(value)) {
+        throw new Error(`${name} is not a valid git ref: ${JSON.stringify(value)}.`);
+    }
+}
+async function resolveCommit(top, name, ref) {
+    const result = await git(top, ["rev-parse", "--verify", "--end-of-options", `${ref}^{commit}`]);
+    if (!result.ok)
+        throw new Error(`${name} ref ${JSON.stringify(ref)} does not resolve to a commit in this repository.`);
+    return result.stdout.trim();
+}
+const updatedNames = (subset) => subset.map((item) => item.packageName);
+const describeUpdate = (item) => `${item.packageName} ${item.fromVersion} -> ${item.toVersion} (${item.dependencyScope})`;
+function installArgv(manager, frozen, ignoreScripts) {
+    const argv = resolveInstallCommand(manager, { installMode: "standard", enforceFrozenLockfile: frozen }, 1);
+    if (manager === "npm")
+        argv.push("--no-audit", "--no-fund");
+    if (ignoreScripts)
+        argv.push("--ignore-scripts");
+    return argv;
+}
+/**
+ * Find which package update in the lockfile diff between a good and a bad git ref makes a command
+ * fail. Runs entirely in isolated git worktrees: install the good ref and check the command passes,
+ * install the bad ref and check it fails, then hold subsets of the changed packages at their bad-ref
+ * versions (everything else at its good-ref version) and narrow down with delta debugging. The
+ * result names the package, or the smallest set that only fails together, and a plan that pins it back.
+ */
+export async function bisectLockfile(options, deps = {}) {
+    const started = Date.now();
+    const startedAt = new Date(started).toISOString();
+    const env = deps.env ?? process.env;
+    const signal = options.signal;
+    checkRef("good", options.good);
+    const badRef = options.bad?.trim() || "HEAD";
+    checkRef("bad", badRef);
+    if (!options.command?.trim())
+        throw new Error("command is required: the shell command that fails at the bad ref.");
+    const timeoutSeconds = options.timeoutSeconds ?? DEFAULT_COMMAND_TIMEOUT_SECONDS;
+    const maxSteps = options.maxSteps ?? DEFAULT_MAX_STEPS;
+    if (!(timeoutSeconds > 0))
+        throw new Error("timeoutSeconds must be greater than zero.");
+    if (!Number.isInteger(maxSteps) || maxSteps < 1)
+        throw new Error("maxSteps must be a whole number of at least 1.");
+    if (options.packageManager && !["npm", "pnpm", "yarn"].includes(options.packageManager)) {
+        throw new Error(`bisect supports npm, pnpm and yarn (classic) lockfiles; ${options.packageManager} is not supported.`);
+    }
+    const cwd = resolve(options.cwd ?? process.cwd());
+    const top = (await git(cwd, ["rev-parse", "--show-toplevel"])).stdout.trim();
+    if (!top)
+        throw new Error("bisect needs a git repository: this directory is not one.");
+    const sub = relative(realpathSync(top), realpathSync(cwd)).split(sep).join("/");
+    const inRepo = (file) => (sub ? `${sub}/${file}` : file);
+    const goodCommit = await resolveCommit(top, "good", options.good);
+    const badCommit = await resolveCommit(top, "bad", badRef);
+    if (goodCommit === badCommit)
+        throw new Error("good and bad are the same commit: there is nothing to bisect.");
+    // Which lockfile, hence which package manager.
+    let lockfile;
+    let manager;
+    for (const [file, candidate] of LOCKFILES) {
+        if (options.packageManager && candidate !== options.packageManager)
+            continue;
+        if ((await git(top, ["cat-file", "-e", `${badCommit}:${inRepo(file)}`])).ok) {
+            lockfile = file;
+            manager = candidate;
+            break;
+        }
+    }
+    if (!lockfile || !manager) {
+        throw new Error(`No supported lockfile (${LOCKFILES.map(([file]) => file).join(", ")}) at ${badRef} in ${sub || "the repository root"}.`);
+    }
+    if (manager === "bun") {
+        throw new Error("bisect cannot read bun lockfiles yet; npm, pnpm and yarn (classic) are supported.");
+    }
+    const goodLock = await showAt(top, goodCommit, inRepo(lockfile));
+    const badLock = await showAt(top, badCommit, inRepo(lockfile));
+    if (goodLock === undefined) {
+        throw new Error(`${lockfile} does not exist at ${options.good}: there is no lockfile to compare against.`);
+    }
+    if (badLock === undefined)
+        throw new Error(`${lockfile} does not exist at ${badRef}.`);
+    if (manager === "yarn" && (goodLock.includes("__metadata:") || badLock.includes("__metadata:"))) {
+        throw new Error("bisect reads yarn classic (v1) lockfiles only; this one is from yarn berry.");
+    }
+    const goodManifestText = await showAt(top, goodCommit, inRepo("package.json"));
+    if (goodManifestText === undefined)
+        throw new Error(`package.json does not exist at ${options.good}.`);
+    const badManifest = parseManifest(await showAt(top, badCommit, inRepo("package.json")));
+    const { updates, skipped } = lockfileChanges(lockfile, goodLock, badLock, directDependencyNames(badManifest));
+    const steps = [];
+    const warnings = [];
+    let stepsUsed = 0;
+    let stopped;
+    const finish = (partial) => ({
+        schemaVersion: "1",
+        status: partial.status,
+        summary: partial.summary,
+        good: { ref: options.good, commit: goodCommit },
+        bad: { ref: badRef, commit: badCommit },
+        packageManager: manager,
+        lockfile,
+        command: sanitizeOutput(options.command, { env, maxChars: 4000 }),
+        updates,
+        skipped,
+        culprits: partial.culprits ?? [],
+        ...(partial.holdingBackFixes === undefined
+            ? {}
+            : { holdingBackFixes: partial.holdingBackFixes }),
+        steps,
+        stepsUsed,
+        maxSteps,
+        ...(stopped ? { stopped } : {}),
+        ...(partial.remedy ? { remedy: partial.remedy } : {}),
+        warnings,
+        startedAt,
+        durationMs: Date.now() - started,
+    });
+    const skippedNote = skipped.length > 0
+        ? ` ${skipped.length} other locked package(s) were added or removed or have several versions and cannot be tried one at a time.`
+        : "";
+    if (updates.length === 0) {
+        return finish({
+            status: "no-changes",
+            summary: `No package has a different locked version between ${goodCommit.slice(0, 12)} and ${badCommit.slice(0, 12)} in ${lockfile}.${skippedNote}`,
+        });
+    }
+    // ---- checkouts: always removed, also when interrupted -----------------------------------------
+    const unique = `bisect-${process.pid}-${Date.now().toString(36)}`;
+    const liveRoots = new Set();
+    const exitCleanup = () => {
+        for (const path of liveRoots)
+            rmSync(path, { recursive: true, force: true });
+        spawnSync("git", ["worktree", "prune"], { cwd: top, stdio: "ignore" });
+    };
+    process.on("exit", exitCleanup);
+    const removers = [];
+    const timeoutMs = Math.round(timeoutSeconds * 1000);
+    const installTimeoutMs = Math.max(LONG_RUNNING_TIMEOUT_MS, timeoutMs);
+    const ignoreScripts = options.ignoreScripts === true;
+    const paths = [];
+    const tail = (text, max) => sanitizeOutput(text, { env, paths, maxChars: max });
+    const record = (display, result) => ({
+        command: sanitizeOutput(display, { env, paths, maxChars: 4000 }),
+        exitCode: result.exitCode,
+        durationMs: result.durationMs,
+        timedOut: result.timedOut,
+    });
+    try {
+        const goodTree = await createRefWorktree(cwd, `${unique}-good`, goodCommit, env);
+        removers.push(goodTree.remove);
+        liveRoots.add(goodTree.root);
+        paths.push([goodTree.root, "<checkout>"]);
+        const badTree = await createRefWorktree(cwd, `${unique}-bad`, badCommit, env);
+        removers.push(badTree.remove);
+        liveRoots.add(badTree.root);
+        paths.push([badTree.root, "<checkout>"]);
+        for (const tree of [goodTree, badTree]) {
+            if (!existsSync(join(tree.path, "package.json"))) {
+                throw new Error(`package.json does not exist in ${sub || "the repository root"} at ${tree === goodTree ? options.good : badRef}.`);
+            }
+        }
+        let pnpmMajor;
+        if (manager === "pnpm") {
+            const version = await runProcess({
+                argv: ["pnpm", "--version"],
+                cwd: goodTree.path,
+                env,
+                timeoutMs: 60_000,
+                signal,
+            });
+            const major = Number.parseInt(version.output.trim().split(".")[0] ?? "", 10);
+            pnpmMajor = Number.isNaN(major) ? undefined : major;
+        }
+        const lockName = lockfile;
+        const activeManager = manager;
+        /**
+         * Install and run the command in a checkout. `pinned` is the set of packages to hold at their bad-ref
+         * version on top of the good ref; `undefined` means the checkout is installed exactly as committed.
+         */
+        const evaluate = async (tree, kind, commit, pinned) => {
+            const stepNumber = steps.length + 1;
+            const base = {
+                step: stepNumber,
+                kind,
+                updated: pinned ? updatedNames(pinned) : kind === "bad-ref" ? updatedNames(updates) : [],
+            };
+            const done = (outcome, phase, outputTail, extra = {}) => {
+                const step = { ...base, outcome, phase, outputTail, ...extra };
+                steps.push(step);
+                return { step, verdict: outcome };
+            };
+            // A fresh copy of the commit: no leftovers from the previous state, no installed packages.
+            const reset = await git(tree.root, ["reset", "--hard", "--quiet", commit]);
+            const clean = await git(tree.root, ["clean", "-fdxq"]);
+            if (!reset.ok || !clean.ok) {
+                return done("unresolved", "install", tail(reset.stderr + clean.stderr, 600), {
+                    note: "could not reset the checkout",
+                });
+            }
+            if (pinned) {
+                try {
+                    applyPins({
+                        dir: tree.path,
+                        packageManager: activeManager,
+                        ...(pnpmMajor === undefined ? {} : { pnpmMajor }),
+                    }, pinned.map((item) => ({ packageName: item.packageName, version: item.toVersion })));
+                }
+                catch (error) {
+                    return done("unresolved", "pins", "", {
+                        note: `could not write the pins: ${error instanceof Error ? error.message : String(error)}`,
+                    });
+                }
+            }
+            const frozen = pinned === undefined;
+            const argv = installArgv(activeManager, frozen, ignoreScripts);
+            const install = await runProcess({
+                argv,
+                cwd: tree.path,
+                env,
+                timeoutMs: installTimeoutMs,
+                signal,
+            });
+            const installRecord = record(argv.join(" "), install);
+            if (install.aborted)
+                return done("unresolved", "install", tail(install.output, 600), {
+                    install: installRecord,
+                    note: "interrupted",
+                });
+            if (install.exitCode !== 0) {
+                // An install that fails in a state taken from a commit is a broken build. In a combination
+                // we made up it only says the combination cannot be installed.
+                return done(frozen ? "fail" : "unresolved", "install", tail(install.output, 1500), {
+                    install: installRecord,
+                    note: install.timedOut
+                        ? "install timed out"
+                        : frozen
+                            ? "install failed"
+                            : "install failed in this combination of versions",
+                });
+            }
+            if (pinned) {
+                const lockPath = join(tree.path, lockName);
+                const content = existsSync(lockPath) ? readFileSync(lockPath, "utf8") : undefined;
+                if (content === undefined) {
+                    return done("unresolved", "pins", "", {
+                        install: installRecord,
+                        note: `the install did not write ${lockName}, so the versions cannot be checked`,
+                    });
+                }
+                const mismatches = checkLockedVersions(lockName, content, updates, new Set(updatedNames(pinned)));
+                if (mismatches.length > 0) {
+                    const shown = mismatches
+                        .slice(0, 3)
+                        .map((item) => `${item.packageName} should be ${item.expected} but the lockfile has ${item.found.join(", ") || "nothing"}`)
+                        .join("; ");
+                    return done("unresolved", "pins", "", {
+                        install: installRecord,
+                        note: `the package manager did not install the requested versions (${shown}${mismatches.length > 3 ? `; and ${mismatches.length - 3} more` : ""})`,
+                    });
+                }
+            }
+            const run = await runProcess({
+                shell: options.command,
+                cwd: tree.path,
+                env,
+                timeoutMs,
+                signal,
+            });
+            const runRecord = record(options.command, run);
+            if (run.aborted)
+                return done("unresolved", "command", tail(run.output, 600), {
+                    install: installRecord,
+                    run: runRecord,
+                    note: "interrupted",
+                });
+            const passed = run.exitCode === 0;
+            return done(passed ? "pass" : "fail", "command", tail(run.output, passed ? 400 : 1500), {
+                install: installRecord,
+                run: runRecord,
+                ...(run.timedOut
+                    ? { note: `the command was killed after ${timeoutSeconds}s and counts as failing` }
+                    : {}),
+            });
+        };
+        const interrupted = () => signal?.aborted === true;
+        const incomplete = (summary, culprits) => {
+            stopped ??= interrupted() ? "interrupted" : undefined;
+            return finish({ status: "incomplete", summary, ...(culprits ? { culprits } : {}) });
+        };
+        // ---- 1. the good ref must pass, the bad ref must fail --------------------------------------
+        const good = await evaluate(goodTree, "good-ref", goodCommit, undefined);
+        if (interrupted())
+            return incomplete("Interrupted before the good ref was checked.");
+        if (good.verdict !== "pass") {
+            return finish({
+                status: "not-reproducible",
+                summary: `Not reproducible: the command does not pass at the good ref ${goodCommit.slice(0, 12)} (${good.step.phase}${good.step.note ? `: ${good.step.note}` : ""}), so there is nothing to bisect from.`,
+            });
+        }
+        const bad = await evaluate(badTree, "bad-ref", badCommit, undefined);
+        if (interrupted())
+            return incomplete("Interrupted before the bad ref was checked.");
+        if (bad.verdict === "pass") {
+            return finish({
+                status: "not-reproducible",
+                summary: `Not reproducible: the command passes at the bad ref ${badCommit.slice(0, 12)} (flaky, or it depends on something outside the repository such as the network or a newer registry release).`,
+            });
+        }
+        await badTree.remove();
+        liveRoots.delete(badTree.root);
+        // ---- 2. every update applied to the good ref must reproduce the failure --------------------
+        const attempt = async (kind, subset) => {
+            stepsUsed++;
+            return (await evaluate(goodTree, kind, goodCommit, subset)).verdict;
+        };
+        const all = await attempt("all-updates", updates);
+        if (interrupted())
+            return incomplete("Interrupted while checking that the lockfile updates reproduce the failure.");
+        if (all !== "fail") {
+            const last = steps.at(-1);
+            return finish({
+                status: "not-attributable",
+                summary: all === "pass"
+                    ? `The command fails at ${badCommit.slice(0, 12)} but passes with all ${updates.length} changed package version(s) applied to ${goodCommit.slice(0, 12)}: the failure does not come from a version change of a package locked at both refs. Look at the source changes between the refs, or at the ${skipped.length} added, removed or multi-version package(s).`
+                    : `Could not build the bad ref's package versions on top of the good ref${last?.note ? ` (${last.note})` : ""}, so the failure could not be attributed to individual updates.`,
+            });
+        }
+        // ---- 3. narrow down ------------------------------------------------------------------------
+        const reserved = maxSteps > 2 ? 1 : 0; // a step kept for the final check
+        const search = updates.length === 1
+            ? {
+                minimal: [...updates],
+                evaluations: 0,
+                complete: true,
+                stoppedBecause: undefined,
+            }
+            : await ddmin(updates, (item) => item.packageName, (subset) => attempt("subset", subset), {
+                maxEvaluations: Math.max(maxSteps - stepsUsed - reserved, 0),
+                shouldStop: interrupted,
+            });
+        if (search.stoppedBecause === "budget")
+            stopped = "max-steps";
+        if (search.stoppedBecause === "stopped" || interrupted())
+            stopped = "interrupted";
+        const culprits = search.minimal;
+        const names = culprits.map((item) => `${item.packageName} ${item.fromVersion} -> ${item.toVersion}`);
+        if (!search.complete && culprits.length > 1) {
+            if (stopped === "max-steps")
+                warnings.push(`Stopped at the limit of ${maxSteps} steps; raise maxSteps to narrow it further.`);
+            else if (stopped === undefined)
+                warnings.push("Some combinations of versions could not be installed, so the set may not be minimal.");
+            return incomplete(`Narrowed ${updates.length} updates down to ${culprits.length} that still fail (${names.join("; ")}), but not to a minimal set.`, culprits);
+        }
+        if (!search.complete && stopped === undefined) {
+            warnings.push("Some combinations of versions could not be installed; the culprit is certain, but other updates may also break the command.");
+        }
+        // ---- 4. confirm that holding the culprits back is what fixes it -----------------------------
+        let holdingBackFixes;
+        if (culprits.length === updates.length) {
+            holdingBackFixes = true; // the good ref itself, which passed
+        }
+        else if (!interrupted() && stepsUsed < maxSteps) {
+            const rest = updates.filter((item) => !culprits.some((culprit) => culprit.packageName === item.packageName));
+            const verdict = await attempt("without-culprit", rest);
+            if (verdict === "pass")
+                holdingBackFixes = true;
+            else if (verdict === "fail") {
+                holdingBackFixes = false;
+                warnings.push("The command still fails with the culprits held back: other updates also break it, or the command is flaky.");
+            }
+            else {
+                warnings.push("Could not check that holding the culprits back makes the command pass.");
+            }
+        }
+        if (interrupted()) {
+            return incomplete(`Interrupted after narrowing the failure down to ${names.join("; ")}.`, culprits);
+        }
+        // ---- 5. the remedy: a plan that pins the culprits back --------------------------------------
+        const remedy = await planRemedy({
+            cwd,
+            packageManager: manager,
+            lockfile,
+            culprits,
+            goodCommit,
+            badCommit,
+            command: options.command,
+            apply: options.apply === true,
+            ...(deps.applyPlanFn ? { applyPlanFn: deps.applyPlanFn } : {}),
+        });
+        const single = culprits.length === 1;
+        const summary = single
+            ? `${describeUpdate(culprits[0])} breaks the command. Holding it at ${culprits[0]?.fromVersion} ${holdingBackFixes ? "makes it pass" : "is not enough on its own"}.`
+            : `These ${culprits.length} updates break the command only together: ${culprits.map((item) => describeUpdate(item)).join("; ")}.`;
+        return finish({
+            status: single ? "culprit" : "culprit-set",
+            summary,
+            culprits,
+            ...(holdingBackFixes === undefined ? {} : { holdingBackFixes }),
+            remedy,
+        });
+    }
+    finally {
+        process.off("exit", exitCleanup);
+        await Promise.allSettled(removers.map((remove) => remove()));
+        liveRoots.clear();
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/api/bisect/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/bisect/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAqB,MAAM,cAAc,CAAC;AACzF,OAAO,EAAE,KAAK,EAAgB,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAsB,MAAM,YAAY,CAAC;AAuB5E,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AASpC,MAAM,SAAS,GAA2D;IACxE,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAC1B,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAC5B,CAAC,WAAW,EAAE,MAAM,CAAC;IACrB,CAAC,UAAU,EAAE,KAAK,CAAC;IACnB,CAAC,WAAW,EAAE,KAAK,CAAC;CACrB,CAAC;AAEF,KAAK,UAAU,GAAG,CAChB,GAAW,EACX,IAAc;IAEd,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;QAC1C,GAAG;QACH,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,KAAK;QACb,iBAAiB,EAAE,KAAK;KACzB,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAW,EAAE,MAAc,EAAE,IAAY;IAC7D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,IAAwB;IAC7C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kDAAkD,CAAC,CAAC;IAC9F,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,IAAY,EAAE,GAAW;IACjE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM,CAAC,EAAE;QACZ,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,mDAAmD,CACtF,CAAC;IACJ,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,MAAkC,EAAY,EAAE,CACpE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAEzC,MAAM,cAAc,GAAG,CAAC,IAAqB,EAAU,EAAE,CACvD,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,OAAO,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,eAAe,GAAG,CAAC;AAE3F,SAAS,WAAW,CAAC,OAAuB,EAAE,MAAe,EAAE,aAAsB;IACnF,MAAM,IAAI,GAAG,qBAAqB,CAChC,OAAO,EACP,EAAE,WAAW,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,EAAE,EAC1D,CAAC,CACF,CAAC;IACF,IAAI,OAAO,KAAK,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAC5D,IAAI,aAAa;QAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAsB,EACtB,IAAI,GAAe,EAAE;IAErB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAE9B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE;QAC1B,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,+BAA+B,CAAC;IACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,IAAI,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACxF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CACb,2DAA2D,OAAO,CAAC,cAAc,oBAAoB,CACtG,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC7E,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACvF,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEjE,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,UAAU,KAAK,SAAS;QAC1B,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAEnF,+CAA+C;IAC/C,IAAI,QAA4B,CAAC;IACjC,IAAI,OAAmC,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,cAAc,IAAI,SAAS,KAAK,OAAO,CAAC,cAAc;YAAE,SAAS;QAC7E,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC5E,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,GAAG,SAAS,CAAC;YACpB,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,0BAA0B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,MAAM,OAAO,GAAG,IAAI,qBAAqB,GAAG,CACzH,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,sBAAsB,OAAO,CAAC,IAAI,4CAA4C,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,sBAAsB,MAAM,GAAG,CAAC,CAAC;IACvF,IAAI,OAAO,KAAK,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;IAC/E,IAAI,gBAAgB,KAAK,SAAS;QAChC,MAAM,IAAI,KAAK,CAAC,kCAAkC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAExF,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,eAAe,CAC1C,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,qBAAqB,CAAC,WAAW,CAAC,CACnC,CAAC;IAEF,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAgC,CAAC;IAErC,MAAM,MAAM,GAAG,CAAC,OAMf,EAAgB,EAAE,CAAC,CAAC;QACnB,aAAa,EAAE,GAAG;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE;QAC/C,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE;QACvC,cAAc,EAAE,OAAO;QACvB,QAAQ;QACR,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACjE,OAAO;QACP,OAAO;QACP,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;QAChC,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACnD,KAAK;QACL,SAAS;QACT,QAAQ;QACR,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,QAAQ;QACR,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;KACjC,CAAC,CAAC;IAEH,MAAM,WAAW,GACf,OAAO,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,4GAA4G;QAChI,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC;YACZ,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,qDAAqD,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,QAAQ,IAAI,WAAW,EAAE;SACpJ,CAAC,CAAC;IACL,CAAC;IAED,kGAAkG;IAClG,MAAM,MAAM,GAAG,UAAU,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IAClE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,KAAK,MAAM,IAAI,IAAI,SAAS;YAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,SAAS,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChC,MAAM,QAAQ,GAA+B,EAAE,CAAC;IAEhD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IACpD,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC;IACrD,MAAM,KAAK,GAA4B,EAAE,CAAC;IAE1C,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,GAAW,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,MAAqB,EAAuB,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAChE,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,MAAM,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QACjF,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,MAAM,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAC9E,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QAEzC,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CACb,kCAAkC,GAAG,IAAI,qBAAqB,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAClH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,SAA6B,CAAC;QAClC,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC;gBAC/B,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;gBAC3B,GAAG,EAAE,QAAQ,CAAC,IAAI;gBAClB,GAAG;gBACH,SAAS,EAAE,MAAM;gBACjB,MAAM;aACP,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7E,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;QACtD,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC;QAC1B,MAAM,aAAa,GAAG,OAAO,CAAC;QAE9B;;;WAGG;QACH,MAAM,QAAQ,GAAG,KAAK,EACpB,IAAoC,EACpC,IAAoB,EACpB,MAAc,EACd,MAA8C,EACG,EAAE;YACnD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG;gBACX,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;aACzF,CAAC;YACF,MAAM,IAAI,GAAG,CACX,OAA8B,EAC9B,KAA0B,EAC1B,UAAkB,EAClB,KAAK,GAAwB,EAAE,EAC/B,EAAE;gBACF,MAAM,IAAI,GAAe,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,KAAK,EAAE,CAAC;gBAC3E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YACpC,CAAC,CAAC;YAEF,2FAA2F;YAC3F,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;YAC3E,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YACvD,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;oBAC3E,IAAI,EAAE,8BAA8B;iBACrC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,SAAS,CACP;wBACE,GAAG,EAAE,IAAI,CAAC,IAAI;wBACd,cAAc,EAAE,aAAa;wBAC7B,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;qBAClD,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CACnF,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;wBACpC,IAAI,EAAE,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;qBAC5F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,CAAC;YACpC,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC;gBAC/B,IAAI;gBACJ,GAAG,EAAE,IAAI,CAAC,IAAI;gBACd,GAAG;gBACH,SAAS,EAAE,gBAAgB;gBAC3B,MAAM;aACP,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,OAAO;gBACjB,OAAO,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;oBAC9D,OAAO,EAAE,aAAa;oBACtB,IAAI,EAAE,aAAa;iBACpB,CAAC,CAAC;YACL,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC3B,2FAA2F;gBAC3F,+DAA+D;gBAC/D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;oBACjF,OAAO,EAAE,aAAa;oBACtB,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACpB,CAAC,CAAC,mBAAmB;wBACrB,CAAC,CAAC,MAAM;4BACN,CAAC,CAAC,gBAAgB;4BAClB,CAAC,CAAC,gDAAgD;iBACvD,CAAC,CAAC;YACL,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAClF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,OAAO,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;wBACpC,OAAO,EAAE,aAAa;wBACtB,IAAI,EAAE,6BAA6B,QAAQ,qCAAqC;qBACjF,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,UAAU,GAAG,mBAAmB,CACpC,QAAQ,EACR,OAAO,EACP,OAAO,EACP,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAC9B,CAAC;gBACF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,KAAK,GAAG,UAAU;yBACrB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;yBACX,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CACP,GAAG,IAAI,CAAC,WAAW,cAAc,IAAI,CAAC,QAAQ,yBAAyB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,CAC9G;yBACA,IAAI,CAAC,IAAI,CAAC,CAAC;oBACd,OAAO,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;wBACpC,OAAO,EAAE,aAAa;wBACtB,IAAI,EAAE,+DAA+D,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG;qBACnJ,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC;gBAC3B,KAAK,EAAE,OAAO,CAAC,OAAO;gBACtB,GAAG,EAAE,IAAI,CAAC,IAAI;gBACd,GAAG;gBACH,SAAS;gBACT,MAAM;aACP,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,GAAG,CAAC,OAAO;gBACb,OAAO,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;oBAC1D,OAAO,EAAE,aAAa;oBACtB,GAAG,EAAE,SAAS;oBACd,IAAI,EAAE,aAAa;iBACpB,CAAC,CAAC;YACL,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC;YAClC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;gBACtF,OAAO,EAAE,aAAa;gBACtB,GAAG,EAAE,SAAS;gBACd,GAAG,CAAC,GAAG,CAAC,QAAQ;oBACd,CAAC,CAAC,EAAE,IAAI,EAAE,gCAAgC,cAAc,yBAAyB,EAAE;oBACnF,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;QACnD,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,QAA4B,EAAgB,EAAE;YACjF,OAAO,KAAK,WAAW,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC,CAAC;QAEF,+FAA+F;QAC/F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACzE,IAAI,WAAW,EAAE;YAAE,OAAO,UAAU,CAAC,8CAA8C,CAAC,CAAC;QACrF,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;gBACZ,MAAM,EAAE,kBAAkB;gBAC1B,OAAO,EAAE,+DAA+D,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,wCAAwC;aAC1M,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrE,IAAI,WAAW,EAAE;YAAE,OAAO,UAAU,CAAC,6CAA6C,CAAC,CAAC;QACpF,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC;gBACZ,MAAM,EAAE,kBAAkB;gBAC1B,OAAO,EAAE,uDAAuD,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8GAA8G;aACrM,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAE/B,+FAA+F;QAC/F,MAAM,OAAO,GAAG,KAAK,EACnB,IAAoB,EACpB,MAAkC,EAChB,EAAE;YACpB,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QACtE,CAAC,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE;YACf,OAAO,UAAU,CACf,6EAA6E,CAC9E,CAAC;QACJ,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,OAAO,MAAM,CAAC;gBACZ,MAAM,EAAE,kBAAkB;gBAC1B,OAAO,EACL,GAAG,KAAK,MAAM;oBACZ,CAAC,CAAC,wBAAwB,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,OAAO,CAAC,MAAM,0CAA0C,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8IAA8I,OAAO,CAAC,MAAM,8CAA8C;oBACjW,CAAC,CAAC,wEAAwE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,iEAAiE;aACnL,CAAC,CAAC;QACL,CAAC;QAED,+FAA+F;QAC/F,MAAM,QAAQ,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kCAAkC;QACzE,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,KAAK,CAAC;YAClB,CAAC,CAAC;gBACE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;gBACrB,WAAW,EAAE,CAAC;gBACd,QAAQ,EAAE,IAAe;gBACzB,cAAc,EAAE,SAA6C;aAC9D;YACH,CAAC,CAAC,MAAM,KAAK,CACT,OAAO,EACP,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAC1B,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,EACrC;gBACE,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,SAAS,GAAG,QAAQ,EAAE,CAAC,CAAC;gBAC5D,UAAU,EAAE,WAAW;aACxB,CACF,CAAC;QACR,IAAI,MAAM,CAAC,cAAc,KAAK,QAAQ;YAAE,OAAO,GAAG,WAAW,CAAC;QAC9D,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,WAAW,EAAE;YAAE,OAAO,GAAG,aAAa,CAAC;QAElF,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CACxB,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,OAAO,IAAI,CAAC,SAAS,EAAE,CACzE,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,IAAI,OAAO,KAAK,WAAW;gBACzB,QAAQ,CAAC,IAAI,CACX,2BAA2B,QAAQ,8CAA8C,CAClF,CAAC;iBACC,IAAI,OAAO,KAAK,SAAS;gBAC5B,QAAQ,CAAC,IAAI,CACX,sFAAsF,CACvF,CAAC;YACJ,OAAO,UAAU,CACf,YAAY,OAAO,CAAC,MAAM,oBAAoB,QAAQ,CAAC,MAAM,qBAAqB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,EAChI,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CACX,6HAA6H,CAC9H,CAAC;QACJ,CAAC;QAED,gGAAgG;QAChG,IAAI,gBAAqC,CAAC;QAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACvC,gBAAgB,GAAG,IAAI,CAAC,CAAC,oCAAoC;QAC/D,CAAC;aAAM,IAAI,CAAC,WAAW,EAAE,IAAI,SAAS,GAAG,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CACzB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,CAAC,CAChF,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;YACvD,IAAI,OAAO,KAAK,MAAM;gBAAE,gBAAgB,GAAG,IAAI,CAAC;iBAC3C,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC5B,gBAAgB,GAAG,KAAK,CAAC;gBACzB,QAAQ,CAAC,IAAI,CACX,4GAA4G,CAC7G,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QAED,IAAI,WAAW,EAAE,EAAE,CAAC;YAClB,OAAO,UAAU,CACf,mDAAmD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACtE,QAAQ,CACT,CAAC;QACJ,CAAC;QAED,gGAAgG;QAChG,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;YAC9B,GAAG;YACH,cAAc,EAAE,OAAO;YACvB,QAAQ;YACR,QAAQ;YACR,UAAU;YACV,SAAS;YACT,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI;YAC7B,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM;YACpB,CAAC,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,sCAAsC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,0BAA0B,GAAG;YACrK,CAAC,CAAC,SAAS,QAAQ,CAAC,MAAM,6CAA6C,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACpI,OAAO,MAAM,CAAC;YACZ,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;YAC1C,OAAO;YACP,QAAQ;YACR,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;YAC/D,MAAM;SACP,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACjC,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7D,SAAS,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/api/bisect/pins.d.ts

@@ -0,0 +1,40 @@
+import type { PackageManager } from "../../platform/types.js";
+import type { BisectedPackage } from "./types.js";
+export interface PinContext {
+    /** Project directory inside the checkout. */
+    dir: string;
+    packageManager: PackageManager;
+    /**
+     * pnpm 11 and later read overrides from `pnpm-workspace.yaml` and ignore the `pnpm` field of
+     * `package.json`; older versions are the other way round.
+     */
+    pnpmMajor?: number;
+}
+export interface Pin {
+    packageName: string;
+    version: string;
+}
+/**
+ * Where a pin ends up, as a one-line description for the report.
+ */
+export declare function describePinMechanism(context: PinContext): string;
+/**
+ * Hold each package at an exact version in the checkout, without touching its lockfile: direct
+ * dependencies get their range replaced by the exact version in the section(s) declaring them
+ * (npm refuses an override for a direct dependency), everything else goes through the package
+ * manager's own override field. The checkout is expected to be a fresh copy of the good ref.
+ */
+export declare function applyPins(context: PinContext, pins: readonly Pin[]): void;
+export interface PinMismatch {
+    packageName: string;
+    expected: string;
+    found: string[];
+}
+/**
+ * Check that an installed state is the one that was asked for: every package in `updates` is at the
+ * bad-ref version if it is in `updated` and at the good-ref version otherwise. Package managers
+ * resolve overrides and ranges their own way, so a pin that silently did not take effect would
+ * otherwise produce a confident wrong answer.
+ */
+export declare function checkLockedVersions(lockfileName: string, lockfileContent: string, updates: readonly BisectedPackage[], updated: ReadonlySet<string>): PinMismatch[];
+//# sourceMappingURL=pins.d.ts.map

package/dist/api/bisect/pins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pins.d.ts","sourceRoot":"","sources":["../../../src/api/bisect/pins.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAO9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAIlD,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,cAAc,CAAC;IAC/B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,GAAG;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAMhE;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,GAAG,EAAE,GAAG,IAAI,CA4BzE;AAYD,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,SAAS,eAAe,EAAE,EACnC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,GAC3B,WAAW,EAAE,CAWf"}

package/dist/api/bisect/pins.js

@@ -0,0 +1,83 @@
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import YAML from "yaml";
+import { setOverrideValue, } from "../../remediation/tools/apply-package-override/helpers.js";
+import { serializeManifest } from "../../remediation/tools/manifest-format.js";
+import { parseLockfileDependencies } from "../../scanner/lockfile-diff.js";
+const DIRECT_SECTIONS = ["dependencies", "devDependencies", "optionalDependencies"];
+/**
+ * Where a pin ends up, as a one-line description for the report.
+ */
+export function describePinMechanism(context) {
+    const direct = "direct dependencies: exact version in package.json; others: ";
+    if (context.packageManager === "pnpm") {
+        return `${direct}${(context.pnpmMajor ?? 0) >= 11 ? "overrides in pnpm-workspace.yaml" : "pnpm.overrides in package.json"}`;
+    }
+    return `${direct}${context.packageManager === "yarn" ? "resolutions" : "overrides"} in package.json`;
+}
+/**
+ * Hold each package at an exact version in the checkout, without touching its lockfile: direct
+ * dependencies get their range replaced by the exact version in the section(s) declaring them
+ * (npm refuses an override for a direct dependency), everything else goes through the package
+ * manager's own override field. The checkout is expected to be a fresh copy of the good ref.
+ */
+export function applyPins(context, pins) {
+    if (pins.length === 0)
+        return;
+    const manifestPath = join(context.dir, "package.json");
+    const original = readFileSync(manifestPath, "utf8");
+    const manifest = JSON.parse(original);
+    const overrides = [];
+    for (const pin of pins) {
+        let declared = false;
+        for (const section of DIRECT_SECTIONS) {
+            const entries = manifest[section];
+            if (entries && Object.hasOwn(entries, pin.packageName)) {
+                entries[pin.packageName] = pin.version;
+                declared = true;
+            }
+        }
+        if (!declared)
+            overrides.push(pin);
+    }
+    const useWorkspaceYaml = context.packageManager === "pnpm" && (context.pnpmMajor ?? 0) >= 11;
+    if (useWorkspaceYaml) {
+        if (overrides.length > 0)
+            writeWorkspaceOverrides(context.dir, overrides);
+    }
+    else {
+        for (const pin of overrides) {
+            setOverrideValue(manifest, context.packageManager, pin.packageName, pin.version);
+        }
+    }
+    writeFileSync(manifestPath, serializeManifest(original, manifest), "utf8");
+}
+/** Merge overrides into `pnpm-workspace.yaml`, keeping whatever else (and whatever comments) it has. */
+function writeWorkspaceOverrides(dir, overrides) {
+    const path = join(dir, "pnpm-workspace.yaml");
+    const document = existsSync(path)
+        ? YAML.parseDocument(readFileSync(path, "utf8"))
+        : new YAML.Document({});
+    for (const pin of overrides)
+        document.setIn(["overrides", pin.packageName], pin.version);
+    writeFileSync(path, document.toString(), "utf8");
+}
+/**
+ * Check that an installed state is the one that was asked for: every package in `updates` is at the
+ * bad-ref version if it is in `updated` and at the good-ref version otherwise. Package managers
+ * resolve overrides and ranges their own way, so a pin that silently did not take effect would
+ * otherwise produce a confident wrong answer.
+ */
+export function checkLockedVersions(lockfileName, lockfileContent, updates, updated) {
+    const locked = parseLockfileDependencies(lockfileName, lockfileContent);
+    const mismatches = [];
+    for (const update of updates) {
+        const expected = updated.has(update.packageName) ? update.toVersion : update.fromVersion;
+        const found = [...(locked.get(update.packageName) ?? [])].toSorted();
+        if (found.length !== 1 || found[0] !== expected) {
+            mismatches.push({ packageName: update.packageName, expected, found });
+        }
+    }
+    return mismatches;
+}
+//# sourceMappingURL=pins.js.map

package/dist/api/bisect/pins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pins.js","sourceRoot":"","sources":["../../../src/api/bisect/pins.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,OAAO,EACL,gBAAgB,GAEjB,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAG3E,MAAM,eAAe,GAAG,CAAC,cAAc,EAAE,iBAAiB,EAAE,sBAAsB,CAAU,CAAC;AAkB7F;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAmB;IACtD,MAAM,MAAM,GAAG,8DAA8D,CAAC;IAC9E,IAAI,OAAO,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;QACtC,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,gCAAgC,EAAE,CAAC;IAC9H,CAAC;IACD,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC;AACvG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,OAAmB,EAAE,IAAoB;IACjE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAmB,CAAC;IAExD,MAAM,SAAS,GAAU,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAuC,CAAC;YACxE,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;gBACvC,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,cAAc,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7F,IAAI,gBAAgB,EAAE,CAAC;QACrB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,uBAAuB,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IACD,aAAa,CAAC,YAAY,EAAE,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,wGAAwG;AACxG,SAAS,uBAAuB,CAAC,GAAW,EAAE,SAAyB;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,SAAS;QAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACzF,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAoB,EACpB,eAAuB,EACvB,OAAmC,EACnC,OAA4B;IAE5B,MAAM,MAAM,GAAG,yBAAyB,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACxE,MAAM,UAAU,GAAkB,EAAE,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACzF,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChD,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}