backlot 0.4.0

package/dist/core/manifest.d.ts

@@ -0,0 +1,76 @@
+export interface ReadySpec {
+    http?: string;
+    log?: string;
+    cmd?: string;
+    timeout?: number;
+}
+export interface ServiceSpec {
+    run: string;
+    build?: string;
+    watch_run?: string;
+    cwd?: string;
+    port?: string;
+    env?: Record<string, string>;
+    ready?: ReadySpec;
+    fatal_logs?: string;
+    depends_on?: string[];
+}
+export interface DatastoreSpec {
+    driver: 'sqlite' | 'postgres' | 'mssql' | 'mysql' | 'redis';
+    server?: 'external';
+    probe?: string;
+    url?: string;
+    create?: string;
+    drop?: string;
+    template_restore?: string;
+    presets?: string[];
+    default_preset?: {
+        run?: string;
+        session?: string;
+    };
+    template?: boolean;
+    ephemeral?: boolean;
+}
+export interface CheckSpec {
+    run: string;
+    cwd?: string;
+    env?: Record<string, string>;
+    artifacts?: string[];
+    /** Hard kill (whole process group) after this many seconds. Default 600. */
+    timeout?: number;
+}
+export interface UpkeepRule {
+    when: string;
+    run: string;
+}
+export interface Manifest {
+    name: string;
+    services: Record<string, ServiceSpec>;
+    datastores?: Record<string, DatastoreSpec>;
+    caches?: string[];
+    sync?: {
+        keep?: string[];
+        include?: string[];
+    };
+    outputs?: string[];
+    upkeep?: UpkeepRule[];
+    auth?: {
+        logins?: {
+            user: string;
+            password: string;
+        };
+        token?: string;
+    };
+    checks?: Record<string, CheckSpec>;
+}
+export interface Stack {
+    manifest: Manifest;
+    /** Directory containing stack.yaml — the sync source root. */
+    root: string;
+    /** Stable identity: pools are keyed by this. */
+    id: string;
+}
+/** Walk upward from cwd to the nearest stack.yaml. */
+export declare function findStackRoot(from: string): string;
+export declare function loadStack(from: string): Stack;
+export declare function defaultPreset(ds: DatastoreSpec, kind: 'run' | 'session'): string;

package/dist/core/manifest.js

@@ -0,0 +1,46 @@
+import { readFileSync, existsSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { parse } from 'yaml';
+import Ajv2020 from 'ajv/dist/2020.js';
+import { fileURLToPath } from 'node:url';
+import { BrokerError } from './util.js';
+const schemaPath = () => join(dirname(fileURLToPath(import.meta.url)), '..', '..', 'schema', 'stack.schema.json');
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+let validator;
+function validate(data) {
+    if (!validator) {
+        // ajv is CJS; the constructor lands on .default under real ESM interop.
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const AjvCtor = Ajv2020.default ?? Ajv2020;
+        const ajv = new AjvCtor({ allErrors: true });
+        validator = ajv.compile(JSON.parse(readFileSync(schemaPath(), 'utf8')));
+    }
+    if (!validator(data)) {
+        throw new BrokerError('work-error', `stack.yaml is invalid: ${JSON.stringify(validator.errors)}`, 'manifest');
+    }
+}
+/** Walk upward from cwd to the nearest stack.yaml. */
+export function findStackRoot(from) {
+    let dir = resolve(from);
+    for (;;) {
+        if (existsSync(join(dir, 'stack.yaml')))
+            return dir;
+        const parent = dirname(dir);
+        if (parent === dir) {
+            throw new BrokerError('work-error', `no stack.yaml found from ${from} upward`, 'manifest');
+        }
+        dir = parent;
+    }
+}
+export function loadStack(from) {
+    const root = findStackRoot(from);
+    const manifest = parse(readFileSync(join(root, 'stack.yaml'), 'utf8'));
+    validate(manifest);
+    // Identity = absolute root + declared name; filesystem-safe.
+    const id = `${manifest.name}-${Buffer.from(root).toString('base64url').slice(-8)}`;
+    return { manifest, root, id };
+}
+export function defaultPreset(ds, kind) {
+    return ds.default_preset?.[kind] ?? ds.presets?.[0] ?? 'default';
+}
+//# sourceMappingURL=manifest.js.map

package/dist/core/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/core/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,OAAO,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAqExC,MAAM,UAAU,GAAG,GAAG,EAAE,CACtB,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AAE3F,8DAA8D;AAC9D,IAAI,SAAc,CAAC;AACnB,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,wEAAwE;QACxE,8DAA8D;QAC9D,MAAM,OAAO,GAAS,OAAe,CAAC,OAAO,IAAI,OAAO,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,0BAA0B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAChH,CAAC;AACH,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,SAAS,CAAC;QACR,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QACpD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,4BAA4B,IAAI,SAAS,EAAE,UAAU,CAAC,CAAC;QAC7F,CAAC;QACD,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAa,CAAC;IACnF,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnB,6DAA6D;IAC7D,MAAM,EAAE,GAAG,GAAG,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAiB,EAAE,IAAuB;IACtE,OAAO,EAAE,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;AACnE,CAAC"}

package/dist/core/paths.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Per-machine state root (decision 0009). BACKLOT_STATE_DIR overrides — the
+ * isolation knob every integration test uses.
+ *
+ * Created 0700 and chmod-enforced every call: the daemon socket lives here and
+ * has NO application-level auth (README "Security model" — filesystem
+ * permissions ARE the auth), so no other local user may traverse in. We chmod
+ * even when the dir already exists, to repair a too-open pre-existing dir
+ * (e.g. one made before this hardening, or via a loose umask).
+ */
+export declare function stateRoot(): string;
+export declare const socketPath: () => string;
+export declare const pidPath: () => string;
+export declare const journalPath: () => string;
+export declare const envsRoot: () => string;
+export declare const templatesRoot: () => string;
+export declare const artifactsRoot: () => string;

package/dist/core/paths.js

@@ -0,0 +1,32 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { mkdirSync, chmodSync } from 'node:fs';
+/**
+ * Per-machine state root (decision 0009). BACKLOT_STATE_DIR overrides — the
+ * isolation knob every integration test uses.
+ *
+ * Created 0700 and chmod-enforced every call: the daemon socket lives here and
+ * has NO application-level auth (README "Security model" — filesystem
+ * permissions ARE the auth), so no other local user may traverse in. We chmod
+ * even when the dir already exists, to repair a too-open pre-existing dir
+ * (e.g. one made before this hardening, or via a loose umask).
+ */
+export function stateRoot() {
+    const root = process.env.BACKLOT_STATE_DIR ??
+        join(process.env.XDG_STATE_HOME ?? join(homedir(), '.local', 'state'), 'backlot');
+    mkdirSync(root, { recursive: true, mode: 0o700 });
+    try {
+        chmodSync(root, 0o700);
+    }
+    catch {
+        /* not the owner — leave it; the socket chmod below is the real gate */
+    }
+    return root;
+}
+export const socketPath = () => join(stateRoot(), 'daemon.sock');
+export const pidPath = () => join(stateRoot(), 'daemon.pid');
+export const journalPath = () => join(stateRoot(), 'journal.db');
+export const envsRoot = () => join(stateRoot(), 'envs');
+export const templatesRoot = () => join(stateRoot(), 'templates');
+export const artifactsRoot = () => join(stateRoot(), 'artifacts');
+//# sourceMappingURL=paths.js.map

package/dist/core/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAE/C;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,IAAI,GACR,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IACpF,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;AACzE,MAAM,CAAC,MAAM,OAAO,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,WAAW,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;AACzE,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,aAAa,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,aAAa,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC"}

package/dist/core/policy.d.ts

@@ -0,0 +1,15 @@
+export interface Policy {
+    poolMax: number;
+    sessionTtlMs: number;
+    runTtlMs: number;
+    idleTtlMs: number;
+    waitMs: number;
+    /** Retention knobs (task: disk sweep). */
+    artifactDays: number;
+    jobDays: number;
+    logCapBytes: number;
+    templatesKeep: number;
+}
+/** The designed capacity heuristic: min(cores/2, memGB/4), clamped to [1, 8]. */
+export declare function poolMaxHeuristic(): number;
+export declare function policy(): Policy;

package/dist/core/policy.js

@@ -0,0 +1,45 @@
+/**
+ * Engine policy — NEVER repo knowledge (the manifest carries none of this).
+ * Precedence per knob: env var > $STATE_DIR/config.json > heuristic/default.
+ */
+import { readFileSync } from 'node:fs';
+import { cpus, totalmem } from 'node:os';
+import { join } from 'node:path';
+import { stateRoot } from './paths.js';
+function configFile() {
+    try {
+        return JSON.parse(readFileSync(join(stateRoot(), 'config.json'), 'utf8'));
+    }
+    catch {
+        return {};
+    }
+}
+/** The designed capacity heuristic: min(cores/2, memGB/4), clamped to [1, 8]. */
+export function poolMaxHeuristic() {
+    const byCores = Math.floor(cpus().length / 2);
+    const byMem = Math.floor(totalmem() / (4 * 1024 ** 3));
+    return Math.max(1, Math.min(8, Math.min(byCores || 1, byMem || 1)));
+}
+const num = (envVar, fileVal, fallback) => {
+    const e = process.env[envVar];
+    if (e !== undefined && e !== '')
+        return Number(e);
+    if (fileVal !== undefined)
+        return fileVal;
+    return fallback;
+};
+export function policy() {
+    const f = configFile();
+    return {
+        poolMax: num('BACKLOT_POOL_MAX', f.poolMax, poolMaxHeuristic()),
+        sessionTtlMs: num('BACKLOT_LEASE_TTL_MS', f.sessionTtlMs, 30 * 60_000),
+        runTtlMs: num('BACKLOT_LEASE_TTL_MS', f.runTtlMs, 10 * 60_000),
+        idleTtlMs: num('BACKLOT_IDLE_TTL_MS', f.idleTtlMs, 30 * 60_000),
+        waitMs: num('BACKLOT_WAIT_MS', f.waitMs, 60_000),
+        artifactDays: num('BACKLOT_ARTIFACT_DAYS', f.artifactDays, 7),
+        jobDays: num('BACKLOT_JOB_DAYS', f.jobDays, 7),
+        logCapBytes: num('BACKLOT_LOG_CAP_BYTES', f.logCapBytes, 5 * 1024 * 1024),
+        templatesKeep: num('BACKLOT_TEMPLATES_KEEP', f.templatesKeep, 4),
+    };
+}
+//# sourceMappingURL=policy.js.map

package/dist/core/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/core/policy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AA2BvC,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAe,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,OAA2B,EAAE,QAAgB,EAAU,EAAE;IACpF,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC1C,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,UAAU,MAAM;IACpB,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;IACvB,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,gBAAgB,EAAE,CAAC;QAC/D,YAAY,EAAE,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,GAAG,MAAM,CAAC;QACtE,QAAQ,EAAE,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC;QAC9D,SAAS,EAAE,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC;QAC/D,MAAM,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC;QAChD,YAAY,EAAE,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QAC7D,OAAO,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,WAAW,EAAE,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;QACzE,aAAa,EAAE,GAAG,CAAC,wBAAwB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;KACjE,CAAC;AACJ,CAAC"}

package/dist/core/ports.d.ts

@@ -0,0 +1,3 @@
+export declare function probeFree(port: number): Promise<boolean>;
+/** OS-allocated free port — stable per environment once recorded (decision 0004). */
+export declare function freePort(): Promise<number>;

package/dist/core/ports.js

@@ -0,0 +1,22 @@
+import { createServer } from 'node:net';
+export function probeFree(port) {
+    return new Promise((resolve) => {
+        const srv = createServer();
+        srv.once('error', () => resolve(false));
+        srv.listen(port, '127.0.0.1', () => srv.close(() => resolve(true)));
+    });
+}
+/** OS-allocated free port — stable per environment once recorded (decision 0004). */
+export function freePort() {
+    return new Promise((resolve, reject) => {
+        const srv = createServer();
+        srv.listen(0, '127.0.0.1', () => {
+            const addr = srv.address();
+            if (addr && typeof addr === 'object')
+                srv.close(() => resolve(addr.port));
+            else
+                srv.close(() => reject(new Error('no port allocated')));
+        });
+    });
+}
+//# sourceMappingURL=ports.js.map

package/dist/core/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../src/core/ports.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,QAAQ;IACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;;gBACrE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/retention.d.ts

@@ -0,0 +1,19 @@
+import type { Journal } from './journal.js';
+import type { Policy } from './policy.js';
+/** Artifacts older than N days are pruned (verdict dirs are timestamped). */
+export declare function pruneArtifacts(p: Policy, root?: string): number;
+/** Service log files past the cap keep only their tail (in-place truncate). */
+export declare function truncateLogs(p: Policy, root?: string): number;
+/** Done jobs older than N days leave the journal. */
+export declare function pruneJobs(journal: Journal, p: Policy): number;
+/**
+ * Templates: keep the newest M per stack (a template whose seed-hash key is
+ * still current keeps being touched by binds; stale keys age out naturally).
+ */
+export declare function pruneTemplates(p: Policy, root?: string): number;
+export declare function retentionSweep(journal: Journal, p: Policy): {
+    artifacts: number;
+    logs: number;
+    jobs: number;
+    templates: number;
+};

package/dist/core/retention.js

@@ -0,0 +1,101 @@
+/**
+ * Disk retention: nothing backlot writes may grow forever. Called from the
+ * daemon sweeper (~10 min cadence); every function is idempotent, best-effort,
+ * and unit-testable in isolation.
+ */
+import { readdirSync, statSync, rmSync, readFileSync, writeFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { artifactsRoot, templatesRoot, envsRoot } from './paths.js';
+const dayMs = 24 * 60 * 60 * 1000;
+const entriesOf = (dir) => {
+    try {
+        return readdirSync(dir);
+    }
+    catch {
+        return [];
+    }
+};
+/** Artifacts older than N days are pruned (verdict dirs are timestamped). */
+export function pruneArtifacts(p, root = artifactsRoot()) {
+    let pruned = 0;
+    for (const envDir of entriesOf(root)) {
+        for (const runDir of entriesOf(join(root, envDir))) {
+            const full = join(root, envDir, runDir);
+            try {
+                if (Date.now() - statSync(full).mtimeMs > p.artifactDays * dayMs) {
+                    rmSync(full, { recursive: true, force: true });
+                    pruned++;
+                }
+            }
+            catch {
+                /* raced */
+            }
+        }
+        if (entriesOf(join(root, envDir)).length === 0)
+            rmSync(join(root, envDir), { recursive: true, force: true });
+    }
+    return pruned;
+}
+/** Service log files past the cap keep only their tail (in-place truncate). */
+export function truncateLogs(p, root = envsRoot()) {
+    let truncated = 0;
+    for (const envDir of entriesOf(root)) {
+        const logDir = join(root, envDir, 'logs');
+        for (const logFile of entriesOf(logDir)) {
+            const full = join(logDir, logFile);
+            try {
+                if (statSync(full).size > p.logCapBytes) {
+                    const content = readFileSync(full, 'utf8');
+                    const keep = content.slice(-Math.floor(p.logCapBytes / 4));
+                    writeFileSync(full, `[backlot: truncated by retention sweep]\n${keep}`);
+                    truncated++;
+                }
+            }
+            catch {
+                /* raced */
+            }
+        }
+    }
+    return truncated;
+}
+/** Done jobs older than N days leave the journal. */
+export function pruneJobs(journal, p) {
+    return journal.pruneJobs(Date.now() - p.jobDays * dayMs);
+}
+/**
+ * Templates: keep the newest M per stack (a template whose seed-hash key is
+ * still current keeps being touched by binds; stale keys age out naturally).
+ */
+export function pruneTemplates(p, root = templatesRoot()) {
+    let pruned = 0;
+    for (const stackDir of entriesOf(root)) {
+        const dir = join(root, stackDir);
+        if (!existsSync(dir))
+            continue;
+        const files = entriesOf(dir)
+            .map((f) => {
+            try {
+                return { f, mtime: statSync(join(dir, f)).mtimeMs };
+            }
+            catch {
+                return null;
+            }
+        })
+            .filter((x) => x !== null)
+            .sort((a, b) => b.mtime - a.mtime);
+        for (const { f } of files.slice(p.templatesKeep)) {
+            rmSync(join(dir, f), { force: true });
+            pruned++;
+        }
+    }
+    return pruned;
+}
+export function retentionSweep(journal, p) {
+    return {
+        artifacts: pruneArtifacts(p),
+        logs: truncateLogs(p),
+        jobs: pruneJobs(journal, p),
+        templates: pruneTemplates(p),
+    };
+}
+//# sourceMappingURL=retention.js.map

package/dist/core/retention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.js","sourceRoot":"","sources":["../../src/core/retention.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACjG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAIpE,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElC,MAAM,SAAS,GAAG,CAAC,GAAW,EAAY,EAAE;IAC1C,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,CAAS,EAAE,IAAI,GAAG,aAAa,EAAE;IAC9D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACxC,IAAI,CAAC;gBACH,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;oBACjE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC/C,MAAM,EAAE,CAAC;gBACX,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW;YACb,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,CAAS,EAAE,IAAI,GAAG,QAAQ,EAAE;IACvD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1C,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC;gBACH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;oBACxC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC3D,aAAa,CAAC,IAAI,EAAE,4CAA4C,IAAI,EAAE,CAAC,CAAC;oBACxE,SAAS,EAAE,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW;YACb,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,SAAS,CAAC,OAAgB,EAAE,CAAS;IACnD,OAAO,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,CAAS,EAAE,IAAI,GAAG,aAAa,EAAE;IAC9D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC;aACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,IAAI,CAAC;gBACH,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAqC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;aAC5D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACrC,KAAK,MAAM,EAAE,CAAC,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,MAAM,EAAE,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAgB,EAAE,CAAS;IACxD,OAAO;QACL,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;QAC5B,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3B,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;KAC7B,CAAC;AACJ,CAAC"}

package/dist/core/sync.d.ts

@@ -0,0 +1,15 @@
+import type { Manifest } from './manifest.js';
+export interface SyncResult {
+    copied: number;
+    deleted: number;
+    files: string[];
+    /** Hash of the full (path -> content hash) map: the binding's source identity. */
+    sourceHash: string;
+}
+export declare function syncIntoEnv(stackRoot: string, envTree: string, manifest: Manifest): SyncResult;
+/**
+ * Outputs contract (decision 0011): report env-side changes to declared
+ * outputs; copy back only on explicit pull.
+ */
+export declare function changedOutputs(stackRoot: string, envTree: string, manifest: Manifest): string[];
+export declare function pullOutputs(stackRoot: string, envTree: string, manifest: Manifest): string[];

package/dist/core/sync.js

@@ -0,0 +1,150 @@
+/**
+ * Bind-by-sync (decision 0005): project the consumer's worktree into the
+ * environment's own tree. Git decides what belongs to a binding (tracked +
+ * untracked-unignored under the stack root, plus sync.include); the copy is
+ * hash-gated. Deletions are mirrored from the previous binding's file list;
+ * caches and sync.keep survive. v0.1 transport is enumerate+copy — the
+ * fetch/patch optimization arrives with remote substrates (0.3).
+ *
+ * Performance: hashing is (size, mtime)-gated on BOTH sides. A file whose
+ * stat matches the per-env sync cache reuses its recorded hash, so a warm
+ * rebind of an unchanged 28k-file repo stats instead of re-hashing 2 GB.
+ * Correctness is preserved: any stat drift re-hashes, and the env-side stat
+ * check is what keeps the "tracked files restored hard" reset guarantee —
+ * a check that mutated a tracked env file is detected and overwritten.
+ */
+import { execFileSync } from 'node:child_process';
+import { copyFileSync, mkdirSync, rmSync, existsSync, readFileSync, writeFileSync, readdirSync, statSync, constants as fsConstants, } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileHash, matchesAny, sha256, isFile, safeJoin } from './util.js';
+function enumerate(stackRoot, manifest) {
+    let listed;
+    try {
+        const out = execFileSync('git', ['-C', stackRoot, 'ls-files', '-z', '--cached', '--others', '--exclude-standard', '--', '.'], { encoding: 'utf8', maxBuffer: 64 * 1024 * 1024 });
+        listed = out.split('\0').filter(Boolean);
+    }
+    catch {
+        // Not a git repo: fall back to everything (minus default noise).
+        listed = walkAll(stackRoot);
+    }
+    const include = manifest.sync?.include ?? [];
+    for (const inc of include) {
+        safeJoin(stackRoot, inc, 'sync.include'); // reject ../ or absolute before use
+        if (isFile(join(stackRoot, inc)) && !listed.includes(inc))
+            listed.push(inc);
+    }
+    // Tracked-but-deleted files still appear in ls-files --cached.
+    return listed.filter((f) => isFile(join(stackRoot, f)));
+}
+function walkAll(root, prefix = '') {
+    const out = [];
+    for (const name of readdirSync(join(root, prefix))) {
+        if (name === '.git' || name === 'node_modules')
+            continue;
+        const rel = prefix ? `${prefix}/${name}` : name;
+        if (statSync(join(root, rel)).isDirectory())
+            out.push(...walkAll(root, rel));
+        else
+            out.push(rel);
+    }
+    return out;
+}
+const cachePath = (envRoot) => join(envRoot, '.backlot-synced.json');
+function loadCache(envTree) {
+    try {
+        const raw = JSON.parse(readFileSync(cachePath(envTree), 'utf8'));
+        return Array.isArray(raw) ? {} : raw; // migrate from the v0.1 list format
+    }
+    catch {
+        return {};
+    }
+}
+const statOf = (p) => {
+    try {
+        const s = statSync(p);
+        return { size: s.size, mtime: s.mtimeMs };
+    }
+    catch {
+        return null;
+    }
+};
+export function syncIntoEnv(stackRoot, envTree, manifest) {
+    mkdirSync(envTree, { recursive: true });
+    const files = enumerate(stackRoot, manifest).sort();
+    const protectedPatterns = [...(manifest.caches ?? []), ...(manifest.sync?.keep ?? [])];
+    const prev = loadCache(envTree);
+    const next = {};
+    let copied = 0;
+    for (const rel of files) {
+        // git ls-files can't emit ../ but the sync.include path can — belt-and-suspenders
+        // so neither the copy nor the deletion-mirror below can ever leave envTree.
+        const dst = safeJoin(envTree, rel, 'synced file');
+        const src = join(stackRoot, rel);
+        const cached = prev[rel];
+        const srcStat = statOf(src);
+        // Source hash: stat-gated.
+        const srcHash = cached && cached.srcSize === srcStat.size && cached.srcMtime === srcStat.mtime
+            ? cached.hash
+            : fileHash(src);
+        // Env-side hash: stat-gated too (this is the reset guarantee — a mutated
+        // tracked file in the env has a drifted stat or hash and gets overwritten).
+        const dstStat = statOf(dst);
+        let dstHash = null;
+        if (dstStat) {
+            dstHash =
+                cached && cached.dstSize === dstStat.size && cached.dstMtime === dstStat.mtime
+                    ? cached.hash
+                    : fileHash(dst);
+        }
+        if (dstHash !== srcHash) {
+            mkdirSync(dirname(dst), { recursive: true });
+            copyFileSync(src, dst, fsConstants.COPYFILE_FICLONE); // CoW clone on APFS/reflink fs; falls back to copy
+            copied++;
+        }
+        const newDstStat = dstHash !== srcHash ? statOf(dst) : dstStat;
+        next[rel] = { hash: srcHash, srcSize: srcStat.size, srcMtime: srcStat.mtime, dstSize: newDstStat.size, dstMtime: newDstStat.mtime };
+    }
+    // Mirror deletions relative to the PREVIOUS binding, never touching caches/keep.
+    let deleted = 0;
+    for (const rel of Object.keys(prev)) {
+        if (next[rel] || matchesAny(rel, protectedPatterns))
+            continue;
+        let victim;
+        try {
+            victim = safeJoin(envTree, rel, 'synced file'); // never rm outside the env tree
+        }
+        catch {
+            continue; // a poisoned cache entry can't make us delete outside envTree
+        }
+        if (existsSync(victim)) {
+            rmSync(victim, { force: true });
+            deleted++;
+        }
+    }
+    writeFileSync(cachePath(envTree), JSON.stringify(next));
+    const sourceHash = sha256(files.map((f) => `${f}:${next[f].hash}`).join('\n'));
+    return { copied, deleted, files, sourceHash };
+}
+/**
+ * Outputs contract (decision 0011): report env-side changes to declared
+ * outputs; copy back only on explicit pull.
+ */
+export function changedOutputs(stackRoot, envTree, manifest) {
+    return (manifest.outputs ?? []).filter((rel) => {
+        const envH = fileHash(join(envTree, rel));
+        return envH !== null && envH !== fileHash(join(stackRoot, rel));
+    });
+}
+export function pullOutputs(stackRoot, envTree, manifest) {
+    const changed = changedOutputs(stackRoot, envTree, manifest);
+    for (const rel of changed) {
+        // outputs write BACK into the worktree — must never escape it (a rogue
+        // '../../.bashrc' output would otherwise be overwritten from env content).
+        const dst = safeJoin(stackRoot, rel, 'outputs');
+        const src = safeJoin(envTree, rel, 'outputs');
+        mkdirSync(dirname(dst), { recursive: true });
+        copyFileSync(src, dst, fsConstants.COPYFILE_FICLONE);
+    }
+    return changed;
+}
+//# sourceMappingURL=sync.js.map

package/dist/core/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../src/core/sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EACxE,WAAW,EAAE,QAAQ,EAAE,SAAS,IAAI,WAAW,GAChD,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAoB3E,SAAS,SAAS,CAAC,SAAiB,EAAE,QAAkB;IACtD,IAAI,MAAgB,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CACtB,KAAK,EACL,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,GAAG,CAAC,EAC5F,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAClD,CAAC;QACF,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,oCAAoC;QAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,+DAA+D;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,MAAM,GAAG,EAAE;IACxC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACnD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,cAAc;YAAE,SAAS;QACzD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;;YACxE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;AAE7E,SAAS,SAAS,CAAC,OAAe;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,GAAiB,CAAC,CAAC,oCAAoC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAA0C,EAAE;IACnE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,SAAiB,EAAE,OAAe,EAAE,QAAkB;IAChF,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,iBAAiB,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,IAAI,GAAc,EAAE,CAAC;IAE3B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,kFAAkF;QAClF,4EAA4E;QAC5E,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAE,CAAC;QAE7B,2BAA2B;QAC3B,MAAM,OAAO,GACX,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,KAAK;YAC5E,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAE,CAAC;QAErB,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;gBACL,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,KAAK;oBAC5E,CAAC,CAAC,MAAM,CAAC,IAAI;oBACb,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,mDAAmD;YACzG,MAAM,EAAE,CAAC;QACX,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,OAAQ,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IACtI,CAAC;IAED,iFAAiF;IACjF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,GAAG,EAAE,iBAAiB,CAAC;YAAE,SAAS;QAC9D,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,gCAAgC;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,8DAA8D;QAC1E,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAExD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,OAAe,EAAE,QAAkB;IACnF,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1C,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAiB,EAAE,OAAe,EAAE,QAAkB;IAChF,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,uEAAuE;QACvE,2EAA2E;QAC3E,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAC9C,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}