codebase-onboarder 0.6.0 → 1.0.0

package/server/gitDiff.d.ts

@@ -0,0 +1,36 @@
+import type { GitDiff, ReviewMode } from '../shared/review/contracts.js';
+export interface DiffOptions {
+    base?: string;
+    head?: string;
+    file?: string;
+    mode?: ReviewMode;
+    includeUntracked?: boolean;
+    signal?: AbortSignal;
+}
+export declare class GitDiffError extends Error {
+    status: number;
+    constructor(message: string, status?: number);
+}
+export declare function getGitRefs(root: string): Promise<{
+    available: boolean;
+    branches: string[];
+    tags: string[];
+    current: string;
+    commits: {
+        hash: string;
+        short: string;
+        message: string;
+        author: string;
+        date: string;
+    }[];
+    reason?: undefined;
+} | {
+    branches?: undefined;
+    tags?: undefined;
+    current?: undefined;
+    commits?: undefined;
+    available: boolean;
+    reason: string;
+}>;
+export declare function getGitDiff(root: string, options?: DiffOptions): Promise<GitDiff>;
+export declare function parseUnifiedDiff(diffText: string): GitDiff;

package/server/gitDiff.js

@@ -1,184 +1,286 @@
-// Git diff & refs provider.
-// Executes git subcommands safely via child_process and parses patch hunks.
-
+// Bounded, shell-free Git comparisons. A failed range must never become another diff.
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-
+import { lstat, readFile, realpath } from 'node:fs/promises';
+import { isInside, resolveInside } from './paths.js';
 const execFileAsync = promisify(execFile);
-const MAX_DIFF_BYTES = 5 * 1024 * 1024; // 5 MB cap
-
-export async function getGitRefs(root) {
-  try {
-    const [branchRes, tagRes, headRes, logRes] = await Promise.all([
-      execFileAsync('git', ['branch', '-a', '--format=%(refname:short)'], { cwd: root }).catch(() => ({ stdout: '' })),
-      execFileAsync('git', ['tag', '--sort=-creatordate'], { cwd: root }).catch(() => ({ stdout: '' })),
-      execFileAsync('git', ['rev-parse', '--abbrev-ref', 'HEAD'], { cwd: root }).catch(() => ({ stdout: 'main\n' })),
-      execFileAsync('git', ['log', '-n', '40', '--format=%H|%h|%s|%an|%aI'], { cwd: root }).catch(() => ({ stdout: '' })),
-    ]);
-
-    const branches = branchRes.stdout.split('\n').map((b) => b.trim()).filter(Boolean);
-    const tags = tagRes.stdout.split('\n').map((t) => t.trim()).filter(Boolean);
-    const current = headRes.stdout.trim() || 'HEAD';
-
-    const commits = logRes.stdout.split('\n').filter(Boolean).map((line) => {
-      const [hash, short, message, author, date] = line.split('|');
-      return { hash, short, message, author, date };
-    });
-
-    return {
-      available: true,
-      branches: [...new Set(branches)],
-      tags,
-      current,
-      commits,
-    };
-  } catch (err) {
-    return { available: false, reason: err.message };
-  }
+const MAX_DIFF_BYTES = 5 * 1024 * 1024;
+const EMPTY_TREE = '4b825dc642cb6eb9a060e54bf8d69288fbee4904';
+export class GitDiffError extends Error {
+    status;
+    constructor(message, status = 422) {
+        super(message);
+        this.status = status;
+        this.name = 'GitDiffError';
+    }
 }
-
-export async function getGitDiff(root, options = {}) {
-  const { base, head, file } = options;
-  const args = ['diff', '--no-color', '-U3'];
-
-  if (base && head) {
-    args.push(`${base}...${head}`);
-  } else if (base) {
-    args.push(base);
-  } else {
-    args.push('HEAD');
-  }
-
-  if (file) {
-    args.push('--', file);
-  }
-
-  try {
-    const { stdout } = await execFileAsync('git', args, {
-      cwd: root,
-      maxBuffer: MAX_DIFF_BYTES,
-    });
-    return parseUnifiedDiff(stdout);
-  } catch (err) {
-    // If git diff exited with empty or specific error, fallback to HEAD~1..HEAD or working tree
+async function git(root, args, signal) {
     try {
-      const fallback = await execFileAsync('git', ['diff', '--no-color', '-U3'], {
-        cwd: root,
-        maxBuffer: MAX_DIFF_BYTES,
-      });
-      return parseUnifiedDiff(fallback.stdout);
-    } catch (e) {
-      return { files: [], stats: { filesChanged: 0, additions: 0, deletions: 0 }, raw: '' };
+        const { stdout } = await execFileAsync('git', ['--literal-pathspecs', '-c', 'core.quotePath=false', ...args], {
+            cwd: root, maxBuffer: MAX_DIFF_BYTES, timeout: 15000, killSignal: 'SIGKILL', signal,
+            env: { ...process.env, GIT_OPTIONAL_LOCKS: '0' },
+        });
+        return stdout;
+    }
+    catch (error) {
+        if (signal?.aborted)
+            throw error;
+        const e = error;
+        if (e.code === 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER')
+            throw new GitDiffError('This diff exceeds the 5 MB review limit. Choose a smaller range.', 413);
+        if (e.killed)
+            throw new GitDiffError('Git took too long. Choose a smaller comparison and try again.', 408);
+        throw new GitDiffError('Git could not read this comparison. Check the repository and its available history.');
     }
-  }
 }
-
-export function parseUnifiedDiff(diffText) {
-  if (!diffText || typeof diffText !== 'string') {
-    return { files: [], stats: { filesChanged: 0, additions: 0, deletions: 0 }, raw: '' };
-  }
-
-  const files = [];
-  const lines = diffText.split('\n');
-  let currentFile = null;
-  let currentHunk = null;
-  let totalAdditions = 0;
-  let totalDeletions = 0;
-
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i];
-
-    // File header: diff --git a/path b/path
-    if (line.startsWith('diff --git ')) {
-      const m = line.match(/^diff --git a\/(.+?) b\/(.+)$/);
-      const oldPath = m ? m[1] : '';
-      const newPath = m ? m[2] : '';
-      currentFile = {
-        oldPath,
-        newPath,
-        status: 'modified',
-        additions: 0,
-        deletions: 0,
-        hunks: [],
-      };
-      files.push(currentFile);
-      currentHunk = null;
-      continue;
+async function resolveRef(root, ref, signal) {
+    if (!ref || ref.length > 200 || ref.startsWith('-') || !/^[a-zA-Z0-9_./~^@{}-]+$/.test(ref))
+        throw new GitDiffError('Use a valid branch, tag, or commit reference.', 400);
+    try {
+        return (await git(root, ['rev-parse', '--verify', '--end-of-options', ref + '^{commit}'], signal)).trim();
+    }
+    catch (e) {
+        if (signal?.aborted || (e instanceof GitDiffError && e.status !== 422))
+            throw e;
+        throw new GitDiffError(`Reference "${ref}" is unavailable. Shallow clones may not contain older commits.`);
+    }
+}
+export async function getGitRefs(root) {
+    try {
+        await git(root, ['rev-parse', '--is-inside-work-tree']);
+        const [branches, tags, current, log] = await Promise.all([
+            git(root, ['branch', '-a', '--format=%(refname:short)']),
+            git(root, ['tag', '--sort=-creatordate']),
+            git(root, ['symbolic-ref', '--short', 'HEAD']).catch(() => 'HEAD'),
+            git(root, ['log', '-n', '40', '--format=%H%x00%h%x00%s%x00%an%x00%aI']).catch(() => ''),
+        ]);
+        return { available: true, branches: branches.trim().split('\n').filter(Boolean), tags: tags.trim().split('\n').filter(Boolean), current: current.trim(),
+            commits: log.trim().split('\n').filter(Boolean).map(line => { const [hash, short, message, author, date] = line.split('\0'); return { hash, short, message, author, date }; }) };
     }
-
-    if (!currentFile) continue;
-
-    if (line.startsWith('new file mode ')) {
-      currentFile.status = 'added';
-      continue;
+    catch (err) {
+        return { available: false, reason: err instanceof Error ? err.message : 'Git unavailable.' };
     }
-    if (line.startsWith('deleted file mode ')) {
-      currentFile.status = 'deleted';
-      continue;
+}
+export async function getGitDiff(root, options = {}) {
+    const { base = 'HEAD', head = '', file = '', includeUntracked = false, signal } = options;
+    const mode = options.mode || (head ? 'range' : 'working');
+    if (!['working', 'staged', 'range'].includes(mode))
+        throw new GitDiffError('Choose working, staged, or range review.', 400);
+    if (mode === 'range' && !head)
+        throw new GitDiffError('A branch comparison needs a head reference.', 400);
+    await git(root, ['rev-parse', '--is-inside-work-tree'], signal);
+    const repoRoot = (await git(root, ['rev-parse', '--show-toplevel'], signal)).trim();
+    if (await realpath(root) !== await realpath(repoRoot))
+        throw new GitDiffError('Open the Git repository root to review changes. A subfolder scan cannot read changes outside its scan root.', 400);
+    let baseHash;
+    try {
+        baseHash = await resolveRef(root, base || 'HEAD', signal);
     }
-    if (line.startsWith('rename from ')) {
-      currentFile.status = 'renamed';
-      currentFile.oldPath = line.slice(12).trim();
-      continue;
+    catch (error) {
+        // An unborn repository has no HEAD. Only that explicit default is allowed.
+        if ((base || 'HEAD') !== 'HEAD' || mode === 'range' || signal?.aborted)
+            throw error;
+        const count = (await git(root, ['rev-list', '--all', '--count'], signal)).trim();
+        if (count !== '0')
+            throw error;
+        baseHash = EMPTY_TREE;
     }
-    if (line.startsWith('rename to ')) {
-      currentFile.newPath = line.slice(10).trim();
-      continue;
+    const headHash = mode === 'range' ? await resolveRef(root, head, signal) : '';
+    const args = ['diff', '--no-color', '--no-ext-diff', '--no-textconv', '-U3'];
+    if (mode === 'staged')
+        args.push('--cached');
+    args.push(headHash ? `${baseHash}...${headHash}` : baseHash, '--');
+    if (file)
+        args.push(file);
+    let raw = await git(root, args, signal);
+    let untracked = 0;
+    if (includeUntracked && mode === 'working' && !file) {
+        const names = (await git(root, ['ls-files', '--others', '--exclude-standard', '-z'], signal)).split('\0').filter(Boolean);
+        if (names.length > 200)
+            throw new GitDiffError('More than 200 untracked files. Stage selected files or narrow the repository before reviewing.', 413);
+        const canonicalRoot = await realpath(root);
+        for (const name of names) {
+            signal?.throwIfAborted();
+            const abs = resolveInside(root, name);
+            if (!abs)
+                throw new GitDiffError('An untracked path is outside this repository.');
+            const st = await lstat(abs);
+            if (st.isSymbolicLink()) {
+                raw += `diff --git ${JSON.stringify('a/' + name)} ${JSON.stringify('b/' + name)}\nnew file mode 120000\nonboarder skipped symlink\n`;
+                untracked++;
+                continue;
+            }
+            if (!st.isFile())
+                continue;
+            if (!isInside(canonicalRoot, await realpath(abs)))
+                throw new GitDiffError('An untracked path resolves outside this repository.');
+            if (st.size > 1024 * 1024)
+                throw new GitDiffError(`Untracked file "${name}" exceeds the 1 MB limit. Stage it to review its Git diff.`, 413);
+            const buffer = await readFile(abs);
+            if (buffer.byteLength > 1024 * 1024)
+                throw new GitDiffError('An untracked file grew beyond the review limit.', 413);
+            const header = `diff --git ${JSON.stringify('a/' + name)} ${JSON.stringify('b/' + name)}\nnew file mode 100644\n`;
+            if (buffer.includes(0))
+                raw += header + `Binary files /dev/null and ${name} differ\n`;
+            else {
+                const source = buffer.toString('utf8');
+                const lines = source === '' ? [] : source.replace(/\n$/, '').split('\n');
+                raw += header + `--- /dev/null\n+++ ${JSON.stringify('b/' + name)}\n@@ -0,0 +1,${lines.length} @@\n` + lines.map(l => '+' + l + '\n').join('');
+            }
+            untracked++;
+            if (Buffer.byteLength(raw) > MAX_DIFF_BYTES)
+                throw new GitDiffError('This diff exceeds the 5 MB review limit.', 413);
+        }
     }
-
-    // Hunk header: @@ -1,5 +1,6 @@ optional context
-    if (line.startsWith('@@ ')) {
-      const match = line.match(/^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@(.*)$/);
-      if (match) {
-        const oldStart = parseInt(match[1], 10);
-        const oldLines = match[2] !== undefined ? parseInt(match[2], 10) : 1;
-        const newStart = parseInt(match[3], 10);
-        const newLines = match[4] !== undefined ? parseInt(match[4], 10) : 1;
-        currentHunk = {
-          header: line,
-          oldStart,
-          oldLines,
-          newStart,
-          newLines,
-          heading: match[5]?.trim() || '',
-          lines: [],
-        };
-        currentFile.hunks.push(currentHunk);
-      }
-      continue;
+    return { ...parseUnifiedDiff(raw), base: baseHash, head: headHash, mode, untracked };
+}
+function decodeGitPath(value) {
+    if (!value.startsWith('"'))
+        return value;
+    // Git quotes control characters and sometimes octal UTF-8 bytes.
+    const bytes = [];
+    for (let i = 1; i < value.length - 1; i++) {
+        if (value[i] === '\\') {
+            const octal = value.slice(i + 1).match(/^[0-7]{1,3}/)?.[0];
+            if (octal) {
+                bytes.push(parseInt(octal, 8));
+                i += octal.length;
+                continue;
+            }
+            const escaped = { n: '\n', t: '\t', r: '\r', b: '\b', f: '\f', v: '\v', a: '\x07' };
+            bytes.push(...Buffer.from(escaped[value[++i]] ?? value[i]));
+        }
+        else {
+            const cp = value.codePointAt(i);
+            bytes.push(...Buffer.from(String.fromCodePoint(cp)));
+            if (cp > 0xffff)
+                i++;
+        }
     }
-
-    if (!currentHunk) continue;
-
-    if (line.startsWith('+') && !line.startsWith('+++')) {
-      currentFile.additions++;
-      totalAdditions++;
-      currentHunk.lines.push({
-        type: 'add',
-        text: line.slice(1),
-      });
-    } else if (line.startsWith('-') && !line.startsWith('---')) {
-      currentFile.deletions++;
-      totalDeletions++;
-      currentHunk.lines.push({
-        type: 'del',
-        text: line.slice(1),
-      });
-    } else if (line.startsWith(' ')) {
-      currentHunk.lines.push({
-        type: 'context',
-        text: line.slice(1),
-      });
+    return Buffer.from(bytes).toString('utf8');
+}
+export function parseUnifiedDiff(diffText) {
+    if (!diffText || typeof diffText !== 'string') {
+        return { files: [], stats: { filesChanged: 0, additions: 0, deletions: 0 }, raw: '' };
+    }
+    const files = [];
+    const lines = diffText.split('\n');
+    let currentFile = null;
+    let currentHunk = null;
+    let totalAdditions = 0;
+    let totalDeletions = 0;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        // File header: diff --git a/path b/path
+        if (line.startsWith('diff --git ')) {
+            const m = line.match(/^diff --git (\"(?:[^\"\\]|\\.)*\"|a\/.*?) (\"(?:[^\"\\]|\\.)*\"|b\/.*)$/);
+            const oldPath = m ? decodeGitPath(m[1]).slice(2) : '';
+            const newPath = m ? decodeGitPath(m[2]).slice(2) : '';
+            currentFile = {
+                oldPath,
+                newPath,
+                status: 'modified',
+                additions: 0,
+                deletions: 0,
+                hunks: [],
+            };
+            files.push(currentFile);
+            currentHunk = null;
+            continue;
+        }
+        if (!currentFile)
+            continue;
+        // File markers disambiguate unquoted paths containing " b/" in the header.
+        if (!currentHunk && (line.startsWith('--- ') || line.startsWith('+++ '))) {
+            const value = line.slice(4);
+            const markerPath = decodeGitPath(value.startsWith('"') ? value : value.split('\t')[0]);
+            if (markerPath !== '/dev/null') {
+                if (line.startsWith('--- '))
+                    currentFile.oldPath = markerPath.slice(2);
+                else
+                    currentFile.newPath = markerPath.slice(2);
+            }
+            continue;
+        }
+        if (line === 'onboarder skipped symlink') {
+            currentFile.skipReason = 'Untracked symlink: target not read';
+            continue;
+        }
+        if (line.startsWith('Binary files ') || line === 'GIT binary patch') {
+            currentFile.binary = true;
+            continue;
+        }
+        if (line.startsWith('new file mode ')) {
+            currentFile.status = 'added';
+            continue;
+        }
+        if (line.startsWith('deleted file mode ')) {
+            currentFile.status = 'deleted';
+            continue;
+        }
+        if (line.startsWith('rename from ')) {
+            currentFile.status = 'renamed';
+            currentFile.oldPath = decodeGitPath(line.slice(12));
+            continue;
+        }
+        if (line.startsWith('rename to ')) {
+            currentFile.newPath = decodeGitPath(line.slice(10));
+            continue;
+        }
+        // Hunk header: @@ -1,5 +1,6 @@ optional context
+        if (line.startsWith('@@ ')) {
+            const match = line.match(/^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@(.*)$/);
+            if (match) {
+                const oldStart = parseInt(match[1], 10);
+                const oldLines = match[2] !== undefined ? parseInt(match[2], 10) : 1;
+                const newStart = parseInt(match[3], 10);
+                const newLines = match[4] !== undefined ? parseInt(match[4], 10) : 1;
+                currentHunk = {
+                    header: line,
+                    oldStart,
+                    oldLines,
+                    newStart,
+                    newLines,
+                    heading: match[5]?.trim() || '',
+                    lines: [],
+                };
+                currentFile.hunks.push(currentHunk);
+            }
+            continue;
+        }
+        if (!currentHunk)
+            continue;
+        if (line.startsWith('+')) {
+            currentFile.additions++;
+            totalAdditions++;
+            currentHunk.lines.push({
+                type: 'add',
+                text: line.slice(1),
+            });
+        }
+        else if (line.startsWith('-')) {
+            currentFile.deletions++;
+            totalDeletions++;
+            currentHunk.lines.push({
+                type: 'del',
+                text: line.slice(1),
+            });
+        }
+        else if (line.startsWith(' ')) {
+            currentHunk.lines.push({
+                type: 'context',
+                text: line.slice(1),
+            });
+        }
     }
-  }
-
-  return {
-    files,
-    stats: {
-      filesChanged: files.length,
-      additions: totalAdditions,
-      deletions: totalDeletions,
-    },
-    raw: diffText,
-  };
+    return {
+        files,
+        stats: {
+            filesChanged: files.length,
+            additions: totalAdditions,
+            deletions: totalDeletions,
+        },
+        raw: diffText,
+    };
 }
+//# sourceMappingURL=gitDiff.js.map

package/server/gitDiff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitDiff.js","sourceRoot":"","sources":["../src/server/gitDiff.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,UAAU,GAAG,0CAA0C,CAAC;AAG9D,MAAM,OAAO,YAAa,SAAQ,KAAK;IACD,MAAM;IAA1C,YAAY,OAAe,EAAS,MAAM,GAAG,GAAG;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;sBAA/B,MAAM;QAA0B,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAAC,CAAC;CAClG;AACD,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,IAAc,EAAE,MAAoB;IACnE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,IAAI,CAAC,EAAE;YAC5G,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM;YACnF,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE;SACjD,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,KAAK,CAAC;QACjC,MAAM,CAAC,GAAG,KAA4C,CAAC;QACvD,IAAI,CAAC,CAAC,IAAI,KAAK,mCAAmC;YAAE,MAAM,IAAI,YAAY,CAAC,kEAAkE,EAAE,GAAG,CAAC,CAAC;QACpJ,IAAI,CAAC,CAAC,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,+DAA+D,EAAE,GAAG,CAAC,CAAC;QAC3G,MAAM,IAAI,YAAY,CAAC,qFAAqF,CAAC,CAAC;IAChH,CAAC;AACH,CAAC;AACD,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,GAAW,EAAE,MAAoB;IACvE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAC;IAC1K,IAAI,CAAC;QAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,GAAG,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAClH,OAAO,CAAC,EAAE,CAAC;QAAC,IAAI,MAAM,EAAE,OAAO,IAAI,CAAC,CAAC,YAAY,YAAY,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC;YAAE,MAAM,CAAC,CAAC;QAAC,MAAM,IAAI,YAAY,CAAC,cAAc,GAAG,iEAAiE,CAAC,CAAC;IAAC,CAAC;AAC5M,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvD,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,2BAA2B,CAAC,CAAC;YACxD,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YACzC,GAAG,CAAC,IAAI,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;YAClE,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,uCAAuC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;SACxF,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YACrJ,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAAC,CAAC;AACjH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,OAAO,GAAgB,EAAE;IACtE,MAAM,EAAE,IAAI,GAAG,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,EAAE,gBAAgB,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC1F,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;IAC5H,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,YAAY,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;IAC1G,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpF,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,MAAM,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,6GAA6G,EAAE,GAAG,CAAC,CAAC;IAClM,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QAAC,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAClE,OAAO,KAAK,EAAE,CAAC;QACb,2EAA2E;QAC3E,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,KAAK,CAAC;QACpF,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjF,IAAI,KAAK,KAAK,GAAG;YAAE,MAAM,KAAK,CAAC;QAC/B,QAAQ,GAAG,UAAU,CAAC;IACxB,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;IAC7E,IAAI,IAAI,KAAK,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnE,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,gBAAgB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1H,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,IAAI,YAAY,CAAC,gGAAgG,EAAE,GAAG,CAAC,CAAC;QACtJ,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,YAAY,CAAC,+CAA+C,CAAC,CAAC;YAClF,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;gBACxB,GAAG,IAAI,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,qDAAqD,CAAC;gBAAC,SAAS,EAAE,CAAC;gBAAC,SAAS;YAC9J,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC3B,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,qDAAqD,CAAC,CAAC;YACjI,IAAI,EAAE,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,IAAI,4DAA4D,EAAE,GAAG,CAAC,CAAC;YAC5I,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,MAAM,CAAC,UAAU,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,YAAY,CAAC,iDAAiD,EAAE,GAAG,CAAC,CAAC;YACpH,MAAM,MAAM,GAAG,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,0BAA0B,CAAC;YAClH,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,GAAG,IAAI,MAAM,GAAG,8BAA8B,IAAI,WAAW,CAAC;iBACjF,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACvC,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzE,GAAG,IAAI,MAAM,GAAG,sBAAsB,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,gBAAgB,KAAK,CAAC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjJ,CAAC;YACD,SAAS,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,cAAc;gBAAE,MAAM,IAAI,YAAY,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACvF,CAAC;AACD,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,iEAAiE;IACjE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3D,IAAI,KAAK,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC3E,MAAM,OAAO,GAA2B,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;YAC5G,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YAAC,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,EAAE,GAAG,MAAM;gBAAE,CAAC,EAAE,CAAC;QAAC,CAAC;IAC1H,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACxF,CAAC;IAED,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,WAAW,GAAqB,IAAI,CAAC;IACzC,IAAI,WAAW,GAAqB,IAAI,CAAC;IACzC,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtB,wCAAwC;QACxC,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;YAChG,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,WAAW,GAAG;gBACZ,OAAO;gBACP,OAAO;gBACP,MAAM,EAAE,UAAU;gBAClB,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,CAAC;gBACZ,KAAK,EAAE,EAAE;aACV,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxB,WAAW,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QAED,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,2EAA2E;QAC3E,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;gBAC/B,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,WAAW,CAAC,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;;oBAClE,WAAW,CAAC,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;YAAC,WAAW,CAAC,UAAU,GAAG,oCAAoC,CAAC;YAAC,SAAS;QAAC,CAAC;QACtH,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAE7G,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtC,WAAW,CAAC,MAAM,GAAG,OAAO,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC1C,WAAW,CAAC,MAAM,GAAG,SAAS,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACpC,WAAW,CAAC,MAAM,GAAG,SAAS,CAAC;YAC/B,WAAW,CAAC,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAClC,WAAW,CAAC,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QAED,gDAAgD;QAChD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAC7E,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrE,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrE,WAAW,GAAG;oBACZ,MAAM,EAAE,IAAI;oBACZ,QAAQ;oBACR,QAAQ;oBACR,QAAQ;oBACR,QAAQ;oBACR,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;oBAC/B,KAAK,EAAE,EAAE;iBACV,CAAC;gBACF,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,CAAC,WAAW;YAAE,SAAS;QAE3B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,WAAW,CAAC,SAAS,EAAE,CAAC;YACxB,cAAc,EAAE,CAAC;YACjB,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;gBACrB,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;aACpB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,WAAW,CAAC,SAAS,EAAE,CAAC;YACxB,cAAc,EAAE,CAAC;YACjB,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;gBACrB,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;aACpB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;gBACrB,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,KAAK,EAAE;YACL,YAAY,EAAE,KAAK,CAAC,MAAM;YAC1B,SAAS,EAAE,cAAc;YACzB,SAAS,EAAE,cAAc;SAC1B;QACD,GAAG,EAAE,QAAQ;KACd,CAAC;AACJ,CAAC","sourcesContent":["// Bounded, shell-free Git comparisons. A failed range must never become another diff.\nimport { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport { lstat, readFile, realpath } from 'node:fs/promises';\nimport { isInside, resolveInside } from './paths.js';\nimport type { GitDiff, PatchFile, PatchHunk, ReviewMode } from '../shared/review/contracts.js';\nconst execFileAsync = promisify(execFile);\nconst MAX_DIFF_BYTES = 5 * 1024 * 1024;\nconst EMPTY_TREE = '4b825dc642cb6eb9a060e54bf8d69288fbee4904';\nexport interface DiffOptions { base?: string; head?: string; file?: string; mode?: ReviewMode; includeUntracked?: boolean; signal?: AbortSignal }\n\nexport class GitDiffError extends Error {\n  constructor(message: string, public status = 422) { super(message); this.name = 'GitDiffError'; }\n}\nasync function git(root: string, args: string[], signal?: AbortSignal): Promise<string> {\n  try {\n    const { stdout } = await execFileAsync('git', ['--literal-pathspecs', '-c', 'core.quotePath=false', ...args], {\n      cwd: root, maxBuffer: MAX_DIFF_BYTES, timeout: 15000, killSignal: 'SIGKILL', signal,\n      env: { ...process.env, GIT_OPTIONAL_LOCKS: '0' },\n    });\n    return stdout;\n  } catch (error) {\n    if (signal?.aborted) throw error;\n    const e = error as { code?: string; killed?: boolean };\n    if (e.code === 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER') throw new GitDiffError('This diff exceeds the 5 MB review limit. Choose a smaller range.', 413);\n    if (e.killed) throw new GitDiffError('Git took too long. Choose a smaller comparison and try again.', 408);\n    throw new GitDiffError('Git could not read this comparison. Check the repository and its available history.');\n  }\n}\nasync function resolveRef(root: string, ref: string, signal?: AbortSignal): Promise<string> {\n  if (!ref || ref.length > 200 || ref.startsWith('-') || !/^[a-zA-Z0-9_./~^@{}-]+$/.test(ref)) throw new GitDiffError('Use a valid branch, tag, or commit reference.', 400);\n  try { return (await git(root, ['rev-parse', '--verify', '--end-of-options', ref + '^{commit}'], signal)).trim(); }\n  catch (e) { if (signal?.aborted || (e instanceof GitDiffError && e.status !== 422)) throw e; throw new GitDiffError(`Reference \"${ref}\" is unavailable. Shallow clones may not contain older commits.`); }\n}\nexport async function getGitRefs(root: string) {\n  try {\n    await git(root, ['rev-parse', '--is-inside-work-tree']);\n    const [branches, tags, current, log] = await Promise.all([\n      git(root, ['branch', '-a', '--format=%(refname:short)']),\n      git(root, ['tag', '--sort=-creatordate']),\n      git(root, ['symbolic-ref', '--short', 'HEAD']).catch(() => 'HEAD'),\n      git(root, ['log', '-n', '40', '--format=%H%x00%h%x00%s%x00%an%x00%aI']).catch(() => ''),\n    ]);\n    return { available: true, branches: branches.trim().split('\\n').filter(Boolean), tags: tags.trim().split('\\n').filter(Boolean), current: current.trim(),\n      commits: log.trim().split('\\n').filter(Boolean).map(line => { const [hash, short, message, author, date] = line.split('\\0'); return { hash, short, message, author, date }; }) };\n  } catch (err) { return { available: false, reason: err instanceof Error ? err.message : 'Git unavailable.' }; }\n}\nexport async function getGitDiff(root: string, options: DiffOptions = {}): Promise<GitDiff> {\n  const { base = 'HEAD', head = '', file = '', includeUntracked = false, signal } = options;\n  const mode = options.mode || (head ? 'range' : 'working');\n  if (!['working', 'staged', 'range'].includes(mode)) throw new GitDiffError('Choose working, staged, or range review.', 400);\n  if (mode === 'range' && !head) throw new GitDiffError('A branch comparison needs a head reference.', 400);\n  await git(root, ['rev-parse', '--is-inside-work-tree'], signal);\n  const repoRoot = (await git(root, ['rev-parse', '--show-toplevel'], signal)).trim();\n  if (await realpath(root) !== await realpath(repoRoot)) throw new GitDiffError('Open the Git repository root to review changes. A subfolder scan cannot read changes outside its scan root.', 400);\n  let baseHash: string;\n  try { baseHash = await resolveRef(root, base || 'HEAD', signal); }\n  catch (error) {\n    // An unborn repository has no HEAD. Only that explicit default is allowed.\n    if ((base || 'HEAD') !== 'HEAD' || mode === 'range' || signal?.aborted) throw error;\n    const count = (await git(root, ['rev-list', '--all', '--count'], signal)).trim();\n    if (count !== '0') throw error;\n    baseHash = EMPTY_TREE;\n  }\n  const headHash = mode === 'range' ? await resolveRef(root, head, signal) : '';\n  const args = ['diff', '--no-color', '--no-ext-diff', '--no-textconv', '-U3'];\n  if (mode === 'staged') args.push('--cached');\n  args.push(headHash ? `${baseHash}...${headHash}` : baseHash, '--');\n  if (file) args.push(file);\n  let raw = await git(root, args, signal);\n  let untracked = 0;\n  if (includeUntracked && mode === 'working' && !file) {\n    const names = (await git(root, ['ls-files', '--others', '--exclude-standard', '-z'], signal)).split('\\0').filter(Boolean);\n    if (names.length > 200) throw new GitDiffError('More than 200 untracked files. Stage selected files or narrow the repository before reviewing.', 413);\n    const canonicalRoot = await realpath(root);\n    for (const name of names) {\n      signal?.throwIfAborted();\n      const abs = resolveInside(root, name);\n      if (!abs) throw new GitDiffError('An untracked path is outside this repository.');\n      const st = await lstat(abs);\n      if (st.isSymbolicLink()) {\n        raw += `diff --git ${JSON.stringify('a/' + name)} ${JSON.stringify('b/' + name)}\\nnew file mode 120000\\nonboarder skipped symlink\\n`; untracked++; continue;\n      }\n      if (!st.isFile()) continue;\n      if (!isInside(canonicalRoot, await realpath(abs))) throw new GitDiffError('An untracked path resolves outside this repository.');\n      if (st.size > 1024 * 1024) throw new GitDiffError(`Untracked file \"${name}\" exceeds the 1 MB limit. Stage it to review its Git diff.`, 413);\n      const buffer = await readFile(abs);\n      if (buffer.byteLength > 1024 * 1024) throw new GitDiffError('An untracked file grew beyond the review limit.', 413);\n      const header = `diff --git ${JSON.stringify('a/' + name)} ${JSON.stringify('b/' + name)}\\nnew file mode 100644\\n`;\n      if (buffer.includes(0)) raw += header + `Binary files /dev/null and ${name} differ\\n`;\n      else {\n        const source = buffer.toString('utf8');\n        const lines = source === '' ? [] : source.replace(/\\n$/, '').split('\\n');\n        raw += header + `--- /dev/null\\n+++ ${JSON.stringify('b/' + name)}\\n@@ -0,0 +1,${lines.length} @@\\n` + lines.map(l => '+' + l + '\\n').join('');\n      }\n      untracked++;\n      if (Buffer.byteLength(raw) > MAX_DIFF_BYTES) throw new GitDiffError('This diff exceeds the 5 MB review limit.', 413);\n    }\n  }\n  return { ...parseUnifiedDiff(raw), base: baseHash, head: headHash, mode, untracked };\n}\nfunction decodeGitPath(value: string): string {\n  if (!value.startsWith('\"')) return value;\n  // Git quotes control characters and sometimes octal UTF-8 bytes.\n  const bytes: number[] = [];\n  for (let i = 1; i < value.length - 1; i++) {\n    if (value[i] === '\\\\') {\n      const octal = value.slice(i + 1).match(/^[0-7]{1,3}/)?.[0];\n      if (octal) { bytes.push(parseInt(octal, 8)); i += octal.length; continue; }\n      const escaped: Record<string, string> = { n: '\\n', t: '\\t', r: '\\r', b: '\\b', f: '\\f', v: '\\v', a: '\\x07' };\n      bytes.push(...Buffer.from(escaped[value[++i]] ?? value[i]));\n    } else { const cp = value.codePointAt(i)!; bytes.push(...Buffer.from(String.fromCodePoint(cp))); if (cp > 0xffff) i++; }\n  }\n  return Buffer.from(bytes).toString('utf8');\n}\n\nexport function parseUnifiedDiff(diffText: string): GitDiff {\n  if (!diffText || typeof diffText !== 'string') {\n    return { files: [], stats: { filesChanged: 0, additions: 0, deletions: 0 }, raw: '' };\n  }\n\n  const files: PatchFile[] = [];\n  const lines = diffText.split('\\n');\n  let currentFile: PatchFile | null = null;\n  let currentHunk: PatchHunk | null = null;\n  let totalAdditions = 0;\n  let totalDeletions = 0;\n\n  for (let i = 0; i < lines.length; i++) {\n    const line = lines[i];\n\n    // File header: diff --git a/path b/path\n    if (line.startsWith('diff --git ')) {\n      const m = line.match(/^diff --git (\\\"(?:[^\\\"\\\\]|\\\\.)*\\\"|a\\/.*?) (\\\"(?:[^\\\"\\\\]|\\\\.)*\\\"|b\\/.*)$/);\n      const oldPath = m ? decodeGitPath(m[1]).slice(2) : '';\n      const newPath = m ? decodeGitPath(m[2]).slice(2) : '';\n      currentFile = {\n        oldPath,\n        newPath,\n        status: 'modified',\n        additions: 0,\n        deletions: 0,\n        hunks: [],\n      };\n      files.push(currentFile);\n      currentHunk = null;\n      continue;\n    }\n\n    if (!currentFile) continue;\n    // File markers disambiguate unquoted paths containing \" b/\" in the header.\n    if (!currentHunk && (line.startsWith('--- ') || line.startsWith('+++ '))) {\n      const value = line.slice(4);\n      const markerPath = decodeGitPath(value.startsWith('\"') ? value : value.split('\\t')[0]);\n      if (markerPath !== '/dev/null') {\n        if (line.startsWith('--- ')) currentFile.oldPath = markerPath.slice(2);\n        else currentFile.newPath = markerPath.slice(2);\n      }\n      continue;\n    }\n    if (line === 'onboarder skipped symlink') { currentFile.skipReason = 'Untracked symlink: target not read'; continue; }\n    if (line.startsWith('Binary files ') || line === 'GIT binary patch') { currentFile.binary = true; continue; }\n\n    if (line.startsWith('new file mode ')) {\n      currentFile.status = 'added';\n      continue;\n    }\n    if (line.startsWith('deleted file mode ')) {\n      currentFile.status = 'deleted';\n      continue;\n    }\n    if (line.startsWith('rename from ')) {\n      currentFile.status = 'renamed';\n      currentFile.oldPath = decodeGitPath(line.slice(12));\n      continue;\n    }\n    if (line.startsWith('rename to ')) {\n      currentFile.newPath = decodeGitPath(line.slice(10));\n      continue;\n    }\n\n    // Hunk header: @@ -1,5 +1,6 @@ optional context\n    if (line.startsWith('@@ ')) {\n      const match = line.match(/^@@ -(\\d+)(?:,(\\d+))? \\+(\\d+)(?:,(\\d+))? @@(.*)$/);\n      if (match) {\n        const oldStart = parseInt(match[1], 10);\n        const oldLines = match[2] !== undefined ? parseInt(match[2], 10) : 1;\n        const newStart = parseInt(match[3], 10);\n        const newLines = match[4] !== undefined ? parseInt(match[4], 10) : 1;\n        currentHunk = {\n          header: line,\n          oldStart,\n          oldLines,\n          newStart,\n          newLines,\n          heading: match[5]?.trim() || '',\n          lines: [],\n        };\n        currentFile.hunks.push(currentHunk);\n      }\n      continue;\n    }\n\n    if (!currentHunk) continue;\n\n    if (line.startsWith('+')) {\n      currentFile.additions++;\n      totalAdditions++;\n      currentHunk.lines.push({\n        type: 'add',\n        text: line.slice(1),\n      });\n    } else if (line.startsWith('-')) {\n      currentFile.deletions++;\n      totalDeletions++;\n      currentHunk.lines.push({\n        type: 'del',\n        text: line.slice(1),\n      });\n    } else if (line.startsWith(' ')) {\n      currentHunk.lines.push({\n        type: 'context',\n        text: line.slice(1),\n      });\n    }\n  }\n\n  return {\n    files,\n    stats: {\n      filesChanged: files.length,\n      additions: totalAdditions,\n      deletions: totalDeletions,\n    },\n    raw: diffText,\n  };\n}\n"]}

package/server/gitHistory.d.ts

@@ -0,0 +1,12 @@
+export declare function gitLog(root: any): Promise<{
+    ok: boolean;
+    reason: string;
+    text?: undefined;
+    totalCommits?: undefined;
+} | {
+    reason?: undefined;
+    ok: boolean;
+    text: any;
+    totalCommits: number;
+}>;
+export declare function parseGitLog(text: any): any[];