cordisx 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/src/cli/supervisor-state.js

@@ -0,0 +1,204 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { spawnSync } from 'node:child_process';
+import { constants } from 'node:fs';
+import { chmod, lstat, mkdir, open, readFile, rename, rm, stat, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+export function supervisorPaths(homeDir, appId, profileId) {
+    const directory = path.join(homeDir, 'run', appId, profileId);
+    return {
+        directory,
+        state: path.join(directory, 'state.json'),
+        lock: path.join(directory, 'start.lock'),
+        mutex: path.join(directory, 'startup.mutex'),
+        socket: path.join(directory, 'control.sock'),
+        log: path.join(directory, 'host.log'),
+        bootstrapToken: path.join(directory, 'bootstrap.token'),
+    };
+}
+export function effectiveConfigFingerprint(input) {
+    return createHash('sha256').update(JSON.stringify(input)).digest('hex');
+}
+export async function ensureSupervisorDirectory(paths) {
+    await mkdir(paths.directory, { recursive: true, mode: 0o700 });
+    await chmodPrivate(paths.directory);
+}
+async function chmodPrivate(target) {
+    // The umask is not a security boundary. Deliberately tighten every authority
+    // file after creation, including when an older release created the directory.
+    await chmod(target, 0o700);
+}
+export async function writeSupervisorState(paths, state) {
+    await ensureSupervisorDirectory(paths);
+    const temporary = path.join(paths.directory, `.state-${randomBytes(12).toString('hex')}.tmp`);
+    await writeFile(temporary, `${JSON.stringify(state)}\n`, { mode: 0o600 });
+    await chmod(temporary, 0o600);
+    await rename(temporary, paths.state);
+}
+function validState(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const item = value;
+    return item.schemaVersion === 1
+        && typeof item.appId === 'string'
+        && typeof item.profileId === 'string'
+        && (item.phase === 'starting' || item.phase === 'ready' || item.phase === 'stopping' || item.phase === 'failed')
+        && Number.isSafeInteger(item.pid) && item.pid > 0
+        && typeof item.processStartedAt === 'string'
+        && typeof item.instanceToken === 'string' && /^[a-f0-9]{32,}$/u.test(item.instanceToken)
+        && typeof item.createdAt === 'string'
+        && typeof item.version === 'string'
+        && typeof item.effectiveConfig === 'string'
+        && (item.hostPid === undefined || (Number.isSafeInteger(item.hostPid) && item.hostPid > 0))
+        && (item.hostProcessStartedAt === undefined || typeof item.hostProcessStartedAt === 'string')
+        && (item.cdpEndpoint === undefined || typeof item.cdpEndpoint === 'string')
+        && (item.failure === undefined || typeof item.failure === 'string')
+        && (item.failedAt === undefined || typeof item.failedAt === 'string');
+}
+export async function readSupervisorStateResult(paths) {
+    try {
+        const document = JSON.parse(await readFile(paths.state, 'utf8'));
+        return validState(document) ? { status: 'valid', state: document } : { status: 'invalid' };
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return { status: 'missing' };
+        if (error instanceof SyntaxError)
+            return { status: 'invalid' };
+        return { status: 'unreadable', error };
+    }
+}
+export async function readSupervisorState(paths) {
+    const result = await readSupervisorStateResult(paths);
+    return result.status === 'valid' ? result.state : undefined;
+}
+export async function removeSupervisorState(paths) {
+    await Promise.all([
+        rm(paths.state, { force: true }),
+        rm(paths.socket, { force: true }),
+        rm(paths.bootstrapToken, { force: true }),
+    ]);
+}
+export class SupervisorOperationBusyError extends Error {
+    code = 'SUPERVISOR_OPERATION_BUSY';
+    constructor() {
+        super('another CordisX startup operation is already in progress');
+    }
+}
+export class LegacySupervisorLockError extends Error {
+    code = 'LEGACY_SUPERVISOR_LOCK';
+    constructor() {
+        super('legacy CordisX start lock is present; retry with --recover-startup only after all older CordisX starts have exited');
+    }
+}
+function operationLockCommand(fd) {
+    if (process.platform === 'darwin')
+        return { command: '/usr/bin/lockf', args: ['-s', '-t', '0', String(fd)] };
+    if (process.platform === 'linux') {
+        return { command: '/usr/bin/flock', args: ['--exclusive', '--nonblock', '--conflict-exit-code', '75', String(fd)] };
+    }
+    throw new Error(`CordisX background supervision is unsupported on ${process.platform}: no kernel lock backend`);
+}
+async function ensureLegacyFence(paths, recoverLegacy) {
+    try {
+        const metadata = await lstat(paths.lock);
+        if (metadata.isDirectory()) {
+            await chmod(paths.lock, 0o700);
+            return;
+        }
+        if (!metadata.isFile() || !recoverLegacy)
+            throw new LegacySupervisorLockError();
+        await rm(paths.lock);
+        await mkdir(paths.lock, { mode: 0o700 });
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+        try {
+            await mkdir(paths.lock, { mode: 0o700 });
+        }
+        catch (mkdirError) {
+            if (mkdirError.code !== 'EEXIST')
+                throw mkdirError;
+            const metadata = await lstat(paths.lock);
+            if (!metadata.isDirectory())
+                throw new LegacySupervisorLockError();
+        }
+    }
+    await chmod(paths.lock, 0o700);
+}
+export async function acquireSupervisorStartLock(paths, options = {}) {
+    await ensureSupervisorDirectory(paths);
+    const flags = constants.O_CREAT | constants.O_RDWR | (constants.O_NOFOLLOW ?? 0);
+    const handle = await open(paths.mutex, flags, 0o600);
+    try {
+        await chmod(paths.mutex, 0o600);
+        const invocation = operationLockCommand(3);
+        const locked = spawnSync(invocation.command, invocation.args, {
+            stdio: ['ignore', 'ignore', 'pipe', handle.fd],
+            encoding: 'utf8',
+        });
+        if (locked.error !== undefined)
+            throw locked.error;
+        if (locked.status === 75)
+            throw new SupervisorOperationBusyError();
+        if (locked.status !== 0) {
+            throw new Error(`failed to acquire CordisX startup operation lock (${locked.status ?? locked.signal ?? 'unknown'}): ${locked.stderr.trim()}`);
+        }
+        await ensureLegacyFence(paths, options.recoverLegacy === true);
+    }
+    catch (error) {
+        await handle.close().catch(() => undefined);
+        throw error;
+    }
+    let released = false;
+    return async () => {
+        if (released)
+            return;
+        released = true;
+        await handle.close();
+    };
+}
+/**
+ * PID reuse is rejected by pairing the PID with the operating-system start
+ * timestamp captured by the owning supervisor. Darwin/Linux expose this via
+ * `ps`; unsupported platforms intentionally report an unknown identity.
+ */
+export async function processStartIdentity(pid) {
+    try {
+        const { execFile } = await import('node:child_process');
+        const output = await new Promise((resolve, reject) => {
+            execFile('ps', ['-o', 'lstart=', '-p', String(pid)], (error, stdout) => error === null ? resolve(stdout.trim()) : reject(error));
+        });
+        return output === '' ? undefined : output;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function hasMatchingProcess(state) {
+    return (await processIdentityStatus(state.pid, state.processStartedAt)) === 'alive';
+}
+export async function hasMatchingProcessIdentity(pid, startedAt) {
+    return (await processIdentityStatus(pid, startedAt)) === 'alive';
+}
+export async function processIdentityStatus(pid, startedAt) {
+    try {
+        process.kill(pid, 0);
+    }
+    catch (error) {
+        return error.code === 'ESRCH' ? 'dead' : 'unknown';
+    }
+    const current = await processStartIdentity(pid);
+    if (current === undefined)
+        return 'unknown';
+    return current === startedAt ? 'alive' : 'dead';
+}
+export async function stateFileIsPrivate(paths) {
+    try {
+        return ((await stat(paths.state)).mode & 0o077) === 0;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=supervisor-state.js.map

package/dist/src/cli/supervisor-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-state.js","sourceRoot":"","sources":["../../../src/cli/supervisor-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACnG,OAAO,IAAI,MAAM,WAAW,CAAA;AAmC5B,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB;IAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;IAC7D,OAAO;QACL,SAAS;QACT,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;QACzC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;QACxC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC;QAC5C,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC;QAC5C,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC;QACrC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC;KACxD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAAsB;IACpE,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9D,MAAM,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;AACrC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAc;IACxC,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAsB,EAAE,KAAsB;IACvF,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC7F,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACzE,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IAC7B,MAAM,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,MAAM,IAAI,GAAG,KAAgC,CAAA;IAC7C,OAAO,IAAI,CAAC,aAAa,KAAK,CAAC;WAC1B,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;WAC9B,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;WAClC,CAAC,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;WAC7G,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAK,IAAI,CAAC,GAAc,GAAG,CAAC;WAC1D,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ;WACzC,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;WACrF,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;WAClC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;WAChC,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;WACxC,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAK,IAAI,CAAC,OAAkB,GAAG,CAAC,CAAC,CAAC;WACpG,CAAC,IAAI,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,oBAAoB,KAAK,QAAQ,CAAC;WAC1F,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC;WACxE,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC;WAChE,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAA;AACzE,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAAsB;IACpE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAY,CAAA;QAC3E,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAC5F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QACpF,IAAI,KAAK,YAAY,WAAW;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QAC9D,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;IACxC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAsB;IAC9D,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAA;IACrD,OAAO,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAsB;IAChE,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAChC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACjC,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAC1C,CAAC,CAAA;AACJ,CAAC;AAID,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAC5C,IAAI,GAAG,2BAA2B,CAAA;IAE3C;QACE,KAAK,CAAC,0DAA0D,CAAC,CAAA;IACnE,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,IAAI,GAAG,wBAAwB,CAAA;IAExC;QACE,KAAK,CACH,oHAAoH,CACrH,CAAA;IACH,CAAC;CACF;AAED,SAAS,oBAAoB,CAAC,EAAU;IACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IAC5G,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IACrH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,OAAO,CAAC,QAAQ,0BAA0B,CAAC,CAAA;AACjH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,KAAsB,EAAE,aAAsB;IAC7E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAC9B,OAAM;QACR,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,yBAAyB,EAAE,CAAA;QAC/E,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACpB,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;QACnE,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1C,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,IAAK,UAAoC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,UAAU,CAAA;YAC7E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACxC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,yBAAyB,EAAE,CAAA;QACpE,CAAC;IACH,CAAC;IACD,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAsB,EACtB,UAAgD,EAAE;IAElD,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAA;IAChF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;IACpD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC/B,MAAM,UAAU,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,EAAE;YAC5D,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAC9C,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,MAAM,CAAC,KAAK,CAAA;QAClD,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,4BAA4B,EAAE,CAAA;QAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,qDACE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,SACpC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAC7B,CAAA;QACH,CAAC;QACD,MAAM,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC,CAAA;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC3C,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,QAAQ;YAAE,OAAM;QACpB,QAAQ,GAAG,IAAI,CAAA;QACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW;IACpD,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAA;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3D,QAAQ,CACN,IAAI,EACJ,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EACpC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAC3E,CAAA;QACH,CAAC,CAAC,CAAA;QACF,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAsB;IAC7D,OAAO,CAAC,MAAM,qBAAqB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC,KAAK,OAAO,CAAA;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,GAAW,EAAE,SAAiB;IAC7E,OAAO,CAAC,MAAM,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,CAAA;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW,EAAE,SAAiB;IACxE,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/E,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAA;IAC/C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC3C,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAsB;IAC7D,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/src/cli.js

@@ -1,7 +1,24 @@
 #!/usr/bin/env node
 import { runCordisXCli } from './cli/run.js';
-runCordisXCli(process.argv.slice(2)).catch((error) => {
-    console.error(`[cordisx] ${error instanceof Error ? error.message : String(error)}`);
-    process.exitCode = 1;
+import { CordisXManagementCommandError } from './cli/management-command.js';
+const argv = process.argv.slice(2);
+runCordisXCli(argv).catch((error) => {
+    if (!(error instanceof CordisXManagementCommandError && error.reported)) {
+        const message = error instanceof Error ? error.message : String(error);
+        const machineJson = (argv[0] === 'plugin' || argv[0] === 'source' || argv[0] === 'feedback')
+            && argv.includes('--json');
+        if (machineJson) {
+            const code = error instanceof Error && 'code' in error && typeof error.code === 'string'
+                ? error.code
+                : argv[0] === 'feedback'
+                    ? 'feedback-command-failed'
+                    : 'management-command-failed';
+            console.log(JSON.stringify({ status: 'error', error: { code, message } }));
+        }
+        else {
+            console.error(`[cordisx] ${message}`);
+        }
+    }
+    process.exitCode = error instanceof CordisXManagementCommandError ? error.exitCode : 1;
 });
 //# sourceMappingURL=cli.js.map

package/dist/src/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE5C,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACnD,OAAO,CAAC,KAAK,CAAC,aAAa,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACpF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AACtB,CAAC,CAAC,CAAA"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAA;AAE3E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAElC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAClC,IAAI,CAAC,CAAC,KAAK,YAAY,6BAA6B,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC;eACvF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC5B,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACtF,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU;oBACxB,CAAC,CAAC,yBAAyB;oBAC3B,CAAC,CAAC,2BAA2B,CAAA;YAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;QAC5E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,aAAa,OAAO,EAAE,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,QAAQ,GAAG,KAAK,YAAY,6BAA6B,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;AACxF,CAAC,CAAC,CAAA"}

package/dist/src/config/home-config-management.d.ts

@@ -0,0 +1,20 @@
+/** A profile selects a top-level Marketplace definition and may override its enabled state. */
+export interface HomeConfigMarketplaceSourceSelection {
+    readonly url: string;
+    readonly enabled: boolean;
+}
+export interface HomeConfigHiddenMarketplaceEntry {
+    readonly sourceUrl: string;
+    readonly pluginId: string;
+}
+export interface HomeConfigProfileManagementMigrations {
+    readonly legacyBrowserSourcesV2?: true;
+}
+export interface HomeConfigProfileManagement {
+    readonly revision: number;
+    readonly sources: readonly HomeConfigMarketplaceSourceSelection[];
+    readonly hiddenCatalogEntries: readonly HomeConfigHiddenMarketplaceEntry[];
+    readonly migrations?: HomeConfigProfileManagementMigrations;
+}
+export declare function parseHomeConfigProfileManagement(value: unknown, label: string): HomeConfigProfileManagement;
+//# sourceMappingURL=home-config-management.d.ts.map

package/dist/src/config/home-config-management.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"home-config-management.d.ts","sourceRoot":"","sources":["../../../src/config/home-config-management.ts"],"names":[],"mappings":"AAEA,+FAA+F;AAC/F,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAA;CACvC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,oCAAoC,EAAE,CAAA;IACjE,QAAQ,CAAC,oBAAoB,EAAE,SAAS,gCAAgC,EAAE,CAAA;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,qCAAqC,CAAA;CAC5D;AA6CD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,2BAA2B,CAgD3G"}

package/dist/src/config/home-config-management.js

@@ -0,0 +1,94 @@
+const PLUGIN_ID = /^[a-z0-9][a-z0-9._-]{0,95}$/;
+function record(value, label) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`${label} must be an object`);
+    }
+    return value;
+}
+function rejectUnknownKeys(value, allowed, label) {
+    const allowedKeys = new Set(allowed);
+    const unknown = Object.keys(value).find((key) => !allowedKeys.has(key));
+    if (unknown !== undefined)
+        throw new Error(`${label}.${unknown} is not supported`);
+}
+function nonEmptyString(value, label) {
+    if (typeof value !== 'string' || value.trim() === '') {
+        throw new Error(`${label} must be a non-empty string`);
+    }
+    return value.trim();
+}
+function canonicalMarketplaceDiscoveryUrl(value, label) {
+    const text = nonEmptyString(value, label);
+    const url = new URL(text);
+    if ((url.protocol !== 'http:' && url.protocol !== 'https:')
+        || url.username !== ''
+        || url.password !== ''
+        || url.hash !== ''
+        || url.href !== text)
+        throw new Error(`${label} must be a canonical HTTP or HTTPS URL without credentials or fragment`);
+    return text;
+}
+function parseMarketplaceSourceSelection(value, label) {
+    const source = record(value, label);
+    rejectUnknownKeys(source, ['url', 'enabled'], label);
+    if (typeof source.enabled !== 'boolean')
+        throw new Error(`${label}.enabled must be a boolean`);
+    return {
+        url: canonicalMarketplaceDiscoveryUrl(source.url, `${label}.url`),
+        enabled: source.enabled,
+    };
+}
+export function parseHomeConfigProfileManagement(value, label) {
+    const management = record(value, label);
+    rejectUnknownKeys(management, ['revision', 'sources', 'hiddenCatalogEntries', 'migrations'], label);
+    if (!Number.isSafeInteger(management.revision) || management.revision < 0) {
+        throw new Error(`${label}.revision must be a non-negative safe integer`);
+    }
+    if (!Array.isArray(management.sources))
+        throw new Error(`${label}.sources must be an array`);
+    const sources = management.sources.map((source, index) => parseMarketplaceSourceSelection(source, `${label}.sources[${index}]`));
+    const sourceUrls = new Set();
+    for (const source of sources) {
+        if (sourceUrls.has(source.url))
+            throw new Error(`${label}.sources contains duplicate URL ${source.url}`);
+        sourceUrls.add(source.url);
+    }
+    if (!Array.isArray(management.hiddenCatalogEntries))
+        throw new Error(`${label}.hiddenCatalogEntries must be an array`);
+    const hiddenCatalogEntries = management.hiddenCatalogEntries.map((value, index) => {
+        const entryLabel = `${label}.hiddenCatalogEntries[${index}]`;
+        const entry = record(value, entryLabel);
+        rejectUnknownKeys(entry, ['sourceUrl', 'pluginId'], entryLabel);
+        const pluginId = nonEmptyString(entry.pluginId, `${entryLabel}.pluginId`);
+        if (!PLUGIN_ID.test(pluginId))
+            throw new Error(`${entryLabel}.pluginId is invalid`);
+        return {
+            sourceUrl: canonicalMarketplaceDiscoveryUrl(entry.sourceUrl, `${entryLabel}.sourceUrl`),
+            pluginId,
+        };
+    });
+    const hiddenKeys = new Set();
+    for (const entry of hiddenCatalogEntries) {
+        const key = `${entry.sourceUrl}\n${entry.pluginId}`;
+        if (hiddenKeys.has(key))
+            throw new Error(`${label}.hiddenCatalogEntries contains duplicate identity`);
+        hiddenKeys.add(key);
+    }
+    let migrations;
+    if (management.migrations !== undefined) {
+        const raw = record(management.migrations, `${label}.migrations`);
+        rejectUnknownKeys(raw, ['legacyBrowserSourcesV2'], `${label}.migrations`);
+        if (raw.legacyBrowserSourcesV2 !== undefined && raw.legacyBrowserSourcesV2 !== true) {
+            throw new Error(`${label}.migrations.legacyBrowserSourcesV2 must be true when present`);
+        }
+        if (raw.legacyBrowserSourcesV2 === true)
+            migrations = { legacyBrowserSourcesV2: true };
+    }
+    return {
+        revision: management.revision,
+        sources,
+        hiddenCatalogEntries,
+        ...(migrations === undefined ? {} : { migrations }),
+    };
+}
+//# sourceMappingURL=home-config-management.js.map

package/dist/src/config/home-config-management.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"home-config-management.js","sourceRoot":"","sources":["../../../src/config/home-config-management.ts"],"names":[],"mappings":"AAAA,MAAM,SAAS,GAAG,6BAA6B,CAAA;AAwB/C,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA8B,EAAE,OAA0B,EAAE,KAAa;IAClG,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IACvE,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,OAAO,mBAAmB,CAAC,CAAA;AACpF,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAA;AACrB,CAAC;AAED,SAAS,gCAAgC,CAAC,KAAc,EAAE,KAAa;IACrE,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAA;IACzB,IACE,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;WACpD,GAAG,CAAC,QAAQ,KAAK,EAAE;WACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;WACnB,GAAG,CAAC,IAAI,KAAK,EAAE;WACf,GAAG,CAAC,IAAI,KAAK,IAAI;QACpB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wEAAwE,CAAC,CAAA;IACnG,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAc,EAAE,KAAa;IACpE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACnC,iBAAiB,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAA;IACpD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAA;IAC9F,OAAO;QACL,GAAG,EAAE,gCAAgC,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC;QACjE,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAc,EAAE,KAAa;IAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACvC,iBAAiB,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,sBAAsB,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,CAAA;IACnG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAK,UAAU,CAAC,QAAmB,GAAG,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+CAA+C,CAAC,CAAA;IAC1E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAA;IAC5F,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvD,+BAA+B,CAAC,MAAM,EAAE,GAAG,KAAK,YAAY,KAAK,GAAG,CAAC,CACtE,CAAA;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;QACxG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAA;IACtH,MAAM,oBAAoB,GAAG,UAAU,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAChF,MAAM,UAAU,GAAG,GAAG,KAAK,yBAAyB,KAAK,GAAG,CAAA;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;QACvC,iBAAiB,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;QAC/D,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,UAAU,WAAW,CAAC,CAAA;QACzE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,sBAAsB,CAAC,CAAA;QACnF,OAAO;YACL,SAAS,EAAE,gCAAgC,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,UAAU,YAAY,CAAC;YACvF,QAAQ;SACT,CAAA;IACH,CAAC,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,oBAAoB,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAA;QACnD,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mDAAmD,CAAC,CAAA;QACrG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;IACD,IAAI,UAA6D,CAAA;IACjE,IAAI,UAAU,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC,CAAA;QAChE,iBAAiB,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,EAAE,GAAG,KAAK,aAAa,CAAC,CAAA;QACzE,IAAI,GAAG,CAAC,sBAAsB,KAAK,SAAS,IAAI,GAAG,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8DAA8D,CAAC,CAAA;QACzF,CAAC;QACD,IAAI,GAAG,CAAC,sBAAsB,KAAK,IAAI;YAAE,UAAU,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAA;IACxF,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,QAAkB;QACvC,OAAO;QACP,oBAAoB;QACpB,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;KACpD,CAAA;AACH,CAAC"}

package/dist/src/config/home-config-marketplace.d.ts

@@ -0,0 +1,20 @@
+export interface HomeConfigMarketplaceSourceLocal {
+    readonly name?: string;
+    readonly description?: string;
+    readonly note?: string;
+}
+/** Host-owned Marketplace definition shared by discovery, Manager, CLI, and certification. */
+export interface HomeConfigMarketplaceSource {
+    readonly url: string;
+    readonly enabled: boolean;
+    readonly trusted: boolean;
+    readonly local?: HomeConfigMarketplaceSourceLocal;
+}
+export declare const DEFAULT_MARKETPLACE_TRUST_SOURCE = "https://raw.githubusercontent.com/cordisx/marketplace/main/marketplace.json";
+export declare function supportsTrustedMarketplaceSource(url: string): boolean;
+export declare function migrateMarketplaceConfigDocument(value: Record<string, unknown>): {
+    readonly document: Record<string, unknown>;
+    readonly migrated: boolean;
+};
+export declare function parseHomeConfigMarketplaceSources(value: unknown): readonly HomeConfigMarketplaceSource[];
+//# sourceMappingURL=home-config-marketplace.d.ts.map

package/dist/src/config/home-config-marketplace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"home-config-marketplace.d.ts","sourceRoot":"","sources":["../../../src/config/home-config-marketplace.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,8FAA8F;AAC9F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,gCAAgC,CAAA;CAClD;AAED,eAAO,MAAM,gCAAgC,gFACkC,CAAA;AA2C/E,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGrE;AA8DD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAChF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC1C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC3B,CAsEA;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,2BAA2B,EAAE,CAYxG"}

package/dist/src/config/home-config-marketplace.js

@@ -0,0 +1,188 @@
+export const DEFAULT_MARKETPLACE_TRUST_SOURCE = 'https://raw.githubusercontent.com/cordisx/marketplace/main/marketplace.json';
+const MAX_MARKETPLACE_SOURCES = 32;
+function record(value, label) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`${label} must be an object`);
+    }
+    return value;
+}
+function rejectUnknownKeys(value, allowed, label) {
+    const allowedKeys = new Set(allowed);
+    const unknown = Object.keys(value).find(key => !allowedKeys.has(key));
+    if (unknown !== undefined)
+        throw new Error(`${label}.${unknown} is not supported`);
+}
+function nonEmptyString(value, label) {
+    if (typeof value !== 'string' || value.trim() === '')
+        throw new Error(`${label} must be a non-empty string`);
+    return value.trim();
+}
+function optionalMarketplaceText(value, label, maxLength) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'string' || value.trim() !== value || value.length === 0 || value.length > maxLength) {
+        throw new Error(`${label} must be trimmed text with at most ${maxLength} characters`);
+    }
+    return value;
+}
+function canonicalMarketplaceUrl(value, label) {
+    const text = nonEmptyString(value, label);
+    const url = new URL(text);
+    if ((url.protocol !== 'http:' && url.protocol !== 'https:')
+        || url.username !== ''
+        || url.password !== ''
+        || url.hash !== ''
+        || url.href !== text)
+        throw new Error(`${label} must be a canonical HTTP or HTTPS URL without credentials or fragment`);
+    return text;
+}
+export function supportsTrustedMarketplaceSource(url) {
+    const parsed = new URL(url);
+    return parsed.protocol === 'https:' && parsed.search === '';
+}
+function parseMarketplaceSource(value, index) {
+    const label = `config.marketplaceSources[${index}]`;
+    const source = record(value, label);
+    rejectUnknownKeys(source, ['url', 'enabled', 'trusted', 'local'], label);
+    const url = canonicalMarketplaceUrl(source.url, `${label}.url`);
+    if (typeof source.enabled !== 'boolean')
+        throw new Error(`${label}.enabled must be a boolean`);
+    if (typeof source.trusted !== 'boolean')
+        throw new Error(`${label}.trusted must be a boolean`);
+    if (source.trusted && !supportsTrustedMarketplaceSource(url)) {
+        throw new Error(`${label}.url must be HTTPS without a query when trusted`);
+    }
+    let local;
+    if (source.local !== undefined) {
+        const raw = record(source.local, `${label}.local`);
+        rejectUnknownKeys(raw, ['name', 'description', 'note'], `${label}.local`);
+        const name = optionalMarketplaceText(raw.name, `${label}.local.name`, 80);
+        const description = optionalMarketplaceText(raw.description, `${label}.local.description`, 280);
+        const note = optionalMarketplaceText(raw.note, `${label}.local.note`, 500);
+        if (name === undefined && description === undefined && note === undefined) {
+            throw new Error(`${label}.local must not be empty`);
+        }
+        local = {
+            ...(name === undefined ? {} : { name }),
+            ...(description === undefined ? {} : { description }),
+            ...(note === undefined ? {} : { note }),
+        };
+    }
+    return { url, enabled: source.enabled, trusted: source.trusted, ...(local === undefined ? {} : { local }) };
+}
+function legacyMarketplaceSource(value, label) {
+    const source = record(value, label);
+    const url = canonicalMarketplaceUrl(source.url, `${label}.url`);
+    if (typeof source.enabled !== 'boolean')
+        throw new Error(`${label}.enabled must be a boolean`);
+    const rawLocal = source.local === undefined ? undefined : record(source.local, `${label}.local`);
+    const name = optionalMarketplaceText(rawLocal?.name, `${label}.local.name`, 80);
+    const description = optionalMarketplaceText(rawLocal?.description, `${label}.local.description`, 280);
+    const note = optionalMarketplaceText(rawLocal?.note, `${label}.local.note`, 500);
+    const local = name === undefined && description === undefined && note === undefined
+        ? undefined
+        : {
+            ...(name === undefined ? {} : { name }),
+            ...(description === undefined ? {} : { description }),
+            ...(note === undefined ? {} : { note }),
+        };
+    return { url, enabled: source.enabled, trusted: true, ...(local === undefined ? {} : { local }) };
+}
+function legacyTrustSource(value, index) {
+    const label = `config.marketplaceTrustSources[${index}]`;
+    const source = record(value, label);
+    rejectUnknownKeys(source, ['url', 'enabled'], label);
+    const url = canonicalMarketplaceUrl(source.url, `${label}.url`);
+    const parsed = new URL(url);
+    if (parsed.protocol !== 'https:' || parsed.search !== '') {
+        throw new Error(`${label}.url must be an HTTPS URL without credentials, query, or fragment`);
+    }
+    if (typeof source.enabled !== 'boolean')
+        throw new Error(`${label}.enabled must be a boolean`);
+    return { url, enabled: source.enabled };
+}
+export function migrateMarketplaceConfigDocument(value) {
+    if (value.marketplaceSources !== undefined)
+        return { document: value, migrated: false };
+    if (value.marketplaceTrustSources !== undefined && !Array.isArray(value.marketplaceTrustSources)) {
+        throw new Error('config.marketplaceTrustSources must be an array');
+    }
+    const explicitlyTrustsNoSources = Array.isArray(value.marketplaceTrustSources)
+        && value.marketplaceTrustSources.length === 0;
+    const trustSources = (value.marketplaceTrustSources ?? [{
+            url: DEFAULT_MARKETPLACE_TRUST_SOURCE,
+            enabled: true,
+        }]).map(legacyTrustSource);
+    const trust = new Map(trustSources.map(source => [source.url, source.enabled]));
+    const definitions = new Map();
+    const mergeDefinition = (source) => {
+        const current = definitions.get(source.url);
+        definitions.set(source.url, current === undefined
+            ? source
+            : {
+                ...current,
+                enabled: current.enabled || source.enabled,
+                trusted: current.trusted || source.trusted,
+                ...(current.local === undefined && source.local !== undefined ? { local: source.local } : {}),
+            });
+    };
+    for (const source of trustSources) {
+        mergeDefinition({ url: source.url, enabled: source.enabled, trusted: source.enabled });
+    }
+    const rawApps = record(value.apps, 'config.apps');
+    const apps = Object.create(null);
+    for (const [appId, rawApp] of Object.entries(rawApps)) {
+        const app = record(rawApp, `config.apps.${appId}`);
+        const rawProfiles = record(app.profiles, `config.apps.${appId}.profiles`);
+        const profiles = Object.create(null);
+        for (const [profileId, rawProfile] of Object.entries(rawProfiles)) {
+            const profile = record(rawProfile, `config.apps.${appId}.profiles.${profileId}`);
+            const rawManagement = profile.management === undefined
+                ? undefined
+                : record(profile.management, `config.apps.${appId}.profiles.${profileId}.management`);
+            if (rawManagement?.sources !== undefined && !Array.isArray(rawManagement.sources)) {
+                throw new Error(`config.apps.${appId}.profiles.${profileId}.management.sources must be an array`);
+            }
+            const legacySources = (rawManagement?.sources ?? []).map((source, index) => legacyMarketplaceSource(source, `config.apps.${appId}.profiles.${profileId}.management.sources[${index}]`));
+            for (const source of legacySources) {
+                mergeDefinition({
+                    ...source,
+                    trusted: trust.has(source.url)
+                        ? trust.get(source.url) === true
+                        : !explicitlyTrustsNoSources && supportsTrustedMarketplaceSource(source.url),
+                });
+            }
+            const selected = new Map(legacySources.map(source => [source.url, source.enabled]));
+            for (const source of trustSources)
+                if (!selected.has(source.url))
+                    selected.set(source.url, source.enabled);
+            profiles[profileId] = {
+                ...profile,
+                management: {
+                    ...(rawManagement ?? { revision: 0, hiddenCatalogEntries: [] }),
+                    sources: [...selected].map(([url, enabled]) => ({ url, enabled })),
+                },
+            };
+        }
+        apps[appId] = { ...app, profiles };
+    }
+    const document = { ...value, marketplaceSources: [...definitions.values()], apps };
+    delete document.marketplaceTrustSources;
+    return { document, migrated: true };
+}
+export function parseHomeConfigMarketplaceSources(value) {
+    if (!Array.isArray(value))
+        throw new Error('config.marketplaceSources must be an array');
+    const sources = value.map(parseMarketplaceSource);
+    if (sources.length > MAX_MARKETPLACE_SOURCES) {
+        throw new Error(`config.marketplaceSources must contain at most ${MAX_MARKETPLACE_SOURCES} sources`);
+    }
+    const seen = new Set();
+    for (const source of sources) {
+        if (seen.has(source.url))
+            throw new Error(`duplicate Marketplace source: ${source.url}`);
+        seen.add(source.url);
+    }
+    return sources;
+}
+//# sourceMappingURL=home-config-marketplace.js.map

package/dist/src/config/home-config-marketplace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"home-config-marketplace.js","sourceRoot":"","sources":["../../../src/config/home-config-marketplace.ts"],"names":[],"mappings":"AAcA,MAAM,CAAC,MAAM,gCAAgC,GAC3C,6EAA6E,CAAA;AAE/E,MAAM,uBAAuB,GAAG,EAAE,CAAA;AAElC,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA8B,EAAE,OAA0B,EAAE,KAAa;IAClG,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IACrE,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,OAAO,mBAAmB,CAAC,CAAA;AACpF,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAA;IAC5G,OAAO,KAAK,CAAC,IAAI,EAAE,CAAA;AACrB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,KAAa,EAAE,SAAiB;IAC/E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC1G,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,SAAS,aAAa,CAAC,CAAA;IACvF,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,KAAa;IAC5D,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAA;IACzB,IACE,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;WACpD,GAAG,CAAC,QAAQ,KAAK,EAAE;WACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;WACnB,GAAG,CAAC,IAAI,KAAK,EAAE;WACf,GAAG,CAAC,IAAI,KAAK,IAAI;QACpB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wEAAwE,CAAC,CAAA;IACnG,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,GAAW;IAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IAC3B,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,CAAA;AAC7D,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,KAAa;IAC3D,MAAM,KAAK,GAAG,6BAA6B,KAAK,GAAG,CAAA;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACnC,iBAAiB,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAA;IACxE,MAAM,GAAG,GAAG,uBAAuB,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,CAAA;IAC/D,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAA;IAC9F,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAA;IAC9F,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,gCAAgC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iDAAiD,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,KAAmD,CAAA;IACvD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAA;QAClD,iBAAiB,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAA;QACzE,MAAM,IAAI,GAAG,uBAAuB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,aAAa,EAAE,EAAE,CAAC,CAAA;QACzE,MAAM,WAAW,GAAG,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,KAAK,oBAAoB,EAAE,GAAG,CAAC,CAAA;QAC/F,MAAM,IAAI,GAAG,uBAAuB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,aAAa,EAAE,GAAG,CAAC,CAAA;QAC1E,IAAI,IAAI,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAA;QACrD,CAAC;QACD,KAAK,GAAG;YACN,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;SACxC,CAAA;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;AAC7G,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,KAAa;IAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACnC,MAAM,GAAG,GAAG,uBAAuB,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,CAAA;IAC/D,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAA;IAC9F,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAA;IAChG,MAAM,IAAI,GAAG,uBAAuB,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,KAAK,aAAa,EAAE,EAAE,CAAC,CAAA;IAC/E,MAAM,WAAW,GAAG,uBAAuB,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,KAAK,oBAAoB,EAAE,GAAG,CAAC,CAAA;IACrG,MAAM,IAAI,GAAG,uBAAuB,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,KAAK,aAAa,EAAE,GAAG,CAAC,CAAA;IAChF,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QACjF,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACA,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;SACxC,CAAA;IACH,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;AACnG,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,MAAM,KAAK,GAAG,kCAAkC,KAAK,GAAG,CAAA;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACnC,iBAAiB,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAA;IACpD,MAAM,GAAG,GAAG,uBAAuB,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IAC3B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mEAAmE,CAAC,CAAA;IAC9F,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAA;IAC9F,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAA8B;IAI7E,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;IACvF,IAAI,KAAK,CAAC,uBAAuB,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,yBAAyB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC;WACzE,KAAK,CAAC,uBAAuB,CAAC,MAAM,KAAK,CAAC,CAAA;IAC/C,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC;YACtD,GAAG,EAAE,gCAAgC;YACrC,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC/E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuC,CAAA;IAClE,MAAM,eAAe,GAAG,CAAC,MAAmC,EAAQ,EAAE;QACpE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC3C,WAAW,CAAC,GAAG,CACb,MAAM,CAAC,GAAG,EACV,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC;gBACA,GAAG,OAAO;gBACV,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO;gBAC1C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO;gBAC1C,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9F,CACJ,CAAA;IACH,CAAC,CAAA;IACD,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;QAClC,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;IACxF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IACjD,MAAM,IAAI,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAA;IACpF,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,KAAK,EAAE,CAAC,CAAA;QAClD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,KAAK,WAAW,CAAC,CAAA;QACzE,MAAM,QAAQ,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAA;QACxF,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,eAAe,KAAK,aAAa,SAAS,EAAE,CAAC,CAAA;YAChF,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS;gBACpD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,eAAe,KAAK,aAAa,SAAS,aAAa,CAAC,CAAA;YACvF,IAAI,aAAa,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClF,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,aAAa,SAAS,sCAAsC,CAAC,CAAA;YACnG,CAAC;YACD,MAAM,aAAa,GAAG,CAAC,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACzE,uBAAuB,CAAC,MAAM,EAAE,eAAe,KAAK,aAAa,SAAS,uBAAuB,KAAK,GAAG,CAAC,CAC3G,CAAA;YACD,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;gBACnC,eAAe,CAAC;oBACd,GAAG,MAAM;oBACT,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;wBAC5B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI;wBAChC,CAAC,CAAC,CAAC,yBAAyB,IAAI,gCAAgC,CAAC,MAAM,CAAC,GAAG,CAAC;iBAC/E,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YACnF,KAAK,MAAM,MAAM,IAAI,YAAY;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;oBAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;YAC1G,QAAQ,CAAC,SAAS,CAAC,GAAG;gBACpB,GAAG,OAAO;gBACV,UAAU,EAAE;oBACV,GAAG,CAAC,aAAa,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC;oBAC/D,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;iBACnE;aACF,CAAA;QACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,CAAA;IACpC,CAAC;IACD,MAAM,QAAQ,GAA4B,EAAE,GAAG,KAAK,EAAE,kBAAkB,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAA;IAC3G,OAAO,QAAQ,CAAC,uBAAuB,CAAA;IACvC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;AACrC,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAAc;IAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IACxF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IACjD,IAAI,OAAO,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,kDAAkD,uBAAuB,UAAU,CAAC,CAAA;IACtG,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;QACxF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC"}