devworkspace 0.1.1 → 0.2.1

package/dist/integrations/manager.d.ts

@@ -0,0 +1,62 @@
+import type { Ws } from '../core/workspace.js';
+import { type IntegrationAdapter, type IntegrationId, type IntegrationReport, type PersistedIntegration, type ProgressEvent, type Runner, type SetupOptions, type StatusCode, type StepLevel } from './types.js';
+/** Tool output goes into reports and the state file: strip secrets and machine-specific paths, flatten to one line. */
+export declare function scrub(text: string): string;
+export declare const ADAPTERS: IntegrationAdapter[];
+export interface ManagerEnv {
+    root: string;
+    home?: string;
+    env?: NodeJS.ProcessEnv;
+    platform?: NodeJS.Platform;
+    runner?: Runner;
+    now?: () => Date;
+    adapters?: IntegrationAdapter[];
+}
+export interface StepResult {
+    id: string;
+    description: string;
+    command?: string;
+    level: StepLevel;
+    state: 'ok' | 'failed' | 'not-run';
+    detail?: string;
+    requiresApproval?: boolean;
+}
+export type OutcomeAction = 'already-verified' | 'awaiting-restart' | 'nothing-to-do' | 'blocked' | 'dry-run' | 'approval-required' | 'installed' | 'failed' | 'not-selected';
+export interface IntegrationOutcome {
+    id: IntegrationId;
+    name: string;
+    action: OutcomeAction;
+    before: StatusCode;
+    report: IntegrationReport;
+    plan: {
+        description: string;
+        command?: string;
+        level: StepLevel;
+    }[];
+    steps: StepResult[];
+    notes: string[];
+}
+export interface SetupResult {
+    dryRun: boolean;
+    scope: SetupOptions['scope'];
+    outcomes: IntegrationOutcome[];
+    events: ProgressEvent[];
+    /** Every requested required integration is VERIFIED. */
+    complete: boolean;
+    approvalRequired: boolean;
+}
+/** Combine what was observed with what earlier runs recorded. Records can only add warnings or RESTART_REQUIRED, never VERIFIED. */
+export declare function applyPersisted(report: IntegrationReport, entry: PersistedIntegration | undefined): IntegrationReport;
+export declare function inspectAll(ws: Ws, mEnv: ManagerEnv, opts?: {
+    deep: boolean;
+    onlyRequired?: boolean;
+}): Promise<IntegrationReport[]>;
+/** Summary used by doctor/status: required integrations only; OmniRoute never counts. */
+export declare function summarize(reports: IntegrationReport[]): {
+    complete: boolean;
+    required: number;
+    verified: number;
+    pending: IntegrationReport[];
+};
+export declare function acknowledgeRestart(ws: Ws, ids: IntegrationId[], now: string): Promise<void>;
+export declare function runSetup(ws: Ws, mEnv: ManagerEnv, setup: SetupOptions, onEvent?: (e: ProgressEvent) => void): Promise<SetupResult>;

package/dist/integrations/manager.js

@@ -0,0 +1,261 @@
+import os from 'node:os';
+import { onCleanup } from '../utils/cleanup.js';
+import { withLock } from '../utils/lock.js';
+import { redact } from '../security/redact.js';
+import { findAbsolutePaths } from '../utils/paths.js';
+import { agentSkills } from './adapters/agent-skills.js';
+import { graphify } from './adapters/graphify.js';
+import { omniroute } from './adapters/omniroute.js';
+import { ponytail } from './adapters/ponytail.js';
+import { createRunner } from './exec.js';
+import { readPersistentPath } from './persistentPath.js';
+import { restoreSnapshot, takeSnapshot, verifySnapshot } from './protect.js';
+import { blankEntry, loadIntegrationsState, saveIntegrationEntry, wasInterrupted } from './state.js';
+import { REQUIRED_INTEGRATIONS, } from './types.js';
+/** Tool output goes into reports and the state file: strip secrets and machine-specific paths, flatten to one line. */
+export function scrub(text) {
+    let out = redact(text);
+    for (const p of findAbsolutePaths(out))
+        out = out.split(p).join('<path>');
+    return out.replace(/\s+/g, ' ').trim().slice(0, 400);
+}
+export const ADAPTERS = [graphify, agentSkills, ponytail, omniroute];
+function resolveEnv(m) {
+    const env = m.env ?? process.env;
+    const platform = m.platform ?? process.platform;
+    return {
+        root: m.root,
+        home: m.home ?? os.homedir(),
+        env,
+        platform,
+        runner: m.runner ?? createRunner(env, platform),
+        now: m.now ?? (() => new Date()),
+        adapters: m.adapters ?? ADAPTERS,
+    };
+}
+function ctxFor(m, setup, prior, report, signal) {
+    let persistent;
+    return {
+        root: m.root,
+        home: m.home,
+        env: m.env,
+        platform: m.platform,
+        runner: m.runner,
+        setup,
+        signal,
+        prior,
+        report,
+        persistentPath: () => (persistent ??= readPersistentPath(m.runner, m.platform, m.env, signal)),
+    };
+}
+const DEFAULT_SETUP = { scope: 'project', yes: false, dryRun: false, repair: false };
+/** Combine what was observed with what earlier runs recorded. Records can only add warnings or RESTART_REQUIRED, never VERIFIED. */
+export function applyPersisted(report, entry) {
+    if (!entry)
+        return report;
+    const out = { ...report, warnings: [...report.warnings], nextSteps: [...report.nextSteps] };
+    if (wasInterrupted(entry)) {
+        out.warnings.push('A previous setup run was interrupted before it finished.');
+        if (!out.nextSteps.includes('devworkspace integrations repair --yes'))
+            out.nextSteps.push('devworkspace integrations repair --yes');
+    }
+    if ((out.status === 'NOT_INSTALLED' || out.status === 'DEGRADED') && entry.lastError) {
+        out.status = 'FAILED';
+        out.warnings.push(`The last setup attempt failed: ${entry.lastError}`);
+    }
+    if (entry.restartRequiredAt && (out.status === 'VERIFIED' || out.status === 'INSTALLED')) {
+        out.status = 'RESTART_REQUIRED';
+        out.nextSteps.push('Restart Claude Code (or run /reload-plugins) so it loads the new skills/plugins/hooks, then run: devworkspace integrations status --restarted');
+    }
+    return out;
+}
+export async function inspectAll(ws, mEnv, opts = { deep: false }) {
+    const m = resolveEnv(mEnv);
+    const state = await loadIntegrationsState(ws, m.now().toISOString());
+    const list = m.adapters.filter((a) => !opts.onlyRequired || a.required);
+    return Promise.all(list.map(async (a) => {
+        const ctx = ctxFor(m, DEFAULT_SETUP, state.integrations[a.id], () => undefined);
+        try {
+            return applyPersisted(await a.inspect(ctx, opts.deep), state.integrations[a.id]);
+        }
+        catch (e) {
+            return {
+                id: a.id,
+                name: a.name,
+                required: a.required,
+                status: 'FAILED',
+                variant: null,
+                scope: null,
+                version: null,
+                checks: [],
+                capabilities: {},
+                warnings: [`Inspection failed: ${scrub(e.message)}`],
+                nextSteps: ['devworkspace doctor --debug'],
+                deep: opts.deep,
+            };
+        }
+    }));
+}
+/** Summary used by doctor/status: required integrations only; OmniRoute never counts. */
+export function summarize(reports) {
+    const required = reports.filter((r) => r.required);
+    const pending = required.filter((r) => r.status !== 'VERIFIED');
+    return { complete: pending.length === 0, required: required.length, verified: required.length - pending.length, pending };
+}
+export async function acknowledgeRestart(ws, ids, now) {
+    for (const id of ids)
+        await saveIntegrationEntry(ws, id, { restartRequiredAt: null }, now);
+}
+const describeStep = (s) => ({ description: s.description, command: s.command, level: s.level });
+export async function runSetup(ws, mEnv, setup, onEvent = () => undefined) {
+    const m = resolveEnv(mEnv);
+    const events = [];
+    const emit = (e) => {
+        events.push(e);
+        onEvent(e);
+    };
+    const ac = new AbortController();
+    const disposeCancel = onCleanup(() => ac.abort());
+    const wanted = m.adapters.filter((a) => (setup.only ? setup.only.includes(a.id) : REQUIRED_INTEGRATIONS.includes(a.id)));
+    const outcomes = [];
+    let approvalRequired = false;
+    try {
+        for (const adapter of wanted) {
+            const nowIso = () => m.now().toISOString();
+            const state = await loadIntegrationsState(ws, nowIso());
+            const prior = state.integrations[adapter.id];
+            const ctx = ctxFor(m, setup, prior, emit, ac.signal);
+            emit({ id: adapter.id, step: 'inspect', state: 'start', detail: `checking ${adapter.name}` });
+            const before = applyPersisted(await adapter.inspect(ctx, true), prior);
+            const outcome = (action, report, extra = {}) => ({
+                id: adapter.id,
+                name: adapter.name,
+                action,
+                before: before.status,
+                report,
+                plan: [],
+                steps: [],
+                notes: [],
+                ...extra,
+            });
+            if (before.status === 'VERIFIED' && !setup.repair) {
+                emit({ id: adapter.id, step: 'inspect', state: 'skip', detail: 'already verified' });
+                outcomes.push(outcome('already-verified', before));
+                continue;
+            }
+            if (before.status === 'RESTART_REQUIRED' && !setup.repair) {
+                emit({ id: adapter.id, step: 'inspect', state: 'skip', detail: 'installed; waiting for a Claude Code restart' });
+                outcomes.push(outcome('awaiting-restart', before));
+                continue;
+            }
+            const plan = await adapter.plan(ctx, before);
+            if (plan.steps.length === 0) {
+                if (plan.blockers.length > 0) {
+                    emit({ id: adapter.id, step: 'prerequisites', state: 'fail', detail: plan.blockers[0] });
+                    outcomes.push(outcome('blocked', { ...before, status: 'PREREQUISITES_MISSING', nextSteps: plan.blockers }, { notes: plan.notes }));
+                }
+                else {
+                    outcomes.push(outcome('nothing-to-do', before, { notes: plan.notes }));
+                }
+                continue;
+            }
+            const planInfo = plan.steps.map(describeStep);
+            if (setup.dryRun) {
+                outcomes.push(outcome('dry-run', before, { plan: planInfo, notes: plan.notes }));
+                continue;
+            }
+            const needsConsent = plan.steps.some((s) => s.level !== 'project');
+            if (needsConsent && !setup.yes) {
+                approvalRequired = true;
+                const levels = [...new Set(plan.steps.filter((s) => s.level !== 'project').map((s) => s.level))];
+                outcomes.push(outcome('approval-required', { ...before, nextSteps: [`Re-run with --yes to approve: ${levels.join(', ')} step(s). Review them first with --dry-run.`, ...before.nextSteps] }, { plan: planInfo, notes: plan.notes }));
+                continue;
+            }
+            // ---- execute ----
+            const results = plan.steps.map((s) => ({ id: s.id, description: s.description, command: s.command, level: s.level, state: 'not-run' }));
+            const managedPrior = prior?.managedPaths ?? [];
+            const isManaged = (rel) => managedPrior.some((p) => rel === p || rel.startsWith(`${p}/`));
+            const managedNew = new Set(managedPrior);
+            let restartRequired = false;
+            let failure = null;
+            const hints = [];
+            await withLock(ws.dir, async () => {
+                await saveIntegrationEntry(ws, adapter.id, { installing: { pid: process.pid, startedAt: nowIso(), step: plan.steps[0].id }, lastAttemptAt: nowIso() }, nowIso());
+                const snap = await takeSnapshot(m.root, plan.protectPaths, ['.claude/skills'], isManaged);
+                for (let i = 0; i < plan.steps.length && !failure; i++) {
+                    const step = plan.steps[i];
+                    if (ac.signal.aborted) {
+                        failure = 'cancelled';
+                        break;
+                    }
+                    emit({ id: adapter.id, step: step.id, state: 'start', detail: step.description });
+                    let out;
+                    try {
+                        out = await step.run();
+                    }
+                    catch (e) {
+                        out = { ok: false, detail: e.message };
+                    }
+                    const violations = await verifySnapshot(snap);
+                    if (violations.length > 0) {
+                        await restoreSnapshot(snap, violations);
+                        out = { ok: false, detail: `Refused: this step would have overwritten your files (${violations.map((v) => `${v.path}: ${v.reason}`).join('; ')}). They were restored.` };
+                    }
+                    const res = results[i];
+                    res.state = out.ok ? 'ok' : 'failed';
+                    res.detail = out.detail ? scrub(out.detail) : undefined;
+                    if (!out.ok && out.hint)
+                        hints.push(out.hint);
+                    res.requiresApproval = out.requiresApproval;
+                    emit({ id: adapter.id, step: step.id, state: out.ok ? 'ok' : 'fail', detail: res.detail ?? step.description });
+                    if (out.ok) {
+                        if (out.restartRequired)
+                            restartRequired = true;
+                        for (const p of out.managedPaths ?? [])
+                            managedNew.add(p);
+                    }
+                    else
+                        failure = res.detail ?? 'step failed';
+                }
+            }, { name: 'integrations.lock', staleMs: 30 * 60_000, timeoutMs: 10_000 });
+            const after = await adapterInspectAfter(ws, adapter, m, setup, emit, nowIso());
+            await saveIntegrationEntry(ws, adapter.id, {
+                installing: null,
+                lastError: failure,
+                managedPaths: [...managedNew].sort(),
+                ...(restartRequired && !failure ? { restartRequiredAt: nowIso() } : {}),
+            }, nowIso());
+            const finalState = (await loadIntegrationsState(ws, nowIso())).integrations[adapter.id] ?? blankEntry();
+            let finalReport = applyPersisted(after, finalState);
+            if (failure && finalReport.status !== 'VERIFIED')
+                finalReport = { ...finalReport, status: 'FAILED', warnings: [...finalReport.warnings, `Setup stopped: ${failure}`] };
+            if (hints.length > 0)
+                finalReport = { ...finalReport, nextSteps: [...hints, ...finalReport.nextSteps] };
+            const approvalStep = results.find((r) => r.requiresApproval);
+            if (approvalStep?.command)
+                finalReport = { ...finalReport, nextSteps: [`Run this yourself in a terminal (Claude Code needs your approval): ${approvalStep.command}`, ...finalReport.nextSteps] };
+            await saveIntegrationEntry(ws, adapter.id, { status: finalReport.status, variant: finalReport.variant, scope: finalReport.scope, version: finalReport.version, lastVerifiedAt: finalReport.status === 'VERIFIED' ? nowIso() : null }, nowIso());
+            outcomes.push(outcome(failure ? 'failed' : 'installed', finalReport, { plan: planInfo, steps: results, notes: plan.notes }));
+        }
+    }
+    finally {
+        disposeCancel();
+    }
+    const required = outcomes.filter((o) => o.report.required);
+    return {
+        dryRun: setup.dryRun,
+        scope: setup.scope,
+        outcomes,
+        events,
+        complete: required.length > 0 && required.every((o) => o.report.status === 'VERIFIED'),
+        approvalRequired,
+    };
+}
+async function adapterInspectAfter(ws, adapter, m, setup, emit, now) {
+    const state = await loadIntegrationsState(ws, now);
+    emit({ id: adapter.id, step: 'verify', state: 'start', detail: 'verifying the installation' });
+    const report = await adapter.inspect(ctxFor(m, setup, state.integrations[adapter.id], emit), true);
+    emit({ id: adapter.id, step: 'verify', state: report.status === 'VERIFIED' ? 'ok' : 'info', detail: report.status });
+    return report;
+}
+//# sourceMappingURL=manager.js.map

package/dist/integrations/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/integrations/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAuB,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACrG,OAAO,EACL,qBAAqB,GAYtB,MAAM,YAAY,CAAC;AAEpB,uHAAuH;AACvH,MAAM,UAAU,KAAK,CAAC,IAAY;IAChC,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1E,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAyB,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAsD3F,SAAS,UAAU,CAAC,CAAa;IAC/B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACjC,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;QAC5B,GAAG;QACH,QAAQ;QACR,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC;QAC/C,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAChC,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,QAAQ;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,CAAgC,EAAE,KAAmB,EAAE,KAAuC,EAAE,MAAkC,EAAE,MAAoB;IACtK,IAAI,UAAsD,CAAC;IAC3D,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,KAAK;QACL,MAAM;QACN,KAAK;QACL,MAAM;QACN,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU,KAAK,kBAAkB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;KAC/F,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAEnG,oIAAoI;AACpI,MAAM,UAAU,cAAc,CAAC,MAAyB,EAAE,KAAuC;IAC/F,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,GAAG,GAAsB,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;IAC/G,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QAC9E,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACtI,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACrF,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;QACtB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,kCAAkC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,MAAM,GAAG,kBAAkB,CAAC;QAChC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,+IAA+I,CAAC,CAAC;IACtK,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAM,EAAE,IAAgB,EAAE,OAAkD,EAAE,IAAI,EAAE,KAAK,EAAE;IAC1H,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO,OAAO,CAAC,GAAG,CAChB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACnB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,QAAiB;gBACzB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,EAAE;gBACV,YAAY,EAAE,EAAE;gBAChB,QAAQ,EAAE,CAAC,sBAAsB,KAAK,CAAE,CAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/D,SAAS,EAAE,CAAC,6BAA6B,CAAC;gBAC1C,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,SAAS,CAAC,OAA4B;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IAChE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;AAC5H,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAM,EAAE,GAAoB,EAAE,GAAW;IAChF,KAAK,MAAM,EAAE,IAAI,GAAG;QAAE,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,CAAW,EAA+D,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAExK,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAAM,EAAE,IAAgB,EAAE,KAAmB,EAAE,UAAsC,GAAG,EAAE,CAAC,SAAS;IACjI,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,CAAgB,EAAQ,EAAE;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,OAAO,CAAC,CAAC,CAAC,CAAC;IACb,CAAC,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzH,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAE7B,IAAI,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9F,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YACvE,MAAM,OAAO,GAAG,CAAC,MAAqB,EAAE,MAAyB,EAAE,QAAqC,EAAE,EAAsB,EAAE,CAAC,CAAC;gBAClI,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM;gBACN,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM;gBACN,IAAI,EAAE,EAAE;gBACR,KAAK,EAAE,EAAE;gBACT,KAAK,EAAE,EAAE;gBACT,GAAG,KAAK;aACT,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClD,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACrF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;gBACnD,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC1D,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC,CAAC;gBACjH,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;gBACnD,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACzF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACrI,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACzE,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACjF,SAAS;YACX,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;YACnE,IAAI,YAAY,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC/B,gBAAgB,GAAG,IAAI,CAAC;gBACxB,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACjG,QAAQ,CAAC,IAAI,CACX,OAAO,CAAC,mBAAmB,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CACtN,CAAC;gBACF,SAAS;YACX,CAAC;YAED,oBAAoB;YACpB,MAAM,OAAO,GAAiB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC;YAC/J,MAAM,YAAY,GAAG,KAAK,EAAE,YAAY,IAAI,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3G,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,YAAY,CAAC,CAAC;YACjD,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,IAAI,OAAO,GAAkB,IAAI,CAAC;YAClC,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,MAAM,QAAQ,CACZ,EAAE,CAAC,GAAG,EACN,KAAK,IAAI,EAAE;gBACT,MAAM,oBAAoB,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAClK,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC1F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;oBACvD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;oBAC5B,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACtB,OAAO,GAAG,WAAW,CAAC;wBACtB,MAAM;oBACR,CAAC;oBACD,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;oBAClF,IAAI,GAAG,CAAC;oBACR,IAAI,CAAC;wBACH,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;oBACzB,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,GAAG,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;oBACpD,CAAC;oBACD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;oBAC9C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1B,MAAM,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;wBACxC,GAAG,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yDAAyD,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;oBAC3K,CAAC;oBACD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;oBACxB,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;oBACrC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACxD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI;wBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC9C,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;oBAC5C,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;oBAC/G,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;wBACX,IAAI,GAAG,CAAC,eAAe;4BAAE,eAAe,GAAG,IAAI,CAAC;wBAChD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE;4BAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC5D,CAAC;;wBAAM,OAAO,GAAG,GAAG,CAAC,MAAM,IAAI,aAAa,CAAC;gBAC/C,CAAC;YACH,CAAC,EACD,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CACvE,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/E,MAAM,oBAAoB,CACxB,EAAE,EACF,OAAO,CAAC,EAAE,EACV;gBACE,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,OAAO;gBAClB,YAAY,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE;gBACpC,GAAG,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE,EACD,MAAM,EAAE,CACT,CAAC;YACF,MAAM,UAAU,GAAG,CAAC,MAAM,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;YACxG,IAAI,WAAW,GAAG,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACpD,IAAI,OAAO,IAAI,WAAW,CAAC,MAAM,KAAK,UAAU;gBAAE,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,kBAAkB,OAAO,EAAE,CAAC,EAAE,CAAC;YACvK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YACxG,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YAC7D,IAAI,YAAY,EAAE,OAAO;gBAAE,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,CAAC,sEAAsE,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YACjM,MAAM,oBAAoB,CACxB,EAAE,EACF,OAAO,CAAC,EAAE,EACV,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,cAAc,EAAE,WAAW,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EACzL,MAAM,EAAE,CACT,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;YAAS,CAAC;QACT,aAAa,EAAE,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ;QACR,MAAM;QACN,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;QACtF,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,EAAM,EAAE,OAA2B,EAAE,CAAgC,EAAE,KAAmB,EAAE,IAAgC,EAAE,GAAW;IAC1K,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACrH,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import os from 'node:os';\nimport type { Ws } from '../core/workspace.js';\nimport { onCleanup } from '../utils/cleanup.js';\nimport { withLock } from '../utils/lock.js';\nimport { redact } from '../security/redact.js';\nimport { findAbsolutePaths } from '../utils/paths.js';\nimport { agentSkills } from './adapters/agent-skills.js';\nimport { graphify } from './adapters/graphify.js';\nimport { omniroute } from './adapters/omniroute.js';\nimport { ponytail } from './adapters/ponytail.js';\nimport { createRunner } from './exec.js';\nimport { readPersistentPath, type PersistentPath } from './persistentPath.js';\nimport { restoreSnapshot, takeSnapshot, verifySnapshot } from './protect.js';\nimport { blankEntry, loadIntegrationsState, saveIntegrationEntry, wasInterrupted } from './state.js';\nimport {\n  REQUIRED_INTEGRATIONS,\n  type AdapterContext,\n  type IntegrationAdapter,\n  type IntegrationId,\n  type IntegrationReport,\n  type PersistedIntegration,\n  type PlanStep,\n  type ProgressEvent,\n  type Runner,\n  type SetupOptions,\n  type StatusCode,\n  type StepLevel,\n} from './types.js';\n\n/** Tool output goes into reports and the state file: strip secrets and machine-specific paths, flatten to one line. */\nexport function scrub(text: string): string {\n  let out = redact(text);\n  for (const p of findAbsolutePaths(out)) out = out.split(p).join('<path>');\n  return out.replace(/\\s+/g, ' ').trim().slice(0, 400);\n}\n\nexport const ADAPTERS: IntegrationAdapter[] = [graphify, agentSkills, ponytail, omniroute];\n\nexport interface ManagerEnv {\n  root: string;\n  home?: string;\n  env?: NodeJS.ProcessEnv;\n  platform?: NodeJS.Platform;\n  runner?: Runner;\n  now?: () => Date;\n  adapters?: IntegrationAdapter[];\n}\n\nexport interface StepResult {\n  id: string;\n  description: string;\n  command?: string;\n  level: StepLevel;\n  state: 'ok' | 'failed' | 'not-run';\n  detail?: string;\n  requiresApproval?: boolean;\n}\n\nexport type OutcomeAction =\n  | 'already-verified'\n  | 'awaiting-restart'\n  | 'nothing-to-do'\n  | 'blocked'\n  | 'dry-run'\n  | 'approval-required'\n  | 'installed'\n  | 'failed'\n  | 'not-selected';\n\nexport interface IntegrationOutcome {\n  id: IntegrationId;\n  name: string;\n  action: OutcomeAction;\n  before: StatusCode;\n  report: IntegrationReport;\n  plan: { description: string; command?: string; level: StepLevel }[];\n  steps: StepResult[];\n  notes: string[];\n}\n\nexport interface SetupResult {\n  dryRun: boolean;\n  scope: SetupOptions['scope'];\n  outcomes: IntegrationOutcome[];\n  events: ProgressEvent[];\n  /** Every requested required integration is VERIFIED. */\n  complete: boolean;\n  approvalRequired: boolean;\n}\n\nfunction resolveEnv(m: ManagerEnv): Required<Pick<ManagerEnv, 'root' | 'home' | 'env' | 'platform' | 'runner' | 'now' | 'adapters'>> {\n  const env = m.env ?? process.env;\n  const platform = m.platform ?? process.platform;\n  return {\n    root: m.root,\n    home: m.home ?? os.homedir(),\n    env,\n    platform,\n    runner: m.runner ?? createRunner(env, platform),\n    now: m.now ?? (() => new Date()),\n    adapters: m.adapters ?? ADAPTERS,\n  };\n}\n\nfunction ctxFor(m: ReturnType<typeof resolveEnv>, setup: SetupOptions, prior: PersistedIntegration | undefined, report: (e: ProgressEvent) => void, signal?: AbortSignal): AdapterContext {\n  let persistent: Promise<PersistentPath | null> | undefined;\n  return {\n    root: m.root,\n    home: m.home,\n    env: m.env,\n    platform: m.platform,\n    runner: m.runner,\n    setup,\n    signal,\n    prior,\n    report,\n    persistentPath: () => (persistent ??= readPersistentPath(m.runner, m.platform, m.env, signal)),\n  };\n}\n\nconst DEFAULT_SETUP: SetupOptions = { scope: 'project', yes: false, dryRun: false, repair: false };\n\n/** Combine what was observed with what earlier runs recorded. Records can only add warnings or RESTART_REQUIRED, never VERIFIED. */\nexport function applyPersisted(report: IntegrationReport, entry: PersistedIntegration | undefined): IntegrationReport {\n  if (!entry) return report;\n  const out: IntegrationReport = { ...report, warnings: [...report.warnings], nextSteps: [...report.nextSteps] };\n  if (wasInterrupted(entry)) {\n    out.warnings.push('A previous setup run was interrupted before it finished.');\n    if (!out.nextSteps.includes('devworkspace integrations repair --yes')) out.nextSteps.push('devworkspace integrations repair --yes');\n  }\n  if ((out.status === 'NOT_INSTALLED' || out.status === 'DEGRADED') && entry.lastError) {\n    out.status = 'FAILED';\n    out.warnings.push(`The last setup attempt failed: ${entry.lastError}`);\n  }\n  if (entry.restartRequiredAt && (out.status === 'VERIFIED' || out.status === 'INSTALLED')) {\n    out.status = 'RESTART_REQUIRED';\n    out.nextSteps.push('Restart Claude Code (or run /reload-plugins) so it loads the new skills/plugins/hooks, then run: devworkspace integrations status --restarted');\n  }\n  return out;\n}\n\nexport async function inspectAll(ws: Ws, mEnv: ManagerEnv, opts: { deep: boolean; onlyRequired?: boolean } = { deep: false }): Promise<IntegrationReport[]> {\n  const m = resolveEnv(mEnv);\n  const state = await loadIntegrationsState(ws, m.now().toISOString());\n  const list = m.adapters.filter((a) => !opts.onlyRequired || a.required);\n  return Promise.all(\n    list.map(async (a) => {\n      const ctx = ctxFor(m, DEFAULT_SETUP, state.integrations[a.id], () => undefined);\n      try {\n        return applyPersisted(await a.inspect(ctx, opts.deep), state.integrations[a.id]);\n      } catch (e) {\n        return {\n          id: a.id,\n          name: a.name,\n          required: a.required,\n          status: 'FAILED' as const,\n          variant: null,\n          scope: null,\n          version: null,\n          checks: [],\n          capabilities: {},\n          warnings: [`Inspection failed: ${scrub((e as Error).message)}`],\n          nextSteps: ['devworkspace doctor --debug'],\n          deep: opts.deep,\n        };\n      }\n    }),\n  );\n}\n\n/** Summary used by doctor/status: required integrations only; OmniRoute never counts. */\nexport function summarize(reports: IntegrationReport[]): { complete: boolean; required: number; verified: number; pending: IntegrationReport[] } {\n  const required = reports.filter((r) => r.required);\n  const pending = required.filter((r) => r.status !== 'VERIFIED');\n  return { complete: pending.length === 0, required: required.length, verified: required.length - pending.length, pending };\n}\n\nexport async function acknowledgeRestart(ws: Ws, ids: IntegrationId[], now: string): Promise<void> {\n  for (const id of ids) await saveIntegrationEntry(ws, id, { restartRequiredAt: null }, now);\n}\n\nconst describeStep = (s: PlanStep): { description: string; command?: string; level: StepLevel } => ({ description: s.description, command: s.command, level: s.level });\n\nexport async function runSetup(ws: Ws, mEnv: ManagerEnv, setup: SetupOptions, onEvent: (e: ProgressEvent) => void = () => undefined): Promise<SetupResult> {\n  const m = resolveEnv(mEnv);\n  const events: ProgressEvent[] = [];\n  const emit = (e: ProgressEvent): void => {\n    events.push(e);\n    onEvent(e);\n  };\n  const ac = new AbortController();\n  const disposeCancel = onCleanup(() => ac.abort());\n  const wanted = m.adapters.filter((a) => (setup.only ? setup.only.includes(a.id) : REQUIRED_INTEGRATIONS.includes(a.id)));\n  const outcomes: IntegrationOutcome[] = [];\n  let approvalRequired = false;\n\n  try {\n    for (const adapter of wanted) {\n      const nowIso = (): string => m.now().toISOString();\n      const state = await loadIntegrationsState(ws, nowIso());\n      const prior = state.integrations[adapter.id];\n      const ctx = ctxFor(m, setup, prior, emit, ac.signal);\n      emit({ id: adapter.id, step: 'inspect', state: 'start', detail: `checking ${adapter.name}` });\n      const before = applyPersisted(await adapter.inspect(ctx, true), prior);\n      const outcome = (action: OutcomeAction, report: IntegrationReport, extra: Partial<IntegrationOutcome> = {}): IntegrationOutcome => ({\n        id: adapter.id,\n        name: adapter.name,\n        action,\n        before: before.status,\n        report,\n        plan: [],\n        steps: [],\n        notes: [],\n        ...extra,\n      });\n\n      if (before.status === 'VERIFIED' && !setup.repair) {\n        emit({ id: adapter.id, step: 'inspect', state: 'skip', detail: 'already verified' });\n        outcomes.push(outcome('already-verified', before));\n        continue;\n      }\n      if (before.status === 'RESTART_REQUIRED' && !setup.repair) {\n        emit({ id: adapter.id, step: 'inspect', state: 'skip', detail: 'installed; waiting for a Claude Code restart' });\n        outcomes.push(outcome('awaiting-restart', before));\n        continue;\n      }\n\n      const plan = await adapter.plan(ctx, before);\n      if (plan.steps.length === 0) {\n        if (plan.blockers.length > 0) {\n          emit({ id: adapter.id, step: 'prerequisites', state: 'fail', detail: plan.blockers[0] });\n          outcomes.push(outcome('blocked', { ...before, status: 'PREREQUISITES_MISSING', nextSteps: plan.blockers }, { notes: plan.notes }));\n        } else {\n          outcomes.push(outcome('nothing-to-do', before, { notes: plan.notes }));\n        }\n        continue;\n      }\n      const planInfo = plan.steps.map(describeStep);\n      if (setup.dryRun) {\n        outcomes.push(outcome('dry-run', before, { plan: planInfo, notes: plan.notes }));\n        continue;\n      }\n      const needsConsent = plan.steps.some((s) => s.level !== 'project');\n      if (needsConsent && !setup.yes) {\n        approvalRequired = true;\n        const levels = [...new Set(plan.steps.filter((s) => s.level !== 'project').map((s) => s.level))];\n        outcomes.push(\n          outcome('approval-required', { ...before, nextSteps: [`Re-run with --yes to approve: ${levels.join(', ')} step(s). Review them first with --dry-run.`, ...before.nextSteps] }, { plan: planInfo, notes: plan.notes }),\n        );\n        continue;\n      }\n\n      // ---- execute ----\n      const results: StepResult[] = plan.steps.map((s) => ({ id: s.id, description: s.description, command: s.command, level: s.level, state: 'not-run' as const }));\n      const managedPrior = prior?.managedPaths ?? [];\n      const isManaged = (rel: string): boolean => managedPrior.some((p) => rel === p || rel.startsWith(`${p}/`));\n      const managedNew = new Set<string>(managedPrior);\n      let restartRequired = false;\n      let failure: string | null = null;\n      const hints: string[] = [];\n\n      await withLock(\n        ws.dir,\n        async () => {\n          await saveIntegrationEntry(ws, adapter.id, { installing: { pid: process.pid, startedAt: nowIso(), step: plan.steps[0]!.id }, lastAttemptAt: nowIso() }, nowIso());\n          const snap = await takeSnapshot(m.root, plan.protectPaths, ['.claude/skills'], isManaged);\n          for (let i = 0; i < plan.steps.length && !failure; i++) {\n            const step = plan.steps[i]!;\n            if (ac.signal.aborted) {\n              failure = 'cancelled';\n              break;\n            }\n            emit({ id: adapter.id, step: step.id, state: 'start', detail: step.description });\n            let out;\n            try {\n              out = await step.run();\n            } catch (e) {\n              out = { ok: false, detail: (e as Error).message };\n            }\n            const violations = await verifySnapshot(snap);\n            if (violations.length > 0) {\n              await restoreSnapshot(snap, violations);\n              out = { ok: false, detail: `Refused: this step would have overwritten your files (${violations.map((v) => `${v.path}: ${v.reason}`).join('; ')}). They were restored.` };\n            }\n            const res = results[i]!;\n            res.state = out.ok ? 'ok' : 'failed';\n            res.detail = out.detail ? scrub(out.detail) : undefined;\n            if (!out.ok && out.hint) hints.push(out.hint);\n            res.requiresApproval = out.requiresApproval;\n            emit({ id: adapter.id, step: step.id, state: out.ok ? 'ok' : 'fail', detail: res.detail ?? step.description });\n            if (out.ok) {\n              if (out.restartRequired) restartRequired = true;\n              for (const p of out.managedPaths ?? []) managedNew.add(p);\n            } else failure = res.detail ?? 'step failed';\n          }\n        },\n        { name: 'integrations.lock', staleMs: 30 * 60_000, timeoutMs: 10_000 },\n      );\n\n      const after = await adapterInspectAfter(ws, adapter, m, setup, emit, nowIso());\n      await saveIntegrationEntry(\n        ws,\n        adapter.id,\n        {\n          installing: null,\n          lastError: failure,\n          managedPaths: [...managedNew].sort(),\n          ...(restartRequired && !failure ? { restartRequiredAt: nowIso() } : {}),\n        },\n        nowIso(),\n      );\n      const finalState = (await loadIntegrationsState(ws, nowIso())).integrations[adapter.id] ?? blankEntry();\n      let finalReport = applyPersisted(after, finalState);\n      if (failure && finalReport.status !== 'VERIFIED') finalReport = { ...finalReport, status: 'FAILED', warnings: [...finalReport.warnings, `Setup stopped: ${failure}`] };\n      if (hints.length > 0) finalReport = { ...finalReport, nextSteps: [...hints, ...finalReport.nextSteps] };\n      const approvalStep = results.find((r) => r.requiresApproval);\n      if (approvalStep?.command) finalReport = { ...finalReport, nextSteps: [`Run this yourself in a terminal (Claude Code needs your approval): ${approvalStep.command}`, ...finalReport.nextSteps] };\n      await saveIntegrationEntry(\n        ws,\n        adapter.id,\n        { status: finalReport.status, variant: finalReport.variant, scope: finalReport.scope, version: finalReport.version, lastVerifiedAt: finalReport.status === 'VERIFIED' ? nowIso() : null },\n        nowIso(),\n      );\n      outcomes.push(outcome(failure ? 'failed' : 'installed', finalReport, { plan: planInfo, steps: results, notes: plan.notes }));\n    }\n  } finally {\n    disposeCancel();\n  }\n\n  const required = outcomes.filter((o) => o.report.required);\n  return {\n    dryRun: setup.dryRun,\n    scope: setup.scope,\n    outcomes,\n    events,\n    complete: required.length > 0 && required.every((o) => o.report.status === 'VERIFIED'),\n    approvalRequired,\n  };\n}\n\nasync function adapterInspectAfter(ws: Ws, adapter: IntegrationAdapter, m: ReturnType<typeof resolveEnv>, setup: SetupOptions, emit: (e: ProgressEvent) => void, now: string): Promise<IntegrationReport> {\n  const state = await loadIntegrationsState(ws, now);\n  emit({ id: adapter.id, step: 'verify', state: 'start', detail: 'verifying the installation' });\n  const report = await adapter.inspect(ctxFor(m, setup, state.integrations[adapter.id], emit), true);\n  emit({ id: adapter.id, step: 'verify', state: report.status === 'VERIFIED' ? 'ok' : 'info', detail: report.status });\n  return report;\n}\n"]}

package/dist/integrations/notices.d.ts

@@ -0,0 +1,13 @@
+export interface NoticeSource {
+    name: string;
+    repo: string;
+    license: string;
+    copyright: string;
+    /** What DevWorkspace installed from it. */
+    installed: string;
+}
+/** Idempotently add (or refresh) one project's notice block. Only text between its own markers is ever replaced. */
+export declare function writeThirdPartyNotice(root: string, source: NoticeSource): Promise<void>;
+export declare const AGENT_SKILLS_NOTICE: NoticeSource;
+export declare const PONYTAIL_NOTICE: NoticeSource;
+export declare const GRAPHIFY_NOTICE: NoticeSource;

package/dist/integrations/notices.js

@@ -0,0 +1,68 @@
+import path from 'node:path';
+import { promises as fs } from 'node:fs';
+import { atomicWriteFile } from '../utils/fs.js';
+const HEADER = [
+    '# Third-party notices',
+    '',
+    'DevWorkspace can install the following third-party software into this project or onto this machine.',
+    'DevWorkspace does not vendor or modify their code; files are copied unchanged by their own installers.',
+    'Each project remains under its own license. Keep this notice if you commit the installed files.',
+    'Text outside the marked blocks is yours and is never modified.',
+    '',
+].join('\n');
+const startMarker = (name) => `<!-- devworkspace:notice:start ${name} -->`;
+const endMarker = (name) => `<!-- devworkspace:notice:end ${name} -->`;
+function entry(s) {
+    return [
+        startMarker(s.name),
+        `## ${s.name}`,
+        `- Source: https://github.com/${s.repo}`,
+        `- License: ${s.license}`,
+        `- Copyright: ${s.copyright}`,
+        `- Installed by DevWorkspace: ${s.installed}`,
+        endMarker(s.name),
+    ].join('\n');
+}
+/** Idempotently add (or refresh) one project's notice block. Only text between its own markers is ever replaced. */
+export async function writeThirdPartyNotice(root, source) {
+    const file = path.join(root, '.devworkspace', 'THIRD_PARTY_NOTICES.md');
+    let text = HEADER;
+    try {
+        text = await fs.readFile(file, 'utf8');
+    }
+    catch {
+        /* new file */
+    }
+    const start = text.indexOf(startMarker(source.name));
+    const end = text.indexOf(endMarker(source.name));
+    const block = entry(source);
+    if (start !== -1 && end > start) {
+        text = text.slice(0, start) + block + text.slice(end + endMarker(source.name).length);
+    }
+    else {
+        text = text.replace(/\n*$/, '\n\n') + block + '\n';
+    }
+    await atomicWriteFile(file, text);
+}
+export const AGENT_SKILLS_NOTICE = {
+    name: 'Agent Skills',
+    repo: 'addyosmani/agent-skills',
+    license: 'MIT',
+    copyright: 'Copyright (c) 2025 Addy Osmani',
+    installed: 'engineering skills copied into .claude/skills/ (portable skills, not the native plugin)',
+};
+export const PONYTAIL_NOTICE = {
+    name: 'Ponytail',
+    repo: 'DietrichGebert/ponytail',
+    license: 'MIT',
+    copyright: 'Copyright (c) 2026 DietrichGebert',
+    installed: 'skills copied into .claude/skills/ (portable skills, not the native plugin; no hooks, commands or always-on ruleset)',
+};
+export const GRAPHIFY_NOTICE = {
+    name: 'Graphify',
+    repo: 'Graphify-Labs/graphify',
+    license: 'see the project repository and the graphifyy package metadata',
+    copyright: 'see the project repository',
+    installed: 'the graphifyy command-line tool (user-level) and its project skill in .claude/skills/graphify/',
+};
+//# sourceMappingURL=notices.js.map

package/dist/integrations/notices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notices.js","sourceRoot":"","sources":["../../src/integrations/notices.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAWjD,MAAM,MAAM,GAAG;IACb,uBAAuB;IACvB,EAAE;IACF,qGAAqG;IACrG,wGAAwG;IACxG,iGAAiG;IACjG,gEAAgE;IAChE,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,kCAAkC,IAAI,MAAM,CAAC;AAC3F,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,gCAAgC,IAAI,MAAM,CAAC;AAEvF,SAAS,KAAK,CAAC,CAAe;IAC5B,OAAO;QACL,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACnB,MAAM,CAAC,CAAC,IAAI,EAAE;QACd,gCAAgC,CAAC,CAAC,IAAI,EAAE;QACxC,cAAc,CAAC,CAAC,OAAO,EAAE;QACzB,gBAAgB,CAAC,CAAC,SAAS,EAAE;QAC7B,gCAAgC,CAAC,CAAC,SAAS,EAAE;QAC7C,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;KAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,oHAAoH;AACpH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,MAAoB;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,wBAAwB,CAAC,CAAC;IACxE,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;QAChC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;IACxF,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;IACrD,CAAC;IACD,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,yBAAyB;IAC/B,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,gCAAgC;IAC3C,SAAS,EAAE,yFAAyF;CACrG,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAiB;IAC3C,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,yBAAyB;IAC/B,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,mCAAmC;IAC9C,SAAS,EAAE,sHAAsH;CAClI,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAiB;IAC3C,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,wBAAwB;IAC9B,OAAO,EAAE,+DAA+D;IACxE,SAAS,EAAE,4BAA4B;IACvC,SAAS,EAAE,gGAAgG;CAC5G,CAAC","sourcesContent":["import path from 'node:path';\nimport { promises as fs } from 'node:fs';\nimport { atomicWriteFile } from '../utils/fs.js';\n\nexport interface NoticeSource {\n  name: string;\n  repo: string;\n  license: string;\n  copyright: string;\n  /** What DevWorkspace installed from it. */\n  installed: string;\n}\n\nconst HEADER = [\n  '# Third-party notices',\n  '',\n  'DevWorkspace can install the following third-party software into this project or onto this machine.',\n  'DevWorkspace does not vendor or modify their code; files are copied unchanged by their own installers.',\n  'Each project remains under its own license. Keep this notice if you commit the installed files.',\n  'Text outside the marked blocks is yours and is never modified.',\n  '',\n].join('\\n');\n\nconst startMarker = (name: string): string => `<!-- devworkspace:notice:start ${name} -->`;\nconst endMarker = (name: string): string => `<!-- devworkspace:notice:end ${name} -->`;\n\nfunction entry(s: NoticeSource): string {\n  return [\n    startMarker(s.name),\n    `## ${s.name}`,\n    `- Source: https://github.com/${s.repo}`,\n    `- License: ${s.license}`,\n    `- Copyright: ${s.copyright}`,\n    `- Installed by DevWorkspace: ${s.installed}`,\n    endMarker(s.name),\n  ].join('\\n');\n}\n\n/** Idempotently add (or refresh) one project's notice block. Only text between its own markers is ever replaced. */\nexport async function writeThirdPartyNotice(root: string, source: NoticeSource): Promise<void> {\n  const file = path.join(root, '.devworkspace', 'THIRD_PARTY_NOTICES.md');\n  let text = HEADER;\n  try {\n    text = await fs.readFile(file, 'utf8');\n  } catch {\n    /* new file */\n  }\n  const start = text.indexOf(startMarker(source.name));\n  const end = text.indexOf(endMarker(source.name));\n  const block = entry(source);\n  if (start !== -1 && end > start) {\n    text = text.slice(0, start) + block + text.slice(end + endMarker(source.name).length);\n  } else {\n    text = text.replace(/\\n*$/, '\\n\\n') + block + '\\n';\n  }\n  await atomicWriteFile(file, text);\n}\n\nexport const AGENT_SKILLS_NOTICE: NoticeSource = {\n  name: 'Agent Skills',\n  repo: 'addyosmani/agent-skills',\n  license: 'MIT',\n  copyright: 'Copyright (c) 2025 Addy Osmani',\n  installed: 'engineering skills copied into .claude/skills/ (portable skills, not the native plugin)',\n};\n\nexport const PONYTAIL_NOTICE: NoticeSource = {\n  name: 'Ponytail',\n  repo: 'DietrichGebert/ponytail',\n  license: 'MIT',\n  copyright: 'Copyright (c) 2026 DietrichGebert',\n  installed: 'skills copied into .claude/skills/ (portable skills, not the native plugin; no hooks, commands or always-on ruleset)',\n};\n\nexport const GRAPHIFY_NOTICE: NoticeSource = {\n  name: 'Graphify',\n  repo: 'Graphify-Labs/graphify',\n  license: 'see the project repository and the graphifyy package metadata',\n  copyright: 'see the project repository',\n  installed: 'the graphifyy command-line tool (user-level) and its project skill in .claude/skills/graphify/',\n};\n"]}

package/dist/integrations/persistentPath.d.ts

@@ -0,0 +1,20 @@
+import type { Runner } from './types.js';
+/**
+ * The PATH Windows will give to NEW processes, as stored in the registry. A running terminal or editor keeps the PATH
+ * it started with, so it can differ from this. Read-only: nothing here ever writes to the registry or the environment.
+ */
+export interface PersistentPath {
+    user: string[];
+    machine: string[];
+}
+/** Extract the value of `Path` from `reg query <key> /v Path` output. */
+export declare function parseRegPath(output: string): string | null;
+/** Expand %NAME% references the way Windows does (case-insensitive); unknown names are left untouched. */
+export declare function expandWindowsVars(value: string, env: NodeJS.ProcessEnv): string;
+export declare function splitPathList(value: string): string[];
+/** Windows paths are case-insensitive and tolerate trailing separators and `.`/`..` segments. */
+export declare function normalizeWindowsDir(dir: string): string;
+/** Windows only. Returns null on every other platform, or when the user PATH cannot be read (unknown, not "absent"). */
+export declare function readPersistentPath(runner: Runner, platform: NodeJS.Platform, env: NodeJS.ProcessEnv, signal?: AbortSignal): Promise<PersistentPath | null>;
+/** Which persistent PATH (if any) lists this directory. */
+export declare function persistentPathHas(pp: PersistentPath, dir: string): 'user' | 'machine' | null;

package/dist/integrations/persistentPath.js

@@ -0,0 +1,47 @@
+import path from 'node:path';
+const USER_KEY = 'HKCU\\Environment';
+const MACHINE_KEY = 'HKLM\\SYSTEM\\CurrentControlSet\\Control\\Session Manager\\Environment';
+/** Extract the value of `Path` from `reg query <key> /v Path` output. */
+export function parseRegPath(output) {
+    const m = /^\s*Path\s+REG_(?:EXPAND_)?SZ\s+(.*?)\s*$/im.exec(output);
+    return m && m[1] !== undefined ? m[1] : null;
+}
+/** Expand %NAME% references the way Windows does (case-insensitive); unknown names are left untouched. */
+export function expandWindowsVars(value, env) {
+    const lower = new Map(Object.entries(env).map(([k, v]) => [k.toLowerCase(), v ?? '']));
+    return value.replace(/%([^%]+)%/g, (whole, name) => lower.get(name.toLowerCase()) ?? whole);
+}
+export function splitPathList(value) {
+    return value.split(';').map((s) => s.trim().replace(/^"(.*)"$/, '$1')).filter(Boolean);
+}
+/** Windows paths are case-insensitive and tolerate trailing separators and `.`/`..` segments. */
+export function normalizeWindowsDir(dir) {
+    return path.win32.normalize(dir).replace(/[\\/]+$/, '').toLowerCase();
+}
+async function readKey(runner, key, env, signal) {
+    const r = await runner.run({ command: 'reg', args: ['query', key, '/v', 'Path'], timeoutMs: 10_000, signal });
+    if (!r.ok)
+        return null;
+    const raw = parseRegPath(r.stdout);
+    return raw === null ? [] : splitPathList(expandWindowsVars(raw, env));
+}
+/** Windows only. Returns null on every other platform, or when the user PATH cannot be read (unknown, not "absent"). */
+export async function readPersistentPath(runner, platform, env, signal) {
+    if (platform !== 'win32')
+        return null;
+    const user = await readKey(runner, USER_KEY, env, signal);
+    if (user === null)
+        return null;
+    const machine = (await readKey(runner, MACHINE_KEY, env, signal)) ?? [];
+    return { user, machine };
+}
+/** Which persistent PATH (if any) lists this directory. */
+export function persistentPathHas(pp, dir) {
+    const want = normalizeWindowsDir(dir);
+    if (pp.user.some((p) => normalizeWindowsDir(p) === want))
+        return 'user';
+    if (pp.machine.some((p) => normalizeWindowsDir(p) === want))
+        return 'machine';
+    return null;
+}
+//# sourceMappingURL=persistentPath.js.map

package/dist/integrations/persistentPath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistentPath.js","sourceRoot":"","sources":["../../src/integrations/persistentPath.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAY7B,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AACrC,MAAM,WAAW,GAAG,wEAAwE,CAAC;AAE7F,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,CAAC,GAAG,6CAA6C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,GAAsB;IACrE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACzF,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,GAAW,EAAE,GAAsB,EAAE,MAAoB;IAC9F,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9G,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,wHAAwH;AACxH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,QAAyB,EAAE,GAAsB,EAAE,MAAoB;IAC9H,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,iBAAiB,CAAC,EAAkB,EAAE,GAAW;IAC/D,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACxE,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import path from 'node:path';\nimport type { Runner } from './types.js';\n\n/**\n * The PATH Windows will give to NEW processes, as stored in the registry. A running terminal or editor keeps the PATH\n * it started with, so it can differ from this. Read-only: nothing here ever writes to the registry or the environment.\n */\nexport interface PersistentPath {\n  user: string[];\n  machine: string[];\n}\n\nconst USER_KEY = 'HKCU\\\\Environment';\nconst MACHINE_KEY = 'HKLM\\\\SYSTEM\\\\CurrentControlSet\\\\Control\\\\Session Manager\\\\Environment';\n\n/** Extract the value of `Path` from `reg query <key> /v Path` output. */\nexport function parseRegPath(output: string): string | null {\n  const m = /^\\s*Path\\s+REG_(?:EXPAND_)?SZ\\s+(.*?)\\s*$/im.exec(output);\n  return m && m[1] !== undefined ? m[1] : null;\n}\n\n/** Expand %NAME% references the way Windows does (case-insensitive); unknown names are left untouched. */\nexport function expandWindowsVars(value: string, env: NodeJS.ProcessEnv): string {\n  const lower = new Map(Object.entries(env).map(([k, v]) => [k.toLowerCase(), v ?? '']));\n  return value.replace(/%([^%]+)%/g, (whole, name: string) => lower.get(name.toLowerCase()) ?? whole);\n}\n\nexport function splitPathList(value: string): string[] {\n  return value.split(';').map((s) => s.trim().replace(/^\"(.*)\"$/, '$1')).filter(Boolean);\n}\n\n/** Windows paths are case-insensitive and tolerate trailing separators and `.`/`..` segments. */\nexport function normalizeWindowsDir(dir: string): string {\n  return path.win32.normalize(dir).replace(/[\\\\/]+$/, '').toLowerCase();\n}\n\nasync function readKey(runner: Runner, key: string, env: NodeJS.ProcessEnv, signal?: AbortSignal): Promise<string[] | null> {\n  const r = await runner.run({ command: 'reg', args: ['query', key, '/v', 'Path'], timeoutMs: 10_000, signal });\n  if (!r.ok) return null;\n  const raw = parseRegPath(r.stdout);\n  return raw === null ? [] : splitPathList(expandWindowsVars(raw, env));\n}\n\n/** Windows only. Returns null on every other platform, or when the user PATH cannot be read (unknown, not \"absent\"). */\nexport async function readPersistentPath(runner: Runner, platform: NodeJS.Platform, env: NodeJS.ProcessEnv, signal?: AbortSignal): Promise<PersistentPath | null> {\n  if (platform !== 'win32') return null;\n  const user = await readKey(runner, USER_KEY, env, signal);\n  if (user === null) return null;\n  const machine = (await readKey(runner, MACHINE_KEY, env, signal)) ?? [];\n  return { user, machine };\n}\n\n/** Which persistent PATH (if any) lists this directory. */\nexport function persistentPathHas(pp: PersistentPath, dir: string): 'user' | 'machine' | null {\n  const want = normalizeWindowsDir(dir);\n  if (pp.user.some((p) => normalizeWindowsDir(p) === want)) return 'user';\n  if (pp.machine.some((p) => normalizeWindowsDir(p) === want)) return 'machine';\n  return null;\n}\n"]}

package/dist/integrations/protect.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Installers (graphify, claude plugin, skills CLI) edit files the user owns. Before a step runs we snapshot the files
+ * it may touch, and afterwards verify that everything the user had is still there. If not, we restore the snapshot.
+ */
+export interface Snapshot {
+    root: string;
+    /** rel path -> original text, or null when the file did not exist. */
+    files: Map<string, string | null>;
+    /** Existing files below these directories must stay byte-identical. */
+    trees: Map<string, string>;
+}
+export interface Violation {
+    path: string;
+    reason: string;
+}
+export declare function takeSnapshot(root: string, files: string[], trees?: string[], skipInTrees?: (rel: string) => boolean): Promise<Snapshot>;
+/** True if every key/element of `before` is still present in `after` (after may add more). */
+export declare function jsonExtends(before: unknown, after: unknown): boolean;
+export declare function verifySnapshot(snap: Snapshot): Promise<Violation[]>;
+export declare function restoreSnapshot(snap: Snapshot, violations: Violation[]): Promise<void>;