dsh-git-worktree 0.9.0 → 0.9.2

package/lib/adapters/worktree-creation.js

@@ -0,0 +1,321 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+import { lstat, mkdir, readdir, readFile, realpath, rmdir, readlink } from 'node:fs/promises';
+import { dirname, join, resolve, relative, isAbsolute } from 'node:path';
+import { WorktreeCreationFailure } from '../creation-failure.js';
+import { createNodeFilesPort } from './files.js';
+const files = createNodeFilesPort();
+const samePath = (a, b) => process.platform === 'win32'
+    ? resolve(a).toLowerCase() === resolve(b).toLowerCase() : resolve(a) === resolve(b);
+const sameIdentity = (a, b) => a !== null && JSON.stringify(a) === JSON.stringify(b);
+/** Registration is short; the expensive checkout runs only after its ownership proof is durable. */
+export async function createWorktree(localRoot, target, baseOid, run, saveEvidence = () => { }) {
+    let evidence;
+    let failure;
+    let registered = false;
+    let claimed = false;
+    let originalMetadata = [];
+    const checked = async (cwd, args, creating = true) => {
+        const result = await run(cwd, args, creating);
+        if (result.code !== 0) {
+            failure = result;
+            throw new Error(result.stderr || `git ${args.join(' ')} failed`);
+        }
+        return result.stdout;
+    };
+    try {
+        const commonDir = await realpath(await checked(localRoot, ['rev-parse', '--path-format=absolute', '--git-common-dir']));
+        const parent = await realpath(dirname(target));
+        if (!samePath(parent, dirname(target)))
+            throw new Error('Worktree parent path changed');
+        const parentIdentity = await files.inspectDirectoryIdentity(parent);
+        const commonIdentity = await files.inspectDirectoryIdentity(commonDir);
+        if (!parentIdentity || !commonIdentity)
+            throw new Error('Worktree parent identity cannot be verified');
+        try {
+            originalMetadata = (await readdir(join(commonDir, 'worktrees'))).sort();
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        await mkdir(target); // Exclusive: an existing directory, including an empty one, is not this attempt's.
+        claimed = true;
+        const rootIdentity = await files.inspectDirectoryIdentity(target);
+        if (!rootIdentity)
+            throw new Error('Worktree directory identity cannot be verified');
+        evidence = { root: target, rootIdentity, parentIdentity, commonDir, commonIdentity, lockReason: `dsh-create-${randomUUID()}` };
+        saveEvidence(evidence);
+        await checked(localRoot, ['worktree', 'add', '--detach', '--no-checkout', '--lock', '--reason', evidence.lockReason, target, baseOid]);
+        const gitDir = await realpath(await checked(target, ['rev-parse', '--absolute-git-dir']));
+        const gitIdentity = await files.inspectDirectoryIdentity(gitDir);
+        if (!gitIdentity)
+            throw new Error('Worktree metadata identity cannot be verified');
+        evidence = { ...evidence, gitDir, gitIdentity, metadataFingerprint: await metadataFingerprint(gitDir) };
+        saveEvidence(evidence);
+        registered = true;
+        await verifyIdentity(evidence, baseOid);
+        // read-tree publishes a complete index before any worktree file is written.
+        // checkout-index without -f never overwrites a file supplied by another writer.
+        const sparse = await checked(target, ['config', '--bool', '--get', 'core.sparseCheckout']).catch(error => {
+            if (failure?.code === 1) {
+                failure = undefined;
+                return 'false';
+            }
+            throw error;
+        });
+        if (sparse === 'true') {
+            // Match native worktree add's sparse checkout semantics. A failed reset
+            // may retain an index lock and therefore cannot be automatically removed.
+            await checked(target, ['reset', '--hard', '--no-recurse-submodules', baseOid]);
+        }
+        else {
+            await checked(target, ['read-tree', baseOid]);
+            evidence = { ...evidence, indexFingerprint: createHash('sha256').update(await readFile(join(gitDir, 'index'))).digest('hex') };
+            await saveEvidence(evidence);
+            await checked(target, ['checkout-index', '--all']);
+        }
+        await verifyIdentity(evidence, baseOid);
+        await checked(localRoot, ['worktree', 'unlock', target]);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        if (!claimed)
+            throw new WorktreeCreationFailure(message, true);
+        if (evidence && !registered && failure?.quiescent === true) {
+            try {
+                const listed = await run(localRoot, ['worktree', 'list', '--porcelain', '-z']);
+                let metadata = [];
+                try {
+                    metadata = (await readdir(join(evidence.commonDir, 'worktrees'))).sort();
+                }
+                catch (error) {
+                    if (error.code !== 'ENOENT')
+                        throw error;
+                }
+                const registeredRoot = listed.stdout.split('\0').some(part => part.startsWith('worktree ') && samePath(part.slice(9), target));
+                if (listed.code === 0 && !registeredRoot && JSON.stringify(metadata) === JSON.stringify(originalMetadata)
+                    && sameIdentity(await files.inspectDirectoryIdentity(target), evidence.rootIdentity)
+                    && sameIdentity(await files.inspectDirectoryIdentity(dirname(target)), evidence.parentIdentity)
+                    && sameIdentity(await files.inspectDirectoryIdentity(evidence.commonDir), evidence.commonIdentity)
+                    && (await readdir(target)).length === 0) {
+                    await rmdir(target);
+                    throw new WorktreeCreationFailure(message, true);
+                }
+            }
+            catch (cleanupError) {
+                if (cleanupError instanceof WorktreeCreationFailure)
+                    throw cleanupError;
+            }
+        }
+        // A timeout in registration (including Git's initializing/index locks), a lost
+        // process-tree observation or missing durable identity is never deletion authority.
+        if (evidence && registered && failure?.quiescent === true) {
+            try {
+                await verifyIdentity(evidence, baseOid);
+                await verifyRollbackMetadata(evidence, baseOid);
+                await verifyUnmodified(evidence.root, baseOid, run);
+                const quarantinePath = `${target}.failed-${randomUUID()}`;
+                evidence = { ...evidence, quarantinePath };
+                saveEvidence(evidence);
+                // Unlike worktree repair (which also scans other registrations), move
+                // updates only this checkout's backlink and keeps its directory object.
+                const moved = await run(localRoot, ['worktree', 'move', '--force', '--force', target, quarantinePath]);
+                if (moved.code !== 0)
+                    throw new Error(moved.stderr);
+                evidence = { ...evidence, root: quarantinePath, indexFingerprint: createHash('sha256').update(await readFile(join(evidence.gitDir, 'index'))).digest('hex') };
+                saveEvidence(evidence);
+                await verifyIdentity(evidence, baseOid);
+                await verifyRollbackMetadata(evidence, baseOid);
+                await verifyUnmodified(quarantinePath, baseOid, run);
+                await verifyIdentity(evidence, baseOid);
+                await verifyRollbackMetadata(evidence, baseOid);
+                const removed = await run(localRoot, ['worktree', 'remove', '--force', '--force', quarantinePath]);
+                if (removed.code !== 0)
+                    throw new Error(removed.stderr);
+                if (files.exists(quarantinePath) || files.exists(evidence.gitDir))
+                    throw new Error('Worktree rollback incomplete');
+                throw new WorktreeCreationFailure(message, true);
+            }
+            catch (rollbackError) {
+                if (rollbackError instanceof WorktreeCreationFailure)
+                    throw rollbackError;
+                throw new WorktreeCreationFailure(`${message}; ${rollbackError instanceof Error ? rollbackError.message : String(rollbackError)}`, false);
+            }
+        }
+        throw new WorktreeCreationFailure(`${message}${evidence?.quarantinePath ? ` (${evidence.quarantinePath})` : ''}`, false);
+    }
+}
+async function verifyIdentity(e, baseOid) {
+    const fail = () => { throw new Error('Failed creation identity changed; residue preserved'); };
+    if (!e.gitDir || !e.gitIdentity)
+        return fail();
+    if (!sameIdentity(await files.inspectDirectoryIdentity(e.root), e.rootIdentity)
+        || !sameIdentity(await files.inspectDirectoryIdentity(dirname(e.root)), e.parentIdentity)
+        || !sameIdentity(await files.inspectDirectoryIdentity(e.commonDir), e.commonIdentity)
+        || !sameIdentity(await files.inspectDirectoryIdentity(e.gitDir), e.gitIdentity))
+        return fail();
+    const child = relative(join(e.commonDir, 'worktrees'), e.gitDir);
+    if (!child || child.includes('..') || isAbsolute(child) || child.includes('/') || child.includes('\\'))
+        return fail();
+    const text = async (path) => {
+        const stat = await lstat(path);
+        if (!stat.isFile() || stat.isSymbolicLink())
+            return fail();
+        return (await readFile(path, 'utf8')).trim();
+    };
+    const pointer = await text(join(e.root, '.git'));
+    if (!pointer.startsWith('gitdir: ') || !samePath(resolve(e.root, pointer.slice(8)), e.gitDir)
+        || !samePath(await text(join(e.gitDir, 'gitdir')), join(e.root, '.git'))
+        || !samePath(resolve(e.gitDir, await text(join(e.gitDir, 'commondir'))), e.commonDir)
+        || await text(join(e.gitDir, 'HEAD')) !== baseOid
+        || await text(join(e.gitDir, 'locked')) !== e.lockReason)
+        return fail();
+    // Never break an index lock, including an interrupted read-tree's lock.
+    if ((await readdir(e.gitDir)).some(name => name.endsWith('.lock')))
+        return fail();
+}
+async function verifyRollbackMetadata(e, baseOid) {
+    if (!e.gitDir || !e.metadataFingerprint || await metadataFingerprint(e.gitDir) !== e.metadataFingerprint)
+        throw new Error('Creation metadata changed');
+    if (!e.indexFingerprint || createHash('sha256').update(await readFile(join(e.gitDir, 'index'))).digest('hex') !== e.indexFingerprint)
+        throw new Error(`Creation index bytes changed at ${e.root}`);
+    for (const name of ['index', 'ORIG_HEAD']) {
+        try {
+            const path = join(e.gitDir, name), stat = await lstat(path);
+            if (!stat.isFile() || stat.isSymbolicLink())
+                throw new Error('Unexpected creation metadata object');
+            if (name === 'ORIG_HEAD' && (await readFile(path, 'utf8')).trim() !== baseOid)
+                throw new Error('Creation ORIG_HEAD changed');
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+    }
+}
+async function metadataFingerprint(gitDir) {
+    const hash = createHash('sha256');
+    async function walk(path, prefix = '') {
+        for (const name of (await readdir(path)).sort()) {
+            // Git updates these during checkout or single-target move. Their semantic
+            // contents and pointer are checked separately; every other byte is immutable.
+            if (!prefix && ['index', 'gitdir', 'ORIG_HEAD'].includes(name))
+                continue;
+            const entry = join(path, name);
+            const stat = await lstat(entry);
+            const key = `${prefix}${name}`;
+            const allowed = stat.isDirectory() ? ['refs', 'logs', 'info'] : ['HEAD', 'commondir', 'locked', 'config.worktree', 'logs/HEAD', 'info/sparse-checkout'];
+            if (!allowed.includes(key))
+                throw new Error('Unknown creation metadata');
+            hash.update(`${key}\0`);
+            if (stat.isSymbolicLink())
+                throw new Error('Unexpected metadata symlink');
+            if (stat.isDirectory()) {
+                hash.update('directory\0');
+                await walk(entry, `${prefix}${name}/`);
+            }
+            else if (stat.isFile() && stat.size <= 1_048_576) {
+                hash.update(`file:${stat.size}\0`);
+                hash.update(await readFile(entry));
+            }
+            else
+                throw new Error('Unexpected metadata object');
+        }
+    }
+    await walk(gitDir);
+    return hash.digest('hex');
+}
+async function verifyUnmodified(root, baseOid, run) {
+    const checked = async (args) => {
+        const result = await run(root, args);
+        if (result.code !== 0)
+            throw new Error(result.stderr);
+        return result.stdout;
+    };
+    // The complete index must still equal the authorized base. No skip-worktree / assume-unchanged shortcuts.
+    const entries = await checked(['ls-files', '--stage', '-z']);
+    if (entries.split('\0').some(line => line.startsWith('160000 ')))
+        throw new Error('Submodule creation residue must be preserved');
+    // Clean filters and working-tree encodings may discard bytes while comparing.
+    // Such a semantic comparison cannot authorize deleting a failed checkout.
+    const paths = entries.split('\0').filter(Boolean).map(line => line.slice(line.indexOf('\t') + 1));
+    const tracked = new Set(paths);
+    const directories = new Set();
+    for (const path of paths) {
+        const segments = path.split('/');
+        for (let i = 1; i < segments.length; i++)
+            directories.add(segments.slice(0, i).join('/'));
+    }
+    const inspectEntries = async (directory, prefix = '') => {
+        for (const entry of await readdir(directory, { withFileTypes: true })) {
+            if (!prefix && entry.name === '.git')
+                continue;
+            const path = `${prefix}${entry.name}`;
+            if (entry.isDirectory()) {
+                if (!directories.has(path))
+                    throw new Error('Unknown creation directory; preserved');
+                await inspectEntries(join(directory, entry.name), `${path}/`);
+            }
+            else if (!tracked.has(path))
+                throw new Error('Unknown creation contents; preserved');
+        }
+    };
+    await inspectEntries(root);
+    for (let i = 0; i < paths.length; i += 100) {
+        const attributes = await checked(['check-attr', '-z', 'filter', 'working-tree-encoding', '--', ...paths.slice(i, i + 100)]);
+        const fields = attributes.split('\0');
+        for (let j = 2; j < fields.length; j += 3) {
+            if (fields[j] !== 'unspecified' && fields[j] !== 'unset')
+                throw new Error('Checkout conversions require preservation');
+        }
+    }
+    for (const line of entries.split('\0').filter(Boolean)) {
+        const match = /^(\d+) ([0-9a-f]+) 0\t([\s\S]+)$/.exec(line);
+        if (!match)
+            throw new Error('Unexpected creation index entry');
+        const [, mode, oid, path] = match;
+        const absolute = resolve(root, path);
+        if (!absolute.startsWith(`${resolve(root)}${process.platform === 'win32' ? '\\' : '/'}`))
+            throw new Error('Invalid checkout path');
+        try {
+            const stat = await lstat(absolute);
+            const hash = createHash(oid.length === 64 ? 'sha256' : 'sha1');
+            if (mode === '120000' && stat.isSymbolicLink()) {
+                const bytes = Buffer.from(await readlink(absolute));
+                hash.update(`blob ${bytes.length}\0`).update(bytes);
+            }
+            else if (stat.isFile() && !stat.isSymbolicLink()) {
+                hash.update(`blob ${stat.size}\0`);
+                let size = 0;
+                for await (const chunk of createReadStream(absolute)) {
+                    hash.update(chunk);
+                    size += chunk.length;
+                }
+                if (size !== stat.size)
+                    throw new Error('Checkout file changed while checking');
+            }
+            else
+                throw new Error('Unexpected checkout filesystem object');
+            if (hash.digest('hex') !== oid)
+                throw new Error('Checkout bytes require preservation');
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+    }
+    const staged = await checked(['diff-index', '--cached', '--name-only', baseOid, '--']);
+    const flags = await checked(['ls-files', '-v', '-z']);
+    if (staged || flags.split('\0').some(line => line && !line.startsWith('H ')))
+        throw new Error(`Creation index entries changed: ${staged} / ${flags}`);
+    const unknown = await checked(['ls-files', '--others', '-z']); // includes ignored files
+    const changed = await checked(['diff', '--no-ext-diff', '--no-textconv', '--name-status', '-z', baseOid, '--']);
+    if (unknown)
+        throw new Error('Unknown creation contents; preserved');
+    const parts = changed.split('\0').filter(Boolean);
+    for (let i = 0; i < parts.length; i += 2)
+        if (parts[i] !== 'D' || !parts[i + 1])
+            throw new Error('Modified creation contents; preserved');
+}
+//# sourceMappingURL=worktree-creation.js.map

package/lib/adapters/worktree-creation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-creation.js","sourceRoot":"","sources":["../../src/adapters/worktree-creation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC7F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAExE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAA;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAIhD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;AACnC,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;IACrE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;AACrF,MAAM,YAAY,GAAG,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;AAEtG,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,MAAc,EAAE,OAAe,EAAE,GAAQ,EAC/F,eAA6D,GAAG,EAAE,GAAE,CAAC;IACrE,IAAI,QAA8C,CAAA;IAClD,IAAI,OAA2B,CAAA;IAC/B,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,gBAAgB,GAAa,EAAE,CAAA;IACnC,MAAM,OAAO,GAAG,KAAK,EAAE,GAAW,EAAE,IAAc,EAAE,QAAQ,GAAG,IAAI,EAAE,EAAE;QACrE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,GAAG,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAAC,CAAC;QAC7G,OAAO,MAAM,CAAC,MAAM,CAAA;IACtB,CAAC,CAAA;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAA;QACvH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;QAC9C,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACvF,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAA;QACnE,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAA;QACtE,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;QACtG,IAAI,CAAC;YAAC,gBAAgB,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QAC/E,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QAAC,CAAC;QACrF,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA,CAAC,mFAAmF;QACvG,OAAO,GAAG,IAAI,CAAA;QACd,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAA;QACjE,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;QACpF,QAAQ,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,UAAU,EAAE,EAAE,EAAE,CAAA;QAC9H,YAAY,CAAC,QAAQ,CAAC,CAAA;QACtB,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;QACtI,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAA;QACzF,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAA;QAChE,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAClF,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAA;QACvG,YAAY,CAAC,QAAQ,CAAC,CAAA;QACtB,UAAU,GAAG,IAAI,CAAA;QACjB,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACvC,4EAA4E;QAC5E,gFAAgF;QAChF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACvG,IAAI,OAAO,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC;gBAAC,OAAO,GAAG,SAAS,CAAC;gBAAC,OAAO,OAAO,CAAA;YAAC,CAAC;YAChE,MAAM,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;QACF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,wEAAwE;YACxE,0EAA0E;YAC1E,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAC,CAAA;QAChF,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;YAC7C,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,gBAAgB,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;YAC9H,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAA;YAC5B,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAA;QACpD,CAAC;QACD,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACvC,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC9D,IAAI,QAAQ,IAAI,CAAC,UAAU,IAAI,OAAO,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;YAC3D,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAA;gBAC9E,IAAI,QAAQ,GAAa,EAAE,CAAA;gBAC3B,IAAI,CAAC;oBAAC,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBAAC,CAAC;gBAChF,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAA;gBAAC,CAAC;gBACrF,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;gBAC9H,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;uBACpG,YAAY,CAAC,MAAM,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC;uBACjF,YAAY,CAAC,MAAM,KAAK,CAAC,wBAAwB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,cAAc,CAAC;uBAC5F,YAAY,CAAC,MAAM,KAAK,CAAC,wBAAwB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,cAAc,CAAC;uBAC/F,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1C,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;oBACnB,MAAM,IAAI,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;gBAClD,CAAC;YACH,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,IAAI,YAAY,YAAY,uBAAuB;oBAAE,MAAM,YAAY,CAAA;YACzE,CAAC;QACH,CAAC;QACD,+EAA+E;QAC/E,oFAAoF;QACpF,IAAI,QAAQ,IAAI,UAAU,IAAI,OAAO,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;YAC1D,IAAI,CAAC;gBACH,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;gBACvC,MAAM,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;gBAC/C,MAAM,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;gBACnD,MAAM,cAAc,GAAG,GAAG,MAAM,WAAW,UAAU,EAAE,EAAE,CAAA;gBACzD,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,cAAc,EAAE,CAAA;gBAC1C,YAAY,CAAC,QAAQ,CAAC,CAAA;gBACtB,sEAAsE;gBACtE,wEAAwE;gBACxE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;gBACtG,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBACnD,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;gBAC9J,YAAY,CAAC,QAAQ,CAAC,CAAA;gBACtB,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;gBACvC,MAAM,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;gBAC/C,MAAM,gBAAgB,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;gBACpD,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;gBACvC,MAAM,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;gBAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAA;gBAClG,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;gBACvD,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAO,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;gBACnH,MAAM,IAAI,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAClD,CAAC;YAAC,OAAO,aAAa,EAAE,CAAC;gBACvB,IAAI,aAAa,YAAY,uBAAuB;oBAAE,MAAM,aAAa,CAAA;gBACzE,MAAM,IAAI,uBAAuB,CAAC,GAAG,OAAO,KAAK,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;YAC3I,CAAC;QACH,CAAC;QACD,MAAM,IAAI,uBAAuB,CAAC,GAAG,OAAO,GAAG,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAC1H,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,CAA2B,EAAE,OAAe;IACxE,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA,CAAC,CAAC,CAAA;IAC7F,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW;QAAE,OAAO,IAAI,EAAE,CAAA;IAC9C,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC;WAC1E,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC;WACtF,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC;WAClF,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,EAAE,CAAA;IAChG,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;IAChE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,EAAE,CAAA;IACrH,MAAM,IAAI,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,OAAO,IAAI,EAAE,CAAA;QAC1D,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC9C,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IAChD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;WACxF,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;WACrE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;WAClF,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,OAAO;WAC9C,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU;QAAE,OAAO,IAAI,EAAE,CAAA;IACzE,wEAAwE;IACxE,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,EAAE,CAAA;AACnF,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,CAA2B,EAAE,OAAe;IAChF,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,mBAAmB,IAAI,MAAM,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IACtJ,IAAI,CAAC,CAAC,CAAC,gBAAgB,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAClM,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YAC3D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;YACnG,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAC9H,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,MAAc;IAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjC,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,MAAM,GAAG,EAAE;QAC3C,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAChD,0EAA0E;YAC1E,8EAA8E;YAC9E,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACxE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;YAC/B,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,EAAE,CAAA;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAA;YACvJ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;YACxE,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAA;YACvB,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;YACzE,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBAAC,MAAM,IAAI,CAAC,KAAK,EAAE,GAAG,MAAM,GAAG,IAAI,GAAG,CAAC,CAAA;YAAC,CAAC;iBACzF,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;YAAC,CAAC;;gBACvH,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QACpD,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,MAAM,CAAC,CAAA;IAClB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3B,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe,EAAE,GAAQ;IACrE,MAAM,OAAO,GAAG,KAAK,EAAE,IAAc,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACpC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACrD,OAAO,MAAM,CAAC,MAAM,CAAA;IACtB,CAAC,CAAA;IACD,0GAA0G;IAC1G,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAA;IAC5D,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACjI,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACjG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IAC9B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,EAAE,SAAiB,EAAE,MAAM,GAAG,EAAE,EAAiB,EAAE;QAC7E,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAQ;YAC9C,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;YACrC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;gBACpF,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,GAAG,CAAC,CAAA;YAC/D,CAAC;iBAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QACxF,CAAC;IACH,CAAC,CAAA;IACD,MAAM,cAAc,CAAC,IAAI,CAAC,CAAA;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,uBAAuB,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QAC3H,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,aAAa,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QACxH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QAC9D,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,KAAK,CAAA;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,IAAK,CAAC,CAAA;QACrC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAClI,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAA;YAClC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAI,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YAC/D,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;gBACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrD,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,CAAA;gBAClC,IAAI,IAAI,GAAG,CAAC,CAAA;gBACZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;gBAAC,CAAC;gBAClG,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YACjF,CAAC;;gBAAM,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;YAC/D,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACxF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QAAC,CAAC;IACzF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;IACtF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;IACrD,IAAI,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,MAAM,KAAK,EAAE,CAAC,CAAA;IACrJ,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAA,CAAC,yBAAyB;IACvF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;IAC/G,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACpE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;AAC3I,CAAC"}

package/lib/console-host/control-plane.js

@@ -147,8 +147,10 @@ export function createWorktreeConsoleControlPlane(options) {
             throw domainError('project_mismatch', hostMessage('theCurrentSessionCwdDoesNotMatchTheWorktree'));
         }
     }
-    async function authorize(sessionId, checkoutId) {
-        const caller = await options.module.inspect(sessionId);
+    async function authorize(sessionId, checkoutId, observedCaller) {
+        // Only read endpoints pass a caller observed in this request. Mutations
+        // always perform fresh inspection before their own transactional checks.
+        const caller = observedCaller ?? await options.module.inspect(sessionId);
         const record = recordOf(options.registry, checkoutId);
         if (record.ownerSessionId !== sessionId && record.sourceSessionId !== sessionId) {
             throw domainError('not_owner', hostMessage('theCurrentSessionIsNotAllowedToAccessThis'));
@@ -166,10 +168,10 @@ export function createWorktreeConsoleControlPlane(options) {
         }
         return record;
     }
-    async function linkedReadAccess(sessionId, checkoutId) {
+    async function linkedReadAccess(sessionId, checkoutId, observedCaller) {
         const requested = recordOf(options.registry, checkoutId);
         if (requested.ownerSessionId === sessionId || requested.sourceSessionId === sessionId) {
-            return { record: await authorize(sessionId, checkoutId), linkedRead: false };
+            return { record: await authorize(sessionId, checkoutId, observedCaller), linkedRead: false };
         }
         const caller = await callerTarget(sessionId);
         if (caller.checkout.kind !== 'isolated') {
@@ -219,6 +221,8 @@ export function createWorktreeConsoleControlPlane(options) {
     async function observe(record) {
         if (record.phase === 'discarded')
             return { managedRoot: null };
+        if (options.module.observeManagedCheckout)
+            return options.module.observeManagedCheckout(record.checkoutId);
         const managedRoot = await options.module.resolveManagedRoot(record.checkoutId);
         const snapshot = await options.git.inspect(managedRoot);
         if (snapshot === null)
@@ -270,8 +274,8 @@ export function createWorktreeConsoleControlPlane(options) {
             changedFiles: [...delivery.proof.changedFiles],
         };
     }
-    async function details(sessionId, checkoutId, observedDeliveryProof) {
-        const access = await linkedReadAccess(sessionId, checkoutId);
+    async function details(sessionId, checkoutId, observedDeliveryProof, observedCaller) {
+        const access = await linkedReadAccess(sessionId, checkoutId, observedCaller);
         const observed = await observe(access.record);
         let projectedRecord = access.record;
         if (access.acceptanceAnchorCheckoutId !== undefined) {
@@ -416,7 +420,7 @@ export function createWorktreeConsoleControlPlane(options) {
             if (target.checkout.kind === 'local')
                 return { target: projectLocal(target, sessionId) };
             return {
-                target: await details(sessionId, target.checkout.id, deliveryProofFromTarget(target)),
+                target: await details(sessionId, target.checkout.id, deliveryProofFromTarget(target), target),
             };
         }),
         list: request => outcome(async () => {
@@ -424,7 +428,7 @@ export function createWorktreeConsoleControlPlane(options) {
             let sourceSessionId = request.sessionId;
             let localRoot;
             if (caller.checkout.kind === 'isolated') {
-                const anchor = await authorize(request.sessionId, caller.checkout.id);
+                const anchor = await authorize(request.sessionId, caller.checkout.id, caller);
                 sourceSessionId = anchor.sourceSessionId ?? anchor.ownerSessionId;
                 localRoot = anchor.localRoot;
             }