loopforge 3.9.2 → 4.0.7

package/dist/workspace-restore.js

@@ -0,0 +1,604 @@
+/** v3.9.8: deterministic workspace restore.
+ *
+ * This module is the ONLY place LoopForge mutates the working tree. It runs
+ * only after a typed rollback directive has been committed, restores the
+ * declared Git boundary (content + HEAD), and verifies the result exactly.
+ * It never chooses a target and never interprets the Agent's reason.
+ *
+ * Preconditions are checked before the destructive part: manifest/content
+ * hashes, path containment, index state, target HEAD reachability, and
+ * directory/type conflicts. File-by-file restore is not atomic; every retry
+ * re-plans from the directive + manifest and is idempotent.
+ */
+import { createHash } from "node:crypto";
+import { chmodSync, closeSync, copyFileSync, createReadStream, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, renameSync, rmSync, rmdirSync, symlinkSync, unlinkSync, } from "node:fs";
+import { isAbsolute, relative, resolve, sep } from "node:path";
+import { CHECKPOINT_SCHEMA_VERSION } from "./protocol.js";
+import { captureBoundary, runGitCommandStatus } from "./git-boundary.js";
+import { containInWorkspace } from "./workspace.js";
+import { checkpointContentHash, deriveCheckpointId, } from "./workspace-checkpoint.js";
+import { EvidenceCollector } from "./evidence-provider.js";
+export class RestoreFailure extends Error {
+    reasonCode;
+    details;
+    constructor(reasonCode, message, details) {
+        super(message);
+        this.reasonCode = reasonCode;
+        this.details = details;
+        this.name = "RestoreFailure";
+    }
+}
+function sha256File(path) {
+    return new Promise((resolveHash, reject) => {
+        const hash = createHash("sha256");
+        const stream = createReadStream(path, { highWaterMark: 64 * 1024 });
+        stream.on("data", (chunk) => hash.update(chunk));
+        stream.on("error", reject);
+        stream.on("end", () => resolveHash(hash.digest("hex")));
+    });
+}
+function isRuntimePath(abs, workspace, stateDir, exclude) {
+    if (exclude?.(abs))
+        return true;
+    if (!stateDir)
+        return false;
+    const stateAbs = resolve(workspace, stateDir);
+    const rel = relative(stateAbs, abs);
+    return rel === "" || (!rel.startsWith(`..${sep}`) && rel !== "..");
+}
+function safeTargetPath(path, context) {
+    if (!path || path.includes("\0")) {
+        throw new RestoreFailure("unsafe_path", "path is empty or contains NUL");
+    }
+    // Git paths are workspace-relative and use forward slashes. Reject the
+    // Windows separator and drive-relative/absolute forms instead of letting
+    // path.resolve reinterpret them after the parent check.
+    if (path.includes("\\") || isAbsolute(path) || /^[A-Za-z]:/.test(path)) {
+        throw new RestoreFailure("unsafe_path", `path ${path} is not a workspace-relative Git path`);
+    }
+    if (path.split("/").some((part) => part === "..")) {
+        throw new RestoreFailure("unsafe_path", `path ${path} contains a parent traversal`);
+    }
+    if (path === ".git" || path.startsWith(".git/") || path === ".git\\" ||
+        path.startsWith(".git\\")) {
+        throw new RestoreFailure("unsafe_path", `refusing to restore .git path ${path}`);
+    }
+    // Validate the lexical parent and its realpath ancestors, but return the
+    // LEXICAL path: the final component may be a symlink that must be replaced,
+    // not followed. A symlink whose link text points outside is a valid target
+    // state; writing THROUGH a symlinked parent is what must be refused.
+    const parent = path.includes("/")
+        ? path.slice(0, path.lastIndexOf("/")) || "."
+        : ".";
+    try {
+        containInWorkspace(context.workspace, parent);
+    }
+    catch (error) {
+        throw new RestoreFailure("unsafe_path", `path ${path} leaves the workspace: ${String(error)}`);
+    }
+    const abs = resolve(context.workspace, path);
+    if (isRuntimePath(abs, context.workspace, context.stateDir, context.exclude)) {
+        throw new RestoreFailure("unsafe_path", `refusing to restore runtime path ${path}`);
+    }
+    return abs;
+}
+function fingerprintKind(fingerprint) {
+    if (fingerprint === "missing")
+        return { kind: "missing" };
+    if (fingerprint.startsWith("link:")) {
+        return { kind: "symlink", hash: fingerprint.slice(5) };
+    }
+    if (fingerprint.startsWith("gitlink:"))
+        return { kind: "gitlink" };
+    if (fingerprint.startsWith("dir:"))
+        return { kind: "dir" };
+    const match = /^(\d+):([a-f0-9]{64})$/.exec(fingerprint);
+    if (match) {
+        return { kind: "file", mode: Number(match[1]), hash: match[2] };
+    }
+    return { kind: "unsupported" };
+}
+async function verifyBlobs(manifest, store) {
+    for (const path of manifest.contents) {
+        const fingerprint = manifest.fingerprints[path];
+        const parsed = fingerprintKind(fingerprint);
+        if (parsed.kind !== "file" && parsed.kind !== "symlink") {
+            throw new RestoreFailure("manifest_invalid", `content path ${path} has unsupported fingerprint ${fingerprint}`);
+        }
+        const blob = store.blobPath(parsed.hash);
+        if (!existsSync(blob)) {
+            throw new RestoreFailure("blob_missing", `content blob for ${path} is missing`);
+        }
+        const actual = await sha256File(blob);
+        if (actual !== parsed.hash) {
+            throw new RestoreFailure("blob_corrupt", `content blob for ${path} failed its hash check`);
+        }
+    }
+}
+function assertSafeAncestors(abs, context) {
+    const rel = relative(context.workspace, abs);
+    const parts = rel.split(sep);
+    let current = context.workspace;
+    for (let i = 0; i < parts.length - 1; i++) {
+        current = resolve(current, parts[i]);
+        try {
+            const stat = lstatSync(current);
+            if (stat.isSymbolicLink()) {
+                throw new RestoreFailure("unsafe_path", `refusing to write through symlink parent ${current}`);
+            }
+            if (!stat.isDirectory()) {
+                throw new RestoreFailure("path_conflict", `parent ${current} is not a directory`);
+            }
+        }
+        catch (error) {
+            if (error.code === "ENOENT") {
+                mkdirSync(current);
+                continue;
+            }
+            throw error;
+        }
+    }
+}
+function removePath(abs, context, allowDir = false) {
+    let stat;
+    try {
+        stat = lstatSync(abs);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return false;
+        throw new RestoreFailure("restore_io_error", `cannot stat ${abs}: ${String(error)}`);
+    }
+    if (stat.isDirectory()) {
+        if (!allowDir) {
+            throw new RestoreFailure("path_conflict", `refusing to delete non-empty directory ${abs}`);
+        }
+        try {
+            if (readdirSync(abs).length > 0) {
+                throw new RestoreFailure("path_conflict", `directory ${abs} contains out-of-boundary content`);
+            }
+            rmdirSync(abs);
+            return true;
+        }
+        catch (error) {
+            if (error instanceof RestoreFailure)
+                throw error;
+            throw new RestoreFailure("restore_io_error", `cannot remove ${abs}: ${String(error)}`);
+        }
+    }
+    try {
+        if (stat.isFile() || stat.isSymbolicLink()) {
+            try {
+                unlinkSync(abs);
+            }
+            catch (error) {
+                if (error.code === "EPERM" ||
+                    error.code === "EACCES") {
+                    chmodSync(abs, 0o666);
+                    unlinkSync(abs);
+                }
+                else {
+                    throw error;
+                }
+            }
+            return true;
+        }
+        throw new RestoreFailure("restore_io_error", `unsupported file type at ${abs}`);
+    }
+    catch (error) {
+        if (error instanceof RestoreFailure)
+            throw error;
+        throw new RestoreFailure("restore_io_error", `cannot remove ${abs}: ${String(error)}`);
+    }
+}
+function planDeletions(target, current, context) {
+    const targetPaths = new Set(Object.keys(target.fingerprints));
+    const deletions = Object.keys(current.fingerprints)
+        .filter((path) => !targetPaths.has(path))
+        .sort((a, b) => b.length - a.length);
+    // Preflight type conflicts before any mutation: a target file/missing path
+    // that is currently a directory may only be removed when every entry in it
+    // is also scheduled for deletion.
+    const deletionSet = new Set(deletions);
+    for (const path of Object.keys(target.fingerprints)) {
+        const kind = fingerprintKind(target.fingerprints[path]);
+        if (kind.kind === "dir" || kind.kind === "gitlink")
+            continue;
+        const abs = safeTargetPath(path, context);
+        let stat;
+        try {
+            stat = lstatSync(abs);
+        }
+        catch {
+            continue;
+        }
+        if (!stat.isDirectory() || stat.isSymbolicLink())
+            continue;
+        for (const entry of readdirSync(abs)) {
+            const childRel = `${path}/${entry}`;
+            if (!deletionSet.has(childRel) && !targetPaths.has(childRel)) {
+                throw new RestoreFailure("path_conflict", `target ${path} is a directory containing ${childRel}, which is outside the restore boundary`);
+            }
+        }
+    }
+    return deletions;
+}
+function shortHead(head) {
+    return head ? head.slice(0, 12) : null;
+}
+async function gitStatus(args, context) {
+    return runGitCommandStatus(args, {
+        cwd: context.workspace,
+        ...(context.signal ? { signal: context.signal } : {}),
+        ...(context.timeoutMs !== undefined ? { timeoutMs: context.timeoutMs } : {}),
+    });
+}
+async function headRelation(targetHead, currentHead, context) {
+    if (targetHead === currentHead)
+        return "equal";
+    const backward = await gitStatus(["merge-base", "--is-ancestor", targetHead, currentHead], context);
+    if (backward.code === 0)
+        return "backward";
+    const forward = await gitStatus(["merge-base", "--is-ancestor", currentHead, targetHead], context);
+    if (forward.code === 0)
+        return "forward";
+    return "diverged";
+}
+/** Read-only restore preflight. Throws RestoreFailure with a stable reason. */
+export async function preflightRestore(input) {
+    if (input.manifest.schemaVersion !== CHECKPOINT_SCHEMA_VERSION ||
+        input.manifest.coverage !== "tracked_and_non_ignored_untracked") {
+        throw new RestoreFailure("manifest_invalid", "unsupported checkpoint manifest schema");
+    }
+    // Recompute the content identity from the restore-relevant fields. A
+    // caller-supplied or tampered manifest must never be trusted merely because
+    // its stored hash/id look well-formed.
+    const recomputedHash = checkpointContentHash({
+        ...(input.manifest.head ? { head: input.manifest.head } : {}),
+        fingerprints: input.manifest.fingerprints,
+        contents: input.manifest.contents,
+        coverage: input.manifest.coverage,
+    });
+    const recomputedId = deriveCheckpointId({
+        loopId: input.manifest.loopId,
+        round: input.manifest.round,
+        role: input.manifest.role,
+        contentHash: recomputedHash,
+    });
+    if (recomputedHash !== input.manifest.contentHash ||
+        recomputedId !== input.manifest.checkpointId) {
+        throw new RestoreFailure("manifest_invalid", "checkpoint manifest id/content hash does not match its boundary");
+    }
+    const context = {
+        workspace: input.workspace,
+        store: input.store,
+        ...(input.stateDir ? { stateDir: input.stateDir } : {}),
+        ...(input.exclude ? { exclude: input.exclude } : {}),
+        ...(input.signal ? { signal: input.signal } : {}),
+        ...(input.timeoutMs !== undefined ? { timeoutMs: input.timeoutMs } : {}),
+    };
+    // Paths first: never hash content for a target that could escape.
+    const resolved = new Map();
+    const caseInsensitive = process.platform === "win32";
+    for (const path of Object.keys(input.manifest.fingerprints)) {
+        const abs = safeTargetPath(path, context);
+        const key = caseInsensitive ? abs.toLowerCase() : abs;
+        if (resolved.has(key) && resolved.get(key) !== abs) {
+            throw new RestoreFailure("path_conflict", `duplicate path after normalization: ${path}`);
+        }
+        resolved.set(key, abs);
+        const kind = fingerprintKind(input.manifest.fingerprints[path]);
+        if (kind.kind === "unsupported") {
+            throw new RestoreFailure("unsupported_boundary", `path ${path} has an unrestorable fingerprint`);
+        }
+    }
+    if (input.manifest.head !== undefined &&
+        !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(input.manifest.head)) {
+        throw new RestoreFailure("target_head_invalid", "checkpoint HEAD is not a Git hash");
+    }
+    await verifyBlobs(input.manifest, input.store);
+    const unmerged = await gitStatus(["ls-files", "-u", "-z"], context);
+    if (unmerged.code !== 0) {
+        throw new RestoreFailure("git_unavailable", "cannot read the Git index");
+    }
+    if (unmerged.stdout.length > 0) {
+        throw new RestoreFailure("index_unmerged", "the Git index has unmerged entries");
+    }
+    const verbose = await gitStatus(["ls-files", "-v", "-z"], context);
+    if (verbose.code !== 0) {
+        throw new RestoreFailure("git_unavailable", "cannot read Git index flags");
+    }
+    for (const record of verbose.stdout.split("\0").filter(Boolean)) {
+        const tag = record[0] ?? "";
+        const path = record.slice(2);
+        if (tag === "S" || (tag >= "a" && tag <= "z")) {
+            throw new RestoreFailure("index_unsupported", `path ${path} has skip-worktree/assume-unchanged state a checkpoint cannot represent`);
+        }
+    }
+    if (input.manifest.head) {
+        const exists = await gitStatus(["rev-parse", "--verify", `${input.manifest.head}^{commit}`], context);
+        if (exists.code !== 0) {
+            throw new RestoreFailure("target_head_missing", `checkpoint HEAD ${input.manifest.head} is not present in this repository`);
+        }
+    }
+    if (input.stateDir) {
+        const rel = relative(input.workspace, resolve(input.workspace, input.stateDir));
+        if (rel && !rel.startsWith("..") && !resolve(rel).startsWith("..")) {
+            const tracked = await gitStatus(["ls-files", "-z", "--", rel], context);
+            if (tracked.code === 0 && tracked.stdout.length > 0) {
+                throw new RestoreFailure("state_dir_tracked", "the runtime state directory is tracked by Git; refusing a destructive restore");
+            }
+        }
+    }
+    const current = await captureBoundary({
+        cwd: input.workspace,
+        ...(input.signal ? { signal: input.signal } : {}),
+        ...(input.timeoutMs !== undefined ? { timeoutMs: input.timeoutMs } : {}),
+        ...(input.exclude ? { exclude: input.exclude } : {}),
+    });
+    if (!current.ok) {
+        throw new RestoreFailure("git_unavailable", `cannot observe the current workspace: ${current.detail}`);
+    }
+    if (current.boundary.materializationError) {
+        // No materializer was requested; a leftover error means an index/model
+        // problem that makes the current boundary unsafe to mutate.
+        throw new RestoreFailure("current_boundary_unsupported", current.boundary.materializationError.detail);
+    }
+    const currentHead = current.boundary.head;
+    if (input.manifest.head === undefined && currentHead !== undefined) {
+        throw new RestoreFailure("target_head_invalid", "the checkpoint has no HEAD but the workspace has commits");
+    }
+    let backward = false;
+    if (input.manifest.head && currentHead) {
+        const relation = await headRelation(input.manifest.head, currentHead, context);
+        if (relation === "diverged") {
+            throw new RestoreFailure("head_diverged", `checkpoint HEAD ${shortHead(input.manifest.head)} is not an ancestor/descendant of current HEAD ${shortHead(currentHead)}`);
+        }
+        backward = relation === "backward";
+    }
+    // Type-conflict planning is part of the preflight: no mutation yet.
+    planDeletions(input.manifest, current.boundary, context);
+    return {
+        manifest: input.manifest,
+        currentBoundary: current.boundary,
+        ...(input.manifest.head ? { targetHead: input.manifest.head } : {}),
+        ...(currentHead ? { currentHead } : {}),
+        backward,
+    };
+}
+function sameBoundary(manifest, actual) {
+    const expectedHead = manifest.head ?? null;
+    const actualHead = actual.head ?? null;
+    if (expectedHead !== actualHead) {
+        return {
+            ok: false,
+            detail: `HEAD mismatch: expected ${expectedHead ?? "<none>"}, got ${actualHead ?? "<none>"}`,
+        };
+    }
+    const expectedKeys = Object.keys(manifest.fingerprints).sort();
+    const actualKeys = Object.keys(actual.fingerprints).sort();
+    if (expectedKeys.length !== actualKeys.length ||
+        expectedKeys.some((key, index) => key !== actualKeys[index])) {
+        const missing = expectedKeys.filter((key) => !(key in actual.fingerprints)).slice(0, 10);
+        const extra = actualKeys.filter((key) => !(key in manifest.fingerprints)).slice(0, 10);
+        return {
+            ok: false,
+            detail: `boundary key mismatch; missing=[${missing.join(", ")}] extra=[${extra.join(", ")}]`,
+        };
+    }
+    const mismatched = expectedKeys.filter((key) => manifest.fingerprints[key] !== actual.fingerprints[key]);
+    if (mismatched.length > 0) {
+        return {
+            ok: false,
+            detail: `fingerprint mismatch at ${mismatched.slice(0, 10).join(", ")}`,
+        };
+    }
+    return { ok: true };
+}
+function writeTarget(path, fingerprint, abs, context) {
+    const parsed = fingerprintKind(fingerprint);
+    if (parsed.kind === "unsupported") {
+        throw new RestoreFailure("unsupported_boundary", `cannot restore ${path}`);
+    }
+    assertSafeAncestors(abs, context);
+    if (parsed.kind === "missing") {
+        removePath(abs, context, true);
+        return "written";
+    }
+    if (parsed.kind === "gitlink" || parsed.kind === "dir") {
+        try {
+            const stat = lstatSync(abs);
+            if (stat.isSymbolicLink() || stat.isFile())
+                removePath(abs, context);
+            else if (!stat.isDirectory()) {
+                throw new RestoreFailure("path_conflict", `${path} has an unsupported type`);
+            }
+        }
+        catch (error) {
+            if (error.code !== "ENOENT") {
+                if (error instanceof RestoreFailure)
+                    throw error;
+                throw new RestoreFailure("restore_io_error", `cannot inspect ${path}: ${String(error)}`);
+            }
+        }
+        mkdirSync(abs, { recursive: true });
+        return "written";
+    }
+    // A regular file or symlink replaces any existing non-directory entry.
+    try {
+        const stat = lstatSync(abs);
+        if (stat.isDirectory() && !stat.isSymbolicLink()) {
+            // An empty directory may be replaced by a file/symlink; a non-empty one
+            // was rejected by planDeletions.
+            removePath(abs, context, true);
+        }
+    }
+    catch (error) {
+        if (error.code !== "ENOENT") {
+            if (error instanceof RestoreFailure)
+                throw error;
+        }
+    }
+    if (parsed.kind === "symlink") {
+        removePath(abs, context);
+        const text = readFileSync(context.store.blobPath(parsed.hash), "utf8");
+        try {
+            symlinkSync(text, abs);
+        }
+        catch (error) {
+            throw new RestoreFailure("symlink_failed", `cannot create symlink ${path}: ${String(error)}`);
+        }
+        return "written";
+    }
+    // Regular file: copy the verified blob to a temp sibling, then rename.
+    removePath(abs, context);
+    const temp = `${abs}.lf-restore-${process.pid}-${Date.now()}`;
+    try {
+        copyFileSync(context.store.blobPath(parsed.hash), temp);
+        const fd = openSync(temp, "r+");
+        try {
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+        chmodSync(temp, parsed.mode & 0o7777);
+        renameSync(temp, abs);
+    }
+    catch (error) {
+        try {
+            rmSync(temp, { force: true });
+        }
+        catch { /* best effort */ }
+        throw new RestoreFailure("restore_io_error", `cannot write ${path}: ${String(error)}`);
+    }
+    return "written";
+}
+/** Execute the restore. The caller must have committed the directive first. */
+export async function executeRestore(input) {
+    const context = {
+        workspace: input.workspace,
+        store: input.store,
+        ...(input.stateDir ? { stateDir: input.stateDir } : {}),
+        ...(input.exclude ? { exclude: input.exclude } : {}),
+        ...(input.signal ? { signal: input.signal } : {}),
+        ...(input.timeoutMs !== undefined ? { timeoutMs: input.timeoutMs } : {}),
+    };
+    const preflight = input.preflight ?? await preflightRestore({
+        manifest: input.manifest,
+        workspace: input.workspace,
+        store: input.store,
+        ...(input.stateDir ? { stateDir: input.stateDir } : {}),
+        ...(input.exclude ? { exclude: input.exclude } : {}),
+        ...(input.signal ? { signal: input.signal } : {}),
+        ...(input.timeoutMs !== undefined ? { timeoutMs: input.timeoutMs } : {}),
+    });
+    const { manifest, currentBoundary } = preflight;
+    const targetHead = manifest.head;
+    const currentHead = currentBoundary.head;
+    let safetyRef;
+    if (preflight.backward && currentHead) {
+        safetyRef = `refs/loopforge/restore-backup/${input.directiveTransactionId}`;
+        const created = await gitStatus(["update-ref", safetyRef, currentHead], context);
+        if (created.code !== 0) {
+            throw new RestoreFailure("safety_ref_failed", `cannot preserve the pre-restore HEAD: ${created.stderr || created.error || "git update-ref failed"}`);
+        }
+    }
+    if (targetHead) {
+        const reset = await gitStatus(["reset", "--hard", targetHead], context);
+        if (reset.code !== 0) {
+            throw new RestoreFailure("reset_failed", `git reset --hard ${shortHead(targetHead)} failed: ${reset.stderr || reset.error || "unknown error"}`);
+        }
+    }
+    else {
+        const empty = await gitStatus(["read-tree", "--empty"], context);
+        if (empty.code !== 0) {
+            throw new RestoreFailure("reset_failed", "cannot normalize the index to an unborn HEAD");
+        }
+    }
+    const deletions = planDeletions(manifest, currentBoundary, context);
+    let filesDeleted = 0;
+    for (const path of deletions) {
+        const abs = safeTargetPath(path, context);
+        // Only boundary file/symlink paths are deleted here; a directory path
+        // (gitlink) is out-of-boundary content and fails rather than recursing.
+        if (removePath(abs, context, fingerprintKind(currentBoundary.fingerprints[path]).kind === "gitlink" || fingerprintKind(currentBoundary.fingerprints[path]).kind === "dir")) {
+            filesDeleted++;
+        }
+    }
+    let filesWritten = 0;
+    const materialized = new Set(manifest.contents);
+    for (const path of Object.keys(manifest.fingerprints).sort()) {
+        const kind = fingerprintKind(manifest.fingerprints[path]);
+        // Clean tracked regular files/symlinks were restored by `reset --hard`;
+        // only dirty content (stored blobs), missing paths and directory/gitlink
+        // entries need explicit handling. Writing a clean file would need a blob
+        // we deliberately never stored.
+        if (kind.kind !== "missing" && kind.kind !== "dir" && kind.kind !== "gitlink" &&
+            !materialized.has(path)) {
+            continue;
+        }
+        const abs = safeTargetPath(path, context);
+        if (writeTarget(path, manifest.fingerprints[path], abs, context) === "written") {
+            filesWritten++;
+        }
+    }
+    // Post-restore evidence is the verification AND the redo's before baseline.
+    // One pass; the boundary sink receives the same boundary for the redo's own
+    // before checkpoint.
+    let baselineBoundary;
+    const baseline = await EvidenceCollector.fromPolicy().collectAsync({
+        phase: "before",
+        cwd: input.workspace,
+        materializer: input.store,
+        boundarySink: (boundary) => { baselineBoundary = boundary; },
+    });
+    const gitObservation = baseline.find((observation) => observation.kind === "git");
+    let verificationBoundary;
+    if (gitObservation && gitObservation.kind === "git" && gitObservation.status === "observed") {
+        verificationBoundary = {
+            ...(gitObservation.data.head ? { head: gitObservation.data.head } : {}),
+            dirty: [...gitObservation.data.dirty],
+            fingerprints: gitObservation.data.fingerprints,
+            contents: baselineBoundary?.contents ?? [],
+            ...(baselineBoundary?.materializationError
+                ? { materializationError: baselineBoundary.materializationError }
+                : {}),
+        };
+    }
+    else {
+        const direct = await captureBoundary({
+            cwd: input.workspace,
+            ...(input.signal ? { signal: input.signal } : {}),
+            ...(input.timeoutMs !== undefined ? { timeoutMs: input.timeoutMs } : {}),
+            ...(input.exclude ? { exclude: input.exclude } : {}),
+            materializer: input.store,
+        });
+        if (!direct.ok) {
+            throw new RestoreFailure("restore_unobservable", `post-restore Git boundary is unavailable: ${direct.detail}`);
+        }
+        verificationBoundary = direct.boundary;
+        // Even with the Git evidence provider disabled, the internal boundary is
+        // the same pass that verified HEAD/content; let the redo carry its own
+        // before-image from it.
+        baselineBoundary = direct.boundary;
+    }
+    const same = sameBoundary(manifest, verificationBoundary);
+    if (!same.ok) {
+        throw new RestoreFailure("restore_verification_failed", same.detail);
+    }
+    return {
+        status: "verified",
+        checkpointId: manifest.checkpointId,
+        redoRound: manifest.round,
+        ...(manifest.head ? { head: manifest.head } : {}),
+        ...(currentHead ? { previousHead: currentHead } : {}),
+        ...(safetyRef ? { safetyRef } : {}),
+        filesWritten,
+        filesDeleted,
+        verifiedAt: Date.now(),
+        baseline,
+        ...(baselineBoundary ? { baselineBoundary } : {}),
+    };
+}
+//# sourceMappingURL=workspace-restore.js.map

package/dist/workspace-restore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-restore.js","sourceRoot":"","sources":["../src/workspace-restore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,SAAS,EACT,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,UAAU,EACV,MAAM,EACN,SAAS,EACT,WAAW,EACX,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAM1D,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAEzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EACL,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,MAAM,OAAO,cAAe,SAAQ,KAAK;IAE5B;IAEA;IAHX,YACW,UAAkB,EAC3B,OAAe,EACN,OAAiC;QAE1C,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,eAAU,GAAV,UAAU,CAAQ;QAElB,YAAO,GAAP,OAAO,CAA0B;QAG1C,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAuCD,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CACpB,GAAW,EACX,SAAiB,EACjB,QAA4B,EAC5B,OAAgD;IAEhD,IAAI,OAAO,EAAE,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,OAAuB;IAC3D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,cAAc,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;IAC3E,CAAC;IACD,uEAAuE;IACvE,yEAAyE;IACzE,wDAAwD;IACxD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,cAAc,CAAC,aAAa,EAAE,QAAQ,IAAI,uCAAuC,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,cAAc,CAAC,aAAa,EAAE,QAAQ,IAAI,8BAA8B,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,QAAQ;QAChE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,cAAc,CAAC,aAAa,EAAE,iCAAiC,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG;QAC7C,CAAC,CAAC,GAAG,CAAC;IACR,IAAI,CAAC;QACH,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,cAAc,CACtB,aAAa,EACb,QAAQ,IAAI,0BAA0B,MAAM,CAAC,KAAK,CAAC,EAAE,CACtD,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,cAAc,CAAC,aAAa,EAAE,oCAAoC,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,WAAmB;IAO1C,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1D,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACnE,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,QAAqC,EACrC,KAAmC;IAEnC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACxD,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,gBAAgB,IAAI,gCAAgC,WAAW,EAAE,CAClE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CAAC,cAAc,EAAE,oBAAoB,IAAI,aAAa,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,cAAc,CAAC,cAAc,EAAE,oBAAoB,IAAI,wBAAwB,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW,EAAE,OAAuB;IAC/D,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC1B,MAAM,IAAI,cAAc,CACtB,aAAa,EACb,4CAA4C,OAAO,EAAE,CACtD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,UAAU,OAAO,qBAAqB,CACvC,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,OAAuB,EAAE,QAAQ,GAAG,KAAK;IACxE,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,eAAe,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,0CAA0C,GAAG,EAAE,CAChD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,aAAa,GAAG,mCAAmC,CACpD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc;gBAAE,MAAM,KAAK,CAAC;YACjD,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,iBAAiB,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,UAAU,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;oBAChD,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACvD,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBACtB,UAAU,CAAC,GAAG,CAAC,CAAC;gBAClB,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,4BAA4B,GAAG,EAAE,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc;YAAE,MAAM,KAAK,CAAC;QACjD,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,iBAAiB,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,MAAmC,EACnC,OAAwB,EACxB,OAAuB;IAEvB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;SAChD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,2EAA2E;IAC3E,2EAA2E;IAC3E,kCAAkC;IAClC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QAC7D,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,SAAS;QAC3D,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,UAAU,IAAI,8BAA8B,QAAQ,yCAAyC,CAC9F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,IAAwB;IACzC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,IAAuB,EACvB,OAAuB;IAEvB,OAAO,mBAAmB,CAAC,IAAI,EAAE;QAC/B,GAAG,EAAE,OAAO,CAAC,SAAS;QACtB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,UAAkB,EAClB,WAAmB,EACnB,OAAuB;IAEvB,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO,OAAO,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,CAAC,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,CAAC,EACxD,OAAO,CACR,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,SAAS,CAC7B,CAAC,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,CAAC,EACxD,OAAO,CACR,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAQtC;IACC,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,yBAAyB;QAC1D,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,mCAAmC,EAAE,CAAC;QACpE,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,wCAAwC,CAAC,CAAC;IACzF,CAAC;IACD,qEAAqE;IACrE,4EAA4E;IAC5E,uCAAuC;IACvC,MAAM,cAAc,GAAG,qBAAqB,CAAC;QAC3C,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;QACzC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;QACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;KAClC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC7B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;QAC3B,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;QACzB,WAAW,EAAE,cAAc;KAC5B,CAAC,CAAC;IACH,IAAI,cAAc,KAAK,KAAK,CAAC,QAAQ,CAAC,WAAW;QAC7C,YAAY,KAAK,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QACjD,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAmB;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;IACF,kEAAkE;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACtD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;YACnD,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,uCAAuC,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAChC,MAAM,IAAI,cAAc,CACtB,sBAAsB,EACtB,QAAQ,IAAI,kCAAkC,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS;QACjC,CAAC,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,cAAc,CAAC,qBAAqB,EAAE,mCAAmC,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAE/C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,cAAc,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACnE,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,cAAc,CACtB,mBAAmB,EACnB,QAAQ,IAAI,yEAAyE,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,EAC5D,OAAO,CACR,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CACtB,qBAAqB,EACrB,mBAAmB,KAAK,CAAC,QAAQ,CAAC,IAAI,oCAAoC,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChF,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;YACxE,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,cAAc,CACtB,mBAAmB,EACnB,+EAA+E,CAChF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;QACpC,GAAG,EAAE,KAAK,CAAC,SAAS;QACpB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,cAAc,CACtB,iBAAiB,EACjB,yCAAyC,OAAO,CAAC,MAAM,EAAE,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;QAC1C,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,IAAI,cAAc,CACtB,8BAA8B,EAC9B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,MAAM,CAC7C,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACnE,MAAM,IAAI,cAAc,CACtB,qBAAqB,EACrB,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/E,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,mBAAmB,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,kDAAkD,SAAS,CAAC,WAAW,CAAC,EAAE,CAC5H,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,QAAQ,KAAK,UAAU,CAAC;IACrC,CAAC;IACD,oEAAoE;IACpE,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzD,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,OAAO,CAAC,QAAQ;QACjC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,QAAqC,EACrC,MAAuB;IAEvB,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;IACvC,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,2BAA2B,YAAY,IAAI,QAAQ,SAAS,UAAU,IAAI,QAAQ,EAAE;SAC7F,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,YAAY,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QACzC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SAC7F,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CACpC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CACjE,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,2BAA2B,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACxE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,WAAmB,EACnB,GAAW,EACX,OAAuB;IAEvB,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CAAC,sBAAsB,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;iBAChE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC7B,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,GAAG,IAAI,0BAA0B,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,IAAI,KAAK,YAAY,cAAc;oBAAE,MAAM,KAAK,CAAC;gBACjD,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,kBAAkB,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,uEAAuE;IACvE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACjD,wEAAwE;YACxE,iCAAiC;YACjC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,IAAI,KAAK,YAAY,cAAc;gBAAE,MAAM,KAAK,CAAC;QACnD,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,cAAc,CACtB,gBAAgB,EAChB,yBAAyB,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAClD,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,uEAAuE;IACvE,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,GAAG,GAAG,eAAe,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC9D,IAAI,CAAC;QACH,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QACjD,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;QACtC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAClE,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,gBAAgB,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CACzC,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAUpC;IACC,MAAM,OAAO,GAAmB;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;IACF,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,MAAM,gBAAgB,CAAC;QAC1D,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC,CAAC;IACH,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,SAAS,CAAC;IAChD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC;IACjC,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC;IACzC,IAAI,SAA6B,CAAC;IAClC,IAAI,SAAS,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;QACtC,SAAS,GAAG,iCAAiC,KAAK,CAAC,sBAAsB,EAAE,CAAC;QAC5E,MAAM,OAAO,GAAG,MAAM,SAAS,CAC7B,CAAC,YAAY,EAAE,SAAS,EAAE,WAAW,CAAC,EACtC,OAAO,CACR,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,cAAc,CACtB,mBAAmB,EACnB,yCAAyC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,IAAI,uBAAuB,EAAE,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;QACxE,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,cAAc,CACtB,cAAc,EACd,oBAAoB,SAAS,CAAC,UAAU,CAAC,YAAY,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,eAAe,EAAE,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,cAAc,CAAC,cAAc,EAAE,8CAA8C,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,sEAAsE;QACtE,wEAAwE;QACxE,IAAI,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,CAC1C,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CACnC,CAAC,IAAI,KAAK,SAAS,IAAI,eAAe,CACrC,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CACnC,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAClB,YAAY,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,gCAAgC;QAChC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YACzE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/E,YAAY,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,qBAAqB;IACrB,IAAI,gBAA6C,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,CAAC,YAAY,CAAC;QACjE,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,KAAK,CAAC,SAAS;QACpB,YAAY,EAAE,KAAK,CAAC,KAAK;QACzB,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE,GAAG,gBAAgB,GAAG,QAAQ,CAAC,CAAC,CAAC;KAC7D,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAClC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,CAC5C,CAAC;IACF,IAAI,oBAAqC,CAAC;IAC1C,IAAI,cAAc,IAAI,cAAc,CAAC,IAAI,KAAK,KAAK,IAAI,cAAc,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC5F,oBAAoB,GAAG;YACrB,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,KAAK,EAAE,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;YACrC,YAAY,EAAE,cAAc,CAAC,IAAI,CAAC,YAAY;YAC9C,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,IAAI,EAAE;YAC1C,GAAG,CAAC,gBAAgB,EAAE,oBAAoB;gBACxC,CAAC,CAAC,EAAE,oBAAoB,EAAE,gBAAgB,CAAC,oBAAoB,EAAE;gBACjE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,GAAG,EAAE,KAAK,CAAC,SAAS;YACpB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,YAAY,EAAE,KAAK,CAAC,KAAK;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,cAAc,CACtB,sBAAsB,EACtB,6CAA6C,MAAM,CAAC,MAAM,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,oBAAoB,GAAG,MAAM,CAAC,QAAQ,CAAC;QACvC,yEAAyE;QACzE,uEAAuE;QACvE,wBAAwB;QACxB,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,6BAA6B,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvE,CAAC;IACD,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,SAAS,EAAE,QAAQ,CAAC,KAAK;QACzB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,YAAY;QACZ,YAAY;QACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;QACtB,QAAQ;QACR,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC"}

package/dist/workspace.d.ts

@@ -26,13 +26,4 @@
  *  the process cwd without pre-resolving it.
  */
 export declare function containInWorkspace(workspace: string, target: string): string;
-/** v3.8.1: the Contract scope-entry check, in the module that owns workspace
- *  containment.
- *
- *  It lives here rather than in the MCP transport because it is a filesystem
- *  fact about the running process, not a property of the payload: the strict
- *  contract boundary injects it so a declared scope entry that escapes the
- *  workspace is rejected pre-advance. Returns the reason when the entry
- *  escapes, null when it is contained. */
-export declare function scopeEntryDetail(entry: string): string | null;
 //# sourceMappingURL=workspace.d.ts.map