opensip-cli 0.1.0

package/dist/bootstrap/owning-tool-init.js

@@ -0,0 +1,69 @@
+/**
+ * owning-tool-init — resolve the tool that owns the invoked subcommand and run
+ * its lazy, once-per-process `Tool.initialize()`.
+ *
+ * Extracted from `pre-action-hook.ts` so that hook stays the high-level
+ * per-invocation SEQUENCER; the owning-tool resolution + fail-fast init
+ * semantics live here as a cohesive unit (see also `tool-lifecycle.ts`).
+ */
+import { logger } from '@opensip-cli/core';
+import { BootstrapError } from './bootstrap-error.js';
+import { initializedToolIds } from './process-idempotency.js';
+const MODULE_TAG = 'cli:bootstrap';
+/**
+ * Find the registered tool that owns the invoked subcommand, matching the
+ * descriptor's canonical name or any alias. Returns undefined for
+ * CLI-only commands (init/sessions/configure/plugin/...) — they belong to
+ * no tool, so no `initialize()` runs for them.
+ */
+export function resolveOwningTool(tools, cmdName) {
+    return tools
+        .list()
+        .find((tool) => tool.commands.some((c) => c.name === cmdName || (c.aliases?.includes(cmdName) ?? false)));
+}
+/**
+ * Lazy, memoized Tool.initialize() (P1a). Resolve the tool owning the
+ * invoked subcommand and run its initialize() exactly once per process,
+ * after the scope is entered and immediately before the action body. Tools
+ * not invoked this run pay nothing; `--help`/welcome run no initialize().
+ *
+ * Fail-fast: a throwing initialize() fails the run closed rather than letting a
+ * half-initialised tool run its command and silently appear to work. The
+ * id is recorded only on success, so a transient failure can retry in a
+ * long-lived host.
+ *
+ * @throws {BootstrapError} (exit 1) when the owning tool's initialize() throws —
+ *   the top-level boundary renders it (human stderr / structured `--json`).
+ */
+export async function maybeInitializeOwningTool(tools, cmdName, runId) {
+    const owningTool = resolveOwningTool(tools, cmdName);
+    if (!owningTool?.initialize)
+        return;
+    const toolHumanId = owningTool.metadata.name ?? owningTool.metadata.id;
+    if (initializedToolIds.has(toolHumanId))
+        return;
+    try {
+        await owningTool.initialize();
+        initializedToolIds.add(toolHumanId);
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        logger.error({
+            evt: 'cli.tool.initialize_failed',
+            module: MODULE_TAG,
+            runId,
+            toolId: owningTool.metadata.id, // stable UUID for structured
+            toolName: toolHumanId,
+            error: msg,
+        });
+        // §4.7: a tool-init failure becomes a typed BootstrapError (exit 1) the
+        // top-level boundary renders, instead of an inline stderr write + exit.
+        throw new BootstrapError({
+            message: `Tool '${toolHumanId}' failed to initialize: ${msg}`,
+            humanMessage: `✗ Tool '${toolHumanId}' failed to initialize: ${msg}`,
+            suggestion: undefined,
+            exitCode: 1,
+        });
+    }
+}
+//# sourceMappingURL=owning-tool-init.js.map

package/dist/bootstrap/owning-tool-init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owning-tool-init.js","sourceRoot":"","sources":["../../src/bootstrap/owning-tool-init.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAgC,MAAM,mBAAmB,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,UAAU,GAAG,eAAe,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAmB,EAAE,OAAe;IACpE,OAAO,KAAK;SACT,IAAI,EAAE;SACN,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACb,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CACzF,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAmB,EACnB,OAAe,EACf,KAAa;IAEb,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,EAAE,UAAU;QAAE,OAAO;IACpC,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;IACvE,IAAI,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO;IAChD,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC;QAC9B,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC;YACX,GAAG,EAAE,4BAA4B;YACjC,MAAM,EAAE,UAAU;YAClB,KAAK;YACL,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,6BAA6B;YAC7D,QAAQ,EAAE,WAAW;YACrB,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;QACH,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,IAAI,cAAc,CAAC;YACvB,OAAO,EAAE,SAAS,WAAW,2BAA2B,GAAG,EAAE;YAC7D,YAAY,EAAE,WAAW,WAAW,2BAA2B,GAAG,EAAE;YACpE,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/bootstrap/pre-action-guards.d.ts

@@ -0,0 +1,44 @@
+/**
+ * pre-action-guards — the pure bailout / warning guards the bootstrap
+ * `preAction` hook runs inside its decision window, BEFORE any side effect
+ * fires (see `pre-action-hook.ts` for the load-bearing ordering).
+ *
+ * Extracted from `pre-action-hook.ts` as a cohesive unit: each guard is a
+ * `(project, …) => void` that either exits the process with an actionable
+ * message (schema-too-old, no-project) or warns to stderr (phantom runtimes),
+ * and nothing else. Housing them here keeps the hook module focused on the
+ * orchestration sequence and the per-tool `initialize()` lifecycle.
+ */
+import { type ProjectContext } from '@opensip-cli/core';
+/**
+ * Schema-version bailout. THROWS a {@link BootstrapError} (exit 2) with the
+ * "upgrade your CLI" message when the project config declares a schema newer than
+ * this CLI knows. Direction-correct: `migrate` would go the other way (old → new);
+ * when the CLI itself is behind, the user must upgrade it. The top-level boundary
+ * renders it (human stderr / structured `--json`); this guard no longer writes or
+ * exits (§4.7).
+ *
+ * @throws {BootstrapError} (exit 2) when the project config's schema is newer than
+ *   this CLI supports — the boundary renders the "upgrade your CLI" message.
+ */
+export declare function checkSchemaVersionAndBailout(project: ProjectContext, runId: string): void;
+/**
+ * No-project-found bailout. THROWS a {@link BootstrapError} (exit 2) for
+ * project-scoped commands when discovery resolved scope === 'none'. The top-level
+ * boundary renders it: human mode writes the unchanged multi-line explainer to
+ * stderr; `--json` emits a structured `bootstrap.error` outcome (§4.7). The guard
+ * no longer branches on json or writes a stream itself.
+ *
+ * @throws {BootstrapError} (exit 2) when a project-scoped command runs with no
+ *   discoverable opensip-cli project (scope === 'none').
+ */
+export declare function checkNoProjectAndBailout(project: ProjectContext, cwd: string, cmdName: string, runId: string, extraAgnostic?: ReadonlySet<string>): void;
+/**
+ * Phantom-runtime warning. Detects orphaned opensip-cli/.runtime/
+ * subtrees between cwd and the discovered project root — fossils from
+ * pre-discovery runs that scaffolded under subdirs. Warns to stderr
+ * with a safe `rm -rf` hint; never auto-deletes. Suppressed for JSON
+ * output (would corrupt the stream's stderr peer in some tools).
+ */
+export declare function warnAboutPhantomRuntimes(project: ProjectContext, jsonOutput: boolean): void;
+//# sourceMappingURL=pre-action-guards.d.ts.map

package/dist/bootstrap/pre-action-guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-action-guards.d.ts","sourceRoot":"","sources":["../../src/bootstrap/pre-action-guards.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AA+B3B;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAmCzF;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,aAAa,GAAE,WAAW,CAAC,MAAM,CAAa,GAC7C,IAAI,CAgBN;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,GAAG,IAAI,CAa3F"}

package/dist/bootstrap/pre-action-guards.js

@@ -0,0 +1,136 @@
+/**
+ * pre-action-guards — the pure bailout / warning guards the bootstrap
+ * `preAction` hook runs inside its decision window, BEFORE any side effect
+ * fires (see `pre-action-hook.ts` for the load-bearing ordering).
+ *
+ * Extracted from `pre-action-hook.ts` as a cohesive unit: each guard is a
+ * `(project, …) => void` that either exits the process with an actionable
+ * message (schema-too-old, no-project) or warns to stderr (phantom runtimes),
+ * and nothing else. Housing them here keeps the hook module focused on the
+ * orchestration sequence and the per-tool `initialize()` lifecycle.
+ */
+import { checkSchemaCompat, detectPhantomRuntimes, logger, readConfigSchemaVersion, } from '@opensip-cli/core';
+import { BootstrapError } from './bootstrap-error.js';
+import { formatCliTooOldMessage, formatNoProjectFoundMessage } from './pre-action-messages.js';
+const MODULE_TAG = 'cli:bootstrap';
+/**
+ * Commands that operate WITHOUT requiring a project context. These don't
+ * read project files or the datastore; running them from a directory
+ * with no opensip-cli project is legitimate.
+ *
+ * Everything else is project-scoped: when `project.scope === 'none'`,
+ * the hook emits the "No OpenSIP CLI project found" error and exits 2.
+ *
+ * Note: `uninstall --user` is project-agnostic, but `uninstall --project`
+ * requires one. The check is per-command name here; uninstall's own
+ * mode-specific guarding lives in its action body.
+ *
+ * The base list covers pure host commands. Tool CommandSpecs that declare
+ * `scope: 'none'` are added dynamically at runtime (see pre-action-hook)
+ * so the declared `CommandSpec.scope` actually controls behavior (previously
+ * this list was the only source of truth, making the field dead for tools).
+ */
+const PROJECT_AGNOSTIC_COMMANDS = new Set([
+    'init',
+    'configure',
+    'completion',
+    'uninstall',
+]);
+/**
+ * Schema-version bailout. THROWS a {@link BootstrapError} (exit 2) with the
+ * "upgrade your CLI" message when the project config declares a schema newer than
+ * this CLI knows. Direction-correct: `migrate` would go the other way (old → new);
+ * when the CLI itself is behind, the user must upgrade it. The top-level boundary
+ * renders it (human stderr / structured `--json`); this guard no longer writes or
+ * exits (§4.7).
+ *
+ * @throws {BootstrapError} (exit 2) when the project config's schema is newer than
+ *   this CLI supports — the boundary renders the "upgrade your CLI" message.
+ */
+export function checkSchemaVersionAndBailout(project, runId) {
+    if (project.scope !== 'project' || project.configPath === undefined)
+        return;
+    const configVersion = readConfigSchemaVersion(project.configPath);
+    const compat = checkSchemaCompat(configVersion);
+    if (compat.kind === 'cli-too-old') {
+        const msg = formatCliTooOldMessage({
+            root: project.projectRoot,
+            configVersion: compat.configVersion,
+            cliVersion: compat.cliVersion,
+        });
+        logger.warn({
+            evt: 'cli.config.schema.cli-too-old',
+            module: MODULE_TAG,
+            runId,
+            root: project.projectRoot,
+            configVersion: compat.configVersion,
+            cliVersion: compat.cliVersion,
+        });
+        throw new BootstrapError({
+            message: `This project's opensip-cli.config.yml uses a newer schema (v${compat.configVersion}) than this CLI supports (v${compat.cliVersion}).`,
+            humanMessage: msg,
+            suggestion: 'Update your CLI: curl -fsSL https://opensip.ai/cli/install.sh | bash',
+            exitCode: 2,
+        });
+    }
+    if (compat.kind === 'older') {
+        logger.info({
+            evt: 'cli.config.schema.older',
+            module: MODULE_TAG,
+            runId,
+            root: project.projectRoot,
+            configVersion: compat.configVersion,
+            cliVersion: compat.cliVersion,
+        });
+    }
+}
+/**
+ * No-project-found bailout. THROWS a {@link BootstrapError} (exit 2) for
+ * project-scoped commands when discovery resolved scope === 'none'. The top-level
+ * boundary renders it: human mode writes the unchanged multi-line explainer to
+ * stderr; `--json` emits a structured `bootstrap.error` outcome (§4.7). The guard
+ * no longer branches on json or writes a stream itself.
+ *
+ * @throws {BootstrapError} (exit 2) when a project-scoped command runs with no
+ *   discoverable opensip-cli project (scope === 'none').
+ */
+export function checkNoProjectAndBailout(project, cwd, cmdName, runId, extraAgnostic = new Set()) {
+    const effective = new Set([...PROJECT_AGNOSTIC_COMMANDS, ...extraAgnostic]);
+    if (project.scope !== 'none' || effective.has(cmdName))
+        return;
+    logger.warn({
+        evt: 'cli.project.not-found',
+        module: MODULE_TAG,
+        runId,
+        cwd,
+        command: cmdName,
+    });
+    throw new BootstrapError({
+        message: `No opensip-cli.config.yml found. Searched from ${cwd} upward.`,
+        humanMessage: formatNoProjectFoundMessage(cwd),
+        suggestion: 'Run opensip init to get started.',
+        exitCode: 2,
+    });
+}
+/**
+ * Phantom-runtime warning. Detects orphaned opensip-cli/.runtime/
+ * subtrees between cwd and the discovered project root — fossils from
+ * pre-discovery runs that scaffolded under subdirs. Warns to stderr
+ * with a safe `rm -rf` hint; never auto-deletes. Suppressed for JSON
+ * output (would corrupt the stream's stderr peer in some tools).
+ */
+export function warnAboutPhantomRuntimes(project, jsonOutput) {
+    if (jsonOutput)
+        return;
+    if (project.scope !== 'project' || project.walkedUp === 0)
+        return;
+    const phantoms = detectPhantomRuntimes(project.cwd, project.projectRoot);
+    for (const phantom of phantoms) {
+        process.stderr.write(`ℹ Detected an orphaned opensip-cli/ at:\n` +
+            `    ${phantom}\n` +
+            `  Left over from running opensip from this subdirectory\n` +
+            `  before project-root discovery was added. Safe to delete with:\n` +
+            `    rm -rf ${phantom}\n\n`);
+    }
+}
+//# sourceMappingURL=pre-action-guards.js.map

package/dist/bootstrap/pre-action-guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-action-guards.js","sourceRoot":"","sources":["../../src/bootstrap/pre-action-guards.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,MAAM,EACN,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAE/F,MAAM,UAAU,GAAG,eAAe,CAAC;AAEnC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IAC7D,MAAM;IACN,WAAW;IACX,YAAY;IACZ,WAAW;CACZ,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,4BAA4B,CAAC,OAAuB,EAAE,KAAa;IACjF,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO;IAC5E,MAAM,aAAa,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,sBAAsB,CAAC;YACjC,IAAI,EAAE,OAAO,CAAC,WAAW;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,+BAA+B;YACpC,MAAM,EAAE,UAAU;YAClB,KAAK;YACL,IAAI,EAAE,OAAO,CAAC,WAAW;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;QACH,MAAM,IAAI,cAAc,CAAC;YACvB,OAAO,EAAE,+DAA+D,MAAM,CAAC,aAAa,8BAA8B,MAAM,CAAC,UAAU,IAAI;YAC/I,YAAY,EAAE,GAAG;YACjB,UAAU,EAAE,sEAAsE;YAClF,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,yBAAyB;YAC9B,MAAM,EAAE,UAAU;YAClB,KAAK;YACL,IAAI,EAAE,OAAO,CAAC,WAAW;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAuB,EACvB,GAAW,EACX,OAAe,EACf,KAAa,EACb,gBAAqC,IAAI,GAAG,EAAE;IAE9C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,yBAAyB,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAC/D,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,uBAAuB;QAC5B,MAAM,EAAE,UAAU;QAClB,KAAK;QACL,GAAG;QACH,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IACH,MAAM,IAAI,cAAc,CAAC;QACvB,OAAO,EAAE,kDAAkD,GAAG,UAAU;QACxE,YAAY,EAAE,2BAA2B,CAAC,GAAG,CAAC;QAC9C,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAuB,EAAE,UAAmB;IACnF,IAAI,UAAU;QAAE,OAAO;IACvB,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO;IAClE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACzE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2CAA2C;YACzC,OAAO,OAAO,IAAI;YAClB,2DAA2D;YAC3D,mEAAmE;YACnE,cAAc,OAAO,MAAM,CAC9B,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/bootstrap/pre-action-hook.d.ts

@@ -0,0 +1,68 @@
+/**
+ * pre-action-hook — Commander `preAction` body.
+ *
+ * Runs before every subcommand's action. Centralises run-id generation,
+ * config-merge, project-context resolution, schema-version bailout, and
+ * (only when the run will proceed) log file initialisation. Datastore is
+ * NOT opened here — that's a lazy getter on ToolCliContext (Task 1.3).
+ *
+ * Ordering is load-bearing: side effects only fire AFTER all bailout
+ * decisions. Sequence:
+ *
+ *   1. generate runId
+ *   2. read opts; resolve project context (pure; may throw on strict --config)
+ *   3. expose context on opts.projectContext (collision-free name)
+ *   4. bailout window — schema check (Phase 6.3), phantom warn (Phase 7)
+ *   5. side-effect setup — configureLogger({ logDir }) + setProjectContextForRun
+ *      gated on project.scope === 'project' && existsSync(projectRoot)
+ *   6. Project: header (Phase 2.2)
+ *   7. cli.start log line
+ *   8. lazy Tool.initialize() — run the owning tool's optional one-time
+ *      init exactly once per process, after the scope is entered and just
+ *      before the action body (P1a). CLI-only commands have no owner and
+ *      skip it; a failing init is fatal.
+ *
+ * Strict --config: when `--config <path>` doesn't resolve, the
+ * underlying ValidationError surfaces with exit 2 — no silent walk-up.
+ */
+import { type LanguageRegistry, type ToolPluginManifest, type ToolProvenance, type ToolRegistry } from '@opensip-cli/core';
+import type { Command } from 'commander';
+export { resolveOwningTool } from './owning-tool-init.js';
+/**
+ * The `scope.configDocument` slot value (ADR-0023 one-reader): the validated
+ * document rides the scope so tools project their shapes from it instead of
+ * re-reading the file — but ONLY when a real config file was read. A
+ * config-less run stays document-less so tools that hard-error on a missing
+ * config (fitness) stay loud instead of silently validating `{}`.
+ */
+/**
+ * The per-invocation bootstrap result the hook needs to BUILD the scope —
+ * the populated registries plus the admitted-tool manifests/provenance. These
+ * are created in `main()` BEFORE the scope can be constructed (the registries
+ * are inputs to `RunScope`; you can't read them off a scope that doesn't exist
+ * yet), so the composition root captures them in this closure and hands them to
+ * `installPreActionHook`. After the hook calls `enterScope`, every per-run read
+ * (project, datastore, manifests, provenance, …) goes through `currentScope()`
+ * — there is NO module-global handoff bag (the former `currentRuntimeContext`).
+ */
+export interface PreActionRuntime {
+    readonly languages: LanguageRegistry;
+    readonly tools: ToolRegistry;
+    readonly manifests: readonly ToolPluginManifest[];
+    readonly provenance: readonly ToolProvenance[];
+}
+/**
+ * Mount the bootstrap `preAction` hook on the supplied program.
+ *
+ * @param program The root Commander program.
+ * @param version The CLI version (from `readPackageVersion` at the entry
+ *   point). Threaded in rather than re-read here so the `mini` banner shows
+ *   the SAME version `--version` reports — and so the kernel-adjacent hook
+ *   doesn't resolve cli-ui's or its own package version by mistake.
+ * @param runtime The bootstrap result (registries + admitted manifests/
+ *   provenance). Captured in the hook closure instead of read from a module
+ *   global — the composition root installs the hook AFTER `bootstrapCli`
+ *   populates the registries (see {@link PreActionRuntime}).
+ */
+export declare function installPreActionHook(program: Command, version: string, runtime: PreActionRuntime): void;
+//# sourceMappingURL=pre-action-hook.d.ts.map

package/dist/bootstrap/pre-action-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-action-hook.d.ts","sourceRoot":"","sources":["../../src/bootstrap/pre-action-hook.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,OAAO,EASL,KAAK,gBAAgB,EAErB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAiB3B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D;;;;;;GAMG;AAEH;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;CAChD;AAED;;;;;;;;;;;;GAYG;AAUH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,gBAAgB,GACxB,IAAI,CAqPN"}

package/dist/bootstrap/pre-action-hook.js

@@ -0,0 +1,289 @@
+// @fitness-ignore-file detached-promises -- the preAction hook is a composition root: its body invokes synchronous bootstrap helpers (mergeConfigDefaults, configureLogger, the checkSchemaVersion/checkNoProject/warnAboutPhantom bailout guards, enterScope) that the name-based heuristic mistakes for promise-returning calls. The one genuine async call (maybeInitializeOwningTool) is awaited. Matches the same suppression on index.ts and bootstrap/index.ts.
+/**
+ * pre-action-hook — Commander `preAction` body.
+ *
+ * Runs before every subcommand's action. Centralises run-id generation,
+ * config-merge, project-context resolution, schema-version bailout, and
+ * (only when the run will proceed) log file initialisation. Datastore is
+ * NOT opened here — that's a lazy getter on ToolCliContext (Task 1.3).
+ *
+ * Ordering is load-bearing: side effects only fire AFTER all bailout
+ * decisions. Sequence:
+ *
+ *   1. generate runId
+ *   2. read opts; resolve project context (pure; may throw on strict --config)
+ *   3. expose context on opts.projectContext (collision-free name)
+ *   4. bailout window — schema check (Phase 6.3), phantom warn (Phase 7)
+ *   5. side-effect setup — configureLogger({ logDir }) + setProjectContextForRun
+ *      gated on project.scope === 'project' && existsSync(projectRoot)
+ *   6. Project: header (Phase 2.2)
+ *   7. cli.start log line
+ *   8. lazy Tool.initialize() — run the owning tool's optional one-time
+ *      init exactly once per process, after the scope is entered and just
+ *      before the action body (P1a). CLI-only commands have no owner and
+ *      skip it; a failing init is fatal.
+ *
+ * Strict --config: when `--config <path>` doesn't resolve, the
+ * underlying ValidationError surfaces with exit 2 — no silent walk-up.
+ */
+import { existsSync } from 'node:fs';
+import { configureLogger, currentScope, enterScope, generatePrefixedId, logger, resolveProjectContext, resolveProjectPaths, SystemError, } from '@opensip-cli/core';
+import { getMeter } from '@opensip-cli/core';
+import { startProfiling } from '../telemetry/profiling.js';
+import { checkForUpdate, formatUpdateNag } from '../update-notifier.js';
+import { BootstrapError } from './bootstrap-error.js';
+import { buildPerRunScope } from './build-per-run-scope.js';
+import { loadCliDefaults, mergeConfigDefaults } from './cli-defaults.js';
+import { loadOwningToolCapabilities } from './load-tool-capabilities.js';
+import { maybeInitializeOwningTool, resolveOwningTool } from './owning-tool-init.js';
+import { checkNoProjectAndBailout, checkSchemaVersionAndBailout, warnAboutPhantomRuntimes, } from './pre-action-guards.js';
+/** npm package whose version the update check compares against. */
+const CLI_PACKAGE_NAME = 'opensip-cli';
+const MODULE_TAG = 'cli:bootstrap';
+// Owning-tool resolution + lazy `Tool.initialize()` live in `owning-tool-init.ts`
+// (also imported below for local use). `resolveOwningTool` is re-exported so
+// existing importers (e.g. the lifecycle test) keep their stable
+// `pre-action-hook.js` entry point.
+export { resolveOwningTool } from './owning-tool-init.js';
+/**
+ * Mount the bootstrap `preAction` hook on the supplied program.
+ *
+ * @param program The root Commander program.
+ * @param version The CLI version (from `readPackageVersion` at the entry
+ *   point). Threaded in rather than re-read here so the `mini` banner shows
+ *   the SAME version `--version` reports — and so the kernel-adjacent hook
+ *   doesn't resolve cli-ui's or its own package version by mistake.
+ * @param runtime The bootstrap result (registries + admitted manifests/
+ *   provenance). Captured in the hook closure instead of read from a module
+ *   global — the composition root installs the hook AFTER `bootstrapCli`
+ *   populates the registries (see {@link PreActionRuntime}).
+ */
+// The body (including the preAction hook arrow it registers) sequences the full
+// per-invocation bootstrap: runId, defaults merge, project resolve + bailouts,
+// scope construction/enter, metrics, profiling start, lazy tool init, capability
+// drive. It has many explicit early-exit paths by design (the documented contract
+// for "only side effects after all bailouts"). Cognitive complexity exceeds 15
+// because it is the single source of truth for ordering; splitting would obscure
+// the load-bearing sequence and duplicate the guard/enter wiring. Acceptable for
+// this composition root (see similar disables on other bootstrap entry points).
+/* eslint-disable sonarjs/cognitive-complexity -- single source of truth for scope construction/enter ordering; splitting would obscure the load-bearing sequence (rationale above) */
+export function installPreActionHook(program, version, runtime) {
+    program.hook('preAction', async (_thisCommand, actionCommand) => {
+        const runId = generatePrefixedId('run');
+        const opts = actionCommand.opts();
+        const cwd = opts.cwd ?? process.cwd();
+        const cwdExplicit = actionCommand.getOptionValueSource('cwd') === 'cli';
+        // Keep the loaded defaults around: `mergeConfigDefaults` only copies the
+        // flag-shaped fields onto opts, but `ui.banner` has no flag — we read it
+        // straight off the config object below to build the UiContext.
+        const cliDefaults = loadCliDefaults(cwd, opts.config);
+        mergeConfigDefaults(opts, cliDefaults);
+        // Single bootstrap-time configuration of the process-wide logger
+        // singleton. Replaces the four prior free mutators (`setSilent`,
+        // `setDebugMode`, `setRunId`, `initLogFile`). `logDir` is wired in
+        // below once the project context is resolved — at that point the
+        // logsDir is known and we apply a second `configureLogger` to fill
+        // it in. The two-call sequence is intentional: silencing stderr
+        // before the project-resolve step is what makes Ink renders clean
+        // even when the project is missing.
+        configureLogger({
+            silent: true,
+            debugMode: Boolean(opts.debug),
+            runId,
+        });
+        // 2. Resolve the project context — pure, no side effects.
+        //    Strict --config: throws ValidationError when explicit path misses.
+        let project;
+        try {
+            project = resolveProjectContext({
+                cwd,
+                cwdExplicit,
+                explicitConfigPath: opts.config,
+            });
+        }
+        catch (error) {
+            // §4.7: a config-resolve failure (e.g. strict --config miss) becomes a typed
+            // BootstrapError the top-level boundary renders — human stderr / structured
+            // --json — instead of an inline stderr write + process.exit.
+            const msg = error instanceof Error ? error.message : String(error);
+            throw new BootstrapError({
+                message: msg,
+                humanMessage: `✗ ${msg}`,
+                suggestion: 'Check opensip-cli.config.yml (or your --config path).',
+                exitCode: 2,
+            });
+        }
+        // 3. Stash the context on opts under the COLLISION-FREE name.
+        //    `opts.project` is reserved for Commander's --project [path] flag
+        //    in uninstall.ts; we never use that name here.
+        opts.projectContext = project;
+        // Stash the resolved "was --cwd typed on the CLI?" signal alongside it,
+        // so the `init` command-spec handler (launch Phase 6) reads ONE
+        // source instead of recomputing `getOptionValueSource('cwd')` on its own
+        // Commander command. `actionCommand` IS the init command here, so this is
+        // byte-identical to the former register-init computation.
+        opts.cwdExplicit = cwdExplicit;
+        // 4. Bailout window — each may THROW a BootstrapError (rendered by the
+        //    top-level boundary) before any side effects. Phantom warn is non-fatal;
+        //    warns then continues.
+        checkSchemaVersionAndBailout(project, runId);
+        // Build the effective set of project-agnostic command names from the base list
+        // PLUS any tool CommandSpecs that declare scope: 'none'. This makes the
+        // declared `CommandSpec.scope` drive enforcement (previously the hardcoded
+        // name list made the field dead for tools and third-party commands).
+        const extraAgnostic = new Set();
+        for (const tool of runtime.tools.list()) {
+            for (const c of tool.commands || []) {
+                if (c.scope === 'none') {
+                    extraAgnostic.add(c.name);
+                    (c.aliases ?? []).forEach((a) => extraAgnostic.add(a));
+                }
+            }
+        }
+        checkNoProjectAndBailout(project, cwd, actionCommand.name(), runId, extraAgnostic);
+        warnAboutPhantomRuntimes(project, opts.json === true);
+        // 5. Side-effect setup, gated on a real project being present.
+        if (project.scope === 'project' && existsSync(project.projectRoot)) {
+            const projectPaths = resolveProjectPaths(project.projectRoot);
+            // Second configureLogger call — fills in the project-scoped logDir
+            // now that the project context is resolved. Leaves silent/debugMode/runId
+            // untouched (configureLogger only writes fields present in the bag).
+            configureLogger({ logDir: projectPaths.logsDir });
+        }
+        // Build the per-run RunScope and enter it via AsyncLocalStorage so
+        // library functions deep in the call tree (currentScope() readers)
+        // see the bound logger/registries/project + a lazy datastore thunk.
+        // enterWith propagates forward through the same async chain, so the
+        // action body invoked after this hook sees the same scope without
+        // needing a callback wrapper — which Commander does not expose.
+        // (Phase 5 deferred Task 5.2 / T1 Item D close-out.)
+        // Resolve presentation + update state once, before the scope is built.
+        // bannerSize: explicit `cli.ui.banner`, else the product default `mini`.
+        // update: the cached newer-version string (best-effort; undefined when
+        // up-to-date / opted-out / non-TTY). The `mini` banner shows it inline;
+        // other sizes — and the banner-less `--json` path — fall back to the
+        // stderr nag so the signal is never silently lost.
+        const bannerSize = cliDefaults.ui?.banner ?? 'mini';
+        const update = checkForUpdate({ name: CLI_PACKAGE_NAME, version });
+        if (update && (bannerSize !== 'mini' || opts.json === true)) {
+            process.stderr.write(formatUpdateNag(version, update));
+        }
+        // ADR-0008: select the cloud signal sink for this run. Sync + cheap —
+        // keyless / `cloud.sync:false` / `--no-cloud` / non-https → no-op with no
+        // IO; the entitlement check is deferred to first emit so non-signal
+        // commands pay nothing. `opts.cloud === false` comes from `--no-cloud`.
+        //
+        // `cloud` layers the user-level opt-out (~/.opensip-cli/config.yml#cloud)
+        // over the project's `cli.cloud:` block (audit P0-2): a user `sync: false`
+        // disables sync for every project on this machine.
+        const { languages, tools, manifests, provenance } = runtime;
+        // Extracted to thin the composition root (GA architectural blocker #2).
+        // All scope construction + wiring now lives in a dedicated small builder
+        // with explicit inputs. The hook remains the high-level sequencer. The
+        // registries + admitted-tool manifests/provenance come from the closure
+        // the composition root captured (no module-global handoff bag); the
+        // builder stamps manifests/provenance onto the scope for host commands.
+        const scope = buildPerRunScope({
+            project,
+            runId,
+            cwd,
+            cliDefaults,
+            registries: { languages, tools },
+            manifests,
+            provenance,
+            apiKey: opts.apiKey,
+            // @fitness-ignore-next-line null-safety -- Commander's optsWithGlobals() always returns an OptionValues object (never null/undefined); the heuristic misreads the method-call-then-property access. `.cloud` is an absent-or-boolean flag, compared with `=== false`.
+            noCloud: actionCommand.optsWithGlobals().cloud === false,
+            logger,
+            ui: { version, update },
+        });
+        enterScope(scope);
+        // Phase 3 hygiene: scope entry via ALS (enterScope) is now the single source of truth
+        // for per-run state. No holder mirror or mark dance. All subsequent readers (including
+        // host command bodies) must see a valid currentScope().
+        if (!currentScope()) {
+            throw new SystemError('Scope was not entered before command dispatch', {
+                code: 'SYSTEM.SCOPE.NOT_ENTERED',
+            });
+        }
+        // Lifecycle diagnostics (§5.10): record key construction facts on the per-run bus.
+        // These (plus the per-domain events emitted from loadCapabilityDomain and the
+        // wiring events from buildPerRunScope) ride on every CommandOutcome so --json
+        // consumers see the full uniform lifecycle (tools loaded, subscopes contributed,
+        // capability domains wired + driven, config validated, etc.). This directly
+        // improves observability of the blast-radius bootstrap paths (architecture review).
+        scope.diagnostics.event('load', 'debug', `${tools.list().length} tool(s) loaded`);
+        scope.diagnostics.counter('tools.loaded', tools.list().length);
+        // Phase 2 metrics (low cardinality)
+        getMeter('opensip-cli').createCounter('opensip_cli.commands.started').add(1, {
+            command: actionCommand.name(),
+        });
+        scope.diagnostics.event('validate', 'debug', `project config resolved (scope: ${project.scope})`);
+        // The `ℹ Project:` location line is rendered once, under the banner,
+        // by cli-ui's ProjectHeader — mounted by the App shell (static
+        // commands, via render.ts reading currentScope().project) and by each
+        // live view (fit/graph). No imperative pre-action print.
+        // Structured start log.
+        logger.info({
+            evt: 'cli.run.start',
+            module: MODULE_TAG,
+            runId,
+            command: actionCommand.name(),
+            cwd,
+            projectRoot: project.projectRoot,
+            scope: project.scope,
+        });
+        if (project.walkedUp > 0) {
+            logger.info({
+                evt: 'cli.project.discovered',
+                module: MODULE_TAG,
+                runId,
+                cwd,
+                projectRoot: project.projectRoot,
+                walkedUp: project.walkedUp,
+            });
+        }
+        // Optional profiling (Phase 3, severable). Start after scope (runId available).
+        // Respects the dual-gate (OPENSIP_PROFILING + OTEL) or OTEL-only fallback.
+        startProfiling(scope, actionCommand.name());
+        // 8. Lazy, memoized Tool.initialize() — runs the owning tool's
+        //    optional one-time init here, AFTER enterScope (so eager setup that
+        //    registers packs / reads currentScope() sees the bound scope) and
+        //    immediately before Commander invokes the action body. See the
+        //    helper for the once-per-process + fail-fast semantics.
+        await maybeInitializeOwningTool(tools, actionCommand.name(), runId);
+        // 9. §5.3/§4.5: drive the generic capability loader for the invoked tool's
+        //    declared domains (e.g. graph-adapter). Lazy per command — only the
+        //    owning tool's domains load, routed through the host's capability
+        //    registry to each owner's registrar. Replaces the host-coupled,
+        //    eager register-graph-adapters.ts.
+        const driven = await loadOwningToolCapabilities({
+            owningTool: resolveOwningTool(tools, actionCommand.name()),
+            projectDir: project.projectRoot,
+            configPath: project.scope === 'project' ? project.configPath : undefined,
+        });
+        if (driven > 0) {
+            scope.diagnostics.event('load', 'debug', `drove ${String(driven)} owning-tool capability domain(s) (see per-domain 'capability ... loaded' events for contribution counts + errors)`);
+            scope.diagnostics.counter('capabilities.driven', driven);
+        }
+    });
+    // Resilience: best-effort release of per-run resources (parseCache, recipe config slot,
+    // contributed sub-scopes, diagnostics bus) after the action body completes for every
+    // command. Complements the narrow dispose() impl and the current lack of finally in
+    // many paths. postAction fires for normal completion; error paths are covered by
+    // handleParseError + handleFatalBootstrapError (which may also dispose in future passes).
+    // Idempotent: dispose is cheap and safe to call more than once.
+    program.hook('postAction', () => {
+        try {
+            const s = currentScope();
+            if (s && typeof s.dispose === 'function') {
+                s.dispose();
+            }
+        }
+        catch {
+            // @swallow-ok dispose errors on shutdown; the run has already produced its outcome.
+        }
+    });
+}
+/* eslint-enable sonarjs/cognitive-complexity */
+//# sourceMappingURL=pre-action-hook.js.map

package/dist/bootstrap/pre-action-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-action-hook.js","sourceRoot":"","sources":["../../src/bootstrap/pre-action-hook.ts"],"names":[],"mappings":"AAAA,ucAAuc;AACvc;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EACL,eAAe,EACf,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,MAAM,EACN,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,GAMZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAIhC,mEAAmE;AACnE,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC,MAAM,UAAU,GAAG,eAAe,CAAC;AAEnC,kFAAkF;AAClF,6EAA6E;AAC7E,iEAAiE;AACjE,oCAAoC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AA2B1D;;;;;;;;;;;;GAYG;AACH,gFAAgF;AAChF,+EAA+E;AAC/E,iFAAiF;AACjF,kFAAkF;AAClF,+EAA+E;AAC/E,iFAAiF;AACjF,iFAAiF;AACjF,gFAAgF;AAChF,sLAAsL;AACtL,MAAM,UAAU,oBAAoB,CAClC,OAAgB,EAChB,OAAe,EACf,OAAyB;IAEzB,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,EAAE;QAC9D,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,GAAG,GAAI,IAAI,CAAC,GAAc,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClD,MAAM,WAAW,GAAG,aAAa,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;QAExE,yEAAyE;QACzE,yEAAyE;QACzE,+DAA+D;QAC/D,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,MAA4B,CAAC,CAAC;QAC5E,mBAAmB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAEvC,iEAAiE;QACjE,iEAAiE;QACjE,mEAAmE;QACnE,iEAAiE;QACjE,mEAAmE;QACnE,gEAAgE;QAChE,kEAAkE;QAClE,oCAAoC;QACpC,eAAe,CAAC;YACd,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAC9B,KAAK;SACN,CAAC,CAAC;QAEH,0DAA0D;QAC1D,wEAAwE;QACxE,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,GAAG,qBAAqB,CAAC;gBAC9B,GAAG;gBACH,WAAW;gBACX,kBAAkB,EAAE,IAAI,CAAC,MAA4B;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6EAA6E;YAC7E,4EAA4E;YAC5E,6DAA6D;YAC7D,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,IAAI,cAAc,CAAC;gBACvB,OAAO,EAAE,GAAG;gBACZ,YAAY,EAAE,KAAK,GAAG,EAAE;gBACxB,UAAU,EAAE,uDAAuD;gBACnE,QAAQ,EAAE,CAAC;aACZ,CAAC,CAAC;QACL,CAAC;QAED,8DAA8D;QAC9D,sEAAsE;QACtE,mDAAmD;QAClD,IAAgC,CAAC,cAAc,GAAG,OAAO,CAAC;QAC3D,wEAAwE;QACxE,gEAAgE;QAChE,yEAAyE;QACzE,0EAA0E;QAC1E,0DAA0D;QACzD,IAAgC,CAAC,WAAW,GAAG,WAAW,CAAC;QAE5D,uEAAuE;QACvE,6EAA6E;QAC7E,2BAA2B;QAC3B,4BAA4B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE7C,+EAA+E;QAC/E,wEAAwE;QACxE,2EAA2E;QAC3E,qEAAqE;QACrE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;gBACpC,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;oBACvB,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAC1B,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;QACH,CAAC;QACD,wBAAwB,CAAC,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACnF,wBAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAEtD,+DAA+D;QAC/D,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC9D,mEAAmE;YACnE,0EAA0E;YAC1E,qEAAqE;YACrE,eAAe,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,oEAAoE;QACpE,kEAAkE;QAClE,gEAAgE;QAChE,qDAAqD;QACrD,uEAAuE;QACvE,yEAAyE;QACzE,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,mDAAmD;QACnD,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,EAAE,MAAM,IAAI,MAAM,CAAC;QACpD,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,IAAI,MAAM,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,sEAAsE;QACtE,0EAA0E;QAC1E,oEAAoE;QACpE,wEAAwE;QACxE,EAAE;QACF,0EAA0E;QAC1E,2EAA2E;QAC3E,mDAAmD;QACnD,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAE5D,wEAAwE;QACxE,yEAAyE;QACzE,uEAAuE;QACvE,wEAAwE;QACxE,oEAAoE;QACpE,wEAAwE;QACxE,MAAM,KAAK,GAAG,gBAAgB,CAAC;YAC7B,OAAO;YACP,KAAK;YACL,GAAG;YACH,WAAW;YACX,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;YAChC,SAAS;YACT,UAAU;YACV,MAAM,EAAE,IAAI,CAAC,MAA4B;YACzC,sQAAsQ;YACtQ,OAAO,EAAE,aAAa,CAAC,eAAe,EAAE,CAAC,KAAK,KAAK,KAAK;YACxD,MAAM;YACN,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;SACxB,CAAC,CAAC;QAEH,UAAU,CAAC,KAAK,CAAC,CAAC;QAElB,sFAAsF;QACtF,uFAAuF;QACvF,wDAAwD;QACxD,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,WAAW,CAAC,+CAA+C,EAAE;gBACrE,IAAI,EAAE,0BAA0B;aACjC,CAAC,CAAC;QACL,CAAC;QAED,mFAAmF;QACnF,8EAA8E;QAC9E,8EAA8E;QAC9E,iFAAiF;QACjF,4EAA4E;QAC5E,oFAAoF;QACpF,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,iBAAiB,CAAC,CAAC;QAClF,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC;QAE/D,oCAAoC;QACpC,QAAQ,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;YAC3E,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE;SAC9B,CAAC,CAAC;QACH,KAAK,CAAC,WAAW,CAAC,KAAK,CACrB,UAAU,EACV,OAAO,EACP,mCAAmC,OAAO,CAAC,KAAK,GAAG,CACpD,CAAC;QAEF,qEAAqE;QACrE,+DAA+D;QAC/D,sEAAsE;QACtE,yDAAyD;QAEzD,wBAAwB;QACxB,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,eAAe;YACpB,MAAM,EAAE,UAAU;YAClB,KAAK;YACL,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE;YAC7B,GAAG;YACH,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,wBAAwB;gBAC7B,MAAM,EAAE,UAAU;gBAClB,KAAK;gBACL,GAAG;gBACH,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;QACL,CAAC;QAED,gFAAgF;QAChF,2EAA2E;QAC3E,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;QAE5C,+DAA+D;QAC/D,wEAAwE;QACxE,sEAAsE;QACtE,mEAAmE;QACnE,4DAA4D;QAC5D,MAAM,yBAAyB,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAEpE,2EAA2E;QAC3E,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,uCAAuC;QACvC,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,UAAU,EAAE,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC;YAC1D,UAAU,EAAE,OAAO,CAAC,WAAW;YAC/B,UAAU,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACf,KAAK,CAAC,WAAW,CAAC,KAAK,CACrB,MAAM,EACN,OAAO,EACP,SAAS,MAAM,CAAC,MAAM,CAAC,oHAAoH,CAC5I,CAAC;YACF,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,wFAAwF;IACxF,qFAAqF;IACrF,oFAAoF;IACpF,iFAAiF;IACjF,0FAA0F;IAC1F,gEAAgE;IAChE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;gBACzC,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oFAAoF;QACtF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AACD,gDAAgD"}