pyric-tools 0.1.0-alpha.7

package/dist/pkg-version.js

@@ -0,0 +1,47 @@
+/**
+ * pyric-tools' OWN package version, resolved at runtime — the version-skew
+ * stamp both ends of the worker relay compare (integration-smoke fix: an old
+ * `pyric dev` accepting a newer client's frame and dying mid-handling used to
+ * surface as a bare 30s timeout with no hint).
+ *
+ * Resolution order:
+ *   1. A standalone `bun build --compile` binary's baked version
+ *      (`globalThis.__PYRIC_EMBEDDED__.version` — see serve/standalone-assets).
+ *   2. The nearest `package.json` walking up from THIS module (dist/ or src/),
+ *      i.e. the pyric-tools install actually executing.
+ *   3. `'0.0.0'` when neither resolves (never throws).
+ *
+ * Node-only (node:fs / node:url) — do NOT import from browser-bundled modules
+ * (`bridge/protocol.ts`, the bridge client, worker code). The server
+ * (`bridge/server/peer.ts`) and the Node remote client (`remote/index.ts`)
+ * are the intended consumers.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+let cached = null;
+export function pyricToolsVersion() {
+    if (cached !== null)
+        return cached;
+    const embedded = globalThis.__PYRIC_EMBEDDED__;
+    if (typeof embedded?.version === 'string' && embedded.version.length > 0) {
+        cached = embedded.version;
+        return cached;
+    }
+    try {
+        let dir = dirname(fileURLToPath(import.meta.url));
+        while (!existsSync(join(dir, 'package.json'))) {
+            const parent = dirname(dir);
+            if (parent === dir)
+                break; // filesystem root
+            dir = parent;
+        }
+        const pkg = JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8'));
+        cached = pkg.version ?? '0.0.0';
+    }
+    catch {
+        cached = '0.0.0';
+    }
+    return cached;
+}
+//# sourceMappingURL=pkg-version.js.map

package/dist/pkg-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkg-version.js","sourceRoot":"","sources":["../src/pkg-version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,IAAI,MAAM,GAAkB,IAAI,CAAC;AAEjC,MAAM,UAAU,iBAAiB;IAC/B,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IACnC,MAAM,QAAQ,GACZ,UACD,CAAC,kBAAkB,CAAC;IACrB,IAAI,OAAO,QAAQ,EAAE,OAAO,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzE,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,MAAM,CAAC,kBAAkB;YAC7C,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAErE,CAAC;QACF,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,OAAO,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/register/esm-exports.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Minimal `exports`-field walker for the CJS→ESM seam in
+ * `pyric-tools/register`.
+ *
+ * Why it exists: a rewritten CJS `require('firebase-admin/app')` resolves
+ * `pyric-admin/app` under the `require` condition, but the pyric mirrors are
+ * ESM-only (`import`-condition exports) — Node's CJS resolver throws
+ * ERR_PACKAGE_PATH_NOT_EXPORTED and ignores hook-supplied condition
+ * overrides. `require(esm)` (Node ≥ 22.12) can LOAD the module fine once we
+ * hand it the file, so the register hook locates the package
+ * (`Module.findPackageJSON`) and resolves the subpath here under import
+ * conditions.
+ *
+ * Deliberately narrow, matching what the pyric packages actually publish:
+ * literal subpaths only (no `*` patterns), string targets, and nested
+ * condition objects tried in `node` → `import` → `default` order (`types`
+ * and unknown conditions are skipped).
+ */
+/**
+ * Resolve `subpath` (e.g. `'./app'`, or `'.'` for the root) against a
+ * package's `exports` field under import conditions. Returns the relative
+ * file target (e.g. `'./dist/app/index.js'`) or null when the subpath is
+ * not exported.
+ */
+export declare function resolveEsmOnlySubpath(exportsField: unknown, subpath: string): string | null;
+//# sourceMappingURL=esm-exports.d.ts.map

package/dist/register/esm-exports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"esm-exports.d.ts","sourceRoot":"","sources":["../../src/register/esm-exports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAmBH;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,OAAO,EACrB,OAAO,EAAE,MAAM,GACd,MAAM,GAAG,IAAI,CAiBf"}

package/dist/register/esm-exports.js

@@ -0,0 +1,61 @@
+/**
+ * Minimal `exports`-field walker for the CJS→ESM seam in
+ * `pyric-tools/register`.
+ *
+ * Why it exists: a rewritten CJS `require('firebase-admin/app')` resolves
+ * `pyric-admin/app` under the `require` condition, but the pyric mirrors are
+ * ESM-only (`import`-condition exports) — Node's CJS resolver throws
+ * ERR_PACKAGE_PATH_NOT_EXPORTED and ignores hook-supplied condition
+ * overrides. `require(esm)` (Node ≥ 22.12) can LOAD the module fine once we
+ * hand it the file, so the register hook locates the package
+ * (`Module.findPackageJSON`) and resolves the subpath here under import
+ * conditions.
+ *
+ * Deliberately narrow, matching what the pyric packages actually publish:
+ * literal subpaths only (no `*` patterns), string targets, and nested
+ * condition objects tried in `node` → `import` → `default` order (`types`
+ * and unknown conditions are skipped).
+ */
+const CONDITION_ORDER = ['node', 'import', 'default'];
+/** Resolve one condition object/string to its file target, or null. */
+function resolveTarget(value) {
+    if (typeof value === 'string')
+        return value;
+    if (value === null || typeof value !== 'object')
+        return null;
+    for (const condition of CONDITION_ORDER) {
+        if (condition in value) {
+            const resolved = resolveTarget(value[condition] ?? null);
+            if (resolved !== null)
+                return resolved;
+        }
+    }
+    return null;
+}
+/**
+ * Resolve `subpath` (e.g. `'./app'`, or `'.'` for the root) against a
+ * package's `exports` field under import conditions. Returns the relative
+ * file target (e.g. `'./dist/app/index.js'`) or null when the subpath is
+ * not exported.
+ */
+export function resolveEsmOnlySubpath(exportsField, subpath) {
+    if (exportsField === null || exportsField === undefined)
+        return null;
+    if (typeof exportsField === 'string') {
+        return subpath === '.' ? exportsField : null;
+    }
+    if (typeof exportsField !== 'object')
+        return null;
+    const map = exportsField;
+    const keys = Object.keys(map);
+    const isSubpathMap = keys.every((k) => k === '.' || k.startsWith('./'));
+    if (!isSubpathMap) {
+        // Bare conditions object — describes the root subpath only.
+        return subpath === '.' ? resolveTarget(map) : null;
+    }
+    const entry = map[subpath];
+    if (entry === undefined)
+        return null;
+    return resolveTarget(entry);
+}
+//# sourceMappingURL=esm-exports.js.map

package/dist/register/esm-exports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"esm-exports.js","sourceRoot":"","sources":["../../src/register/esm-exports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAE/D,uEAAuE;AACvE,SAAS,aAAa,CAAC,KAAmB;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;QACxC,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC;YACzD,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,QAAQ,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,YAAqB,EACrB,OAAe;IAEf,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,GAAG,GAAG,YAA4C,CAAC;IAEzD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,4DAA4D;QAC5D,OAAO,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/register/exempt.d.ts

@@ -0,0 +1,11 @@
+/** The `name` of the package that owns `fileUrl` (a `file:` URL), or null
+ *  (entry point, data:/node: parents, no named package.json above it). */
+export declare function owningPackageName(fileUrl: string | undefined): string | null;
+/**
+ * The one rewrite decision both hook paths (`module.registerHooks` and the
+ * `module.register` fallback) share: map the specifier, unless the
+ * requesting module is owned by a pyric mirror package. Returns the mapped
+ * specifier or null (leave resolution alone).
+ */
+export declare function rewriteSpecifier(specifier: string, parentURL: string | undefined): string | null;
+//# sourceMappingURL=exempt.d.ts.map

package/dist/register/exempt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exempt.d.ts","sourceRoot":"","sources":["../../src/register/exempt.ts"],"names":[],"mappings":"AAkDA;0EAC0E;AAC1E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAO5E;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAMhG"}

package/dist/register/exempt.js

@@ -0,0 +1,74 @@
+/**
+ * Mirror-package exemption for the register hooks.
+ *
+ * The pyric mirrors THEMSELVES import Firebase — that's their prod arm
+ * (e.g. pyric-admin/database's `import { getDatabaseWithUrl } from
+ * 'firebase-admin/database'`). Rewriting those would turn them into
+ * self-imports and break the mirror (missing exports, infinite mirrors),
+ * so a specifier is only rewritten when the REQUESTING module lives
+ * outside the pyric packages.
+ *
+ * Identity is the OWNING PACKAGE NAME — the `name` in the nearest named
+ * package.json above the requesting file — never a path substring (repo
+ * checkouts and worktrees have 'pyric' in every path). Nameless
+ * package.json files (`{"type": "module"}` markers in dist dirs) are
+ * skipped: they set the module format, not the package identity.
+ */
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { mapFirebaseSpecifier } from './mapping.js';
+/** The packages whose own Firebase imports must stay Firebase. */
+const EXEMPT_PACKAGES = new Set(['pyric', 'pyric-admin', 'pyric-tools']);
+/** dir → owning package name (null = none found up to the fs root).
+ *  Resolution runs on every import in the child process — cache it. */
+const ownerCache = new Map();
+function owningPackageNameOfDir(dir) {
+    const cached = ownerCache.get(dir);
+    if (cached !== undefined)
+        return cached;
+    let name = null;
+    try {
+        const pkg = JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8'));
+        if (typeof pkg.name === 'string' && pkg.name.length > 0) {
+            name = pkg.name;
+        }
+    }
+    catch {
+        // no/unreadable package.json here — keep walking
+    }
+    if (name === null) {
+        const parent = dirname(dir);
+        name = parent === dir ? null : owningPackageNameOfDir(parent);
+    }
+    ownerCache.set(dir, name);
+    return name;
+}
+/** The `name` of the package that owns `fileUrl` (a `file:` URL), or null
+ *  (entry point, data:/node: parents, no named package.json above it). */
+export function owningPackageName(fileUrl) {
+    if (!fileUrl || !fileUrl.startsWith('file:'))
+        return null;
+    try {
+        return owningPackageNameOfDir(dirname(fileURLToPath(fileUrl)));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The one rewrite decision both hook paths (`module.registerHooks` and the
+ * `module.register` fallback) share: map the specifier, unless the
+ * requesting module is owned by a pyric mirror package. Returns the mapped
+ * specifier or null (leave resolution alone).
+ */
+export function rewriteSpecifier(specifier, parentURL) {
+    const mapped = mapFirebaseSpecifier(specifier);
+    if (mapped === null)
+        return null;
+    const owner = owningPackageName(parentURL);
+    if (owner !== null && EXEMPT_PACKAGES.has(owner))
+        return null;
+    return mapped;
+}
+//# sourceMappingURL=exempt.js.map

package/dist/register/exempt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exempt.js","sourceRoot":"","sources":["../../src/register/exempt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,kEAAkE;AAClE,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;AAE9F;uEACuE;AACvE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEpD,SAAS,sBAAsB,CAAC,GAAW;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAErE,CAAC;QACF,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IACD,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;0EAC0E;AAC1E,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,CAAC;QACH,OAAO,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,SAA6B;IAC/E,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/register/hooks.d.ts

@@ -0,0 +1,13 @@
+interface ResolveContext {
+    parentURL?: string;
+    conditions: string[];
+    importAttributes: Record<string, string>;
+}
+interface ResolveResult {
+    url: string;
+    format?: string | null;
+    shortCircuit?: boolean;
+}
+export declare function resolve(specifier: string, context: ResolveContext, nextResolve: (specifier: string, context?: ResolveContext) => Promise<ResolveResult>): Promise<ResolveResult>;
+export {};
+//# sourceMappingURL=hooks.d.ts.map

package/dist/register/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/register/hooks.ts"],"names":[],"mappings":"AAYA,UAAU,cAAc;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C;AACD,UAAU,aAAa;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,wBAAgB,OAAO,CACrB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,KAAK,OAAO,CAAC,aAAa,CAAC,GACnF,OAAO,CAAC,aAAa,CAAC,CAExB"}

package/dist/register/hooks.js

@@ -0,0 +1,15 @@
+/**
+ * `module.register()` fallback hooks — the ASYNC (loader-thread) variant of
+ * the specifier rewrite, used only on Node 22.x older than 22.15 where the
+ * sync `module.registerHooks` API doesn't exist yet.
+ *
+ * Runs on Node's loader thread, so it intercepts ESM `import` ONLY — CJS
+ * `require('firebase-admin')` is NOT rewritten on this path (index.ts logs
+ * a warning saying exactly that). Keep this module free of side effects and
+ * heavy imports: the loader thread re-instantiates it in isolation.
+ */
+import { rewriteSpecifier } from './exempt.js';
+export function resolve(specifier, context, nextResolve) {
+    return nextResolve(rewriteSpecifier(specifier, context.parentURL) ?? specifier, context);
+}
+//# sourceMappingURL=hooks.js.map

package/dist/register/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../src/register/hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAa/C,MAAM,UAAU,OAAO,CACrB,SAAiB,EACjB,OAAuB,EACvB,WAAoF;IAEpF,OAAO,WAAW,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,EAAE,OAAO,CAAC,CAAC;AAC3F,CAAC"}

package/dist/register/index.d.ts

@@ -0,0 +1,5 @@
+/** Whether this process's firebase-admin/firebase imports are being rewritten
+ *  to the pyric sandbox — true only when `PYRIC_SANDBOX` was set (and not
+ *  refused by the production guard) at the moment this module loaded. */
+export declare let active: boolean;
+//# sourceMappingURL=index.d.ts.map

package/dist/register/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/register/index.ts"],"names":[],"mappings":"AAsIA;;yEAEyE;AACzE,eAAO,IAAI,MAAM,SAAQ,CAAC"}

package/dist/register/index.js

@@ -0,0 +1,126 @@
+/**
+ * `pyric-tools/register` — the Node substitution seam (adoption layer 2).
+ *
+ * Loaded via `node --import pyric-tools/register` (which `pyric dev` injects
+ * through NODE_OPTIONS), it makes the user's UNCHANGED `firebase-admin` /
+ * `firebase` imports resolve to `pyric-admin` / `pyric`, every subpath 1:1,
+ * and installs the sandbox-factory global that `pyric-admin`'s ambient
+ * `initializeApp()` consumes.
+ *
+ * ACTIVATOR, NOT LOCATOR (adoption-experience design): activation is purely
+ * the `PYRIC_SANDBOX` env var injected at invocation — never file presence,
+ * never app code. Without it this module is INERT (import it freely; nothing
+ * happens). Under `NODE_ENV=production` it REFUSES with one stderr line
+ * unless `PYRIC_SANDBOX_FORCE=1`. On activation it logs one stderr line.
+ *
+ * Hooks API: `module.registerHooks` (sync, Node ≥ 22.15) intercepts BOTH
+ * `require()` and `import`. On older 22.x it falls back to
+ * `module.register()` (ESM-only) with a warning that CJS require() is not
+ * rewritten.
+ */
+import Module from 'node:module';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { rewriteSpecifier } from './exempt.js';
+import { resolveEsmOnlySubpath } from './esm-exports.js';
+import { remoteSandbox } from '../remote/index.js';
+/** The shared seam with pyric-admin's ambient init: a synchronous factory
+ *  returning the lazy branded handle. `Symbol.for` so both packages agree
+ *  without importing each other's types. */
+const SANDBOX_FACTORY = Symbol.for('pyric.remote.sandboxFactory');
+/** `module.registerHooks` landed in Node 22.15 / 23.5 — feature-detect
+ *  (typed locally: the repo's ambient node types predate it). */
+const moduleApi = Module;
+/**
+ * CJS→ESM seam: a rewritten `require()` fails against the pyric mirrors'
+ * `import`-condition-only exports (the CJS resolver ignores hook-supplied
+ * condition overrides), even though `require(esm)` can load them fine.
+ * Locate the package from the REQUIRING module and resolve the subpath under
+ * import conditions ourselves. Returns the resolved file URL, or null to
+ * rethrow the original error.
+ */
+function resolveEsmOnlyForRequire(mapped, parentURL) {
+    if (typeof moduleApi.findPackageJSON !== 'function')
+        return null;
+    const slash = mapped.indexOf('/');
+    const pkgName = slash === -1 ? mapped : mapped.slice(0, slash);
+    const subpath = slash === -1 ? '.' : `.${mapped.slice(slash)}`;
+    let pkgJsonPath;
+    try {
+        pkgJsonPath = moduleApi.findPackageJSON(pkgName, parentURL ?? pathToFileURL(join(process.cwd(), 'noop.js')));
+    }
+    catch {
+        return null;
+    }
+    if (!pkgJsonPath)
+        return null;
+    try {
+        const pkg = JSON.parse(readFileSync(pkgJsonPath, 'utf8'));
+        const target = resolveEsmOnlySubpath(pkg.exports, subpath);
+        if (!target)
+            return null;
+        return pathToFileURL(join(dirname(pkgJsonPath), target)).href;
+    }
+    catch {
+        return null;
+    }
+}
+function activate() {
+    if (typeof moduleApi.registerHooks === 'function') {
+        moduleApi.registerHooks({
+            resolve(specifier, context, nextResolve) {
+                // The rewrite decision includes the mirror-package exemption:
+                // Firebase imports made FROM WITHIN pyric/pyric-admin/pyric-tools
+                // are their prod arms and must keep resolving to real Firebase
+                // (see exempt.ts).
+                const mapped = rewriteSpecifier(specifier, context.parentURL);
+                if (mapped === null)
+                    return nextResolve(specifier, context);
+                try {
+                    return nextResolve(mapped, context);
+                }
+                catch (err) {
+                    // CJS `require('firebase-admin/app')` resolves under the `require`
+                    // condition, but the pyric mirrors are ESM-only. Resolve the file
+                    // under import conditions ourselves — require(esm) (Node ≥ 22.12)
+                    // loads it fine once given the URL.
+                    if (err.code === 'ERR_PACKAGE_PATH_NOT_EXPORTED') {
+                        const url = resolveEsmOnlyForRequire(mapped, context.parentURL);
+                        if (url)
+                            return { url, shortCircuit: true };
+                    }
+                    throw err;
+                }
+            },
+        });
+    }
+    else {
+        process.stderr.write('pyric-tools/register: this Node version lacks module.registerHooks (needs >= 22.15) — ' +
+            'falling back to module.register: ESM imports of firebase-admin/firebase are rewritten, ' +
+            "but CJS require('firebase-admin') is NOT intercepted. Upgrade Node to >= 22.15 for full coverage.\n");
+        moduleApi.register?.(new URL('./hooks.js', import.meta.url));
+    }
+    // The factory global — exact contract shared with pyric-admin's ambient
+    // init: synchronous, returns the lazy branded handle.
+    globalThis[SANDBOX_FACTORY] = (opts) => remoteSandbox(opts);
+    process.stderr.write(`pyric-tools/register: active — firebase-admin/firebase imports now resolve to the ` +
+        `pyric sandbox (PYRIC_SANDBOX=${process.env.PYRIC_SANDBOX}).\n`);
+}
+/** Whether this process's firebase-admin/firebase imports are being rewritten
+ *  to the pyric sandbox — true only when `PYRIC_SANDBOX` was set (and not
+ *  refused by the production guard) at the moment this module loaded. */
+export let active = false;
+if (process.env.PYRIC_SANDBOX) {
+    if (process.env.NODE_ENV === 'production' && process.env.PYRIC_SANDBOX_FORCE !== '1') {
+        process.stderr.write('pyric-tools/register: refusing to activate under NODE_ENV=production — ' +
+            'firebase-admin/firebase imports are NOT rewritten. ' +
+            'Set PYRIC_SANDBOX_FORCE=1 to override (dev/CI only).\n');
+    }
+    else {
+        activate();
+        active = true;
+    }
+}
+// No PYRIC_SANDBOX → inert by design: importing this module rewrites nothing.
+//# sourceMappingURL=index.js.map

package/dist/register/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/register/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;4CAE4C;AAC5C,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAiBlE;iEACiE;AACjE,MAAM,SAAS,GAAG,MAIjB,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,MAAc,EAAE,SAA6B;IAC7E,IAAI,OAAO,SAAS,CAAC,eAAe,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/D,IAAI,WAA+B,CAAC;IACpC,IAAI,CAAC;QACH,WAAW,GAAG,SAAS,CAAC,eAAe,CACrC,OAAO,EACP,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAA0B,CAAC;QACnF,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ;IACf,IAAI,OAAO,SAAS,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QAClD,SAAS,CAAC,aAAa,CAAC;YACtB,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW;gBACrC,8DAA8D;gBAC9D,kEAAkE;gBAClE,+DAA+D;gBAC/D,mBAAmB;gBACnB,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC9D,IAAI,MAAM,KAAK,IAAI;oBAAE,OAAO,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAC5D,IAAI,CAAC;oBACH,OAAO,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACtC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,mEAAmE;oBACnE,kEAAkE;oBAClE,kEAAkE;oBAClE,oCAAoC;oBACpC,IAAK,GAAyB,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;wBACxE,MAAM,GAAG,GAAG,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;wBAChE,IAAI,GAAG;4BAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;oBAC9C,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wFAAwF;YACtF,yFAAyF;YACzF,qGAAqG,CACxG,CAAC;QACF,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,wEAAwE;IACxE,sDAAsD;IACrD,UAAsC,CAAC,eAAe,CAAC,GAAG,CAAC,IAAuB,EAAE,EAAE,CACrF,aAAa,CAAC,IAAI,CAAC,CAAC;IAEtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oFAAoF;QAClF,gCAAgC,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAClE,CAAC;AACJ,CAAC;AAED;;yEAEyE;AACzE,MAAM,CAAC,IAAI,MAAM,GAAG,KAAK,CAAC;AAE1B,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,GAAG,EAAE,CAAC;QACrF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yEAAyE;YACvE,qDAAqD;YACrD,wDAAwD,CAC3D,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,QAAQ,EAAE,CAAC;QACX,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AACD,8EAA8E"}

package/dist/register/mapping.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The specifier map behind `pyric-tools/register`: unmodified Firebase
+ * imports resolve to their pyric mirrors, 1:1 including every subpath
+ * (`firebase-admin/app` → `pyric-admin/app`, `firebase/firestore` →
+ * `pyric/firestore`, …).
+ *
+ * Pure — the resolution hooks (index.ts / hooks.ts) call this and the unit
+ * suite exercises it directly. Deliberately narrow: only the two package
+ * roots match. `@firebase/*` internals, `firebase-functions`, and anything
+ * merely *containing* "firebase" pass through untouched.
+ */
+/**
+ * Map a Firebase specifier to its pyric mirror, or return `null` when the
+ * specifier is not a Firebase package (leave it for the default resolver).
+ */
+export declare function mapFirebaseSpecifier(specifier: string): string | null;
+//# sourceMappingURL=mapping.d.ts.map

package/dist/register/mapping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapping.d.ts","sourceRoot":"","sources":["../../src/register/mapping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMrE"}

package/dist/register/mapping.js

@@ -0,0 +1,31 @@
+/**
+ * The specifier map behind `pyric-tools/register`: unmodified Firebase
+ * imports resolve to their pyric mirrors, 1:1 including every subpath
+ * (`firebase-admin/app` → `pyric-admin/app`, `firebase/firestore` →
+ * `pyric/firestore`, …).
+ *
+ * Pure — the resolution hooks (index.ts / hooks.ts) call this and the unit
+ * suite exercises it directly. Deliberately narrow: only the two package
+ * roots match. `@firebase/*` internals, `firebase-functions`, and anything
+ * merely *containing* "firebase" pass through untouched.
+ */
+const MAPPINGS = [
+    // firebase-admin first — `firebase-admin` must never match the bare
+    // `firebase` root (it can't today, but the order documents the intent).
+    ['firebase-admin', 'pyric-admin'],
+    ['firebase', 'pyric'],
+];
+/**
+ * Map a Firebase specifier to its pyric mirror, or return `null` when the
+ * specifier is not a Firebase package (leave it for the default resolver).
+ */
+export function mapFirebaseSpecifier(specifier) {
+    for (const [from, to] of MAPPINGS) {
+        if (specifier === from)
+            return to;
+        if (specifier.startsWith(`${from}/`))
+            return to + specifier.slice(from.length);
+    }
+    return null;
+}
+//# sourceMappingURL=mapping.js.map

package/dist/register/mapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapping.js","sourceRoot":"","sources":["../../src/register/mapping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,QAAQ,GAAuD;IACnE,oEAAoE;IACpE,wEAAwE;IACxE,CAAC,gBAAgB,EAAE,aAAa,CAAC;IACjC,CAAC,UAAU,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC;QAClC,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,OAAO,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/registry/admin-deps.d.ts

@@ -0,0 +1,17 @@
+import { type RtdbHost } from 'pyric/database';
+import { type ProjectScope } from '../deploy/index.js';
+import type { AdminAppDeps } from './compose.js';
+export interface AdminDepsResult {
+    scope: ProjectScope;
+    adminDeps: AdminAppDeps;
+    rtdbHost: RtdbHost;
+}
+/**
+ * @param saBase64 base64-encoded service account JSON.
+ * @param apiKey   Web API key — required only for user-mode (`as:{uid}`) operations.
+ */
+export declare function adminDepsFromServiceAccount(opts: {
+    saBase64: string;
+    apiKey?: string;
+}): AdminDepsResult;
+//# sourceMappingURL=admin-deps.d.ts.map

package/dist/registry/admin-deps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-deps.d.ts","sourceRoot":"","sources":["../../src/registry/admin-deps.ts"],"names":[],"mappings":"AAcA,OAAO,EAAyB,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAa,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,EAAE,YAAY,CAAC;IACxB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAOD;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,eAAe,CAoDlB"}

package/dist/registry/admin-deps.js

@@ -0,0 +1,68 @@
+/**
+ * Bootstraps the admin/prod inputs `composeMcpRegistry` needs from a service
+ * account: an admin App + `scope`, a user-impersonation Firestore factory, and
+ * an RTDB host. Standard SDK plumbing (createCustomToken -> signInWithCustomToken
+ * -> FirebaseServerApp), cached per (uid, claims).
+ *
+ * Used by the project-audit skill and firestore-path discovery to reach a real
+ * project. Previously inlined in the (now-removed) standalone MCP binary.
+ */
+import admin from 'firebase-admin';
+import { initializeApp as initializeClientApp, initializeServerApp } from 'firebase/app';
+import { getAuth as getClientAuth, signInWithCustomToken } from 'firebase/auth';
+import { getFirestore as getClientFirestore } from 'firebase/firestore';
+import { getDatabase as getClientDatabase } from 'firebase/database';
+import { initializeDatabaseApp } from 'pyric/database';
+import { getDeploy } from '../deploy/index.js';
+/**
+ * @param saBase64 base64-encoded service account JSON.
+ * @param apiKey   Web API key — required only for user-mode (`as:{uid}`) operations.
+ */
+export function adminDepsFromServiceAccount(opts) {
+    if (!opts.saBase64)
+        throw new Error('adminDepsFromServiceAccount: saBase64 is required');
+    const cert = JSON.parse(Buffer.from(opts.saBase64, 'base64').toString('utf-8'));
+    const app = admin.apps.length
+        ? admin.app()
+        : admin.initializeApp({
+            credential: admin.credential.cert(cert),
+            projectId: cert.project_id,
+        });
+    const scope = getDeploy(app);
+    const apiKey = opts.apiKey ?? '';
+    const clientApp = initializeClientApp({ apiKey, projectId: cert.project_id, authDomain: `${cert.project_id}.firebaseapp.com` }, 'pyric-impersonation');
+    const serverAppCache = new Map();
+    const getOrCreateServerApp = async (auth) => {
+        if (!apiKey)
+            throw new Error('apiKey is required for user-mode operations.');
+        const key = `${auth.uid}:${JSON.stringify(auth.claims ?? {})}`;
+        const cached = serverAppCache.get(key);
+        if (cached)
+            return cached;
+        const customToken = await admin.auth(app).createCustomToken(auth.uid, auth.claims);
+        const cred = await signInWithCustomToken(getClientAuth(clientApp), customToken);
+        const authIdToken = await cred.user.getIdToken();
+        const serverApp = initializeServerApp({ apiKey, projectId: cert.project_id, authDomain: `${cert.project_id}.firebaseapp.com` }, { authIdToken });
+        await getClientAuth(serverApp).authStateReady();
+        serverAppCache.set(key, serverApp);
+        return serverApp;
+    };
+    return {
+        scope,
+        adminDeps: {
+            adminApp: app,
+            getClientFirestore: async (auth) => getClientFirestore(await getOrCreateServerApp(auth)),
+        },
+        rtdbHost: initializeDatabaseApp({
+            projectId: cert.project_id,
+            getRestToken: () => scope.resolveToken(),
+            getUserToken: async (auth) => {
+                const customToken = await admin.auth(app).createCustomToken(auth.uid, auth.claims);
+                const cred = await signInWithCustomToken(getClientAuth(clientApp), customToken);
+                return cred.user.getIdToken();
+            },
+            getClientDatabase: async (auth, databaseUrl) => getClientDatabase(await getOrCreateServerApp(auth), databaseUrl),
+        }),
+    };
+}
+//# sourceMappingURL=admin-deps.js.map

package/dist/registry/admin-deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-deps.js","sourceRoot":"","sources":["../../src/registry/admin-deps.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,MAAM,gBAAgB,CAAC;AACnC,OAAO,EAAE,aAAa,IAAI,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACzF,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,YAAY,IAAI,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAiB,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,SAAS,EAAqB,MAAM,oBAAoB,CAAC;AAclE;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAG3C;IACC,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM;QAC3B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACb,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YACvC,SAAS,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC,CAAC;IAEP,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,mBAAmB,CACnC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,UAAU,kBAAkB,EAAE,EACxF,qBAAqB,CACtB,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkD,CAAC;IACjF,MAAM,oBAAoB,GAAG,KAAK,EAAE,IAAuB,EAAE,EAAE;QAC7D,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,mBAAmB,CACnC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,UAAU,kBAAkB,EAAE,EACxF,EAAE,WAAW,EAAE,CAChB,CAAC;QACF,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC;QAChD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACnC,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,OAAO;QACL,KAAK;QACL,SAAS,EAAE;YACT,QAAQ,EAAE,GAAG;YACb,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;SACzF;QACD,QAAQ,EAAE,qBAAqB,CAAC;YAC9B,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE;YACxC,YAAY,EAAE,KAAK,EAAE,IAAuB,EAAE,EAAE;gBAC9C,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnF,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;gBAChF,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChC,CAAC;YACD,iBAAiB,EAAE,KAAK,EAAE,IAAuB,EAAE,WAAmB,EAAE,EAAE,CACxE,iBAAiB,CAAC,MAAM,oBAAoB,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;SACnE,CAAC;KACH,CAAC;AACJ,CAAC"}