things-api 0.17.0 → 0.19.0

package/dist/direct-setup.js

@@ -0,0 +1,484 @@
+/**
+ * `things setup` — the DIRECT-path onboarding ceremony
+ * (docs/design/permissions-doctrine.md, Article V).
+ *
+ * One of exactly two places in the package allowed to put a macOS consent
+ * dialog on screen (the other is `things helpers setup`). Everywhere else
+ * detects capability prompt-free and refuses; here we deliberately raise what
+ * has to be raised, while a human is sitting at the machine, and report where
+ * each grant landed.
+ *
+ * The legs, in order:
+ *
+ *  a. READ ACCESS. An explicit two-way choice, because the two answers differ in
+ *     kind rather than in quality. The DEFAULT — a bare Enter — is the session
+ *     grant: one deliberate container open, which raises the "would like to
+ *     access data from other apps" modal, and if the open then succeeds the
+ *     grant is witnessed (./session-grant.ts). It lasts only while the host app
+ *     stays open, and the copy says so. Typing `f` takes Full Disk Access
+ *     instead: durable, but it hands the whole disk to a general-purpose host
+ *     app, so it is offered, never assumed.
+ *
+ *     MEASURED: FDA does NOT take effect for a running app. macOS says so in
+ *     the Settings sheet itself — "…will not have full disk access until it is
+ *     quit", with Later / Quit & Reopen — and the responsible process keeps its
+ *     old answer for its whole life, so every child it spawns, including a
+ *     rerun of `things` in the same window, still sees no FDA. There is
+ *     therefore nothing for this leg to wait for: it deep-links Settings, says
+ *     what to flip and that the app must relaunch, leaves the leg PENDING, and
+ *     lets the remaining legs run — Automation and the shortcuts land fine in
+ *     this session, so the rerun after the relaunch has only this leg left.
+ *  b. APP CONTROL. When macOS has no Automation record for the host app, the
+ *     only way to mint one is to send a real Apple Event, which is what raises
+ *     the dialog. Inside a ceremony that is exactly right. A recorded refusal
+ *     is NOT re-asked (macOS will not show it again); the copy names both the
+ *     Settings toggle and the `tccutil` re-arm and leaves the choice to the human.
+ *  c. SHORTCUTS. The bundled proxies that carry the operations no other surface
+ *     can perform. An install sheet per missing shortcut; no macOS consent.
+ *
+ * There is deliberately NO Accessibility leg: GUI-driving is helpers-only
+ * (Article IV), so when `ui.enabled` is set this ceremony says so and points at
+ * `things helpers setup --gui` rather than raising an AX prompt against the
+ * terminal.
+ *
+ * Every leg is IDEMPOTENT and RESUMABLE: an already-satisfied leg is detected
+ * prompt-free and skipped, so a rerun on a settled machine raises nothing and
+ * reports all-green. A leg left outstanding exits nonzero naming what remains.
+ *
+ * Mode-aware (Article V): off a TTY this is STRICT mode — an upfront banner
+ * counting the dialogs, bounded waits, and an unanswered leg failing the run.
+ * At a TTY the same legs run as a guided WIZARD: each dialog is explained in
+ * the words macOS will use before it is raised, and the ceremony waits for the
+ * human between legs (./wizard.ts). TTY-ness is the only signal, and it is read
+ * inside this ceremony only.
+ */
+import { execFileSync } from "node:child_process";
+import { existsSync, openSync, closeSync } from "node:fs";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { hostApp, hostDisplayName, readCapability, writeCapability, } from "./capability.js";
+import { loadConfig } from "./config.js";
+import { locateThingsDb } from "./db/locate.js";
+import { clearSessionGrant, witnessSessionGrant } from "./session-grant.js";
+import { createWizard, withDefaultInterrupts } from "./wizard.js";
+import { readShortcutProxies } from "./write/availability.js";
+/** Deep link to the Full Disk Access pane. */
+const FDA_SETTINGS_URL = "x-apple.systempreferences:com.apple.preference.security?Privacy_AllFiles";
+/** Deep link to the Automation pane. */
+const AUTOMATION_SETTINGS_URL = "x-apple.systempreferences:com.apple.preference.security?Privacy_Automation";
+/** Package root — one level above src/ AND dist/, so both layouts resolve. */
+const SHORTCUTS_DIR = fileURLToPath(new URL("../shortcuts", import.meta.url));
+const AUTOMATION_TIMEOUT_MS = 60_000;
+/** The key that picks Full Disk Access over the session grant at the read leg. */
+const FDA_CHOICE_KEY = "f";
+function openUrlBestEffort(url) {
+    try {
+        execFileSync("open", [url], { stdio: "ignore", timeout: 10_000 });
+    }
+    catch {
+        // The deep link is a convenience; the written path works without it.
+    }
+}
+/**
+ * The container open the ceremony performs on purpose. This is the ONE place
+ * in the package permitted to do it blind — everywhere else the doctrine's
+ * Article I corollary forbids it, because the open is what raises the modal.
+ */
+function openContainerDefault() {
+    const fd = openSync(locateThingsDb().path, "r");
+    closeSync(fd);
+}
+function sendAutomationProbeDefault(timeoutMs) {
+    // `count of areas` dispatches a REAL Apple event. Properties like `version`
+    // are answered locally from the target's bundle, mint no grant, and still
+    // exit 0 — a false positive that has shipped here before (see the helpers'
+    // automationLeg). Never weaken this script.
+    execFileSync("osascript", ["-e", 'tell application "Things3" to count of areas'], {
+        stdio: ["ignore", "ignore", "pipe"],
+        timeout: timeoutMs,
+    });
+}
+// ── Leg (a): read access ─────────────────────────────────────────────────────
+/**
+ * The two ways to read, offered as a choice rather than a ranking. Enter takes
+ * the session grant; `f` takes Full Disk Access, which is the wider grant and
+ * the one that costs the human a relaunch.
+ */
+function readAccessChoice(hostName) {
+    return [
+        "Next: read access to your Things data — two ways:",
+        `  Enter  allow this session only: a dialog asks now; access ends when ${hostName} quits`,
+        `  f      Full Disk Access: durable, but grants ${hostName} broad file access —`,
+        `         flip it in System Settings, then ${hostName} must quit and reopen`,
+    ];
+}
+/**
+ * The `f` branch. Nothing here waits: FDA reaches a process only through a
+ * relaunch, so the leg hands over the three steps and goes pending. The
+ * remaining legs still run — their grants land in THIS session — so the rerun
+ * after the relaunch has only this one left.
+ */
+function fdaBranch(base, hostName, deps) {
+    const progress = deps.progress ?? (() => { });
+    (deps.openUrl ?? openUrlBestEffort)(FDA_SETTINGS_URL);
+    progress(`read access: 1. turn on ${hostName} under System Settings ▸ Privacy & Security ▸ Full Disk Access`);
+    progress(`read access: 2. click "Quit & Reopen" when macOS offers it, or quit ${hostName} yourself`);
+    progress("read access: 3. run `things setup` again in the new window to confirm it");
+    progress("read access: the rest of the setup continues now — those grants land in this session");
+    return {
+        ...base,
+        state: "pending",
+        alreadySatisfied: false,
+        detail: `Full Disk Access takes effect after ${hostName} relaunches — turn it on, quit and ` +
+            `reopen ${hostName}, then rerun \`things setup\``,
+    };
+}
+/**
+ * The default branch: provoke the app-data modal on purpose and record the
+ * grant only if the open then actually succeeded. The wait is the modal's own —
+ * macOS holds the open until someone answers it, which is the premise of a
+ * ceremony.
+ */
+function sessionGrantBranch(base, hostName, deps) {
+    const progress = deps.progress ?? (() => { });
+    progress(`read access: asking now — a dialog asks whether ${hostName} may access data from ` +
+        "other apps; click Allow");
+    const host = hostApp(deps);
+    try {
+        (deps.openContainer ?? openContainerDefault)();
+    }
+    catch (err) {
+        clearSessionGrant(deps.env ?? process.env);
+        const why = err instanceof Error ? err.message : String(err);
+        progress(`read access: still no access — ${why}`);
+        return {
+            ...base,
+            state: "pending",
+            alreadySatisfied: false,
+            detail: "no read access yet — rerun and answer the dialog, choose Full Disk Access at the " +
+                "read step instead, or run `things helpers setup` to let a helper hold the grant",
+        };
+    }
+    const witnessed = witnessSessionGrant(host.bundleId ?? "", deps);
+    if (witnessed === null) {
+        return {
+            ...base,
+            state: "pending",
+            alreadySatisfied: false,
+            detail: "the folder opened, but this process has no host application whose lifetime the " +
+                "grant could be tied to — choose Full Disk Access instead, or run `things helpers setup`",
+        };
+    }
+    progress("read access: granted for as long as this app stays open");
+    return {
+        ...base,
+        state: "granted",
+        alreadySatisfied: false,
+        detail: `${hostName} may read the Things data folder until it quits. Full Disk Access makes ` +
+            "it permanent; `things helpers setup` moves it onto a helper that keeps it across restarts",
+    };
+}
+function readAccessLeg(capability, choice, deps) {
+    const base = { leg: "read-access", label: "read access" };
+    const progress = deps.progress ?? (() => { });
+    const hostName = hostDisplayName(deps);
+    if (capability.mode === "helpers") {
+        progress("read access: already served by the helpers");
+        return {
+            ...base,
+            state: "granted",
+            alreadySatisfied: true,
+            detail: "the helpers' reader holds the read grant",
+        };
+    }
+    if (capability.mode === "direct-fda") {
+        progress("read access: already granted (Full Disk Access)");
+        return { ...base, state: "granted", alreadySatisfied: true, detail: capability.detail };
+    }
+    if (capability.mode === "session-grant") {
+        progress("read access: already granted for as long as this app stays open");
+        return { ...base, state: "granted", alreadySatisfied: true, detail: capability.detail };
+    }
+    // Nothing on record: the human's choice decides which grant this leg gathers.
+    return choice === FDA_CHOICE_KEY
+        ? fdaBranch(base, hostName, deps)
+        : sessionGrantBranch(base, hostName, deps);
+}
+// ── Leg (b): app control ─────────────────────────────────────────────────────
+function appControlLeg(deps) {
+    const base = { leg: "app-control", label: "app control" };
+    const progress = deps.progress ?? (() => { });
+    const capability = writeCapability(deps);
+    const hostName = hostDisplayName(deps);
+    if (capability.mode === "deputy") {
+        progress("app control: already held by the helpers");
+        return {
+            ...base,
+            state: "granted",
+            alreadySatisfied: true,
+            detail: "the deputy holds app control for Things",
+        };
+    }
+    if (capability.mode === "direct-granted") {
+        progress("app control: already granted");
+        return { ...base, state: "granted", alreadySatisfied: true, detail: capability.detail };
+    }
+    if (capability.mode === "direct-denied") {
+        // macOS will not show this dialog again — re-asking is not an option, so
+        // the leg reports the two things a human can actually do.
+        progress("app control: refused earlier — macOS will not ask again");
+        return {
+            ...base,
+            state: "denied",
+            alreadySatisfied: false,
+            detail: capability.remediation.join("; "),
+        };
+    }
+    progress("app control: asking now — answer the dialog if one appears");
+    try {
+        (deps.sendAutomationProbe ?? sendAutomationProbeDefault)(deps.automationTimeoutMs ?? AUTOMATION_TIMEOUT_MS);
+    }
+    catch (err) {
+        const e = err;
+        const stderr = typeof e.stderr === "string"
+            ? e.stderr
+            : Buffer.isBuffer(e.stderr)
+                ? e.stderr.toString("utf8")
+                : err instanceof Error
+                    ? err.message
+                    : String(err);
+        if (/-1743/.test(stderr)) {
+            progress("app control: refused");
+            (deps.openUrl ?? openUrlBestEffort)(AUTOMATION_SETTINGS_URL);
+            return {
+                ...base,
+                state: "denied",
+                alreadySatisfied: false,
+                detail: `turn on Things3 for ${hostName} under System Settings ▸ Privacy & Security ▸ ` +
+                    `Automation, or re-arm the request with \`tccutil reset AppleEvents ${hostApp(deps).bundleId ?? "<host app>"}\`, then rerun`,
+            };
+        }
+        if (e.killed === true || /-1712|event timed out/i.test(stderr)) {
+            progress("app control: still waiting on the dialog");
+            return {
+                ...base,
+                state: "pending",
+                alreadySatisfied: false,
+                detail: "the dialog was not answered — answer it and rerun",
+            };
+        }
+        progress(`app control: no grant yet (${stderr.trim().split("\n")[0] ?? "unknown error"})`);
+        return {
+            ...base,
+            state: "pending",
+            alreadySatisfied: false,
+            detail: stderr.trim().split("\n")[0] ?? "the request did not complete",
+        };
+    }
+    // A zero exit is not believed on its own: re-read what macOS actually records.
+    const after = writeCapability(deps);
+    if (after.mode === "direct-granted" || after.mode === "deputy") {
+        progress("app control: granted");
+        return { ...base, state: "granted", alreadySatisfied: false, detail: "granted" };
+    }
+    progress("app control: the request ran but macOS records no grant yet");
+    return {
+        ...base,
+        state: "pending",
+        alreadySatisfied: false,
+        detail: `${after.detail} — rerun, or turn Things3 on for ${hostName} under System Settings ▸ Privacy & Security ▸ Automation`,
+    };
+}
+// ── Leg (c): shortcuts ───────────────────────────────────────────────────────
+function shortcutsLeg(deps) {
+    const base = { leg: "shortcuts", label: "shortcuts" };
+    const progress = deps.progress ?? (() => { });
+    const state = (deps.shortcutProxies ?? readShortcutProxies)();
+    if (state.missing.length === 0) {
+        progress("shortcuts: all installed");
+        return {
+            ...base,
+            state: "granted",
+            alreadySatisfied: true,
+            detail: `${state.present.length} installed`,
+        };
+    }
+    const opened = [];
+    const failures = [];
+    for (const name of state.missing) {
+        const file = join(SHORTCUTS_DIR, `${name}.shortcut`);
+        if (!existsSync(file)) {
+            failures.push(`${name} (file missing from the package)`);
+            continue;
+        }
+        try {
+            (deps.openShortcut ?? ((f) => execFileSync("open", [f], { timeout: 10_000 })))(file);
+            opened.push(name);
+        }
+        catch {
+            failures.push(name);
+        }
+    }
+    if (opened.length > 0) {
+        progress(`shortcuts: opened ${opened.length} install sheet${opened.length === 1 ? "" : "s"} — ` +
+            'click "Add Shortcut" on each, then "Always Allow" the first time each one runs');
+    }
+    if (failures.length > 0)
+        progress(`shortcuts: could not open ${failures.join(", ")}`);
+    return {
+        ...base,
+        state: "pending",
+        alreadySatisfied: false,
+        detail: opened.length > 0
+            ? `${opened.length} install sheet${opened.length === 1 ? "" : "s"} opened — click “Add Shortcut” on each, then rerun`
+            : `could not open: ${failures.join(", ")}`,
+    };
+}
+// ── The ceremony ─────────────────────────────────────────────────────────────
+/**
+ * What each leg puts on screen, for the upfront banner. Named flatly, in the
+ * order the ceremony raises them — one clause each, no parenthetical asides.
+ */
+function promptLabel(leg, hostName) {
+    switch (leg) {
+        case "read-access":
+            return `data access for ${hostName}`;
+        case "app-control":
+            return "app control of Things";
+        case "shortcuts":
+            return "one install sheet per missing shortcut";
+    }
+}
+/** "a", "a and b", "a, b, and c" — the banner reads as a sentence. */
+function listPhrase(items) {
+    if (items.length <= 1)
+        return items[0] ?? "";
+    if (items.length === 2)
+        return `${items[0]} and ${items[1]}`;
+    return `${items.slice(0, -1).join(", ")}, and ${items.at(-1)}`;
+}
+/**
+ * What the human is about to see, in the words macOS will actually use — the
+ * wizard prints these one leg ahead of the dialog (Article V, mode-aware). In
+ * strict mode they are never printed; the upfront banner's count stands alone.
+ * `{host}` is filled with the detected host app's display name. The read leg is
+ * absent because it is a CHOICE rather than an announcement — see
+ * {@link readAccessChoice}.
+ */
+const PROMPT_EXPLAINERS = {
+    "app-control": [
+        "Next: permission to control the Things app.",
+        '  A macOS dialog will appear: "{host}" wants access to control "Things" — click Allow.',
+        "  Things opens if it was closed; that is expected.",
+    ],
+    shortcuts: [
+        "Next: the bundled shortcuts.",
+        '  One Shortcuts install sheet opens per missing shortcut — click "Add Shortcut" on each.',
+        '  The first time each one runs, Shortcuts asks once more; choose "Always Allow".',
+    ],
+};
+function closingLine(steps, uiEnabled) {
+    const denied = steps.filter((s) => s.state === "denied");
+    const pending = steps.filter((s) => s.state === "pending");
+    const guiHint = uiEnabled
+        ? " Some features drive the Things window; that needs the helpers — `things helpers setup --gui`."
+        : "";
+    if (denied.length > 0) {
+        return (`${denied.map((s) => s.label).join(", ")} ${denied.length === 1 ? "was" : "were"} refused — ` +
+            `macOS will not ask again, so the remedy above has to be done by hand.${guiHint}`);
+    }
+    if (pending.length > 0) {
+        return `still outstanding: ${pending.map((s) => s.label).join(", ")}. Finish those and rerun \`things setup\` — it resumes exactly here.${guiHint}`;
+    }
+    return `Everything this machine needs is in place.${guiHint}`;
+}
+/**
+ * What the ceremony would do, established entirely prompt-free. This is the
+ * idempotence check (Article V): it is what lets a rerun skip settled legs, and
+ * it is what `--dry-run` reports. Raises nothing, ever.
+ */
+export function surveySetup(deps = {}) {
+    const host = hostApp(deps);
+    const read = readCapability({}, deps);
+    const write = writeCapability(deps);
+    const shortcuts = (deps.shortcutProxies ?? readShortcutProxies)();
+    const outstanding = [];
+    if (read.mode !== "direct-fda" && read.mode !== "session-grant" && read.mode !== "helpers") {
+        outstanding.push("read-access");
+    }
+    // A recorded refusal raises nothing (the dialog is spent), so it is not counted.
+    if (write.mode === "direct-unknown")
+        outstanding.push("app-control");
+    if (shortcuts.missing.length > 0)
+        outstanding.push("shortcuts");
+    return {
+        host: { bundleId: host.bundleId, name: hostDisplayName(deps) },
+        read,
+        write,
+        shortcutsMissing: [...shortcuts.missing],
+        outstanding,
+    };
+}
+/**
+ * Run the direct-path ceremony. Strict mode: the banner counts what is about
+ * to appear, waits are bounded, and an unanswered leg leaves the run nonzero.
+ *
+ * Runs under {@link withDefaultInterrupts} for its whole synchronous span, so
+ * a Ctrl-C at a gate — or during a leg's bounded wait — actually stops it
+ * (./wizard.ts, "Why a ceremony runs with the DEFAULT signal disposition").
+ * Throws {@link CeremonyStopped} when the human stops at a gate.
+ */
+export function directSetup(deps = {}) {
+    return withDefaultInterrupts(() => runCeremony(deps));
+}
+function runCeremony(deps) {
+    const progress = deps.progress ?? ((line) => process.stdout.write(`${line}\n`));
+    const withProgress = { ...deps, progress };
+    const env = deps.env ?? process.env;
+    const host = hostApp(withProgress);
+    const hostName = hostDisplayName(withProgress);
+    // Survey prompt-free BEFORE raising anything, so whoever started this knows
+    // whether they must stay at the screen (Article V).
+    const survey = surveySetup(withProgress);
+    const readBefore = survey.read;
+    const outstanding = survey.outstanding;
+    progress(`setting up direct access for ${hostName}${host.bundleId !== null ? ` (${host.bundleId})` : ""}`);
+    progress(outstanding.length === 0
+        ? "nothing to raise — every permission this machine needs is already on record"
+        : `about to raise ${outstanding.length} dialog${outstanding.length === 1 ? "" : "s"} — ` +
+            `${listPhrase(outstanding.map((leg) => promptLabel(leg, hostName)))}. ` +
+            "Someone must be at the screen.");
+    const wizard = deps.wizard ?? createWizard();
+    const willRaise = new Set(outstanding);
+    /** Explain a leg's dialog and let the human pace it — wizard mode only. */
+    const brief = (leg) => {
+        if (willRaise.has(leg)) {
+            wizard.explain(PROMPT_EXPLAINERS[leg].map((line) => line.replaceAll("{host}", hostName)));
+        }
+    };
+    // The read leg is the one CHOICE in the ceremony: Enter takes the session
+    // grant, `f` takes Full Disk Access. Strict mode answers "" without asking,
+    // which is the session grant — the only one an absent human can still get.
+    const readChoice = willRaise.has("read-access")
+        ? wizard.choose(readAccessChoice(hostName), [FDA_CHOICE_KEY])
+        : "";
+    const readStep = readAccessLeg(readBefore, readChoice, withProgress);
+    brief("app-control");
+    const appControlStep = appControlLeg(withProgress);
+    brief("shortcuts");
+    const steps = [readStep, appControlStep, shortcutsLeg(withProgress)];
+    const uiEnabled = loadConfig(env).ui.enabled;
+    if (uiEnabled) {
+        progress("note: GUI-driving is enabled in config, and it is granted only to the helpers — " +
+            "run `things helpers setup --gui` to onboard it");
+    }
+    return {
+        host: { bundleId: host.bundleId, name: hostName },
+        steps,
+        outstanding,
+        denied: steps.some((s) => s.state === "denied"),
+        pending: steps.some((s) => s.state === "pending"),
+        closing: closingLine(steps, uiEnabled),
+    };
+}
+//# sourceMappingURL=direct-setup.js.map

package/dist/direct-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-setup.js","sourceRoot":"","sources":["../src/direct-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,OAAO,EACP,eAAe,EACf,cAAc,EACd,eAAe,GAGhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAe,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAuB,MAAM,yBAAyB,CAAC;AAEnF,8CAA8C;AAC9C,MAAM,gBAAgB,GAAG,0EAA0E,CAAC;AACpG,wCAAwC;AACxC,MAAM,uBAAuB,GAC3B,4EAA4E,CAAC;AAE/E,8EAA8E;AAC9E,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE9E,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC,kFAAkF;AAClF,MAAM,cAAc,GAAG,GAAG,CAAC;AAoD3B,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,YAAY,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB;IAC3B,MAAM,EAAE,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChD,SAAS,CAAC,EAAE,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,0BAA0B,CAAC,SAAiB;IACnD,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,4CAA4C;IAC5C,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,8CAA8C,CAAC,EAAE;QAChF,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;QACnC,OAAO,EAAE,SAAS;KACnB,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAEhF;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,OAAO;QACL,mDAAmD;QACnD,yEAAyE,QAAQ,QAAQ;QACzF,kDAAkD,QAAQ,sBAAsB;QAChF,6CAA6C,QAAQ,uBAAuB;KAC7E,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAChB,IAA2C,EAC3C,QAAgB,EAChB,IAAqB;IAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC7C,CAAC,IAAI,CAAC,OAAO,IAAI,iBAAiB,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACtD,QAAQ,CACN,2BAA2B,QAAQ,gEAAgE,CACpG,CAAC;IACF,QAAQ,CACN,uEAAuE,QAAQ,WAAW,CAC3F,CAAC;IACF,QAAQ,CAAC,0EAA0E,CAAC,CAAC;IACrF,QAAQ,CAAC,sFAAsF,CAAC,CAAC;IACjG,OAAO;QACL,GAAG,IAAI;QACP,KAAK,EAAE,SAAS;QAChB,gBAAgB,EAAE,KAAK;QACvB,MAAM,EACJ,uCAAuC,QAAQ,qCAAqC;YACpF,UAAU,QAAQ,+BAA+B;KACpD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CACzB,IAA2C,EAC3C,QAAgB,EAChB,IAAqB;IAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC7C,QAAQ,CACN,mDAAmD,QAAQ,wBAAwB;QACjF,yBAAyB,CAC5B,CAAC;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,CAAC,IAAI,CAAC,aAAa,IAAI,oBAAoB,CAAC,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iBAAiB,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,QAAQ,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;QAClD,OAAO;YACL,GAAG,IAAI;YACP,KAAK,EAAE,SAAS;YAChB,gBAAgB,EAAE,KAAK;YACvB,MAAM,EACJ,mFAAmF;gBACnF,iFAAiF;SACpF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IACjE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO;YACL,GAAG,IAAI;YACP,KAAK,EAAE,SAAS;YAChB,gBAAgB,EAAE,KAAK;YACvB,MAAM,EACJ,iFAAiF;gBACjF,yFAAyF;SAC5F,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IACpE,OAAO;QACL,GAAG,IAAI;QACP,KAAK,EAAE,SAAS;QAChB,gBAAgB,EAAE,KAAK;QACvB,MAAM,EACJ,GAAG,QAAQ,0EAA0E;YACrF,2FAA2F;KAC9F,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,UAA0B,EAC1B,MAAc,EACd,IAAqB;IAErB,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,aAAsB,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAClC,QAAQ,CAAC,4CAA4C,CAAC,CAAC;QACvD,OAAO;YACL,GAAG,IAAI;YACP,KAAK,EAAE,SAAS;YAChB,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,0CAA0C;SACnD,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACrC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;QAC5D,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACxC,QAAQ,CAAC,iEAAiE,CAAC,CAAC;QAC5E,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IAC1F,CAAC;IACD,8EAA8E;IAC9E,OAAO,MAAM,KAAK,cAAc;QAC9B,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC;QACjC,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAEhF,SAAS,aAAa,CAAC,IAAqB;IAC1C,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,aAAsB,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjC,QAAQ,CAAC,0CAA0C,CAAC,CAAC;QACrD,OAAO;YACL,GAAG,IAAI;YACP,KAAK,EAAE,SAAS;YAChB,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,yCAAyC;SAClD,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACzC,QAAQ,CAAC,8BAA8B,CAAC,CAAC;QACzC,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACxC,yEAAyE;QACzE,0DAA0D;QAC1D,QAAQ,CAAC,yDAAyD,CAAC,CAAC;QACpE,OAAO;YACL,GAAG,IAAI;YACP,KAAK,EAAE,QAAQ;YACf,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,4DAA4D,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,CAAC,IAAI,CAAC,mBAAmB,IAAI,0BAA0B,CAAC,CACtD,IAAI,CAAC,mBAAmB,IAAI,qBAAqB,CAClD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA6C,CAAC;QACxD,MAAM,MAAM,GACV,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,CAAC,CAAC,MAAM;YACV,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;gBACzB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC3B,CAAC,CAAC,GAAG,YAAY,KAAK;oBACpB,CAAC,CAAC,GAAG,CAAC,OAAO;oBACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YACjC,CAAC,IAAI,CAAC,OAAO,IAAI,iBAAiB,CAAC,CAAC,uBAAuB,CAAC,CAAC;YAC7D,OAAO;gBACL,GAAG,IAAI;gBACP,KAAK,EAAE,QAAQ;gBACf,gBAAgB,EAAE,KAAK;gBACvB,MAAM,EACJ,uBAAuB,QAAQ,gDAAgD;oBAC/E,sEACE,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,YAC5B,gBAAgB;aACnB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,QAAQ,CAAC,0CAA0C,CAAC,CAAC;YACrD,OAAO;gBACL,GAAG,IAAI;gBACP,KAAK,EAAE,SAAS;gBAChB,gBAAgB,EAAE,KAAK;gBACvB,MAAM,EAAE,mDAAmD;aAC5D,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,8BAA8B,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,eAAe,GAAG,CAAC,CAAC;QAC3F,OAAO;YACL,GAAG,IAAI;YACP,KAAK,EAAE,SAAS;YAChB,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,8BAA8B;SACvE,CAAC;IACJ,CAAC;IACD,+EAA+E;IAC/E,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/D,QAAQ,CAAC,sBAAsB,CAAC,CAAC;QACjC,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnF,CAAC;IACD,QAAQ,CAAC,6DAA6D,CAAC,CAAC;IACxE,OAAO;QACL,GAAG,IAAI;QACP,KAAK,EAAE,SAAS;QAChB,gBAAgB,EAAE,KAAK;QACvB,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,oCAAoC,QAAQ,0DAA0D;KAC9H,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,SAAS,YAAY,CAAC,IAAqB;IACzC,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,WAAoB,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,mBAAmB,CAAC,EAAE,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,0BAA0B,CAAC,CAAC;QACrC,OAAO;YACL,GAAG,IAAI;YACP,KAAK,EAAE,SAAS;YAChB,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,YAAY;SAC5C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;YACzD,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC7F,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,QAAQ,CACN,qBAAqB,MAAM,CAAC,MAAM,iBAAiB,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK;YACpF,gFAAgF,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,6BAA6B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO;QACL,GAAG,IAAI;QACP,KAAK,EAAE,SAAS;QAChB,gBAAgB,EAAE,KAAK;QACvB,MAAM,EACJ,MAAM,CAAC,MAAM,GAAG,CAAC;YACf,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,iBAAiB,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,oDAAoD;YACrH,CAAC,CAAC,mBAAmB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAa,EAAE,QAAgB;IAClD,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,aAAa;YAChB,OAAO,mBAAmB,QAAQ,EAAE,CAAC;QACvC,KAAK,aAAa;YAChB,OAAO,uBAAuB,CAAC;QACjC,KAAK,WAAW;YACd,OAAO,wCAAwC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,UAAU,CAAC,KAAe;IACjC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAuD;IAC5E,aAAa,EAAE;QACb,6CAA6C;QAC7C,wFAAwF;QACxF,oDAAoD;KACrD;IACD,SAAS,EAAE;QACT,8BAA8B;QAC9B,0FAA0F;QAC1F,kFAAkF;KACnF;CACF,CAAC;AAEF,SAAS,WAAW,CAAC,KAAkB,EAAE,SAAkB;IACzD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,SAAS;QACvB,CAAC,CAAC,gGAAgG;QAClG,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CACL,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,aAAa;YAC7F,wEAAwE,OAAO,EAAE,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,sBAAsB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uEAAuE,OAAO,EAAE,CAAC;IACtJ,CAAC;IACD,OAAO,6CAA6C,OAAO,EAAE,CAAC;AAChE,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,OAAwB,EAAE;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,mBAAmB,CAAC,EAAE,CAAC;IAClE,MAAM,WAAW,GAAe,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3F,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;IACD,iFAAiF;IACjF,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAAE,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrE,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChE,OAAO;QACL,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE;QAC9D,IAAI;QACJ,KAAK;QACL,gBAAgB,EAAE,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;QACxC,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,OAAwB,EAAE;IACpD,OAAO,qBAAqB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,IAAqB;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IACxF,MAAM,YAAY,GAAoB,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAE/C,4EAA4E;IAC5E,oDAAoD;IACpD,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAEvC,QAAQ,CACN,gCAAgC,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACjG,CAAC;IACF,QAAQ,CACN,WAAW,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,CAAC,6EAA6E;QAC/E,CAAC,CAAC,kBAAkB,WAAW,CAAC,MAAM,UAAU,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK;YACpF,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI;YACvE,gCAAgC,CACvC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACvC,2EAA2E;IAC3E,MAAM,KAAK,GAAG,CAAC,GAAqC,EAAQ,EAAE;QAC5D,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC,CAAC;IACF,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC;QAC7C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAC7D,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IACrE,KAAK,CAAC,aAAa,CAAC,CAAC;IACrB,MAAM,cAAc,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IACnD,KAAK,CAAC,WAAW,CAAC,CAAC;IACnB,MAAM,KAAK,GAAgB,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC;IAC7C,IAAI,SAAS,EAAE,CAAC;QACd,QAAQ,CACN,kFAAkF;YAChF,gDAAgD,CACnD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;QACjD,KAAK;QACL,WAAW;QACX,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC;QAC/C,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC;QACjD,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC;KACvC,CAAC;AACJ,CAAC"}

package/dist/host-access.d.ts

@@ -0,0 +1,63 @@
+import { type SessionGrantDeps } from "./session-grant.ts";
+/** The host app that macOS attributes this process's grants to (Article III). */
+export interface HostApp {
+    /**
+     * The responsible process's bundle identifier when the environment names one
+     * (`__CFBundleIdentifier`), else null. This is the TCC *client* identity —
+     * the string a grant is recorded against.
+     */
+    bundleId: string | null;
+    /** A display name for copy ("Ghostty", "Terminal"), or "this terminal". */
+    name: string;
+}
+/** Seams for the host-identity and file-access probes; tests replace them all. */
+export interface HostAccessDeps extends SessionGrantDeps {
+    env?: NodeJS.ProcessEnv;
+    /**
+     * Attempt the FDA-class read-open. Returns normally when the host holds Full
+     * Disk Access; throws a Node fs error (EPERM when it does not) otherwise.
+     */
+    fdaProbe?: () => void;
+    /** Resolve a running app's display name from its bundle id (LaunchServices). */
+    lookupAppName?: (bundleId: string) => string | null;
+}
+/**
+ * The host app, resolved from the environment alone — no subprocess, so this is
+ * safe on the hot path. `__CFBundleIdentifier` is set by macOS when a process
+ * descends from an app bundle, which is how a terminal's shell (and everything
+ * it spawns) carries its emulator's identity.
+ */
+export declare function hostApp(deps?: HostAccessDeps): HostApp;
+/**
+ * The host app's display name for COPY. Identical to {@link hostApp}'s name
+ * except for an unlisted bundle id, where LaunchServices is asked once per
+ * process. Only call this from a path that is about to print.
+ */
+export declare function hostDisplayName(deps?: HostAccessDeps): string;
+/** Test seam: forget the one memo this module keeps (the host's display name). */
+export declare function resetHostAccessForTests(): void;
+/** Where the FDA probe reads. Exported so `doctor` and the ceremony can name it. */
+export declare function tccDbPath(env?: NodeJS.ProcessEnv): string;
+export interface FdaVerdict {
+    granted: boolean;
+    /** The errno when the open failed, for honest reporting of the unexpected. */
+    code: string | null;
+}
+/**
+ * Does the host app hold Full Disk Access? Prompt-free by construction. An
+ * EPERM (or the sandbox's EACCES) is the ordinary "no"; any other errno is
+ * reported as itself rather than folded into a false negative.
+ */
+export declare function fdaGranted(deps?: HostAccessDeps): FdaVerdict;
+/**
+ * `existsSync` for a rendezvous path. It already swallows errno, but it is
+ * wrapped anyway so no future refactor can turn a denial into a throw, and so
+ * every rendezvous touch reads the same at the call site.
+ */
+export declare function rendezvousExists(path: string): boolean;
+/**
+ * Read the reader's access token. Returns null instead of throwing when the
+ * read fails (ENOENT before the first install; EPERM if something outside our
+ * flows re-permissioned the file).
+ */
+export declare function readRendezvousToken(path: string): string | null;