trail-code 0.0.0-stage → 0.28.0-semantic.3

package/dist/util/front-matter.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Front matter, YAML only.
+ *
+ * gray-matter picks its parser from the opening fence: `---js` or
+ * `---javascript` front matter is run through `eval`. Every file read here
+ * comes from a repo — a learning committed by a teammate or sitting on their
+ * pushed branch, a skill, a graft/ card — so a file that opened with `---js`
+ * would run its code on whoever reads it. Here those fences parse as empty
+ * front matter instead: nothing runs, and the file reads as having none (a
+ * learning without a title, a card without a slug), which every caller
+ * already skips.
+ *
+ * YAML anchors and aliases are refused the same way. An alias is a reference,
+ * so a few hundred bytes of nested ones (`b: &b [*a,*a,*a,...]`, nine deep)
+ * parse at once and then become hundreds of millions of strings the moment
+ * anything reads the value as text: seconds and gigabytes per read, then a
+ * crash. Nothing trail writes has one (`stringify` writes with `noRefs`), so a
+ * file that does reads as having no front matter, with `refused` saying why.
+ * So does a list or a map under a key the caller names in `scalars`, where
+ * one value belongs.
+ */
+import grayMatter from "gray-matter";
+export type FrontMatterFile = grayMatter.GrayMatterFile<string> & {
+    /** Why the front matter wasn't read, when it wasn't. `data` is then `{}`. */
+    refused?: string;
+};
+export interface FrontMatterOptions {
+    /** Keys that hold one value each (text, a number, true/false, a date), when present. */
+    scalars?: readonly string[];
+}
+/** gray-matter's parse with YAML only, no anchors or aliases, and its `stringify`, which writes YAML. */
+export declare const matter: ((text: string, opts?: FrontMatterOptions) => FrontMatterFile) & {
+    stringify: (content: string, data: object) => string;
+};
+/**
+ * The strings in `value` that fit on one line in at most `maxChars`, the
+ * first `max` of them. Anything else in the list is dropped; a value that
+ * isn't a list gives none.
+ */
+export declare function textList(value: unknown, max: number, maxChars: number): string[];
+/**
+ * Say once per process, on stderr, that `what` was skipped and why: one bad
+ * file costs only itself, and whoever runs the command can find it.
+ */
+export declare function warnSkipped(what: string, place: string, why: string): void;
+//# sourceMappingURL=front-matter.d.ts.map

package/dist/util/front-matter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"front-matter.d.ts","sourceRoot":"","sources":["../../src/util/front-matter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,UAAU,MAAM,aAAa,CAAC;AAErC,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG;IAChE,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,wFAAwF;IACxF,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAgDD,yGAAyG;AACzG,eAAO,MAAM,MAAM,UACV,MAAM,SAAQ,kBAAkB,KAAQ,eAAe;yBAYvC,MAAM,QAAQ,MAAM,KAAG,MAAM;CAErD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAQhF;AAID;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAS1E"}

package/dist/util/front-matter.js

@@ -0,0 +1,113 @@
+/**
+ * Front matter, YAML only.
+ *
+ * gray-matter picks its parser from the opening fence: `---js` or
+ * `---javascript` front matter is run through `eval`. Every file read here
+ * comes from a repo — a learning committed by a teammate or sitting on their
+ * pushed branch, a skill, a graft/ card — so a file that opened with `---js`
+ * would run its code on whoever reads it. Here those fences parse as empty
+ * front matter instead: nothing runs, and the file reads as having none (a
+ * learning without a title, a card without a slug), which every caller
+ * already skips.
+ *
+ * YAML anchors and aliases are refused the same way. An alias is a reference,
+ * so a few hundred bytes of nested ones (`b: &b [*a,*a,*a,...]`, nine deep)
+ * parse at once and then become hundreds of millions of strings the moment
+ * anything reads the value as text: seconds and gigabytes per read, then a
+ * crash. Nothing trail writes has one (`stringify` writes with `noRefs`), so a
+ * file that does reads as having no front matter, with `refused` saying why.
+ * So does a list or a map under a key the caller names in `scalars`, where
+ * one value belongs.
+ */
+import grayMatter from "gray-matter";
+const nothing = () => ({});
+// gray-matter looks an engine up by the fence's own spelling, then by its alias.
+const CODE_ENGINES = { js: nothing, javascript: nothing, coffee: nothing, coffeescript: nothing, cson: nothing };
+const NO_REFS = "YAML anchors and aliases aren't read";
+/** Thrown from inside the YAML reader to stop it at the first anchor or alias. */
+class Refused extends Error {
+}
+/** A stand-in for js-yaml's table of anchors: naming an anchor, or looking one up for an alias, stops the read. */
+const NO_ANCHORS = {
+    set: () => { throw new Refused(NO_REFS); },
+    defineProperty: () => { throw new Refused(NO_REFS); },
+    getOwnPropertyDescriptor: () => { throw new Refused(NO_REFS); },
+    has: () => { throw new Refused(NO_REFS); },
+};
+const guarded = new WeakSet();
+/**
+ * js-yaml calls this as it opens and closes each node; gray-matter hands its
+ * options on to it. Each document gets a fresh anchor table, swapped for one
+ * that refuses on the document's first node, before any anchor can be read.
+ */
+function listener(event, state) {
+    if (event === "open" && state.anchorMap && !guarded.has(state.anchorMap)) {
+        state.anchorMap = new Proxy({}, NO_ANCHORS);
+        guarded.add(state.anchorMap);
+    }
+    // Should js-yaml ever keep anchors somewhere else: a node closing with one still stops the read.
+    if (event === "close" && state.anchor)
+        throw new Refused(NO_REFS);
+}
+const READ = { engines: CODE_ENGINES, listener };
+const UNREAD = { engines: { ...CODE_ENGINES, yaml: nothing, json: nothing } };
+// `noRefs` reaches js-yaml's dump through gray-matter: an object used twice is written out twice, never as an alias.
+const WRITE = { language: "yaml", noRefs: true };
+function isScalar(v) {
+    return v === undefined || v === null || ["string", "number", "boolean"].includes(typeof v) || v instanceof Date;
+}
+/** The file with its front matter left unread: the body as usual, `data` empty, and why. */
+function refuse(text, why) {
+    return Object.assign(grayMatter(text, UNREAD), { data: {}, refused: why });
+}
+/** gray-matter's parse with YAML only, no anchors or aliases, and its `stringify`, which writes YAML. */
+export const matter = Object.assign((text, opts = {}) => {
+    let file;
+    try {
+        file = grayMatter(text, READ);
+    }
+    catch (e) {
+        if (e instanceof Refused)
+            return refuse(text, e.message);
+        throw e;
+    }
+    const listed = opts.scalars?.find((k) => !isScalar(file.data[k]));
+    return listed ? refuse(text, `${listed} holds a list or a map where one value belongs`) : file;
+}, {
+    stringify: (content, data) => grayMatter.stringify(content, data, WRITE),
+});
+/**
+ * The strings in `value` that fit on one line in at most `maxChars`, the
+ * first `max` of them. Anything else in the list is dropped; a value that
+ * isn't a list gives none.
+ */
+export function textList(value, max, maxChars) {
+    if (!Array.isArray(value))
+        return [];
+    const out = [];
+    for (const v of value) {
+        if (out.length >= max)
+            break;
+        if (typeof v === "string" && v && v.length <= maxChars && !/[\u0000-\u001f\u007f-\u009f\u2028\u2029]/.test(v))
+            out.push(v);
+    }
+    return out;
+}
+const warned = new Set();
+/**
+ * Say once per process, on stderr, that `what` was skipped and why: one bad
+ * file costs only itself, and whoever runs the command can find it.
+ */
+export function warnSkipped(what, place, why) {
+    const key = `${what}\u0000${place}`;
+    if (warned.has(key))
+        return;
+    warned.add(key);
+    try {
+        process.stderr.write(`⚠ skipped ${what} in ${JSON.stringify(place)}: ${why.replace(/\s+/g, " ").slice(0, 200)}\n`);
+    }
+    catch {
+        /* nowhere to say it */
+    }
+}
+//# sourceMappingURL=front-matter.js.map

package/dist/util/front-matter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"front-matter.js","sourceRoot":"","sources":["../../src/util/front-matter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,UAAU,MAAM,aAAa,CAAC;AAYrC,MAAM,OAAO,GAAG,GAAW,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AACnC,iFAAiF;AACjF,MAAM,YAAY,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAEjH,MAAM,OAAO,GAAG,sCAAsC,CAAC;AAEvD,kFAAkF;AAClF,MAAM,OAAQ,SAAQ,KAAK;CAAG;AAE9B,mHAAmH;AACnH,MAAM,UAAU,GAAyB;IACvC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1C,cAAc,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACrD,wBAAwB,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/D,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CAC3C,CAAC;AACF,MAAM,OAAO,GAAG,IAAI,OAAO,EAAU,CAAC;AAEtC;;;;GAIG;AACH,SAAS,QAAQ,CAAC,KAAa,EAAE,KAAqD;IACpF,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,KAAK,CAAC,SAAS,GAAG,IAAI,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IACD,iGAAiG;IACjG,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AACjD,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;AAC9E,qHAAqH;AACrH,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAEjD,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC;AAClH,CAAC;AAED,4FAA4F;AAC5F,SAAS,MAAM,CAAC,IAAY,EAAE,GAAW;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CACjC,CAAC,IAAY,EAAE,OAA2B,EAAE,EAAmB,EAAE;IAC/D,IAAI,IAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,MAAM,gDAAgD,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjG,CAAC,EACD;IACE,SAAS,EAAE,CAAC,OAAe,EAAE,IAAY,EAAU,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC;CACjG,CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc,EAAE,GAAW,EAAE,QAAgB;IACpE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM;QAC7B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,IAAI,CAAC,0CAA0C,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;AAEjC;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;IAClE,MAAM,GAAG,GAAG,GAAG,IAAI,SAAS,KAAK,EAAE,CAAC;IACpC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACrH,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;AACH,CAAC"}

package/dist/util/id.d.ts

@@ -0,0 +1,7 @@
+/** Generate a random unique id with a short type prefix, e.g. "node_ab12…". */
+export declare function newId(prefix: string): string;
+/** Stable content hash (sha256, hex) used for document dedup. */
+export declare function contentHash(input: string): string;
+/** Normalize a name/alias for case- and whitespace-insensitive matching. */
+export declare function normalizeName(name: string): string;
+//# sourceMappingURL=id.d.ts.map

package/dist/util/id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../../src/util/id.ts"],"names":[],"mappings":"AAEA,+EAA+E;AAC/E,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED,iEAAiE;AACjE,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD"}

package/dist/util/id.js

@@ -0,0 +1,14 @@
+import { randomUUID, createHash } from "node:crypto";
+/** Generate a random unique id with a short type prefix, e.g. "node_ab12…". */
+export function newId(prefix) {
+    return `${prefix}_${randomUUID().replace(/-/g, "").slice(0, 20)}`;
+}
+/** Stable content hash (sha256, hex) used for document dedup. */
+export function contentHash(input) {
+    return createHash("sha256").update(input).digest("hex");
+}
+/** Normalize a name/alias for case- and whitespace-insensitive matching. */
+export function normalizeName(name) {
+    return name.trim().toLowerCase().replace(/\s+/g, " ");
+}
+//# sourceMappingURL=id.js.map

package/dist/util/id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.js","sourceRoot":"","sources":["../../src/util/id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,+EAA+E;AAC/E,MAAM,UAAU,KAAK,CAAC,MAAc;IAClC,OAAO,GAAG,MAAM,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC"}

package/dist/util/paths.d.ts

@@ -0,0 +1,29 @@
+/** Platform separators → `/`. Identity on posix. */
+export declare function toPosixPath(p: string): string;
+/**
+ * `relative(from, to)`, normalized to posix — the canonical form of every path
+ * graft stores. Use this rather than bare `relative` for anything that lands in
+ * the graph, a cache key, or a manifest. Bare `relative` is still right for
+ * text shown in the terminal, where a native separator is what the platform's
+ * users expect.
+ */
+export declare function relPosix(from: string, to: string): string;
+/**
+ * Trailing `/` off a repo-relative path, in linear time.
+ *
+ * The obvious `replace(/\/+$/, "")` is a polynomial-ReDoS shape — `\/+$` can begin
+ * matching at any point inside a run of slashes, so a path ending in many slashes
+ * and then anything else costs O(n²). CodeQL flags it (`js/polynomial-redos`), and
+ * rightly: these inputs are a `--dir` or `--in` value rather than anything
+ * attacker-controlled, but the ambiguity buys nothing and a loop is both faster
+ * and plainer.
+ */
+export declare function stripTrailingSlashes(path: string): string;
+/**
+ * Normalize a user-supplied path prefix (`--in`) so it can be compared against
+ * a stored `node.path`: posix separators, no leading `./`, no trailing
+ * separator. Windows users type — and their shell's tab-completion produces —
+ * `--in server\src\gpu`, so both separators have to reduce to the same prefix.
+ */
+export declare function normalizePathPrefix(p: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/util/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/util/paths.ts"],"names":[],"mappings":"AA2BA,oDAAoD;AACpD,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIzD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAMrD"}

package/dist/util/paths.js

@@ -0,0 +1,71 @@
+/**
+ * Repo-relative paths, always posix.
+ *
+ * Every path graft stores — node ids, `node.path`, extract-cache keys, the
+ * freshness fingerprint, the card manifest — is repo-relative and separated by
+ * `/` on every platform. That is not cosmetic: the query layer parses these
+ * strings with `/` as the separator, and does it by hand rather than through
+ * `node:path`. `pathUnderPrefix` (`--in` scoping) tests
+ * `startsWith(`${prefix}/`)`, `map`'s `dirKey` splits on `/` to cluster by
+ * directory, `resolveSymbol` matches a filename query with
+ * `endsWith("/" + query)`. Hand any of them a `src\gate.ts` and none of them
+ * error — they match nothing, silently. On Windows that made every `--in`
+ * report "nothing indexed under …" and made `map` emit one single-file
+ * "directory" per file.
+ *
+ * So normalize once, here, where a path is *created*, instead of defensively at
+ * each consumer — a consumer that forgets is a silent wrong answer, and there
+ * are more consumers than producers.
+ *
+ * {@link toPosixPath} splits on the platform `sep`, never a literal `\`: a
+ * posix filename may legitimately contain a backslash, and splitting on `"\\"`
+ * would corrupt it. That also makes this module provably the identity function
+ * on posix, which is what guarantees an existing Mac/Linux graph is byte-identical
+ * across this change.
+ */
+import { relative, sep } from "node:path";
+/** Platform separators → `/`. Identity on posix. */
+export function toPosixPath(p) {
+    return sep === "/" ? p : p.split(sep).join("/");
+}
+/**
+ * `relative(from, to)`, normalized to posix — the canonical form of every path
+ * graft stores. Use this rather than bare `relative` for anything that lands in
+ * the graph, a cache key, or a manifest. Bare `relative` is still right for
+ * text shown in the terminal, where a native separator is what the platform's
+ * users expect.
+ */
+export function relPosix(from, to) {
+    return toPosixPath(relative(from, to));
+}
+/**
+ * Trailing `/` off a repo-relative path, in linear time.
+ *
+ * The obvious `replace(/\/+$/, "")` is a polynomial-ReDoS shape — `\/+$` can begin
+ * matching at any point inside a run of slashes, so a path ending in many slashes
+ * and then anything else costs O(n²). CodeQL flags it (`js/polynomial-redos`), and
+ * rightly: these inputs are a `--dir` or `--in` value rather than anything
+ * attacker-controlled, but the ambiguity buys nothing and a loop is both faster
+ * and plainer.
+ */
+export function stripTrailingSlashes(path) {
+    let end = path.length;
+    while (end > 0 && path[end - 1] === "/")
+        end--;
+    return path.slice(0, end);
+}
+/**
+ * Normalize a user-supplied path prefix (`--in`) so it can be compared against
+ * a stored `node.path`: posix separators, no leading `./`, no trailing
+ * separator. Windows users type — and their shell's tab-completion produces —
+ * `--in server\src\gpu`, so both separators have to reduce to the same prefix.
+ */
+export function normalizePathPrefix(p) {
+    let out = toPosixPath(p);
+    while (out.startsWith("./"))
+        out = out.slice(2);
+    // Trailing separators only; a bare "/" normalizes to "" (match everything),
+    // which is exactly how `pathUnderPrefix` reads an empty prefix.
+    return stripTrailingSlashes(out);
+}
+//# sourceMappingURL=paths.js.map

package/dist/util/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/util/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE1C,oDAAoD;AACpD,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,EAAU;IAC/C,OAAO,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,GAAG,EAAE,CAAC;IAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAS;IAC3C,IAAI,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChD,4EAA4E;IAC5E,gEAAgE;IAChE,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC"}

package/dist/util/private-file.d.ts

@@ -0,0 +1,14 @@
+export declare const PRIVATE_FILE_MODE = 384;
+export declare const PRIVATE_DIR_MODE = 448;
+/**
+ * Make `dir` if it's missing and leave it owner-only. Throws like `mkdirSync`; a folder that isn't ours is left
+ * as it is. A link is left alone too: a chmod would follow it and tighten what it points to, which may be a folder
+ * that isn't Trail's. The mode is set through a descriptor that refuses a link, so one swapped in after the check
+ * isn't followed either (as trace/state.ts ensurePrivateDir).
+ */
+export declare function ensurePrivateDir(dir: string): void;
+/** Append `text` to `path`, owner-only, folder included. Throws like `appendFileSync`. */
+export declare function appendPrivateFile(path: string, text: string): void;
+/** Replace `path` with `text`, owner-only, folder included. Throws like `writeFileSync`. */
+export declare function writePrivateFile(path: string, text: string): void;
+//# sourceMappingURL=private-file.d.ts.map

package/dist/util/private-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-file.d.ts","sourceRoot":"","sources":["../../src/util/private-file.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,iBAAiB,MAAQ,CAAC;AACvC,eAAO,MAAM,gBAAgB,MAAQ,CAAC;AAOtC;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAwBlD;AAiBD,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAElE;AAED,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAEjE"}

package/dist/util/private-file.js

@@ -0,0 +1,82 @@
+/**
+ * Files only their owner can read: what Trail keeps for upload (the workspace
+ * outbox, the usage-stats queue) and the workspace connection.
+ *
+ * A mode given when a file is created does nothing to a file an older version
+ * already made, and a folder made by `mkdirSync` without one is world-readable,
+ * so both are set again on every write. One `chmod` each is all that costs.
+ * Windows has no owner-only mode bits (the profile folder's ACL guards it), so
+ * nothing is changed there.
+ */
+import { chmodSync, closeSync, constants, fchmodSync, lstatSync, mkdirSync, openSync, writeSync } from "node:fs";
+import { dirname } from "node:path";
+export const PRIVATE_FILE_MODE = 0o600;
+export const PRIVATE_DIR_MODE = 0o700;
+const POSIX = process.platform !== "win32";
+/** Opens a folder, and refuses a link (ELOOP) where the platform has O_NOFOLLOW. */
+const DIR_NOFOLLOW = constants.O_RDONLY | (constants.O_DIRECTORY ?? 0) | (constants.O_NOFOLLOW ?? 0);
+/**
+ * Make `dir` if it's missing and leave it owner-only. Throws like `mkdirSync`; a folder that isn't ours is left
+ * as it is. A link is left alone too: a chmod would follow it and tighten what it points to, which may be a folder
+ * that isn't Trail's. The mode is set through a descriptor that refuses a link, so one swapped in after the check
+ * isn't followed either (as trace/state.ts ensurePrivateDir).
+ */
+export function ensurePrivateDir(dir) {
+    try {
+        if (lstatSync(dir).isSymbolicLink())
+            return;
+    }
+    catch {
+        /* missing: made below */
+    }
+    mkdirSync(dir, { recursive: true, mode: PRIVATE_DIR_MODE });
+    if (!POSIX || constants.O_NOFOLLOW === undefined)
+        return;
+    try {
+        const fd = openSync(dir, DIR_NOFOLLOW);
+        try {
+            fchmodSync(fd, PRIVATE_DIR_MODE);
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+    catch (e) {
+        // A folder its owner can't read can't be opened, but can still be tightened.
+        if (e.code !== "EACCES")
+            return;
+        try {
+            if (!lstatSync(dir).isSymbolicLink())
+                chmodSync(dir, PRIVATE_DIR_MODE);
+        }
+        catch {
+            /* not ours to change: the file itself is still owner-only */
+        }
+    }
+}
+/** Write `text` to `path` through one descriptor that is owner-only before anything is written. */
+function writePrivate(path, text, flags) {
+    ensurePrivateDir(dirname(path));
+    const fd = openSync(path, flags, PRIVATE_FILE_MODE);
+    try {
+        if (POSIX)
+            fchmodSync(fd, PRIVATE_FILE_MODE);
+        // One write on an O_APPEND descriptor, as appendFileSync makes, so lines from two
+        // processes don't interleave; the loop only matters if the disk takes part of it.
+        const buf = Buffer.from(text, "utf8");
+        for (let off = 0; off < buf.length;)
+            off += writeSync(fd, buf, off, buf.length - off);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Append `text` to `path`, owner-only, folder included. Throws like `appendFileSync`. */
+export function appendPrivateFile(path, text) {
+    writePrivate(path, text, "a");
+}
+/** Replace `path` with `text`, owner-only, folder included. Throws like `writeFileSync`. */
+export function writePrivateFile(path, text) {
+    writePrivate(path, text, "w");
+}
+//# sourceMappingURL=private-file.js.map

package/dist/util/private-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-file.js","sourceRoot":"","sources":["../../src/util/private-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACjH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AACvC,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAEtC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE3C,oFAAoF;AACpF,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AAErG;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE;YAAE,OAAO;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,UAAU,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,6EAA6E;QAC7E,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC3D,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE;gBAAE,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;IACH,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,KAAgB;IAChE,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,IAAI,KAAK;YAAE,UAAU,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAC7C,kFAAkF;QAClF,kFAAkF;QAClF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC,MAAM;YAAI,GAAG,IAAI,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IACzF,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAY;IAC1D,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAY;IACzD,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC"}

package/dist/util/source.d.ts

@@ -0,0 +1,4 @@
+/** Read source text, decoding Windows tooling's common UTF-16LE output. UTF-16BE
+ * is rare and unsupported by Node's built-in decoders, so callers silently skip it. */
+export declare function readSourceFile(path: string): string | null;
+//# sourceMappingURL=source.d.ts.map

package/dist/util/source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../src/util/source.ts"],"names":[],"mappings":"AAEA;uFACuF;AACvF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK1D"}

package/dist/util/source.js

@@ -0,0 +1,12 @@
+import { readFileSync } from "node:fs";
+/** Read source text, decoding Windows tooling's common UTF-16LE output. UTF-16BE
+ * is rare and unsupported by Node's built-in decoders, so callers silently skip it. */
+export function readSourceFile(path) {
+    const bytes = readFileSync(path);
+    if (bytes[0] === 0xfe && bytes[1] === 0xff)
+        return null;
+    if (bytes[0] === 0xff && bytes[1] === 0xfe)
+        return bytes.subarray(2).toString("utf16le");
+    return bytes.toString("utf8");
+}
+//# sourceMappingURL=source.js.map

package/dist/util/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../../src/util/source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC;uFACuF;AACvF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC"}

package/dist/util/spinner.d.ts

@@ -0,0 +1,15 @@
+export interface Spinner {
+    /** Change the text after the frame. */
+    update(text: string): void;
+    /** Print a finished line above the spinner, which keeps spinning below it. */
+    print(line: string): void;
+    /** Erase the line and stop. Safe to call more than once. */
+    stop(): void;
+    readonly active: boolean;
+}
+export declare function startSpinner(text: string, opts?: {
+    stream?: NodeJS.WriteStream;
+    enabled?: boolean;
+    intervalMs?: number;
+}): Spinner;
+//# sourceMappingURL=spinner.d.ts.map

package/dist/util/spinner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spinner.d.ts","sourceRoot":"","sources":["../../src/util/spinner.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,OAAO;IACtB,uCAAuC;IACvC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,8EAA8E;IAC9E,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,4DAA4D;IAC5D,IAAI,IAAI,IAAI,CAAC;IACb,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACjF,OAAO,CAwCT"}

package/dist/util/spinner.js

@@ -0,0 +1,52 @@
+/**
+ * One line that redraws in place while something runs, and is erased when it
+ * stops — so nothing interactive is left in the scrollback.
+ *
+ * Only on a TTY. Anywhere else every method is a no-op, and the caller prints
+ * whatever finished lines it wants a log to keep.
+ */
+const FRAMES = ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"];
+export function startSpinner(text, opts = {}) {
+    const out = opts.stream ?? process.stderr;
+    const enabled = opts.enabled ?? Boolean(out.isTTY);
+    if (!enabled) {
+        return { update() { }, print: (line) => out.write(`${line}\n`), stop() { }, active: false };
+    }
+    let current = text;
+    let frame = 0;
+    let stopped = false;
+    const width = () => Math.max(20, (out.columns || 100) - 1);
+    const draw = () => {
+        if (stopped)
+            return;
+        const line = `${FRAMES[frame % FRAMES.length]} ${current}`;
+        out.write(`\r\x1b[2K${line.length > width() ? line.slice(0, width()) : line}`);
+        frame++;
+    };
+    const clear = () => out.write("\r\x1b[2K");
+    draw();
+    const timer = setInterval(draw, opts.intervalMs ?? 80);
+    timer.unref?.();
+    return {
+        get active() {
+            return !stopped;
+        },
+        update(next) {
+            current = next;
+            draw();
+        },
+        print(line) {
+            clear();
+            out.write(`${line}\n`);
+            draw();
+        },
+        stop() {
+            if (stopped)
+                return;
+            stopped = true;
+            clearInterval(timer);
+            clear();
+        },
+    };
+}
+//# sourceMappingURL=spinner.js.map

package/dist/util/spinner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spinner.js","sourceRoot":"","sources":["../../src/util/spinner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAYlE,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,OAAgF,EAAE;IAElF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,KAAI,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,IAAI,KAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,OAAO;YAAE,OAAO;QACpB,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QAC3D,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,KAAK,EAAE,CAAC;IACV,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,EAAE,CAAC;IACP,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IACvD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,OAAO;QACL,IAAI,MAAM;YACR,OAAO,CAAC,OAAO,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,IAAY;YACjB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,EAAE,CAAC;QACT,CAAC;QACD,KAAK,CAAC,IAAY;YAChB,KAAK,EAAE,CAAC;YACR,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;YACvB,IAAI,EAAE,CAAC;QACT,CAAC;QACD,IAAI;YACF,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,KAAK,EAAE,CAAC;QACV,CAAC;KACF,CAAC;AACJ,CAAC"}