waterplane 0.0.1 → 0.1.11

package/node_modules/@waterplane/shared/dist/artifacts.js

@@ -0,0 +1,295 @@
+/**
+ * What a build leaves behind, and what it is called.
+ *
+ * Every rule here exists because of the same measured failure, seen across nine
+ * repos on this desktop at once: a build button runs `./gradlew assembleDebug`,
+ * the deliverable is `app-debug.apk` in `build/outputs/…`, and that is what the
+ * phone is offered. Three things are wrong with it and none of them are visible
+ * on the phone:
+ *
+ *  - **The name says nothing.** Three repos here produce a file called exactly
+ *    `app-debug.apk`. The download list, the install log and the outbox all
+ *    show one word that identifies neither the app nor the build.
+ *  - **Nothing is ever removed.** 6.8 GB of transport files across fourteen
+ *    repos was the measurement that produced the sweep; a build that appends a
+ *    130 MB APK per tap is where most of it came from.
+ *  - **The same bytes arrive twice.** A script that copies its output somewhere
+ *    friendlier leaves the original in place, both are detected, both are
+ *    queued, and the phone spends 454 MB fetching one 227 MB APK.
+ *
+ * The answer is host-side and not per-repo: nine repos cannot each be taught
+ * this, and the tenth is written by an agent that has never read the other
+ * nine. So a build's outputs are COLLECTED into `.claude/outbox/` under a name
+ * that carries a version, older builds of the same artifact are pruned, and
+ * duplicates are folded — by default, for every build, in every repo, unless
+ * this project's policy says otherwise.
+ *
+ * This module is the rules half: pure, node-tested, and shared so the phone can
+ * word the switches with the same vocabulary the host acts on. The disk half is
+ * `host/artifacts.ts`.
+ */
+/**
+ * On, on, and three.
+ *
+ * Both switches default ON because the failure they fix is invisible: nobody
+ * reports a file called `app-debug.apk` or a 130 MB copy nobody removed, they
+ * just live with them. `keep: 3` is the smallest number that still answers
+ * "does the previous build work?" — the question an unnamed APK made
+ * unanswerable in the first place.
+ */
+export const DEFAULT_ARTIFACT_POLICY = { collect: true, prune: true, keep: 3 };
+/** Hard ceiling on `keep`: past this the switch is not "tidy up" any more. */
+export const MAX_ARTIFACT_KEEP = 50;
+/** Sanitize a persisted/phone-supplied policy — this file is hand-editable and
+ *  an agent writes the one beside it. An unreadable field falls back to the
+ *  DEFAULT rather than to `false`: a policy nobody can parse must not silently
+ *  turn the feature off. */
+export function cleanArtifactPolicy(v) {
+    const raw = (v && typeof v === "object" ? v : {});
+    const keep = Number(raw.keep);
+    return {
+        collect: raw.collect === undefined ? DEFAULT_ARTIFACT_POLICY.collect : !!raw.collect,
+        prune: raw.prune === undefined ? DEFAULT_ARTIFACT_POLICY.prune : !!raw.prune,
+        keep: Number.isFinite(keep) && keep >= 1 ? Math.min(Math.round(keep), MAX_ARTIFACT_KEEP) : DEFAULT_ARTIFACT_POLICY.keep,
+    };
+}
+/** One line for a phone: what this repo will do with the next build's output. */
+export function artifactPolicyText(p) {
+    if (!p.collect)
+        return "builds are offered exactly where they land, under whatever name they have";
+    return p.prune
+        ? `collected into .claude/outbox with a versioned name · the newest ${p.keep} of each kept`
+        : "collected into .claude/outbox with a versioned name · nothing is ever removed";
+}
+// ── Which artifact IS this ───────────────────────────────────────────────────
+/**
+ * Is this name token the VARIABLE part of an artifact name — the bit that
+ * changes every time the same thing is produced again?
+ *
+ *  - all-digits (build number, epoch, `20260828`, a date component);
+ *  - a hex run of 6+ that contains a digit (a commit/content hash). The digit is
+ *    required so ordinary words that happen to be hex-only ("facade", "decade")
+ *    stay STABLE — folding those out would merge unrelated artifacts;
+ *  - a version (`v2`, `1.4.0` arrives pre-split as `1`, `4`, `0`).
+ *
+ * It only ever sees a token `NAME_SEP` produced, which is why that separator
+ * set is part of this rule rather than a detail of it.
+ */
+export function isVariableToken(tok) {
+    if (/^\d+$/.test(tok))
+        return true;
+    if (/^v\d+$/i.test(tok))
+        return true;
+    return /^(?=.*\d)[0-9a-f]{6,}$/i.test(tok);
+}
+/**
+ * The separators an artifact name is built from.
+ *
+ * `+` and `~` are SEPARATORS, not letters. They are how the two commonest
+ * machine-written version strings attach a build to a release —
+ * `picture-app-1.1.0+343.apk` (semver build metadata, which is what Flutter,
+ * pub and Gradle's `versionName+versionCode` produce) and `app-1.1.0~rc1.apk`
+ * (the Debian spelling). Splitting on `[-_. ]` alone left the last version
+ * digit fused to the build number as one token, `0+343`, which is neither all
+ * digits nor hex and therefore read as a STABLE WORD: every build of that app
+ * was its own family, nothing ever superseded anything, and the phone fetched
+ * 130 MB again per build and kept the previous one queued beside it. The
+ * artifacts whose names carry a version are exactly the ones these rules exist
+ * for, so a separator they do not know about defeats them precisely where it
+ * matters most.
+ */
+export const NAME_SEP = /[-_. +~]+/;
+/**
+ * The supersede key: "which artifact IS this", independent of which BUILD of it.
+ *
+ * `tiptoi-debug-0f98c1ab.apk` and `tiptoi-debug-39a2f7e1.apk` are the same thing
+ * twice — queueing both means the phone spends 46 MB of a roaming link to end up
+ * with one file it wants and one it doesn't. `app-debug.apk` and
+ * `app-release.apk` are NOT the same thing, so only the tokens that actually
+ * vary are folded out; every stable word is kept, which is what stops a rule
+ * this aggressive from eating a sibling artifact.
+ *
+ * The directory and extension are part of the key for the same reason. When
+ * EVERY token is variable (`1000074170.jpg`) there is no name left to compare,
+ * so the key falls back to the exact path: a regeneration at the same path still
+ * supersedes (that is the common build-overwrites-its-output case), and two
+ * differently-named photos never do.
+ *
+ * Lives here rather than beside the download queue that first needed it,
+ * because the prune below asks the SAME question — "is this an older build of
+ * the thing I just made?" — and two answers to it would mean the phone
+ * de-duplicating one way while the desktop deletes another.
+ */
+export function familyKey(relPath) {
+    const path = relPath.replace(/\\/g, "/");
+    const slash = path.lastIndexOf("/");
+    const dir = slash >= 0 ? path.slice(0, slash + 1) : "";
+    const base = path.slice(slash + 1);
+    const dot = base.lastIndexOf(".");
+    const ext = dot > 0 ? base.slice(dot).toLowerCase() : "";
+    // `_2` is what files.ts appends to keep a name unique — the same artifact, not
+    // another one.
+    const stem = (dot > 0 ? base.slice(0, dot) : base).replace(/_\d+$/, "");
+    const stable = stem.split(NAME_SEP).filter((t) => t && !isVariableToken(t));
+    if (!stable.length)
+        return `${dir}${base.toLowerCase()}`;
+    return `${dir}${stable.join("-").toLowerCase()}${ext}`;
+}
+// ── What a collected artifact is called ──────────────────────────────────────
+/** Does this stem already say WHICH build it is? A name with a variable token
+ *  in it has a version, a date or a hash in it already, and renaming it would
+ *  only make it longer and less like what the build printed. */
+export function hasVersionToken(stem) {
+    return stem.split(NAME_SEP).some((t) => t && isVariableToken(t));
+}
+/** `MMDD-HHMM` in local time — the fallback identifier when a repo has neither a
+ *  version nor a git sha to offer. Local, not UTC: it is read beside a build row
+ *  that is already showing a local clock. */
+export function stampOf(when) {
+    const p = (n) => String(n).padStart(2, "0");
+    return `${p(when.getMonth() + 1)}${p(when.getDate())}-${p(when.getHours())}${p(when.getMinutes())}`;
+}
+/** Only what a filename may hold, with the separators this module splits on
+ *  preserved. Anything else becomes a `-`, and runs collapse. */
+function slug(s) {
+    return s.replace(/[^A-Za-z0-9.+~_-]+/g, "-").replace(/-{2,}/g, "-").replace(/^[-.]+|[-.]+$/g, "");
+}
+/**
+ * The name a collected artifact gets.
+ *
+ * Three rules, in this order:
+ *
+ *  1. **A name that already says which build it is, is kept.** Flutter's
+ *     `picture-app-debug-v1.1.0-344.apk` and a timestamped
+ *     `fp-functions-bundle-20260922-1042.tgz` are better than anything this
+ *     function would invent, and renaming them would break the link between
+ *     what the build printed and what arrived on the phone.
+ *  2. **The repo's name leads.** `app-debug.apk` exists in three repos here;
+ *     the download list is one list.
+ *  3. **Then the variant, then the version.** `app` and the repo's own name are
+ *     dropped from the variant — `picture-app` + `app-debug` reads
+ *     `picture-app-debug`, not `picture-app-app-debug`. The version is the
+ *     project's if one could be read, else the git sha, else the date; a repo
+ *     that can offer both gets both, because a version answers "which release"
+ *     and a sha answers "which code".
+ */
+export function artifactName(n) {
+    const ext = n.ext.toLowerCase();
+    const stem = slug(n.stem);
+    if (hasVersionToken(stem)) {
+        // Rule 1. The repo name is still prefixed when the stem does not carry it,
+        // because "which app" is the half a version can never supply.
+        const repo = slug(n.repoName);
+        const has = stem.toLowerCase().startsWith(repo.toLowerCase());
+        return `${has ? stem : `${repo}-${stem}`}${ext}`;
+    }
+    const repoTokens = new Set(slug(n.repoName).split(NAME_SEP).filter(Boolean).map((t) => t.toLowerCase()));
+    const variant = stem.split(NAME_SEP)
+        .filter(Boolean)
+        .filter((t) => !repoTokens.has(t.toLowerCase()))
+        // `app` is what a build system calls the module, never what a person calls
+        // the app. `output`/`bundle` the same.
+        .filter((t) => !["app", "output", "outputs"].includes(t.toLowerCase()));
+    const version = n.version ? slug(n.version) : "";
+    const sha = n.sha ? slug(n.sha) : "";
+    const parts = [slug(n.repoName), ...variant, version, sha].filter(Boolean);
+    // Neither a version nor a sha ⇒ the clock is the only identifier there is,
+    // and a name with no identifier at all is the bug this function exists for.
+    if (!version && !sha)
+        parts.push(stampOf(n.when));
+    return `${parts.join("-")}${ext}`;
+}
+/** Is this path inside the transport dir a person's phone reads? */
+export function inOutbox(relPath) {
+    return /^\.?(claude\/)?outbox\//.test(relPath.replace(/\\/g, "/"));
+}
+/**
+ * Of two names for the same bytes, which one survives.
+ *
+ * Higher wins: already in the outbox (a script put it where a person looks),
+ * then a name that says which build it is, then the longer name — `app-debug`
+ * against `picture-app-debug-v1.1.0-344`, the second is the one somebody chose.
+ */
+function nameScore(c) {
+    const base = c.relPath.split("/").pop() ?? c.relPath;
+    const dot = base.lastIndexOf(".");
+    const stem = dot > 0 ? base.slice(0, dot) : base;
+    return (inOutbox(c.relPath) ? 100 : 0) + (hasVersionToken(stem) ? 10 : 0) + Math.min(stem.length / 100, 0.99);
+}
+/**
+ * Fold a run's outputs down to the DISTINCT artifacts among them.
+ *
+ * One `flutter build apk` plus a script that copies the result to a friendlier
+ * name is two detected files, 227 MB each, the same bytes — and the phone,
+ * which fetches one download at a time, spends 454 MB on it. Identity is size
+ * AND the caller's fingerprint, never size alone: two ABI splits of one app are
+ * within bytes of each other and folding them would silently drop a release.
+ *
+ * Returns the survivors in the input's order, plus what each of them absorbed,
+ * so the build log can SAY it rather than a file quietly not appearing.
+ */
+export function foldDuplicates(files) {
+    const groups = new Map();
+    const singles = [];
+    for (const f of files) {
+        if (!f.fingerprint) {
+            singles.push(f);
+            continue;
+        }
+        const key = `${f.size}:${f.fingerprint}`;
+        const g = groups.get(key);
+        if (g)
+            g.push(f);
+        else
+            groups.set(key, [f]);
+    }
+    const winners = new Set();
+    const folded = [];
+    for (const g of groups.values()) {
+        const best = g.reduce((a, b) => (nameScore(b) > nameScore(a) ? b : a));
+        winners.add(best);
+        if (g.length > 1)
+            folded.push({ kept: best, dropped: g.filter((f) => f !== best) });
+    }
+    for (const s of singles)
+        winners.add(s);
+    return { kept: files.filter((f) => winners.has(f)), folded };
+}
+/**
+ * Which older builds a finished run makes removable.
+ *
+ * Deliberately narrow, and narrower than the sweep: only files whose
+ * `familyKey` matches something this run just produced, only the ones older
+ * than the newest `keep` of that family, and never the artifacts of the run
+ * itself. A build cleans up after ITSELF — it never touches a family it did not
+ * just rebuild, which is what keeps "delete files automatically" from being the
+ * thing that removes the one APK you were about to install.
+ *
+ * `protect` is the run's own output (paths, not families): equal mtimes are
+ * routine when a build writes two files in one second, and an artifact this run
+ * produced must never be a victim of the same run's prune.
+ */
+export function pruneVictims(files, produced, keep, protect = produced) {
+    const families = new Set(produced.map(familyKey));
+    const safe = new Set(protect);
+    const byFamily = new Map();
+    for (const f of files) {
+        const k = familyKey(f.relPath);
+        if (!families.has(k))
+            continue;
+        const g = byFamily.get(k);
+        if (g)
+            g.push(f);
+        else
+            byFamily.set(k, [f]);
+    }
+    const out = [];
+    for (const g of byFamily.values()) {
+        g.sort((a, b) => b.mtime - a.mtime);
+        for (const f of g.slice(Math.max(1, keep)))
+            if (!safe.has(f.relPath))
+                out.push(f);
+    }
+    return out;
+}
+//# sourceMappingURL=artifacts.js.map

package/node_modules/@waterplane/shared/dist/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAkBH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAE/F,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC;;;4BAG4B;AAC5B,MAAM,UAAU,mBAAmB,CAAC,CAAU;IAC5C,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO;QACpF,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK;QAC5E,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI;KACxH,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,CAAiB;IAClD,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,2EAA2E,CAAC;IACnG,OAAO,CAAC,CAAC,KAAK;QACZ,CAAC,CAAC,oEAAoE,CAAC,CAAC,IAAI,eAAe;QAC3F,CAAC,CAAC,+EAA+E,CAAC;AACtF,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,+EAA+E;IAC/E,eAAe;IACf,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;IACzD,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,EAAE,CAAC;AACzD,CAAC;AAED,gFAAgF;AAEhF;;gEAEgE;AAChE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;6CAE6C;AAC7C,MAAM,UAAU,OAAO,CAAC,IAAU;IAChC,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;AACtG,CAAC;AAoBD;iEACiE;AACjE,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;AACpG,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,YAAY,CAAC,CAAiB;IAC5C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,2EAA2E;QAC3E,8DAA8D;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9D,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACzG,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;SACjC,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAChD,2EAA2E;QAC3E,uCAAuC;SACtC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;AACpC,CAAC;AAeD,oEAAoE;AACpE,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,OAAO,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,CAAgB;IACjC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC;AAChH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAA0B,KAAU;IAChE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAe,CAAC;IACtC,MAAM,OAAO,GAAQ,EAAE,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAClD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAK,CAAC;IAC7B,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;AAC/D,CAAC;AAUD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,KAAuB,EAAE,QAAkB,EAAE,IAAY,EAAE,UAAoB,QAAQ;IAClH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/node_modules/@waterplane/shared/dist/askrules.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Ask rules — the irreversible-action tap (docs/plans/agent-authority.md §2).
+ *
+ * One desktop-wide list of Claude Code permission-rule strings (`Bash(git push * main)`),
+ * each with an optional per-repo "off here". The host injects the list into every
+ * CLAUDE launch as `permissions.ask` in the `--settings` blob it already passes; the CLI
+ * itself then draws a box naming the exact command, and `answergate.isBlocked` keeps tool
+ * boxes person-only. Nothing here applies anything: the suggested list is OFFERED, never
+ * switched on, and a change reaches only sessions launched after it.
+ *
+ * Honest reach: it stops the accident, not the adversary — a wrapper script, an alias or a
+ * subprocess running the same command is not seen by the rule.
+ */
+export interface AskRule {
+    /** Stable id the phone toggles by. */
+    id: string;
+    /** A Claude Code permission rule: `Tool(spec)` or a bare tool name. */
+    rule: string;
+    /** Repo REALPATHS where this rule is switched off. Absent/empty ⇒ on everywhere. */
+    offIn?: string[];
+}
+export interface AskRulesDoc {
+    rules: AskRule[];
+}
+/** `GET /api/askrules` and a successful `PUT`'s answer. */
+export interface AskRulesReply {
+    ok: true;
+    doc: AskRulesDoc;
+    /** Offered as one tap; never applied by the host. */
+    suggested: readonly string[];
+    /** Backend ids whose sessions take these rules; every other backend runs without them. */
+    honouredBy: readonly string[];
+    /** PUT only: how many sent rows were dropped as not a permission rule, a repeat or past the cap. */
+    dropped?: number;
+    /**
+     * Set when the list on disk could not be read at boot, so the host started with NO rules:
+     * where the unreadable bytes went (null when they could not be moved aside) and why. An
+     * empty list must not read as "nothing was ever asked for" — every launch since boot ran
+     * without the rules the person set. Cleared by the next save that lands.
+     */
+    lost?: {
+        movedTo: string | null;
+        error: string;
+    };
+    /**
+     * A short hash of the stored list this reply describes. A PUT names it back, so a phone
+     * holding an older copy (a second phone saved in between) is refused rather than
+     * overwriting a list it never saw.
+     */
+    rev: string;
+    /**
+     * The one-shot confirm a PUT must carry (`confirmgate.ts` (b)), bound to `rev`. A
+     * successful PUT answers with a fresh one, so the phone can save again without a re-read.
+     * Absent where the host keeps no rules it can change (the demo).
+     */
+    confirm?: string;
+}
+/** The PUT body: the whole next list, plus the `rev` and `confirm` of the reply it was edited from. */
+export interface AskRulesPut {
+    rules: AskRule[];
+    rev: string;
+    confirm: string;
+}
+/** The host's refusal when the list changed since the phone read it — nothing was written. */
+export declare const ASK_RULES_STALE = "the ask rules changed elsewhere \u2014 reopen to see them; nothing was changed";
+export declare const ASK_RULES_MAX = 64;
+export declare const ASK_RULE_MAX_CHARS = 200;
+/**
+ * The suggested list, verbatim from the plan, spelled as permission rules. `*` matches
+ * anywhere in the command (measured: `Bash(echo wpauth * main)` matched
+ * `echo wpauth origin main` and a compound `cd /tmp && echo wpauth origin main`).
+ */
+export declare const SUGGESTED_ASK_RULES: readonly string[];
+/**
+ * The backends whose sessions take `permissions.ask` — the claude CLI under its three
+ * launch shapes. Another backend, a shell, anything else: no such rule, and the phone says so
+ * rather than implying cover.
+ */
+export declare const ASK_RULE_BACKENDS: readonly string[];
+/** Does a session on this backend (absent ⇒ claude) take ask rules? */
+export declare function askRulesHonoured(backendId?: string | null): boolean;
+/** A permission-rule string as typed, trimmed; `null` when it does not look like one. */
+export declare function cleanAskRule(raw: unknown): string | null;
+/** A stable id derived from the rule's words (FNV-1a), for a row that came without one. */
+export declare function askRuleId(rule: string): string;
+/** A repo path with its trailing slashes off (`/` stays `/`). */
+export declare function trimPathSlash(p: string): string;
+/**
+ * Strict: an entry whose rule does not look like a permission rule is DROPPED, never
+ * repaired; a repeated rule or id keeps its first row; past `ASK_RULES_MAX` the rest go.
+ * A bare string is accepted as a rule with a derived id.
+ */
+export declare function cleanAskRules(raw: unknown): AskRulesDoc;
+/** The rule strings that apply to a launch in this repo (by its realpath). */
+export declare function askRulesFor(doc: AskRulesDoc, repoRealpath: string): string[];

package/node_modules/@waterplane/shared/dist/askrules.js

@@ -0,0 +1,133 @@
+/**
+ * Ask rules — the irreversible-action tap (docs/plans/agent-authority.md §2).
+ *
+ * One desktop-wide list of Claude Code permission-rule strings (`Bash(git push * main)`),
+ * each with an optional per-repo "off here". The host injects the list into every
+ * CLAUDE launch as `permissions.ask` in the `--settings` blob it already passes; the CLI
+ * itself then draws a box naming the exact command, and `answergate.isBlocked` keeps tool
+ * boxes person-only. Nothing here applies anything: the suggested list is OFFERED, never
+ * switched on, and a change reaches only sessions launched after it.
+ *
+ * Honest reach: it stops the accident, not the adversary — a wrapper script, an alias or a
+ * subprocess running the same command is not seen by the rule.
+ */
+/** The host's refusal when the list changed since the phone read it — nothing was written. */
+export const ASK_RULES_STALE = "the ask rules changed elsewhere — reopen to see them; nothing was changed";
+export const ASK_RULES_MAX = 64;
+export const ASK_RULE_MAX_CHARS = 200;
+const OFF_IN_MAX = 256;
+const PATH_MAX_CHARS = 4096;
+/**
+ * The suggested list, verbatim from the plan, spelled as permission rules. `*` matches
+ * anywhere in the command (measured: `Bash(echo wpauth * main)` matched
+ * `echo wpauth origin main` and a compound `cd /tmp && echo wpauth origin main`).
+ */
+export const SUGGESTED_ASK_RULES = [
+    "Bash(git push --force*)",
+    "Bash(git push -f*)",
+    "Bash(git push * --force*)",
+    "Bash(git push * -f*)",
+    "Bash(git push * main)",
+    "Bash(git push * main *)",
+    "Bash(git push * master)",
+    "Bash(git push * master *)",
+    "Bash(gcloud run deploy *)",
+    "Bash(gcloud app deploy *)",
+    "Bash(vercel --prod*)",
+    "Bash(vercel * --prod*)",
+    "Bash(fly deploy*)",
+    "Bash(gh release create*)",
+    "Bash(gh pr merge*)",
+    "Bash(npm publish*)",
+    "Bash(terraform apply*)",
+    "Bash(kubectl apply*)",
+];
+/**
+ * The backends whose sessions take `permissions.ask` — the claude CLI under its three
+ * launch shapes. Another backend, a shell, anything else: no such rule, and the phone says so
+ * rather than implying cover.
+ */
+export const ASK_RULE_BACKENDS = ["claude", "claude-local", "claude-endpoint"];
+/** Does a session on this backend (absent ⇒ claude) take ask rules? */
+export function askRulesHonoured(backendId) {
+    return !backendId || ASK_RULE_BACKENDS.includes(backendId);
+}
+const CONTROL_RE = /[\u0000-\u001f\u007f]/;
+const RULE_RE = /^[A-Za-z][A-Za-z0-9_-]*(?:\(.+\))?$/;
+const ID_RE = /^[A-Za-z0-9_-]{1,64}$/;
+/** A permission-rule string as typed, trimmed; `null` when it does not look like one. */
+export function cleanAskRule(raw) {
+    if (typeof raw !== "string")
+        return null;
+    const s = raw.trim();
+    if (!s || s.length > ASK_RULE_MAX_CHARS || CONTROL_RE.test(s))
+        return null;
+    if (!RULE_RE.test(s))
+        return null;
+    return s;
+}
+/** A stable id derived from the rule's words (FNV-1a), for a row that came without one. */
+export function askRuleId(rule) {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < rule.length; i++) {
+        h ^= rule.charCodeAt(i);
+        h = Math.imul(h, 0x01000193) >>> 0;
+    }
+    return `r${h.toString(36)}`;
+}
+/** A repo path with its trailing slashes off (`/` stays `/`). */
+export function trimPathSlash(p) {
+    const t = p.replace(/\/+$/, "");
+    return t || "/";
+}
+function cleanOffIn(raw) {
+    if (!Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const raw1 of raw) {
+        if (typeof raw1 !== "string" || !raw1.startsWith("/") || raw1.length > PATH_MAX_CHARS || CONTROL_RE.test(raw1))
+            continue;
+        const p = trimPathSlash(raw1);
+        if (!out.includes(p))
+            out.push(p);
+        if (out.length >= OFF_IN_MAX)
+            break;
+    }
+    return out;
+}
+/**
+ * Strict: an entry whose rule does not look like a permission rule is DROPPED, never
+ * repaired; a repeated rule or id keeps its first row; past `ASK_RULES_MAX` the rest go.
+ * A bare string is accepted as a rule with a derived id.
+ */
+export function cleanAskRules(raw) {
+    const list = Array.isArray(raw) ? raw : raw && typeof raw === "object" ? raw.rules : null;
+    const rules = [];
+    if (!Array.isArray(list))
+        return { rules };
+    const seenRule = new Set();
+    const seenId = new Set();
+    for (const e of list) {
+        if (rules.length >= ASK_RULES_MAX)
+            break;
+        const obj = typeof e === "string" ? { rule: e } : e && typeof e === "object" ? e : null;
+        if (!obj)
+            continue;
+        const rule = cleanAskRule(obj.rule);
+        if (!rule || seenRule.has(rule))
+            continue;
+        const id = typeof obj.id === "string" && ID_RE.test(obj.id) ? obj.id : askRuleId(rule);
+        if (seenId.has(id))
+            continue;
+        seenRule.add(rule);
+        seenId.add(id);
+        const offIn = cleanOffIn(obj.offIn);
+        rules.push(offIn.length ? { id, rule, offIn } : { id, rule });
+    }
+    return { rules };
+}
+/** The rule strings that apply to a launch in this repo (by its realpath). */
+export function askRulesFor(doc, repoRealpath) {
+    return doc.rules.filter((r) => !r.offIn?.includes(repoRealpath)).map((r) => r.rule);
+}
+//# sourceMappingURL=askrules.js.map

package/node_modules/@waterplane/shared/dist/askrules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"askrules.js","sourceRoot":"","sources":["../src/askrules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAqDH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,eAAe,GAAG,2EAA2E,CAAC;AAE3G,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,yBAAyB;IACzB,oBAAoB;IACpB,2BAA2B;IAC3B,sBAAsB;IACtB,uBAAuB;IACvB,yBAAyB;IACzB,yBAAyB;IACzB,2BAA2B;IAC3B,2BAA2B;IAC3B,2BAA2B;IAC3B,sBAAsB;IACtB,wBAAwB;IACxB,mBAAmB;IACnB,0BAA0B;IAC1B,oBAAoB;IACpB,oBAAoB;IACpB,wBAAwB;IACxB,sBAAsB;CACvB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,QAAQ,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;AAElG,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,SAAyB;IACxD,OAAO,CAAC,SAAS,IAAI,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAC3C,MAAM,OAAO,GAAG,qCAAqC,CAAC;AACtD,MAAM,KAAK,GAAG,uBAAuB,CAAC;AAEtC,yFAAyF;AACzF,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,kBAAkB,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AAC9B,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChC,OAAO,CAAC,IAAI,GAAG,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACzH,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG,CAAC,MAAM,IAAI,UAAU;YAAE,MAAM;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACnH,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,MAAM,IAAI,aAAa;YAAE,MAAM;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,IAAI,CAAC;QACrH,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1C,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvF,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC7B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACf,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,GAAgB,EAAE,YAAoB;IAChE,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACtF,CAAC"}