wicked-crew 0.9.13 → 0.10.0

package/dist/mcp-inspect/session.js

@@ -0,0 +1,487 @@
+/**
+ * The MCP inspector bridge's sessions (DES-MCP-INSPECTOR-001 §3).
+ *
+ * One session = one live transport to one MCP server, opened on the operator's explicit start and
+ * driven by studio's host for an `mcp-server` editor plugin. The SDK's transports are used WITHOUT
+ * the SDK `Client`, so every JSON-RPC message in both directions is seen and logged raw.
+ *
+ *  - The bridge owns the handshake: `initialize` (no client capabilities) then
+ *    `notifications/initialized`. A server request (sampling, elicitation, roots, anything) is
+ *    answered `-32601` and logged.
+ *  - Only {@link INSPECT_METHODS} may be sent.
+ *  - The log is a ring (1000 entries, 4 MB); each entry's text is capped at 64 KB.
+ *  - Secrets: every value the bridge injected (the registry secret, each typed env/header value) is
+ *    scrubbed from every entry and every reply, and credential-shaped strings are replaced. Field-name
+ *    redaction is NOT applied: it would blank the `session`/`token`-named fields being debugged.
+ *  - Lifetime: at most {@link MAX_SESSIONS}; idle (no rpc, no poll) for {@link IDLE_MS} = closed;
+ *    `closeAll` on the daemon's close; `killAllSync` on process exit (a stdio child gets SIGKILL).
+ */
+import { randomBytes } from 'node:crypto';
+import { basename } from 'node:path';
+import { redactString } from '../mcp/redact.js';
+import { scrubSecrets, SECRET_REDACTION } from '../mcp/secrets.js';
+/** The methods a plugin may send. The bridge itself owns `initialize`. */
+export const INSPECT_METHODS = new Set([
+    'tools/list',
+    'tools/call',
+    'resources/list',
+    'resources/templates/list',
+    'resources/read',
+    'prompts/list',
+    'prompts/get',
+    'completion/complete',
+    'logging/setLevel',
+    'ping',
+]);
+export const MAX_SESSIONS = 4;
+export const IDLE_MS = 10 * 60_000;
+export const INIT_TIMEOUT_MS = 15_000;
+export const CALL_TIMEOUT_MS = 60_000;
+export const LOG_MAX_ENTRIES = 1000;
+export const LOG_MAX_BYTES = 4 * 1024 * 1024;
+export const ENTRY_MAX_CHARS = 64 * 1024;
+export const REPLY_MAX_CHARS = 1024 * 1024;
+export const POLL_MAX_MS = 20_000;
+const CLIENT_INFO = { name: 'wicked-mcp-inspector', version: '1' };
+const PROTOCOL_VERSION = '2025-06-18';
+export class InspectError extends Error {
+    status;
+    code;
+    constructor(status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+    }
+}
+/**
+ * Every form a secret can take in what the bridge emits: the value itself and its JSON-escaped body
+ * (a quote, backslash or newline in a secret changes its serialized form; codex r1).
+ */
+export function secretForms(secrets) {
+    const out = new Set();
+    for (const v of secrets) {
+        if (v.length === 0)
+            continue;
+        out.add(v);
+        out.add(JSON.stringify(v).slice(1, -1));
+    }
+    return [...out].sort((a, b) => b.length - a.length);
+}
+/** Scrub exact secrets (every form), then credential shapes, from any JSON value or string. */
+export function scrub(value, forms) {
+    const exact = scrubSecrets(value, forms);
+    const walk = (v) => {
+        if (typeof v === 'string')
+            return redactString(v);
+        if (Array.isArray(v))
+            return v.map(walk);
+        if (v !== null && typeof v === 'object') {
+            const out = {};
+            for (const [k, inner] of Object.entries(v))
+                out[k] = walk(inner);
+            return out;
+        }
+        return v;
+    };
+    return walk(exact);
+}
+function cap(text, max) {
+    return text.length <= max ? { text, truncated: false } : { text: text.slice(0, max), truncated: true };
+}
+/** At most this many timed-out requests keep their send time (for a late answer's round trip). */
+const SENT_AT_MAX = 256;
+/** A stderr line longer than this is logged without waiting for its newline. */
+const STDERR_LINE_MAX = 8 * 1024;
+/** An upstream DELETE of a streamable-HTTP session gets this long. */
+const TERMINATE_MS = 2_000;
+/** Longer than SDK 1.31's stdio close (2 s for EOF, then 2 s after SIGTERM, then SIGKILL; codex r2). */
+const CLOSE_MS = 5_000;
+/**
+ * How many trailing characters of `text` could be the start of a secret form: the longest tail
+ * that is a proper prefix of one (codex r2). Bounded by the longest form, so a buffer holding it
+ * back never grows past that.
+ */
+export function heldTail(text, forms) {
+    let held = 0;
+    for (const f of forms) {
+        for (let k = Math.min(f.length - 1, text.length); k > held; k--) {
+            if (text.charCodeAt(text.length - k) === f.charCodeAt(0) && text.endsWith(f.slice(0, k))) {
+                held = k;
+                break;
+            }
+        }
+    }
+    return held;
+}
+export class InspectSession {
+    rawTarget;
+    opened;
+    now;
+    callTimeoutMs;
+    id = randomBytes(12).toString('hex');
+    startedAt;
+    state = 'connecting';
+    error = null;
+    initialize = null;
+    lastSeen;
+    seq = 0;
+    log = [];
+    bytes = 0;
+    nextId = 1;
+    pending = new Map();
+    /** When each request went out, so a response that lands after its timeout still shows its time. */
+    sentAt = new Map();
+    waiters = new Set();
+    forms;
+    /** Stderr not yet logged: at most a tail that could begin a secret (whole secrets are scrubbed in it first). */
+    stderrBuf = '';
+    closing = null;
+    /**
+     * The stdio child's pid, held from start until the child is known gone: the SDK forgets its
+     * process the moment close() begins, so `opened.pid()` cannot be asked then (codex r2).
+     */
+    childPid = null;
+    constructor(rawTarget, opened, secrets, now = Date.now, callTimeoutMs = CALL_TIMEOUT_MS) {
+        this.rawTarget = rawTarget;
+        this.opened = opened;
+        this.now = now;
+        this.callTimeoutMs = callTimeoutMs;
+        this.forms = secretForms(secrets);
+        this.startedAt = new Date(now()).toISOString();
+        this.lastSeen = now();
+    }
+    /** The target as anyone outside may see it: a secret the operator also typed into an argument is scrubbed (codex r1). */
+    get target() {
+        return scrub(this.rawTarget, this.forms);
+    }
+    /** Scrub a message meant for a reply, an error or a daemon log line. */
+    scrubText(text) {
+        return scrub(text, this.forms);
+    }
+    view() {
+        return { id: this.id, target: this.target, state: this.state, initialize: this.initialize, error: this.error, startedAt: this.startedAt, lastSeq: this.seq };
+    }
+    touch() {
+        this.lastSeen = this.now();
+    }
+    /**
+     * Connect and run the handshake, all of it (transport start, `initialize`, `initialized`) under
+     * ONE deadline (codex r1: a legacy SSE endpoint that never sends its `endpoint` event hung the
+     * start). Never throws: a failure is the session's `failed` state.
+     */
+    async start(initTimeoutMs = INIT_TIMEOUT_MS) {
+        const { transport, stderr } = this.opened;
+        stderr?.on('data', (chunk) => this.stderrData(typeof chunk === 'string' ? chunk : chunk.toString('utf8')));
+        // The pipe's end is the only point where a held tail is final (codex r2 verify: a SIGKILL does
+        // not drain the pipe, so a flush after the kill could still split a secret).
+        stderr?.once('end', () => this.flushStderr());
+        transport.onmessage = (m) => this.received(m);
+        transport.onerror = (e) => this.append({ dir: 'host', kind: 'state', error: true, text: `transport error: ${e.message}` });
+        transport.onclose = () => {
+            this.closed('the connection closed');
+            this.childPid = null;
+        };
+        let timer;
+        const deadline = new Promise((_, reject) => {
+            timer = setTimeout(() => reject(new Error(`no answer to the handshake in ${Math.round(initTimeoutMs / 1000)} s`)), initTimeoutMs);
+        });
+        const handshake = (async () => {
+            await transport.start();
+            this.childPid = this.opened.pid();
+            this.append({ dir: 'host', kind: 'state', text: 'connected' });
+            const init = await this.request('initialize', { protocolVersion: PROTOCOL_VERSION, capabilities: {}, clientInfo: CLIENT_INFO }, initTimeoutMs);
+            if (init.response.error !== undefined)
+                throw new Error(`initialize failed: ${init.response.error.message}`);
+            const r = (init.response.result ?? {});
+            const info = r['serverInfo'];
+            this.initialize = {
+                protocolVersion: typeof r['protocolVersion'] === 'string' ? r['protocolVersion'] : null,
+                serverInfo: info !== null && typeof info === 'object' ? info : null,
+                capabilities: r['capabilities'] !== null && typeof r['capabilities'] === 'object' ? r['capabilities'] : {},
+                instructions: typeof r['instructions'] === 'string' ? r['instructions'] : null,
+            };
+            const setter = transport.setProtocolVersion;
+            if (typeof setter === 'function' && this.initialize.protocolVersion !== null)
+                setter.call(transport, this.initialize.protocolVersion);
+            await this.send({ jsonrpc: '2.0', method: 'notifications/initialized' });
+        })();
+        try {
+            await Promise.race([handshake, deadline]);
+            if (this.state === 'connecting') {
+                this.state = 'ready';
+                this.append({ dir: 'host', kind: 'state', text: 'ready' });
+            }
+        }
+        catch (err) {
+            handshake.catch(() => undefined);
+            this.fail(err instanceof Error ? err.message : String(err));
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    /** Send one allowed request and wait for its answer. */
+    async rpc(method, params) {
+        this.touch();
+        if (!INSPECT_METHODS.has(method))
+            throw new InspectError(400, 'method_not_allowed', `${method} is not a method the inspector sends`);
+        if (this.state !== 'ready')
+            throw new InspectError(409, 'not_connected', `the session is ${this.state}`);
+        return this.request(method, params, this.callTimeoutMs);
+    }
+    request(method, params, timeoutMs) {
+        const id = this.nextId++;
+        const msg = { jsonrpc: '2.0', id, method, ...(params !== undefined ? { params } : {}) };
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(id);
+                // Kept (bounded) so a late answer still shows its round trip in the log.
+                while (this.sentAt.size > SENT_AT_MAX)
+                    this.sentAt.delete(this.sentAt.keys().next().value);
+                reject(new InspectError(504, 'timeout', `${method}: no answer in ${Math.round(timeoutMs / 1000)} s (it may still answer; watch the log)`));
+            }, timeoutMs);
+            this.pending.set(id, { method, resolve, reject, timer });
+            this.sentAt.set(id, this.now());
+            this.send(msg).catch((err) => {
+                clearTimeout(timer);
+                this.pending.delete(id);
+                this.sentAt.delete(id);
+                // An SDK error can carry the upstream's response body, which can echo a secret (codex r1).
+                reject(new InspectError(502, 'send_failed', this.scrubText(`could not send ${method}: ${err instanceof Error ? err.message : String(err)}`)));
+            });
+        });
+    }
+    async send(msg) {
+        const id = msg['id'];
+        const method = msg['method'];
+        const kind = method === undefined ? 'response' : id === undefined ? 'notification' : 'request';
+        this.append({ dir: 'out', kind, ...(method !== undefined ? { method } : {}), ...(id !== undefined ? { rpcId: id } : {}) }, msg);
+        await this.opened.transport.send(msg);
+    }
+    received(msg) {
+        const id = msg['id'];
+        const method = typeof msg['method'] === 'string' ? msg['method'] : undefined;
+        if (method === undefined && id !== undefined) {
+            const sentAt = this.sentAt.get(id);
+            this.sentAt.delete(id);
+            const ms = sentAt === undefined ? undefined : this.now() - sentAt;
+            const isError = msg['error'] !== undefined;
+            const entry = this.append({ dir: 'in', kind: 'response', rpcId: id, ...(ms !== undefined ? { ms } : {}), ...(isError ? { error: true } : {}) }, msg);
+            const p = this.pending.get(id);
+            if (p !== undefined) {
+                this.pending.delete(id);
+                clearTimeout(p.timer);
+                const scrubbed = scrub(isError ? { error: msg['error'] } : { result: msg['result'] }, this.forms);
+                const raw = JSON.stringify(scrubbed);
+                const truncated = raw.length > REPLY_MAX_CHARS;
+                p.resolve({ response: truncated ? { result: { truncated: true, text: raw.slice(0, REPLY_MAX_CHARS) } } : scrubbed, ms: ms ?? 0, truncated: truncated || entry.truncated === true });
+            }
+            return;
+        }
+        if (method !== undefined && id !== undefined) {
+            // A server request: the inspector declares no client capabilities, so it serves none.
+            this.append({ dir: 'in', kind: 'request', method, rpcId: id }, msg);
+            void this.send({ jsonrpc: '2.0', id, error: { code: -32601, message: `the MCP inspector does not serve ${method}` } }).catch(() => undefined);
+            return;
+        }
+        this.append({ dir: 'in', kind: 'notification', ...(method !== undefined ? { method } : {}) }, msg);
+    }
+    /**
+     * Stderr as it arrives (codex r1/r2), by whole line: whole secrets are scrubbed in the buffer
+     * first, so none can straddle what is logged; a tail that could begin a secret is never logged;
+     * and only complete lines go out (a partial one waits for its newline, up to 8 KiB), so the
+     * credential-shape patterns see a line whole however the server's writes were chunked.
+     */
+    stderrData(text) {
+        const buf = scrubSecrets(this.stderrBuf + text, this.forms);
+        let end = buf.length - heldTail(buf, this.forms);
+        const nl = end > 0 ? buf.lastIndexOf('\n', end - 1) : -1;
+        if (nl !== -1)
+            end = nl + 1;
+        else if (end <= STDERR_LINE_MAX)
+            end = 0;
+        this.stderrBuf = buf.slice(end);
+        if (end > 0)
+            this.append({ dir: 'in', kind: 'stderr', text: buf.slice(0, end) });
+    }
+    /**
+     * The pipe ended: a partial last line is logged, and a held tail (a secret's start that never
+     * became a whole secret) is redacted, never logged.
+     */
+    flushStderr() {
+        if (this.stderrBuf === '')
+            return;
+        const buf = this.stderrBuf;
+        const keep = heldTail(buf, this.forms);
+        this.stderrBuf = '';
+        this.append({ dir: 'in', kind: 'stderr', text: buf.slice(0, buf.length - keep) + (keep > 0 ? SECRET_REDACTION : '') });
+    }
+    /**
+     * One log entry. A JSON-RPC message is scrubbed as a VALUE, then serialized (codex r1: scrubbing
+     * the serialized text missed escaped secrets), and so are `method` and `rpcId`.
+     */
+    append(e, message) {
+        const clean = scrub({ ...e, ...(message !== undefined ? { text: JSON.stringify(scrub(message, this.forms)) } : {}) }, this.forms);
+        const { text, truncated } = cap(clean.text ?? '', ENTRY_MAX_CHARS);
+        this.seq += 1;
+        const entry = { ...clean, seq: this.seq, at: new Date(this.now()).toISOString(), text, ...(truncated ? { truncated: true } : {}) };
+        this.log.push(entry);
+        this.bytes += text.length;
+        while (this.log.length > LOG_MAX_ENTRIES || (this.bytes > LOG_MAX_BYTES && this.log.length > 1)) {
+            const gone = this.log.shift();
+            this.bytes -= gone.text.length;
+        }
+        for (const w of [...this.waiters])
+            w();
+        return entry;
+    }
+    /** Entries after `after`, at once if any, else when one lands or `waitMs` passes. */
+    async entries(after, waitMs) {
+        this.touch();
+        if (this.seq <= after && waitMs > 0 && this.state !== 'closed' && this.state !== 'failed') {
+            await new Promise((resolve) => {
+                const done = () => {
+                    clearTimeout(timer);
+                    this.waiters.delete(done);
+                    resolve();
+                };
+                const timer = setTimeout(done, Math.min(waitMs, POLL_MAX_MS));
+                this.waiters.add(done);
+            });
+            this.touch();
+        }
+        const entries = this.log.filter((x) => x.seq > after);
+        return { entries, next: this.seq, first: this.log[0]?.seq ?? this.seq + 1, state: this.state, error: this.error };
+    }
+    fail(message) {
+        if (this.state === 'closed' || this.state === 'failed')
+            return;
+        const msg = this.scrubText(message);
+        this.state = 'failed';
+        this.error = msg;
+        this.append({ dir: 'host', kind: 'state', error: true, text: `failed: ${msg}` });
+        void this.close('failed');
+    }
+    closed(reason) {
+        if (this.state === 'closed' || this.state === 'failed')
+            return;
+        const pid = this.childPid;
+        this.state = this.state === 'connecting' ? 'failed' : 'closed';
+        if (this.state === 'failed')
+            this.error = reason;
+        this.append({ dir: 'host', kind: 'state', text: `${reason}${pid !== null ? ` (pid ${pid})` : ''}` });
+        this.rejectPending(reason);
+    }
+    rejectPending(reason) {
+        for (const [id, p] of this.pending) {
+            clearTimeout(p.timer);
+            p.reject(new InspectError(409, 'not_connected', `${p.method}: ${reason}`));
+            this.pending.delete(id);
+        }
+        this.sentAt.clear();
+        for (const w of [...this.waiters])
+            w();
+    }
+    /**
+     * Close it. A streamable-HTTP session is terminated upstream first (its DELETE, codex r1), then the
+     * transport is closed (a stdio child is terminated by the SDK). Bounded and idempotent.
+     */
+    close(reason = 'closed by the operator') {
+        if (this.state !== 'failed')
+            this.closed(reason);
+        else
+            this.rejectPending(reason);
+        this.closing ??= (async () => {
+            const t = this.opened.transport;
+            const bounded = (p, ms) => Promise.race([p.catch(() => undefined), new Promise((r) => setTimeout(r, ms).unref())]);
+            if (typeof t.terminateSession === 'function' && t.sessionId !== undefined)
+                await bounded(t.terminateSession(), TERMINATE_MS);
+            await bounded(t.close(), CLOSE_MS);
+            // The SDK's close ends in SIGKILL; a child that outlived even that is killed here, by the pid
+            // held since start (codex r2).
+            this.killSync();
+            this.childPid = null;
+        })();
+        return this.closing;
+    }
+    /** Process exit: no awaiting, so a stdio child is killed outright. */
+    killSync() {
+        const pid = this.childPid;
+        if (pid === null)
+            return;
+        try {
+            process.kill(pid, 'SIGKILL');
+        }
+        catch {
+            /* already gone */
+        }
+    }
+}
+/** A short, path-free name for a stdio command (`node build/index.js` → `index.js`). */
+export function commandName(command, args) {
+    const script = args.find((a) => !a.startsWith('-'));
+    return (basename(script ?? command) || command).slice(0, 60);
+}
+export class InspectSessions {
+    now;
+    sessions = new Map();
+    /** Sessions removed but still closing, with their close: killable at exit, awaited by closeAll (codex r2). */
+    closingSessions = new Map();
+    sweeper = null;
+    constructor(now = Date.now) {
+        this.now = now;
+    }
+    get size() {
+        return this.sessions.size;
+    }
+    add(s) {
+        if (this.sessions.size >= MAX_SESSIONS)
+            throw new InspectError(429, 'too_many_sessions', `at most ${MAX_SESSIONS} inspector sessions at once; disconnect one first`);
+        this.sessions.set(s.id, s);
+        if (this.sweeper === null) {
+            this.sweeper = setInterval(() => void this.sweep(), 30_000);
+            this.sweeper.unref();
+        }
+    }
+    /** Reserve a slot before the (slow) connect, so concurrent starts cannot exceed the cap. */
+    hasRoom() {
+        return this.sessions.size < MAX_SESSIONS;
+    }
+    get(id) {
+        return this.sessions.get(id) ?? null;
+    }
+    async remove(id, reason) {
+        const s = this.sessions.get(id);
+        if (s === undefined)
+            return false;
+        this.sessions.delete(id);
+        // Still killable at process exit while its close runs (codex r2).
+        const closing = s.close(reason);
+        this.closingSessions.set(s, closing);
+        try {
+            await closing;
+        }
+        finally {
+            this.closingSessions.delete(s);
+        }
+        return true;
+    }
+    async sweep() {
+        const t = this.now();
+        for (const s of [...this.sessions.values()]) {
+            if (t - s.lastSeen > IDLE_MS)
+                await this.remove(s.id, 'closed after 10 minutes idle');
+        }
+    }
+    async closeAll() {
+        if (this.sweeper !== null)
+            clearInterval(this.sweeper);
+        this.sweeper = null;
+        await Promise.all([...[...this.sessions.keys()].map((id) => this.remove(id, 'the daemon is stopping')), ...this.closingSessions.values()]);
+    }
+    killAllSync() {
+        for (const s of [...this.sessions.values(), ...this.closingSessions.keys()])
+            s.killSync();
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/mcp-inspect/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/mcp-inspect/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAcrC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEnE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IAC1D,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,0BAA0B;IAC1B,gBAAgB;IAChB,cAAc;IACd,aAAa;IACb,qBAAqB;IACrB,kBAAkB;IAClB,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC;AACnC,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC;AAClC,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACnE,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAEtC,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B;IACA;IAFX,YACW,MAAc,EACd,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;IAIvB,CAAC;CACF;AAWD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAA0B;IACpD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC7B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACX,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,KAAK,CAAI,KAAQ,EAAE,KAAwB;IACzD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,CAAU,EAAW,EAAE;QACnC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5F,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,KAAK,CAAM,CAAC;AAC1B,CAAC;AAED,SAAS,GAAG,CAAC,IAAY,EAAE,GAAW;IACpC,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACzG,CAAC;AAWD,kGAAkG;AAClG,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,gFAAgF;AAChF,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,CAAC;AACjC,sEAAsE;AACtE,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,wGAAwG;AACxG,MAAM,QAAQ,GAAG,KAAK,CAAC;AAEvB;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAwB;IAC7D,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAChE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzF,IAAI,GAAG,CAAC,CAAC;gBACT,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,cAAc;IA0BN;IACA;IAEA;IACA;IA7BV,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrC,SAAS,CAAS;IAC3B,KAAK,GAAoB,YAAY,CAAC;IACtC,KAAK,GAAkB,IAAI,CAAC;IAC5B,UAAU,GAAgC,IAAI,CAAC;IAC/C,QAAQ,CAAS;IACT,GAAG,GAAG,CAAC,CAAC;IACR,GAAG,GAAyB,EAAE,CAAC;IAC/B,KAAK,GAAG,CAAC,CAAC;IACV,MAAM,GAAG,CAAC,CAAC;IACX,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IACtD,mGAAmG;IAC3F,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC5C,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;IACvB,KAAK,CAAW;IACjC,gHAAgH;IACxG,SAAS,GAAG,EAAE,CAAC;IACf,OAAO,GAAyB,IAAI,CAAC;IAC7C;;;OAGG;IACK,QAAQ,GAAkB,IAAI,CAAC;IAEvC,YACmB,SAA4B,EAC5B,MAAuB,EACxC,OAA0B,EACT,MAAoB,IAAI,CAAC,GAAG,EAC5B,gBAAwB,eAAe;QAJvC,cAAS,GAAT,SAAS,CAAmB;QAC5B,WAAM,GAAN,MAAM,CAAiB;QAEvB,QAAG,GAAH,GAAG,CAAyB;QAC5B,kBAAa,GAAb,aAAa,CAA0B;QAExD,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC;IACxB,CAAC;IAED,yHAAyH;IACzH,IAAI,MAAM;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,wEAAwE;IACxE,SAAS,CAAC,IAAY;QACpB,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,IAAI;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/J,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,aAAa,GAAG,eAAe;QACzC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1C,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5H,+FAA+F;QAC/F,6EAA6E;QAC7E,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9C,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAmB,CAAC,CAAC;QAChE,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3H,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;YACvB,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;YACrC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC;QACF,IAAI,KAAiC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAChD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QACpI,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,CAAC,KAAK,IAAmB,EAAE;YAC3C,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,aAAa,CAAC,CAAC;YAC/I,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5G,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAQ,CAAC;YAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;YAC7B,IAAI,CAAC,UAAU,GAAG;gBAChB,eAAe,EAAE,OAAO,CAAC,CAAC,iBAAiB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI;gBACvF,UAAU,EAAE,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAA2C,CAAC,CAAC,CAAC,IAAI;gBAC3G,YAAY,EAAE,CAAC,CAAC,cAAc,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,cAAc,CAAS,CAAC,CAAC,CAAC,EAAE;gBACnH,YAAY,EAAE,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;aAC/E,CAAC;YACF,MAAM,MAAM,GAAI,SAA0D,CAAC,kBAAkB,CAAC;YAC9F,IAAI,OAAO,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,KAAK,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YACtI,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;QAC3E,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;gBAChC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,MAA2C;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,oBAAoB,EAAE,GAAG,MAAM,sCAAsC,CAAC,CAAC;QACrI,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,eAAe,EAAE,kBAAkB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzG,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC;IAEO,OAAO,CAAC,MAAc,EAAE,MAA2C,EAAE,SAAiB;QAC5F,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,GAAG,GAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7F,OAAO,IAAI,OAAO,CAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,yEAAyE;gBACzE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,WAAW;oBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAwB,CAAC,CAAC;gBAC9G,MAAM,CAAC,IAAI,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,MAAM,kBAAkB,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,yCAAyC,CAAC,CAAC,CAAC;YAC7I,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACpC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACvB,2FAA2F;gBAC3F,MAAM,CAAC,IAAI,YAAY,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,kBAAkB,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAChJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,GAAQ;QACzB,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAgC,CAAC;QACpD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAuB,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAChI,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAgC,CAAC,CAAC;IACrE,CAAC;IAEO,QAAQ,CAAC,GAAQ;QACvB,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAgC,CAAC;QACpD,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,QAAQ,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,IAAI,MAAM,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvB,MAAM,EAAE,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;YAClE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACrJ,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAsC,CAAC;gBACvI,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACrC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,GAAG,eAAe,CAAC;gBAC/C,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC;YACtL,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YAC7C,sFAAsF;YACtF,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACpE,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,oCAAoC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9I,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACrG,CAAC;IAED;;;;;OAKG;IACK,UAAU,CAAC,IAAY;QAC7B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;aACvB,IAAI,GAAG,IAAI,eAAe;YAAE,GAAG,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,GAAG,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAED;;;OAGG;IACK,WAAW;QACjB,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE;YAAE,OAAO;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzH,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,CAAsE,EAAE,OAAa;QAClG,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClI,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,eAAe,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACd,MAAM,KAAK,GAAuB,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACvJ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;QAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,eAAe,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,aAAa,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAwB,CAAC;YACpD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QACjC,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAAE,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,MAAc;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC1F,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,IAAI,GAAG,GAAS,EAAE;oBACtB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC1B,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC;gBACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;gBAC9D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACpH,CAAC;IAEO,IAAI,CAAC,OAAe;QAC1B,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,GAAG,EAAE,EAAE,CAAC,CAAC;QACjF,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAEO,MAAM,CAAC,MAAc;QAC3B,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC/D,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACnC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC;YAC3E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAAE,CAAC,EAAE,CAAC;IACzC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,GAAG,wBAAwB;QACrC,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;;YAC5C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;YAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,SAAuF,CAAC;YAC9G,MAAM,OAAO,GAAG,CAAC,CAAmB,EAAE,EAAU,EAAoB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/J,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;gBAAE,MAAM,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,EAAE,YAAY,CAAC,CAAC;YAC7H,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;YACnC,8FAA8F;YAC9F,+BAA+B;YAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,sEAAsE;IACtE,QAAQ;QACN,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1B,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO;QACzB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;CACF;AAED,wFAAwF;AACxF,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,IAAuB;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,OAAO,eAAe;IAMG;IALrB,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IACrD,8GAA8G;IACtG,eAAe,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC3D,OAAO,GAA0B,IAAI,CAAC;IAE9C,YAA6B,MAAoB,IAAI,CAAC,GAAG;QAA5B,QAAG,GAAH,GAAG,CAAyB;IAAG,CAAC;IAE7D,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,GAAG,CAAC,CAAiB;QACnB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,YAAY;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,mBAAmB,EAAE,WAAW,YAAY,mDAAmD,CAAC,CAAC;QACrK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,4FAA4F;IAC5F,OAAO;QACL,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3C,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,MAAe;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzB,kEAAkE;QAClE,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,GAAG,OAAO;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7I,CAAC;IAED,WAAW;QACT,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;YAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5F,CAAC;CACF"}

package/dist/projects/state-home.d.ts

@@ -36,7 +36,8 @@ export declare function defaultStateHome(home: string): string;
  */
 export declare function setCrewStateHome(stateHome: string | undefined): void;
 /** The state home every durable store resolves under: the bootstrap-configured `--db` parent when
- *  a daemon is running, the historical `~/.wicked-crew` default otherwise. */
+ *  a daemon is running, the historical `~/.wicked-crew` default otherwise. Under a test runner it
+ *  refuses the real user's `~/.wicked-crew` (crew#986, {@link refuseLiveHomeUnderTest}). */
 export declare function crewStateHome(): string;
 /**
  * Is the daemon on the historical default state home (`~/.wicked-crew`, or none configured)? Compared

package/dist/projects/state-home.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state-home.d.ts","sourceRoot":"","sources":["../../src/projects/state-home.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAYH,uFAAuF;AACvF,eAAO,MAAM,0BAA0B,iBAAiB,CAAC;AAEzD;;gFAEgF;AAChF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEpE;AAED;8EAC8E;AAC9E,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C;AAmBD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD"}
+{"version":3,"file":"state-home.d.ts","sourceRoot":"","sources":["../../src/projects/state-home.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAYH,uFAAuF;AACvF,eAAO,MAAM,0BAA0B,iBAAiB,CAAC;AAEzD;;gFAEgF;AAChF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEpE;AAED;;4FAE4F;AAC5F,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAgCD;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C;AAmBD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/dist/projects/state-home.js

@@ -23,7 +23,7 @@
  * state home at their own resolution sites: they are the more specific instruction, and the one
  * the tests and proof scripts already use.
  */
-import { homedir } from 'node:os';
+import { homedir, userInfo } from 'node:os';
 import { existsSync, realpathSync } from 'node:fs';
 import { basename, dirname, join, resolve } from 'node:path';
 /**
@@ -48,9 +48,39 @@ export function setCrewStateHome(stateHome) {
     configuredStateHome = stateHome;
 }
 /** The state home every durable store resolves under: the bootstrap-configured `--db` parent when
- *  a daemon is running, the historical `~/.wicked-crew` default otherwise. */
+ *  a daemon is running, the historical `~/.wicked-crew` default otherwise. Under a test runner it
+ *  refuses the real user's `~/.wicked-crew` (crew#986, {@link refuseLiveHomeUnderTest}). */
 export function crewStateHome() {
-    return configuredStateHome ?? defaultStateHome(homedir());
+    return refuseLiveHomeUnderTest(configuredStateHome ?? defaultStateHome(homedir()));
+}
+/**
+ * crew#986: a test must never resolve the operator's LIVE state home. The suite's
+ * `tests/setup/hermetic-home.ts` arms a temp one, but only when vitest loads crew's
+ * `vitest.config.ts`. A run from another directory (the repo root has no vitest config), or a test
+ * that unconfigures the home and leaves it unset, fell back to the real `~/.wicked-crew`: a live
+ * daemon's decision ledger held 21 gate decisions written by crew tests that way.
+ *
+ * So under a test runner (`VITEST` / `NODE_ENV=test`, the posture `server.ts` already keys on),
+ * resolving the real user's default state home throws instead. "Real" is the account's home from
+ * `os.userInfo()`, which ignores `HOME`, so a test that points `HOME` at a temp dir may still
+ * exercise the unconfigured default. Compared by identity, like {@link isDefaultStateHome}.
+ */
+function refuseLiveHomeUnderTest(stateHome) {
+    if (process.env['VITEST'] === undefined && process.env['NODE_ENV'] !== 'test')
+        return stateHome;
+    let realHome;
+    try {
+        realHome = userInfo().homedir;
+    }
+    catch {
+        realHome = homedir();
+    }
+    if (realSpelling(stateHome) === realSpelling(defaultStateHome(realHome))) {
+        throw new Error(`crew#986: refusing the live state home (${stateHome}) under a test runner. Run vitest from ` +
+            `packages/crew (its vitest.config.ts arms a temp state home), or give the test its own ` +
+            `state home (setCrewStateHome) or a temp HOME.`);
+    }
+    return stateHome;
 }
 /**
  * Is the daemon on the historical default state home (`~/.wicked-crew`, or none configured)? Compared
@@ -58,7 +88,7 @@ export function crewStateHome() {
  * default (codex on #760). Each side is the realpath of its deepest existing ancestor plus the rest.
  */
 export function isDefaultStateHome() {
-    return configuredStateHome === undefined || realSpelling(configuredStateHome) === realSpelling(defaultStateHome(homedir()));
+    return realSpelling(crewStateHome()) === realSpelling(defaultStateHome(homedir()));
 }
 function realSpelling(p) {
     const abs = resolve(p);

package/dist/projects/state-home.js.map

@@ -1 +1 @@
-{"version":3,"file":"state-home.js","sourceRoot":"","sources":["../../src/projects/state-home.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7D;;;GAGG;AACH,IAAI,mBAAuC,CAAC;AAE5C,uFAAuF;AACvF,MAAM,CAAC,MAAM,0BAA0B,GAAG,cAAc,CAAC;AAEzD;;gFAEgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAA6B;IAC5D,mBAAmB,GAAG,SAAS,CAAC;AAClC,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,aAAa;IAC3B,OAAO,mBAAmB,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,mBAAmB,KAAK,SAAS,IAAI,YAAY,CAAC,mBAAmB,CAAC,KAAK,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAC9H,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,GAAG,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/B,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAClC,CAAC"}
+{"version":3,"file":"state-home.js","sourceRoot":"","sources":["../../src/projects/state-home.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7D;;;GAGG;AACH,IAAI,mBAAuC,CAAC;AAE5C,uFAAuF;AACvF,MAAM,CAAC,MAAM,0BAA0B,GAAG,cAAc,CAAC;AAEzD;;gFAEgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAA6B;IAC5D,mBAAmB,GAAG,SAAS,CAAC;AAClC,CAAC;AAED;;4FAE4F;AAC5F,MAAM,UAAU,aAAa;IAC3B,OAAO,uBAAuB,CAAC,mBAAmB,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,uBAAuB,CAAC,SAAiB;IAChD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAChG,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,QAAQ,EAAE,CAAC,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,OAAO,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,YAAY,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,2CAA2C,SAAS,yCAAyC;YAC3F,wFAAwF;YACxF,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,YAAY,CAAC,aAAa,EAAE,CAAC,KAAK,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,GAAG,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/B,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAClC,CAAC"}